JP4771733B2 - User authentication method - Google Patents

Description

  The present invention relates to a user authentication method, and more particularly to the security of user authentication for authenticating a user based on a password input by the user.

In the user authentication for authenticating the user based on the password input by the user, a technique for improving the security of the user authentication has been conventionally known (see Patent Document 1 below).
The technique described in Patent Document 1 changes a password according to a specific calculation formula, inputs the changed password, and performs user authentication. Here, specific calculation formulas are registered in advance.

As prior art documents related to the invention of the present application, there are the following.
Special Table 2004-529422 (P2004-529422A)

However, in the technique described in Patent Document 1 described above, if the values used for the calculation are the same, the password of the calculation result is the same as the previous input password.
Therefore, when the password of the calculation result is leaked, there is a problem that it is possible to impersonate a legitimate user by using the leaked password.
The present invention has been made to solve the problems of the prior art, and an object of the present invention is to automatically start from the previously entered password in user authentication for authenticating the user based on the password entered by the user. It is an object of the present invention to provide a technique for improving the safety of user authentication by using a changed password.
The above and other objects and novel features of the present invention will become apparent from the description of this specification and the accompanying drawings.

Of the inventions disclosed in this application, the outline of typical ones will be briefly described as follows.
In order to solve the above-described problems, the present invention provides a user authentication method for authenticating a user based on a password input by the user, and includes a registered password, an automatic change item, and an automatic change correction value in the system. a storage storing means, the password generating and user authentication means for authenticating the user generates the automatic change password provided, said password generating and user authentication means, the registration password stored in the storage means, the user Step 1 for acquiring the password input this time and the password previously input by the user, Step 2 for generating an automatic change password based on the registered password and the automatic change item, and the automatic change password generated in Step 2 And step 3 for comparing the previous password entered by the user, and step 3 As a result of the comparison, if the automatic change password generated in step 2 and the password previously input by the user do not match, the automatic change password generated in step 2 matches the password input by the user this time. If the result of the comparison in Step 4 is the same as the result of the comparison in Step 4 and the password that the user previously entered matches And a step 5 for generating a corrected automatic change password based on the automatic change password generated in the step 2 and the automatic change correction value. The corrected automatic change password generated in the step 5 Step 6 for determining whether or not the entered password matches, and authenticating the user if they match Characterized in that that.
In the present invention, an automatic that before and automatic change item stored in the device憶means, and an automatic change correction value, the user is provided with means capable of arbitrarily registered, modified, or deleted, is generated at step 2 The change password and the corrected automatic change password generated in step 5 can be changed .

The effects obtained by the representative ones of the inventions disclosed in the present application will be briefly described as follows.
According to the present invention, in the user authentication for authenticating the user based on the password entered by the user, the password automatically changed from the previously entered password is used, so that the security of the user authentication can be improved. It becomes.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
In all the drawings for explaining the embodiments, parts having the same functions are given the same reference numerals, and repeated explanation thereof is omitted.
FIG. 1 is a block diagram showing a schematic configuration of an automatic transaction system to which a user authentication method according to an embodiment of the present invention is applied.
The automatic transaction system shown in FIG. 1 includes an automatic transaction apparatus 1 that performs transactions in an interactive manner with a user, and a host 2 that controls the automatic transaction apparatus 1. The automatic transaction apparatus 1 and the host 2 are connected via the network 3 and communicate.
1-1 is a block diagram showing a schematic configuration of the automatic transaction apparatus 1 shown in FIG.
The automatic transaction apparatus 1 is connected to an operation input unit 5 that is a part for a user to input a password, an item that automatically changes (transaction data), a display unit 6 that provides operation guidance to the user, and a network 3. The host 2 and the connection unit 7 that transmits passwords, the recording unit 8 that records programs for processing control, and the control unit 4 are included.

