JP2012048281A - Handwriting authentication system and handwriting authentication program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To greatly improve safety of a handwriting authentication system.SOLUTION: A first handwriting authentication system 10 includes handwriting password storage means 38, an input data analysis section 30, and an authentication section 32. The handwriting password storage means 38 registers a plurality of character strings that a legal user inputs by handwriting, the entry order of each character, the stroke order of each character, writing directions by strokes of each character, a first brush pattern which is a ratio of a necessary time for the whole character and a necessary time for each stroke, a second brush pattern which is a ratio of a necessary time for the whole character string and a necessary time for each character, and a third brush pattern which is a ratio of a trace length of the whole character and a trace length of each stroke. The input data analysis section 30 performs processing for relating time data to each piece of coordinate data when the coordinate data corresponding to a depression position on a touch panel is input by an authentication requester, processing for specifying a plurality of the input character strings, and processing for calculating the entry order of each character, the stroke order of each character, writing directions, necessary times, and trace lengths by strokes of each character, the first brush pattern, the second brush pattern, and the third brush pattern. The authentication section 32 determines the validity of the authentication requester by comparing handwritten password data of the legal user with input data of the authentication requester.

Description

  The present invention relates to a handwriting authentication system and a handwriting authentication program, and more particularly to a technique for authenticating the validity of a user based on handwritten characters input on a touch panel by a user using a finger or a stylus pen.

With the spread of electronic payments via the Internet, the expansion of the use of various types of electronic money, and the spread of mobile terminals that store a large amount of personal information, the need for personal authentication is increasing.
At present, the ID + password method is adopted as the simplest personal authentication method in many electronic devices and Web services. However, there are many cases where a character string that is easy for a user to remember is used as a password. The risk of misuse is pointed out.
In order to eliminate such dangers, it is recommended to use a character string unrelated to its own attribute as a password or to use a different password for each service used, but there is an opportunity for personal authentication. As the number of users increases, a large burden is placed on the user side.

For this reason, as shown in Patent Documents 1 to 3, techniques for performing personal authentication based on handwritten character input by a user have already been proposed. In the case of these technologies, since the legitimacy is determined based on a comparison between the handwriting of an operator handwritten and input using a pen-type input device or a finger and the handwriting of a valid user registered in advance, The user does not need to manage extra passwords for each service, and can be expected to reduce the risk of misuse by a third party as compared to the case where passwords are simply entered with a keyboard.
JP 2003-108901 A JP 2003-162511 A JP2009-163482A

However, in the case of the conventional handwriting authentication method, the collation items are limited to the character form (splashing, payment, etc.), stroke order, writing pressure, speed, and stroke, so there is still a risk of imitation by a third party. Was left.
The present invention has been devised to solve the above-described conventional problems, and has an object to provide a technique capable of dramatically improving the safety of the handwriting authentication method.

  In order to achieve the above object, the handwriting authentication system according to claim 1 includes a plurality of character strings input by handwriting by a legitimate user, the order of entry of each character, the order of writing of each character, and the writing direction for each stroke of each character. The first stroke, which is the ratio between the time required for the entire character and the time required for each stroke, the second stroke, which is the ratio between the required time for the entire character string and the required time for each character, and the trajectory of the entire character Corresponds to the handwriting input of the authentication requester via the handwriting password storage means for registering the third brush print, which is the ratio of the length and the trajectory length of each stroke, as handwritten password data of the legitimate user and the handwriting input device When the coordinate data is input, the time data adding means for associating the time data with each coordinate data, the figure formed by each coordinate data, and the standard character figure are compared, and a plurality of input characters Column Based on the character recognition means to be identified and the above-mentioned coordinate data and time data, signature characteristics for calculating the writing order of each character, the writing order of each character, and the writing direction / required time / trajectory length for each character stroke Based on the calculation means and the required time and trajectory length for each stroke of each character related to the input data of the authentication requester, a first brushstroke that is a ratio of the required time for the entire character and the required time for each stroke A brush that calculates a second brushstroke that is the ratio of the time required for the entire character string and the time required for each character, and a third brushprint that is the ratio of the trajectory length of the entire character and the stroke length of each stroke. The whole character string related to the handwritten password data of the corresponding legitimate user, the writing order of each character, the writing order of each character, the writing direction for each character stroke, the first writing brush, the second writing brush The entire character string related to the input data of the above-mentioned authentication requester, The character entry order, the writing order of each character, the writing direction of each character stroke, the first brush print, the second brush print, and the third brush print are compared to determine whether or not they match. In addition, an authentication means for determining the validity of the authentication requester based on these determination results is provided.

