User Authentication System

Abstract

To provide a user authentication system capable of performing login operations using information that is difficult for third parties to know and is easy for users to manage.SOLUTION: A user authentication system 1 comprises: input means 2 for allowing a user to input identification information D1, a password D2, slide information D3 that shifts characters contained in the password D2 and replaces them with other characters; password conversion means 3 for creating a conversion password D5 from the password D2 based on the slide information D3; registration means 4 for associating and registering the identification information D1 and conversion password D5 as registration identification information D6 and a registration password D7; and authentication means 5 for identifying whether or not the user who performed a login operation is a registered user based on a comparison result between the conversion password D5 and the registration password D7, wherein the conversion password D5 is created by the password conversion means 3 based on the password D2 and the slide information D3 entered in the input means 2.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to a user authentication system for performing user authentication to verify whether or not a person who attempts to use a service provided via the Internet or a device such as a personal computer (a person who has performed a login operation) is authorized to use the service (whether or not he or she is the registered user). [Background technology]

[0002] As an example of the above-mentioned user authentication system, as disclosed in Patent Document 1, there is known a system that uses a communications terminal into which a user inputs identification information and a password when registering (i.e., when registering a user) or when logging in, and a host computer in which authentication identification information and passwords are registered and which performs user authentication by comparing the identification information and password input to the communications terminal with the authentication identification information and password.

[0003] In addition, the host computer of the above user authentication system is configured to make the password entered into the communication terminal during user registration complex before registering it in a password file. Therefore, even if the password entered by the user during registration is simple, it is possible to prevent a third party from discovering the authentication password through an attack on the host computer's password file. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2003-6163 A Summary of the Invention [Problem to be solved by the invention]

[0005] Incidentally, in the above-mentioned user authentication system, the security of the authentication password registered in the host computer is increased, but if the password entered by the user at the time of registration is a simple one, there remains a risk that the password will be easily guessed by a third party.

[0006] Furthermore, if a user tries to reduce such risks by registering a complex password, the password becomes difficult to remember. For example, if the user writes the password down on a medium such as paper, there is a higher risk that the password will be known to a third party through this medium, and if the user forgets the password and cannot remember it, it will be necessary to go through the trouble of reissuing the password, which can result in other problems.

[0007] As described above, in the above-mentioned user authentication system, it is difficult to make the password difficult for a third party to know while at the same time making the password easy to manage.

[0008] In view of the above circumstances, an object of the present invention is to provide a user authentication system that enables a user to perform a login operation using information that is unlikely to be known to a third party and that is easy for the user to manage. [Means for solving the problem]

[0009] The user authentication system of the present invention comprises: an input means configured to display on a registration operation screen and an authentication operation screen an identification information input section for a user to input identification information which is unique to the user, a password input section for inputting a password represented by a character string, and a slide information input section for inputting slide information for replacing a character included in the password with a character assigned to another key located at a position shifted from a reference key to which the same character is assigned in a key arrangement of a keyboard; a password conversion means for executing a process of generating a converted password by converting characters included in the password inputted to the password input section based on the slide information; a registration means for registering the identification information and the converted password as registered identification information and a registered password in a state in which the registered identification information and the registered password are associated with each other; The input means is provided with an authentication means for comparing the converted password with the registered password associated with the registered identification information that matches the identification information when the identification information, the password, and the slide information are input to the input means and the converted password is created by the password conversion means, and for identifying whether the user who performed the login operation is the registered user based on the comparison result between the converted password and the registered password.

[0010] In the user authentication system of the present invention, The slide information may include a slide number used when selecting a key at a position shifted from the position of the reference key, the slide number indicating the number of keys to be shifted from the reference key.

[0011] in this case, The slide information may include a slide range that specifies a range of characters to be converted by the password conversion means from among the character string input to the password input section as the password.

