JP6890786B2 - Authentication device, authentication method, and authentication program - Google Patents

Description

The present invention relates to an authentication technique for a computer or a smartphone, and more particularly to an authentication technique that makes it possible to omit inputting an ID or password.

In recent years, biometric authentication technologies such as face authentication, fingerprint authentication, and iris authentication have become widespread in authentication technologies such as computers. By using these biometric authentication technologies, the user does not need to memorize the ID and password, and authentication can be realized with excellent accuracy, which has an advantage of high convenience.

On the other hand, recently, it is being considered to make computer programming education compulsory in elementary schools.
Here, when starting to use an OS (operating system) such as Windows (registered trademark) on a computer, an ID and password must be entered, but when using a computer in class, an ID is given to a child in the lower grades. And passwords are difficult to enter with the keyboard. Further, if the input operation takes a long time, there is a problem that a limited class time is wasted.
Therefore, if the computer used by the child can be used by biometric authentication such as face authentication, it is considered that such a problem of wasting time can be solved.

Japanese Unexamined Patent Publication No. 2001-282738

However, since the changes in the living body of a growing child are relatively large, there is a high possibility that the biometric information of another person will be mistakenly selected when biometric authentication is performed from the biometric information of many people. is assumed.
Therefore, the present inventor has made diligent research to store a series of picture combinations in advance for the user's ID and password in the computer so that the picture (icon) combinations can be selected on the computer screen. This made it possible to identify without entering an ID and password. Further, after the user is specified in this way, biometric authentication of the user is performed, and when the authentication is successful, it is possible to log on to the OS using the specified ID and password.

In this way, by making it possible to select a combination of a plurality of pictures on the computer screen, the user's ID and password can be specified, and by further combining biometric authentication, another person can accidentally combine a plurality of pictures that are the same. It is possible to prevent the user from being able to log on when is selected.
In addition, by performing biometric authentication after specifying the user's ID and password in this way, it is not necessary to select one person's biometric information from a large amount of biometric information, so it mistakenly matches the biometric information of another person. It is possible to reduce the possibility of distinguishing from another person, greatly improve the processing speed of biometric authentication, and suppress the use of computer resources.
Furthermore, by using such authentication technology at school, children will be able to enjoy using computers, and choosing a certain type of picture will be useful as an education for pattern recognition. Be done.

Here, Patent Document 1 describes that a first GUI for selecting one image for each of a plurality of groups is displayed. Further, it is described that the first GUI is displayed on the display screen when the user name is selected. That is, in Patent Document 1, user authentication is performed by making it possible to select an image after selecting a user name. However, this does not use biometric authentication, and cannot reduce the risk of authentication error due to biometric authentication.

The present invention is based on the above circumstances, and even elementary school children can easily log on to the OS of a computer while ensuring safety, and can improve the processing speed of biometric authentication. An object of the present invention is to provide an authentication device, an authentication method, and an authentication program capable of suppressing the use of computer resources and reducing the risk of authentication errors due to biometric authentication.

In order to achieve the above object, in the authentication device of the present invention, a plurality of types belonging to the category are associated with each of the plurality of categories, and a plurality of images are associated and stored for each of the categories. A storage unit, a user information storage unit that stores a combination information of a type selected from a plurality of categories, a user identification information, a user's biometric authentication information, and a selected area information in association with each other, and the image information storage unit. An authentication screen display unit that acquires one image corresponding to each of a plurality of types belonging to the category from the unit and displays the plurality of types of images for each category, and an authentication screen display. On the authentication screen displayed by the unit, the user information is based on the selection information input unit for inputting the selected plurality of types of combination information and the plurality of types of combination information input by the selection information input unit. The user identification processing unit that acquires the corresponding user identification information from the storage unit, the biometric information input unit that inputs the biometric authentication information of the user, the input biometric authentication information, and the user identification information in the user information storage unit. A plurality of biometric authentication units that compare with the corresponding biometric authentication information and determine that the authentication is successful when they match, and that the authentication screen display unit corresponds to the selected area information on the authentication screen, respectively. By displaying the selected area and movably displaying each of the plurality of types of images in any of the selected areas, the selection information input unit moves to the selected area on the authentication screen. The combination information of the plurality of selected types and the selection area is input, and the user identification processing unit receives the corresponding user identification information from the user information storage unit based on the combination information of the plurality of types and the selection area. Is configured to acquire.

