JP2019008446A - Input device, program, information storage medium, and input method - Google Patents

Abstract

To provide an input device or the like which has resistance against peek at the moment of input of a password and reduces cognitive load.SOLUTION: The input device includes: a display control unit which causes a plurality of input buttons having input values represented thereon to be displayed in a display screen of a display unit; an input button control unit which, in response to the execution of user's prescribed operation, erases the input values represented on the plurality of input buttons and moves at least two input buttons to different positions in the display screen; and an input processing unit which, in response to the execution of an operation of selecting an input button, determines that the input value corresponding to the selected input button has been inputted.SELECTED DRAWING: Figure 2

Description

  The present invention relates to an input device, a program, an information storage medium, and an input method.

  When entering a password (highly confidential information) such as a password on smartphones, tablets, ATMs of financial institutions, etc. Confidential information may be guessed or stolen. As a technique for preventing damage caused by peeping, for example, there are techniques disclosed in Patent Documents 1 to 3.

  In Patent Document 1, numeric keys from 0 to 9 are arranged along a circle, and the basic numeric key 0 is changed from the other numeric keys to make it easy to identify. A technique is described that makes it difficult to guess a password by the position of an operator's arm or finger while suppressing an increase in time for searching for a desired number key by rotating the entire number every time a digit is entered.

  In Patent Document 2, only a partial area of the input value table is displayed, and a password is input while sliding (scrolling) the input value table up, down, left, and right, thereby maintaining the relative position of each input value. A technique for making it difficult to guess a password based on the position of an operator's arm or finger is described.

  Patent Document 3 discloses a technique in which a third party presses a key different from an actual personal identification number according to a secret rule, so that the personal identification number cannot be identified even if the user is peeping into the input state. Is described.

JP 2003-330888 A JP 2007-148658 A JP 2008-033924 A

  With the techniques described in Patent Documents 1 and 2, it is difficult to guess the password by the position of the operator's arm or finger, but there is no resistance to peeking at the moment when the key is input. In addition, the technique described in Patent Document 3 is resistant to peeping at the moment of entering a key, but introduces new secret information to conceal secret information called a password, which reduces the cognitive load. It is increasing.

  The present invention has been made in view of the above problems, and its object is to provide an input device, a program, and an information storage that are resistant to peeping at the moment of inputting a password and have a low cognitive load. To provide a medium and an input method.

(1) The present invention is an input device for inputting a password, and displays a plurality of input buttons displaying input values on a display screen of the display unit, and a predetermined operation by a user The input button control unit for erasing the input values displayed on the plurality of input buttons and moving at least two of the input buttons to different positions on the display screen, and And an input processing unit that determines that an input value corresponding to the selected input button is input when a selection operation is performed. The present invention also relates to a program for an input device for inputting a password, and a program for causing a computer to function as each of the above units. The present invention also relates to a non-transitory computer-readable information storage medium that stores a program for causing a computer to function as each of the above-described units.

  The present invention is also an input method for inputting a password, in which a plurality of input buttons displaying input values are displayed on the display screen of the display unit, and a predetermined operation is performed by the user. An input button control step of erasing input values displayed on the plurality of input buttons and moving at least two of the input buttons to different positions on a display screen; and an operation of selecting the input buttons. And an input processing step for determining that an input value corresponding to the selected input button has been input.

  According to the present invention, when the user performs a predetermined operation, the input values displayed on the plurality of input buttons are deleted, and at least two input buttons move to different positions. A third person peeping must specify the position after movement of the plurality of input buttons, and it is difficult to guess or steal a password by peeping. On the other hand, since the user only needs to specify the position after movement of one input button corresponding to the input value to be input next, the user's cognitive load is small.

  (2) In the input device, program, information storage medium, and input method according to the present invention, the input button control unit (in the input button control step) may move the input button over a predetermined time. Good.

  According to the present invention, when the user performs a predetermined operation, the input values displayed on the plurality of input buttons are deleted, and at least two input buttons move to different positions over a predetermined time. A third person who is peeping must follow the movement of a plurality of input buttons with his eyes, and it is difficult to guess or steal a password by peeping. On the other hand, since the user only has to follow the movement of one input button corresponding to the input value to be input next, the user's cognitive load is small.

  (3) In the input device, the program, the information storage medium, and the input method according to the present invention, at least one of the plurality of input buttons can distinguish at least one of color, shape, pattern, image, and size from each other. You may have.