FIG. 1-2 is a block diagram showing a schematic configuration of the host 2 shown in FIG.
The host 2 includes a connection unit 10 connected to the network 3, a control unit 9, and a recording unit 11.
Transaction data from the automatic transaction apparatus 1 is notified to the connection unit 10 of the host 2 via the connection unit 7 of the automatic transaction apparatus 1 and the network 3. With this transaction data notification, the control unit 9 that controls the entire host stores the transaction data in the recording unit 11. Moreover, transaction data is acquired from the recording part 11 and user authentication is performed.
FIG. 2 is a diagram showing a password input screen 20 displayed on the display unit 6 of the automatic transaction apparatus 1 when performing user authentication in the automatic transaction apparatus 1 shown in FIG. 1-1.
By pressing a numeric input key 22 from 0 to 9, a password is input and the input state is displayed in the display area 21. By pressing the confirmation key 23, the password to be entered can be confirmed.

FIG. 3 is a diagram for explaining a conventional user authentication method and a user authentication method according to the present embodiment.
As shown in FIG. 3, conventionally, the user authentication is performed based on whether or not the input password 30 input by the user from the automatic transaction apparatus 1 matches the registered password 31 recorded in the recording unit 11 of the host 2. I do.
On the other hand, in this embodiment, instead of the registration password 31, the registration password 31 recorded in the recording unit 11 of the host 2, the automatic change item 32, the automatic change password 34 created by the automatic change correction value 33, The user is authenticated based on whether or not the input password entered by the user from the automatic transaction apparatus 1 matches.
Thereby, leakage of the registered password and use of the password by another person can be prevented.

FIG. 4 is a diagram showing an automatic change item setting screen 40 displayed on the display unit 6 when setting an automatically changing item in the automatic transaction apparatus 1 shown in FIG.
By pressing and selecting one of the automatic change item keys 41, an automatically changing item can be registered / changed in the recording unit 11 of the host 2 as shown in FIG.
By pressing the delete key 42, the automatically changing items can be deleted from the recording unit 11 of the host 2.

FIG. 6 is a flowchart showing a user authentication processing procedure performed by the host 2 shown in FIG.
Hereinafter, the user authentication processing procedure performed by the host 2 will be described with reference to FIG.
The control unit 9 of the host 2 acquires transaction data such as a registration password input by the automatic transaction apparatus 1 from the recording unit 11, a password input by the user, and items that change automatically. (Step 601).
Next, an automatic change password is created based on the acquired transaction data (step 602).
Next, the password input by the user is compared with the automatic change password (step 603).
If the comparison results are equal, it is determined that the authentication has succeeded, and processing upon success is performed (step 604). If the comparison results are not equal, it is determined that the authentication has failed, and processing at the time of failure is performed (step 605).

FIG. 6A is a flowchart of an example of the automatic change password creation processing procedure in step 602 of FIG.
Hereinafter, the processing procedure of step 602 in FIG. 6 will be described with reference to FIG.
The host 2 obtains a registration password, a password that the user has entered this time, and a password that the user has previously entered from the recording unit 11 as a four-digit password. The correction value and the addition instruction are acquired.
The control unit 9 of the host 2 adds each digit of the month and day to the registered password and sets the last one digit of each digit as the value of each digit to create a password for authentication (automatic change password) ( Step 611).
For example, if the registration password is “7890” and the date is “January 25”, the password for authentication is “7915”.
Next, it is determined whether the created password is the same as the previously entered password (step 612).
If the comparison results are equal in step 612, it is determined that correction is necessary, and the result of adding the correction value to the created password is used as the authentication password (step 613). Here, each digit of the correction value is added to the created password, and the last one digit of the addition result of each digit is used as the value of each digit to create a password for authentication by adding the correction value.
For example, when the correction value is “0008”, the password for authentication including the correction value is “7913”. Here, the correction value is the number of transactions on the month.
If the comparison results are not equal in step 612, it is determined that correction is unnecessary, the created password is set as the authentication password (step 614), and the authentication password is registered as the previous input password (step 615). The correction value is updated and registered (step 616).