Further, the authentication method of the present invention includes an image information storage unit, a user information storage unit, an authentication screen display unit, a selection information input unit, a user identification processing unit, a biometric information input unit, and a biometric authentication unit. This is an authentication method using an information processing device provided with the above, wherein the image information storage unit associates a plurality of types belonging to the category with each of a plurality of categories, and displays a plurality of images for each of the types. The user information storage unit stores the combination information of the types selected from the plurality of categories in association with each other, the user identification information, the biometric authentication information of the user, and the selected area information in association with each other. The authentication screen display unit acquires one image corresponding to each of a plurality of types belonging to the category for each category from the image information storage unit, and displays the plurality of types of images for each category. Then, the selection information input unit inputs a plurality of types of selected combination information on the authentication screen displayed by the authentication screen display unit, and the user identification processing unit is input by the selection information input unit. Based on the plurality of types of combination information, the corresponding user identification information is acquired from the user information storage unit, the biometric information input unit inputs the user's biometric information, and the biometric authentication unit inputs the user's biometric information. The biometric authentication information is compared with the biometric authentication information corresponding to the user identification information in the user information storage unit, and if they match, it is determined that the authentication is successful, and the authentication screen display unit displays the authentication screen on the authentication screen. , A plurality of selection areas corresponding to the selection area information are displayed, and each of the plurality of types of images is movably displayed in any of the selection areas, and the selection information input unit performs the authentication. On the screen, the combination information of the plurality of types selected by moving to the selection area and the selection area is input, and the user identification processing unit is based on the combination information of the plurality of types and the selection area. This is a method of acquiring the corresponding user identification information from the user information storage unit.

Further, the authentication program of the present invention associates a computer with a plurality of types belonging to the category for each of a plurality of categories, and associates a plurality of images for each of the types to store image information. The image is stored in the user information storage unit by associating the combination information of the types selected from the plurality of categories, the user identification information, the biometric authentication information of the user, and the selected area information in the unit. One image corresponding to each of a plurality of types belonging to the category is acquired from the information storage unit for each of the categories, and the plurality of types of images are displayed as an authentication screen for each of the categories, and the displayed image is displayed. On the authentication screen, a plurality of selected types of combination information are input, and based on the input of the plurality of types of combination information, the corresponding user identification information is acquired from the user information storage unit to authenticate the user's biometrics. The information is input, the input bioauthentication information is compared with the bioauthentication information corresponding to the user identification information in the user information storage unit, and if they match, it is determined that the authentication is successful . A plurality of selection areas corresponding to the selection area information are displayed, and each of the plurality of types of images is movably displayed in any of the selection areas, and the selection is displayed on the displayed authentication screen. By moving to the area, the combination information of the plurality of types selected and the selection area is input, and based on the input combination information of the plurality of types and the selection area, the corresponding user from the user information storage unit. It is configured to acquire identification information.

According to the present invention, even elementary school children can easily and securely log on to the OS of a computer, improve the processing speed of biometric authentication, suppress the use of resources, and perform biometric authentication. It is possible to reduce the risk of authentication error due to the above.

It is explanatory drawing which shows the screen transition and the processing procedure of the authentication apparatus of 1st Embodiment of this invention. It is a figure which shows the flow of information in the block diagram which shows the structure of the authentication apparatus of 1st Embodiment of this invention. It is explanatory drawing which shows the image category table, the type table, and the image table in the authentication apparatus of 1st Embodiment of this invention. It is explanatory drawing which shows the user table in the authentication apparatus of 1st Embodiment of this invention. It is a flowchart which shows the processing procedure of the authentication apparatus of 1st Embodiment of this invention. It is explanatory drawing which shows the user table in the authentication apparatus of the 2nd Embodiment of this invention. It is explanatory drawing which shows the screen of the authentication apparatus of the 2nd Embodiment of this invention.

Hereinafter, preferred embodiments of the authentication device, authentication method, and authentication program of the present invention will be described with reference to the drawings.

