JP7270458B2 - Information processing device, information processing method, and program - Google Patents

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing apparatus and the like that perform processing related to authentication.

2. Description of the Related Art Conventionally, there have been systems that perform personal authentication using personal information such as passwords and biometric information (see Patent Document 1, for example).

JP-A-2002-109439

However, conventionally, there has been no mechanism for performing authentication using information related to application attribute values.

An information processing apparatus according to a first aspect of the present invention comprises an authentication information storage unit storing one or more authentication information having attribute value information related to one or more attribute values of one or more applications; Using the reception unit that receives attribute value information about attribute values and the attribute value information received by the reception unit, the authentication information stored in the authentication information storage unit is referenced to determine whether the attribute value information is valid. The information processing apparatus includes an authentication unit that performs authentication processing, and an authentication result processing unit that performs processing according to the result of the authentication processing.

With such a configuration, it is possible to provide a mechanism for performing authentication using attribute value information regarding attribute values of an application.

In addition, in the information processing apparatus of the second invention, in contrast to the first invention, the one or more attribute values constituting the authentication information are position information of the arrangement of the icon of the application, the size of the icon, and the background color of the icon. , which are attribute values of one or more types of properties.

With this configuration, it is possible to provide a mechanism for performing authentication using attribute value information related to various attribute values such as icon layout, size, background color, and properties of the application.

In addition, in the information processing apparatus of the third invention, in contrast to the first invention, each of the one or more attribute values constituting the authentication information is position information of one or more application icons. be.

With such a configuration, it is possible to provide a mechanism for performing authentication using the position of the icon of the application.

Further, in the information processing apparatus of the fourth invention, in contrast to the third invention, the icon can be arranged in the folder, and the position information of the icon arranged in the folder is the position of the folder, and It is an information processing device that is information about the position of the icon in the folder.

With such a configuration, it is possible to provide a mechanism for performing authentication using the location of the folder in which the icon of the application is arranged and the location of the icon within the folder.

Further, in the information processing apparatus of the fifth invention, in the information processing apparatus of any one of the first to fourth inventions, the one or more applications are selected by the user from among the two or more applications whose attribute values can be changed. It is an information processing device that is one or more applications.

With such a configuration, it is possible to provide a mechanism for performing authentication using attribute value information regarding the attribute values of the application selected by the user.

Further, in the information processing device of the sixth invention, in contrast to any one of the first to fourth inventions, the one or more applications are all two or more applications whose attribute values can be changed. is.

With this configuration, it is possible to provide a mechanism for performing authentication using attribute value information regarding attribute values of all applications.

Further, in the information processing device of the seventh invention, in contrast to any one of the first to sixth inventions, the processing according to the result of the authentication processing is the processing for logging into the information processing device. processing equipment.

With such a configuration, it is possible to provide a server that performs authentication using attribute value information from a terminal and permits login.

Further, in the information processing device of the eighth invention, in contrast to any one of the first to sixth inventions, the processing according to the result of the authentication processing is processing for enabling one or more applications. It is an information processing device.

With such a configuration, it is possible to provide a terminal that performs authentication using attribute value information and permits activation of an application.

Further, the information processing apparatus of the ninth invention provides authentication information for acquiring authentication information having attribute value information when a predetermined condition is satisfied for any one of the first to eighth inventions. The information processing apparatus further includes an acquisition unit and a registration unit that stores authentication information acquired by the authentication information acquisition unit in an authentication information storage unit.

With such a configuration, it is possible to provide a mechanism for registering authentication information having attribute value information and performing authentication using the attribute value information included in the registered authentication information.

Further, an information processing apparatus according to a tenth aspect of the present invention is an information processing apparatus in which, in contrast to the ninth aspect, the predetermined condition is that attribute values of one or more applications have been changed.

With this configuration, registered authentication information can be automatically updated in response to changes in the attribute values of the application.

In the tenth aspect, the predetermined condition may be that the attribute values of one or more applications have been changed after the determination unit has determined that the attribute value information is valid.

With this configuration, the registered authentication information can be updated automatically and accurately.

ADVANTAGE OF THE INVENTION According to this invention, the mechanism which authenticates using the information regarding the attribute value of an application can be provided.

Block diagram of an information system according to Embodiment 1 Flowchart explaining part of the operation of the information processing device Flowchart explaining another part of the operation of the information processing apparatus Flowchart explaining the judgment process Data structure diagram of the authentication information A diagram showing an example of the app information A diagram showing an example of the screen of the terminal device The figure which shows an example of the screen transition of the same terminal device. A diagram showing another example of the same app information A diagram showing another example of the screen of the terminal device A diagram showing another example of screen transition of the same terminal device A diagram showing another example of the screen of the terminal device Block diagram of an information processing apparatus according to Embodiment 2 Flowchart explaining part of the operation of the information processing device Flowchart explaining another part of the operation of the information processing apparatus External view of computer system A diagram showing an example of the internal configuration of a computer system

Two embodiments of an information processing apparatus and the like will be described below with reference to the drawings. It should be noted that, since components denoted by the same reference numerals in each embodiment perform the same operations, repetitive description may be omitted.

In Embodiment 1, an information system including an information processing device 1 that is a server that performs authentication using attribute value information about an attribute value of an application from a terminal device 2 and permits login will be described.

In Embodiment 2, the information processing apparatus 10, which is a terminal that performs authentication using property value information related to attribute values of an application and permits activation of the application, will be described.

(Embodiment 1)
FIG. 1 is a block diagram of an information system according to the first embodiment. The information system includes an information processing device 1 and one or more terminal devices 2 . The information processing device 1 is communicably connected to one or more terminal devices 2 via a network such as a LAN or the Internet, a wireless or wired communication line, or the like.

The information processing apparatus 1 is, for example, a server of an organization such as a company or an organization that provides various online services, but may be a cloud server, an ASP server, or the like, regardless of its type or location.

The terminal device 2 is, for example, a terminal of a user who uses online services. The terminal is, for example, a mobile terminal. The mobile terminal is, for example, a smart phone, a tablet terminal, a mobile phone, a notebook PC, etc., but the type is not limited. Alternatively, the terminal may be a stationary PC, regardless of the type. Alternatively, the terminal device 2 may be, for example, the terminal of an organization or its staff, regardless of its location.

However, the information processing device 1 may be standalone. In other words, the information system may consist of only one server and may not include one or more terminal devices 2 . Also, such one server can be considered as the information processing apparatus 10 in the second embodiment, for example.

The information processing device 1 includes a storage unit 11 , a reception unit 12 , a processing unit 13 and an output unit 14 . The storage unit 11 includes an authentication information storage unit 111 . The processing unit 13 includes an authentication unit 131 , an authentication result processing unit 132 , an authentication information acquisition unit 133 and a registration unit 134 .

The terminal device 2 includes a terminal storage section 21 , a terminal reception section 22 , a terminal processing section 23 , a terminal transmission section 24 , a terminal reception section 25 and a terminal output section 26 .

The storage unit 11 configuring the information processing device 1 can store various types of information. Various types of information are, for example, authentication information.

The authentication information storage unit 111 usually stores one or more pieces of authentication information in association with the terminal identifier. A terminal identifier is information for identifying the terminal device 2 . The terminal identifier is, for example, an address such as a MAC address or an IP address, an ID, or the like, but any information that can identify the terminal device 2 may be used. In particular, for example, when the terminal device 2 is a mobile terminal, the terminal identifier may be a user identifier. A user identifier is information that identifies a user of the terminal device 2 . The user identifier is, for example, an e-mail address, mobile phone number, or the like, but may be any information that can identify the user.

However, if there is only one terminal device 2 that configures the information system, the terminal identifier may be omitted, and only one piece of authentication information may be stored in the authentication information storage unit 111 .

Authentication information is information about authentication processing. It can be said that the authentication process is a process of determining whether or not the accepted attribute value information is valid. Note that acceptance will be described later.

The authentication information has attribute value information. Attribute value information is information relating to one or more attribute values of one or more applications. Attribute values will be described later.

The attribute value information usually includes two or more sets of an application identifier and one or more attribute values (hereinafter sometimes referred to as set information). An application identifier is information that identifies an application. The application identifier is, for example, an application name, ID, or the like, but may be any information that can identify the application. However, for example, if there is only one application, the application information may not have an application identifier.

Also, for example, when there is only one application, the attribute value information may contain only one or more attribute values of the application without including the application identifier. Furthermore, even if there are two or more applications, for example, if they are the default, the arrangement of icons is fixed, and only the attribute value other than the position information of each application can be changed, the attribute value information is composed of two The above set information may not include an application identifier (for example, refer to attribute value information included in authentication information 3 in FIG. 5, which will be described later).

An app is software that is used to do a specific task. An application is, for example, an application for using an online service. Applications of this type are, for example, Internet banking applications, communication applications, and the like. Alternatively, the application may be, for example, an application for information management, a game application, or other application other than an online service, and the type of application does not matter.

