Method and system for supporting user authentication based on touch location

Abstract

According to one aspect of the present invention, a method for supporting user authentication based on touch location is provided, comprising the steps of: obtaining information regarding a touch location for a key corresponding to each of at least one character included in the string associated with user authentication from a user's touch input; and generating data that forms the basis for determining the success or failure of the user authentication based on the information regarding the touch location and the information regarding the user's touch habit.

Description

Technology Field

[0001] The present invention relates to a method and system for supporting user authentication based on touch location. Background Technology

[0002] Most services provided via the web or apps require users to authenticate, such as by logging in. Traditionally, a combination of an ID and password has been used for authentication; however, to enhance security, technologies have been introduced that perform authentication using methods different from or additional to the ID and password combination.

[0003] As an example of prior art regarding this, the technology disclosed in U.S. Patent Publication No. 4,805,222 can be cited, according to which user authentication can be performed based on typing patterns (input intensity, rhythm, etc.) using a keyboard, i.e., Key Stroke Dynamics. However, since this prior art uses a physical keyboard, there is a problem in that it is difficult to apply to touch-based devices such as smartphones and tablets.

[0004] Accordingly, the inventor(s) propose a technology that supports user authentication based on touch location by obtaining information regarding a key corresponding to each of at least one character included in a string associated with user authentication from a user's touch input, and generating data that serves as a basis for determining the success or failure of user authentication based on the information regarding the touch location and information regarding the user's touch habits. Prior art literature

[0005] U.S. Patent Publication No. 4,805,222 (February 14, 1989) The problem to be solved

[0006] The present invention aims to solve all the problems of the aforementioned prior art.

[0007] In addition, the present invention has another objective of obtaining information regarding a touch location for a key corresponding to each of at least one character included in a string associated with user authentication from a user's touch input, and generating data that serves as a basis for determining the success or failure of user authentication based on the information regarding the touch location and information regarding the user's touch habits.

[0008] In addition, another objective of the present invention is to enhance the security of a user authentication system by supporting user authentication to be performed based on touch location.

[0009] In addition, another objective of the present invention is to efficiently enhance the security of a Single Factor Authentication system. means of solving the problem

[0010] A representative configuration of the present invention for achieving the above objective is as follows.

[0011] According to one aspect of the present invention, a method is provided comprising the steps of: obtaining information regarding a touch location for a key corresponding to each of at least one character included in the string associated with user authentication from a user's touch input; and generating data that forms the basis for determining whether the user authentication is successful based on the information regarding the touch location and the information regarding the user's touch habit.

[0012] According to another aspect of the present invention, a system is provided comprising: an information acquisition unit that acquires information regarding a touch location for a key corresponding to each of at least one character included in the string and a string associated with user authentication from a user's touch input; and an authentication support unit that generates data that forms the basis for determining whether the user authentication is successful based on the information regarding the touch location and the information regarding the user's touch habit.

[0013] In addition to this, other methods for implementing the present invention, other systems, and non-transient computer-readable recording media for recording a computer program for executing said methods are further provided. Effects of the invention

[0014] According to the present invention, information regarding the touch location of a key corresponding to each of at least one character included in a string associated with user authentication and a string from a user's touch input is obtained, and data that serves as a basis for determining the success or failure of user authentication is generated based on the information regarding the touch location and the information regarding the user's touch habit, thereby enabling user authentication based on the touch location.

[0015] In addition, according to the present invention, by supporting user authentication based on touch location, the security of the user authentication system can be enhanced.

[0016] In addition, according to the present invention, the security of a single-factor authentication system can be efficiently enhanced. Brief explanation of the drawing

[0017] FIG. 1 is a diagram showing the schematic configuration of an overall system for supporting user authentication based on touch location according to one embodiment of the present invention. FIG. 2 is a drawing illustrating in detail the internal configuration of an authentication system according to one embodiment of the present invention. FIG. 3 is a drawing exemplarily showing a soft keyboard according to one embodiment of the present invention. FIGS. 4a to 4d are drawings illustrating, in accordance with an embodiment of the present invention, an exemplary process of obtaining information regarding a touch location for a key corresponding to each of a string associated with user authentication and at least one character included in the string. FIGS. 5 and 6 are diagrams illustrating, in an exemplary manner, a process of user authentication based on touch location being performed according to an embodiment of the present invention. Specific details for implementing the invention