  The “handwriting input device” includes a liquid crystal touch panel that outputs coordinate data corresponding to the pressing position by a finger or a stylus pen, and a movement of the pen tip on a dedicated paper on which a large number of dot patterns are printed. A typical example is an electronic pen that reads the positional relationship with each dot pattern and outputs it as coordinate data, but in addition to these, any coordinate data on the writing surface can be output according to the handwriting input operation by the user. Includes devices. For example, an electromagnetic wave that senses the movement of a pen on non-dedicated paper placed on a tablet on which a sensor coil is arranged by an electromagnetic wave output from a pen having a resonance circuit composed of a coil and a capacitor, and outputs coordinate data thereof. The input method handwriting input device and the infrared ray transmitted from the pen tip are detected by the infrared sensor, and at the same time, the ultrasonic wave transmitted from the pen tip is detected by the two ultrasonic sensors and the infrared ray (light) is received. Also included is an ultrasonic handwriting input device that calculates the coordinates of the pen tip on the non-dedicated paper based on two time differences from when the ultrasonic wave (sound) is received (hereinafter the same).

The “handwritten password data of the corresponding legitimate user” is specified by the legitimate user ID, account, e-mail address, etc. input by the authentication requester. Alternatively, the handwritten password data of the corresponding legitimate user can be specified by the identification code (MAC address or the like) of the terminal device equipped with the touch panel (the same applies hereinafter).
In addition, when this system is completed within one terminal device and the number of authorized users is limited to one (when used as an authentication system for unlocking a mobile terminal, etc.) The handwritten password data of the legitimate user to be specified "is specified from the beginning.

  The handwritten authentication system according to claim 2 includes a plurality of character strings handwritten and input by a legitimate user, a writing order of each character, a writing order of each character, a writing direction, a required time, and a trajectory length for each character stroke. Time when time data is associated with each coordinate data when handwritten password storage means to be registered as handwritten password data of a legitimate user and coordinate data corresponding to the handwritten input of the authentication requester are input via the handwriting input device Based on the data adding means, the character formed by each coordinate data, and the character recognition means for comparing the figure of the standard character to identify the plurality of input character strings, the coordinate data and the time data, A signature characteristic calculation means for calculating the writing order of each character, the writing order of each character, the writing direction, the required time, and the trajectory length for each stroke of each character, and the input of this authentication requester Based on the time required for each character stroke and the length of the trajectory associated with the data, the first stroke, which is the ratio of the time required for the entire character and the time required for each stroke, the time required for the entire character string, and each character The second brushprint, which is a ratio to the required time, and a third brushprint, which is the ratio between the trajectory length of the entire character and the trajectory length of each stroke, are calculated and the corresponding handwritten password data of the legitimate user is calculated. A brushprint calculating means for calculating the first brushstroke, the second brushprint, and the third brushprint on the basis of the time required for each stroke of the character and the trajectory length; and the handwritten password data of the legitimate user The entire character string, the order of entry of each character, the order of writing of each character, the writing direction of each character stroke, the first writing brush, the second writing brush, the third writing brush, and the authentication requester. The entire character string related to the input data, the order of entry of each character, the order of writing of each character, and the stroke of each character The writing direction, the first writing brush, the second writing brush, and the third writing brush are compared with each other to determine whether or not they match, and based on these determination results, the validity of the authentication requester is verified. It is characterized by comprising authentication means for determining.

  The handwriting authentication program according to claim 3, wherein the computer includes a plurality of character strings input by handwriting by a legitimate user, the order of entry of each character, the order of writing of each character, the direction of writing for each character in each character, and the requirement for the entire character. The first stroke, which is the ratio between the time and the time required for each stroke, the second stroke, which is the ratio between the required time for the entire character string and the required time for each character, the trajectory length of the entire character and the length of each stroke Coordinate data corresponding to the authentication requester's handwritten input is input via the handwritten password storage means and the handwriting input device for registering the third brush print as the ratio with the locus length as the handwritten password data of the authorized user. The time data adding means for associating the time data with each coordinate data, the figure formed by each coordinate data is compared with the standard character figure, and a sentence that identifies a plurality of input character strings Recognizing means, signature characteristics calculating means for calculating the writing order of each character, the writing order of each character, and the writing direction / required time / trajectory length for each character stroke based on the coordinate data and time data, Based on the required time and trajectory length for each stroke of each character related to the input data of the authentication requester, the first brushstroke, which is the ratio of the required time for the entire character and the required time for each stroke, and the entire character string A brushstroke calculating means for calculating a second brushstroke that is a ratio of a required time and a time required for each character, and a third brushstroke that is a ratio of the trajectory length of the entire character and the stroke length of each stroke The entire character string related to the handwritten password data of the legitimate user, the entry order of each character, the writing order of each character, the writing direction for each character stroke, the first writing brush, the second writing brush, the third writing brush Crest and the entire character string related to the input data of the above authentication requester, the order of entry of each character, each sentence The writing order of each character, the writing direction of each character stroke, the first brush print, the second brush print, and the third brush print are compared with each other to determine whether they match or not. It is characterized by functioning as an authentication means for determining the authenticity of the authentication requester based on this.

