JP2009099025A - Method of issuing password, mobile terminal and password authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a highly secured technology for issuing and authenticating passwords, which is higher in secrecy in comparison with when using only a password character string, and cannot be stolen only with the password character string, even if the password character string is seen by others. <P>SOLUTION: A mobile terminal 1 requests a security server 101 to issue a password, and the security server 101 adds weight information serving as a variable index of a font drawing mode for each of character data of the password character string, and returns the password character string to the mobile terminal 1. The mobile terminal 1 reads the password character string font-rasterized and displayed by using a reading terminal 51 as image data, and transmits the password character string to the security server 101. The security server 101 pattern-matches the transmitted image data, extracts the password character string and the weight information, and authenticates the password on the basis of the password character string and the weight information. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a password issuing method that improves confidentiality and security by adding specific information to a password character string constituting a password, a portable terminal capable of acquiring and authenticating a password using the method, The present invention relates to a password authentication method that can easily perform terminal password authentication.

In Patent Document 1 (Japanese Patent Laid-Open No. 2006-154948), when a password is set in a portable terminal, a special symbol portion in a password character string is automatically converted into a number indicating time information, position information, and current environment value. In the password authentication, a password authentication device with improved security is disclosed by checking the time information, the position information, and the current environment value indicated by the replaced part at the time of password authentication.
However, according to this, password matching is limited by time, position, and current environment.

In Patent Document 2 (Japanese Patent Application Laid-Open No. 2007-26039), a password generated when a user instructs the processing terminal to execute processing is notified to the user's portable terminal, and this password is input to the same processing terminal. The following authentication system has been disclosed in which security is improved by enabling the instructed process to be executed only in the case of the above.
When a process execution instruction is input to the processing terminal that performs the instructed process, the processing terminal transmits information indicating the process input to the server. The server generates a password that is valid only for the process, and transmits the generated password to the mobile terminal of the user who has input the process execution instruction. The processing terminal transmits the input character string as a password to the server. The server transmits a result of determining whether or not the generated password matches the character string transmitted from the processing terminal to the processing terminal. When the received determination result indicates approval, the processing terminal executes the process instructed to input.
However, according to this, processing contents and processing terminals are limited.

Patent Document 3 (Japanese Patent Laid-Open No. 2006-72778) discloses the following authentication system that uses a hue difference light signal transmitted by a color display of a portable terminal and received by an image sensor of an authentication device for authentication. ing.
A communication means, a storage means, a one-time password generation means, a hue difference light signal generation means, a portable terminal comprising a color display, an authentication device comprising a communication means, an image sensor, a hue difference light signal detection means, and an authentication processing means; Consists of
The portable terminal acquires a challenge ID, which is a character string generated by the authentication processing unit on the authentication device side, via the communication unit by the one-time password generation unit, and sets the challenge ID and the authentication ID held in the storage unit to a certain level. A response ID, which is a character string obtained by calculation in the procedure, is generated, the response ID is converted into a hue difference light signal by the hue difference light signal generation means, and this signal is output to the screen from the color display.
The authentication device detects the hue difference light signal by the hue difference light signal detection means and receives the response ID from the input information of the image sensor that captures the screen of the color display of the portable terminal, and authenticates the response ID by the authentication processing means. Process according to the result.
However, according to this, the portable terminal is provided with a hue difference light signal generation means for converting the ID into a hue difference light signal, and the hue difference light signal detection means for detecting the hue difference light signal and the detected hue difference light signal. It is necessary to provide a means for extracting the response ID from the authentication device.

  By the way, in recent years, various font sets are installed in portable terminals such as cellular phones. In addition, since the resolution of the liquid crystal display has been increased, the ability to express fonts has also increased, and the thickness of character lines can be set to some extent. If you change the thickness, the gray density will change or the pixels that will be the character in the font will change, so changing the thickness will not change the meaning of the character itself, but it will be displayed in reality It is possible to change the characters little by little.