[First Embodiment]
First, the first embodiment of the present invention will be described with reference to FIGS. 1 to 5. FIG. 1 is an explanatory diagram showing screen transitions and processing procedures of the authentication device of the present embodiment. FIG. 2 is a block diagram showing the configuration of the authentication device of the present embodiment, showing the flow of information. 3 and 4 are explanatory views showing an image category table, a type table, an image table, and a user table in the authentication device of the present embodiment. FIG. 5 is a flowchart showing a processing procedure of the authentication device of the present embodiment.

First, the outline of the authentication device and the authentication method of the present embodiment will be described with reference to FIG.
FIG. 1 schematically shows three screens displayed on a computer such as a tablet computer in succession. In this computer, a series of picture combinations are stored in advance for the ID and password of a user such as a child. Then, when the user selects the combination of the pictures on the screen, the computer can specify the ID and password of the user.
Therefore, the ID and password can be specified by simply telling each user the combination of pictures assigned in advance and selecting the corresponding picture on the screen, so that the user can easily log on to the OS of the computer. Can be done.

Specifically, for example, three categories of animals, vehicles, and fruits are set, and pictures such as "dog", "horse", and "elephant" are set for animals, and "airplane" and "bus" are set for vehicles. , "Bicycle", and for fruits, "apple", "banana", "melon", etc. are prepared, and these pictures are displayed on the computer screen for each category. In FIG. 1, as a first image selection screen, an animal selection screen for selecting an animal is displayed on a computer.

When the combination of pictures assigned to a user is, for example, "dog", "airplane", or "apple", when "dog" is selected on the animal selection screen by the operation of the user, then, The vehicle selection screen is displayed on the computer screen. When "airplane" is selected on the vehicle selection screen by the user's operation, the fruit selection screen is displayed next. When "apple" is selected on the fruit selection screen by the user's operation, the computer identifies the corresponding user by specifying the ID and password based on the combination information of these pictures.
Then, by performing user face authentication or the like, for example, the face authentication information of the specified user is compared with the face authentication information input to the computer, and if they match, the authentication is successful and the computer It is possible to perform logon processing to the OS.

Therefore, the user can log on to the OS of the computer simply by selecting the pictures from the screen according to the combination of the pictures assigned to him / her.
In addition, by performing biometric authentication after identifying the user in this way, the processing speed of biometric authentication can be improved, the use of computer resources can be suppressed, and the risk of authentication errors due to biometric authentication can be reduced. It becomes.

Next, a block diagram of the authentication device 1 of the present embodiment will be described with reference to FIG. The authentication device 1 of the present embodiment includes an image information storage unit 11, an authentication screen display unit 12, a user information storage unit 13, a selection information input unit 14, a user identification processing unit 15, a biometric information input unit 16, and a biometric authentication unit 17. It has.

The image information storage unit 11 is a storage unit that stores an image to be displayed on a computer screen, and stores various categories of images, a plurality of types belonging to the category, and images for each type. That is, the image information storage unit 11 stores a plurality of types belonging to the category in association with each of the plurality of categories, and associates and stores a plurality of images for each type.

Specifically, as shown in FIG. 3, the image information storage unit 11 can have an image category table.
In the figure, the image category table stores three categories of animals, vehicles, and fruits, but the present invention is not limited to this, and other categories may be stored. It is also possible to store two or four or more categories.

Further, the image information storage unit 11 can have a type table. In FIG. 3, as an example, 10 types included in the animal of image category 1 are stored, but the present invention is not limited to this, and other types may be stored. It is also possible to store 2 to 9 or 11 or more types.
Further, the image information storage unit 11 can have an image table. In FIG. 3, as an example, five images corresponding to the type 1 “dog” are stored, but the present invention is not limited to this, and 2 to 4 or 6 or more images can be stored. ..

In this way, by storing a plurality of images corresponding to each type in the image table, any one of these plurality of images can be selected each time the authentication screen is displayed, or every time the authentication screen is displayed arbitrarily or a predetermined number of times. It is possible to select and display it.
Specifically, for example, if a combination of "dog", "airplane", and "apple" is assigned to a certain user, the picture of "dog" is selected from among several pictures of animals displayed. However, the "dog" picture does not always display the same picture, but it is possible to display different "dog" pictures.

For example, it is possible to change the breed of dog such as a bulldog or a shiba inu, or to display a picture of a dog facing right or left, or a picture of a dog seen from directly above. In addition, it is possible to display various images of the same type of "dog", such as changing the length and color of the dog's hair.
Therefore, the user who uses the authentication device 1 of the present embodiment can associate the keyword "dog" with various images of "dog" every time when the computer OS starts to be used. Pattern recognition training can be done every time you start using the computer.

