JP2000339084A - Password confirmation method and device - Google Patents

Abstract

(57) [Summary] [Problem] If a user stolen or lost a cash card or the like and confirmed that the card was handed over to a malicious third party, the malicious third party would own the card. Person (user)
Can be collected to predict the password as described above. Furthermore, if the four-digit number was previously known, it could no longer be protected from fraudulent goods. SOLUTION: A plurality of mesh-shaped personal identification number input frames are provided in the vertical and horizontal directions, a degree of freedom of a plurality of input patterns is given in the input frame, and the number / character itself of the personal identification number input by the user and the input are provided. Since the position (coordinates) and the input order are the requirements for determining the password, a password confirmation method with an enhanced password strength can be realized without increasing the number of digits of the password to be remembered by the user. .

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for confirming a personal identification number, and more particularly to a method for reducing the probability that another user can decode a personal identification number without increasing the number of digits of the personal identification number that the user must remember.

[0002]

2. Description of the Related Art In recent years, the automation, unmanned operation, or networking of banking transactions and the like has been advanced, and the opportunity for a user to interface with a machine has increased. For example, AT
When a depositor (user) withdraws cash using M (automatic cash withdrawal / depositing device), the identity of the depositor is confirmed by a password. Generally, while using a card such as a cash card, a user determines in advance a four-digit number corresponding to the user information recorded on the card, and a database provided on the service provider side. And confirm that they are who they say they are by entering their numbers. Such an authentication method of personal identification using a personal identification number has become widespread as input of a password at the time of log-in in network communication. In the future, when the age of electronic money comes, security measures using a personal identification number and a password will further spread. It is considered something.

FIG. 7 is a schematic diagram showing a configuration example of a personal identification number input interface for realizing a conventional personal identification number confirmation method. For example, a display 1 provided on a panel surface such as an ATM and an input switch are provided. An input key 2 having buttons is arranged. The input screen displayed on the display 1 has a four-digit number input frame 3 arranged in a horizontal line. The input keys 2 include numbers 0 to 9, currency unit buttons (not shown), and cursor movement. Switch buttons as needed, such as an arrow button for use. It should be noted that an ATM provided with a touch panel type display 1
In such a device, the function of the input key 2 is generally provided in the input screen.

[0004] The interface shown in this figure functions as follows to realize a password confirmation method. That is, in inputting the password, the user uses the input keys 2 to sequentially input the registered password from the left of the four-digit number input box 3. When the personal identification number is input, the ATM or other device reads the personal identification number corresponding to the user's account number or the like (user information) from the personal identification number database, and registers the registered personal identification number, the input personal identification number, and the like. Are compared, and if they match, the user is authenticated and the process moves to the next stage.

In such a conventional password confirmation method, the user only needs to remember the four-digit number registered in advance, and often selects a number that is difficult to forget. However, serial numbers such as All 1 and 1234 are too simple, and the service provider (bank or the like) may be warned to avoid them. Therefore, in general, an unforgettable combination of numbers having some causal relationship related to the user's own body is selected. For example, it is anticipated that an item associated with a date of some anniversary, an item associated with a word match of some name, or a combination of numbers such as a telephone number will be selected.

[0006]

However, the above-described conventional password confirmation method has the following problems. That is, if a user stolen or loses a cash card or the like and the card is passed to a malicious third party, the malicious third party collects personal information of the owner (user), The password can be predicted as described above. Furthermore, if the four-digit number was previously known, it could no longer be protected from fraudulent goods.

The present invention has been made in order to solve such a problem, and increases the strength (security) of personal identification without increasing the number of digits that a user remembers as a password. In order to provide a password confirmation method, the device prepares multiple input patterns so that even if the password itself is revealed to a third party, the password will not be immediately decoded. The present invention proposes a method of confirming a personal identification number that leads to authentication only when input is performed in a pattern known only to the user, out of several input procedures.

[0008]

According to a first aspect of the present invention, there is provided a method for confirming a personal identification number according to the present invention, wherein a personal identification number consisting of a plurality of digits of characters is input by a user. In the method of confirming a password when performing a required process by determining whether or not the password matches a predetermined one, a procedure for displaying a mesh, a character of a password to be input, and a position of the mesh to which the password is input A procedure for determining whether the characters of the input personal identification number and the position of the mesh match a predetermined one, and a procedure for confirming the correct personal identification number only when the character matches. It is characterized by having.

