Authentication device, authentication method, and recording medium

• US 9,213,813 B2
• Filed: 08/23/2013
• Issued: 12/15/2015
• Est. Priority Date: 09/03/2012
• Status: Active Grant

• Current Assignee: Fujitsu Client Computing Limited (Lenovo Group Ltd.)
• Original Assignee: Fujitsu Limited
• Inventors: Komatsu, Kiyoshi
• Primary Examiner(s): Schmidt, Kari
• Application Number:
  US13/974,721
• Publication Number:
  US 20140068757A1
• Time in Patent Office: 844 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

An authentication device includes an authentication unit configured to determine whether an input password input to a input unit matches a registered password registered in advance in a storage unit, count the number of times it is determined that the input password does not match the registered password, and stops authentication using a password if the number of times a mismatch is determined reaches a specified number, and a management unit configured to create an input error list supporting each of characters, digits, or other elements included in the registered password, on the basis of a history of errors of input to the input unit, and configured to cancel counting in a case where it is determined by the authentication unit that the input password does not match the registered password and a cause of the mismatch lies in an input error included in the input error list.

Claims

1. An authentication device comprising:

a storage device configured to store a registered password associated with an authentication; and

a hardware processor configured to execute instructions that, in response to execution by the hardware processor, cause the authentication device to perform operations, the operations comprising;

receiving input;

creating, based on a history of errors received in the input, an input error list supporting each of characters, digits, or other elements included in the registered password;

causing the input error list to be stored in the storage device;

receiving, as input, an input error and a given correction operation that corrects the input error;

causing the input error to be included in the input error list in response to the input error being corrected by the given correction operation;

determining that an input password received as input mismatches the registered password stored in the storage device;

determining, based on the input error list, that a cause of the input password mismatching the registered password is due to the input error that is included in the input error list;

in response to the input error being included in the input error list, not counting the mismatching of the input password with the registered password in a number of times received input is determined as mismatching the registered password;

counting the number of times it is determined that input mismatches the registered password; and

performing authentication with respect to the registered password in response to receiving, as input, a matching password that matches the registered password and in response to the number of times being less than a specified number of input mismatches with respect to the registered password.

2. The authentication device according to claim 1,

wherein the operations further comprise ranking the input error list based on a number of occurrences of one or more input errors for each of the characters, digits, or other elements included in the registered password, and

wherein determining that the cause of the input password mismatching the registered password is due to the input error is based on a ranking of the input error in the input error list.

3. The authentication device according to claim 1,

wherein the operations further comprise

creating the input error list based on one or more input errors for one or more characters or digits corresponding to the registered password in a string of characters or digits received as input.

4. An authentication method performed by an authentication device, the method comprising:

receiving input;

creating, based on a history of errors received in the input, an input error list supporting each of characters, digits, or other elements included in a registered password registered in advance in a storage device;

receiving, as input, an input error and a given correction operation that corrects the input error;

causing the input error to be included in the input error list in response to the input error being corrected by the given correction operation;

determining that an input password received as input mismatches the registered password;

determining, based on the input error list, that a cause of the input password mismatching the registered password is due to the input error that is included in the input error list;

in response to the input error being included in the input error list, not counting the mismatching of the input password with the registered password in a number of times received input is determined as mismatching the registered password;

counting the number of times it is determined that input mismatches the registered password; and

performing authentication with respect to the registered password in response to receiving, as input, a matching password that matches the registered password and in response to the number of times being less than a specified number of input mismatches with respect to the registered password.

5. The authentication method according to claim 4, further comprising:

ranking the input error list based on a number of occurrences of one or more input errors for each of the characters, digits, or other elements included in the registered password, and

wherein determining that the cause of the input password mismatching the registered password is due to the input error is based on a ranking of the input error in the input error list.

6. The authentication method according to claim 4, further comprising:

creating the input error list based on one or more input errors for one or more characters or digits corresponding to the registered password in a string of characters or digits received as input.

7. A non-transitory computer-readable recording medium having stored therein a program for causing a computer of an authentication device to execute operations, the operations comprising:

receiving input;

creating, based on a history of errors received in the input, an input error list supporting each of characters, digits, or other elements included in a registered password registered in advance in a storage device;

receiving, as input, an input error and a given correction operation that corrects the input error;

causing the input error to be included in the input error list in response to the input error being corrected by the given correction operation;

determining that an input password received as input mismatches the registered password stored in the storage device;

determining, based on the input error list, that a cause of the input password mismatching the registered password is due to the input error that is included in the input error list;

in response to the input error being included in the input error list, not counting the mismatching of the input password with the registered password in a number of times received input is determined as mismatching the registered password;

counting the number of times it is determined that input mismatches the registered password; and

performing authentication with respect to the registered password in response to receiving, as input, a matching password that matches the registered password and in response to the number of times being less than a specified number of input mismatches with respect to the registered password.

8. The non-transitory computer-readable recording medium according to claim 7,

wherein the operations further comprise ranking the input error list based on a number of occurrences of one or more input errors for each of the characters, digits, or other elements included in the registered password, and

wherein determining that the cause of the input password mismatching the registered password is due to the input error is based on a ranking of the input error in the input error list.

9. The non-transitory computer-readable recording medium according to claim 7,

wherein the operations further comprise creating the input error list based on one or more input errors for one or more characters or digits corresponding to the registered password in a string of characters or digits received as input.