One or more applications may be, for example, one or more applications selected from among two or more applications whose attribute values can be changed. The two or more applications whose attribute values can be changed are two or more applications whose attribute values can be changed among the two or more applications stored in the terminal storage unit 21 constituting the terminal device 2, which will be described later. be. An application whose attribute values can be changed is an application in which at least one of one or more attribute values of the application can be changed.

Generally, at least one attribute value of any application stored in the terminal storage unit 21 can be changed. It may be considered that it is all applications that have two or more

However, the selection is not mandatory and may be the default. Alternatively, the one or more applications may be all two or more applications whose attribute values can be changed within the terminal device 2 .

It can be said that the attribute value is information indicating the characteristics and settings of the application. The attribute value is, for example, information regarding the icon of the application. The attribute values are, for example, positional information of icon arrangement, icon size, icon background color, etc., but any information related to the icon may be used.

Arrangement of icons is, for example, arrangement of one or two or more icons within one screen, but may be arrangement of two or more icons on two or more screens. The screen is, for example, a home screen, which will be described later, but it may be an application list screen or the like, and any type of screen can be used as long as icons can be arranged thereon. Note that the two or more screens may be, for example, two or more application list screens in which icons of all available applications are arranged in a distributed manner.

Positional information of icon placement (hereinafter sometimes referred to as “icon positional information” or simply “positional information”) is information that specifies the placement of icons on the screen. The position information is, for example, coordinates within the screen, but may be a screen ID or a set of a screen ID and coordinates within the screen. The coordinates of the icon are, for example, the coordinates of the center point, but may be the coordinates of the upper left end point, the lower right end point, or a combination of the coordinates of the upper left end point and the coordinates of the lower right end point. Alternatively, the position information may be, for example, information indicating whether it is within the screen, or any information that can indicate the position of the icon.

The size is, for example, "large", "medium", or "small", but may be a set (w, h) of width w and height h. The background color is, for example, "blue", "yellow", "green", etc., but any type of color or expression format is acceptable.

Alternatively, attribute values can be app properties. It can be said that a property is a setting value of an application. The property is, for example, the name of the application, the storage location, etc., but the type does not matter. A name is a name that a user can set or change for an application. The name is, for example, "TEL" for a phone application, but any name that can identify the type of application may be used. Note that the name may be the same as the application name. An application name is a name preset for an application, and is a name that cannot be changed by the user.

One or more attribute values of one or more applications may be, for example, one attribute value of one application, two or more attribute values of one application, or one type of attribute value in each of two or more applications. It may be a set of attribute values, or a set of attribute values of two or more types (for example, icon size and property) in each of two or more applications. One type of attribute value is, for example, location information, but any type of attribute value may be used. The two or more types of attribute values are, for example, icon size, icon background color, properties, etc., but any combination thereof is acceptable.

The attribute value information is usually information about one or more attribute values of one or more applications in each of one or more terminal devices 2 . However, when the information processing device 1 is, for example, a standalone or a terminal, the attribute value information may be information regarding one or more attribute values of one or more applications within the information processing device 1 .

For example, one or more pieces of application information (hereinafter sometimes referred to as an application information group) corresponding to all the applications that can be used in the terminal device 2 are stored in the terminal storage unit 21 that constitutes the terminal device 2 to be described later. stored. Application information is information about an application. The application information includes, for example, an application identifier and one or more attribute values (hereinafter sometimes referred to as an attribute value group). Note that the one or more attribute values described above are, for example, part or all of the attribute value group.

Also, when one or more applications are all applications that can change attribute values, the attribute value group may be considered as attribute value information.

Further, for example, an application identifier group may also be stored in the terminal storage unit 21 configuring the terminal device 2 to be described later. The application identifier group is information identifying one or more selected or default applications. The application identifier group is composed of, for example, one or more application identifiers. Note that the application identifier group may also be stored in the storage unit 11 of the information processing apparatus 1 in association with the terminal identifier, for example.

Furthermore, the one or more attribute values may be, for example, one or more attribute values selected or defaulted from among the attribute value group possessed by the application information described above. For example, the type information may also be stored in the terminal storage unit 21 constituting the terminal device 2, which will be described later. The type information is information indicating the type of one or more selected or default attribute values. The type information is composed of, for example, one or two or more type identifiers. A type identifier is information that identifies the type of attribute value. The type identifiers are, for example, attribute names such as "icon position information", "icon size", "icon background color", "property", etc., but the representation format is not limited. The type information may also be stored in the storage unit 11 of the information processing device 1 in association with the terminal identifier, for example.

The reception unit 12 receives various instructions and various information. Various instructions are, for example, registration instructions, which will be described later. Various types of information are, for example, the aforementioned attribute value information.

In the first embodiment, reception by the reception unit 12 is normally reception from the terminal device 2 . However, the reception may be, for example, reception of information input from an input device such as a keyboard or touch panel, or reception of information read from a recording medium such as a disk or a semiconductor memory, and the mode of reception does not matter.

For example, the receiving unit 12 receives attribute value information paired with a terminal identifier from the terminal device 2 . Note that the attribute value information to be received is, for example, the terminal receiving unit 22 in the terminal device 2 described later, via an input device such as a touch panel, in response to receiving an operation to select one or more applications. is attribute value information acquired by the terminal processing unit 23 using the application information group stored in the terminal storage unit 21 . However, the received attribute value information may be attribute value information received by the terminal reception unit 22 via an input device such as a touch panel.

The processing unit 13 performs various types of processing. The various processes are, for example, processes of the authentication unit 131, the authentication result processing unit 132, the authentication information acquisition unit 133, the registration unit 134, and the like. In addition, the processing unit 13 also performs processing such as various types of discrimination described in flowcharts, for example.

The various screens are, for example, a home screen, a login screen, and the like, but may be screens of applications, and the types thereof are not limited. It can be said that the home screen is a screen on which icons of one or more apps preselected from one or more available apps are arranged. The login screen is a screen for logging in. It can be said that the application screen is a screen for performing work using the application.

The authentication unit 131 performs authentication processing. It can be said that the authentication process is a process of determining whether or not the accepted attribute value information is valid. The authentication unit 131 uses the attribute value information received by the reception unit 12 to refer to the authentication information stored in the authentication information storage unit 111 and determines whether the received attribute value information is valid.

Specifically, for example, in response to the receiving unit 12 receiving attribute value information paired with a terminal identifier, the authenticating unit 131 selects one or more of the received authentication information stored in the authentication information storage unit 111. Refers to the authentication information corresponding to the terminal identifier. The authentication unit 131 collates the received attribute value information with the attribute value information included in the authentication information, and determines that the received attribute value information is valid when the two pieces of attribute value information match. On the other hand, if the two pieces of attribute value information do not match, it is determined that the received attribute value information is invalid. Then, the authentication unit 131 acquires information indicating the result of the authentication processing. The information indicating the result of the authentication process is, for example, "valid" indicating that the attribute value information is valid, or "invalid" indicating that the attribute value information is not valid. .

The authentication result processing unit 132 performs processing according to the result of authentication processing. The process according to the result of the authentication process is, for example, the process for logging into the information processing device 1 . The processing for login is, for example, processing for permitting or not permitting login depending on the result of authentication processing. Alternatively, the processing for login may be transmission or display of the result of the authentication processing, and the contents thereof are not limited.

Performing processing according to the result of authentication processing means executing different processing depending on, for example, when the result of authentication processing is valid and when the result of authentication processing is invalid. good too. The process for when the result of the authentication process is valid is, for example, the process of permitting login from the terminal device 2 identified by the terminal identifier received in combination with the attribute value information. The process of permitting login is, for example, transmission of information to the effect that login is permitted to the terminal device 2. The login instruction received from the terminal device 2 is accepted, and the online service for the terminal device 2 is performed. You can start.

The process for when the result of the authentication process is invalid is, for example, the process of rejecting login from the terminal device 2 . The process of rejecting login is, for example, sending information to the terminal device 2 to the effect that the login is rejected. It is also possible not to start the online service for the device 2 .

The authentication information acquisition unit 133 acquires authentication information having attribute value information when a predetermined condition is satisfied. The predetermined condition is, for example, "input of registration instruction". A registration instruction is an instruction to register or change authentication information. The registration instruction is, for example, the pressing of a "change authentication information" button, but the form of the instruction does not matter. For example, when the reception unit 12 receives the attribute value information after the registration instruction, the authentication information acquisition unit 133 may acquire the authentication information including the attribute value information.

Alternatively, the predetermined condition may be "at least one application attribute value has been changed". It is preferable that the predetermined condition is, for example, "the attribute values of one or more applications have been changed after the authentication unit 131 has determined that the attribute value information received by the reception unit 12 is valid." is. For example, when one or more attribute values are changed, the authentication information acquisition unit 133 determines whether or not the variable indicating the authentication result is “valid”. , authentication information having attribute value information including one or more attribute values after change may be obtained.

Attribute values are usually changed according to user operations. Changing the attribute value means, for example, changing the position information of the icons forming the application information in response to the user changing the arrangement of the icons on the screen. Alternatively, the change in the attribute value may be, for example, a change in the size or background color of the icon that constitutes the application information in response to the user changing settings related to the icon of the application. Alternatively, the change in the attribute value may be, for example, a change in a property that configures the application information in response to the user changing the settings of the application. However, attribute values may be changed automatically.

