JP4251715B2 - PIN code confirmation method and apparatus - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a method for confirming a personal identification number, and more particularly, to a method for reducing the probability of being decrypted by another person without increasing the number of digits of the personal identification number that a user should remember.
[0002]
[Prior art]
In recent years, bank transactions and the like have been automated, unmanned, or networked, and there are increasing opportunities for users and machines to interface with each other.
For example, when a depositor (user) withdraws cash using an ATM (automatic cash withdrawal / deposit device), the person is confirmed by a personal identification number.
In general, while a card such as a cash card is used, a password provided with a 4-digit number corresponding to the user information recorded on the card is determined in advance by the user, and the service provider side database. And confirming the identity by entering the number.
Such identification method using personal identification number is widely used as a password input at the time of login in network communication, and security measures using personal identification number and password will become more popular in the future when electronic money age comes. It is considered a thing.
[0003]
FIG. 7 is a schematic diagram showing a configuration example of a PIN code input interface for realizing a conventional PIN code confirmation method. For example, a display 1 provided on a panel surface such as an ATM and an input switch button are arranged side by side. The input key 2 is provided.
The input screen displayed on the display 1 has four-digit number input frames 3 arranged in a horizontal line, and the input key 2 includes numbers 0 to 9, currency unit buttons not shown, and cursor movement. Switch buttons are provided as needed, such as arrow buttons for use.
In addition, in an apparatus such as an ATM equipped with a touch panel type display 1, the function part of the input key 2 is generally provided in the input screen.
[0004]
The interface shown in this figure functions as follows to realize a password verification method. In other words, when inputting the password, the user inputs the registered password in order from the left of the 4-digit number input frame 3 using the input key 2.
When a personal identification number is input, an ATM device reads the personal identification number corresponding to the user's account number (user information) from the personal identification number database, and the registered personal identification number and the input personal identification number Are compared, the identity is authenticated and the process proceeds to the next stage.
[0005]
In such a conventional method of confirming a personal identification number, a user only needs to remember a four-digit number registered in advance, and often selects a number that is difficult to forget. However, all 1 and serial numbers such as 1234 are too simple, and there are cases where attention is urged to avoid from the service provider side (bank or the like).
Therefore, in general, a combination of numbers that have some kind of causal relationship related to the user's own personality is selected.
For example, it is expected to select a date associated with a date of an anniversary, a name associated with a name match, or a combination of numbers such as a telephone number.
[0006]
[Problems to be solved by the invention]
However, the above-described conventional personal identification number confirmation method has the following problems. In other words, if a user steals or loses a cash card, etc., and the card is in the hands of a malicious third party, the malicious third party collects the personal information of the owner (user), The password can be predicted as described above. Furthermore, if the user steals a four-digit number in advance, it can no longer be protected from fraudulent property.
[0007]
The present invention has been made to solve such problems, and a password that increases the strength (security) of personal authentication without increasing the number of digits that the user remembers as the password. The purpose of providing a confirmation method is to prepare multiple input patterns on the device side so that even if the number itself, which is the password, is revealed to a third party, it will not be immediately decoded. In this input procedure, we propose a method for confirming the PIN number that leads to authentication only when the input is made in a pattern that only the user knows.
[0008]
[Means for Solving the Problems]
In order to solve the above problems , the present invention uses the following means.
[0011]
(1) A method of confirming a personal identification number according to the present invention is to enter a multi-digit number or character as a personal identification number, determine whether or not this matches a predetermined number, and perform the required processing. In the confirmation method,
Display matrix entry column in which a plurality of squares in vertical and horizontal, as a predetermined, in steps of inputting a corresponding PIN choose any one of the squares in the matrix entry field is displayed The number of cells is larger than the number of digits of the password, and the password is entered with a blank space between them, and the password is entered in sequence , and when the password is confirmed, the entered password is entered. It is characterized in that it is confirmed whether or not the positions of the cells on the matrix are as set in advance.