[0009] Further, the invention according to claim 2 of the password confirmation method according to the present invention determines whether or not the password composed of a plurality of digits of characters input by the user matches a predetermined password. In the method for confirming the password when performing the required processing, a procedure for displaying the grid, a procedure for storing the characters of the password to be input, the position of the grid where the password has been input, and the input order, It is provided with a procedure for determining whether or not the characters of the input personal identification number, the positions of the cells, and the input order match a predetermined one, and a procedure for confirming the correct personal identification number only when they match. It is characterized by the following.

According to a third aspect of the present invention, there is provided a personal identification number confirmation method according to the first or second aspect, wherein the number of displayed meshes is greater than the number of digits of the personal identification number. Wherein the personal identification number is input across a blank cell.

According to a fourth aspect of the present invention, there is provided a method for confirming a personal identification number, wherein a plurality of digits, characters and the like are inputted as a personal identification number, and it is determined whether or not the identification number matches a predetermined one. In the method for confirming the personal identification number when performing the required processing, a matrix entry column in which a plurality of cells are arranged vertically and horizontally is displayed, and any one of the cells in the matrix entry column is selected as predetermined. In the procedure of inputting the corresponding password in the step, the password is sequentially input, and upon confirming the password, whether the input password and the position of the mesh on the matrix are as set in advance. Is confirmed.

According to a fifth aspect of the present invention, there is provided a method for confirming a personal identification number, in which a plurality of digits, characters and the like are inputted as a personal identification number, and it is determined whether or not the identification number matches a predetermined one. In the method for confirming the personal identification number when performing the required processing, a matrix entry column in which a plurality of cells are arranged vertically and horizontally is displayed, and any one of the cells in the matrix entry column is selected as predetermined. In the procedure of inputting the corresponding password in the step, the password is sequentially input, and upon confirming the password, the input password and the position of the mesh on the matrix and the order of the input mesh are previously determined. It is characterized in that it is confirmed whether or not it is as set.

[0013] Further, in the invention according to claim 6 of the personal identification number confirming method according to the present invention, it is determined whether or not the personal identification number consisting of a plurality of characters input by the user matches a predetermined one. In the personal identification number confirming device when performing the required processing, a display means for displaying a mesh-shaped input frame, the characters of the personal identification number to be input, the position of the cell where this was input and the input order Storage means for storing, a comparing means for comparing whether the character of the input personal identification number, the position of the cell, and the input order match a predetermined one, and a correct personal identification number only when they match. A determination means for determining that there is a feature.

According to a seventh aspect of the present invention, there is provided a personal identification number confirmation method according to the sixth aspect, wherein the input frame displayed on the display means comprises a plurality of rows and columns. It is characterized by a matrix shape.

[0015]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail based on illustrated embodiments. FIG. 1 is a schematic configuration diagram showing an embodiment of a personal identification number input interface for realizing a personal identification number confirmation method according to the present invention.
A display 1 for displaying a 2-row, 2-column mesh-shaped input frame 3 on a device such as an ATM to be used, and an input key 2 having numbers 0 to 9 and an arrow button for moving a cursor (active mesh). It is provided with.

The apparatus shown in FIG. 1 functions as follows to realize a password confirmation method. For example, assume that a two-digit password “99” has been determined for the sake of simplicity. First, when registering the password, the user inputs the password determined by the user in a 2 × 2 mesh-shaped input frame shown in the figure. In this case, a combination in which two decimal numbers are inserted one by one into four cells is ₄ C ₂ × 100 = 600.
There are 100 combinations of two digits of the 0-base number from 00 to 99, but 600 patterns are possible by considering the above-described pattern of inputting two numbers in the cells.

The method of inputting numbers will be described in detail with reference to FIG. FIG. 2 is a diagram showing two input procedures when the same password “99” is input in the same cell in a different order. (A) of FIG. 2 first shows 9 cells at the coordinates (a, c).
Is input, and then 9 is input to the grid at the coordinates (a, d). (B) of FIG. 2 first shows 9 cells in the grid of coordinates (a, d).
Is input, and then 9 is input to the grid at the coordinates (a, c). As described above, even when the two-digit number “99” having the same password is input, the order in which the cells are input is also used as the requirement for determining the password, so that the procedure (A) shown in FIG. Although (B) is the same as a result, it is considered that the passwords do not match because the order of inputting the numbers is different.
Therefore, even if the two-digit number is known, there are twelve input methods, considering the permutation, and the decoding rate can be reduced to 1/12.

