JP3925613B2 - Personal authentication system and personal authentication method - Google Patents

Description

[0001]
[Industrial application fields]
The present invention relates to a personal authentication system and a personal authentication method using a computer and communication means when using a cash card, electronic commerce, the Internet, a security system, or the like.
[0002]
[Prior art]
In recent years, with the development of computers and communication means, it has become possible to withdraw and make payments by recognizing the identity of the user just by entering a PIN as seen on cash cards and debit cards. .
[0003]
In addition, inputting a personal identification number (password) via the Internet or the like has become very convenient such that an unspecified number of users can use other computers from a remote location.
[0004]
[Problems to be solved by the invention]
However, the secret code is not likely to be seen or deciphered by others, and it remains uneasy whether it will not be used illegally.
[0005]
In addition, regarding the identification of users on the Internet, there have been many cases of unauthorized intrusion by an unauthorized user program such as decrypting a password (password).
[0006]
Therefore, there is currently almost no perfect user personal identification system and method based on such a personal identification number.
[0007]
The technical problem of the present invention is to pay attention to such a problem, and to change the conventional method of using a personal identification number to enable more reliable personal authentication and user identification.
[0008]
[Means for Solving the Problems]
The technical problem of the present invention is solved by the following means. Claim 1 is a personal authentication system using a mobile communication means such as a mobile phone, a communication means for calling the mobile phone, and a computer, and has the following means.
1. Identification information input means for inputting personal identification information (customer number, user name, resident number, etc.). This is due to an input terminal or an information terminal such as a card reader. This includes cash dispensers used by banks and card readers when using debit cards.
2. Storage means for storing personal identification information , a personal identification number and a mobile phone number in advance. This may be placed inside the information terminal device such as the identification information input means described above, but is preferably placed in the computer system of the information processing center or electronic authentication center.
3. Communication means for calling a mobile phone having a mobile phone number retrieved from a storage means and read together with a personal identification number based on personal identification information input from the identification information input means.
4). A mobile phone for personal identification number possession.
5. Calculation means for determining whether the password sent from the mobile phone through the communication means is the same as the password registered in advance .
[0009]
With the system configuration having each of the above means, the individual is authenticated as the principal based on the judgment of the computing means. Note that the mobile phone used in this system can be a normal mobile phone, and it is not necessary to provide a special additional function or the like to the mobile phone.
[0010]
Claim 2 is a personal authentication method using a mobile communication means such as a mobile phone, a communication means for calling the mobile phone, and a computer, such as a customer number, a user name, and a resident number (personal number). When the personal identification information is input from the identification information input means (information terminal) using a key or by using a personal card or the like, the inside of the identification information input means (information terminal apparatus) or the information processing center in advance Or, a communication connected to the computer by searching the storage device of the user's mobile phone number and password registered in the storage device of the electronic authentication center from the storage device based on the individual identification information of the user call the mobile phone of the number via the means, the input operation of the owner ie PIN by himself of the cellular phone from the cellular phone Sent the input signal to the information processing center computer is, it is when the operation means matches the identification number of the user read from the storage device determines, certifying that its user himself. If the password is not entered within a certain period of time after the call, it is denied. This is the above personal authentication method.
[0011]
The personal card and the like include a cash card, a credit card, a member's card, or an administrative IC card currently being formulated by the government.
[0012]
It is also possible to respond by voice by the operator of the information processing center and the owner of the mobile phone.
[0013]
At this time, the password entered from the mobile phone has the effect of preventing the person who owns the mobile phone of another person from operating, in addition to the effect that the owner cannot carelessly operate. Note that the mobile phone used for this personal authentication method can be a normal mobile phone, and it is not necessary to provide a special additional function or the like to the mobile phone.
[0014]
The reason why the personal authentication method by this method works effectively is as follows. In the personal authentication method by the normal personal identification number, the personal identification number may be decrypted. Therefore, even if an unauthorized user knows the mobile phone number, an unauthorized person who does not own the mobile phone This is because the user cannot interrupt the communication means in the meantime. In addition, since a personal identification number is used for input (response operation) from the cellular phone, even if someone else owns the cellular phone, it cannot be operated by a third party who does not know the personal identification number. Safety is further enhanced in case of loss or theft.
[0015]
Here, it is expressed as “mobile phone”, but it may be any mobile communication means, and thus includes a PHS, a personal digital assistant (PDA) having a communication function, and the like.
[0016]
The personal authentication system according to claim 3 includes the following means.
1. Personal cards (cash cards, credit cards, members cards, administrative IC cards, etc.) on which personal identification information (customer number, user name, resident number, etc.) , personal identification number and mobile phone number are recorded.
2. Identification information input means for inputting personal identification information , a personal identification number and a mobile phone number using a personal card.
3. Communication means for calling a mobile phone having a mobile phone number input from the identification information input means.
4). A mobile phone for entering a personal identification number owned by an individual.
5. Calculation means for determining whether the personal identification number sent from the mobile phone via the communication means is the same as the personal identification number read from the personal card .
