JPS63291153A - Personal certifying device - Google Patents

Abstract

PURPOSE:To improve safety by recording a part or all of the contents of the answer of a collated person to a question. CONSTITUTION:A terminal equipment 1 is composed of a control part 11 to control the whole of the terminal equipment 1, a displaying part (instruction means) 12 of a CRT display to display a question, etc., and a keyboard (answer input means) 13 as an answer input part to input the answer to the question. A host computer 2 is composed of a main control part 21 to control the whole of the host computer, a personal data base part (registration means) 22a to register personal data beforehand, a question asking part (generating means) 22, an answer receiving part 23, a deciding part (collating means) 24 and a recording part (recording means) 25 of a memory, etc. Thus, the safety can be improved.

Description

[Detailed Description of the Invention] [Objective of the Invention] (Industrial Application Field) This invention is for determining whether a person is qualified for the right to use a computer terminal, etc., or the right to enter a special room. The present invention relates to a personal authentication device.

(Prior Art) For example, consider a case where a computer terminal is used. First, a person wishing to use a computer must first register a user name with the system administrator. From then on, you will be able to log in (connect the communication line; log on) from the terminal, but at this time, use a password to prevent unauthorized login by anyone other than yourself. This password is usually about 5 to 10 alphanumeric characters.

The password must be determined by the user himself/herself and must be memorized so that it is not known to others.

However, because the above-mentioned password verification alone is insufficient in terms of security, personal information (date of birth, parents' names, favorite foods, etc.) is registered in advance, and the system It has been proposed that users be asked questions regarding this information, and if a sufficient answer is obtained, they will be allowed to log in.

However, the above-mentioned devices do not record questions based on registered personal information and the responses of the person to be verified to those questions. The content of the questions was not changed based on the results, which posed a safety issue.

(Problems to be Solved by the Invention) As mentioned above, this invention eliminates the drawback that there is a problem in terms of safety because the results of questions and answers during the previous confirmation were not recorded. The purpose is to provide a personal authentication device that can improve safety.

[Structure of the Invention] (Means for Solving the Problems) The personal authentication device of the present invention includes registration means for registering information about an individual in advance as an interactive question, and registering an answer to the question in advance; An instruction means for instructing to input an answer to the interactive question retrieved by the registration means, an answer input means for inputting an answer to the above question based on the instruction of the instruction means, an answer input by the answer input means and the above. It is comprised of a collation means for collating the answer with the answer registered in the registration means, and a recording means for recording part or all of the contents of the answer input by the answer input means.

(Operation) This invention records part or all of the contents of the person to be verified's answers to the questions.

(Example) Hereinafter, an example of the present invention will be described with reference to the drawings.

FIG. 1 shows a system in which an interactive question-and-answer session involving the personal authentication device of the present invention can be performed. It consists of

The terminal device 1 includes a control section 11 that controls the entire terminal device 1.
, a display section (instruction means) 12 such as a CRT display on which questions and the like are displayed, and a keyboard (answer input means) 13 as an answer input section for inputting answers to the questions.

The host computer 2 includes a main control unit 21 that controls the entire host computer 2, and a personal database unit (registration means) 22a in which personal data is registered in advance.
, a question generating section (generating means) 22, an answer receiving section 23, a determining section (verifying means) 24, and a recording section (recording means) 25 such as a memory.

The personal database section 22a contains pre-registered personal data, that is, information known only to the individual based on the individual's knowledge (date of birth, parents' names, favorite food, etc.)
are registered in advance as a personal database in the form of questions and answers. The above-mentioned personal data can be answered immediately by the individual, but it is difficult for others to know or remember. The above personal data is
The information is stored in correspondence with the user name of each registrant (user).

The above personal data is registered by a request to the administrator of the host computer 2 from a person who wishes to use the terminal. The registered personal data can be freely changed, added to, or deleted from the terminal 1 by the registrant.

The question generating section 22 includes the personal database section 22a.
generates interactive questions based on personal data registered in advance in It is. The questions generated by the question generation section 22 are output to the control section 11 in the terminal 1, and the answers corresponding to the questions are output to the determination section 24.

The above-mentioned new questions include changing the order of the questions, changing the wording of the questions, increasing or decreasing the number of questions, and asking questions that were answered incorrectly last time.

The answer receiving section 23 receives the answer supplied from the control section 11 in the terminal 1 and outputs it to the determining section 24 .

The determination unit 24 determines the individual's answer to the question and the terminal device 1.
The system compares and verifies the answers input by the user and authenticates the individual depending on whether predetermined criteria are met.

