Authentication device, authentication system, authentication method, program and recording medium

• US 7,610,489 B2
• Filed: 12/18/2003
• Issued: 10/27/2009
• Est. Priority Date: 12/25/2002
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Maruyama, Hiroshi, Nakamura, Taiga
• Primary Examiner(s): Simitoski; Michael J
• Assistant Examiner(s): Le; Canh
• Application Number:
  US10/739,817
• Publication Number:
  US 20040177280A1
• Time in Patent Office: 2,140 Days
• Field of Search: 713/154, 713/161, 713168-170, 713182-184, 713/176, 380/229, 380/232, 726/2, 726 27- 28
• US Class Current: 713/182
• CPC Class Codes: G06F 21/31 User authentication

Abstract

To prevent an input password from being stolen by an invalid authentication device. An authentication device 10 for authenticating an inputter based on an input password accepted from the inputter is provided with a first input part 110 for allowing a first part of the input password to be inputted; a confirmation information output part 120 for outputting confirmation information known to the valid inputter in advance when the first part 10 is valid, the confirmation information indicating to the user that the authentication device is valid; a second input part 130 for allowing a second part following the first part of the input password to be inputted; and a determination part 140 for determining that the inputter is valid when the first part and the second part are valid.

Claims

1. A computer-implemented authentication device for authenticating an inputter based on an input password accepted from the inputter, the authentication device comprising:

an input device configured for receiving a first part of the input password to be inputted, said input password comprising a series of characters;

an output device configured for outputting confirmation information known to the inputter in advance when the first part of the received input password is valid, the confirmation information comprising a series of confirmation characters, each said confirmation character in one-to-one correspondence with a respective character of said series of characters of said first part of the input password and indicating to the inputter that the authentication device is valid;

said input device configured for allowing a second part of the input password to be inputted; and

,

a computer device, in communication with said input and output devices, configured for determining that the inputter is valid when the first part of the input password and the second part of the input password are valid,

the output device outputting, when the first part of the input password is invalid, information identical to the confirmation information corresponding to one or more character inputs of said first part of the input password determined valid, and outputs invalidity information different from the confirmation information in correspondence with other said one or more character inputs of said first part of the input password determined invalid, the output invalidity information being associated with both an identification of the inputter to be authenticated and, the corresponding other one or more character inputs of the first part of the input password determined invalid.

2. The computer-implemented authentication device according to claim 1, further comprising:

a memory storage device for storing output data to be outputted in association with a content of the one or more character inputs determined invalid in said input password first part, for each of a plurality of inputters.

3. The computer-implemented authentication device according to claim 1, wherein the input device is configured for receiving a successive input of a plurality of the character inputs;

each of the plurality of character inputs is associated with each of a plurality of the confirmation information data to be outputted when the first part of the input password is determined valid; and

when one or more characters of the first part of the input password is inputted, said output device outputs the confirmation information associated with the one or more characters if the one or more characters is valid, and outputs the invalidity information selected based on the one or more characters inputted so far if any of these one or more characters is invalid.

4. The computer-implemented authentication device according to claim 1, wherein the input device receives the first part of the input password to be inputted in a predetermined input field;

and

the input device receiving the second part of the input password to be inputted in the predetermined input field subsequently after the first part of the input password.

5. The computer-implemented authentication device according to claim 1, wherein the output device outputs the confirmation information each time the valid one or more characters of said first part of the input password is inputted.

12. The computer-implemented authentication device according to claim 2, wherein said input device comprises a telephone set located remotely from the computer-implemented authentication device and having buttons via which the first input part of the input password is inputted, said output device comprising a receiver of said telephone set, said receiver outputting said series of confirmation characters of the confirmation information as audio signals.

6. A computer-implemented authentication device for authenticating an inputter based on an input password accepted from the inputter, the authentication device comprising:

an input device configured for receiving a first part of the input password to be inputted in a predetermined input field, said input password comprising a series of characters;

an output device configured for outputting confirmation information known to the valid inputter in advance when the first part is valid, the confirmation information comprising a series of confirmation characters, each confirmation character in one-to-one correspondence with a respective character of said series of characters of said first part of said input password and indicating to a user that the authentication device is valid;

said input device for receiving a second part of the input password to be inputted in the predetermined input field subsequently after the first part of the input password; and

a computer device, in communication with said input and output devices, configured for determining that the inputter is valid when the first part of the input password and the second part of the input password are valid,

the output device outputs, when the first part of the input password is invalid, information identical to the confirmation information corresponding to one or more character inputs of said first part of the input password determined valid, and outputs invalidity information different from the confirmation information in correspondence with other said one or more character inputs of said first part of the input password determined invalid, the invalidity information output being associated with both an identification of the inputter to be authenticated and, the corresponding other one or more character inputs of the first part of the input password determined invalid.