The authentication screen display unit 12 acquires one image corresponding to each of the plurality of types belonging to the category from the image information storage unit 11 for each category, and uses the plurality of types of images for each category as the authentication screen. indicate. That is, the image selection screen for that category is displayed.
Specifically, as shown in FIG. 1, for example, the authentication screen display unit 12 can arrange and display 10 types of images for each category in a circular shape, but the authentication screen display unit 12 displays the images. The number of images to be displayed, the display position, the overall arrangement form, and the like are not particularly limited and can be appropriately set.

It is also preferable that the authentication screen display unit 12 changes the position of the image type to be displayed for each category every time, that is, every time the authentication screen is displayed, or every time the authentication screen is displayed arbitrarily or a predetermined number of times.
In this way, it is possible to prevent the user from logging on by always selecting a predetermined place without looking at the picture. In addition, this makes it possible to perform the above-mentioned pattern recognition training even more effectively.

Further, the authentication screen display unit 12 displays the next image selection screen when an image is selected by the user's operation. When the display of the image selection screens of all categories and the selection of images are completed, the selection information input unit 13 then sends the combination information of the input image types to the user identification processing unit 15.

The selection information input unit 13 inputs and selects the type of information corresponding to the image selected by the user using an input device such as a keyboard or a mouse on the authentication screen displayed by the authentication screen display unit 12. Enter the combination information of multiple types.

The user information storage unit 14 stores the combination information of the type selected from each of the plurality of categories, the user identification information, and the biometric authentication information of the user in association with each other.
Specifically, for example, as shown in FIG. 4, the user 1 is associated with "dog", "airplane", and "apple" as combination information, and the ID "AAA" and password correspond as user identification information. It is attached, and biometric authentication information is associated and stored.

The user identification processing unit 15 acquires the corresponding user identification information from the user information storage unit 14 based on the plurality of types of combination information input by the selection information input unit 13. Then, this user identification information can be output to the biometric authentication unit 17.

The biometric information input unit 16 inputs biometric information such as a user's face authentication information. For example, a user's face image is acquired by using a Web camera or a CCD camera provided or connected to the authentication device 1, and the biometric information input unit 16 inputs face authentication information based on the face image. It can be output to the biometric authentication unit 17.

The biometric authentication unit 17 compares the biometric authentication information input by the biometric information input unit 16 with the biometric authentication information corresponding to the user identification information input from the user identification processing unit 15 in the user information storage unit 14. If they match, it is judged that the authentication is successful.
The biometric authentication unit 17 can cause the biometric information input unit 16 to input the biometric authentication information of the user by using, for example, the input of the user identification information from the user identification processing unit 15 as a trigger, and use this biometric authentication information for authentication.

Next, the processing procedure (authentication method) of the authentication device of the present embodiment will be described with reference to FIG.
First, the authentication device 1 acquires one image corresponding to each of a plurality of types belonging to one image category from the image information storage unit 11 and displays an image selection screen representing the plurality of types of images in the category. (Step 10).
Next, the authentication device 1 inputs the selected image type information (selected type information) by the user's operation (step 11).
Steps 10 and 11 are repeated until the next image category disappears (step 12), and when the next image category disappears, a plurality of types of combination information are acquired based on the obtained plurality of selection type information.

Next, the authentication device 1 acquires user identification information (ID and password) from the user information storage unit 14 based on a plurality of types of combination information, and identifies the user (step 13). When the user is specified (Yes in step 14), the biometric information input unit 16 inputs the biometric authentication information.
Then, the authentication device 1 executes the biometric authentication process by comparing the input biometric authentication information with the biometric authentication information corresponding to the user identification information in the user information storage unit 14 (step 15), and matches. If this is the case, it is determined that the authentication is successful (step 16). As a result, the user identification information of the user can be used to perform the logon process to the OS of the authentication device 1.

As described above, according to the present embodiment, by selecting a combination of a plurality of pictures on the screen of the computer, the user's ID and password are specified, and by further performing biometric authentication in combination, another person happens to be. It is possible to prevent the user from being able to log on when the same combination of a plurality of pictures is selected.
In addition, by performing biometric authentication after identifying the user, the processing speed of biometric authentication can be greatly improved, the use of computer resources can be suppressed, and the risk of authentication errors due to biometric authentication can be reduced. ing.
Furthermore, by using this embodiment at school, children can enjoy using the computer, and it is also possible to obtain an educational effect of pattern recognition.

