JP2008077256A - Portable terminal equipment and security assurance method to be used for the same and its program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide portable terminal equipment for instantaneously and easily authorizing the use of an electronic money function or personal information without requiring any complicated registration processing or authentication processing. <P>SOLUTION: When a payment amount is input by a touch pad 13 or a ten key in portable terminal equipment 1, the information of sign input on the touch pad 13 is compared with the authentication data of a sign information storage part, and whether or not those data are matched is confirmed. When those data are matched, the portable terminal equipment 1 permits the use of an electronic money function, and performs settlement with a settlement server 3 by bringing the portable terminal equipment 1 closer to a reader/writer 2. When the authentication fails three times in a row, the portable terminal equipment 1 determines that the electronic money function is illegally used by the others, and ends with error. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a mobile terminal device, a security ensuring method used therefor, and a program therefor, and more particularly, to security ensuring when using an electronic money function or personal information on the mobile terminal device.

  Conventionally, there are authentication methods such as fingerprint authentication and face authentication as methods for ensuring the security of a mobile terminal device. However, in the case of fingerprint authentication, a dedicated sensor for detecting the fingerprint is required, so the component cost is high, and in the case of face authentication, there is a problem that the authentication accuracy is not high.

  In order to solve this problem, as a conventional authentication method, an input unit for inputting a handwritten signature is provided in the mobile terminal device, and wireless connection is performed between devices in which the signatures of the partner terminal devices are registered with each other. Authentication method (for example, refer to Patent Document 1), when a handwritten signature waveform or the like is registered in the authentication server and authentication is performed, the handwritten signature is sent from the portable terminal device to the authentication server for authentication. A method (see, for example, Patent Document 2) has been proposed.

JP 2002-315055 A JP 2002-142255 A

  However, in the conventional authentication method described above, in the techniques described in Patent Documents 1 and 2 above, for example, use of the electronic money function in a portable terminal device equipped with an electronic money function using a non-contact IC (integrated circuit) or the like. It is not considered to be used for authentication of whether or not to permit the use of personal information or whether or not to permit the use of personal information. Face authentication must be used.

  In other words, when using the techniques described in Patent Documents 1 and 2 above, a signature must be registered in advance on the other device when using the electronic money function or personal information. It is necessary to perform troublesome registration processing and authentication processing when using an electronic money function or personal information that requires simplicity.

  Therefore, an object of the present invention is to solve the above-mentioned problems, and a portable terminal device that can immediately and easily perform authentication of electronic money function and use permission of personal information without performing troublesome registration processing and authentication processing. Another object of the present invention is to provide a security ensuring method and program used therefor.

A first portable terminal device according to the present invention is a portable terminal device having at least an electronic money function,
Input means for inputting a handwritten signature, storage means for storing signature information input in advance by the input means, signature information input from the input means when using the electronic money function, and the storage means And a permission means for permitting the use of the electronic money function when the information matches the signature information stored in the electronic money.

A second portable terminal device according to the present invention is a portable terminal device holding at least personal information,
An input means for inputting a handwritten signature, a storage means for storing signature information input in advance by the input means, a signature information input from the input means when using the personal information, and the storage means And a permission means for permitting the use of the personal information when they are compared with the stored signature information.

A first security ensuring method according to the present invention is a security ensuring method used for a portable terminal device having at least an electronic money function,
The portable terminal device has an input process for inputting a handwritten signature, a process for storing information of a signature input in advance in the input process in a storage means, and an input by the input process when using the electronic money function The signature information stored in the storage means is compared with the signature information stored in the storage means, and a process of permitting the use of the electronic money function is executed when they match.

A second security ensuring method according to the present invention is a security ensuring method used for a mobile terminal device holding at least personal information,
The portable terminal device is input by the input process when inputting the handwritten signature, the process of storing the signature information input in advance in the input process in the storage means, and the use of the personal information. The signature information stored in the storage means and the signature information stored in the storage means are compared, and when they match each other, a process for permitting the use of the personal information is executed.

A first program according to the present invention is a program executed by a mobile terminal device having at least an electronic money function,
An input process for inputting a handwritten signature to the central processing unit of the portable terminal device, a process for storing information on a signature input in advance in the input process in a storage unit, and the input when the electronic money function is used The signature information input in the processing is compared with the signature information stored in the storage means, and when they match, the processing for permitting use of the electronic money function is executed.

