An information processing device having a pattern authentication function, a control method thereof, and a program thereof.

Abstract

To address a technical problem that, according to conventional pattern authentication schemes, the confidentiality is not ensured since a pattern input by a user is visually displayed while the pattern is being input.SOLUTION: A UI component is provided which does not depict a trace of a pattern input by a user while the user is inputting the pattern, and which changes a display in accordance with the input.SELECTED DRAWING: Figure 8

Description

[Technical Field]

[0001] The present invention relates to an information processing device having a pattern authentication function, a control method thereof, and a program. [Background technology]

[0002] In recent years, there have been a wide variety of authentication methods for devices such as multifunction peripherals and mobile terminals. One known authentication method (pattern authentication) involves a user tracing a figure (trajectory) displayed on a touch panel with their finger and comparing the pattern of the traced figure with a pre-registered pattern. Personally used devices such as mobile terminals often display the trajectory traced by the user's finger or change the appearance of the traced object during pattern authentication, allowing the user's operation to be visually confirmed. On the other hand, if a user's finger trace or other trace is displayed on a device shared by multiple users, such as a multifunction peripheral, confidentiality may be compromised due to a third party snooping. In response to this issue, Patent Document 1 discloses a method of displaying only a portion of the trajectory traced by the user's finger, rather than the entire trajectory. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2016-170721 Summary of the Invention [Problem to be solved by the invention]

[0004] However, even if a part of the trajectory is displayed as in Patent Document 1, it is still possible for a third party to peek at the user's operations and infer patterns, etc. However, if the display on the operation panel is not changed at all by user operations, the user cannot check their own operations, which reduces operability.

[0005] SUMMARY OF THE INVENTION It is therefore an object of the present invention to provide a method for inputting authentication information that does not impair user operability and ensures confidentiality. [Means for solving the problem]

[0006] An information processing device having an operation panel, the information processing device comprising: a display control means for displaying a plurality of first display objects for receiving authentication information on the operation panel; and a receiving means for receiving authentication information based on a plurality of first display objects selected by receiving an operation of moving an indicator touched on the touch panel while keeping the indicator touched, wherein when the display control means receives the operation, the display control means does not display an indication that a first display object has been selected, but displays an indication that the operation has been received. Furthermore, if the authentication information received by the receiving means is different from the registered authentication information, the first display object selected by the operation is displayed so as to be recognizable by the user. 1. An information processing device comprising: [Effects of the Invention]

[0007] It is possible to input authentication information while ensuring confidentiality without reducing user operability. [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram illustrating a system configuration. [Figure 2] FIG. 2 is a diagram illustrating a hardware configuration of an MFP. [Figure 3] FIG. 2 is a diagram illustrating a software configuration of the MFP. [Figure 4] FIG. 10 is a diagram showing a user authentication setting screen. [Figure 5] FIG. 10 is a diagram showing a screen for editing user account information. [Figure 6] FIG. 10 is a diagram showing a menu and a login screen. [Figure 7] 10A to 10C are diagrams illustrating an operation flow and screen transitions when registering a pattern. [Figure 8] FIG. 10 is a diagram showing an operation flow and screen transitions when pattern authentication is used. [Figure 9]10 is a flowchart showing an operation during pattern input in pattern authentication. [Figure 10] FIG. 10 is a diagram illustrating logic for determining dot selection. [Figure 11] FIG. 10 is a diagram showing an input screen for secure information in the second embodiment. [Figure 12] FIG. 10 is a diagram illustrating the assignment of values ​​to dots. DETAILED DESCRIPTION OF THE INVENTION

[0009] Hereinafter, embodiments of the present invention will be described with reference to the drawings. An example of an information processing device to which the present invention is applied is an MFP (Multifunction Peripheral) equipped with functions such as copying, printing, and scanning. However, the information processing device is not limited to an MFP; it may also be a mobile terminal, a personal computer (PC), or the like.

[0010] Example 1 <System configuration> The system configuration of this embodiment will be described with reference to Figure 1. MFP 101 is an MFP to which the present invention is applied. MFP 101 is connected to a network LAN (Local Area Network) 103. MFP 101 can receive print jobs and the like from terminals (e.g., PC 102) connected to network LAN 103. In addition to the devices shown here, devices such as an authentication server may also be connected to network LAN.