FIG. 3 is a view for explaining another embodiment of the present invention. In the figure, a four-digit personal identification number "1234" is entered in an input box composed of a plurality of meshes vertically and horizontally. , The case where the personal identification number is determined based on the position.
(In this example, it is assumed that the input order of the personal identification numbers is not considered.) FIG. 3A shows a case where the input frame is a 4 × 4 mesh,
FIG. 3B is a diagram showing a case in which the user registers and inputs a personal identification number in a line direction (the direction of the right arrow), and FIG.
FIG. 9 is a diagram illustrating a case where a user inputs and registers a password by arranging passwords in a row direction (downward arrow direction). Even with the same four-digit number, there are 1820000 input methods in the former case and 4840000 input methods in the latter case, and the decoding rate can be significantly reduced. In other words, the encryption strength (security) increases as the number of rows and columns of the input frame displayed by the device such as the ATM increases.

FIG. 4 is a view for explaining still another embodiment, in which a four-digit password "1234" is identified in an input frame composed of a plurality of cells vertically and horizontally, including the input order. Is what you do. That is, this is a case where the password is determined based on the number of the input number, its position, and the input order. In FIG. 4A, the input frame is a 4 × 4 grid, and the registered password as shown on the left side of the figure is “” when read from the left for each column. Are in the order of “→→→”, and the input personal identification number “→→→” on the right side of the figure matches the number and the input position, but is determined to be mismatched because the input order is different. FIG.
In (B), the input frame is a 5 × 4 grid, and the input order is different as in (A) described above, so that it is determined that they do not match. Considering the input order in this way, even in the case of the same four-digit number, in the former case 436800000,
In the latter case, there are 1062800000 input methods, and the decoding rate can be significantly reduced.

In view of the fact that some users are elderly, the examples shown in FIGS. 3 and 4 are complicated, and even if four-digit numbers can be remembered, complicated patterns can be remembered. It will be difficult to keep.

Therefore, as shown in FIG. 5, many users may register and use them vertically, horizontally or diagonally. With this combination alone, there are 20 possible combinations, and even if the four-digit number is known to a third party, the decoding rate can be reduced. The example shown in FIG. 5 is a 4 × 4 mesh-shaped input frame 3 (matrix frame) displayed on the input screen.
And numerical buttons 0 to 9 for inputting numbers in the input frame 3 and arrow buttons for selecting meshes.

The password confirmation method shown in FIG. 1 functions as follows. That is, the user selects a four-digit number as a personal identification number and registers it in advance with the service provider. A specific example of the procedure of the number registration will be described. For example,
When a user registers a personal identification number using a terminal device such as an ATM, the cash card in which user information such as an account number is recorded and a contractor card for contract proof are inserted into the ATM. To open the password registration menu. It is assumed that the user has determined “9935” as the personal identification number in association with, for example, his / her child's birthday (March 5, 1999). The ATM screen is provided with a 4 × 4 mesh-shaped input frame 3 as shown in FIG. 5, and the user inputs “→→→” from the upper left to the lower right of the input frame 3 diagonally. Then, the personal identification number has just been registered. The input number, the position on the input frame, and the input order of the input personal identification number are registered as personal identification numbers in the personal identification number database on the service providing side. Thereafter, when the user uses the ATM to deposit and withdraw cash, the user inserts a cash card into the ATM and inputs a registered personal identification number to confirm the identity as in the conventional case. At this time, if the password input is the same as the registered password, the same number, the same position, and the same order are input, it is determined that they match. , Cash is put in and out.

As still another embodiment, it is possible to adapt to a form in which a plurality of digits are input to one cell of the input frame. This case will be described with reference to FIG.
FIG. 6 defines four-digit passwords a, b, c, and d,
It is the figure which showed the time of inputting into the input box of 2x square shape.
Here, one cell is shown as (x) and the other cell is shown as (y). That is, this is a case where one mesh of the input frame has a plurality of input hierarchies. In FIG. 6A, the passwords a and b are sequentially input to the cell x, and then c and d are input to the other cell y.
Are sequentially input to confirm the password. In FIG. 6B, after inputting the password a into the cell x, inputting b into the cell y, then inputting the password c into the cell x again, and finally d into the cell y Is input to confirm the password. FIG. 6C shows a case in which the passwords a, b, and c are sequentially input to one of the cells x, and then the password is confirmed by inputting d to the other cell y. . As described above, even when the number of cells displayed in the input box is smaller than the number of digits of the personal identification number, the character of the input personal identification number, the position of the cells, and the input order must be the determination requirements. Thus, the input patterns can be diversified, and the decoding rate can be reduced.