A second program according to the present invention is a program executed by a mobile terminal device holding at least personal information,
An input process for inputting a handwritten signature to the central processing unit of the portable terminal device; a process for storing information of a signature input in advance in the input process in a storage means; and the input process when using the personal information The signature information input in step (b) is compared with the signature information stored in the storage means, and when they match, the process of permitting the use of the personal information is executed.

  In other words, the portable terminal device of the present invention prevents unauthorized use of electronic money functions or personal information by others by authenticating the use permission by confirming a handwritten signature when using the electronic money function or personal information. It becomes possible.

  In addition, when the electronic money function is used, the mobile terminal device of the present invention authenticates the use permission by confirming a handwritten signature, and sets the amount on the mobile terminal device, thereby paying the wrong amount by mistake. It becomes possible to prevent this.

  More specifically, the portable terminal device of the present invention includes a display device, a non-contact IC (integrated circuit), a touch pad, etc., and displays a sign input screen when using an electronic money function or personal information. When the user inputs a signature using the touchpad, the input signature is compared with previously input data, and when the data matches, the use of the electronic money function or personal information is permitted.

  For example, when the electronic money function is used, the contactless IC of the mobile terminal device communicates with the reader / writer so that the reader / writer obtains the information of the contactless IC and confirms the information with the payment server. Settlement using electronic money function. At that time, the mobile terminal device enters or pays the signature after inputting or accepting the amount to be paid to the mobile terminal device.

  As described above, in the mobile terminal device of the present invention, when the electronic money function or personal information is used, the personal authentication is performed by signing to determine the permission to use the electronic money function or personal information. It is possible to prevent unauthorized use of personal information, and since the amount is set by the mobile terminal device, it is possible to prevent erroneous payment of the wrong amount.

  Therefore, in the mobile terminal device of the present invention, it is possible to immediately and easily perform authentication of the electronic money function and use permission of personal information without performing troublesome registration processing and authentication processing.

  With the configuration and operation as described above, the present invention can immediately and easily perform authentication of electronic money function and use permission of personal information without performing bothersome registration processing and authentication processing. Is obtained.

  Next, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of a payment system including a mobile terminal device according to a first embodiment of the present invention. In FIG. 1, a settlement system according to a first embodiment of the present invention includes a mobile terminal device 1, a reader / writer 2 that performs communication between a non-contact IC (integrated circuit) 12 of the mobile terminal device 1, a reader / writer The payment server 3 is configured to communicate with the writer 2.

  The portable terminal device 1 includes a display device 11 that displays a key input result, a non-contact IC 12 that communicates with a reader / writer 2 at a close distance, and the user writes a sign with a finger to the portable terminal device 1. A touch pad 13 or the like capable of inputting personal authentication information is provided.

  Further, the reader / writer 2 communicates with the non-contact IC 12 of the mobile terminal device 1, acquires information of the non-contact IC 12, confirms the information with the payment server 3, and performs payment by the mobile terminal device 1. In this embodiment, the touch pad 13 can also be applied as an input with a stylus pen or the like.

  FIG. 2 is a block diagram illustrating a configuration example of the mobile terminal device 1 of FIG. In FIG. 2, the mobile terminal device 1 includes an antenna 10, a display device 11, a non-contact IC 12, a touch pad 13, a CPU (central processing unit) 14, a wireless unit 15 that performs wireless communication through the antenna 10, The main memory 16 stores a control program 16a executed by the CPU 14, and a storage unit 17 including a signature information holding unit 171 that holds personal authentication information such as a signature input from the touch pad 13 in advance.

  FIG. 3 is a flowchart showing an operation of permitting use of the electronic money function of the mobile terminal device 1 according to the first embodiment of the present invention, and FIG. 4 is a personal authentication in the mobile terminal device 1 according to the first embodiment of the present invention. It is a flowchart which shows the registration operation | movement of information. The settlement operation according to the first embodiment of the present invention will be described with reference to FIGS. The processing operations shown in FIGS. 3 and 4 can also be realized by the CPU 14 executing the control program 16a to control each unit in the portable terminal device 1.

  The operation when using the electronic money function according to this embodiment will be described with reference to FIG. First, the payment amount is input to the mobile terminal device 1 using the touch pad 13 or the numeric keypad (see FIG. 1) (step S1 in FIG. 3).

  Next, the portable terminal device 1 inputs a signature on the touch pad 13 (step S2 in FIG. 3), compares the input signature information with the authentication data in the signature information holding unit 171 and determines whether they match. Is confirmed (step S3 in FIG. 3). If the data do not match, the process returns to the above-described step S2 and starts again from the input of the signature.