[0012]
(2) A method for confirming a personal identification number according to the present invention is to enter a multi-digit number or character as a personal identification number, determine whether this matches a predetermined number, and perform the required processing. In the confirmation method,
Display matrix entry column in which a plurality of squares in vertical and horizontal, as a predetermined, in steps of inputting a corresponding PIN choose any one of the squares in the matrix entry field is displayed The number of cells is larger than the number of digits of the password, and the password is entered with a blank space between them, and the password is entered in sequence , and when the password is confirmed, the entered password is entered. And the position of the cells on the matrix and the order of the cells that have been input are confirmed in advance.
(3) In the method of (1) or (2),
A plurality of digits can be input to one of the cells.
[0013]
(4) The personal identification number confirmation device according to the present invention performs a required process by determining whether or not a personal identification number consisting of a plurality of characters input by a user matches a predetermined number. In the PIN confirmation device,
Display means for displaying a matrix entry field in which a plurality of cells are arranged vertically and horizontally;
In the procedure for selecting one of the 枡 in the matrix entry field and entering the corresponding PIN, the number of cells to be displayed is greater than the number of digits of the PIN, and the PIN is entered with a blank 枡Input means to
Storage means for storing the character of the input PIN number, the position of the cell where it is input, and the input order;
A comparison means for comparing whether or not the character of the input code number, the position of the cell and the input order match a predetermined one;
Judgment means for judging that the code number is correct only when they coincide with each other is provided.
(5) In the device of (4),
A plurality of digits can be input to one of the cells.
[0015]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, the present invention will be described in detail based on the illustrated embodiment.
FIG. 1 is a schematic block diagram showing an embodiment of a PIN code input interface for realizing a PIN code confirmation method according to the present invention. A display 1 for displaying an input frame 3 and an input key 2 having numbers 0 to 9 and an arrow button for moving a cursor (active cell).
[0016]
The apparatus shown in this figure functions as follows to realize a password verification method. For example, assume that a two-digit password “99” is determined for the sake of simplicity.
First, when registering the personal identification number, the personal identification number determined by the user is entered in a 2 × 2 grid-like input frame shown in the figure.
In this case, the combination of putting a two-digit decimal number one by one in the four squares is
₄ C ₂ × 100 = 600
Thus, there are 100 combinations of two decimal digits from 00 to 99, but 600 patterns are possible by considering the pattern of inputting two numbers in the above-mentioned grid.
[0017]
The number input method will be described in detail with reference to FIG.
FIG. 2 is a diagram showing two input procedures when the same password “99” is input in the same grid in different orders.
In FIG. 2A, 9 is first input into the cell of coordinates (a, c), and then 9 is input into the cell of coordinates (a, d).
In FIG. 2B, 9 is first input into the cell of coordinates (a, d), and then 9 is input into the cell of coordinates (a, c).
As described above, even when the two-digit number “99” of the same personal identification number is input, the order of inputting the squares is also set as the personal identification number determination requirement, so that the procedure (A) and the procedure of FIG. As a result, it is the same as (B), but since the order in which the numbers are input is different, it is considered that the passwords do not match.
Therefore, even if the two-digit number is known, there are 12 input methods in consideration of the permutation, and the decoding rate can be reduced to 1/12.
[0018]
FIG. 3 is a diagram for explaining another embodiment of the present invention, in which a four-digit code number “1234” is entered in an input frame consisting of a plurality of squares in the vertical and horizontal directions and its position. Shows a case where the personal identification number is determined by. (In this example, the input order of passwords is not considered.)
FIG. 3A is a diagram in the case where the input frame is a 4 × 4 cell, and the user registers and inputs the PIN numbers in the row direction (right arrow direction), and FIG. FIG. 10 is a diagram when the input frame is a 4 × 5 cell and the user inputs the registration numbers side by side in the column direction (down arrow direction). Even with the same four-digit number, there are 1820000 input methods in the former case and 48450,000 input methods in the latter case, and the decoding rate can be significantly reduced.
That is, the encryption strength (security) increases as the number of rows and columns of the input frame displayed by a device such as ATM increases.
[0019]
FIG. 4 is a diagram for explaining still another embodiment for identifying a four-digit password “1234” including an input order in an input frame made up of a plurality of cells vertically and horizontally. is there. That is, it is a case where a personal identification number is determined by the number of the input number, its position, and the input order.