[0018] The following detailed description of the invention refers to the accompanying drawings, which illustrate specific embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. It should be understood that various embodiments of the invention are different but need not be mutually exclusive. For example, specific shapes, structures, and characteristics described herein may be modified from one embodiment to another without departing from the spirit and scope of the invention. It should also be understood that the location or arrangement of individual components within each embodiment may be modified without departing from the spirit and scope of the invention. Accordingly, the following detailed description is not meant to be limiting, and the scope of the invention should be understood to encompass the scope claimed by the claims and all equivalents thereof. Similar reference numerals in the drawings indicate identical or similar components across various aspects.

[0019] Hereinafter, in order to enable a person skilled in the art to easily practice the present invention, various preferred embodiments of the present invention will be described in detail with reference to the attached drawings.

[0020] Configuration of the entire system

[0021] FIG. 1 is a diagram showing the schematic configuration of an overall system for supporting user authentication based on touch location according to one embodiment of the present invention.

[0022] As illustrated in FIG. 1, the entire system according to one embodiment of the present invention may include a communication network (100), a service providing server (200), a device (300), and an authentication system (400).

[0023] First, a communication network (100) according to one embodiment of the present invention can be configured regardless of the mode of communication, such as wired communication or wireless communication, and can be configured as various communication networks such as a Local Area Network (LAN), a Metropolitan Area Network (MAN), or a Wide Area Network (WAN). Preferably, the communication network (100) referred to in this specification may be the known Internet or the World Wide Web (WWW). However, the communication network (100) may include at least a known wired / wireless data communication network, a known telephone network, or a known wired / wireless television communication network, without being limited thereto.

[0024] For example, the communication network (100) may be a wireless data communication network and may implement conventional communication methods such as WiFi communication, WiFi-Direct communication, Long Term Evolution (LTE) communication, 5G communication, Bluetooth communication (including Bluetooth Low Energy (BLE) communication), infrared communication, ultrasonic communication, etc., in at least a part thereof. As another example, the communication network (100) may be an optical communication network and may implement conventional communication methods such as Light Fidelity (LiFi), etc., in at least a part thereof.

[0025] Next, a service providing server (200) according to one embodiment of the present invention may be a server that includes a function to communicate after connecting to a device (300) or an authentication system (400).

[0026] Next, the device (300) according to one embodiment of the present invention is a digital device that includes a function to communicate after connecting to a service providing server (200) or an authentication system (400). Any digital device equipped with memory means and equipped with a microprocessor to have computational capabilities, such as a smartphone, tablet, smart watch, smart band, smart glasses, desktop computer, laptop computer, workstation, PDA, web pad, mobile phone, etc., can be adopted as the device (300) according to the present invention.

[0027] In particular, the device (300) may include an application (not shown) that enables a user to receive services from a service provider server (200) or an authentication system (400). Such an application may be downloaded from a service provider server (200), an authentication system (400), or an external application distribution server (not shown). Meanwhile, the nature of such an application may generally be similar to the information acquisition unit (410), authentication support unit (420), communication unit (430), and control unit (440) of the authentication system (400) as described below. Here, at least a part of the application may be replaced with a hardware device or firmware device capable of performing substantially the same or equivalent functions as needed.

[0028] Next, an authentication system (400) according to one embodiment of the present invention can perform the function of obtaining information regarding a touch location for a key corresponding to each of at least one character included in the string associated with user authentication from a user's touch input, and generating data that serves as a basis for determining whether user authentication is successful based on the information regarding the touch location and the information regarding the user's touch habit.

[0029] The configuration and function of the authentication system (400) according to the present invention will be examined in detail through the following detailed description.

[0030] Configuration of the authentication system

[0031] Below, we will examine the internal configuration of the authentication system (400) that performs important functions for the implementation of the present invention and the functions of each component.

[0032] FIG. 2 is a drawing illustrating in detail the internal configuration of an authentication system (400) according to one embodiment of the present invention.