[0012] In the user authentication system of the present invention, The input means may display the password input section and the slide information input section on the same screen. Effect of the Invention

[0013] As described above, the user authentication system of the present invention can provide the excellent effect of enabling a login operation to be performed using information that is unlikely to be known to a third party and that is easy for the user to manage. [Brief description of the drawings]

[0014] [Figure 1]FIG. 1 is a schematic diagram of an environment in which a user authentication system according to an embodiment of the present invention is used. [Diagram 2] FIG. 2 is a block diagram of the configuration of the user authentication system according to the embodiment. [Diagram 3] FIG. 3 is an explanatory diagram of an operation screen of the user authentication system according to the embodiment, where (a) is an explanatory diagram of an operation screen for registration, and (b) is an explanatory diagram of an operation screen for authentication. [Figure 4] FIG. 4 is an explanatory diagram of key map information of the user authentication system according to the embodiment, where (a) is an explanatory diagram of a state in which an element corresponding to a reference key is selected, and (b) is an explanatory diagram of a state in which an element corresponding to a key other than the reference key is selected. [Diagram 5] Figure 5 is an explanatory diagram of the operation of the registration process of the user authentication system according to the embodiment, where (a) is an explanatory diagram of a state in which the registration means calls the password conversion means to create a converted password, (b) is a diagram of a state in which the registration means has acquired identification information and the converted password, and (c) is a diagram of a state in which the identification information and the converted password have been registered as registered identification information and registered password. [Figure 6] FIG. 6 is an explanatory diagram of the operation of the authentication processing of the user authentication system according to the embodiment, in which (a) is an explanatory diagram of a state in which the authentication means calls the password conversion means to create a converted password, (b) is a diagram of a state in which the authentication means has acquired identification information, the converted password, registered identification information, and registered password, and (c) is a diagram of a state in which the authentication means is comparing the converted password with the registered password. [Figure 7] FIG. 7 is an explanatory diagram of an operation screen of a user authentication system according to another embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0015] Hereinafter, a user authentication system according to an embodiment of the present invention will be described with reference to the accompanying drawings.

[0016] The user authentication system of this embodiment is a system for performing user authentication to verify whether a person who attempts to use a service provided via the Internet or a device such as a personal computer (a person who has performed a login operation) is authorized to use the service or device, and is configured to execute a registration process to register a user and an authentication process to verify that the user who has performed the login operation is the registered user himself / herself.

[0017] The user authentication system is used in an environment in which, for example, as shown in FIG. 1, an operation terminal T1 is used that displays an operation screen W (an operation screen W1 for registration (see FIG. 3(a)) or an operation screen W2 for authentication (see FIG. 3(b))) for accepting operations from a user, and a processing terminal T2 is used that executes registration processing and authentication processing in response to operations on the operation terminal T1.

[0018] As shown in FIG. 2, the user authentication system includes an input unit 2 that enables a user performing a login operation to input identification information (so-called ID) D1, which is information unique to the user, a password D2 expressed as a character string, and slide information D3 for replacing characters included in the password D2 with characters assigned to another key that is shifted from a reference key to which the same characters are assigned in a keyboard key arrangement, a password conversion unit 3 that creates a converted password D5 by converting characters included in the password D2 based on the slide information D3, and a registration unit 4 that registers the identification information D1 and the converted password D5 as registered identification information D6. and an authentication means 5 which, when the identification information D1, the password D2, and the password D2 conversion information are input to the input means 2 and the converted password D5 is created by the password conversion means 3, compares the converted password D5 with the registered password D7 associated with the registered identification information D6 that matches the identification information D1, and identifies whether the user who has performed the login operation is the registered user based on a comparison result between the converted password D5 and the registered password D7.

[0019] In the user authentication system of this embodiment, the registration means 4 writes the registered identification information D6 and the registered password D7 in a state in which they are associated with each other in the storage means 6, whereby the registration means 4 registers the registered identification information D6.

[0020] In addition, the user authentication system may have all of the input means 2, password conversion means 3, registration means 4, and authentication means 5 introduced into the processing terminal T2 of Figure 1, or, for example, a portion of the configuration of the input means 2, etc. may be introduced into the operation terminal T1.

[0021] As shown in Figures 3(a) and 3(b), the input means 2 is configured to display an identification information input section 20 for inputting identification information D1, a password input section 21 for inputting password D2, and a slide information input section 22 for inputting slide information D3 on both the registration operation screen W1 and the authentication operation screen W2.

[0022] Character strings are input to the identification information input section 20 and the password input section 21. Note that, in both the identification information input section 20 and the password input section 21, character strings can be input using letters, numbers, symbols, and the like.

[0023] The slide information D3 in this embodiment is slide number information used when selecting a key at a position shifted from the reference key position, and includes a slide number indicating the number of keys to be shifted from the reference key, and a slide range specifying the range of characters (hereinafter referred to as the conversion range) to be converted by the password conversion means 3 from the character string entered as the password D2.