  According to the present invention, at least some of the plurality of input buttons have different colors, shapes, and the like, and when the user performs a predetermined operation, the input values displayed on the plurality of input buttons are erased, At least two input buttons move to another position. A third person peeping must memorize the colors and shapes of a plurality of input buttons, making it difficult to guess and steal passwords by peeping. On the other hand, since the user only needs to memorize | store the color, shape, etc. of one input button corresponding to the input value to input next, there are few cognitive loads of a user.

It is an example of the functional block diagram of the recognition apparatus of this embodiment. It is a figure which shows an example of the display screen for inputting a PIN code. It is a figure which shows an example of the display screen on which the input button from which a shape differs was displayed. It is a figure which shows an example of the display screen for inputting an alphanumeric password. It is a flowchart which shows the flow of a process of the input device of this embodiment.

  Hereinafter, this embodiment will be described. In addition, this embodiment demonstrated below does not unduly limit the content of this invention described in the claim. In addition, all the configurations described in the present embodiment are not necessarily essential configuration requirements of the present invention.

1. Configuration FIG. 1 shows an example of a functional block diagram of an input apparatus according to this embodiment. Note that the input device of this embodiment may have a configuration in which some of the components (each unit) in FIG. 1 are omitted. The input device is a device for a user to input a password (including a personal identification number (PIN)), and is, for example, a portable information terminal such as a smartphone, an automatic teller machine (ATM), or a PC.

  The input unit 160 is used by the user to input operation information, and outputs the input operation information to the processing unit 100. The function of the input unit 160 can be realized by a pointing device such as a touch panel or a mouse. For example, the touch panel detects a coordinate value of a contact position (designated position) input by a touch operation (touch operation) on the touch panel and outputs the detected coordinate value to the processing unit 100.

  The storage unit 170 stores programs and various data for causing the computer to function as each unit of the processing unit 100, and also functions as a work area of the processing unit 100. The function can be realized by a hard disk, a RAM, or the like.

  The display unit 190 outputs the image generated by the processing unit 100, and its function can be realized by a display such as a touch panel, LCD, or CRT that also functions as the input unit 160.

  The communication unit 196 performs various controls for communicating with a server or the like, and the function can be realized by hardware such as various processors or a communication ASIC, a program, or the like.

  The processing unit 100 (processor) performs various processes based on operation information and programs from the input unit 160. The functions of the processing unit 100 can be realized by hardware such as various processors (CPU, DSP, etc.), ASIC (gate array, etc.), and programs. The processing unit 100 includes a display control unit 110, an input button control unit 112, and an input processing unit 114.

  The display control unit 110 performs control to display a plurality (a predetermined number) of input buttons on which input values (alphanumeric characters and the like) are displayed on the display screen of the display unit 190. The plurality of input buttons may be all the same in color, shape, pattern, image and size, and at least a part of the plurality of input buttons is at least one of color, shape, pattern, image and size. (Characteristics that can distinguish input buttons from each other (differential characteristics)) may be different from each other.

  When a predetermined operation is performed by the user, the input button control unit 112 deletes input values displayed on the plurality of input buttons and moves at least two input buttons to different positions on the display screen. Take control. The input button control unit 112 may move the input button over a predetermined time (smoothly), or may display the process of the input button moving instantaneously (without taking time). To). However, when the input buttons are moved instantaneously, at least one of the plurality of input buttons needs to be different from each other in at least one of color, shape, pattern, image, and size. Further, the input button control unit 112 may start moving the input button after erasing the input values displayed on the plurality of input buttons in an instant, or gradually increase the input value from the start of moving the input button. The display may be thinned (transparent), and the input value may be completely deleted while the input button is moving or until the movement is completed.

  The input processing unit 114 determines that an input value corresponding to the selected input button is input when the user performs an operation of selecting (designating) the input button on the display screen.

  The processing unit 100 may further include an authentication unit that determines whether or not an input password constituted by a plurality of input values that are input matches a registered password stored in the storage unit 170. In addition, the processing unit 100 transmits the input password or data obtained by converting (encrypting or hashing) the input password to the server, and the server receives the input password received from the input device and the registered password stored in the storage unit of the server. It is also possible to configure such that the verification is performed (the function of the authentication unit is executed).

2. Next, the method of this embodiment will be described with reference to the drawings.

  FIG. 2 is a diagram illustrating an example of the display screen DS of the touch panel (input unit 160, display unit 190). On the display screen DS shown in FIG. 2A, ten input buttons IB corresponding to numbers (an example of input values) from “0” to “9” and a shuffle button SB to be described later are displayed. . A corresponding number is displayed on each of the input buttons IB. In the example shown in FIG. 2A, numeric input buttons IB are arranged in a standard numeric keypad arrangement, but the arrangement of a plurality of input buttons IB (numbers assigned to the input buttons IB at each position) is randomly determined. May be.