Equipped with such a font variable function, that is, when a font (for example, outline font) is drawn with pixels on the display, the font rasterizer function is used to change the thickness of the character according to the weight that is a variable index of the drawing mode. Mobile terminals have also appeared.
JP 2006-154948 A JP 2007-26039 A JP 2006-72778 A

  The present inventor has paid attention to the fact that there is already a portable terminal equipped with such a font rasterizer function, and considers using this, and numerical data utilizing the character weight characteristics in the password character string. The present invention has been found out that the embedding makes it possible to improve the security of the password and improve the security easily.

  The invention according to claim 1 relates to a password issuing method, characterized in that weight information that is a variable index of a font drawing mode is added to each character data of a password character string constituting a password.

  The invention according to claim 2 relates to a password issuing method dependent on the invention of claim 1, wherein the weight information is determined according to a specific condition.

  According to a third aspect of the present invention, there is provided a password issuing method according to the first or second aspect of the present invention, wherein font attribute information for determining a font attribute is added in addition to the weight information.

  The invention according to claim 4 relates to a method for issuing a password for a portable terminal, wherein the portable terminal issues a password issuance request to the password management server via the network, and the password management server Weight information, which is a variable index of a font drawing mode, is determined according to a specific condition, is added to a password character string, and is sent back to the portable terminal through a network.

  The invention according to claim 5 relates to a password issuing method dependent on the invention of claim 4, wherein the weight of each character is set on the portable terminal in accordance with the weight information added to the password character string, and the password character string after the weight is set Is stored in the portable terminal as the password.

  The invention according to claim 6 relates to a password issuing method dependent on the invention of claim 5, wherein the stored password character string after the weight setting is rasterized by a font rasterizer function provided in the portable terminal. It is characterized by being displayed.

  The invention according to claim 7 relates to a portable terminal, wherein a transmission means for issuing a password issuance request to a password management server via a network, and each character data of a password character string constituting the password is a weight that is a variable index of a font drawing mode. The portable terminal includes storage means for adding the information and storing the password transmitted from the password management server, and font rasterizer means for displaying the stored password character string by rasterizing the font according to the weight information. It is characterized by that.

  The invention according to claim 8 relates to a password authentication method for a mobile terminal having the configuration as in claim 7, wherein a password character string displayed by rasterizing a font in the mobile terminal is read as image data by a reading terminal, This is transmitted to the password management server via the network, and the password management server performs pattern matching on the transmitted image data, extracts the weight information together with the password character string, and authenticates the password from the password character string and the weight information. (Correctness check).

  Since the invention according to claim 1 adds weight information, which is a variable index of the font drawing mode, to each character data of the password character string constituting the password, it has higher confidentiality than the case of only the password character string. Thus, even if the password character string is seen by another person, it cannot be stolen only by the password character string, and security is improved. Since the addition of weight information does not require any special technique, the user can create a password and provide it to others. In addition, the range of access rights can be arbitrarily changed by changing the weight in the user.

  In the invention according to claim 2, since the weight information is determined according to a specific condition, it can be embedded as attached information indicating the expiration date of the password.

  The invention according to claim 3 adds font attribute information for determining font attributes (font type, color, size, etc.) in addition to the weight information, so that confidentiality and security are further improved.

  In the invention according to claim 4, in response to a password issuance request from the mobile terminal, the password management server specifies weight information that is a variable index of the font drawing mode for each character data of the password character string constituting the password. Since this is added to the password character string and sent back to the portable terminal, the portable terminal can acquire the password character string and attached information indicating the expiration date of the password as weight information.

  According to the invention of claim 5, the user of the mobile terminal refers to the password character string and weight information acquired from the password management server, sets the weight of each character of the password character string according to the weight information, and after setting the weight Can be stored in the portable terminal as the password.

  According to the invention according to claim 6 and the invention according to claim 7, the stored password character string after the weight setting is displayed on the portable terminal by rasterizing the font by the font rasterizer function provided in the portable terminal. It can be confirmed that the attached information by the weight information is added to the character string, and the password can be authenticated as a password character string attached with the attached information.