[0024] Therefore, the slide information input section 22 has a slide number input section 220 for inputting the number of slides, and a slide range input section 221 for inputting the slide range.

[0025] The slide number input section 220 is configured to input a number (the number of times the characters included in the password D2 are to be slid).

[0026] In the slide range input section 221, numbers (numbers that determine the conversion range) can also be input.

[0027] That is, the slide range is also specified by numbers. The slide range in this embodiment is a number for specifying the start position of the conversion range, and the password conversion means 3 is configured to convert characters from the first character of the character string of the password D2 to the character on the rear side by the number corresponding to the slide range, but the slide range may indicate, for example, the end position of the conversion range, or may indicate the start position and the end position of the conversion range.

[0028] As shown in FIG. 2, the password conversion means 3 is configured to execute a character selection process for selecting one character from among the characters contained in password D2 within the conversion range; a search process for searching among the keys of the keyboard for a reference key to which the same character as the character selected in the selection process is assigned; a key selection process for selecting another key that is shifted from the reference key by the number of slides indicated; and a replacement process for replacing the character selected in the character selection process with the character assigned to the other key.

[0029] Moreover, the password conversion means 3 is configured to perform character selection processing, search processing, key selection processing, and replacement processing on all characters within the conversion range.

[0030] The password conversion means 3 may be configured to convert characters contained in the password D2 using key map information KM represented by a two-dimensional array as shown in FIG. 4(a), in which key codes indicating the characters assigned to the keys are set and the key map information KM has a plurality of elements C arranged in accordance with the arrangement of the keys on the keyboard.

[0031] In the search process, element C (element C indicating a reference key, designated by symbol C1 in FIG. 4(a)) having a key code set indicating the same character as a character in password D2 to be converted is searched for, and in the key selection process, as shown in FIG. 4(b), element C (element C indicating another key, designated by symbol C2 in FIG. 4(b))) that is located a number of slides away from element C indicating the reference key, and in the replacement process, the character selected in the selection process is replaced with the character designated by the key code set in element C selected in the key selection process.

[0032] In this embodiment, the direction in which the position is shifted from the reference key according to the number of slides is fixed to the right (the right direction in Fig. 4(a) and Fig. 4(b)), but the direction in which the position is shifted from the reference key may be the left direction, the upward direction, the downward direction, the diagonal upward direction, the diagonal downward direction, etc. Also, the direction in which another key is searched for based on the reference key may be preset or may be specified by the user.

[0033] As shown in FIG. 2, the registration means 4 is configured to execute a registration conversion process that calls the password conversion means 3 to create a converted password D5, a registration information acquisition process that acquires the identification information D1 input by the input means 2 and the converted password D5 created in the registration conversion process, and a registration process that sets the identification information D1 and the converted password D5 acquired in the registration information acquisition process as the registration identification information D6 and the registration password D7, respectively, and then associates and registers the registration identification information D6 and the registration password D7 (writing them into the storage means 6).

[0034] In this way, the registration means 4 is configured to register the converted password D5 created by the password conversion means 3, rather than the password D2 itself input to the password input unit 21.

[0035] In addition, the registration identification information D6 and the registration password D7 are information managed within the user authentication system as information used by the user authentication system when verifying whether the user who performed the login operation is the registered user himself / herself.

[0036] The registration means 4 may be configured, for example, to display a registration button B1 for starting the execution of each process on the operation screen W (see FIG. 3(a)), and to execute a registration conversion process, a registration information acquisition process, and a registration information acquisition process when the registration button B1 is pressed.

[0037] The authentication means 5 of this embodiment is configured to execute an authentication conversion process that calls the password conversion means 3 to create a converted password D5, an authentication information acquisition process that acquires identification information D1 input into the identification information input section 20 of the input means 2 by the user who performed the login operation, the converted password D5 created in the authentication conversion process (specifically, the converted password D5 created in the authentication conversion process based on the password D2 input into the password input section 21 by the user who performed the login operation and the slide information D3 input into the slide information input section 22), and a registered password D7 associated with the registered identification information D6 that matches the identification information D1, and an authentication process that authenticates whether or not the user is a registered user based on the comparison result between the converted password D5 acquired in the authentication information acquisition process and the registered password D7.