  The user can input a number corresponding to the input button IB by performing an operation of pressing (touching) an arbitrary input button IB. By repeating this operation as many times as necessary (number of digits), the user can enter a password. A number (an example of a password) can be entered.

  In addition, the user is resistant to third-party peeking by performing an operation (an example of a predetermined operation) of pressing the shuffle button SB as necessary, such as when inputting at a place where people are concerned. Input can be done in some way.

  Specifically, when the user performs an operation of pressing the shuffle button SB, after the number displayed on each input button IB is erased, each input button IB takes a predetermined time on the display screen DS. Move to another position. Even if the numbers of the input buttons IB are deleted, the correspondence between the input buttons IB and the numbers is maintained. The position of the destination of the input button IB is determined at random from the positions where the other input buttons IB are displayed, and is determined so as not to coincide with the destination of the other input buttons IB. When the input button IB is moved, it may be controlled so that the plurality of input buttons IB arrive at the destination simultaneously, or the plurality of input buttons IB may be controlled to move at the same moving speed. Good. Further, each input button IB may be moved linearly toward the destination, or the route to the destination may be determined at random. In addition, after gradually moving the size of each input button IB from the start of the movement of the input button IB, the size of each input button IB is gradually increased so that it becomes the original size when the movement is completed. May be. 2B and 2C show the display screen DS when the input button IB is moving, and FIG. 2D shows the display screen DS when the movement of the input button IB is completed. Show.

Since each input button IB moves in a state where no number is displayed, when the user presses the shuffle button SB, the user pays attention to the input button IB of the number to be input next and presses the shuffle button SB. Identifies the position of the input button after moving by tracking the movement of the input button IB. Then, when the user performs an operation of pressing the input button IB on the display screen DS in FIG. 2D, a number corresponding to the input button IB is input, and the display screen DS shown in FIG. To do. By repeating the above operations as many times as necessary, the personal identification number can be safely input.

  Thus, since the user only needs to follow the movement of one input button IB (the number input button IB to be input next), the cognitive load on the user is small. On the other hand, since the third person who peeks at does not know the number that the user intends to input next, he must follow the movements of the ten input buttons IB at the same time. Theft becomes difficult. That is, according to the present embodiment, it is possible to realize an input device that is resistant to peeping at the moment of inputting a personal identification number and has a low cognitive load.

  If the user loses sight of the input button IB being moved (the position after the input button IB has not been moved), the retry button RB displayed on the display screen DS shown in FIG. Press the button. When the user presses the retry button RB, the display screen DS shown in FIG. 2A is displayed, and the input button IB can be moved by pressing the shuffle button SB again. When the user presses the retry button RB, the display screen DS shown in FIG. 2A is displayed for a predetermined time (a number is displayed on each input button IB), and then the number of each input button IB is automatically displayed. May be deleted and each input button IB may be moved.

  In the above example, the case where all the input buttons IB displayed on the display screen DS are moved when the shuffle button SB is pressed has been described. However, at least two of the input buttons IB displayed on the display screen DS are input. The button IB may be moved. It is difficult for a third person who is peeping to follow the movements of the plurality of input buttons IB at the same time.

  Moreover, although the case where each input button IB is moved to the position where the other input buttons IB were displayed has been described in the above example, the input button IB is moved to a destination other than the current display position of the input button IB. Any position on the display screen DS may be used.

  In the above example, the case where each input button IB is moved only once when the shuffle button SB is pressed has been described. However, each input button IB is moved a plurality of times (sequentially moved to different destinations). You may do it. Moreover, although the case where the user performs an operation of pressing the input button IB after the input button IB is moved has been described in the above example, the operation on the moving input button IB may be permitted.

  In the above example, the case where the color, shape, pattern, image, and size of each input button IB are the same is described. However, at least one of the color, shape, pattern, image, and size of the plurality of input buttons IB is described. They may have features that are distinguishable from each other.

  FIG. 3 shows an example of the display screen DS on which input buttons IB having different shapes are displayed. In the display screen DS shown in FIG. 3A, the shapes of the ten input buttons IB are different from each other (each input button IB has a unique shape). The shape assigned to each input button IB is determined randomly. Also in this example, when the user performs an operation of pressing the shuffle button SB, after the number of each input button IB is erased, each input button IB moves to another position on the display screen. Even if the numbers of the input buttons IB are deleted, the correspondence between the input buttons IB and the numbers and the shape of the input buttons IB are maintained. 3B and 3C show the display screen DS when the input button IB is moving, and FIG. 3D shows the display screen DS when the input button IB has been moved. Show. When the user performs an operation of pressing the input button IB on the display screen DS shown in FIG. 3D, a number corresponding to the input button IB is input, and the screen shifts to the display screen DS shown in FIG. At this time, each input button IB is assigned a unique shape determined at random again.