  If the data match, the mobile terminal device 1 permits the use of the electronic money function, and makes a payment with the payment server 3 by bringing the mobile terminal device 1 close to the reader / writer 2 (FIG. 3). Step S4). Further, in the portable terminal device 1, when the authentication fails three times in succession in the process of step S3 (step S5 in FIG. 3), it is determined that another person has illegally used the electronic money function, and the process ends in error.

  Next, an operation at the time of sign registration in the mobile terminal device 1 will be described with reference to FIG. First, in the mobile terminal device 1, when a user inputs a sign using the touch pad 13 on the sign input screen, information such as the writing speed, writing pressure, and writing order of the sign at that time is recorded in the sign information holding unit 171. (FIG. 4, steps S11 to S13). This recorded information becomes authentication data when the electronic money function described above is used.

  In the mobile terminal device 1, in order to increase the accuracy of the authentication data, the same data as described above is recorded three times (step S14 in FIG. 4), and then the registration is completed. Further, in the portable terminal device 1, when the difference is large in the data input three times, the data is invalidated and the signature is input again (step S12 in FIG. 4).

  As described above, in this embodiment, when the electronic money function is used, identity authentication is performed by sign input to determine permission to use the electronic money function, so that unauthorized use of the electronic money function by others can be prevented. The safety of the electronic money function can be improved.

  In this embodiment, since the function of the entire mobile terminal device is not locked but authentication is always required before using the electronic money function, the electronic money function is used when the lock is not applied. It is possible to reduce the chances of end.

  Further, in this embodiment, since the device to be used is more versatile than the fingerprint authentication method or the like, the touch pad 13 can be used for other purposes such as a character input means, thereby reducing the mounting cost. be able to.

  Furthermore, in this embodiment, at the time of electronic money payment, since the sign can be made after confirming the payment amount input to the terminal device, the mistake of paying the wrong amount can be eliminated.

  FIG. 5 is a flowchart showing the personal information use permission operation of the portable terminal device according to the second embodiment of the present invention. The portable terminal device according to the second embodiment of the present invention has the same configuration as the portable terminal device 1 according to the first embodiment of the present invention shown in FIG. With reference to FIG. 2 and FIG. 5, the personal information use permission operation of the portable terminal device 1 according to the second embodiment of the present invention will be described. The processing operation shown in FIG. 5 can also be realized by the CPU 14 executing the control program 16a to control each part in the mobile terminal device 1.

  In the second embodiment of the present invention, PIM (Personal Information Manager) information (information such as a phone book, a scheduler, and a memo stored in the storage unit 17 in the mobile terminal device 1) is not used when the electronic money function is used ( When accessing personal information), signature authentication is used to authenticate whether or not the use of the personal information is permitted. FIG. 5 shows an example of the operation. In FIG. 5, the difference from the authentication operation when using the electronic money function in FIG. 3 is that the PIM information is accessed in step S23. There is no difference from the signature authentication according to the first embodiment of the present invention.

  That is, the mobile terminal device 1 inputs a signature on the touch pad 13 (step S21 in FIG. 4), compares the input signature information with the authentication data in the signature information holding unit 171 and determines whether they match. Confirmation (step S22 in FIG. 4). If the data do not match, the process returns to the above-described step S21 and starts again from the input of the signature.

  In the portable terminal device 1, if those data match, access to the PIM information is permitted (step S23 in FIG. 4). Moreover, in the portable terminal device 1, when authentication fails 3 times in succession in the process of step S22 (step S24 in FIG. 4), it is determined that another person has illegally used, and the process ends with an error.

  FIG. 6 is a flowchart showing an operation of permitting use of the electronic money function of the portable terminal device according to the third embodiment of the present invention. The portable terminal device according to the third embodiment of the present invention has the same configuration as the portable terminal device 1 according to the first embodiment of the present invention shown in FIG. With reference to FIG. 2 and FIG. 6, the personal information use permission operation of the mobile terminal device 1 according to the third embodiment of the present invention will be described. The processing operation shown in FIG. 6 can also be realized by the CPU 14 executing the control program 16a to control each unit in the mobile terminal device 1.

  First, the use of the electronic money function in the portable terminal device 1 is started by bringing the non-contact IC 12 close to the reader / writer 2 (step S31 in FIG. 6). When the authentication between the non-contact IC 12 and the reader / writer 2 is completed, the payment amount is displayed on the display device 11 (step S32 in FIG. 6), and if there is no problem with the amount (step S33 in FIG. 6), the touch pad The signature is input on 13 (step S34 in FIG. 6).