[0038] In this way, the authentication means 5 is configured to compare the converted password D5 created by the password conversion means 3 with the registered password D7, rather than the password D2 itself input to the password input unit 21. In other words, in the user authentication system of this embodiment, the converted password D5 created by the password conversion means 3 is used between the input means 2 and the registration means 4 or authentication means 5, rather than the password D2 itself input by the user to the password input unit 21.

[0039] In addition, the authentication means 5 may also be configured to, for example, display an authentication button B2 for starting the execution of each process on the operation screen W (see Figure 3 (b)), and execute an authentication conversion process, an authentication information acquisition process, and an authentication information acquisition process when the authentication button B2 is pressed.

[0040] If the authentication means 5 cannot acquire (find) the registered password D7 associated with the registered identification information D6 that matches the identification information D1 input by the input means 2 during the authentication information acquisition process, it may inform the user that it is not registered and terminate the process.

[0041] In addition, in the authentication process, the authentication means 5 is configured to identify the user who performed the login operation as the registered user if the converted password D5 acquired in the authentication information acquisition process matches the registered password D7, and to identify the user who performed the login operation as not being the registered user if the converted password D5 acquired in the authentication information acquisition process does not match the registered password D7.

[0042] In addition, the authentication means 5 may be configured to notify the identification result of the user who performed the login operation to a service provided via the Internet or to a device such as a personal computer, or to notify the user who performed the login operation.

[0043] The configuration of the user authentication system according to this embodiment is as described above. Next, the operation of the user authentication system (the operation of the registration process and the operation of the authentication process) will be described.

[0044] First, the operation of the login authentication system during registration processing will be described.

[0045] In the registration process, as shown in FIG. 3(a), a registration operation screen W1 is displayed on the operation terminal T1, and the registration operation screen W1 displays an identification information input section 20, a password input section 21, a slide number input section 220, a slide range input section 221, and a registration button B1.

[0046] When a user inputs identification information D1 into identification information input section 20, password D2 into password input section 21, the number of slides into slide number input section 220, and the slide range into slide range input section 221, and then presses registration button B1, processing by registration means 4 is initiated.

[0047] As shown in FIG. 5(a), the registration means 4 executes a registration conversion process to call the password conversion means 3, and causes the password conversion means 3 to create a converted password D5.

[0048] Then, as shown in FIG. 5(b), a registration information acquisition process is executed to acquire the identification information D1 input to the input means 2 and the converted password D5 generated by the registration conversion process.

[0049] Next, as shown in FIG. 5(c), a registration process is executed, and the identification information D1 and the converted password D5 acquired in the registration information acquisition process are converted into the registered identification information D6 and the registered password D7, respectively, and then the registered identification information D6 and the registered password D7 are associated with each other and registered (written into the storage means 6).

[0050] As a result, the information used by the user when logging in (information to prove that the user is the person in question) is registered in the user authentication system.

[0051] Next, the operation of the authentication process of the login authentication system will be described.

[0052] In the authentication process, an authentication operation screen W2 is displayed on the operation terminal T1, as shown in Figure 3(b), and the authentication operation screen W2 displays an identification information input section 20, a password input section 21, a slide number input section 220, a slide range input section 221, and an authentication button B2.

[0053] When a user inputs identification information D1 into identification information input section 20, password D2 into password input section 21, the number of slides into slide number input section 220, and the slide range into slide range input section 221, and then presses authentication button B2, processing by authentication means 5 is initiated.

[0054] As shown in FIG. 6(a), the authentication means 5 executes an authentication conversion process to call the password conversion means 3, and causes the password conversion means 3 to create a converted password D5.

[0055] Then, the authentication means 5 executes an authentication information acquisition process, as shown in Figure 6 (b), and acquires the identification information D1 input to the input means 2, the converted password D5 created in the authentication conversion process, and the registered password D7 associated with the registered identification information D6 that matches the identification information D1.

[0056] Next, the authentication means 5 executes an authentication process as shown in FIG. 6(c), compares the converted password D5 acquired in the authentication information acquisition process with the registered password D7, and identifies whether the user who performed the login operation is the registered user based on the comparison result.

[0057] If the converted password D5 acquired in the authentication information acquisition process matches the registered password D7, the user who performed the login operation is identified as the registered user himself, and if the converted password D5 acquired in the authentication information acquisition process does not match the registered password D7, the user who performed the login operation is identified as not being the registered user himself.