[0011] <Hardware configuration> FIG. 2 is a simplified diagram showing the hardware configuration of the MFP 101. The CPU 201 is a central processing unit (processor) that controls the overall operation of the MFP 101. The RAM (Random Access Memory) 203 is a volatile memory, a work area, and is used as a temporary storage area for expanding various control programs stored in the ROM 202 and the HDD 204.

[0012] The ROM 202 is a nonvolatile memory that stores a boot program for the MFP 101. The HDD 204 is a nonvolatile hard disk with a larger capacity than the RAM 203. The HDD 204 stores a control program for the MFP. The OS (Operating System) and application programs are also stored in the HDD 204.

[0013] When the MFP 101 starts up, the CPU 201 executes a boot program stored in the ROM 202. This boot program reads out an OS (Operating System) program stored in the HDD 204 and loads it on the RAM 203. After executing the boot program, the CPU 201 subsequently executes the OS program loaded on the RAM 203 and controls the MFP 101. The CPU 201 also stores data used for operations by the control program on the RAM 203 and reads and writes the data.

[0014] In the MFP 101, one CPU 201 executes each process shown in the flowcharts described below, but other configurations are also possible. For example, multiple CPUs or microprocessors (MPUs) can cooperate to execute each process shown in the flowcharts described below. Also, some of the processes described below can be executed using hardware circuits such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field-Programmable Gate Array).

[0015] The operation panel 205 is a touch-operable display (touch panel) that displays various information and accepts operations from the user.

[0016] The printer 206 is a printer engine that prints print data received from the outside via a communication unit 208 and digital data acquired from a scanner 207. The scanner 207 is a scanner device that reads a paper document and converts it into digital data.

[0017] The communication unit 208 is a network interface for connecting to the Internet or an office LAN (Local Area Network).

[0018] The IC card reader 209 is a device for reading information used for user authentication from an IC card, and is a unit required to realize IC card authentication. In this embodiment, a multifunction peripheral (MFP101) having a printer function and a scanner function will be described as an example, but the present invention is not limited to a multifunction peripheral as long as it is an information processing device having an operation panel that can accept pattern input.

[0019] <Software configuration> FIG. 3 is a simplified diagram showing the software configuration of the MFP 101.

[0020] The local UI 301 of the MFP 101 provides a user interface to be displayed on the display of the operation panel 205. The local UI 301 also includes a menu screen where the user selects a function, an application screen, and a UI platform that controls screen transitions. For example, the local UI 301 includes screens such as a copy application that controls the printer 206 and scanner 207 to provide the user with a copy machine, and an application that controls the scanner 207 and communication unit 208 to provide a function for sending scanned documents, and controls these screens.

[0021] The remote UI 302 has an HTTP (Hypertext Transfer Protocol) server function and provides a user interface configured in HTML (HyperText Markup Language) to a remotely accessed user. The user can access the remote UI 302 using a web browser on a PC terminal and change the settings and use the functions of the MFP 101 on the displayed screen.

[0022] The login service 303 is a software module that authenticates a user who uses the local UI 301 or the remote UI 302. It manages user information and the like of the MFP 101, authenticates the user, and performs processing to log in to the MFP.

[0023] The IC card reader driver 304 is a driver that controls the IC card reader 209 , acquires information from the IC card, and provides the IC card information to the login service 303 .

[0024] <User Account> The following describes the user count managed by the login service 303. The login service 303 stores and manages the user count in a user count table such as that shown in Table 1. The user count table (Table 1) is a database recorded on the HDD 204. Note that a database of another node on the network may be used after encrypting the communication path and storage and preventing tampering. The user count table records user names, passwords, card IDs used for IC card authentication, patterns, roles, email addresses, and the like, each associated with each other. Each row records information about each user.

[0025] [Table 1]

[0026] "User name" is identification information for identifying a user. "Password" must be entered when authenticating a user based on the user's identification information and password. "Card ID" is the ID card identifier used for logging in with the ID card. "Pattern" is authentication information for pattern authentication, which will be described later. Authentication performed by a user tracing their finger over display objects displayed on operation panel 205 is called pattern authentication, and the display objects that are selected by tracing their finger and the order in which they are selected are called patterns. "Role" is information that indicates the user's usage authority for MFP 101. Examples of each role and usage authority are shown in the role information table (Table 2) below. In addition to the role definitions that MFP 101 has when shipped from the factory, users may be able to set detailed usage authority and create new roles.

[0027] [Table 2]

[0028] <User authentication function> Next, a user authentication function provided in the MFP 101 will be described with reference to FIGS.