[0033] As illustrated in FIG. 2, an authentication system (400) according to one embodiment of the present invention may be configured to include an information acquisition unit (410), an authentication support unit (420), a communication unit (430), and a control unit (440). According to one embodiment of the present invention, the information acquisition unit (410), the authentication support unit (420), the communication unit (430), and the control unit (440) may be program modules, at least some of which communicate with an external system (not shown). Such program modules may be included in the authentication system (400) in the form of an operating system, an application program module, or other program modules, and may be physically stored in various known storage devices. Additionally, such program modules may be stored in a remote storage device capable of communicating with the authentication system (400). Meanwhile, such program modules encompass, but are not limited to, routines, subroutines, programs, objects, components, data structures, etc., that perform specific tasks or execute specific abstract data types as described below according to the present invention.

[0034] Meanwhile, although the authentication system (400) has been described as above, this description is exemplary, and it is obvious to those skilled in the art that at least some of the components or functions of the authentication system (400) may be realized within a service providing server (200), a device (300), or an external server (not shown) or included within an external system (not shown) as needed.

[0035] First, an information acquisition unit (410) according to one embodiment of the present invention can perform the function of acquiring information regarding the touch location of a key corresponding to each of at least one character included in the string associated with user authentication and the string from a user's touch input.

[0036] Specifically, according to one embodiment of the present invention, the user's touch input may refer to an input that occurs when the user touches a soft keyboard on the touch display of the device (300). However, the user's touch input according to one embodiment of the present invention is not limited to an input that occurs when the user touches a real touch display, and may be modified in various ways within the scope of achieving the purpose of the present invention. For example, according to one embodiment of the present invention, the user's touch input should be understood to refer to an input that occurs when the user touches a soft keyboard on a virtual touch display that can be implemented in an environment such as VR (Virtual Reality) or AR (Augmented Reality).

[0037] Furthermore, according to one embodiment of the present invention, a string associated with user authentication may refer to a string entered by a user via touch input when the user is required to authenticate during the process of using a target service, such as a financial service, SNS service, or e-commerce platform service, through a service provider server (200). For example, according to one embodiment of the present invention, such a string associated with user authentication may refer to an ID and / or password entered during the login process to the service provider server (200).

[0038] However, information regarding the touch location of a key corresponding to each of the string associated with user authentication and at least one character included in the string as described below is not limited to being obtained only during the login process for the service providing server (200), but should be understood as being obtainable in any case where a string is entered through the user's touch input. For example, the information acquisition unit (410) according to one embodiment of the present invention may acquire a string as a string associated with user authentication when the user enters a string other than an ID or password (e.g., a name) through touch input while logged in to the service providing server (200). At this time, according to one embodiment of the present invention, it may not be revealed to the user that the string is associated with user authentication (i.e., the user may not be aware that the string they input can be used for user authentication).

[0039] FIG. 3 is a drawing illustrating an exemplary soft keyboard according to an embodiment of the present invention. FIGS. 4a to 4d are drawings illustrating an exemplary process of obtaining information regarding a touch location for a key corresponding to each of a string associated with user authentication and at least one character included in the string, according to an embodiment of the present invention.

[0040] Hereinafter, with reference to FIGS. 3 and FIGS. 4a to 4d, a process for obtaining information regarding the touch location of a key corresponding to each of the string associated with user authentication and at least one character included in the string will be described in detail. In the following embodiments, for convenience of explanation, it will be assumed that the string associated with user authentication is "qwer".

[0041] Referring to FIG. 3, an information acquisition unit (410) according to one embodiment of the present invention can acquire information regarding the touch position of a key corresponding to each character (i.e., "q", "w", "e" and "r") included in a string associated with user authentication.

[0042] Specifically, referring to FIGS. 4a through 4d, information regarding the touch location for each key (i.e., "q", "w", "e", and "r") may mean information regarding the touched specific location (511, 521, 531, and 541) when the user touches a specific location (511, 521, 531, and 541) among the areas (510, 520, 530, and 540) of a specific key and the specific key is recognized as being touched.