  In the invention according to claim 8, the character string rasterized according to the weight for each character, the password character string displayed on the portable terminal is read as image data by the reading terminal, and this is transmitted to the password management server. Pattern matching is performed on the image data, and the weight information is extracted together with the password character string. The password is authenticated from the password character string and the weight information, so even if the password character string can be seen by others, It cannot be stolen, and the user of the mobile terminal can perform password authentication through the network with peace of mind. On the other hand, the password management server can easily perform password authentication for the mobile terminal.

  Next, embodiments of the present invention will be described in detail with reference to the drawings.

FIG. 1 shows a configuration of a mobile terminal 1 such as a mobile phone.
The mobile terminal 1 includes a wireless control unit 11, a keyboard 12, an antenna 13, a display 14, a memory 21, and a central processing unit 22.

The wireless control unit 11 and the antenna 13 can access the web (World Wide Web) from the mobile terminal 1.
The keyboard 12 has keys for operating the portable terminal 1 in addition to the user inputting a password.
The display 14 displays an input screen or a password.
The memory 21 exchanges data with the input / output devices such as the wireless control unit 11, the keyboard 12, and the display 14, and stores the data.
The central processing unit 22 performs various calculations and controls while exchanging data with the memory 21, and realizes a font rasterizer function 31 that displays a character string by rasterizing fonts according to weight information.

FIG. 2 shows an overall system configuration diagram.
The mobile terminal 1 configured as described above, the reading terminal 51 installed in a store or the like, and the security server 101 serving as a password management server include a local area network (LAN) or a WAN (WAN) via the base station 50 and the exchange 60. Connected to a network 100 such as a Wide Area Network.

  The reading terminal 51 has a password system 52 and a photographing function 53. The password system 52 reads password information from the portable terminal 1 and accesses the security server 101 to authenticate the password. The photographing function 53 photographs the display 14 of the mobile terminal 1 and sends the photographed password image data to the password system 52.

  The security server 101 has a password pattern matching system 102 and a password issuing function 103. The password pattern matching system 102 pattern-matches a password as shown in FIG. 3, for example, and extracts password weight information from the image data while checking whether the password is valid. The password issuing function 103 converts (numerizes) information such as an expiration date into weight information according to a specific rule, and for each character of the character string constituting the password, a weight that is a variable index of the font drawing mode Issue a password with information.

  FIG. 3 shows a character string of “Aiueo” that constitutes a password. “A” has a weight of 1, “I” has a weight of 4, “U” has a weight of 1, “E” has a weight of 11, “O”. "Indicates that weight 2 is given.

FIG. 4 shows that the font drawing mode of the character “A” changes depending on the weight applied.
When the weight of the character is changed, the gray value becomes darker or the portion that was the background color becomes a part of the character.
The present invention uses the fact that the font representation of the character changes depending on the set value of the weight, and attaches this to the password. Further, using the fact that the weight value can be set in several stages, numerical values such as the expiration date of the password are converted into data, converted into weight information, and embedded in the character data.

FIG. 5 shows a password issuing procedure.
When issuing a password, the user makes a model information of the mobile terminal 1 used by the user and a password issuance request to the security server 101. (Step S1)
In this case, the user himself / herself may transmit a desired password character string from the portable terminal 1 to the security server 101.

The password issuing function 103 of the security server 101 receives the issue request and stores terminal information and the like. (Step S2)
Also, information such as the expiration date is digitized in response to a password issuance request. The digitized information is converted into weight information according to a specific rule for each character of the character string constituting the password. (Step S3)
Then, the creation of the password and weight information data is completed, and the password character string and the weight information are notified to the mobile terminal 1 on the user side via mail or web. (Step S4)
Based on the notified information, the user generates and saves a password character string to which a weight is assigned in his / her mobile terminal 1. (Step S5)

FIG. 6 shows a password reception screen in the mobile terminal 1.
When issuing a password, a weight value is added to each character of the password character string.
The user sets the weight for each character while inputting the password character string based on this information.
By this processing, the user completes the creation of the password, and saves the password with the weight in the memory 21.