In FIG. 4A, the input frame is a 4 × 4 cell, and the registered password as shown on the left side of the figure is “▲ 1 ▼ ▲ 2 ▼ ▲ 3 ▼ ▲ 4. ””, But the order of input at the time of registration is “▲ 2 ▼ → ▲ 3 ▼ → ▲ 1 ▼ → ▲ 4 ▼”, and the entered PIN number “▲ 1 ▼ → ▲ 2” on the right side of the figure. ".Fwdarw..fwdarw..fwdarw.3.fwdarw..fwdarw.4""is determined to be inconsistent because the number and the input position match but the input order is different.
In FIG. 4B, the input frame is a 5 × 4 cell, and the order of input is different as in the case of (A) described above. In this way, considering the input order, even with the same 4-digit number, there are 43680000 input methods in the former case and 1062800000 input methods in the latter case, and the decoding rate can be dramatically reduced.
[0020]
In addition, given that there are elderly people among users, the examples shown in FIGS. 3 and 4 are complicated, and even if you can remember the 4-digit numbers, remembering a complicated pattern It will be difficult.
[0021]
Therefore, as shown in FIG. 5, it is considered that many users register and set them vertically, horizontally, or diagonally. Even with this combination alone, there are 20 ways, and even if a 4-digit number is known to a third party, the decoding rate can be lowered.
The example shown in FIG. 5 is a 4 × 4 grid-shaped input frame 3 (matrix frame) displayed on the input screen, and numeric buttons 0 to 9 for entering numbers in the input frame 3 and grids. And an arrow button for selecting.
[0022]
The personal identification number confirmation method shown in this figure functions as follows. That is, the user selects a four-digit number as the password and registers it with the service provider in advance. A specific example of the number registration procedure will be described. For example, when a user registers a personal identification number with a terminal device such as an ATM, the cash card in which user information such as an account number is recorded and a contractor card for contract proof are stored in the ATM. Insert and open the PIN registration menu.
For example, it is assumed that the user decides the password “9935” in association with the birthday of his child (March 5, 1999).
As shown in FIG. 5, a 4 × 4 grid-like input frame 3 is provided on the ATM screen. The user moves from the upper left to the lower right of the input frame 3 in an oblique manner, “▲ 9 ▼ → ▲ 9”. The password has been registered by entering “▼ → ▲ 3 ▼ → ▲ 5 ▼”. The number of the input password, the position on the input frame, and the input order are registered as a password in the service provider password database.
Thereafter, when the user uses the ATM to withdraw or withdraw cash, the cash card is inserted into the ATM as in the conventional case, and the registered password is entered to confirm the identity. At this time, if the password entered is the same as the registered one, the same number, the same position, and the same order, it will be determined to match, and the ATM will authenticate the user and proceed to the next process. , Cash in and out.
[0023]
As still another embodiment, the present invention can be applied to a mode in which a multi-digit number is input in one square of the input frame. This case will be described with reference to FIG.
FIG. 6 is a diagram showing a case where four-digit password numbers a, b, c, and d are determined and entered into a 1 × 2 grid-like input frame. Here, one cell is shown as (x) and the other as (y).
That is, this is a case where one cell in the input frame has a plurality of input hierarchies.
FIG. 6 (A) shows a case where the passwords are confirmed by sequentially inputting the password numbers a and b into the cell x and then sequentially inputting c and d into the other cell y.
In FIG. 6 (B), after inputting the password a to the cell x, b is input to the cell y, then the code c is input again to the cell x, and finally the cell d is applied to the cell y. This is a case where the password is confirmed by inputting.
FIG. 6C shows a case where the passwords a, b, and c are sequentially input to one cell x and then the password is confirmed by inputting d to the other cell y. .
As described above, even if the number of cells displayed in the input frame is smaller than the number of digits of the code number, the characters of the entered code number, the position of the cell, and the input order should be judged. As a result, the input pattern can be diversified, and the decoding rate can be reduced.
[0024]
In the embodiment of the present invention described above, an example of an automatic bank transaction form using a device such as an ATM has been shown. However, the present invention is not limited to this example. When entering electronic money via the network, the input frame when confirming the password is configured to display multiple squares in the vertical and horizontal directions and make the number / character, input position, and input order as judgment requirements. May be. According to this, the password strength of the password can be increased without increasing the number of digits or characters used for the password, and the safety can be improved.