FIG. 7 is a flowchart showing a processing procedure for automatically changing items set in the host 2 shown in FIG.
Hereinafter, a processing procedure for setting an automatically changing item performed in the host 2 will be described with reference to FIG.
The control unit 9 of the host 2 acquires the transaction data of the automatically changing item selected by the automatic transaction apparatus 1 from the recording unit 11. (Step 701).
It is determined whether or not the acquired transaction data setting method is automatic change item selection (step 702). If the result of determination in step 702 is not automatic change item selection, it is determined to be deleted and processing at the time of deletion is performed (step 703).
If the result of determination in step 702 is automatic change item selection, it is determined whether or not the automatic change item is unregistered (step 704). If the result of determination in step 704 is not unregistered, it is determined to be updated, and processing at the time of update is performed (step 705).
If the result of determination in step 704 is unregistered, it is determined to be registered and processing at the time of registration is performed (step 706).

As described above, according to the present embodiment, by inputting a password (automatic change password) different from the registered password, even if the entered password is leaked, the registered password is not leaked.
Also, by entering automatically changing items and automatically changing passwords created with registered passwords, even if the entered password is leaked, the next time you enter a password that is different from the leaked password, and the leaked password Can be prevented from being used. For this reason, it is possible to prevent the use of a leaked password and improve the reliability of user authentication.
In the above description, the embodiment in which the present invention is applied to the automatic transaction system has been described. However, the present invention is not limited to this, and other information systems such as a personal computer and an authentication server can be used. Applicable.
As mentioned above, the invention made by the present inventor has been specifically described based on the above embodiments. However, the present invention is not limited to the above embodiments, and various modifications can be made without departing from the scope of the invention. Of course.

It is a block diagram which shows schematic structure of the automatic transaction system to which the user authentication method of the Example of this invention is applied. It is a block diagram which shows schematic structure of the automatic transaction apparatus shown in FIG. It is a block diagram which shows schematic structure of the host shown in FIG. In the automatic transaction apparatus shown in FIG. 1-1, when performing user authentication, it is a figure which shows the password input screen displayed on the display part of an automatic transaction apparatus. It is a figure for demonstrating the conventional user authentication method and the user authentication method of a present Example. It is a figure which shows the automatic change item setting screen displayed on a display part, when setting the item which changes automatically in the automatic transaction apparatus shown to FIGS. 1-1. It is a figure which shows an example of the automatic change item information memorize | stored in the recording part of the host shown in FIG. It is a flowchart which shows the process sequence of the user authentication performed by the host 2 shown to FIGS. 1-2. It is a flowchart which shows an example of the automatic change password creation process procedure of step 602 of FIG. It is a flowchart which shows the process sequence of the setting of the item which changes automatically performed with the host shown to FIGS.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Automatic transaction apparatus 2 Host 3 Network 4, 9 Control part 5 Operation input part 6 Display part 7,10 Connection part 8,11 Recording part 20 Password input screen 21 Password input status display area 22 Number input key 23 Confirmation key 30 Input password 31 Registration Password 32 Automatic Change Item 33 Automatic Change Correction Value 34 Automatic Change Password 40 Automatic Change Item Setting Screen 41 Automatic Change Item Selection Key 42 Delete Key

Claims (2)

A user authentication method for authenticating a user based on a password entered by the user,
In the system, a storage means for storing a registered password, an automatic change item, and an automatic change correction value ;
The password generation user authentication unit configured to authenticate a user to generate a automatic change password provided,
Step 1 in which the password generation / user authentication means acquires a registered password stored in the storage means, a password that the user has entered this time, and a password that the user has previously entered;
Generating an automatic change password based on the registered password and the automatic change item;
Step 3 for comparing the automatically changing password generated in Step 2 with the password previously entered by the user;
If the automatic change password generated in step 2 and the password previously input by the user do not match as a result of the comparison in step 3, the automatic change password generated in step 2 and the password input by the user this time Step 4 for determining whether or not and a user is authenticated if they match,
As a result of the comparison in Step 3, when the automatic change password generated in Step 2 matches the password previously input by the user, the automatic change password generated in Step 2 and the automatic change correction value And generating a corrected automatic change password based on
A user authentication method comprising: determining whether or not the corrected automatic change password generated in step 5 matches the password input by the user this time, and authenticating the user if they match . An automatic change items stored before crisis憶means, and an automatic change correction value, a means can be arbitrarily registered, modified, or deleted by the user is provided,
The user authentication method according to claim 1, characterized in that an automatic change password generated in step 2, and correcting the automatic change password generated in the Step 5 can be changed.

Images