In the embodiment of the present invention described above, an example of an automatic banking transaction using an apparatus such as an ATM is shown. However, the present invention is not limited to this example. A plurality of grids are displayed vertically and horizontally on the input frame when confirming a password when conducting electronic money transactions via a network such as the Internet, and numbers / characters, input positions, and input orders are determined. May be configured. According to this, it is possible to increase the password strength of the password without increasing the number of digits or characters used for the password, thereby improving security. In addition, when inputting a password, if the individual cells of the input frame are displayed in different colors stepwise according to the input status, the user can grasp his or her own input history, so that a password input error It would be effective to avoid. For example, in one grid, 2
When there is a digit input hierarchy, when there is no input, a blank cell is used. When the cell is selected and activated, the frame is highlighted or white / black inverted blinking, and the user enters a number (one digit). When an eye is input, the color changes to light blue, and when a number (second digit) is input, the color changes to dark blue.

As described above, the password confirmation method according to the present invention can reduce the probability that the password is decrypted by a third party without increasing the number of digits of the password to be remembered.

[0026]

As described above, in the method for confirming a password according to the present invention, a plurality of mesh-shaped input frames are provided vertically and horizontally, and a degree of freedom of a plurality of input patterns is provided in the input frame, so that the user can use the same. The number / character itself of the input security code, the input position (coordinates), and the input order are the requirements for the determination of the security code, so that the number of digits of the security code that the user must remember without increasing the number. Thus, it is possible to realize a password confirmation method in which the password strength is enhanced.

[Brief description of the drawings]

FIG. 1 is a schematic functional diagram showing one embodiment of a password confirmation method according to the present invention.

FIG. 2 is a diagram showing a simplified example of a password input procedure according to the present invention.

FIG. 3 is an example of a procedure when the input sequence of the personal identification number according to the present invention is not considered.

FIG. 4 is an example of a procedure when the input sequence of a password according to the present invention is considered.

FIG. 5 is a schematic diagram showing another embodiment of the password confirmation method according to the present invention.

FIG. 6 is an example of a procedure according to the present invention when the number of meshes <the number of digits of a password number;

FIG. 7 is a schematic functional diagram showing an example of a conventional password confirmation method.

[Explanation of symbols]

 1 Display 2 Input key 3 Input frame

Claims (7)

[Claims] In a method of confirming a password when performing a required process by determining whether or not a password consisting of a plurality of digits input by a user matches a predetermined one, the method comprises the steps of: A procedure for displaying, a procedure for storing the character of the input personal identification number and the position of the mesh to which the password is input, and a step for determining whether the character of the input personal identification number and the position of the mesh match a predetermined one. A method for determining whether a password is correct and a procedure for confirming a correct password only when the passwords match. 2. A method for confirming whether a password consisting of characters of a plurality of digits input by a user matches a predetermined one and performing a required process. The procedure of displaying, the procedure of storing the characters of the input personal identification number, the position of the cell into which the password was input, and the input order, and the steps of storing the characters of the input personal identification number, the position of the cell, and the input order A method for confirming a password, comprising: a step of determining whether or not the password matches a predetermined one; and a step of confirming a correct password only when the password matches. 3. The method according to claim 1, wherein the number of cells to be displayed is larger than the number of digits of the personal identification number, and the personal identification number is input across a blank cell. How to check your PIN. 4. A method of confirming a password when performing a required process by inputting a plurality of digits, characters, etc. as a password, determining whether or not the password matches a predetermined one, Displaying a matrix entry field in which a plurality of meshes are arranged, and sequentially inputting the passwords in a procedure of selecting any one of the cells in the matrix entry field and inputting the corresponding password as predetermined. And a password confirmation method for confirming whether or not the inputted password and the position of the mesh on the matrix are as set in advance. 5. A method for confirming a password when performing a required process by inputting a plurality of digits, characters and the like as a password and judging whether or not the password matches a predetermined one. Displaying a matrix entry field in which a plurality of meshes are arranged, and sequentially inputting the passwords in a procedure of selecting any one of the cells in the matrix entry field and inputting the corresponding password as predetermined. In addition, when confirming the personal identification number, it is confirmed whether or not the inputted personal identification number, the position of the mesh on the matrix and the order of the input mesh are as set in advance. Characteristic code confirmation method. 6. A personal identification number confirming apparatus for performing a required process by determining whether or not a personal identification number composed of a plurality of digits input by a user matches a predetermined one. Display means for displaying an input frame of the following; storage means for storing the character of the input personal identification number, the position of the cell where the password is input, and the input order; and the character of the input personal identification number and the cell A password, comprising: comparing means for comparing whether the position and the input order match a predetermined one; and determining means for determining that the password is correct only when the password matches. Confirmation device. 7. The personal identification number confirmation device according to claim 6, wherein the input frame displayed on said display means is a matrix comprising a plurality of rows and columns.