  5. The handwriting authentication program according to claim 4, wherein a plurality of character strings handwritten and input by a legitimate user, a writing order of each character, a writing order of each character, a writing direction, a required time, and a locus for each character in each character When the coordinate data corresponding to the handwritten input of the authentication requester is input via the handwritten password storage means for registering the length as the handwritten password data of the legitimate user and the handwritten input device, the time data is added to each coordinate data. Based on the coordinate data and the time data, the time data giving means to be associated, the character formed by comparing the graphic formed by each coordinate data with the graphic of the standard character, and specifying a plurality of input character strings, Signature characteristics calculation means that calculates the writing order of each character, the writing order of each character, and the writing direction, required time, and trajectory length of each character stroke, this authentication Based on the required time and trajectory length for each stroke of each character according to the input data of the job seeker, the first brushprint, which is the ratio of the required time for the entire character and the required time for each stroke, and the required length for the entire character string The second brushprint, which is the ratio of time to the time required for each character, and the third brushprint, which is the ratio of the trajectory length of the entire character to the stroke length of each stroke, are calculated and the corresponding legitimate user's Based on the required time and trajectory length for each stroke of each character related to the handwritten password data, a brushprint calculating means for calculating the first brushprint, the second brushprint, and the third brushprint, The entire character string related to the handwritten password data, the order of entry of each character, the order of writing of each character, the writing direction of each character stroke, the first writing brush, the second writing brush, the third writing brush, and the above The entire character string related to the input data of the requester, the order of entry of each character, the order of writing of each character, each character The writing direction for each stroke, the first brush print, the second brush print, and the third brush print are compared to determine whether or not they match, and based on these determination results, the authentication requester's It is characterized by functioning as an authentication means for determining validity.

  In the case of the handwriting authentication system and the handwriting authentication program according to the present invention, based on the handwritten characters input by the user (authentication requester), simply match with the character string related to the handwritten password data of the legitimate user or match the writing order. In addition to verification, the order in which characters are entered, the writing direction of the strokes that make up each character, the first brushprint (ratio between the time required for the entire character and the time required for each stroke), and the second brushprint (character Since it has a mechanism to verify even the match of the third stroke (ratio between the trajectory length of the whole character and the trajectory length of each stroke), the ratio of the required time of the entire column and the required time of each character) It becomes possible to effectively eliminate imitation by a third party.

FIG. 1 is a block diagram showing a hardware configuration of a first handwriting authentication system 10 according to the present invention, and includes a liquid crystal touch panel 12, an input / output interface 14, a CPU 16, a RAM 18, a flash memory 20, and a ROM 22. It has.
The CPU 16, the input / output interface 14, the RAM 18, the flash memory 20, and the ROM 22 are connected by a system bus. The liquid crystal touch panel 12 and the input / output interface 14 are connected via a dedicated connector.
The first handwriting authentication system 10 is implemented as a function of a mobile terminal such as a PDA or a smartphone.

FIG. 2 is a block diagram showing a functional configuration of the first handwriting authentication system 10, and includes an input data analysis unit 30, an authentication unit 32, a program activation unit 34, a standard character storage unit 36, and a handwritten password storage unit. And 38.
The input data analyzing unit 30, the authenticating unit 32, and the program starting unit 34 are realized by the CUP 16 executing necessary processing according to the program stored in the ROM 22.
In addition, the standard character storage unit 36 is stored in the ROM 22, and is a figure (shape pattern) of various characters (alphanumeric characters, katakana, hiragana, kanji, etc.), each character code, and the character. A large number of pieces of information (standard writing directions, etc.) of the strokes constituting the character are registered.
The handwritten password storage unit 38 is stored in the flash memory 20, and the handwritten password data of the authorized user of the portable terminal is registered (details of the handwritten password data will be described later).

The liquid crystal touch panel 12 has a structure in which a transparent touch panel as an input device is bonded to the surface of a liquid crystal panel as a display device. The touch panel has a structure in which a large number of transparent contacts are arranged on a matrix. When the position is moved while pressing any part on the touch panel with a finger or a stylus pen, the position coordinates corresponding to the contacts on the touch panel Is entered into the system 10. At the same time, the drawing data corresponding to this input is output from the system 10, and as a result, a diagram showing the locus is displayed at the corresponding position on the liquid crystal panel.
The input data fetching process caused by the touch panel pressing and the diagram drawing process corresponding to the input data are executed by the CPU 16 in accordance with a program such as an OS stored in the ROM 22.

Prior to using the first handwriting authentication system 10, the user is required to register his / her handwritten password data.
That is, when the user selects “register handwritten password” in the setting menu of the portable terminal, an input screen 50 including a message prompting the user to input the handwritten password is displayed on the liquid crystal touch panel 12 (see FIG. 1).
Since a plurality of character input frames 52 are set on the input screen 50, the user can put an arbitrary character string within each character input frame 52 within a predetermined number (within 4 to 12 characters in the example of FIG. 1). Write.
Here, the description will be continued on the assumption that six English characters “Y”, “A”, “M”, “A”, “D”, and “A” have been input by handwriting.

Based on the handwritten input by the user, position data indicating the pressed coordinates is input from the liquid crystal touch panel 12 for each contact set on the liquid crystal touch panel 12.
The input data analysis unit 30 that has received the input data 40 stores the time data 42 indicating the pressed time in the RAM 18 in association with each position data. This time data 42 is provided from a clock circuit (not shown) arranged on the CPU board.