[0029] 4 shows an example of a UI (user interface) for user authentication settings of the MFP 101 provided by the remote UI 302. In addition to the remote UI 302, a similar UI may be provided for the administrator on the local UI 301.

[0030] Reference numeral 401 denotes a Remote UI screen for configuring user authentication settings. Only users with the Administrator role can access this screen. Although not shown, the login service 303 displays a login screen created in HTML to users accessing the Remote UI 302. The login screen for accessing the Remote UI 302 accepts input of a user name and password to authenticate the user, and checks whether access to the Remote UI 302 is permitted by referring to Table 1.

[0031] Reference numeral 402 denotes an example of an item for setting the login method for the local UI. As the login method, one or more of "keyboard authentication," "simple login," and "IC card authentication" can be selected. Each login method will be explained below.

[0032] <Keyboard authentication> Keyboard authentication provides a method of logging in by inputting a user name and password via a keyboard on a login screen that accepts input for logging in. An example of the login screen for keyboard authentication is shown in 602 in Fig. 6. When inputting, the user name and password are input using the hard keys provided on the MFP 101 or software keys (not shown).

[0033] <Simple Login> Simple login displays buttons corresponding to registered users on the login screen. The buttons display an icon image that serves as the user's avatar and the user name. The user logs in to the MFP 101 by having the user select the button that corresponds to their avatar. Simple login can be used in combination with pattern authentication to prevent unauthorized logins. If the user has set a pattern for pattern authentication, the user is identified by accepting the button selection corresponding to the user, and authentication is performed using the pattern corresponding to the identified user. 403 is a setting that allows the administrator to force the use of pattern authentication when using simple login. By enabling the setting of 403, it is possible to force all users to perform pattern authentication. If not forced, each user can optionally perform pattern authentication. Details of pattern authentication will be described later.

[0034] An example of the login screen for simple login is shown in 603 of FIG. 6. In addition to simple login, when keyboard authentication is enabled, a button 605 for displaying the keyboard authentication screen is displayed on the simple login screen 603. The user can switch the login method by pressing the button 605. Also, in addition to simple login, when IC card authentication is enabled, while the simple login screen is being displayed, an IC card touch from the user is accepted, and the user is identified from the IC card placed on the IC card reader 209.

[0035] <IC card authentication> User authentication is performed using an IC card. An example of the login screen for IC card authentication is shown in 604 of FIG. 6. IC card authentication obtains the card ID from the IC card placed on the IC card reader 209, identifies the user associated with the card ID by referring to the user information table, and logs the user in to the MFP 101. In order to prevent unauthorized use or forgery of the IC card by others, it can be used in combination with pattern authentication. When the user has set pattern authentication, after authentication with the IC card, pattern authentication corresponding to the user identified from the card ID is performed. By combining the authentication of the ownership element of the IC card and the authentication of the knowledge element of the pattern, it can be used as a two-factor authentication function. 404 is a setting for the administrator to enforce the use of pattern authentication when using IC card authentication. By enabling the setting of 404, the execution of pattern authentication can be enforced for all users. If not enforced, each user can also optionally execute pattern authentication. When the administrator intentionally enforces the use of two-factor authentication, the setting of 404 is enabled to enforce the use of the pattern, and "keyboard authentication" and "simple login", which are not two-factor authentication, are set to OFF. Details of pattern authentication will be described later.

[0036] Reference numeral 405 denotes an example of an item for setting the timing for displaying the login screen. The timing for displaying the login screen can be set to either "when MFP operation starts" or "when a function is selected." If "when a function is selected" is selected, functions that require login are also selected and set. For example, when the MFP 101 is shipped from the factory, "when a function is selected" is selected by default, and "personal settings" and "administrative settings" are set by default as functions that require authentication. With these settings, when the MFP is started up, the menu screen 601 can be displayed without user authentication. Then, if the user selects the functions "personal settings" or "administrative settings" that require authentication, the login screens (602, 603, 604) are displayed and the user is authenticated.

[0037] If "When device operation starts" is set, when the MFP 101 starts up, a login screen (602, 603, 604) is displayed, and authentication is required for all users who use the MFP menu 601. If the user performs a login operation on the login screen and user authentication is successful, the menu screen is displayed.