Specifically, in the terminal device 2 described later, for example, the terminal processing unit 23 determines whether or not a predetermined condition is satisfied, and if the predetermined condition is satisfied, the application information of the terminal storage unit 21 Groups are used to obtain attribute value information. The terminal transmission unit 24 transmits the attribute value information acquired by the terminal processing unit 23 to the information processing apparatus 1 in combination with the terminal identifier stored in the terminal storage unit 21 .

In the information processing device 1, the reception unit 12 receives the attribute value information transmitted from the terminal device 2 as described above, and the authentication information acquisition unit 133 acquires authentication information having the received attribute value information. .

The registration unit 134 accumulates the authentication information acquired by the authentication information acquisition unit 133 in the authentication information storage unit 111 . The registration unit 134 normally associates the authentication information acquired by the authentication information acquisition unit 133 in response to the reception unit 12 receiving the attribute value information paired with the terminal identifier from the terminal device 2 with the terminal identifier for authentication. Stored in the information storage unit 111 .

The output unit 14 outputs various information. The various types of information are, for example, permission of login, permission of acceptance of login operation, etc., but may be a login screen or the like, which will be described later, and the type thereof does not matter. The output from the output unit 14 is normally transmitted to the terminal device 2 . However, the output may be, for example, display on a display, sound output from a speaker, printout on a printer, storage in a recording medium, delivery of processing results to another program, etc., and any form thereof is acceptable.

The terminal storage unit 21 configuring the terminal device 2 can store various kinds of information. Various types of information are, for example, a terminal identifier, one or two or more applications, an application information group corresponding to the one or more applications, screen configuration information, and the like. The terminal storage unit 21 may also store, for example, an application identifier group, type information, and the like.

The terminal reception unit 22 receives various operations, various instructions, and various information. Various operations include, for example, an operation of selecting one or more applications, an operation of starting login, an operation of changing an attribute value, etc., but may be an operation of starting an application, and the type of operation is not limited. Various instructions are, for example, registration instructions. Various types of information are, for example, attribute value information, an application identifier group, type information, and the like. However, one or more types of information among the application identifier group or the type information may not be accepted.

The terminal processing unit 23 performs various types of processing. Various types of processing include, for example, processing for acquiring attribute value information and processing for changing attribute values.

Specifically, the terminal processing unit 23, for example, when the terminal accepting unit 22 accepts an operation to select one or more apps, selects one or more apps from among the application information group stored in the terminal storage unit 21. Using the application information corresponding to the selected one or more applications, attribute value information having one or more attribute values of the selected one or more applications is acquired.

Alternatively, the terminal processing unit 23 selects, for example, the terminal storage unit 21 from among the application information group stored in the terminal storage unit 21 in response to the terminal reception unit 22 accepting an operation to start login, for example. Attribute value information having one or more attribute values of one or more applications identified by the application identifier group may be acquired using one or more application information corresponding to the application identifier group stored in the .

Further, when the terminal processing unit 23 acquires the attribute value information using the one or more pieces of application information corresponding to the application identifier group as described above, the terminal processing unit 23 acquires one or more of the one or more applications identified by the application identifier group. attribute value information on one or more types of attribute values corresponding to the type information stored in the terminal storage unit 21 among the attribute values of .

Alternatively, the terminal processing unit 23 may acquire attribute value information regarding all attribute values of all applications using all stored application information in response to an operation to start login, for example.

However, the trigger for acquisition of attribute value information for authentication may be, for example, power-on, and any type of trigger may be used.

Further, the terminal processing unit 23, for example, determines whether or not a predetermined condition is satisfied, and acquires attribute value information for registration when the predetermined condition is satisfied. Note that the predetermined conditions have been described above and will not be repeated.

In addition, the terminal processing unit 23 uses screen configuration information stored in the terminal storage unit 21 to configure screens such as a home screen and a login screen. Note that, for example, when configuring a screen including an icon of an application such as a home screen, the terminal processing unit 23 selects one or more attribute values related to the icon of the application from among the attribute value group possessed by the application information corresponding to the application. (eg, location information, size, background color, etc.) are also used to configure such screens.

Further, the terminal processing unit 23 changes the attribute values of the application information stored in the terminal storage unit 21 in response to the terminal receiving unit 22 receiving an operation for changing the attribute values, for example. . Specifically, for example, when the user moves an icon on the screen, the terminal processing unit 23 acquires position information of the destination via an input device such as a touch panel, and acquires the stored position information. Change to location information. Similarly, when the user changes the size of the icon, the terminal processing unit 23 acquires the changed size and changes the size of the stored icon to the acquired size.

Furthermore, the terminal processing unit 23 may accumulate information such as the application identifier group and type information accepted by the terminal accepting unit 22 in the terminal storage unit 21, for example. However, one or more of the application identifier group or type information may be stored in the terminal storage unit 21 in advance.

The terminal transmission unit 24 transmits the attribute value information acquired by the terminal processing unit 23 to the information processing apparatus 1 in combination with the terminal identifier stored in the terminal storage unit 21 .

In addition, the terminal transmission unit 24 transmits various instructions and various information received by the terminal reception unit 22 to the information processing apparatus 1 together with the terminal identifier.

The terminal reception unit 25 receives various kinds of information from the information processing device 1 . The various types of information are, for example, permission of login, permission of acceptance of login operation, and the like.

The terminal output unit 26 outputs various information. Various types of information are, for example, home screens, login screens, application screens, and the like. Output from the terminal output unit 26 is normally output via an output device such as a display within the terminal device 2, but may be, for example, transmission to an external device, and the output mode does not matter. As a result, various screens are output to the display of the terminal device 2 .

The storage unit 11, the authentication information storage unit 111, and the terminal storage unit 21 are preferably non-volatile recording media such as hard disks and flash memories, but can also be realized by volatile recording media such as RAM. This matter also applies to the storage unit 101 and the authentication information storage unit 1011 described in the second embodiment.

The reception unit 12 and the terminal reception unit 22 may or may not include input devices. The reception unit 12 and the like can be realized by the driver software of the input device, or by the input device and its driver software. This matter also applies to the reception unit 102 described in the second embodiment.

The processing unit 13, the authentication unit 131, the authentication result processing unit 132, the authentication information acquisition unit 133, the registration unit 134, and the terminal processing unit 23 can usually be implemented by an MPU, memory, or the like. The processing procedure of the processing unit 13 and the like is normally realized by software, and the software is recorded in a recording medium such as a ROM. However, the processing procedure may be realized by hardware (dedicated circuit). This matter also applies to the processing unit 103, the authentication unit 1031, the authentication result processing unit 1032, the authentication information acquisition unit 1033, and the registration unit 1034 described in the second embodiment.

The output unit 14 and the terminal output unit 26 may or may not include output devices such as displays and speakers. The output unit 14 and the like can be realized by the driver software of the output device, or by the output device and its driver software. This matter also applies to the output unit 104 described in the second embodiment.

The reception functions of the terminal transmission unit 24 and the reception unit 12 are usually realized by wired or wireless communication means (for example, a communication module such as a NIC (Network interface controller) or a modem). For example, it may be realized by a broadcast receiving module).

The transmission functions of the terminal receiving unit 25 and the output unit 14 are usually realized by wired or wireless communication means, but may be realized by broadcasting means (for example, a broadcasting module).

Next, the operation of the information system will be explained using the flow charts of FIGS. 2 to 4. FIG. 2 and 3 are flowcharts for explaining the operation of the information processing apparatus 1. FIG.

(Step S201) The processing unit 13 determines whether or not the receiving unit 12 has received attribute value information. The reception in this flowchart is normally reception from the terminal device 2, and the reception unit 12 receives the attribute value information paired with the terminal identifier, for example. Also, the attribute value information received in step S201 is normally attribute value information for authentication.

If the reception unit 12 determines that the attribute value information or the like has been received, the process proceeds to step S202; otherwise, the process returns to step S201.

(Step S202) The processing unit 13 refers to the authentication information corresponding to the terminal identifier received paired with the attribute value information in step S201 among the one or more pieces of authentication information stored in the authentication information storage unit 111 .

(Step S203) Using the attribute value information included in the authentication information referred to in step S202, the authentication unit 131 determines whether or not the attribute value information accepted in step S201 is valid. to get Note that the determination will be described with reference to the flowchart of FIG.

(Step S204) The processing unit 13 determines whether or not the variable acquired in step S203 indicates validity. If the acquired variable indicates validity, the process proceeds to step S205; otherwise, the process proceeds to step S206.

(Step S205) The authentication result processing unit 132 executes processing for when the attribute value information accepted in step S201 is valid. Specifically, the authentication result processing unit 132 transmits information permitting login to the terminal device 2 identified by the terminal identifier received in combination with the attribute value information in step S201. After that, the process returns to step S201.