[0043] For example, according to one embodiment of the present invention, when a user touches a specific location (i.e., a touch location; 511) in the area (510) of "q", the information regarding the touch location (511) for "q" may include the coordinates of the touch location (511) in absolute coordinates defined for the entire area of ​​the touch display or the area of ​​the soft keyboard, the relative coordinates of the touch location (511) based on coordinates defined for the area (510) of "q", etc.

[0044] Next, the authentication support unit (420) according to one embodiment of the present invention can perform the function of generating data that serves as the basis for determining whether user authentication is successful, based on information regarding the touch location and information regarding the user's touch habit obtained by the information acquisition unit (410) according to one embodiment of the present invention.

[0045] Specifically, according to one embodiment of the present invention, information regarding a user's touch habit may mean information regarding which location among the areas of each key (e.g., 510, 520, 530, and 540) the user mainly touches when touching a key included in a soft keyboard.

[0046] For example, if an analysis of the first user's past touch records reveals that the first user tends to touch mainly around a specific location (511) when touching "q," then information that the first user mainly touches a specific area in the upper left corner of the area (510) for "q" may correspond to information regarding the first user's touch habits.

[0047] Referring to FIG. 5, as another example, if an analysis of the second user's past touch records reveals that the second user tends to primarily touch the area around the bottom right (512, 522, 532, and 542) when touching "q", "w", "e", and "r", then information that the second user primarily touches a specific area of ​​the bottom right among the areas (510, 520, 530, and 540) for "q", "w", "e", and "r" may correspond to information regarding the second user's touch habits.

[0048] According to one embodiment of the present invention, information regarding a user's touch habits may be for each of the keys included in the soft keyboard. For example, information that a user mainly touches the narrow upper-left area of ​​the area (510) for "q" and mainly touches the wide upper-left area of ​​the area (520) for "w" may correspond to information regarding the user's touch habits. In some cases, information regarding the user's touch habits may not be for each key (or may be for each key as well as) but may be associated with a specific string (e.g., "qwer").

[0049] Meanwhile, according to one embodiment of the present invention, information regarding a user's touch habits may be stored in a database (not shown) connected to a service providing server (200), a user's device (300), and an authentication system (400), but is not limited thereto.

[0050] An authentication support unit (420) according to one embodiment of the present invention can calculate a similarity between information regarding a touch location obtained by an information acquisition unit (410) according to one embodiment of the present invention and information regarding a user's touch habit, and generate data that serves as a basis for determining whether user authentication is successful based on the similarity.

[0051] Specifically, an authentication support unit (420) according to one embodiment of the present invention can calculate the similarity between information regarding the touch location and information regarding the user's touch habit for each key included in the soft keyboard.

[0052] For example, an authentication support unit (420) according to one embodiment of the present invention can calculate a similarity between information regarding a touch location for a key and information regarding a user's touch habit based on whether the touch location is included within a predetermined area for the key (i.e., an area that the user mainly touches when touching the key) defined based on information regarding the user's touch habit when the user touches a specific key, and the distance between the predetermined area (or the center of the predetermined area) and the touch location.

[0053] In addition, the authentication support unit (420) according to one embodiment of the present invention can generate data that serves as the basis for determining whether user authentication is successful by synthesizing the similarity between the information regarding the touch location calculated for each key and the information regarding the user's touch habit as described above.

[0054] For example, according to one embodiment of the present invention, among strings associated with user authentication, the ratio of keys having a similarity calculated as above that is less than a threshold value, the overall similarity calculated based on all similarities calculated for each key as above (e.g., the average value of all similarities), information regarding the success or failure of user authentication based on touch location, etc., may be data that serves as the basis for determining the success or failure of such user authentication, but is not limited thereto.

[0055] An authentication support unit (420) according to one embodiment of the present invention can transmit data that serves as the basis for determining whether user authentication is successful to a service providing server (200), and the transmitted data can be used by the service providing server (200) to finally determine whether user authentication is successful.

[0056] Meanwhile, an authentication support unit (420) according to one embodiment of the present invention can generate data that serves as the basis for determining whether user authentication is successful, based on the consistency of the deviation between information regarding the touch position for each key and information regarding the user's touch habit.