[0038] <User Management> Reference numeral 406 denotes an example of an item for managing the accounts of users who use the MFP 101. It provides functions for registering a new user account and selecting, editing, or deleting a registered account. For example, if an "Admin" selects the "Alice" account in 406 and presses the edit button, the remote UI 302 displays the user edit screen shown in FIG. 5. The user edit screen allows users to edit and save passwords, card IDs, roles, email addresses, and the icon image displayed on the simple login button. The user edit screen also provides a function for displaying the pattern registration status so that administrators can understand the pattern registration status of general users. It also provides a function for deleting pattern registration in the event that a general user forgets a registered pattern and requests the administrator to reset the pattern. Because it is assumed that patterns are registered by each general user themselves using the local UI, the screen does not provide a function for administrators to register other people's patterns.

[0039] <How to register a pattern> Next, an example of a method for registering a pattern to be used for authentication will be described with reference to Fig. 7. Fig. 7 shows a screen flow assuming that "IC card authentication" is set in the setting of 402 and "when device operation starts" is set in the setting of 405.

[0040] <When the setting for forcing the use of pattern authentication 404 is disabled> The operation and screen flow for registering a pattern when the setting 404 for forcing the use of pattern authentication is disabled will be explained.

[0041] While the login screen 604 for IC card authentication is displayed, the user holds their IC card over the card reader to log in to the MFP 101. After successfully logging in to the MFP 101, the menu screen 601 is displayed. A user who wants to use pattern authentication selects “Personal Settings” from the menu to display the personal settings screen 701. “Personal Settings” provides functions for registering and changing the user’s personal authentication information and profile. For example, the personal settings screen 701 provides functions such as “Registering and Changing an Avatar Icon Image,” “Registering and Changing a Password,” and “Registering and Changing a Pattern.” When the user selects “Pattern Registration and Change” on the personal settings screen 701, the pattern registration and change screen 702 is displayed. For example, the pattern registration and change screen 702 displays a total of 16 dots in four columns and four rows, and the user is allowed to trace any shape with their finger across the screen area where the dots are displayed. Here, the appearance of the selected display object changes as the user traces their finger, and the traced path is displayed as a line. Although dots are shown as an example of a display object that the user traces with their finger, other shapes such as a rectangle may also be used. To prevent user input errors, the user may be asked to enter the same shape multiple times as confirmation input. For example, the dots and order that the user's finger passes over are treated as pattern information, which is associated with the account of the currently logged-in user and stored in a user count table (Table 1). For example, numbers or letters can be internally assigned to 4x4 (16 dots) of dots as shown in Figure 12.

[0042] For example, the pattern (pattern information) shown in the pattern registration change screen 702 can be expressed as "012369cde". When stored in the user count table (Table 1), the pattern information is encrypted and stored. Alternatively, it may be converted into a digest using a hash function and stored. It is generally recommended to generate a digest using PBKDF2 (Password-Based Key Derivation Function 2). For this reason, the salt used for PBKDF2 and the digest calculated by PBKDF2 may be stored. When the registration button is pressed and the registration of the pattern information is successful, a screen 703 indicating registration completion is displayed. When the user closes screen 703, the screen returns to the personal settings screen 701.

[0043] <When the setting 404 for forcing the use of pattern authentication is enabled> The operation and screen flow for registering a pattern when the setting 404 for forcing the use of pattern authentication is enabled will be explained.

[0044] With login screen 604 for IC card authentication displayed, the user attempts to log in to the MFP by holding their IC card over a card reader. If the card ID of the IC card has already been registered in association with an account, but pattern information associated with the account has not yet been registered, a message indicating that pattern registration is required is displayed as shown in screen 704, and the user is guided to pattern registration screen 702. When the user's pattern registration is complete, screen 703 indicating completion of registration is displayed. When the user closes screen 703, the user's login is complete, and menu screen 601 is displayed. After screen 702 is displayed, a dot screen may be displayed again to allow the user to confirm the pattern entered on screen 702, and the user may be prompted to enter the same pattern as entered on screen 702. Note that when the user attempts to log in to the MFP by holding their IC card over a card reader, if the user's pattern has already been registered, a screen for pattern authentication is displayed.

[0045] If "Simple Login" is enabled in the settings of 402, a login screen 603 for Simple Login is displayed instead of the IC card authentication screen 604 in Fig. 7, and the user account is specified by selecting a button instead of an IC card. The screen displayed after user identification and the operation flow required for pattern registration are the same whether "IC Card Authentication" or "Simple Login" is used.