As shown in FIG. 3, when the shapes (or colors, patterns, images, or sizes) of all the input buttons IB are different from each other, it is necessary to remember the correspondence between the shape of the input buttons IB and the numbers in advance. Even when no number is displayed on the input button IB, the corresponding number can be specified from the shape of the input button IB. For example, the input button IB of the number “1” displayed on the upper left in the example shown in FIG. 3A has moved to the lowermost center in the example shown in FIG. (Without following the movement of the input button IB with the eyes). Therefore, in the example shown in FIG. 3, the input button IB may be moved instantaneously (without taking time) (from the display screen DS shown in FIG. 3A to the display screen DS shown in FIG. 3D). May be instantly transitioned to). By moving the input button IB instantaneously, it is possible to shorten the time required for inputting the personal identification number. In this case, when the user presses the shuffle button SB, the user remembers the shape (or color, pattern, image or size) of the numeric input button IB to be input next, and presses the shuffle button SB. What is necessary is just to search and press the input button IB which has the said shape (after movement of the input button IB). Since the user only needs to memorize the shape (or color, pattern, image or size) of one input button IB (the number input button IB to be input next), the user's cognitive There is little load. On the other hand, the third person peeping must memorize the shape (or color, pattern, image or size) of the ten input buttons IB. It becomes difficult.

  FIG. 4 is a diagram illustrating an example of the display screen DS that allows an alphanumeric password to be input. In the display screen DS shown in FIG. 4, ten input buttons IB corresponding to numbers (input values) from “0” to “9” and letters (input values) from “a” to “z” are displayed. A total of 36 input buttons IB of 26 corresponding input buttons IB are displayed. In the example shown in FIG. 4, the alphabetic input buttons IB are arranged in a standard QWERTY arrangement, but the arrangement of a plurality of input buttons IB may be determined at random. Also in the example shown in FIG. 4, when the user performs an operation of pressing the shuffle button SB, after the letters or numbers of the input buttons IB are erased, the input buttons IB are displayed on the display screen over a predetermined time. Move to the position. When the user performs an operation of pressing the input button IB, an alphabetic character or a number corresponding to the input button IB is input, and the display screen DS shown in FIG. 4 is displayed. By repeating the above operations as many times as necessary, a password consisting of alphanumeric characters can be safely input.

  When many input buttons IB are moved as shown in FIG. 4, the movement distance, movement speed, and movement path of each input button IB may be limited so that the user does not lose sight of the input buttons IB. For example, when determining the destination of each input button IB, a pair of input buttons IB (18 pairs in the example shown in FIG. 4) whose distance between the input buttons IB is within a predetermined range is randomly determined. The input buttons IB are moved so that the display positions of the determined pairs of the input buttons IB are interchanged with each other. At this time, a pair of input buttons IB is determined so that the movement paths of the input buttons IB do not intersect with each other. In this way, it is possible to prevent a situation in which the movement of the input button IB to be noticed cannot be followed with the eyes because the moving speed of the input button IB is too fast or the input buttons IB overlap each other.

  In the above example, the case where the input value displayed on each input button IB is erased and each input button IB is moved when triggered by the operation of pressing the shuffle button SB has been described. The predetermined operation for moving is not limited to this. For example, when the user performs an operation (tap operation) for touching any position except the input button IB on the display screen DS, the input value may be deleted and the input button IB may be moved.

Moreover, you may comprise so that the user himself / herself can adjust the moving distance and moving speed of the input button IB. For example, when the user performs an operation (long tap operation) of long-pressing an arbitrary position or a predetermined area on the display screen DS, the input button IB continues to move while the operation continues, When the operation is completed, the movement of the input button IB may be stopped. Also,
When the user performs an operation (swipe operation) for sliding a finger in an arbitrary area or a predetermined area on the display screen DS, a speed corresponding to the slide amount of the operation (or a distance corresponding to the slide amount) Only) The input button IB may be moved. In this case, when the user slides the finger in the first direction (for example, the right direction), the input button IB is moved toward the movement destination, and the finger is slid in the second direction (for example, the left direction). In such a case, the input button IB may be moved toward the movement source (the movement route may be traced back).

3. Processing Next, an example of processing of the input device according to the present embodiment will be described with reference to the flowchart of FIG.