The user who has finished inputting the handwritten characters in the necessary character input frame 52 touches the completion button 54 and requests registration of the handwritten password.
Receiving this, the input data analysis unit 30 analyzes the input data 40 to generate handwritten password data, and then executes a process of registering in the handwritten password storage unit 38.

FIG. 3 shows data items of the handwritten password data. In addition to “user ID”, “whole character string”, and “entry order of each character”, each of the first to nth characters is shown. “Character code”, “stroke order”, “writing direction of each stroke”, “required time of each stroke”, “trajectory length of each stroke”, “first stroke”, “second stroke”, A data item of “third brush print” is provided.
In this embodiment, since it is assumed that the number of authorized users of the portable terminal is limited to one, the “user ID” is automatically filled with the identification code of the portable terminal. In the case of shared use, a user ID for identifying each user is stored.

Hereinafter, a processing procedure related to generation and registration of handwritten password data will be described with reference to the flowchart of FIG.
First, the input data analysis unit 30 refers to the standard character storage unit 36 and specifies a character code corresponding to the input data (handwritten character) (S10).
Specifically, for each character input frame 52, the figure composed of a diagram connecting the coordinates of each pressing point is compared with the figure of the standard character stored in the standard character storage unit 36, and the degree of similarity is the highest. A character code associated with a high standard character is assigned to the figure in the character input frame 52.
When the handwritten characters input by the user in each character input box 52 are “Y”, “A”, “M”, “A”, “D”, and “A”, the input data analysis unit 30 sets “YAMAADA” as the above data item. It is recognized as the value of “whole string” which is one of

Next, the input data analysis unit 30 associates the stroke of the standard character with the diagram (line input with one stroke = stroke) constituting the handwritten character (S12).
That is, as shown in FIG. 5, since the identification codes (1) to (n) are assigned in advance to each standard character for each stroke, the input data analysis unit 30 constitutes the handwritten character input by the user. The characteristics of the diagram (inclination angle, relative positional relationship with other diagrams, relative size with other diagrams, presence / absence of splashing and disbursement, etc.) The features are compared with each other, and the same identification codes are assigned to those having a predetermined similarity or higher.

At this time, if the standard characters constitute independent strokes, but the handwritten characters are input with a single stroke, the input data analysis unit 30 sets the identification codes of a plurality of strokes for the diagram input with a single stroke. Allocate.
For example, in the case of the handwritten character “Y” in FIG. 5, since the line diagrams corresponding to the strokes of the standard characters (1) and (3) are input with one stroke, “(1), (3)” A code is assigned.
In addition, in the case of the handwritten character “M” in FIG. 5, since the diagram corresponding to the strokes (1) to (4) of the standard characters is input with one stroke, “(1), (2), ( The codes 3) and (4) "are assigned.
Whether or not a certain diagram has been input with one stroke is determined based on the time associated with each coordinate data constituting the diagram.

In addition, the processing content of the input data analysis unit 30 should be changed so that the diagram input with a single stroke is disassembled from a predetermined point of view, and the strokes of standard characters are forcibly assigned to each cut diagram. You can also.
For example, it corresponds to decomposing by the coordinates of a portion that is bent at a predetermined angle or more in the line diagram or the coordinates of a portion that intersects another line diagram.

Next, the input data analysis unit 30 specifies the entry order of each character (S14).
“The order of entry of each character” means the order of input to each character input box 52, and normally “1: Y / 2: A / 3: M / 4: A / 5: D / 6”. : A ”. On the other hand, after the user dares to input “M → A → D → A” from the third character input box 52 to the sixth character input box 52 from the left, the user returns to the first input box from the left and returns to “ When “Y → A” is entered, the order of “5: Y / 6: A / 1: M / 2: A / 3: D / 4: A” is indicated in the data item “Entry order of each character”. Data will be stored.
The order of entry of each character is determined before or after the time associated with the handwritten input data that is the basis of each character.

Next, the input data analysis unit 30 identifies the input order of each stroke constituting the character for each character, and recognizes the result as the “writing order” of each character (S16).
That is, as shown in FIG. 5, since an identification code is assigned to each character in advance for each stroke, the input data analysis unit 30 recognizes the writing order based on the time of each coordinate input by the user. This is expressed by the identification code of each stroke.
For example, the general writing order of “Y” is “(1) → (2) → (3)”, but a user inputs in the order of “(1) → (3) → (2)” In this case, “(1) → (3) → (2)” is registered as “writing order”.

Next, the input data analysis unit 30 specifies the “writing direction” of each stroke constituting the character for each character (S18).
That is, as indicated by the arrow in FIG. 5, since each standard character has a standard input direction for each stroke, when the user inputs the stroke according to the standard, “+” A sign is given, and a sign of “-” is given when the input is in the opposite direction to the standard.
For example, as shown in FIG. 6A, according to the general input direction for “A”, the data of “(1) + / (2) + / (3) +” is “writing direction of each stroke”. However, if a certain user inputs in the direction of FIG. 6B, data of “(1) − / (2) + / (3) +” is registered.
The writing direction of each stroke is determined according to the time associated with the coordinates located at both ends of each stroke.

