JPH06161592A - Device and method for inputting password number - Google Patents

Abstract

PURPOSE:To provide the practical method and device for inputting password number for which the degree of security is sufficiently high and the input operation of the password number is simplified as well. CONSTITUTION:A password number input device 1 is provided with a control circuit 3, IC card reader/writer 5 connected to the control circuit, ten-key 7 for number input, and display 9. An IC card 13 carried by a user previously stores the plural kinds of password numbers and when the IC card is fed to the reader/writer 5, the control circuit 3 selects one of plural password numbers from the ten-key 7 according to the instruction of the user and displays a message on the display 9 for pressing the input of that number. Next, when the user inputs the number from the ten-keys, the control circuit 3 compares the number with the selected password number and when they are coincident, the control, circuit judges the input of the right password number and permits the operation of operating equipment 15.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal identification number input device and a personal identification number input method for enabling a device requiring security to operate.

[0002]

2. Description of the Related Art ATMs at banks and locks for entry / exit gates
For devices that require security, such as systems,
A security system is widely used in which a user first inputs a personal identification number before operating it, and only when the personal identification number is the same as the predetermined number of the user, the operation of the device is permitted.

In such a system, in order to enhance the certainty of security, a plurality of personal identification numbers are set in advance,
It is publicly known that the operation of the device is allowed only when all of them are correctly input (Japanese Patent Laid-Open No. 3-697).
No. 80).

[0004]

Although the conventional input method that requires inputting all of a plurality of personal identification numbers is certainly high in security, the operation for inputting all the personal identification numbers is troublesome. Therefore, ATMs and gate locks
There is a problem that it is not practical in a system such as a system that is used by many people frequently.

Therefore, an object of the present invention is that the degree of security is sufficiently high and the operation of inputting a personal identification number is simple.
It is to provide a practical PIN input method and device.

[0006]

According to the present invention, in a personal identification number input device for determining whether or not a correct personal identification number has been input by a user, a storage means for storing a plurality of predetermined personal identification numbers unique to the user, and a storage means. Selecting means for selecting one of the plurality of PINs selected according to a user's instruction;
Display means for displaying to the user a message prompting the user to enter the selected personal identification number, input means for the user to input an arbitrary number, the number input from the input means, and the selected personal identification number. And a judgment means for judging that the correct personal identification number has been input when the two are coincident with each other.

[0007]

According to the user's instruction, one personal identification number is selected from a plurality of personal identification numbers stored in advance and unique to the user, and a message prompting the user to enter the personal identification number is displayed. The user inputs the designated personal identification number in response to this display. Then, the input number and the selected personal identification number are compared, and if they match, it is determined that the correct personal identification number has been input.

Since one personal identification number is selected from a plurality of personal identification numbers by a user's instruction, the personal identification number to be input can be changed depending on the occasion, and high security can be obtained. On the other hand, since the user's operation is only input of one type of personal identification number, the input operation is simple.

[0009]

1 is a block diagram of an embodiment of a personal identification number input device according to the present invention.

In FIG. 1, a personal identification number input device 1 has a control circuit 3 which is composed of, for example, a microcomputer for controlling the entire device, and the control circuit 3 communicates with an IC card 13 carried by a user. An IC card reader / writer 5, a numeric keypad 7 for the user to input a number, a display 9 for displaying an instruction message to the user, and an operating device (for example, an electric lock of the gate lock system) 15. An interface 11 for connecting is connected.

When inputting the personal identification number to the personal identification number input device 1, the user first has the IC card 13 possessed by the user.
Is fed to the IC card reader / writer 5. This I
The C card 13 has an IC memory 17 built-in.
In the C card memory 17, as shown in FIG. 2, a plurality of types of personal identification numbers, such as a telephone number, a business office code, a name code, etc., unique to the user, which are arbitrarily determined by the user, are stored in the storage area No. They are stored in 1, 2, and 3, respectively. This storage area No. In addition to the personal identification number, each of 1, 2, 3 stores character information such as "telephone number", "business code", and "name code" indicating the type of the personal identification number.

When the IC card 13 is fed to the reader / writer 5, the control circuit 3 controls the plurality of storage area numbers in the IC memory 17. A predetermined message for allowing the user to arbitrarily select one of 1, 2, 3, ... Is output to the display device 9. Seeing this message, the user inputs an arbitrary number using the ten-key pad 7. Then, the control circuit 3 reads the character information from the storage area selected by the number input by the user through the reader / writer 5, and uses the read character information (for example, when the storage area No. 1 is selected. The following instruction message is displayed on the display 9.

[Enter telephone number.] Next, the user inputs the instructed personal identification number from the ten-key pad 7 in accordance with this instruction message. Then, the control circuit 3
The personal identification number is read from the selected storage area of the C card 13, compared with the number input by the user, and if they match, the operation of the operating device 15 is permitted via the interface 11.