[0057] Referring to FIGS. 4a to 4d and FIG. 5, for example, it can be assumed that a user has a habit of mainly touching the lower right area (512, 522, 532, and 542 in FIG. 5) among the areas (510, 520, 530, and 540) for "q", "w", "e", and "r". In this case, if the user touches the top-left corner (511, 521, 531, and 541) of each key when inputting "qwer," there is a deviation between the touch location according to the user's habit (512, 522, 532, and 542) and the actual touch location (511, 521, 531, and 541). However, since the user touched a location (511, 521, 531, and 541) that is a certain (or similar) distance in the top-left direction from the touch location according to the habit (512, 522, 532, and 542) for all keys, the authentication support unit (420) according to one embodiment of the present invention can determine that the deviation is consistent (or high). Furthermore, based on this determination, the authentication support unit (420) according to one embodiment of the present invention can calculate a high similarity between the information regarding the touch location and the information regarding the user's touch habit for each key.

[0058] In addition, the authentication support unit (420) according to one embodiment of the present invention can generate data that serves as the basis for determining whether user authentication is successful based on the position of each key on the soft keyboard.

[0059] For example, with reference to FIG. 3, an authentication support unit (420) according to one embodiment of the present invention may apply a loose standard when calculating the similarity between information regarding the touch location and information regarding the user's touch habit for keys located relatively outward on a soft keyboard (e.g., "1", "0", "z", "m", etc.; which may correspond to keys that are relatively difficult to touch accurately). (i.e., a high similarity may be calculated even if the actual touch location is somewhat far from the touch location according to the user's habit.) And, an authentication support unit (420) according to one embodiment of the present invention may apply a strict standard when calculating the similarity between information regarding the touch location and information regarding the user's touch habit for keys located relatively in the center of a soft keyboard (e.g., "f", "g", "h", etc.; which may correspond to keys that are relatively easy to touch accurately). (i.e., a low similarity may be calculated even if the actual touch location is only slightly far from the touch location according to the user's habit.)

[0060] In addition, the authentication support unit (420) according to one embodiment of the present invention can generate data that serves as the basis for determining whether user authentication is successful, based on information regarding a touch stroke for a key when inputting a string associated with user authentication.

[0061] To this end, the information acquisition unit (410) according to one embodiment of the present invention may acquire additional information regarding touch strokes for each key (510, 520, 530 and 540) in addition to information regarding touch positions. According to one embodiment of the present invention, such information regarding touch strokes may include, but is not limited to, information regarding pressure when each key (510, 520, 530 and 540) is touched, the time when each key (510, 520, 530 and 540) is touched (the time when the touch is recognized, the duration of the touch, etc.), and the time from when the touch for a specific key ends until the touch for the next key is recognized.

[0062] In addition, an authentication support unit (420) according to one embodiment of the present invention can calculate a similarity between the information regarding a user's past touch strokes for the corresponding string and the information regarding a touch stroke obtained as above, and generate data that serves as a basis for determining whether user authentication is successful based on the similarity. According to one embodiment of the present invention, the information regarding a user's past touch strokes for the corresponding string may be included in the information regarding the user's touch habits.

[0063] Meanwhile, the authentication support unit (420) according to one embodiment of the present invention can determine the type of information regarding the user's touch habit based on the information regarding the touch stroke obtained by the information acquisition unit (410) according to one embodiment of the present invention as described above.

[0064] Specifically, according to one embodiment of the present invention, information regarding a user's touch habits may be stored by classifying it into two or more types. Furthermore, an authentication support unit (420) according to one embodiment of the present invention may determine, based on information regarding touch strokes, which type of information regarding touch habits to use when calculating the similarity between information regarding touch location and information regarding a user's touch habits for each key.

[0065] For example, information regarding touch habits when a user touches with one hand may be stored as a first type, and information regarding touch habits when a user touches with both hands may be stored as a second type. Furthermore, an authentication support unit (420) according to an embodiment of the present invention may determine that the user has touched with one hand based on information regarding the touch stroke, and may determine the information regarding the touch habit as a first type based on such determination.