Next, the input data analysis unit 30 calculates “required time” of each stroke constituting the character for each character (S20).
Specifically, the “required time (entry time)” is obtained by subtracting the start time from the time at the end point of each stroke.
Here, the “start point” means the coordinate point with the earliest time in the stroke expressed by the continuous coordinate group, and the “end point” means the coordinate point with the latest time.
When a diagram that should be input as an independent stroke is input with a stroke of the user, the input data analysis unit 30 calculates the required time from the start point to the end point of the stroke drawn with a stroke. After that, the time required for each stroke is obtained by dividing by the number of strokes included in the diagram.

Next, the input data analysis unit 30 calculates the first brush print based on the required time for each stroke of each character (S22).
Here, the “first brush print” means the ratio between the total time required for each character (the total time required for each stroke) and the time required for each stroke. It is intended that even if the characters are the same, there is a difference (individuality) in the required time (speed and size) for each stroke depending on the person, and this is used as a criterion for determining the identity of the user.

Next, the input data analysis unit 30 calculates a second brushprint based on the required time for each stroke of each character (S24).
Here, the “second brush print” means the ratio between the time required for the entire character string and the time required for each character. Focusing on the difference in required time (speed and size) for each character depending on the person, this is intended to be used as a criterion for determining the identity of the user.

Next, the input data analysis unit 30 calculates the “trajectory length” of each stroke constituting the character for each character (S26).
Specifically, the total number of coordinate points included from the start point to the end point of each stroke is recognized as the “trajectory length”.
When a plurality of strokes are input with one stroke by a user's stroke, the input data analysis unit 30 calculates the total number of coordinate points included from the start point to the end point of the diagram, and then calculates the strokes included in the diagram. Divide by a number to find the stroke length of each stroke.

Next, the input data analysis unit 30 calculates a third brushprint based on the trajectory length of each character stroke (S28).
Here, the “third brush print” means a ratio between the total trajectory length of each character (the total value of trajectory lengths of each stroke) and the trajectory length of each stroke. Even if the characters are the same, attention is paid to the fact that there is a difference in the trajectory length (size) for each stroke, and this is used as a criterion for determining the identity of the user.

  Finally, the input data analysis unit 30 registers the handwritten password data as the analysis result in the handwritten password storage unit 38 (S29).

Once the handwritten password is set, the password input screen 50 shown in FIG. 1 is displayed on the liquid crystal touch panel 12 every time the user turns on the start button (sleep release button) of the portable terminal.
On the other hand, when the user inputs the password in the character input frame 52 by hand, the handwriting authentication process by the system 10 is started.
The authentication processing procedure in the system 10 will be described below with reference to the flowcharts of FIGS.

First, similarly to the above, the input data analysis unit 30 refers to the standard character storage unit 36 and specifies a character code corresponding to the input data (handwritten character) (S30 in FIG. 7).
Next, the input data analysis unit 30 associates the strokes of the standard characters with the diagrams constituting the handwritten characters by the same procedure as described above (S32).
Next, the input data analysis unit 30 specifies the entry order of each character by the same procedure as described above (S34).
Next, the input data analysis unit 30 specifies the stroke order and writing direction of each stroke for each character by the same procedure as described above (S36, S38).

  Next, the input data analysis unit 30 calculates the required time for each stroke in character units according to the same procedure as described above (S40), and then based on this, the first stroke (the required time for the entire character and each stroke). Is calculated) (S42).

  Next, the input data analysis unit 30 calculates the second brushprint (the ratio between the time required for the entire character string and the time required for each character) (S44).

  Next, the input data analysis unit 30 calculates the trajectory length for each stroke in units of characters in the same procedure as described above (S46), and then based on this, the third brushprint (the trajectory length of the entire character and each stroke Is calculated) (S48).

Next, after the authentication unit 32 reads the registration data (the handwritten password data of the authorized user) from the handwritten password storage unit 38 (S50 in FIG. 8), the entire character string of the input data passed from the input data analysis unit 30 Then, it is determined whether or not the entire character string of the registered data matches (S52).
If the determination result is “NO”, an error message is displayed on the screen of the liquid crystal touch panel 12 and a re-input is prompted (S74).

On the other hand, when the determination result is “YES”, the authentication unit 32 determines whether the entry order of the characters in the input data matches the entry order of the registration data (S54).
If the determination result is “NO”, an error message is displayed on the screen of the liquid crystal touch panel 12 and a re-input is prompted (S74).

On the other hand, when the determination result is “YES”, the authentication unit 32 matches the writing order of each character and the writing direction of each stroke in the input data with the writing order of each character and the writing direction of each stroke in the registered data. Is determined (S56).
If the determination result is “NO”, an error message is displayed on the screen of the liquid crystal touch panel 12 and a re-input is prompted (S74).