[0058] In the user authentication system according to the present embodiment, the registration process and the authentication process are performed as described above. In the user authentication system, the information used when the user logs in (information required when the user logs in) includes not only the identification information D1 and the password D2 but also the slide information D3, so that the information used by the user when logging in is difficult to guess.

[0059] In addition, since the slide information D3 is information that specifies how to shift characters based on the arrangement of keys on the keyboard, it is easy for the user to remember and recall the information in association with the keyboard that he or she is using, making it easier for the user to manage the identification information D1, password D2, and slide information D3 used during the login operation.

[0060] Therefore, the user authentication system 1 of the present embodiment can provide the excellent effect of allowing a login operation to be performed using information that is unlikely to be known to a third party and that is easy for the user to manage.

[0061] Furthermore, the number of slides included in the slide information D3 is information related to the key arrangement of the keyboard, and therefore the user can easily remember and recall the number of slides in association with the keyboard being used.

[0062] Furthermore, although the slide range included in the slide information D3 may be familiar to the user who entered the slide range in the registration process, unfamiliar information is required for the login operation, making it difficult for persons other than the user to guess the information used for login.

[0063] In the user authentication system 1 of this embodiment, the password input section 21 and the slide information input section 22 (slide number input section 220, slide range input section 221) are displayed on the same screen by the input means 2, so that when performing the registration process, the user can register the identification information D1, etc. while looking at both the password D2 and the slide information D3 used to convert the password D2, making it easier to remember the password D2 and the slide information D3 while associating them with each other, and when performing the login operation, the password input section 21 and the slide information input section 22 are displayed on the same screen, just as when registering the identification information D1, etc., making it easier for the user to remember the password D2 and the slide information D3.

[0064] The user authentication system according to the present invention is not limited to the above-described embodiment, and it goes without saying that various modifications can be made without departing from the spirit and scope of the present invention.

[0065] Although not specifically mentioned in the above embodiment, the registration means 4 can execute an image display process for displaying, on the registration operation screen W1, an image of a keyboard (hereinafter referred to as the keyboard image) KP showing the arrangement of the keys on the keyboard, as shown in FIG. 7, and the image display process may be configured to display, among the areas (hereinafter referred to as the key areas) KA corresponding to the keys in the keyboard image KP, a key area KA1 corresponding to the characters contained in the password D2 and a key area KA2 corresponding to the characters contained in the converted password D5 in separate display modes.

[0066] In this way, the user can see how the password D2 he or she entered is converted into the converted password D5, along with the password D2 and the slide information D3 (number of slides D30, slide range D31), making it easier for the user to associate and remember the password D2 and the slide information D3.

[0067] Furthermore, as shown in FIG. 7, the registration means 4 may be configured to display a separate keyboard image KP for each predetermined number of characters (i.e., display multiple keyboard images KP) in the image display process, or may be configured to display one keyboard image. However, if it is configured to display multiple keyboard images KP, it becomes easier for the user to confirm the password D2 and the converted password D5 that he or she has entered.

[0068] 7 shows a keyboard image KP in which the password is "4rfc26ts5rsv", the number of slides is "3", and the slide range is "6". As shown in FIG 7, when there are duplicated characters in the password, the registration means 4 may add a display M to notify the same in the key area corresponding to the duplicated characters in the image display process.

[0069] In the above embodiment, the password conversion means 3 is configured to convert some of the characters included in the character string of the password D2 into other characters, but is not limited to this configuration. For example, the password conversion means 3 may be configured to convert all of the characters included in the character string of the password D2 into other characters.

[0070] The present disclosure includes the following contents.

[0071] (1) An input means for allowing a user to input identification information, which is unique information of the user, a password represented by a character string, and slide information for replacing a character included in the password with a character assigned to another key that is located at a position shifted from a reference key to which the same character is assigned in a key arrangement of a keyboard; a password conversion means for converting characters included in the password based on the slide information to generate a converted password; a registration means for registering the identification information and the converted password as registered identification information and a registered password in a state in which the registered identification information and the registered password are associated with each other; a user authentication system comprising: an authentication means for comparing the converted password with the registered password associated with the registered identification information that matches the identification information when the identification information, the password, and the slide information are input to the input means and the converted password is created by the password conversion means, and for identifying whether the user who performed the login operation is the registered user based on the comparison result between the converted password and the registered password.