[0066] An authentication support unit (420) according to one embodiment of the present invention can generate data that serves as the basis for determining whether user authentication is successful, based on the relationship between the touch position of the key corresponding to the incorrectly entered character and the position of the key corresponding to the correct character on the soft keyboard, in response to the determination that a string associated with user authentication is incorrectly entered.

[0067] For example, with reference to FIG. 6, it can be assumed that the input string is "q1er" when the string associated with user authentication is "qwer". In this case, the authentication support unit (420) according to one embodiment of the present invention can generate data that serves as the basis for determining whether user authentication is successful by assuming that the correct key has been entered based on the relationship that the touch location (551) for the key "1" (550) corresponding to the incorrectly entered character and the location of the key "w" (520) corresponding to the correct character on the soft keyboard are adjacent to each other.

[0068] Here, an authentication support unit (420) according to one embodiment of the present invention can generate data that serves as the basis for determining whether user authentication is successful, based not only on the location of the key corresponding to the correct character on the soft keyboard, but also on information regarding the user's touch habit regarding the key corresponding to the correct character.

[0069] For example, with reference to FIG. 6, it can be assumed that a user has a habit of mainly touching the top left (521) when inputting "w" (520), which is a key corresponding to a correct character on a soft keyboard. In this case, an authentication support unit (420) according to one embodiment of the present invention can generate data that serves as the basis for determining whether user authentication is successful by assuming that a correct key has been input based on the relationship that the touch location (551) for "1" (550), which is a key corresponding to an incorrectly entered character, and the location (521) that the user mainly touches when inputting "w" (520), which is a key corresponding to a correct character on a soft keyboard, are adjacent to each other.

[0070] In this case, if the user has a habit of mainly touching the bottom right when inputting "w" (520), which is a key corresponding to the correct character on the soft keyboard, the authentication support unit (420) according to one embodiment of the present invention may not assume that the correct key has been input.

[0071] According to the various embodiments of the present invention described above, for a system using single-factor authentication based on factors other than touch location, a multi-factor authentication system can be created by adding only a user authentication procedure based on touch location while keeping the authentication method of the existing system as is, thereby enabling the security of the system using single-factor authentication to be strengthened efficiently (at low cost). It goes without saying that security can be efficiently strengthened by adding a user authentication procedure based on touch location to a multi-factor authentication system based on factors other than touch location.

[0072] Next, the communication unit (430) according to one embodiment of the present invention can perform the function of enabling data transmission and reception from / to the information acquisition unit (410) and the authentication support unit (420).

[0073] Finally, the control unit (440) according to one embodiment of the present invention can perform the function of controlling the flow of data between the information acquisition unit (410), the authentication support unit (420), and the communication unit (430). That is, the control unit (440) according to one embodiment of the present invention can control the information acquisition unit (410), the authentication support unit (420), and the communication unit (430) to perform their respective unique functions by controlling the flow of data from / to / from the outside of the authentication system (400) or the flow of data between each component of the authentication system (400).

[0074] The embodiments according to the present invention described above may be implemented in the form of program instructions that can be executed through various computer components and recorded on a computer-readable recording medium. The computer-readable recording medium may include program instructions, data files, data structures, etc., either individually or in combination. The program instructions recorded on the computer-readable recording medium may be those specifically designed and configured for the present invention or those known and available to those skilled in the art of computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes; optical recording media such as CD-ROMs and DVDs; magneto-optical media such as floptical disks; and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, and flash memory. Examples of program instructions include machine code, such as that generated by a compiler, as well as high-level language code that can be executed by a computer using an interpreter, etc. Hardware devices may be modified into one or more software modules to perform processing according to the present invention, and vice versa.

[0075] Although the present invention has been described above with reference to specific details such as specific components, limited embodiments, and drawings, this is provided only to aid in a more comprehensive understanding of the invention, and the invention is not limited to the above embodiments, and a person skilled in the art to which the invention belongs can make various modifications and changes from this description.