FIG. 3 shows a processing flow of the control circuit 3 in the above process.

When the IC card 13 is fed to the reader / writer 5, the control circuit 3 first checks whether or not the IC card 13 is correctly fed (S1). A message for allowing the user to arbitrarily select one of the storage areas in 17 is output to the display. Then, when the user inputs an arbitrary number (referred to as a password item number) from the ten-key pad 7 (S2), the control circuit 3 reads the character information from the storage area selected by the input password item number, A message prompting the input of the personal identification number selected using the character information is displayed on the display 9 (S3). After this, when the user inputs a number from the ten-key pad 7 (S4), the control circuit 3 reads the personal identification number from the selected storage area (S5) and compares it with the number input by the user (S4). S6). As a result, if they match, the control for activating the operating device 15 is started (S7).
On the other hand, if they do not match, the mismatch counter is incremented (S7), and it is checked whether or not the number of mismatches reaches a prescribed number, for example, 3 times (S8). As a result, if the number of times of disagreement has not yet reached 3, the IC card 13 is ejected (S9). However, the number of mismatches is 3
When the number of times is reached, the IC card 1 is passed through the reader / writer 5.
The personal identification number in the IC memory 17 of No. 3 is erased or rewritten to be a card that cannot be used thereafter (S10), and the card is ejected (S9). As a result, the unauthorized use of the IC card can be prevented not only in the system but also in other systems.

In order to further enhance security, FIG.
A process as shown in FIG. 4 may be added between the step S1 and the step S2.

That is, the card is correctly fed (S
1) After that, the date timer in the control circuit 3 checks whether or not the date has changed since the card was previously fed (S11). 1, NO. The personal identification number and the character information are read from 2 ... (S12), and this is written in a storage area different from the former to rearrange the correspondence between the storage area and the personal identification number and the character information (S13, S14). For example, if previously stored as shown in FIG. Name code “21489” for area No. 1 and area No. 2 is the telephone number "366806", area No.
3 is rearranged so that the office code “71224024” is stored respectively. By doing so, if the date of using the IC card is different, even if the same personal identification number item is input, the personal identification number to be input is different, so the security is further enhanced. This rearrangement process is performed when the number of input errors exceeds the determination number (S in FIG. 3).
8) Alternatively, it can be performed when the user desires.

Although a preferred embodiment of the present invention has been described below, the present invention is not limited to this embodiment and can be implemented in various modified modes. For example, in the above-described embodiment, the personal identification number of the user is stored in the IC card possessed by the user, and the personal identification number input device uses the IC.
Although the personal identification numbers are read from the card, an embodiment is possible in which a database storing the personal identification numbers of all users is provided on the personal identification number input device side, and the user side does not have a medium storing the personal identification numbers. Is.

Further, an embodiment is possible in which the IC card is provided with a function of collating the personal identification number so that the personal identification number in the IC card is not read out.

[0020]

As described above, according to the present invention,
Since one of a plurality of personal identification numbers is selected according to the user's instruction and the user is prompted to enter it, the security level is high in that the personal identification number to be entered is not fixed, and the user can use only one type of personal identification number. The operation is simple and convenient because you only have to enter the password.

[Brief description of drawings]

FIG. 1 is a block diagram showing an embodiment of a personal identification number input device according to the present invention.

[FIG. 2] An IC in which a plurality of personal identification numbers are stored in an IC card
Memory map.

FIG. 3 is a flowchart showing the processing of the control circuit of FIG.

FIG. 4 is a flowchart showing additional processing that can be added to the flowchart of FIG.

[Explanation of symbols]

 1 PIN Input Device 3 Control Circuit 5 IC Card Reader / Writer 7 Numeric Keypad 9 Display 11 Interface 13 IC Card 15 Operating Device 17 IC Memory

Claims (2)

[Claims] 1. A personal identification number input device for determining whether or not a correct personal identification number has been input by a user, and a storage means for storing a plurality of predetermined personal identification numbers unique to the user, and the stored personal identification numbers among the plurality of stored personal identification numbers. Selecting means for selecting one of the passwords in accordance with a user's instruction, displaying means for displaying a message prompting the user to input the selected personal identification number, input means for the user to input an arbitrary number, A personal identification number input device comprising: a number input from an input unit and the selected personal identification number; and a determination unit that determines that a correct personal identification number has been input when they match. 2. A method for determining whether or not a correct personal identification number has been input by a user, the process of selecting one of a plurality of predetermined personal identification numbers according to the user's instructions, and the selected personal identification number. A PIN code including a step of presenting a message prompting the user to input the password and a step of determining whether or not the correct PIN code has been input by comparing the PIN code input by the user with the selected PIN code. Judgment method.