On the other hand, when the determination result is “YES”, the authentication unit 32 determines whether or not the first brush print of the input data matches the first brush print of the registered data (S62).
At this time, the authentication unit 32 does not only need to match the first brush print of the input data and the first brush print of the registered data, but also completes if both values are approximated within a predetermined range. Even if it is not a match, it is recognized as “match”. Even if it is input by a legitimate user, there is usually some error in the time required for each stroke depending on the time and the case. Not realistic.
If the determination result is “NO”, an error message is displayed on the screen of the liquid crystal touch panel 12 and a re-input is prompted (S74).

On the other hand, when the determination result is “YES”, the authentication unit 32 determines whether or not the second brush print of the input data matches the second brush print of the registered data (S66).
Here again, the authentication unit 32 recognizes “match” even if the second brush pattern of the input data and the second brush pattern of the registered data are approximated within a predetermined range, even if it is not a perfect match.
If the determination result is “NO”, an error message is displayed on the screen of the liquid crystal touch panel 12 and a re-input is prompted (S74).

On the other hand, if the determination result is “YES”, the authentication unit 32 determines whether or not the third brush print of the input data matches the third brush print of the registered data (S70).
In this case as well, if the third brush pattern of the input data and the third brush pattern of the registered data are approximated within a predetermined range, the authentication unit 32 recognizes “match” even if it is not a perfect match.
If the determination result is “NO”, an error message is displayed on the screen of the liquid crystal touch panel 12 and a re-input is prompted (S74).

  On the other hand, when the determination result is “YES”, the authentication unit 32 notifies the program activation unit 34 of the result of the authentication establishment, and the program activation unit 34 activates a necessary application program (S72).

Note that the order of authentication checks can be changed as appropriate, and is not limited to the above.
Moreover, in the above, the example in which the first handwriting authentication system 10 is used as the sleep release condition of the mobile terminal has been shown. However, the present invention is not limited to this, the activation condition of the individual application program, Of course, it is possible to use it as a usage condition of a specific Web service.

  As described above, in the case of the first handwriting authentication system 10, not only the input character string match or the stroke order match is simply verified based on the handwritten password input by the user, but also the direction of the stroke and the character. Entry order, 1st brush print (ratio of time required for the entire character and time required for each stroke), 2nd brush print (ratio of time required for the entire character string and time required for each character), Since a mechanism for verifying even the matching of the three strokes (ratio between the trajectory length of the entire character and the trajectory length of each stroke) is provided, imitation by a third party can be effectively eliminated.

In the above, based on the intention of strictly excluding third-party imitation, the condition that the input data and the reference data match in all the check items was the condition for establishing authentication, but depending on the required security level Thus, the degree of coincidence between both data can be relaxed.
For example, “Authentication is allowed if 5 or more of the 6 check items match” or “String match, stroke order and direction match, entry order match” is an absolute condition. For example, “1st to 3rd brush prints can be authenticated with two or more matches”.

  In the above case, the input data analysis unit 30 calculates the first brush print, the second brush print, and the third brush print of the legitimate user in advance, and the handwritten password storage unit 38 as a component of the handwritten password data. However, the present invention is not limited to this, and the first brush print, the second brush print, and the third brush print based on registered data of the authorized user at the time of user authentication. The brush print may be configured to be calculated by the input data analysis unit 30 or the authentication unit 32.

In the above description, the example in which the first handwriting authentication system 10 is incorporated as a function of an independent mobile terminal has been described. However, the present invention is not limited to such an embodiment.
FIG. 9 shows an example thereof, and the first handwritten authentication system 10 is configured by the authentication server 60 and a plurality of portable terminals 64 connected to the authentication server 60 via the Internet 62. Each mobile terminal 64 includes a tablet PC, a PDA, or the like having a liquid crystal touch panel and a communication function, and is connected to the authentication server 60 via a 3G line or a Wi-Fi service.

In this case, an application program having the following functions is installed on the authentication server 60 side.
(1) When a request for password registration accompanied by handwritten input data is transmitted from each portable terminal 64, the handwritten input data is analyzed and handwritten password data (first brush print, second brush print, third And a handwritten password storage unit (database) on the authentication server 60 side. At this time, each handwritten password data is associated with a user ID.
(2) When a request for authentication accompanied by a user ID and handwritten input data is transmitted from each mobile terminal 64, the handwritten input data is analyzed, and the entire character string, the order in which each character is entered, the order in which each character is written The writing direction / required time / trajectory length of each stroke for each character, the first writing brush, the second writing brush, and the third writing brush are calculated.
(3) The registration data associated with the user ID is extracted, and the entire character string, the order of entry of each character, the order of writing and the writing direction of each character, the first writing pattern, The two brush prints and the third brush print are compared to determine whether authentication is possible.
(4) The result data indicating whether authentication is possible is transmitted to the portable terminal 64.

Further, a management program having the following functions is installed on the portable terminal 64 side.
(1) When the user selects “register handwritten password” in the setting menu, a handwritten password input screen is displayed on the liquid crystal panel.
(2) The handwritten character data (coordinate data on the pressed touch pad and pressing time data) input to the character input frame is transmitted to the authentication server 60, and a request for registration of the handwritten password is made.
(3) When the user presses the power button (sleep release button) of the portable terminal 64, a handwritten password input screen is displayed on the liquid crystal panel.
(4) Data of handwritten characters (coordinate data and pressed time data on the pressed touch pad) input to the character input frame are transmitted to the authentication server 60, and authentication is requested.
(5) When the authentication establishment result is notified from the authentication server 60, a necessary application is started and used for the user.
(6) When a result of authentication failure is notified from the server, a screen prompting re-input is displayed on the liquid crystal panel.