[0046] <Details of pattern authentication> Next, the operation during pattern authentication will be described with reference to Fig. 8, Fig. 9, and Fig. 10. Fig. 8 is a diagram showing the screen transition when a user who has registered pattern information logs in to MFP 101 using card authentication and pattern authentication (that is, a screen transition diagram when setting 404 for forcing the use of IC card authentication and pattern authentication is enabled). Fig. 9 is a flowchart showing the operation during pattern input executed by CPU 201 on the pattern authentication screen. Fig. 10 is a diagram for explaining the logic for determining whether a dot has been selected by the user.

[0047] In this embodiment, the procedures shown in the flow below are recorded in the software programs of the local UI 301, remote UI 302, login service 303, and IC card reader driver 304. The software programs are stored in non-volatile storage such as the ROM 202 or HDD 204, loaded into the RAM 203, and the flow is executed by the CPU 201. Furthermore, the software such as the local UI 301, remote UI 302, login service 303, and IC card reader driver 304 mutually provide APIs (Application Programming Interfaces) and operate in cooperation by mutually using the APIs. In the description of the operation flow, the calling of the APIs will be omitted.

[0048] While the IC card authentication login screen 604 is displayed, the user attempts to log in to the MFP 101 by holding their IC card over the card reader. The login service 303 acquires card information (such as the card ID) of the held IC card via the IC card reader driver 304. The login service 303 references the user count table (Table 1) and identifies the user account associated with the acquired card ID. If the corresponding card ID is not registered in the user count table (Table 1) and there is no associated user account, the login service 303 displays an error message on the operation panel indicating that the card is unregistered (not shown). If the user account is successfully identified, it confirms that a pattern has been registered in the user count table (Table 1) and displays the pattern authentication screen 801 (S901). The pattern authentication screen includes a pattern input area displaying 4 × 4 (16 dots) indicated by dotted lines in the figure, as well as a UI widget 802 or UI widget 803 whose display changes depending on the number of dots selected. The user touches a pattern input area displayed on operation panel 205 with a finger as an indicator, and then moves the finger (drag operation) without removing the touching finger from operation panel 205 to trace the pattern as if selecting dots. During this time, to prevent other users peeking at operation panel 205 from inferring the input pattern based on the drawing on operation panel 205, the appearance of the dots is not changed and lines or trajectories between the dots are not drawn. Here, an example is shown in which neither the appearance of the dots nor the lines or trajectories between the dots are changed so that the pattern cannot be inferred by a third party, but a configuration in which only one of these is not performed may also be used, or a configuration in which the changes to the appearance of the dots and the drawing of the lines or trajectories between the dots are displayed so that they are difficult for the user to see. The shape of the pattern refers to the trajectory (figure) traced by the user's finger.

[0049] If the appearance of the dots selected by the user's operation is not changed or if lines between the dots are not drawn, the user will not be able to visually confirm their operation. In other words, if no response is given on the screen to user operations, the user will not be able to confirm their operation and may suspect a malfunction of the device. Therefore, in this embodiment, a response to the user's pattern input is made by changing the rendering of UI widget 802 or UI widget 803. Specifically, UI widget 802 is a progress bar that indicates the progress of pattern input. For example, if the maximum number of dots that can be registered in a pattern is 16, the progress bar has a scale for 16 points. When it is determined that the user has selected a new dot during pattern input, the display of UI widget 802 is updated to increment the scale by one. For example, when the user selects dots represented by "012369cde," the display of UI widget 802 changes as shown in Table 3 below.

[0050] [Table 3]

[0051] The number of ticks on the progress bar can also be customized according to the pattern set by the user by making it the same as the number of dots in the pattern set by each user. For example, if the set pattern is "012369cde", the number of ticks on the progress bar will be 9. This allows you to know that input is complete when the progress bar reaches 100%.

[0052] Furthermore, when a new dot is selected by a user operation, the pattern corresponding to that user may be referenced, and the progress bar may be updated only if the correct dot is selected, and may not be updated if the correct dot is selected. This allows the user to know that they have selected the wrong dot.