(Step S206) The processing unit 13 determines whether or not the receiving unit 12 has received an operation to allow the judgment result that the attribute value information received in step S201 is invalid. More specifically, the processing unit 13 determines whether or not information on an operation that permits such a determination result has been received from the terminal device 2 identified by the terminal identifier received in combination with the attribute value information in step S201. Note that the operation that accepts the judgment result that the attribute value information is invalid includes, for example, the operation of pressing the "Cancel" button or the operation of turning off the power. Anything is fine.

(Step S207) The authentication result processing unit 132 executes processing for when the accepted attribute value information is invalid. Specifically, the authentication result processing unit 132 transmits information to the effect that the login is rejected to the terminal device 2 identified by the terminal identifier received in combination with the attribute value information in step S201. After that, the process returns to step S201.

(Step S208) The processing unit 13 determines whether or not the receiving unit 12 has received a registration instruction or the like. Specifically, the authentication result processing unit 132 determines whether or not the reception unit 12 has received a registration instruction paired with the terminal identifier. If the reception unit 12 determines that the registration instruction or the like has been received, the process proceeds to step S209, and if it determines that the registration instruction or the like has not been received, the process proceeds to step S212.

(Step S209) The processing unit 13 determines whether or not the receiving unit 12 has received attribute value information or the like. Specifically, the authentication result processing unit 132 determines whether or not the receiving unit 12 has received the attribute value information paired with the terminal identifier. The attribute value information and the like received in step S209 are attribute value information and the like for registration. If the reception unit 12 determines that the attribute value information or the like has been received, the process proceeds to step S210, and if it determines that the reception unit 12 has not received the attribute value information or the like, the process returns to step S209.

(Step S210) The authentication information acquisition unit 133 acquires authentication information including the attribute value information received in step S209.

(Step S<b>211 ) The accumulation unit 134 accumulates the authentication information acquired in step S<b>210 in the authentication information storage unit 111 . After that, the process returns to step S201.

(Step S212) The processing unit 13 determines whether or not the attribute value has been changed. More specifically, the processing unit 132 receives, for example, information indicating that the attribute value has been changed and includes information including an application identifier, type information, and an attribute value (hereinafter referred to as attribute value change information). It may be determined that the attribute value has been changed when it is received in combination with the identifier. If it is determined that the attribute value has been changed, the process proceeds to step S213, and if it is determined that the attribute value has not been changed, the process returns to step S201.

(Step S213) The processing unit 13 determines whether or not the variable acquired in step S203 indicates validity. If the acquired variable indicates validity, the process proceeds to step S214; otherwise, the process returns to step S201. The determination in this step S213 may be made by determining whether or not the user is logged in. If the user is logged in, the process proceeds to step S214, and if the user is not logged in, the process returns to step S201.

(Step S214) The authentication information acquisition unit 133 acquires authentication information having attribute value information including the attribute value changed in step S212. More specifically, the authentication information acquisition unit 133 acquires authentication information corresponding to the terminal identifier received paired with the attribute value change information in step S212 from among the one or more pieces of authentication information stored in the authentication information storage unit 111. do. For the authentication information acquired in this way, the authentication information acquiring unit 133 selects one or more attribute values paired with the application identifier included in the received attribute value change information, which are included in the attribute value change information. The attribute value of the type indicated by the existing type information is changed to the attribute value included in the attribute value change information. As a result, the attribute value information including the changed attribute value and the authentication information having the received terminal identifier are acquired.

(Step S<b>215 ) The accumulation unit 134 accumulates the authentication information acquired in step S<b>214 in the authentication information storage unit 111 . After that, the process returns to step S201.

In the flowcharts of FIGS. 2 and 3, for example, the process starts in response to a login start operation, an application start operation, power-on of the information processing apparatus 1, or program start-up. Processing ends with an interrupt. However, the trigger for starting or ending processing does not matter.

FIG. 4 is a flowchart for explaining determination processing.

(Step S401) The authentication unit 131 acquires one or more application identifiers from the attribute value information included in the authentication information.

(Step S402) The authentication unit 131 sets the initial value "1" to the variable i. The variable i is a variable for sequentially selecting unselected application identifiers from among the one or more application identifiers acquired in step S401.

(Step S403) The authentication unit 131 determines whether or not there is an i-th application identifier. If the i-th application identifier exists, the process proceeds to step S404, and if the i-th application identifier does not exist, the process proceeds to step S408.

(Step S404) The authentication unit 131 acquires one or more attribute values paired with the i-th application identifier from the attribute value information included in the authentication information.

(Step S405) The authentication unit 131 acquires one or more attribute values paired with the i-th application identifier from the attribute value information received in step S201.

(Step S406) The authentication unit 131 determines whether the one or more attribute values acquired in step S404 match the one or more attribute values acquired in step S405. If the one or more attribute values acquired in step S404 and the one or more attribute values acquired in step S405 all match, the process proceeds to step S407, and if even one does not match, the process proceeds to step S409.

(Step S407) The authentication unit 131 increments the variable i. After that, the process returns to step S403.

(Step S408) The authentication unit 131 sets the variable to "valid". After that, it returns to the upper processing.

(Step S409) The authentication unit 131 sets the variable to "illegal". After that, it returns to the upper processing.

A specific operation example of the information system according to the present embodiment will be described below. Various modifications are possible in the following description, and the scope of the present invention is not limited in any way.

The information system of this example includes an information processing device 1 and two or more terminal devices 2 . The information processing device 1 is a bank server that provides online services such as Internet net banking. Note that the information processing device 1 may be operated by, for example, a staff member of a bank.

One of the two or more terminal devices 2 (hereinafter sometimes referred to as a terminal device 2X) is a mobile terminal of a user X who uses a bank's online service, and the other one (hereinafter referred to as a terminal device 2Y ) is the mobile terminal of user Y who uses the same service, and the other one (hereinafter referred to as terminal device 2Z) is the mobile terminal of user Z who uses the same service.

The authentication information storage unit 111 of the information processing device 1 stores, for example, two or more pieces of authentication information as shown in FIG. FIG. 5 is a data structure diagram of authentication information. The authentication information has attribute value information and a terminal identifier. Each of the two or more pieces of stored authentication information is associated with an ID (for example, "1", "2", "3", etc.).

For example, authentication information associated with ID “1” (hereinafter referred to as authentication information 1) is attribute value information [{A1, (1, 1)}, {A2, (1, 2)}, {A4, (2 , 1)}] and a terminal identifier “A”. Authentication information (authentication information 2) associated with ID “2” includes attribute value information [{A2, (medium, yellow, TEL)}, {A3, (large, green, email)}], terminal identifier "B". Further, the authentication information 3 includes attribute value information [[A1, {(1, 1), medium, blue, Internet bank}], [A2, {(1, 2), medium, yellow, telephone}], [A3 , {(3, 1), medium, green, mail}], [A4, {(2, 1), medium, blue, memo}], . . . , and a terminal identifier "C".

The attribute value information included in the authentication information 3 is, for example, composed of all attribute value groups such as all application information 1 to 4 shown in FIG. 6, which will be described later.

The terminal storage unit 21 of the terminal device 2X stores a terminal identifier "X", an application identifier group "A1, A2, A4" for identifying the three applications A1, A2, A4 selected by the user X, and default type information. "Icon position information" is stored in advance. It is also assumed that, at present, the terminal storage unit 21 stores two or more pieces of application information as shown in FIG. 6, for example.

FIG. 6 is a data structure diagram of application information. Application information has an application identifier and an attribute value group. The attribute value group consists of icon position information, icon size, icon background color, and properties. Two or more pieces of stored application information are associated with IDs (for example, "1", "2", etc.).

For example, application information associated with ID "1" (hereinafter referred to as application information 1) has an application identifier "A1" and an attribute value group {(1, 1), medium, blue, net bank}. Also, application information (application information 2) associated with ID "2" has an application identifier "A2" and an attribute value group {(1, 2), medium, yellow, telephone}. Also, the application information 3 has an application identifier “A3” and an attribute value group {(3, 1), medium, green, mail}. Furthermore, the application information 4 has an application identifier "A4" and an attribute value group {(2, 1), medium, blue, memo}.

In the terminal device 2X, the terminal processing unit 23 configures a home screen using two or more pieces of application information as described above and screen configuration information stored in the terminal storage unit 21 . The terminal output unit 26 outputs the configured home screen through the display. As a result, a home screen as shown in FIG. 7, for example, is displayed on the display of the terminal device 2X.

This home screen includes two or more icons I1, I2, I3, I4, . . . corresponding to two or more applications A1, A2, A3, A4, . Contains two or more names "net bank", "memo", "mail", "telephone", .

Assume that the user X performs a login start operation via an input device such as a touch panel while the home screen as shown in FIG. 7 is displayed on the display of the terminal device 2X.

In the terminal device 2X, the terminal reception unit 22 receives the start operation, and the terminal processing unit 23 uses the stored application identifier group “A1, A2, A4” and the type information “icon position information” to Acquire attribute value information [{A1, (1, 1)}, {A2, (1, 2)}, {A4, (2, 1)}}. The terminal transmission unit 24 transmits the acquired attribute value information to the information processing device 1 in a pair with the terminal identifier “X” stored in the terminal storage unit 21 .