[0072] In the user authentication system described above in (1), the information required when a user logs in includes not only identification information and a password but also slide information, making it difficult for the information used by the user to be guessed.

[0073] In addition, since the slide information specifies how to shift characters based on the arrangement of keys on the keyboard, it is easy for users to remember and recall the information in association with the keyboard they are using, making it easier for users to manage the identification information, password, and slide information used during login operations.

[0074] (2) In the user authentication system according to (1), The slide information may include a slide number used when selecting a key at a position shifted from the position of the reference key, the slide number indicating the number of keys to be shifted from the reference key.

[0075] According to the user authentication system of (2) above, the number of slides is information related to the key arrangement of the keyboard, and therefore the user can easily remember and recall the number of slides in association with the keyboard that he or she is using.

[0076] (3) In the user authentication system of (2) above, The slide information may include a slide range that specifies a range of characters to be converted by the password conversion means from a character string input as the password.

[0077] In this way, even if the slide range is information that is familiar to the user, information that is unfamiliar to a third party is required for the login operation, making it difficult for anyone other than the user to guess the information used for logging in.

[0078] (4) In any one of the user authentication systems (1) to (3), The input means may display a password input section for inputting the password and a slide information input section for inputting the slide information on the same screen.

[0079] According to the user authentication system of (4) above, the user can register the identification information while viewing both the password and the slide information used for password conversion, making it easier for the user to remember the password and the slide information while associating them with each other. Also, when the user performs a login operation, the password input section and the slide information input section are displayed on the same screen, as in the case of registering the identification information, making it easier for the user to remember the password and the slide information.

[0080] (5) In any one of the user authentication systems (1) to (4), The registration means may be configured to display a keyboard image showing the arrangement of the keys on the keyboard, and to display, among the keys in the keyboard image, keys corresponding to characters contained in the password and keys corresponding to characters contained in the converted password in separate display modes.

[0081] According to the user authentication system of (5) above, a user can register a password and slide information while viewing how the password changes depending on the password and slide information, making it easier for the user to remember the password and slide information entered at the time of registration. [Explanation of symbols]

[0082] 1...user authentication system, 2...input means, 3...password conversion means, 4...registration means, 5...authentication means, 6...storage means, 20...identification information input section, 21...password input section, 22...slide information input section, 220...slide number input section, 221...slide range input section, B1...registration button, B2...authentication button, C...element, C1...code, C2...code, D1...identification information, D2...password, D3...slide information, D30...slide number, D31...slide range, D5...conversion password, D6...registration identification information, D7...registration password, KA1...key area, KA2...key area, KM...keymap information, KP...keyboard image, M...display, T1...operation terminal, T2...processing terminal, W...operation screen, W1...operation screen for registration, W2...operation screen for authentication

Claims

1. an input means configured to display on a registration operation screen and an authentication operation screen an identification information input section for a user to input identification information which is unique to the user, a password input section for inputting a password represented by a character string, and a slide information input section for inputting slide information for replacing a character included in the password with a character assigned to another key located at a position shifted from a reference key to which the same character is assigned in a key arrangement of a keyboard; a password conversion means for executing a process of generating a converted password by converting characters included in the password inputted to the password input section based on the slide information; a registration means for registering the identification information and the converted password as registered identification information and a registered password in a state in which the registered identification information and the registered password are associated with each other; and an authentication means for performing a process of generating the converted password by converting characters included in the input password by the password conversion means when the registered identification information and the registered password are registered by the registration means and the identification information, the password, and the slide information are input to the input means, and a process of comparing the converted password with the registered password associated with the registered identification information that matches the identification information, and identifying whether the user who has performed the login operation is the registered user based on a comparison result between the converted password and the registered password. User authentication system.

2. The slide information includes a slide number used when selecting a key at a position shifted from the position of the reference key, the slide number indicating the number of the keys to be shifted from the reference key.

2. The user authentication system according to claim 1.

3. the slide information includes a slide range that specifies a range of characters to be converted by the password conversion means from among the character string input to the password input section as the password; The user authentication system according to claim 2.

4. the input means displays the password input section and the slide information input section on the same screen.

4. A user authentication system according to claim 1.

Images