[Second Embodiment]
Next, the second embodiment of the present invention will be described with reference to FIGS. 6 and 7. FIG. 6 is an explanatory diagram showing a user table in the authentication device of the present embodiment, and FIG. 7 is an explanatory diagram showing a screen of the authentication device of the present embodiment.
The present embodiment differs from the first embodiment in that a plurality of users can use the same combination as a plurality of types of combinations. Other points can be the same as those in the first embodiment.

That is, in the present embodiment, the user information storage unit 14 stores the selected area information, the user identification information, and the biometric authentication information of the user in association with each other together with the combination information of the types selected from the plurality of categories. ..
Specifically, for example, as shown in FIG. 6, the user 1 is associated with "dog", "airplane", and "apple" as combination information, and is associated with selection area information, and is also associated with the user. The ID "AAA" is associated with the password as the identification information, and the biometric authentication information is associated and stored.
That is, in the example of FIG. 6, the combination information of the types of users 4 and 5 is the same, but the selection area information is different. Therefore, even if a plurality of users use the same combination as a combination of types, it is possible to identify these users by making the selection area different.

In the present embodiment, the authentication screen display unit 12 displays a selection area on the authentication screen (image selection screen). As shown in FIG. 7, the selected area can be, for example, an area such as ☆, ○, □, or Δ at the four corners of the authentication screen. Further, for example, it may be a box, a building, or the like, and its shape, image, number, and arrangement are not particularly limited.
Further, the authentication screen display unit 12 displays each type of image on the image selection screen so as to be movable in the selection area. When a tablet computer is used as the authentication device 1, it can be realized by moving the selected picture with a finger, holding down the picture, and releasing the picture at a place (selected area) to be moved.

On the image selection screen, the user selects an image of the type assigned to the user and moves the image to the selection area assigned to the user.
At this time, the selection information input unit 13 inputs the information of the selection area to which the image is moved together with the information of the type of the selected image. That is, the selection information input unit 13 inputs the combination information of the selected type of information and the selection area.

The user identification processing unit 15 can identify a user by acquiring user identification information from the user information storage unit 14 based on the input type information and the combination information of the selected area.
Further, the biometric authentication unit 17 determines the success or failure of the authentication by comparing the biometric authentication information stored corresponding to the user identification information in the user information storage unit 14 with the input biometric authentication information. Can be done.

As described above, according to the present embodiment, the same type of combination can be assigned to a plurality of users by using the information of the selection area for moving the type of image together with the plurality of types of combination information. It has become.

The authentication device of the above embodiment can be realized by using a computer controlled by the authentication program of the present invention. The CPU of the computer sends a command to each component of the computer based on the authentication program, and predetermined processing required for the operation of the authentication device, for example, authentication screen display processing, selection information input processing, user identification processing, biometric authentication. Have them perform processing, etc. As described above, each process and operation in the authentication device of the present invention can be realized by a concrete means in which the program and the computer cooperate.

The program is stored in a recording medium such as ROM or RAM in advance, and the program is read by the computer from the recording medium mounted on the computer and executed. However, the program can also be read by the computer via a communication line, for example.
Further, the recording medium for storing the program can be configured by, for example, a semiconductor memory, a magnetic disk, an optical disk, or any other recording means that can be read by any computer.

It goes without saying that the present invention is not limited to the above embodiments, and various modifications can be made within the scope of the present invention.
For example, in the above embodiment, the number of categories is 3, but it may be 4 or more, and the number of types is 10, but these can be changed as appropriate, such as increasing or decreasing.

The present invention can be suitably used in order to eliminate the time required for inputting an ID and password for logging on to the OS of a computer when an infant, a child, an elderly person, or the like uses a computer. It is possible.

