Image array authentication system

• US 7,680,815 B2
• Filed: 09/26/2006
• Issued: 03/16/2010
• Est. Priority Date: 09/27/2005
• Status: Expired due to Fees

• Current Assignee: NEC Nexsolutions Limited (NEC Corporation)
• Original Assignee: NEC Nexsolutions Limited (NEC Corporation)
• Inventors: Komine, Hikaru, Nakanishi, Katsuhiko
• Primary Examiner(s): Jalil; Neveen Abel
• Assistant Examiner(s): Hoang; Son T
• Application Number:
  US11/526,740
• Publication Number:
  US 20070074119A1
• Time in Patent Office: 1,267 Days
• Field of Search: 707/102
• US Class Current: 707/805
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06Q 20/3674 involving authentication

Abstract

A user data management apparatus for connection to a terminal data processor used by a user through a network, registers data that is dependent on a user ID peculiar to the user. The user data management apparatus has a first unit for generating a first data registration screen, when data of the user is to be initially registered, which differs from user ID to user ID, and a second unit for displaying, on the terminal data processor, a second data registration screen based on the first data registration screen generated by the first unit, when the data of the user is to be registered.

Claims

1. A user data management apparatus connected to a terminal data processor used by a user through a network, for registering data dependent on a user ID particular to the user, comprising:

a data processor unit executing;

a first means for generating a first data registration screen when data of the user is to be initially registered, and a second data registration screen, wherein said user ID is created based on said initially registered data and said first and second data registration screens are displayed on a display of said terminal data processor; and

a second means for generating an authentication screen and displaying said authentication screen on said display of said terminal data processor after data of the user is initially registered, said authentication screen being unique to each user and based on data of the user inputted to said first data registration screen generated by said first means, wherein the information corresponding to said authentication screen is transmitted over said network,

wherein said first means

i) produces first message digest character strings by combining a hashed character string obtained from any one of a plurality of elements making up said user ID and a plurality of constants assigned to predetermined image information, wherein the hashed character string is combined with each of the plurality of constants,

ii) produces relocating identifiers particular to the user by sequentially sorting the message digest character strings,

iii) masks a predetermined range of the image information relocating identifiers, and

iv) generates said second data registration screen from the relocating identifiers outside of said predetermined range; and

said second means

i) dehashes said information corresponding to the second data registration screen generated by said first means to produce the constant assigned to said predetermined image information,

ii) produces second message digest character strings by combining a hashed character string obtained from any element amongst those elements making up said user ID other than the element used to generate said hashed character string of said first data registration screen and the constant assigned to said predetermined image information,

iii) sequentially sorts the second message digest character strings,

iv) extracts the position of said constant, and

v) extracts identifiers required to form an image at the position, thereby generating said authentication screen.

2. The user data management apparatus according to claim 1, wherein said second means issues a one-time session ID, including said user ID, to said terminal data processor before said authentication screen is displayed.

3. The user data management apparatus according to claim 1, wherein said second means issues a one-time session ID, including said user ID, to said terminal data processor before said authentication screen is displayed.

4. A method of managing user data on a user data management apparatus connected to a terminal data processor used by a user through a network, for registering data dependent on a user ID particular to the user, comprising the steps of:

generating a first data registration screen when data of the user is to be initially registered, and a second data registration screen, wherein said user ID is created based on said initially registered data

displaying said first data registration screen on a display of said terminal data processor;

displaying said second data registration screen on said display of said terminal data processor;

generating an authentication screen, said authentication screen being unique to each user and based on data the user inputted to said first generated data registration screen, wherein the information corresponding to said authentication screen is transmitted over said network; and

displaying said authentication screen on said display of said terminal data processor,

wherein,

said generating said second data registration screen step comprises the steps of

i) producing first message digest character strings by combining a hashed character string obtained from any one of a plurality of elements making up said user ID and a constant assigned to predetermined image information,

ii) producing relocating identifiers particular to the user by sequentially sorting the message digest character strings,