[0076] Accordingly, the scope of the present invention should not be limited to the embodiments described above, and all scopes equivalent to or equivalently modified from the claims set forth below, as well as the claims set forth below, shall be considered to fall within the scope of the concept of the present invention. Explanation of the symbols

[0077] 100: Communication network 200: Service Provider Server 300: Device 400: Authentication System 410: Information Acquisition Department 420: Certification Support Department 430: Communications Department 440: Control unit

Claims

Claim 1 A method for supporting user authentication based on touch location, comprising: a step of obtaining information regarding a touch location for a key corresponding to each of a string associated with user authentication and at least one character included in the string from a user's touch input; and a step of generating data that serves as a basis for determining the success or failure of the user authentication based on the information regarding the touch location and information regarding the user's touch habit; wherein, in the generating step, a similarity between the information regarding the touch location and the information regarding the touch habit is calculated, and data that serves as a basis for determining the success or failure of the user authentication is generated based on the similarity; wherein, in the generating step, data that serves as a basis for determining the success or failure of the user authentication is generated further based on the position of the key on a soft keyboard; wherein, in the generating step, a criterion for calculating the similarity is adaptively applied according to the position of the key on the soft keyboard; and wherein, in the generating step, a criterion for calculating the similarity is adaptively applied based on the touch difficulty according to the position of the key. Claim 2 delete Claim 3 A method for generating data that forms the basis for determining the success or failure of user authentication based on the consistency of deviation between information regarding the touch location and information regarding the touch habit in the generation step of claim 1. Claim 4 delete Claim 5 A method according to claim 1, wherein in the acquisition step, information regarding a touch stroke for the key is further acquired, and in the generation step, data that forms the basis for determining the success or failure of the user authentication is further based on the information regarding the touch stroke. Claim 6 In paragraph 5, a method for determining the type of information regarding the user's touch habits based on information regarding the touch stroke in the generation step. Claim 7 A method for generating data that forms the basis for determining the success or failure of user authentication, wherein, in the generation step, in response to the determination that the string is incorrectly entered, the relationship between the touch position of the key corresponding to the incorrectly entered character and the position of the key corresponding to the correct character on the soft keyboard. Claim 8 In claim 7, a method for generating data that forms the basis for determining the success or failure of user authentication, further based on information regarding the touch location for the key corresponding to the incorrectly entered character and the user's touch habit for the key corresponding to the correct character in the generation step. Claim 9 A non-temporary computer-readable recording medium recording a computer program for executing the method according to paragraph 1. Claim 10 A system for supporting user authentication based on touch location, comprising: an information acquisition unit that acquires information regarding a touch location for a key corresponding to each of a string associated with user authentication and at least one character included in the string from a user's touch input; and an authentication support unit that generates data that serves as a basis for determining the success or failure of the user authentication based on the information regarding the touch location and the information regarding the user's touch habit. The authentication support unit calculates a similarity between the information regarding the touch location and the information regarding the touch habit, and generates data that serves as a basis for determining the success or failure of the user authentication based on the similarity. The authentication support unit further generates data that serves as a basis for determining the success or failure of the user authentication based on the position of the key on a soft keyboard. The authentication support unit adaptively applies a criterion for calculating the similarity according to the position of the key on the soft keyboard. The authentication support unit adaptively applies a criterion for calculating the similarity based on the touch difficulty according to the position of the key. Claim 11 delete Claim 12 In claim 10, the authentication support unit is a system that generates data that forms the basis for determining the success or failure of the user authentication based on the consistency of the deviation between the information regarding the touch location and the information regarding the touch habit. Claim 13 delete Claim 14 A system according to claim 10, wherein the information acquisition unit further acquires information regarding a touch stroke for the key, and the authentication support unit further generates data that serves as the basis for determining the success or failure of the user authentication based on the information regarding the touch stroke. Claim 15 In paragraph 14, the authentication support unit is a system that determines the type of information regarding the user's touch habits based on information regarding the touch stroke. Claim 16 In claim 10, the authentication support unit is a system that generates data that forms the basis for determining the success or failure of the user authentication, in response to the determination that the string is incorrectly entered, based further on the relationship between the touch position of the key corresponding to the incorrectly entered character and the position of the key corresponding to the correct character on the soft keyboard. Claim 17 In claim 16, the authentication support unit is a system that generates data that forms the basis for determining the success or failure of the user authentication, based further on information regarding the touch location of the key corresponding to the incorrectly entered character and the user's touch habit regarding the key corresponding to the correct character.

Images