In the information processing device 1, the reception unit 12 receives the pair of the attribute value information and the terminal identifier “X”, and the processing unit 13 selects the received terminal from among the two or more pieces of authentication information in the authentication information storage unit 111. Refer to authentication information 1 with identifier "X". The authentication unit 131 converts the received attribute value information [{A1, (1, 1)}, {A2, (1, 2)}, {A4, (2, 1)}] into the referenced authentication information 1 attribute value information [{A1, (1, 1)}, {A2, (1, 2)}, {A4, (2, 1)}] possessed by It judges that it is, and acquires the judgment result "legal". The authentication result processing unit 132 transmits the login permission to the terminal device 2X identified by the received terminal identifier “X” via the output unit 14 in response to the acquisition of the determination result “valid”. do.

In the terminal device 2X, the terminal receiving section 25 receives the permission, and the terminal processing section 23 configures the login screen using the screen configuration information. The login screen is, for example, the third screen shown in FIG. 8, and has a "login" button and a "change authentication information" button. When the user X presses the "login" button, the terminal accepting unit 22 accepts a login instruction, which is an instruction corresponding to the button, and the terminal transmitting unit 24 associates the accepted login instruction with the terminal identifier "X". , to the information processing apparatus 1 .

In the information processing device 1, the authentication result processing unit 132 receives the login instruction via the reception unit 12 and permits login from the terminal device 2X. This allows user X to receive online services such as Internet banking.

After logging off, user X changes the arrangement of the icons. Specifically, after logging off, the home screen of FIG. 7 is displayed again on the display of the terminal device 2X. The user X changes the arrangement of icons on the home screen via the touch panel of the terminal device 2X. However, the arrangement of icons may be changed automatically, for example, when logging off.

Here, for example, it is assumed that the positions of the two icons I2 and I4 are exchanged as in the first screen of FIG. In response, the terminal processing unit 23 changes the position information of the icon I2 included in the application information 2 from (1, 2) to (2, 1), while changing the position information of the icon I4 included in the application information 4 to ( 2,1) to (1,2).

As a result, the first home screen in FIG. 8 is displayed on the display of the terminal device 2X. If a login start operation is performed in this state, the terminal processing unit 23 uses the three pieces of application information 1, 2, and 4 stored in the terminal storage unit 21 to obtain attribute value information [{A1, (1 , 1)}, {A2, (2, 1)}, {A4, (1, 2)}], and the terminal transmission unit 24 pairs the acquired attribute value information with the terminal identifier “X”. It is transmitted to the information processing device 1 .

In the information processing device 1, the reception unit 12 receives the pair of the attribute value information and the terminal identifier "X", and the processing unit 13 refers to the authentication information 1 having the terminal identifier "X". The authentication unit 131 determines that the received attribute value information [{A1, (1, 1)}, {A2, (2, 1)}, {A4, (1, 2)}] Since it does not match the value information [{A1, (1, 1)}, "A2, (1, 2)}, {A4, (2, 1)}], it is determined that the accepted attribute value information is not valid. The authentication result processing unit 132 transmits the acquired judgment result “unjustified” to the terminal device 2X. However, the judgment result “unjustified” is not transmitted to the terminal device 2X. may

Even if the terminal device 2X receives the determination result of "unauthorized", the login screen is not output, and the display of the first home screen in FIG. 8 is maintained. The user X memorizes the arrangement shown in FIG. 7, and switches the positions of the two icons I2 and I4 on the first home screen in FIG. In response, the terminal processing unit 23 changes the position information of the icon I2 in the application information 2 from (2, 1) to (1, 2), while changing the position information of the icon I4 in the application information 4 to ( 1,2) to (2,1). As a result, the display on the display changes like the second home screen in FIG.

Thus, when the login start operation is performed with the second home screen of FIG. 8 displayed, the attribute value information [{A1, (1, 1 )}, {A2, (1, 2)}, {A4, (2, 1)}] are acquired, and the acquired attribute value information and the like are transmitted to the information processing apparatus 1 .

The information processing device 1 receives the attribute value information and the like, and since the received attribute value information matches the attribute value information included in the authentication information 1, it is determined to be valid. In response, a login permission is transmitted to the terminal device 2X, and the third login screen shown in FIG. 8 is displayed on the display of the terminal device 2X. The user X presses the “login” button on the login screen, thereby logging into the information processing apparatus 1 .

On the other hand, users other than user X cannot accurately exchange the positions of the two icons I2 and I4, which store the arrangement of FIG. Therefore, even if a user other than user X operates the terminal device 2X, it is difficult to log in to the information processing device 1 .

Note that the processing when the "change authentication information" button is pressed on the third login screen in FIG. 8 is as follows. That is, when the "change authentication information" button is pressed, the display on the display returns from the third login screen in FIG. 8 to the second home screen in FIG. Next, while the second home screen in FIG. 8 is being displayed, an operation to change the arrangement of icons is accepted. For example, if the positions of two icons I2 and I4 are exchanged, the position information of icon I2 in application information 2 is changed from (1, 2) to (2, 1), and the position information of icon I4 in application information 4 is changed from (1, 2) to (2, 1). As a result of changing the position information from (2, 1) to (1, 2), the display on the display becomes like the first home screen in FIG.

Assuming that the registration instruction is accepted while the first home screen in FIG. , 1)}, {A4, (1, 2)}] and the terminal identifier “X”, and the registration unit 134 stores the acquired authentication information 1 in the authentication information storage unit 111. do. As a result, the authentication information 1 shown in FIG. 5 is updated to the acquired authentication information 1 .

Alternatively, authentication information may be automatically changed in response to changes in attribute values. Specifically, for example, when the user X presses the home button during login, the home screen as shown in FIG. 7 is displayed on the display of the terminal device 2X, and the user X changes the arrangement of the icons on the home screen. be able to. For example, when the positions of the two icons I2 and I4 are exchanged, the terminal processing unit 23 changes the position information of the icon I2 from (1, 2) to (2, 1), and changes the position information of the icon I4 to (2 , 1) to (1, 2), the display will look like the first home screen in FIG.

As the position information, which is a type of attribute value, is changed in this way, the authentication information acquisition unit 133 obtains the attribute value information [{A1, (1, 1)}, {A2, (2, 1)}, { A4, (1, 2)}] and the terminal identifier “X”, and the registration unit 134 stores the acquired authentication information 1 in the authentication information storage unit 111 . As a result, the authentication information 1 shown in FIG. 5 is automatically updated to the acquired authentication information 1 .

The operation of the information processing device 1 regarding login from the terminal device 2Y is as follows. In the terminal storage unit 21 of the terminal device 2Y, the terminal identifier "Y", the application identifier group "A2, A3" for identifying the two applications A2 and A3 selected by the user Y, and the type information selected by the user Y " icon size, properties" are stored in advance. Also, at this point, it is assumed that the terminal storage unit 21 stores, for example, two or more pieces of application information as shown in FIG. Note that the data structure of the application information is the same as in FIG.

For example, application information 1 has an application identifier “A1” and an attribute value group {(1, 1), middle, blue, net bank}. Also, application information 2 has an application identifier “A2” and an attribute value group {(3, 2), medium, yellow, TEL}. Also, the application information 3 has an application identifier “A3” and an attribute value group {(3, 1), large, green, mail}.

In the terminal device 2Y, the terminal processing unit 23 configures a home screen using two or more pieces of application information and screen configuration information as described above, and the terminal output unit 26 outputs the configured home screen. As a result, for example, a home screen as shown in FIG. 10 is displayed on the display of the terminal device 2Y.

This home screen consists of two or more icons I1, I2, I3, . . . corresponding to two or more applications A1, A2, A3, . Includes two or more corresponding names "net bank", "TEL", "mail", and so on.

Assume that the user Y performs a login start operation while the home screen as shown in FIG. 10 is displayed on the display of the terminal device 2Y. In the terminal device 2Y, the terminal reception unit 22 receives the start operation, and the terminal processing unit 23 uses the stored application identifier group "A2, A3" and the type information "icon size, property" to determine the attribute Acquire value information [{A2, (medium, yellow, TEL)}, {A3, (large, green, mail)}]. The terminal transmission unit 24 transmits the acquired attribute value information together with the terminal identifier “Y” to the information processing device 1 .

In the information processing device 1, the reception unit 12 receives the pair of the attribute value information and the terminal identifier "Y", and the processing unit 13 refers to the authentication information 2 having the received terminal identifier "Y". The authentication unit 131 converts the received attribute value information [{A2, (medium, yellow, TEL)}, {A3, (large, green, mail)}] into the attribute value information [ {A2, (middle, yellow, TEL)}, {A3, (large, green, email)}], so it is determined that the accepted attribute value information is valid, and the authentication result processing unit 132 , the login permission is transmitted to the terminal device 2Y.

In the terminal device 2Y, the permission is received, and the login screen shown in the third of FIG. 11 is displayed. When the user Y presses the "login" button, a login instruction is sent to the information processing apparatus 1 along with the terminal identifier "Y".