  The mobile terminal device 1 compares the input signature information with the authentication data stored in the signature information holding unit 171 and confirms whether they match (step S35 in FIG. 6). If the data do not match, the process returns to step S34 and the signature is input again.

  In the mobile terminal device 1, the payment is completed if the data match. Further, in the portable terminal device 1, when the authentication fails three times in succession in the process of step S35 (step S36 in FIG. 6), it is determined that another person has illegally used the electronic money function, and the process ends in error.

  The present invention permits use of an electronic money function mounted on a mobile terminal device or a function that requires high security in the mobile terminal device 1 such as when using personal information stored on the mobile terminal device. It can be applied to the judgment.

It is a block diagram which shows the structure of the payment system containing the portable terminal device by 1st Example of this invention. It is a block diagram which shows the structural example of the portable terminal device of FIG. It is a flowchart which shows use permission operation | movement of the electronic money function of the portable terminal device by 1st Example of this invention. It is a flowchart which shows the registration operation | movement of the personal authentication information in the portable terminal device by 1st Example of this invention. It is a flowchart which shows utilization permission operation | movement of the personal information of the portable terminal device by 2nd Example of this invention. It is a flowchart which shows utilization permission operation | movement of the electronic money function of the portable terminal device by 3rd Example of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Portable terminal device 2 Reader / writer 3 Payment server 10 Antenna 11 Display device 12 Non-contact IC
13 Touchpad 14 CPU
15 Radio section 16 Main memory 16a Control program 17 Storage section 171 Sign information holding section

Claims (12)

A portable terminal device having at least an electronic money function,
Input means for inputting a handwritten signature, storage means for storing signature information input in advance by the input means, signature information input from the input means when using the electronic money function, and the storage means And a permitting means for permitting the use of the electronic money function when the information matches the signature information stored therein.   The mobile terminal device according to claim 1, wherein a money amount is set when the electronic money function is used.   The permission unit compares the signature information input from the input unit with the signature information stored in the storage unit when the personal information previously stored in the terminal is used, and when the information matches, the personal information 3. The mobile terminal device according to claim 1, wherein use of the mobile terminal device is permitted.   The portable terminal device according to any one of claims 1 to 3, wherein the input means inputs the handwritten signature after confirming a payment amount in use of the electronic money function. A portable terminal device holding at least personal information,
An input means for inputting a handwritten signature, a storage means for storing signature information input in advance by the input means, a signature information input from the input means when using the personal information, and the storage means A portable terminal device comprising permission means for permitting use of the personal information when the stored signature information is compared with each other. A security ensuring method used for a mobile terminal device equipped with at least an electronic money function,
The portable terminal device has an input process for inputting a handwritten signature, a process for storing information of a signature input in advance in the input process in a storage means, and an input by the input process when using the electronic money function A security ensuring method comprising: comparing the signature information stored with the signature information stored in the storage means, and executing a process of permitting use of the electronic money function when they match.   7. The security ensuring method according to claim 6, wherein a money amount is set when the electronic money function is used in the portable terminal device.   In the process of permitting the use of the electronic money function, the portable terminal device uses the signature information input in the input process and the signature stored in the storage means when using personal information held in advance in the terminal. 8. The security ensuring method according to claim 6 or 7, further comprising: permitting use of the personal information when the information is compared and the information matches. The security according to any one of claims 1 to 3, wherein the portable terminal device inputs the handwritten signature after confirming a payment amount in use of the electronic money function in the input process. How to secure.
Mobile terminal device. A security ensuring method used for a portable terminal device holding at least personal information,
The portable terminal device is input by the input process when inputting the handwritten signature, the process of storing the signature information input in advance in the input process in the storage means, and the use of the personal information. A security ensuring method comprising: comparing the signature information stored in the storage means with the signature information stored in the storage means, and executing a process of permitting the use of the personal information when they match. A program executed by a mobile terminal device having at least an electronic money function,
An input process for inputting a handwritten signature to the central processing unit of the portable terminal device, a process for storing information on a signature input in advance in the input process in a storage unit, and the input when using the electronic money function A program for comparing the signature information input in the processing with the signature information stored in the storage means and executing the processing for permitting the use of the electronic money function when they match. A program executed by a mobile terminal device holding at least personal information,
An input process for inputting a handwritten signature to the central processing unit of the portable terminal device; a process for storing information of a signature input in advance in the input process in a storage means; and the input process when using the personal information A program for comparing the signature information input in step 1 with the signature information stored in the storage means and executing processing for permitting the use of the personal information when they match.

Images