FIG. 7 shows a password authentication procedure.
The user reads the password stored in the memory 21 of the mobile terminal 1 as described above, and causes the display 14 to display the password character string. (Step S11)
At this time, the password character string is displayed in a font in which a weight value is set by the font rasterizer function 31. FIG. 8 shows the screen image.

In the reading terminal 51 installed in a store or the like, the password character string displayed on the display 14 of the portable terminal 1 is scanned by the photographing function 53. (Step S12)
The scanned character data is converted into image data by the password system 52 of the reading terminal 51. (Step S13).
This image data is transmitted to the security server 101 via the network 100. (Step S14)
On the security server 101 side, the image data is received, and the password pattern matching system 102 performs image data pattern matching to authenticate the password. (Step S15)

FIG. 9 shows a schematic diagram of pattern matching.
Since the weight information is known from the image of each character in the password character string, the password pattern matching system 102 extracts the weight information together with the password character string and digitizes it, and extracts additional information such as an expiration date along with the password.

If the password is correct and within the expiration date, the password system 52 of the reading terminal 51 is notified that the password is valid.
When the password system 52 is notified that the password is valid, the password system 52 provides a service based thereon. (Step S17)
On the other hand, if it is not correct, the password system 52 is notified that the password is incorrect. (Step S18)

The present invention can be applied as follows.
(1) In addition to weight information, adding font attribute information that determines font attributes such as font type, color, and size can further improve security.
(2) You can create your own password and send it to others.
(3) The range of access rights can be changed by arbitrarily changing the weight by the user.
(4) By enabling font data to be imaged in the terminal, it can also be used for password entry on a web.

It is a block diagram which shows the structure of the portable terminal which implements this invention. 1 is a system configuration diagram of a mobile terminal, a reading terminal, a security server that is a password management server, and a network. It is explanatory drawing which shows that a weight is provided about each character of a password character string. It is explanatory drawing which shows that a font drawing aspect changes with the difference of the weight provided about a specific one character. It is a flowchart which shows a password issuing procedure. It is a figure which shows the password reception screen in a portable terminal. It is a flowchart which shows a password authentication procedure. It is a screen image figure which shows that a password character string is displayed on the display of a portable terminal in the font drawing aspect according to a weight value. It is a schematic diagram of the pattern matching performed with the password pattern matching system of a security server.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Mobile terminal 11 Wireless control part 12 Keyboard 13 Antenna 14 Display 21 Memory 22 Central processing unit 31 Font rasterizer function 50 Base station 52 Password system 53 Shooting function 60 Switch 100 Network 101 Security server 102 Password pattern matching system 103 Password issuing function

Claims (8)

  A password issuing method characterized by adding weight information, which is a variable index of a font drawing mode, to each character data of a password character string constituting a password.   2. The password issuing method according to claim 1, wherein the weight information is determined according to a specific condition.   3. The password issuing method according to claim 1, further comprising adding font attribute information for determining font attributes in addition to the weight information.   A password issuance request is made from the portable terminal to the password management server via the network, and the password management server determines the weight information, which is a variable index of the font drawing mode, for each character data of the password character string constituting the password according to a specific condition. A password issuing method characterized by adding this to a password character string and sending it back to the portable terminal through a network.   5. The password issuance according to claim 4, wherein the weight of each character is set on the portable terminal in accordance with the weight information added to the password character string, and the password character string after the weight setting is stored in the portable terminal as the password. Method.   6. The password issuing method according to claim 5, wherein the stored password character string after the weight setting is displayed by rasterizing the font by a font rasterizer function provided in the portable terminal.   Sending means for issuing a password issuance request to the password management server via the network, and adding the weight information, which is a variable index of the font drawing mode, to each character data of the password character string constituting the password, and sent from the password management server A portable terminal comprising: storage means for storing a password; and font rasterizer means for displaying the stored password character string by rasterizing a font in accordance with the weight information.   The password character string displayed by rasterizing the font in the portable terminal according to claim 7 is read as image data by the reading terminal, and this is transmitted to the password management server through the network. The password management server has transmitted the password character string. A password authentication method comprising pattern matching image data, extracting weight information together with a password character string, and authenticating the password from the password character string and the weight information.

Images