In the information processing device 1, the authentication result processing unit 132 receives the login instruction and permits login from the terminal device 2Y. Thereby, the user Y can receive the online service.

After logging off, user Y changes the size and properties of the icon. Specifically, after logging off, the home screen of FIG. 10 is displayed on the display of the terminal device 2Y. On this home screen, user Y reduces the size of icon I3, deletes the character string "TEL" associated with icon I2, and enters a new character string "TEL". In response, the terminal processing unit 23 changes the size of the icon I2 included in the application information 2 from "large" to "small", and changes the property included in the application information 3 from "TEL" to "telephone". As a result, the first home screen in FIG. 11 is displayed on the display of the terminal device 2Y.

Assuming that a login start operation is performed while the first home screen in FIG. medium, green, mail)}], and the terminal transmission unit 24 transmits the acquired attribute value information to the information processing apparatus 1 in combination with the terminal identifier “Y”.

In the information processing device 1, the receiving unit 12 receives the pair of the attribute value information and the terminal identifier "Y", and the processing unit 13 refers to the authentication information 2 having the terminal identifier "Y". The authentication unit 131 converts the received attribute value information [{A2, (middle, yellow, telephone)}, {A3, (middle, green, mail)}] into attribute value information [{A2, (medium, yellow, TEL)}, {A3, (large, green, email)}], it is determined that the accepted attribute value information is not valid, and the authentication result processing unit 132 outputs the determination result " Invalid" is sent to the terminal device 2Y.

In the terminal device 2Y, even if the judgment result "invalid" is received, the login screen is not displayed, and the display of the first home screen in FIG. 11 is maintained. User Y remembers that the size of icon I3 is large and that application A2 was called TEL. The character string "TEL" associated with I2 is deleted and a new character string "TEL" is entered.

In response, the terminal processing unit 23 changes the property of the application information 2 from "telephone" to "TEL" and changes the size of the icon I4 of the application information 3 from "medium" to "large". . As a result, the display on the display changes like the second home screen in FIG.

In this way, when the login start operation is performed while the second home screen in FIG. 11 is displayed, attribute value information [{A2, (middle, yellow, TEL)}, mail)}] is acquired, and the acquired attribute value information and the like are transmitted to the information processing apparatus 1 .

The information processing device 1 receives the attribute value information and the like, and since the received attribute value information matches the attribute value information included in the authentication information 2, it is determined to be valid. In response, a log-in permission is transmitted to the terminal device 2Y, and the third log-in screen shown in FIG. 11 is displayed on the display of the terminal device 2Y. The user Y presses the “login” button on the login screen, thereby logging into the information processing apparatus 1 .

On the other hand, users other than user Y cannot accurately change the size of icon I3 and the properties associated with icon I2, which have stored the icon sizes and properties shown in FIG. Therefore, even if a user other than the user Y operates the terminal device 2Y, it is difficult to log in to the information processing device 1. FIG.

The operation of the information processing apparatus 1 regarding login from the terminal device 2Z is as follows. A terminal identifier “Z” is stored in advance in the terminal storage unit 21 of the terminal device 2Z. Further, at present, the terminal storage unit 21 stores, for example, two or more pieces of application information 1 to 4 shown in FIG. Home screen is displayed.

In this state, if user Z performs a login start operation, attribute value information [[A1, {(1, 1), medium, blue, net bank)}], [A2, {( 1, 2), middle, yellow, phone}], [A3, {(3, 1), middle, green, email)}], [A4, {(2, 1), middle, blue, memo}], . . ] is acquired, and the terminal transmission unit 24 transmits the acquired attribute value information to the information processing apparatus 1 in a pair with the terminal identifier “Z”.

In the information processing device 1, the reception unit 12 receives the pair of the attribute value information and the terminal identifier "Z", and the processing unit 13 refers to the authentication information 3 having the received terminal identifier "Z". The authentication unit 131 recognizes the received attribute value information [[A1, {(1, 1), medium, blue, Internet bank}], [A2, {(1, 2), medium, yellow, telephone}], ( A3, {(3, 1), medium, green, email}], [A4, {(2, 1), medium, blue, memo}], ...] are attributes possessed by the referenced authentication information 3 Value information [[A1, {(1, 1), medium, blue, Internet bank}, [A2, {(1, 2), medium, yellow, telephone}], [A3, {(3, 1), medium , green, mail}], [A4, {(2, 1), medium, blue, memo}], . The result processing unit 132 transmits login permission to the terminal device 2Z.

In the terminal device 2Z, the permission is received and the login screen shown in the third of FIG. 8 is displayed. When the user Z presses the "login" button, a login instruction is sent to the information processing apparatus 1 along with the terminal identifier "Z".

In the information processing device 1, the authentication result processing unit 132 receives the login instruction and permits login from the terminal device 2Z. This allows user Z to receive online services.

After logging off, user Z changes one or more attribute values in all attribute value groups such as all application information 1 to 4 shown in FIG. Specifically, after logging off, the home screen of FIG. 7 is displayed on the display of the terminal device 2Y, and the user Z may, for example, switch the arrangement of the two icons I2 and I4 on this home screen. The size of the icon I3 may be reduced, or the character string "phone" associated with the icon I2 may be deleted and a new character string "TEL" may be entered.

For example, if the two icons I2 and I4 are interchanged, the terminal processing unit 23 changes the position information of the icon I2 included in the application information 2 from (1, 2) to (2, 1). The position information of the icon I4 included in the information 4 is changed from (2,1) to (1,2). As a result, the display on the display changes like the second home screen in FIG.

In this way, when the login start operation is performed with the second home screen of FIG. , {(2, 1), middle, yellow, phone}], [A3, {(3, 1), middle, green, email}], [A4, {(1, 2), middle, blue, memo} ], .

The information processing apparatus 1 receives the attribute value information and the like, and since the received attribute value information does not match the attribute value information included in the authentication information 3, it is determined to be invalid. In response, a log-in disapproval is sent to the terminal device 2Z, and the display of the terminal device 2Z remains the first home screen in FIG. User Z remembers that the placement of the two icons I2 and I4 has been switched, and switches the placement of the two icons I2 and I4 again.

Accordingly, the position information of the icon I2 included in the application information 2 is changed from (2, 1) to (1, 1), while the position information of the icon I4 included in the application information 4 is changed from (1, 2) to (1, 1). (2,1), which causes the display to change to look like the second home screen in FIG. In this state, when a login start operation is performed, attribute value information [[A1, {(1, 1), medium, blue, Internet bank}], [A2, {(1, 2), medium, yellow, phone}], [A3, {(3, 1), medium, green, mail}], [A4, {(2, 1), medium, blue, memo}], . 1.

In the information processing device 1, the attribute value information and the like are received, and since the received attribute value information matches the attribute value information held by the authentication information 3, it is determined to be valid, and login permission is granted to the terminal device 2Z. sent to. In the terminal device 2Z, the third login screen shown in FIG. 8 is displayed in response to the reception of the permission, and the user Z can receive the online service by pressing the "login" button.

On the other hand, users other than the user Z cannot restore the changed attribute values, and it is difficult to log in to the information processing apparatus 1 from the terminal device 2Z.

As described above, according to the first embodiment, the authentication information storage unit 111 stores one or more pieces of authentication information having attribute value information related to one or more attribute values of one or more applications, and the information processing apparatus 1 , receives attribute value information relating to one or more attribute values of one or more applications, refers to the authentication information stored in the authentication information storage unit 111 using the received attribute value information, and determines whether the attribute value information is valid. It is possible to provide a mechanism for performing authentication using attribute value information related to the attribute values of the application by performing authentication processing for determining whether or not, and performing processing according to the result of the authentication processing.

Further, in the above configuration, the one or more attribute values that constitute the authentication information are one or more types of attribute values among the position information of the application icon arrangement, the icon size, the icon background color, and the properties. , it is possible to provide a mechanism for performing authentication using attribute value information related to various attribute values of an application.

Further, in the above configuration, each of the one or more attribute values constituting the authentication information is the position information of one or more application icons, thereby providing a mechanism for performing authentication using the positions of the application icons.

In the above configuration, the icon can be arranged in a folder, and the positional information of the icon arranged in the folder is the position of the folder and the position of the icon within the folder. good.

For example, in the application information having the data structure shown in FIG. may comprise second location information relating to the location of the

Specifically, for example, on the first screen in FIG. 8, the icon I4 and the like corresponding to the application A4 and the like may be arranged in the folder F1 as shown in FIG. In the screen of FIG. 12, assuming that the folder identifier for identifying folder F1 is "F1", the position of folder F1 is (1, 2), and the position of icon I4 within the folder is (1, 1), application A4 The "icon position information" that constitutes the application information 4 (not shown) corresponding to the is first position information F1 (1, 2) regarding the position of the folder F1 and second position information F1 regarding the position of the icon I4 within the folder F4. For example, {F1 (1, 2), (1, 1)} may be expressed using two pieces of position information (1, 1).