[0053] The above-mentioned UI widget drawing update operation will be described with reference to the flowchart in FIG. 9 and FIG. 10. The login service 303 displays the pattern authentication screen 801 (S901), and waits for and detects a user operation in the pattern input area (S902). The login service 303 determines the type of operation detected (S903). The main types of operation are "a MOVE event indicating that the contact position of the finger on the operation panel has changed when the user's finger touches the operation panel 205, or each time the finger is slid while touching" and "a RELEASE event indicating that the finger has been released from the operation panel 205." When a MOVE event is detected, the coordinates (x2, y2) of the current contact position of the finger on the operation panel 205 are obtained from the MOVE event and stored (S904).

[0054] Next, it is determined whether a new dot has been selected by the sliding of the finger (S905). Depending on the capabilities of the operation panel 205, not all coordinate positions touched by the user's finger can be acquired from the operation panel 205; only partial coordinates can be acquired. For example, if coordinates (x1, y1) are acquired from the previous MOVE event, it is assumed that the finger passed over the line segment connecting the coordinates (x1, y1) and (x2, y2). The distance between the line segment connecting the coordinates (x1, y1) and (x2, y2) and the center coordinates of each dot's circle is calculated, and if the distance is smaller than the radius of the dot, it is determined that the line segment is inside the outer circle, and that the dot has been selected. If there is no dot whose line segment is inside the outer circle, or if the dot selected last time is the same as the dot selected this time, it is determined that a new dot has not been selected, the MOVE event processing is terminated, and the process returns to S902 to wait for the next MOVE event or RELEASE event to occur.

[0055] If it is determined that a new dot has been selected, the newly selected dot is replaced with numerical or alphabetical information and stored in addition to the previously selected dots, and the drawing of the UI widget 802 is updated according to the number of selected dots as shown in Table 3 (S906). Then, the process returns to S902 and waits for the next MOVE event or RELEASE event to occur. As described above, when it is determined that a new dot has been selected, the pattern corresponding to the user may be referenced, and only if the correct dot has been selected may the drawing of the UI widget 802 be updated in S906. If the correct dot has not been selected, the drawing of the UI widget 802 may not be updated, or an error screen may be displayed.

[0056] UI widget 802 is an example of a UI widget that shows a response to a user's pattern input, but other UI widgets may be used as long as they can show a UI response to a pattern input. For example, UI widget 803 is shown as an example of another UI widget. The UI widget is a widget with an asymmetrical appearance, and it displays an even number of dots (including 0) when the number of selected dots is even, and reverses its rendering when the number of selected dots is odd. This changes the appearance of the UI widget each time the user selects a new dot, allowing the user to know that the selection operation is progressing. This is also secure because the total number of selected dots cannot be revealed to other users from the UI rendering. For example, when a user selects dots represented as "012369cde," the display of UI widget 803 changes as shown in Table 4 below.

[0057] [Table 4]

[0058] The UI widget that shows the response to the user's pattern input is not limited to this and may take other forms. For example, it may display the total number of selected dots, and each time the user selects a dot, a countdown of the displayed number may be displayed. In other words, any display form may be used as long as it does not allow the pattern to be identified even if someone spies on the user's pattern input.

[0059] Furthermore, instead of UI components, hardware such as lighting of an LED light or vibration may be controlled to notify the user of the selection of a new dot or completion of pattern input.

[0060] Next, the operation flow executed by the CPU 201 after a pattern is input will be described with reference to the screen transitions in FIG. 8 and the flowchart in FIG. 9. When a user inputs a pattern on the pattern input screen 801 and removes his / her finger from the pattern input area, a RELEASE event is notified to the login service 303. The login service 303, which detects the occurrence of the RELEASE event in S903, refers to the user count table (Table 1) and performs pattern authentication by comparing the pre-registered pattern of the user identified by IC card authentication with the pattern input on the pattern input screen 801 (S907). If the patterns match, in S908, the authentication is determined to be OK, and a process is performed to log the successfully authenticated user into the MFP (S909). Specifically, information on the successfully authenticated user is read from the user count table (Table 1) into the RAM 203, and a structure (hereinafter referred to as a login context) that stores information on the currently logged-in user is instantiated. The information stored in the login context includes the user name, role, email address, etc., as shown in Table 5.

