Password authentication apparatus, password authentication method, and non-transitory computer-readable recording medium storing password authentication program

Patent metadata

Field	Value
Publication number	US-9396318-B2
Application number	US-201414768537-A
Country	US
Kind code	B2
Filing date	Sep 11, 2014
Priority date	Oct 29, 2013
Publication date	Jul 19, 2016
Grant date	Jul 19, 2016

Abstract

A control unit makes a screen of a display unit display a plurality of pattern display areas to which a predetermined respective plurality of patterns are uniquely assigned at random as a pattern random array in the same layout as that of a plurality of input keys capable of inputting numerical values. The control unit determines a shortest path to go through a sequence of patterns serving as a password of a user in the pattern random array, and replaces a sequence of all patterns existing on the shortest path with a sequence of codes assigned to the respective plurality of input buttons according to a correspondence relationship between the plurality of input buttons and the plurality of pattern display areas to generate a one-time password. The control unit then compares the one-time password with a sequence of codes input by the user by using an input unit to perform authentication.

First claim

The invention claimed is:

1. A password authentication apparatus comprising:
a processor;
an input interface including a plurality of input keys to which respective unique codes are assigned and that are arranged in a specific layout;
a display on which a plurality of pattern display areas to which for a respective plurality of patterns to be uniquely assigned at random are displayed as a pattern random array in a layout corresponding to the layout of the plurality of input keys in the input interface;
a memory that stores a sequence of the patterns registered as a password of each user to be authenticated; and
a controller that uniquely assigns the plurality of patterns to the plurality of pattern display areas at random and makes the display display the pattern random array, determines a shortest path to go through the sequence of the patterns serving as the password of the user to be authenticated in the pattern random array, replaces a sequence of all patterns existing on the shortest path with a sequence of the codes assigned to the respective plurality of input keys according to a correspondence relationship between the plurality of input keys and the plurality of pattern display areas to generate a one-time password, and compares the one-time password with a sequence of codes input by using the input interface to perform authentication; wherein
the pattern random array is a two-dimensional array; and
if there are a plurality of shortest paths to go through the sequence of the patterns serving as the password of the user to be authenticated in the pattern random array, the controller determines one shortest path to go through the sequence of the patterns according to priority between vertical and horizontal directions of the two-dimensional array.

2. The password authentication apparatus according to claim 1 , wherein the patterns are colors.

3. A password authentication method comprising:
preparing an input unit including a plurality of input keys to which respective unique codes are assigned and that are arranged in a specific layout, and a display unit on which a plurality of pattern display areas to which for a respective plurality of patterns to be uniquely assigned at random are displayed as a pattern random array in a layout corresponding to the layout of the plurality of input keys in the input unit;
uniquely assigning the plurality of patterns to the plurality of pattern display areas at random and making the display unit display the pattern random array;
determining a shortest path to go through a sequence of the patterns serving as a password of the user to be authenticated in the pattern random array; wherein the pattern random array is a two-dimensional array; and if there are a plurality of shortest paths to go through the sequence of the patterns serving as the password of the user to be authenticated in the pattern random array, determining one shortest path to go through the sequence of the patterns according to priority between vertical and horizontal directions of the two-dimensional array
replacing a sequence of all patterns existing on the shortest path with a sequence of the codes assigned to the respective plurality of input keys according to a correspondence relationship between the plurality of input keys and the plurality of pattern display areas to generate a one-time password; and
comparing the one-time password with a sequence of codes input by using the input unit to perform authentication.

4. A non-transitory computer-readable recording medium for storing a password authentication program, the password authentication program causing a computer to function as a control unit that,
by using an input unit including a plurality of input keys to which respective unique codes are assigned and that are arranged in a specific layout, a display unit on which a plurality of pattern display areas to which for a respective plurality of types of patterns to be uniquely assigned at random are displayed as a pattern random array in a layout corresponding to the layout of the plurality of input keys in the input unit, and a storage unit that stores a sequence of the patterns registered as a password of each user to be authenticated,
uniquely assigns the plurality of patterns to the plurality of pattern display areas at random and makes the display unit display the pattern random array, determines a shortest path to go through the sequence of the patterns serving as the password of the user to be authenticated in the pattern random array, replaces a sequence of all patterns existing on the shortest path with a sequence of the codes assigned to the respective plurality of input keys according to a correspondence relationship between the plurality of input keys and the plurality of pattern display areas to generate a one-time password, and compares the one-time password with a sequence of codes input by using the input unit to perform authentication; wherein
the pattern random array is a two-dimensional array; and
if there are a plurality of shortest paths to go through the sequence of the patterns serving as the password of the user to be authenticated in the pattern random array, the control unit determines one shortest path to go through the sequence of the patterns according to priority between vertical and horizontal directions of the two-dimensional array.

Assignees

• Kyocera Document Solutions Inc
• Kyocera Document Solutions Inc

Inventors

• Kowaka Makoto
• Nakazato Yosuke
• Matsuki Yoshitaka

Classifications

• G06F21/316 Primary

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title

• H04L63/0838

  using one-time-passwords · CPC title

• G06F21/36

  by graphic or iconic representation · CPC title

• H04W12/068

  using credential vaults, e.g. password manager applications or one time password [OTP] applications · CPC title

• H04W12/68

  Gesture-dependent or behaviour-dependent · CPC title