In other words, questions are presented one after another, and only those who can answer these questions correctly are judged to be the real person. Figure 2 shows an example of the question. In this case, if all the answers are correct, it is determined that the person is the real person.
Or, if the number of incorrect answers is less than a certain number, it is determined that the person is the person.
Furthermore, a determination method such as determining that the person is the person when the number of correct answers is a certain number or more can be considered.

The recording unit 25 records questions generated by the host computer 2 and the order, content, response time, etc. of answers to those questions. This recorded content can also be used to analyze the cause of an accident.

Next, the operation in the above configuration will be explained. For example, now the user (person to be verified) requests (desires) to log in.
When doing so, the user inputs the user name using the keyboard 13 of the terminal 1. Then, the user name as this request signal is output from the control section 11 to the main control section 21 in the host computer 2. Thereby, the main control unit 21 causes the question generation unit 22 to sequentially generate a plurality of interactive questions regarding personal data registered in advance in the personal database unit 22a in correspondence with the user name, and outputs them to the control unit 11. . Further, the question generating section 22 outputs answers to each of the above questions to the determining section 24.

The control unit 11 then displays the supplied question on the display unit 1.
Display in 2. The user uses the keyboard 13 to input an answer to the displayed question. This answer is
The control unit 11 supplies the answer to the determination unit 24 via the response reception unit 23 . As a result, the determination unit 24
The individual's answer to the question from the terminal 1 is compared and verified with the answer input on the terminal 1 side, and the individual is authenticated depending on whether or not a predetermined standard is satisfied.

As a result of this personal authentication, it is determined that the user of the terminal 1 is the registrant, and based on this determination result, the main control unit 21
outputs login permission to the control unit 11 in the terminal 1 and performs login (line connection) with the terminal 1.

As a determination result by the determination section 24, the questions that have occurred and the order, content, response time, etc. of answers to those questions are recorded in the recording section 25.

Further, the question generating section 22 generates a new question by referring to the contents (order, contents, response time) of past questions and their answers recorded in the recording section 25. That is, the order of the questions may be changed, the wording of the questions may be changed, the number of questions may be increased or decreased, or questions that were answered incorrectly last time may be given priority. As a result, the content of the current question is changed according to the results of the questions and answers from the previous confirmation (see ), so if the previous personal authentication is suspicious, the question can be changed. can improve safety.

In addition, in the above embodiment, the case where all the contents of the answers to the questions (order, content, response time) are recorded in the recording section is explained, but the present invention is not limited to this. You may also record it.

In addition, although we have explained the case where the above past questions and the contents of the answers corresponding to the questions are recorded in the recording section provided on the host computer side, the present invention is not limited to this. The data may be recorded on an IC card, memory card, or magnetic card (portable medium). In this case, the burden on the recording unit on the host computer side is reduced, and the risk of the recorded contents being misused by a third party is also reduced. When using the portable medium, the user is first verified by verifying the password registered on the portable medium.

[Effects of the Invention] As detailed above, according to the present invention, it is possible to provide a personal authentication device that can improve safety.

[Brief explanation of the drawing]

The drawings are for explaining one embodiment of the present invention, and FIG. 1 is a block diagram showing the configuration, and FIG. 2 is a diagram for explaining an example of text of an interactive question. 1... Terminal, 2... Host computer, 11.
...Control section, 12...Display section (instruction means), 13...
・Keyboard (answer input means), 21... main control unit,
22...Question generating unit (generating means), 22a...Personal database unit (registration means), 23...Answer receiving unit,
24... Judgment section (verification means), 25... Recording section (recording means).

Claims (3)

[Claims] (1) A registration means in which information about an individual is registered in advance as an interactive question and an answer to the question is registered in advance, and an instruction to input the answer to the interactive question retrieved by this registration means. an answer input means for inputting an answer to the above question based on the instructions of the instruction means; a collation means for comparing the answer input by the answer input means with the answer registered in the registration means; A personal authentication device comprising: recording means for recording part or all of the contents of an answer input by an answer input means. (2) The personal authentication device according to claim 1, wherein the recording means is an IC card as a portable medium. (3) A registration means in which information about an individual is registered in advance as an interactive question and an answer to the question is registered in advance, and an instruction to input the answer to the interactive question retrieved by this registration means. an answer input means for inputting an answer to the above question based on the instructions of the instruction means; a collation means for comparing the answer input by the answer input means with the answer registered in the registration means; A recording means for recording part or all of the contents of the answers input by the answer input means, and the contents of past questions and answers recorded in this recording means are registered in the above-mentioned registration means. A personal authentication device comprising: generating means for generating a new question from a question.