[0061] [Table 5]

[0062] The login service 303 notifies the local UI 301 that the user has logged in to the MFP 101, along with the login context. The local UI 301 displays the menu screen 601 (S910). If the pre-registered pattern does not match the input pattern in S908, the local UI 301 determines that authentication is unsuccessful, updates the rendering of the pattern authentication screen 804, and displays the UI widget 805 (S911). The UI widget 805 is a button for confirming the shape of the pattern the user just input. When it is detected (S912) that the user has operated the UI widget 805, the shape of the pattern input by the user is displayed by changing the appearance of the selected dots or by drawing lines or trajectories between the dots (S913). For example, when a button on the UI widget 805 is pressed, the shape of the pattern input by the user is displayed as shown in screen 806 by changing the appearance of the selected dots or by drawing lines or trajectories between the dots. If it is detected that the user has again touched the pattern input area with his / her finger while drawing screens 804 and 806, the drawing of UI component 805 and the drawing of the pattern shape entered by the user are stopped, the display state is returned to that of pattern input screen 801, and the MOVE event and RELEASE event are processed again.

[0063] Furthermore, when pattern authentication fails, instead of displaying UI widget 805 and requiring the user to press a button on UI widget 805, the pattern entered on operation panel 205 may be automatically displayed for a certain period of time (for example, two seconds). Alternatively, the entered pattern may be displayed only while a predetermined button (for example, UI widget 805) is being touched. In this way, when pattern authentication fails, the pattern entered by the user is displayed, allowing the user to notice an operational error, etc.

[0064] 8, an example using "IC card authentication" has been described, but when "simple login" and pattern authentication are used in combination, the operation after displaying pattern authentication screen 801 is the same. When "simple login" and pattern authentication are used in combination, the user account to be used for pattern authentication is identified by pressing a user button on simple login screen 603, rather than by an IC card.

[0065] <Effects of Example 1> As described above, when a user inputs a pattern, the shape of the pattern is not drawn on the UI so that the user can recognize it. An embodiment has been described in which a means for confirming the input pattern is provided only when the input pattern is incorrect.

[0066] The above configuration enables secure login to the MFP without allowing others peeking at the operation panel to see the pattern shape, etc. Furthermore, by incorporating a UI component that responds to the pattern input, the user can check their own operation. Furthermore, a user who has entered a wrong pattern can determine whether they remembered the pattern incorrectly or whether they remembered the pattern correctly but made a mistake and entered a different pattern.

[0067] In this embodiment, an example has been shown in which the shape of a pattern is drawn when registering a pattern, but it is also possible to provide a UI component that shows the pattern input status without drawing the shape of the pattern as in the pattern authentication screen when registering a pattern. This makes it possible to configure an MFP equipped with secure pattern authentication that does not display the shape of the correct pattern at all.

[0068] Furthermore, in this embodiment, an example has been shown in which pattern input is performed by displaying display objects such as dots, but a configuration in which no display objects are displayed is also possible. A configuration in which pattern input is performed in an area where nothing is displayed is also possible. In this case, the shape of the pattern input is not displayed so that it can be recognized by the user. A progress bar or the like showing the progress of pattern input is displayed.

[0069] (Second Example) In the first embodiment, an example was shown in which confidentiality is ensured by not drawing the pattern shape, etc., entered during pattern authentication. In addition to pattern authentication, for example, when entering login information, etc., on a soft keyboard, if a touch animation of the keys touched by the user is displayed, it may be peeked at by a third party and the login information may be inferred. Therefore, in this embodiment, an example will be described in which the touch animation of the soft keyboard is not displayed when entering confidential information. Here, touch animation refers to the display of a touched key that is different from other keys so that the user can visually identify the touched key. Since the basic configuration of this embodiment is the same as that of embodiment 1, only the differences will be shown.

[0070] FIG. 11 shows an example of a secure information input screen in this embodiment.

[0071] Screen 1101 is a screen for entering authentication information, and includes a soft keyboard 1103 for entering authentication information and a UI widget 1102 whose display changes depending on the number of keys touched. The soft keyboard 1103 does not display key touch animation even when it receives a touch operation from the user. Instead, the display of UI widget 1102 is updated each time the user touches and selects a key on the soft keyboard 1103. The UI widget 1102 performs the same display control as the UI widget 802 in the first embodiment.

[0072] Screen 1111 is a screen for inputting secure information, and includes a soft keyboard 1113 for inputting secure information and a UI widget 1112 whose display changes depending on the number of keys touched. The soft keyboard 1113 does not display key touch animation even when it receives a touch operation from the user. Instead, the display of UI widget 1112 is updated every time the user touches and selects a key on the soft keyboard 1113. The UI widget 1112 performs the same display control as the UI widget 803 in the first embodiment.

[0073] According to this embodiment, confidentiality can be ensured even when secure information is entered using a soft keyboard, and operability is improved because the user can visually confirm the response to his or her operation.