1 Authentication device 11 Image information storage unit 12 Authentication screen display unit 13 Selection information input unit 14 User information storage unit 15 User identification processing unit 16 Biometric information input unit 17 Biometric authentication unit

Claims (4)

An image information storage unit in which a plurality of types belonging to the category are associated with each of the plurality of categories, and a plurality of images are associated and stored for each of the types.
A user information storage unit that stores combination information of a type selected from a plurality of categories, user identification information, biometric authentication information of a user, and selected area information in association with each other.
An authentication screen display unit that acquires one image corresponding to each of a plurality of types belonging to the category from the image information storage unit for each category and displays the plurality of types of images for each category.
In the authentication screen displayed by the authentication screen display unit, a selection information input unit for inputting a plurality of selected types of combination information, and a selection information input unit.
A user identification processing unit that acquires corresponding user identification information from the user information storage unit based on the plurality of types of combination information input by the selection information input unit, and a user identification processing unit.
A biometric information input unit for inputting the user's biometric authentication information,
It is provided with a biometric authentication unit that compares the input biometric authentication information with the biometric authentication information corresponding to the user identification information in the user information storage unit and determines that the authentication is successful if they match .
The authentication screen display unit displays a plurality of selection areas corresponding to the selection area information on the authentication screen, and displays each of the plurality of types of images so as to be movable to any one of the selection areas. And
On the authentication screen, the selection information input unit inputs combination information of a plurality of types selected by moving to the selection area and the selection area.
An authentication device characterized in that the user identification processing unit acquires corresponding user identification information from the user information storage unit based on combination information of the plurality of types and the selection area. The authentication screen display unit changes the display position of the plurality of types of images displayed on the authentication screen each time the authentication screen is displayed, or every time the authentication screen is displayed arbitrarily or a predetermined number of times. The authentication device according to claim 1. An information processing device including an image information storage unit, a user information storage unit, an authentication screen display unit, a selection information input unit, a user identification processing unit, a biometric information input unit, and a biometric authentication unit was used. It ’s an authentication method.
The image information storage unit associates a plurality of types belonging to the category for each of the plurality of categories, and stores a plurality of images for each of the categories in association with each other.
The user information storage unit stores the combination information of the type selected from each of the plurality of categories, the user identification information, the biometric authentication information of the user, and the selected area information in association with each other.
The authentication screen display unit acquires one image corresponding to each of a plurality of types belonging to the category for each category from the image information storage unit, and displays the plurality of types of images for each category. And
The selection information input unit inputs a plurality of types of selected combination information on the authentication screen displayed by the authentication screen display unit.
The user identification processing unit acquires the corresponding user identification information from the user information storage unit based on the plurality of types of combination information input by the selection information input unit.
The biometric information input unit inputs the user's biometric authentication information,
The biometric authentication unit compares the input biometric authentication information with the biometric authentication information corresponding to the user identification information in the user information storage unit, and if they match, it is determined that the authentication is successful.
The authentication screen display unit displays a plurality of selection areas corresponding to the selection area information on the authentication screen, and displays each of the plurality of types of images so as to be movable to any one of the selection areas. And
On the authentication screen, the selection information input unit inputs combination information of a plurality of types selected by moving to the selection area and the selection area.
An authentication method characterized in that the user identification processing unit acquires corresponding user identification information from the user information storage unit based on combination information of the plurality of types and the selection area. On the computer
A plurality of types belonging to the category are associated with each of the plurality of categories, and a plurality of images are associated with each of the types and stored in the image information storage unit.
The combination information of the type selected from each of a plurality of categories, the user identification information, the biometric authentication information of the user, and the selected area information are associated with each other and stored in the user information storage unit.
One image corresponding to each of a plurality of types belonging to the category is acquired from the image information storage unit for each category, and the plurality of types of images are displayed as an authentication screen for each category.
On the displayed authentication screen, input a plurality of selected types of combination information, and then
Based on the input combination information of the plurality of types, the corresponding user identification information is acquired from the user information storage unit, and the corresponding user identification information is acquired.
Enter the user's biometric information
The input biometric authentication information is compared with the biometric authentication information corresponding to the user identification information in the user information storage unit, and if they match, it is determined that the authentication is successful .
On the authentication screen, a plurality of selection areas corresponding to the selection area information are displayed, and each of the plurality of types of images is movably displayed in any of the selection areas.
On the displayed authentication screen, the combination information of the plurality of types selected by moving to the selection area and the selection area is input.
An authentication program for executing acquisition of corresponding user identification information from the user information storage unit based on the input combination information of the plurality of types and the selection area.

Images