In this case, for example, the attribute value information constituting the authentication information 1 shown in FIG. (1, 1)}]. For example, the reception unit 12 receives attribute value information [{A1, (1, 1)}, {A2, (2, 1)}, {A4 (1, 2), (1, 1)}] from the terminal device 2X. is received, the authentication unit 131 compares the received attribute value information with the attribute value information contained in the authentication information 1, and since both match, the attribute value information received from the terminal device 2X is valid. We judge that it is.

On the other hand, the icon I4 is arranged outside the folder F1 (for example, the position of (2, 2)), and the reception unit 12 receives the attribute value information [{A1, (1, 1)},”, for example. A2, (2, 2)}, {A4, (2, 2)}] is accepted because the accepted attribute value information does not match the attribute value information of the authentication information 1. Attribute value information is determined to be invalid.

This makes it possible to provide a mechanism for performing authentication using the location of the folder in which the icon of the application is arranged and the location of the icon within the folder. This matter also applies to the second embodiment.

In the above configuration, the one or more applications are the one or more applications selected by the user from among the two or more applications whose attribute values can be changed. A mechanism for performing authentication using value information can be provided.

Further, in the above configuration, the one or more applications are all two or more applications whose attribute values can be changed, thereby providing a mechanism for performing authentication using attribute value information regarding the attribute values of all applications.

Further, in the above configuration, the processing according to the result of the authentication processing is processing for logging into the information processing device 1, so authentication is performed using the attribute value information from the terminal, and the server permits login. can provide

Further, when a predetermined condition is satisfied, the information processing apparatus 1 acquires authentication information having attribute value information, stores the acquired authentication information in the authentication information storage unit 111, and acquires the attribute value information. It is possible to provide a mechanism for registering the authentication information possessed and performing authentication using the attribute value information possessed by the registered authentication information.

Further, in the above configuration, the predetermined condition is that the attribute value of one or more applications has been changed. Can update.

In the above configuration, the predetermined condition may be that the attribute value of one or more applications is changed after the information processing device 1 determines that the attribute value information is valid. , the registered authentication information can be automatically updated accurately. This matter also applies to the second embodiment.

Furthermore, the processing in this embodiment may be realized by software. Then, this software may be distributed by software download or the like. Also, this software may be recorded on a recording medium such as a CD-ROM and distributed. Note that this also applies to other embodiments in this specification.

Software that implements the information processing apparatus 1 according to the present embodiment is, for example, the following program. That is, the computer-accessible recording medium has an authentication information storage unit 111 that stores one or more authentication information having attribute value information related to one or more attribute values of one or more applications, and this program authentication stored in the authentication information storage unit 111 using a reception unit 12 that receives attribute value information about one or more attribute values of one or more applications, and the attribute value information received by the reception unit 12; A program for functioning as an authentication unit 131 that refers to information and performs authentication processing to determine whether or not the attribute value information is valid, and an authentication result processing unit 132 that performs processing according to the result of the authentication processing. .

(Embodiment 2)
FIG. 13 is a block diagram of the information processing device 10 according to the second embodiment. The information processing apparatus 10 is, for example, a mobile terminal of a user, but may be a stationary PC or the like, regardless of its type or location. Further, the information processing device 10 may be considered to be the stand-alone information processing device 1 described in the first embodiment, for example.

The information processing device 10 includes a storage unit 101 , a reception unit 102 , a processing unit 103 and an output unit 104 . The storage unit 101 has an authentication information storage unit 1011 . The processing unit 103 includes an authentication unit 1031 , an authentication result processing unit 1032 , an authentication information acquisition unit 1033 and a registration unit 1034 .

Each element constituting the information processing apparatus 10 operates in the same manner as the corresponding element in the first embodiment, except for the points described below.

The storage unit 101 stores one piece of authentication information. Further, in Embodiment 1 described above, various information stored in the terminal storage unit 21 of one terminal device 2 (eg, terminal identifier, one or more applications, one or more application information, screen configuration information, etc.) are also stored in the storage unit 101 . However, the terminal identifier does not have to be stored in storage section 101 .

The authentication information storage unit 1011 stores one authentication information among the one or more authentication information stored in the storage unit 11 in the first embodiment. One piece of authentication information is, for example, one of two or more pieces of authentication information shown in FIG. This authentication information usually does not have a terminal identifier, but it may have it.

The reception by the reception unit 102 is usually reception via an input device such as a touch panel. Also, the output from the output unit 104 is normally output via an output device such as a display.

The processing performed by the processing unit 103, the authentication unit 1031, the authentication result processing unit 1032, the authentication information acquisition unit 1033, and the registration unit 1034 is basically performed by each terminal having one or more corresponding components in the first embodiment. Among the processes performed for each identifier, this is the process corresponding to one terminal identifier. However, the processing performed by the authentication result processing unit 1032 is normally processing for enabling one or more applications.

Next, the operation of the information processing apparatus 10 will be described using the flowcharts of FIGS. 14 and 15. FIG. 14 and 15 are flowcharts for explaining the operation of the information processing apparatus 10. FIG.

(Step S201a) The processing unit 103 determines whether or not the receiving unit 102 has received attribute value information. If the reception unit 102 determines that the attribute value information has been received, the process proceeds to step S202a, and if it determines that the attribute value information has not been received, the process returns to step S201a.

(Step S<b>202 a ) The processing unit 103 refers to the authentication information in the authentication information storage unit 1011 .

(Step S203) The authentication unit 1031 determines whether or not the attribute value information accepted in step S201a is valid using the attribute value information included in the authentication information, and acquires a variable indicating the determination result. Note that the determination process is the same as that in the flowchart of FIG.

(Step S204) The processing unit 103 determines whether or not the variable acquired in step S203 indicates validity. If the acquired variable indicates validity, the process proceeds to step S205a; otherwise, the process proceeds to step S206a.

(Step S205a) The authentication result processing unit 1032 makes one or more applications available. After that, the process returns to step S201a.

(Step S206) The processing unit 103 determines whether or not the receiving unit 12 has received an operation to allow the judgment result that the attribute value information received in step S201a is invalid.

(Step S207a) The authentication result processing unit 1032 keeps one or more apps disabled. do. After that, the process returns to step S201a.

(Step S208a) The processing unit 103 determines whether or not the receiving unit 102 has received the registration instruction. If the reception unit 102 determines that the registration instruction has been received, the process proceeds to step S209a, and if it determines that the registration instruction has not been received, the process proceeds to step S212a.

(Step S209a) The processing unit 103 determines whether or not the receiving unit 102 has received attribute value information. If the reception unit 102 determines that the attribute value information has been received, the process proceeds to step S210a, and if it determines that the attribute value information has not been received, the process returns to step S209a.

(Step S210a) The authentication information acquisition unit 1033 acquires authentication information having the attribute value information accepted in step S209a.

(Step S<b>211 ) The accumulation unit 134 accumulates the authentication information acquired in step S<b>210 a in the authentication information storage unit 1011 . After that, the process returns to step S201a.

(Step S212a) The processing unit 103 determines whether or not the attribute value has been changed. If it is determined that the attribute value has been changed, the process proceeds to step S213, and if it is determined that the attribute value has not been changed, the process returns to step S201a.

(Step S213) The processing unit 13 determines whether or not the variable acquired in step S203 indicates validity. If the acquired variable indicates validity, the process proceeds to step S214a; otherwise, the process returns to step S201a. It should be noted that the determination in step S213 may be a determination of whether or not one or more applications are available. If it is not possible, the process may return to step S201a.

(Step S214a) The authentication information acquisition unit 1033 acquires authentication information having attribute value information including the attribute value changed in step S212.

(Step S215) The accumulation unit 134 accumulates the authentication information acquired in step S214a in the authentication information storage unit 111. FIG. After that, the process returns to step S201a.

In the flowcharts of FIGS. 14 and 15, for example, processing starts in response to an application activation operation, power-on of the information processing apparatus 10, or program activation, and processing ends in response to, for example, power-off or processing end interrupt. do. However, the trigger for starting or ending processing does not matter.

A specific example of the operation of the information processing device 10 is to replace the processing performed while communicating between the information processing device 1 and one terminal device 2 (for example, the terminal device 2X) in the first embodiment described above. This is done within the device 10 .

That is, the storage unit 101 stores two or more applications A1 to A4, two or more application information 1 to 4 shown in FIG. 6, and the like. The authentication information storage unit 1011 stores, for example, the authentication information 1 among the two or more pieces of authentication information 1 to 3 shown in FIG.

The home screen displayed on the display of the information processing device 10 based on the application information 1 to 4 is the same as that shown in FIG. The screen transition according to the change of the icon position information is the same as in FIG. However, the third screen in FIG. 8 is the application activation screen. The application activation screen has a "activate application" button instead of the "login" button.

As described above, according to the second embodiment, authentication information having attribute value information about one or more attribute values of one or more applications is stored in the authentication information storage unit 1011, and the information processing apparatus 10 stores one or more receives attribute value information related to one or more attribute values of the application, refers to the authentication information stored in the authentication information storage unit 1011 using the received attribute value information, and determines whether the attribute value information is valid. It is possible to provide a mechanism for performing authentication using attribute value information related to the attribute values of the application by performing the authentication process and performing the process according to the result of the authentication process.