FIG. 10 is a block diagram showing a second handwriting authentication system 70 having another hardware configuration, which is characterized in that an electronic pen (digital pen) 71 is used as a handwriting input device.
That is, the second handwriting authentication system 70 includes a CPU 16, a RAM 18, a flash memory 20, and a ROM 22 as well as the first handwriting authentication system 10, and a communication interface 74 instead of the input / output interface 14. And has the functional configuration shown in FIG.

  The electronic pen 71 includes a ballpoint pen for printing, a writing pressure sensor, a digital camera, a communication device such as Bluetooth (registered trademark), a memory, a control device including a CPU and a memory, a battery, and the like. It has a function of outputting position coordinate data corresponding to a handwritten input locus written on the dedicated paper 72 to the outside by wireless communication.

  On the surface of the dedicated paper 72, special dot patterns made of carbon ink are arranged in a grid pattern at intervals of about 0.3 mm, and XY coordinates are assigned to each dot pattern. This dot pattern is read by a digital camera attached to the pen tip of the electronic pen 71 and converted into position coordinates by a control device.

  When the user enters a handwritten password in the character input frame 73 provided on the dedicated paper 72 using the electronic pen 71, the position coordinate data of the handwritten input output from the electronic pen 71 is transmitted via the communication interface 74 to the PC or It is taken into a system 70 composed of a computer such as a PDA, and is used for authentication of use of various web services and activation authentication of application programs as handwritten password input.

  Note that the time data corresponding to each coordinate may be transmitted from the electronic pen 71 together with the coordinate data. In this case, the control device of the electronic pen 71 functions as “time data providing means”.

It is a block diagram which shows the hardware constitutions of the 1st handwritten authentication system which concerns on this invention. It is a block diagram which shows the function structure of the handwriting authentication system which concerns on this invention. It is a figure which shows the data item example of handwritten password data. It is a flowchart which shows the process sequence of handwritten password registration. It is a figure explaining a mode that the identification code and the standard writing direction are provided to the stroke of each standard character. It is a figure which shows contrast with the input according to a standard writing direction, and the input contrary to a standard writing direction. It is a flowchart which shows the process sequence of handwritten authentication. It is a flowchart which shows the process sequence of handwritten authentication. It is a conceptual diagram which shows other embodiment of the handwriting authentication system which concerns on this invention. It is a block diagram which shows the hardware constitutions of the 2nd handwritten authentication system which concerns on this invention.

10 First handwriting authentication system
12 LCD touch panel
14 I / O interface
18 RAM
20 Flash memory
22 ROM
30 Input data analysis section
32 Authentication Department
34 Program start block
36 Standard character storage
38 Password memory
40 Input data
42 hour data
50 Password input screen
52 Character input frame
54 Done button
60 Authentication server
62 Internet
64 mobile devices
70 Second handwriting authentication system
71 Electronic pen
72 Special paper
73 Character input box
74 Communication interface

Claims (4)