  First, the display control unit 110 performs control to display a plurality of input buttons IB in a state where input values (numeric characters or alphanumeric characters) are displayed on the display screen DS in a predetermined arrangement or a random arrangement ( Step S10). Here, when the colors, shapes, patterns, images, and sizes of the plurality of input buttons IB are different, the display control unit 110 randomly sets the colors, shapes, patterns, images, and sizes of the input buttons IB. Each input button IB is displayed on the display screen DS with the determined color, shape, pattern, image, and size. Next, the input processing unit 114 determines whether or not an operation of pressing (selecting) the input button IB has been performed (Step S11). If the operation has been performed (Y in Step S11), the step is performed. The process proceeds to S17.

  When the operation of pressing the input button IB has not been performed (N in Step S11), the input button control unit 112 determines whether an operation of pressing the shuffle button SB (predetermined operation) has been performed (Step S11). S12). When the operation is not performed (N in step S12), the process proceeds to step S11. When the operation is performed (Y in step S12), the input button control unit 112 deletes the input values displayed on the plurality of input buttons IB (step S13), and sets the plurality of input buttons IB to a predetermined value. Control is performed to move to another position on the display screen DS over a period of time (step S14). Next, the display control unit 110 determines whether or not an operation of pressing the retry button RB has been performed (step S15). When the operation has been performed (Y in step S15), the process proceeds to step S10. .

  When the operation of pressing the retry button RB is not performed (N in Step S15), the input processing unit 114 determines whether or not the operation of pressing the input button IB is performed (Step S16). If the operation of pressing the input button IB has not been performed (N in step S16), the process proceeds to step S15. When an operation is performed to press the input button IB in a state where the input value is displayed or the input button IB in a state where the input value is not displayed (Y in step S11, Y in step S16), input processing is performed. The unit 114 determines that the input value corresponding to the input button IB has been input, acquires the input value, and temporarily stores it in the storage unit 170 (step S17).

  Next, the processing unit 100 determines whether or not the password input has been completed (whether a predetermined number of input values have been acquired or an operation for instructing completion of the password input has been performed) (step S18). If the password input has not been completed (N in step S18), the process proceeds to step S10, and the processes in and after step S10 are repeated until the password input is completed.

  When the processing unit 100 performs user authentication after the password input is completed, the processing unit 100 stores an input password composed of a plurality of input values (temporarily stored in the storage unit 170). The user authentication is performed by determining whether or not it matches the registered password stored in 170. When the processing unit 100 does not perform user authentication (when the server performs user authentication), the processing unit 100 transmits the encrypted (hashed) input password to the server.

  In addition, this invention is not limited to the above-mentioned embodiment, A various change is possible. The present invention includes configurations that are substantially the same as the configurations described in the embodiments (for example, configurations that have the same functions, methods, and results, or configurations that have the same objects and effects). In addition, the invention includes a configuration in which a non-essential part of the configuration described in the embodiment is replaced. In addition, the present invention includes a configuration that exhibits the same operational effects as the configuration described in the embodiment or a configuration that can achieve the same object. Further, the invention includes a configuration in which a known technique is added to the configuration described in the embodiment.

100 processing unit, 110 display control unit, 112 input button control unit, 114 input processing unit, 160 input unit, 170 storage unit, 190 display unit, 196 communication unit

Claims (6)

An input device for entering a password,
A display control unit for displaying a plurality of input buttons displaying input values on a display screen of the display unit;
An input button control unit for erasing input values displayed on the plurality of input buttons and moving at least two of the input buttons to different positions on a display screen when a predetermined operation is performed by a user; ,
And an input processing unit that determines that an input value corresponding to the selected input button is input when an operation of selecting the input button is performed. In claim 1,
The input button control unit
An input device, wherein the input button is moved over a predetermined time. In claim 1 or 2,
At least a part of the plurality of input buttons has a feature that at least one of color, shape, pattern, image, and size can be distinguished from each other. An input device program for entering a password,
A display control unit for displaying a plurality of input buttons displaying input values on a display screen of the display unit;
An input button control unit for erasing input values displayed on the plurality of input buttons and moving at least two of the input buttons to different positions on a display screen when a predetermined operation is performed by a user; ,
A program that causes a computer to function as an input processing unit that determines that an input value corresponding to a selected input button is input when an operation of selecting the input button is performed.   A computer-readable information storage medium, wherein the program of claim 4 is stored. An input method for entering a password,
A display control step for displaying a plurality of input buttons on which input values are displayed on the display screen of the display unit;
An input button control step of erasing input values displayed on the plurality of input buttons and moving at least two of the input buttons to different positions on a display screen when a predetermined operation is performed by a user; ,
An input method comprising: an input processing step for determining that an input value corresponding to the selected input button is input when an operation for selecting the input button is performed.

Images