Further, in the above configuration, the one or more attribute values that constitute the authentication information are one or more types of attribute values among the position information of the application icon arrangement, the icon size, the icon background color, and the properties. , it is possible to provide a mechanism for performing authentication using attribute value information related to various attribute values of an application.

Further, in the above configuration, each of the one or more attribute values constituting the authentication information is the position information of one or more application icons, thereby providing a mechanism for performing authentication using the positions of the application icons.

In the above configuration, the icon can be arranged in a folder, and the positional information of the icon arranged in the folder is the position of the folder and the position of the icon within the folder. Often, this can provide a mechanism for authentication using the location of the folder in which the app's icon is located, and also the location of that icon within that folder.

In the above configuration, the one or more applications are the one or more applications selected by the user from among the two or more applications whose attribute values can be changed. A mechanism for performing authentication using value information can be provided.

Further, in the above configuration, the one or more applications are all two or more applications whose attribute values can be changed, thereby providing a mechanism for performing authentication using attribute value information regarding the attribute values of all applications.

Further, in the above configuration, the processing according to the result of the authentication processing is processing for enabling one or more applications, so that authentication is performed using the attribute value information, and the terminal that permits the activation of the application. can provide

Further, when a predetermined condition is satisfied, the information processing apparatus 1 acquires authentication information having attribute value information, stores the acquired authentication information in the authentication information storage unit 1011, and acquires the attribute value information. It is possible to provide a mechanism for registering the authentication information possessed and performing authentication using the attribute value information possessed by the registered authentication information.

Further, in the above configuration, the predetermined condition is that the attribute value of one or more applications has been changed. Can update.

The software that implements the information processing apparatus 10 according to the present embodiment is, for example, the following program. That is, the computer-accessible recording medium includes an authentication information storage unit 1011 storing one or more authentication information having attribute value information related to one or more attribute values of one or more applications, and the program The authentication stored in the authentication information storage unit 1011 using a reception unit 102 that receives attribute value information about one or more attribute values of one or more applications, and the attribute value information received by the reception unit 102. It is a program for functioning as an authentication unit 1031 that refers to information and performs authentication processing to determine whether or not the attribute value information is valid, and an authentication result processing unit 1032 that performs processing according to the result of the authentication processing. .

FIG. 16 is an external view of a computer system 900 that implements the information processing apparatus 1 and the like by executing the programs in each embodiment. The embodiments can be implemented by computer hardware and computer programs executed thereon. In FIG. 16, computer system 900 comprises computer 901 including disk drive 905 , keyboard 902 , mouse 903 and display 904 . The entire system including the keyboard 902, mouse 903, and display 904 may be called a computer.

FIG. 17 is a diagram showing an example of the internal configuration of the computer system 900. As shown in FIG. In FIG. 17, a computer 901 includes a disk drive 905, an MPU 911, a ROM 912 for storing programs such as a boot-up program, and a ROM 912 for storing programs such as a boot-up program. A RAM 913 that provides storage space, a storage 914 that stores application programs, system programs, and data, a bus 915 that interconnects the MPU 911, ROM 912, etc., and provides connections to networks such as external networks and internal networks. a network card 916; The storage 914 is, for example, a hard disk, SSD, flash memory, or the like.

A program that causes the computer system 900 to execute the functions of the information processing apparatus 1 and the like may be stored in a disk 921 such as a DVD or CD-ROM, inserted into the disk drive 905 , and transferred to the storage 914 . Alternatively, the program may be transmitted to computer 901 over a network and stored in storage 914 . Programs are loaded into RAM 913 during execution. Note that the program may be loaded directly from disk 921 or from the network. Also, the program may be read into the computer system 900 via another removable recording medium (eg, DVD, memory card, etc.) instead of the disk 921 .

The program does not necessarily have to include an operating system (OS) or a third-party program that causes the information processing apparatus 1 or the like to execute the functions of the computer details 901 . A program may contain only those portions of instructions that call the appropriate functions or modules in a controlled manner to produce the desired result. How the computer system 900 operates is well known and will not be described in detail.

The computer system 900 described above is a server or a stationary PC, and is suitable for realizing the information processing apparatus 1 of the first embodiment. The terminal device 2 may be realized by a portable terminal such as a smart phone, a tablet terminal, or a notebook PC, for example. In this case, for example, it is desirable to replace the keyboard 902 and mouse 903 with a touch panel, the disk drive 905 with a memory card slot, and the disk 921 with a memory card. However, the above is an example, and the hardware configuration of the computer that implements the information processing apparatus 1 and the like does not matter.

In the above program, the transmission step for transmitting information and the reception step for receiving information are performed by hardware. not included).

Also, the number of computers that execute the above programs may be singular or plural. That is, centralized processing may be performed, or distributed processing may be performed.

Further, in each of the above-described embodiments, two or more communication means (terminal transmission unit 24, terminal reception unit 25, etc.) existing in one device may be physically realized by one medium. .

Further, in each of the above embodiments, each process (each function) may be implemented by centralized processing by a single device (system), or may be implemented by distributed processing by a plurality of devices. may be

It goes without saying that the present invention is not limited to the above-described embodiments, and that various modifications are possible and are also included within the scope of the present invention.

INDUSTRIAL APPLICABILITY As described above, the information processing apparatus according to the present invention has the effect of being able to provide a mechanism for performing authentication using information on attribute values of an application, and is useful as an information processing apparatus or the like.

Reference Signs List 1, 10 information processing device 2 terminal device 11, 101 storage unit 12, 102 reception unit 13, 103 processing unit 14, 104 output unit 21 terminal storage unit 22 terminal reception unit 23 terminal processing unit 24 terminal transmission unit 25 terminal reception unit 26 Terminal output unit 111, 1011 Authentication information storage unit 131, 1031 Authentication unit 132, 1032 Authentication result processing unit 133, 1033 Authentication information acquisition unit 134, 1034 Registration unit

Claims (10)

an authentication information storage unit storing one or more authentication information having attribute value information related to one or more attribute values of one or more applications;
a reception unit that receives attribute value information about one or more attribute values of one or more applications;
an authentication unit that refers to authentication information stored in the authentication information storage unit using the attribute value information accepted by the reception unit and performs an authentication process to determine whether the attribute value information is valid;
An authentication result processing unit that performs processing according to the result of the authentication processing ,
The one or more attribute value information included in the authentication information is position information of the one or more application icons,
the icon can be arranged in a folder;
The information processing apparatus , wherein the position information of the icons arranged in the folder is information relating to the position of the folder and the position of the icon within the folder. 2. The information processing according to claim 1, wherein the at least one attribute value information included in the authentication information is at least one type of attribute value selected from position information of an application icon arrangement, icon size, icon background color, and properties. Device. 3. The information processing apparatus according to claim 1, wherein said one or more applications are one or more applications selected by a user from among two or more applications whose attribute values can be changed. 3. The information processing apparatus according to claim 1, wherein the one or more applications are all two or more applications whose attribute values can be changed. The information processing apparatus according to any one of claims 1 to 4 , wherein the process according to the result of the authentication process is a process for logging into the information processing apparatus. The information processing apparatus according to any one of claims 1 to 4 , wherein the processing according to the result of the authentication processing is processing for enabling one or more applications. an authentication information acquiring unit that acquires authentication information having attribute value information when a predetermined condition is satisfied;
7. The information processing apparatus according to any one of claims 1 to 6 , further comprising a registration unit that accumulates the authentication information acquired by the authentication information acquisition unit in the authentication information storage unit. 8. The information processing apparatus according to claim 7 , wherein said predetermined condition is that attribute values of one or more applications have been changed. An information processing method realized by an authentication information storage unit, a reception unit, an authentication unit, and an authentication result processing unit storing one or more authentication information having attribute value information related to one or more attribute values of one or more applications. hand,
a receiving step in which the receiving unit receives attribute value information regarding one or more attribute values of one or more applications;
The authentication unit uses the attribute value information received by the reception unit to refer to the authentication information stored in the authentication information storage unit, and performs authentication processing for determining whether or not the attribute value information is valid. an authentication step;
an authentication result processing step in which the authentication result processing unit performs processing according to the result of the authentication processing;
The one or more attribute value information included in the authentication information is position information of the one or more application icons,
the icon can be arranged in a folder;
The information processing method , wherein the position information of the icons arranged in the folder is information relating to the position of the folder and the position of the icon within the folder. A computer that can access an authentication information storage unit that stores one or more authentication information having attribute value information related to one or more attribute values of one or more applications,
a reception unit that receives attribute value information about one or more attribute values of one or more applications;
an authentication unit that refers to authentication information stored in the authentication information storage unit using the attribute value information accepted by the reception unit and performs an authentication process to determine whether the attribute value information is valid;
A program for functioning as an authentication result processing unit that performs processing according to the result of the authentication processing ,
The one or more attribute value information included in the authentication information is position information of the one or more application icons,
the icon can be arranged in a folder;
The program according to claim 1, wherein the positional information of the icons arranged in the folder is information relating to the position of the folder and the position of the icon within the folder.

Images