With the system configuration having each of the above means, the individual is authenticated as the principal based on the judgment of the computing means.
[0017]
The difference from the personal authentication system of claim 1 is that the place where the personal identification number and the mobile phone number are recorded is recorded not on the storage means such as the computer storage device of the information processing center or electronic authentication center but on the personal card itself. It is a point to keep. Therefore, in this case, the personal card itself acts as a storage means.
[0018]
In other words, the personal identification number of the user is also recorded on the personal card together with the personal identification information and the cellular phone number for verification for determining whether the personal identification number input from the cellular phone is correct.
[0019]
In this case, in order to prevent unauthorized use of a personal card by a third party, it is particularly necessary to prevent the mobile phone number from being easily rewritten. This is because if a personal card is transferred to a third party who is an unauthorized user and rewritten with the mobile phone number of the third party, the person will be mistaken for the legitimate owner of the personal card. is there.
[0020]
Thus, in this case, since the mobile phone number is recorded in the card in advance, it is not necessary to search the mobile phone number from the storage device of the information processing center or the electronic authentication center, and the system can be constructed more easily. .
[0021]
The personal authentication method of claim 4 uses the system of claim 3 and uses a personal card (for example, a cash card, a credit card, a member's card, an administrative card) in which personal identification information (customer number) , personal identification number and mobile phone number are recorded. IC card etc.), when personal identification information , personal identification number and mobile phone number are input from the identification information input means, the mobile phone of the personal mobile phone number is called via the communication means, When a personal identification number is entered from the mobile phone, the person is identified as the person himself / herself, and when a regular input operation (response operation) is not performed within a certain period of time after calling, the user is denied. Features.
[0022]
According to the personal authentication system of claim 5, the computer on the operator side confirms the individual user of the computer on the user side among a plurality of computers connected to each other via communication means (personal ) Authentication system, which is configured as follows.
1. Identification information input means.
The user has user (individual) identification information input means on the user side computer. Here, the identification information input means may use a normal input key (keyboard), or personal identification information registered in advance on a hard disk or floppy disk and used as input information. good. You can also use a card reader.
2. Mobile phone The user also has a mobile phone for entering the PIN .
3. Storage means The computer on the operator side has storage means for registering user identification information, a personal identification number and a mobile phone number in advance.
4). Communication means The operator side (the computer) further retrieves the mobile phone number retrieved from the storage means based on the identification information of the user (individual) inputted and transmitted from the identification information input means of the user side computer. Has communication means to call mobile phone.
5. Calculation means The computer on the operator side has calculation means for determining whether the response signal sent from the user's mobile phone via the communication means is a normal response. With the above configuration, the personal authentication system is characterized in that the individual is authenticated based on the judgment of the calculation means.
[0023]
According to the personal authentication method of claim 6, when the identification information of the user is input and transmitted from the identification information input means of the computer on the user side between a plurality of computers connected to each other via the communication means, Based on the identification information of the user (individual), the operator's computer (the computer on which the other party should be authorized) receives the user's mobile phone number registered in the storage means in advance. When the user retrieves the mobile phone of the user via the communication means and retrieves the code number from the cell phone, the password obtained by receiving the signal is read from the memory means. This is a (personal) authentication method for a user, characterized in that it is determined whether or not it matches the personal identification number and is identified as the user.
[0024]
Here, although “user personal authentication method” is used, the user can be applied not only to individuals but also to organizations such as companies and schools.
[0025]
According to this personal authentication method, it is even more effective when the other party's user is identified between a wide range of networks such as the Internet, that is, an unspecified number of computers connected to a large-scale network via communication means. it can.
[0026]
Unlike the use of various personal cards such as cash cards, credit cards, and members cards, it is difficult to identify the other person and the situation on the Internet, making it more difficult to identify users and becoming important. Because it comes.
[0027]
Here, the computer on the user side and the computer on the operator side are not always in a fixed position. For example, a personal personal computer normally used as a computer on the user side is illegally infiltrated from others. When this user personal authentication method is used to determine the connection permission in preparation for the case, the personal personal computer can be a computer on the operator side for confirming other users.
[0028]
Therefore, in this case, the identification information (customer number, customer name, etc.) of the communication partner who is permitted to connect, the personal identification number, and the mobile phone number are registered in advance in the storage device of the personal computer. It is also necessary to have a communication means for calling a mobile phone.
[0029]
This personal authentication method is effective, for example, when a person who frequently accesses and uses a home computer from a mobile computer at work or a business trip wants to make sure that other people cannot access it. is there.
[0030]
DETAILED DESCRIPTION OF THE INVENTION
Next, an embodiment of how the personal authentication system and the personal authentication method according to the present invention are practically described will be described.
Embodiment 1 [Application to Debit Card System]
First, a case where the personal authentication method of claim 2 is implemented using the personal authentication system of claim 1 will be described with reference to FIGS. In FIG. 3, C is a debit card (cash card), R is a card reader used for reading the card, 1 is an information processing center such as a financial institution, 2 is a communication means, and 3 is a mobile phone.