[0074] (Other Examples) In the above embodiment, an example of inputting authentication information has been shown, but other information may be input as long as it is secure information.

[0075] The present invention can also be realized by executing the following process. That is, software (program) that realizes the functions of the above-described embodiments is supplied to a system or device via a network or various storage media, and the computer (or CPU, MPU, etc.) of the system or device reads and executes the program. In this case, the computer program and the storage medium storing the computer program constitute the present invention. [Explanation of symbols]

[0076] 101 MFP 205 Operation Panel 303 Login Service 801 Pattern authentication screen 802 UI widget showing the progress of pattern input 803 UI widget showing the progress of pattern input 805 UI parts for checking the shape of the input pattern

Claims

1. An information processing device having an operation panel, a display control means for displaying a plurality of first display objects for receiving authentication information on the operation panel; a receiving means for receiving authentication information based on a plurality of first display objects selected by receiving an operation of moving an indicator touched on the operation panel while keeping the indicator touched, the display control means, when accepting the operation, performs a display indicating that the operation has been accepted without performing a display indicating that a first display object has been selected, and further, when the authentication information accepted by the receiving means differs from registered authentication information, displays the first display object selected by the operation so as to be recognizable by a user.

2. An information processing device having an operation panel, a display control means for displaying a plurality of first display objects for receiving authentication information on the operation panel; a receiving means for receiving authentication information based on a plurality of first display objects selected by receiving an operation of moving an indicator touched on the operation panel while keeping the indicator touched, The display control means displays an indication that the operation has been accepted without displaying a trajectory of the movement of the indicator based on the operation, and further, when the authentication information accepted by the receiving means differs from registered authentication information, displays the shape of a pattern based on the operation so that the user can recognize it.

3. 3. The information processing apparatus according to claim 1, further comprising a login unit that allows a user to log in to the information processing apparatus based on the authentication information received by the receiving unit.

4. 4. The information processing apparatus according to claim 1, wherein the display control means, upon receiving the operation, does not change the appearance of the selected first display object.

5. 5. The information processing apparatus according to claim 1, wherein the display control means does not display a line indicating a trajectory of movement of the indicator caused by the operation.

6. 6. The information processing device according to claim 1, wherein, when the display control means accepts the operation, it displays a second display object whose display changes each time a first display object is selected by the operation.

7. 7. The information processing apparatus according to claim 6, wherein the second display object is a progress bar.

8. An information processing device described in any one of claims 1 to 7, characterized in that the operation is a drag operation that traces multiple first display objects.

9. 9. The information processing apparatus according to claim 1, wherein, when the display control means accepts the operation, the display control means performs a display that allows the user to know the number of display objects selected by the operation.

10. 10. The information processing apparatus according to claim 1, wherein the information processing apparatus is capable of executing pattern authentication, and the receiving means receives a pattern based on the operation.

11. 11. The information processing apparatus according to claim 10, wherein the display control means does not display the shape of the pattern when the operation is accepted.

12. 12. The information processing device according to claim 1, wherein the display control means, when receiving a predetermined operation from a user, displays a first display object selected by the operation so as to be recognizable by the user.

13. A control method executed by an information processing device having an operation panel, comprising: a display control step of displaying a plurality of first display objects for receiving authentication information on the operation panel; a receiving step of receiving authentication information based on a plurality of first display objects selected by receiving an operation of moving an indicator touched on the operation panel while keeping the indicator touched, the display control step, when the operation is accepted, presents a display indicating that the operation has been accepted without presenting a display indicating that a first display object has been selected, and further, when the authentication information accepted by the receiving means differs from registered authentication information, presents the first display object selected by the operation so as to be recognizable by the user.

14. A control method executed by an information processing device having an operation panel, comprising: a display control step of displaying a plurality of first display objects for receiving authentication information on the operation panel; a receiving step of receiving authentication information based on a plurality of first display objects selected by receiving an operation of moving an indicator touched on the operation panel while keeping the indicator touched, The control method is characterized in that, in the display control step, a display indicating that the operation has been accepted is performed without displaying the trajectory of the movement of the indicator based on the operation, and further, if the authentication information accepted by the receiving means differs from the registered authentication information, the shape of a pattern based on the operation is displayed so that it can be recognized by the user.

15. A program for causing a computer to function as each of the means described in claims 1 to 12.

Images