A plurality of character strings handwritten by a legitimate user, the order in which each character is written, the order in which each character is written, the writing direction for each stroke in each character, and the ratio of the required time for the entire character and the required time for each stroke The second brushprint, which is the ratio between the time required for the entire character string and the time required for each character, and the third brushprint, which is the ratio between the trajectory length for the entire character and the trajectory length for each stroke, Handwritten password storage means to be registered as handwritten password data of legitimate users;
Time data giving means for associating time data with each coordinate data when coordinate data corresponding to the handwriting input of the authentication requester is inputted via the handwriting input device;
Character recognition means for comparing a figure formed by each coordinate data with a figure of a standard character to identify a plurality of inputted character strings,
Based on the coordinate data and time data, the signature order calculating means for calculating the writing order of each character, the writing order of each character, and the writing direction / required time / trajectory length for each stroke of each character;
Based on the required time and trajectory length for each stroke of each character related to the input data of the authentication requester, the first brushstroke that is the ratio of the required time for the entire character and the required time for each stroke, and the entire character string A second brushprint that is a ratio of the required time of each character and the required time of each character, and a third brushprint that calculates a third brushprint that is a ratio of the trajectory length of the entire character and the trajectory length of each stroke; ,
The entire character string related to the handwritten password data of the corresponding legitimate user, the entry order of each character, the writing order of each character, the writing direction for each character stroke, the first writing brush, the second writing brush, the third writing character The entire character string related to the input data of the authentication requester, the order of entry of each character, the order of writing of each character, the direction of writing for each character stroke, the first and second brushstrokes, An authentication unit that compares the third brush print with each other to determine whether or not they match, and determines the validity of the authentication requester based on these determination results;
A handwriting authentication system characterized by comprising: Registered as handwritten password data of a legitimate user, a plurality of character strings handwritten by a legitimate user, the order of entry of each character, the order of writing of each letter, and the writing direction / required time / trajectory length for each stroke of each character A handwritten password storage means;
Time data giving means for associating time data with each coordinate data when coordinate data corresponding to the handwriting input of the authentication requester is inputted via the handwriting input device;
Character recognition means for comparing a figure formed by each coordinate data with a figure of a standard character to identify a plurality of inputted character strings,
Based on the coordinate data and time data, the signature order calculating means for calculating the writing order of each character, the writing order of each character, and the writing direction / required time / trajectory length for each stroke of each character;
Based on the required time and trajectory length for each stroke of each character related to the input data of the authentication requester, the first brushstroke that is the ratio of the required time for the entire character and the required time for each stroke, and the entire character string The second brushprint, which is the ratio of the required time for each character and the time required for each character, and the third brushprint, which is the ratio of the trajectory length of the entire character and the trajectory length of each stroke, A brushprint calculating means for calculating the first brushstroke, the second brushprint, and the third brushprint based on a required time and a trajectory length of each character stroke related to the user's handwritten password data;
The entire character string related to the handwritten password data of the legitimate user, the order of entry of each character, the order of writing of each character, the writing direction for each character stroke, the first writing brush, the second writing brush, and the third writing brush The entire character string related to the input data of the authentication requester, the order of entry of each character, the order of writing of each character, the writing direction of each character stroke, the first brushstroke, the second brushstroke, An authentication means for comparing each of the three brush prints with each other to determine whether or not each matches, and to determine the validity of the authentication requester based on these determination results;
A handwriting authentication system characterized by comprising: Computer
A plurality of character strings handwritten by a legitimate user, the order in which each character is written, the order in which each character is written, the writing direction for each stroke in each character, and the ratio of the required time for the entire character and the required time for each stroke The second brushprint, which is the ratio between the time required for the entire character string and the time required for each character, and the third brushprint, which is the ratio between the trajectory length for the entire character and the trajectory length for each stroke, Handwritten password storage means to be registered as handwritten password data of legitimate users,
Time data giving means for associating time data with each coordinate data when coordinate data corresponding to the handwriting input of the authentication requester is input via the handwriting input device;
Character recognition means for identifying a plurality of input character strings by comparing a figure formed by each coordinate data with a figure of a standard character,
Based on the coordinate data and time data, the signature characteristics calculating means for calculating the writing order of each character, the writing order of each character, and the writing direction, required time, and trajectory length for each stroke of each character,
Based on the required time and trajectory length for each stroke of each character related to the input data of the authentication requester, the first brushstroke that is the ratio of the required time for the entire character and the required time for each stroke, and the entire character string A brush stroke calculating means for calculating a second brush stroke that is a ratio of a required time of each character and a time required for each character, and a third brush stroke that is a ratio of the trajectory length of the entire character and the trajectory length of each stroke;
The entire character string related to the handwritten password data of the corresponding legitimate user, the entry order of each character, the writing order of each character, the writing direction for each character stroke, the first writing brush, the second writing brush, the third writing character The entire character string related to the input data of the authentication requester, the order of entry of each character, the order of writing of each character, the direction of writing for each character stroke, the first and second brushstrokes, An authentication unit that compares the third brush print with each other to determine whether or not they match, and determines the validity of the authentication requester based on these determination results;
Handwriting authentication program, characterized in that it functions as Computer
Registered as handwritten password data of a legitimate user, a plurality of character strings handwritten by a legitimate user, the order of entry of each character, the order of writing of each letter, and the writing direction / required time / trajectory length for each stroke of each character Handwritten password storage means,
Time data giving means for associating time data with each coordinate data when coordinate data corresponding to the handwriting input of the authentication requester is input via the handwriting input device;
Character recognition means for identifying a plurality of input character strings by comparing a figure formed by each coordinate data with a figure of a standard character,
Based on the coordinate data and time data, the signature characteristics calculating means for calculating the writing order of each character, the writing order of each character, and the writing direction, required time, and trajectory length for each stroke of each character,
Based on the required time and trajectory length for each stroke of each character related to the input data of the authentication requester, the first brushstroke that is the ratio of the required time for the entire character and the required time for each stroke, and the entire character string The second brushprint, which is the ratio of the required time for each character and the time required for each character, and the third brushprint, which is the ratio of the trajectory length of the entire character and the trajectory length of each stroke, A brushstroke calculator for calculating the first brushstroke, the second brushstroke, and the third brushstroke based on a required time and a trajectory length of each character related to the user's handwritten password data;
The entire character string related to the handwritten password data of the legitimate user, the order of entry of each character, the order of writing of each character, the writing direction for each character stroke, the first writing brush, the second writing brush, and the third writing brush The entire character string related to the input data of the authentication requester, the order of entry of each character, the order of writing of each character, the writing direction of each character stroke, the first brushstroke, the second brushstroke, Authentication means for comparing each of the three brush prints with each other to determine whether each of them matches / disagrees, and to determine the validity of the authentication requester based on these determination results;
Handwriting authentication program, characterized in that it functions as

Images