7. An authentication system comprising an input terminal for accepting an input password from an inputter and an authentication computer server configured for allowing the input terminal to authenticate the inputter, the input terminal comprising:

a first input device in communication with said authentication computer server for receiving from the authentication computer server, confirmation information comprising a series of confirmation characters, each confirmation character in one-to-one correspondence with a respective character of a series of characters of said input password and known to the inputter in advance by the authentication server and indicating to the inputter that the input terminal is valid;

a second input device configured for receiving a first part of the input password to be inputted, said input password comprising said series of characters;

an output device configured for outputting the confirmation information when the first part of the received input password is valid;

said second input device configured for receiving a second part of the input password to be inputted; and

a computer device, in communication with said first and second input devices and output device, configured for determining that the inputter is valid when the first part of the input password and the second part of the input password are valid,

the output device outputs, when the first part of the input password is invalid, information identical to the confirmation information corresponding to one or more character inputs of said first part of the input password determined valid, and outputs invalidity information different from the confirmation information in correspondence with other one or more character inputs of said first part of the input password determined invalid, the invalidity information output being associated with both an identification of the inputter to be authenticated and, the corresponding other one or more character inputs of the first part of the input password determined invalid; and

the authentication computer server further comprising;

a confirmation information transmission part configured for transmitting the confirmation information associated with the inputter to said first input device in response to a direction by the input terminal.

8. An authentication method for authenticating an inputter based on an input password accepted from the inputter, the authentication method comprising the steps of:

receiving, at an input device, a first part of the input password to be inputted, said input password comprising a series of characters;

outputting, at an output device, confirmation information known to the inputter in advance when the received first part of the input password is valid, the confirmation information comprising a series of confirmation characters, each confirmation character in one-to-one correspondence with a respective character of said series of characters of said first part of said input password and indicating to a user that an authenticator is valid;

receiving, at said input device, a second part of the input password to be inputted; and

determining, at a computer device in communication with said input and output devices, that the inputter is valid when the first part of the input password and the second part of the input password are valid,

outputting, via said output device, when the first part of the input password is invalid, information identical to the confirmation information corresponding to one or more character inputs of said first part of the input password determined valid, and outputs invalidity information different from the confirmation information in correspondence with other one or more character inputs of said first part of the input password determined invalid, the invalidity information output being associated with both an identification of the inputter to be authenticated and, the corresponding other one or more character inputs of the first part of the input password determined invalid.

9. An authentication method for authenticating an inputter based on an input password accepted from the inputter, the authentication method comprising:

receiving, at an input device, a first part of the input password to be inputted in a predetermined input field, said input password comprising a series of characters;

outputting, at an output device, confirmation information known to the inputter in advance when the first part of the input password is valid, the confirmation information comprising a series of confirmation characters, each confirmation character in one-to-one correspondence with a respective character of said series of characters of said first part of said input password and indicating to a user that an authenticator is valid;

receiving, at an input device, a second part of the input password to be inputted in the predetermined input field subsequently after the first part of the received input password; and

determining, at a computer device in communication with said input and output devices, that the inputter is valid when the first part of the input password and the second part of the input password are valid, and

outputting, via said output device, when the first part of the input password is invalid, information identical to the confirmation information corresponding to one or more character inputs of said first part of the input password determined valid, and outputs invalidity information different from the confirmation information for other one or more character inputs of said first part of the input password determined invalid, the invalidity information output being associated with both an identification of the inputter to be authenticated and, the corresponding other one or more character inputs of the first part of the input password determined invalid.

10. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform method steps for authenticating an inputter based on an input password accepted from the inputter, said method steps comprising the steps of:

allowing a first part of the input password to be inputted, said input password comprising a series of characters;

outputting confirmation information known to the inputter in advance when the first part of the input password is valid, the confirmation information comprising a series of confirmation characters, each confirmation character in one-to-one correspondence with a respective character of said series of characters of said first part of said input password and indicating to a user that an authenticator is valid;

allowing a second part of the input password to be inputted; and

determining that the inputter is valid when the first part of the input password and the second part of the input password are valid,

outputting, when the first part of the input password is invalid, information identical to the confirmation information corresponding to one or more character inputs of said first part of the input password determined valid, and outputting invalidity information different from the confirmation information in correspondence with other one or more character inputs of said first part of the input password determined invalid, the invalidity information output being associated with both an identification of the inputter to be authenticated and, the corresponding other one or more character inputs of the first part of the input password determined invalid.

11. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform method steps for authenticating an inputter based on an input password accepted from the inputter, said method steps comprising the steps of:

allowing a first part of the input password to be inputted in a predetermined input field, said input password comprising a series of characters;

outputting confirmation information known to the inputter in advance when the first part of the input password is valid, the confirmation information comprising a series of confirmation characters, each confirmation character in one-to-one correspondence with a respective character of said series of characters of said first part of said input password and indicating to a user that an authenticator is valid;

allowing a second part of the input password to be inputted in the predetermined input field subsequently after the first part of the input password; and

determining that the inputter is valid when the first part of the input password and the second part of the input password are valid,

outputting, when the first part of the input password is invalid, information identical to the confirmation information corresponding to one or more character inputs of said first part of the input password determined valid, and outputting invalidity information different from the confirmation information in correspondence with other one or more character inputs of said first part of the input password determined invalid, the invalidity information output being associated with both an identification of the inputter to be authenticated and, the corresponding other one or more character inputs of the first part of the input password determined invalid.