In addition, when entering the PIN, if the individual boxes in the input frame are color-coded in stages according to the input status, the user can grasp his / her input history, so that the PIN can be entered incorrectly. Would be effective to avoid. For example, if there is a 2-digit input layer in one cell, when there is no input, a white cell is selected, and when the cell is selected and activated, the frame is highlighted or white / black is flashed in reverse. When the number (first digit) is input by the user, the color may change to light blue, and when the number (second digit) is further input, the color may change to dark blue.
[0025]
As described above, the personal identification number confirmation method according to the present invention can reduce the probability of being decrypted by a third party without increasing the number of digits of the personal identification number to be remembered.
[0026]
【The invention's effect】
As described above, the password confirmation method according to the present invention is provided with a plurality of grid-like input frames in the vertical and horizontal directions, giving a degree of freedom of a plurality of input patterns in the input frames, and the password entered by the user. Since the number / letter itself, the input position (coordinates), and the input order are the criteria for determining the PIN, the password strength is strengthened without increasing the number of digits of the PIN that the user should remember. The method for confirming the personal identification number can be realized.
[Brief description of the drawings]
FIG. 1 is a functional outline diagram showing an embodiment of a password confirmation method according to the present invention.
FIG. 2 is a diagram showing a simplified example of a procedure for inputting a personal identification number according to the present invention.
FIG. 3 shows an example of a procedure when the input order of passwords according to the present invention is not considered.
FIG. 4 shows an example of a procedure when the input order of passwords according to the present invention is taken into consideration.
FIG. 5 is a schematic diagram showing another embodiment of a password confirmation method according to the present invention.
FIG. 6 shows an example of a procedure when the number of cells according to the present invention <the number of digits of the code number.
FIG. 7 is a functional schematic diagram showing an example of a conventional password confirmation method.
[Explanation of symbols]
1 ... Display 2 ... Input key 3 ... Input frame

Claims (5)

In the method of confirming a PIN code when inputting a multi-digit number or character as a PIN code, determining whether or not this matches a predetermined number, and performing a required process,
Display matrix entry column in which a plurality of squares in vertical and horizontal, as a predetermined, in steps of inputting a corresponding PIN choose any one of the squares in the matrix entry field is displayed The number of cells is greater than the number of digits of the password, and the password is entered with a blank space between them, and the password is entered in sequence , and when the password is confirmed, the entered password is entered. And a method of confirming a personal identification number, wherein it is confirmed whether or not the positions of the cells on the matrix are as set in advance. In the method of confirming a PIN code when inputting a multi-digit number or character as a PIN code, determining whether or not this matches a predetermined number, and performing a required process,
Display matrix entry column in which a plurality of squares in vertical and horizontal, as a predetermined, in steps of inputting a corresponding PIN choose any one of the squares in the matrix entry field is displayed The number of cells is greater than the number of digits of the password, and the password is entered with a blank space between them, and the password is entered in sequence , and when the password is confirmed, the entered password is entered. And confirming whether or not the position of the cells on the matrix and the order of the input cells are as set in advance.   The method of confirming a personal identification number according to claim 1 or 2, wherein a multi-digit number can be input to one of the cells. In the personal identification number confirmation device for determining whether or not the personal identification number consisting of a plurality of digits input by the user matches a predetermined one,
Display means for displaying a matrix-like entry field in which a plurality of cells are arranged vertically and horizontally;
In the procedure for selecting any one of the matrix entries in the matrix entry field and entering the corresponding password, the number of cells to be displayed is greater than the number of digits of the password, and the password is entered with a blank space Input means to
Storage means for storing the character of the input PIN number, the position of the cell where it is input, and the input order;
A comparison means for comparing whether or not the character of the input code number, the position of the cell and the input order match a predetermined one;
A password verification apparatus comprising: a determination unit that determines that the password is correct only when they match.   5. The personal identification number confirmation apparatus according to claim 4, wherein a multi-digit number can be input to one of the cells.

Images