iii) masking a predetermined range of the relocating identifiers, and

iv) generating said second data registration screen from the relocating identifiers outside of said predetermined range; and

said generating said authentication screen step comprises the steps of

i) dehashing said second generated data registration screen generated to produce the constant assigned to said predetermined image information,

ii) producing second message digest character strings by combining a hashed character string obtained from any element amongst those elements making up said user ID other than the element used to generate said hashed character string of said first data registration screen and the constant assigned to said predetermined image information,

iii) sequentially sorting the second message digest character strings,

iv) extracting the position of said constant, and

v) extracting identifiers required to form an image at the position, thereby generating said authentication screen.

5. The method according to claim 4, wherein said step of generating said authentication screen comprises the step of assigning a one-time session ID, including said user ID, to said terminal data processor before said authentication screen is displayed.

6. The method according to claim 4, wherein said step of generating said authentication screen comprises the step of assigning a one-time session ID, including said user ID, to said terminal data processor before said authentication screen is displayed.

7. A user data registration apparatus for registering data dependent on a user ID particular to a user, comprising:

a display unit;

a first means for generating a first data registration screen when data of the user is to be initially registered, and a second data registration screen, wherein said user ID is created based on said initially registered data and said first and second data registration screens are displayed on a display of said display unit;

a second means for generating an authentication screen and displaying said authentication screen on said display unit after data of the user is initially registered, said authentication screen being unique to each user and based on data of the user inputted to said first and second data registration screens generated by said first means; and

a network connected between said display unit and at least one of said first means and second means, wherein the information corresponding to said authentication screen is transmitted over said network,

wherein said first means

i) produces first message digest character strings by combining a hashed character string obtained from any one of a plurality of elements making up said user ID and a constant assigned to predetermined image information,

ii) produces relocating identifiers particular to the image information entered by the user by sequentially sorting the message digest character strings,

iii) masks a predetermined range of the image information relocating identifiers, and

iv) generates said second data registration screen from the relocating identifiers outside of said predetermined range; and

said second means

i) dehashes said information corresponding to the second data registration screen generated by said first means to produce the constant assigned to said predetermined image information,

ii) produces second message digest character strings by combining a hashed character string obtained from any element amongst those elements making up said user ID other than the element used to generate said hashed character string of said first data registration screen and the constant assigned to said predetermined image information,

iii) sequentially sorts the second message digest character strings,

iv) extracts the position of said constant, and

v) extracts identifiers required to form an image at the position, thereby generating said authentication screen.

8. A method of managing user data on a user data management apparatus having a display unit, for registering data dependent on a user ID particular to a user, comprising the steps of:

generating a first data registration screen when data of the user is to be initially registered, and a second data registration screen, wherein said user ID is created based on said initially registered data;

transmitting information corresponding to said first and second data registration screens over a network;

displaying said first and second data registration screens on said display unit; and

generating an authentication screen and displaying, on said display unit, said authentication screen, said authentication screen being unique to each user and based on data the user inputted to said first and second data registration screens, wherein the information corresponding to said authentication screen is transmitted over said network,

wherein said step of generating said second data registration screen comprises the steps of

i) producing first message digest character strings by combining a hashed character string obtained from any one of a plurality of elements making up said user ID and a constant assigned to predetermined image information,

ii) producing relocating identifiers particular to the user by sequentially sorting the message digest character strings,

iii) masking a predetermined range of the relocating identifiers, and

iv) generating said second data registration screen from the relocating identifiers outside of said predetermined range; and

said step of generating said authentication screen comprises the steps of

i) dehashing information corresponding to said second data registration screen to produce the constant assigned to said predetermined image information,

ii) producing second message digest character strings by combining a hashed character string obtained from any element amongst those elements making up said user ID other than the element used to generate said hashed character string of said first data registration screen and the constant assigned to said predetermined image information,

iii) sequentially sorting the second message digest character strings,

iv) extracting the position of said constant, and

v) extracting identifiers required to form an image at the position, thereby generating said authentication screen.