[0031]
Step S1: A debit card (cash card) C is read into the card reader R at a member store of the debit card system, and the user identification information such as the read customer number is sent to the information processing center 1 such as a financial institution.
[0032]
Step S2: The information processing center 1 searches the user's mobile phone number from the user file of the computer based on the user identification information.
[0033]
Step S3: Call the mobile phone 3 of that number.
[0034]
Step S4: When the mobile phone 3 is called and a ring tone sounds, the customer performs a predetermined key operation, that is, a response operation from the mobile phone 3.
Examples of key operations are as follows, for example.
(A) Press the response hold button once → announce the response hold → (b) press the response hold button twice → cut off communication.
(C) When a specific number such as a password is input after the communication start button is pressed, a signal corresponding to the number is transmitted from the mobile phone 3 to the information processing center 1.
[0035]
Step S5: Check the response signal. The information processing center 1 determines whether the response signal sent via the communication unit 2 is a normal response. Here, when the ringing tone sounds for a certain time, it is considered that there is no response. When the password is used for the response operation, it is determined by checking with the computer whether the password matches the password at the time of registration.
[0036]
Step S6: If there is a legitimate response, it is authorized as a genuine customer, and authorization information is sent to the debit card system member store.
[0037]
Step S7: Since personal authentication by this system is completed, the process proceeds to other necessary procedures.
[0038]
Step S8: If there is no legitimate response, that is, if the password is wrong or if there is no response within a certain time, the authentic customer is not authorized and denial information is sent to the debit card system member store.
[0039]
Step S9: Then, proceed to other necessary procedures after denial.
[0040]
In the above processing, in the case of cash cards and debit cards, from the standpoint of respecting the current system, in the case of high withdrawals and settlements that usually recognize users with only a conventional PIN and exceed a certain limit May be requested to operate the mobile phone.
[0041]
Embodiment 2 [Application to identity verification required when residents receive administrative services]
[0042]
A second embodiment of the personal authentication method of claim 2 using the personal authentication system of claim 1 will be described with reference to FIGS.
[0043]
Step S1: Resident A submits a personal card (such as an administrative IC card currently being formulated by the government) C instead of a conventional seal at the office window, and this is read into an identification information input means such as a card reader R. The identification information of the resident A is transmitted to the electronic authentication center 1.
[0044]
Step S2: The electronic authentication center 1 searches the resident A's mobile phone number from the storage device of the computer based on the transmitted identification information.
[0045]
Step S3: Call the mobile phone 3 of that number.
[0046]
Step S4: When the mobile phone 3 is called and the ring tone of the resident A's mobile phone 3 sounds, the resident A performs a response operation by key input or the like from the mobile phone 3, and the response signal is sent to the electronic authentication center 1. Sent.
[0047]
Step S5: Check the response signal. The electronic authentication center 1 determines whether the response signal sent via the communication means 2 is a normal response. Here, when the ringing tone sounds for a certain time, it is considered that there is no response. When the password is used for the response operation, the computer determines whether the password matches the password at the time of registration.
[0048]
Step S6: If the response signal is correct, the authentication is established, and the establishment of the authentication is displayed on the display 5 installed at the office window.
[0049]
Step S7: Since personal authentication by this system is completed, the process proceeds to other necessary procedures.
[0050]
Step S8: When there is no regular response, that is, when the response signal is wrong or there is no response within a certain time, a denial process is performed. For example, a denial display is performed on the display 5 installed at the office window.
[0051]
Step S9: Then, proceed to other necessary procedures after denial.
[0052]
Embodiment 3 [Application to crime prevention system]
A third embodiment of the personal authentication method of claim 4 using the personal authentication system of claim 3 will be described with reference to FIGS.
[0054]
This embodiment is suitable for an entrance door of an important facility.
[0055]
Step S1: Instead of using the conventional key, the facility user causes the card reader R or the like to read the personal card C on which each user's personal identification information and mobile phone number are recorded. This personal card C is, for example, a member's card held only by those who are permitted to enter and exit.
[0056]
Here, there is no procedure corresponding to step S2 in the first and second embodiments, and the procedure continues to the next step.
[0057]
Step S3: The user's mobile phone 3 of the read mobile phone number is called from the door lock controller 7 via the communication means 4.
[0058]
Step S4: The user performs a specific input operation, that is, a response operation from the mobile phone 3, and the response signal is sent to the door lock controller 7.
[0059]
Step S5: It is determined by the door lock controller 7 having a determination function whether the response signal sent via the communication means 4 is a normal response.
[0060]
Step S6: If there is a legitimate response, the user is identified and the door lock is released.
[0061]
Step S7: Since personal authentication by this system is completed, the process proceeds to other necessary procedures. For example, the process returns to step 1 to return to the personal card reading system for other users.
[0062]
Step S8: When there is no regular response, that is, when the response operation is wrong or there is no response within a certain period of time, the door 6 cannot be opened, and a denial process such as generating a warning sound is performed.
[0063]
Step S9: Then, the process proceeds to the procedure after denial. For example, the process returns to step 1 to return to the personal card reading system for other users.
[0064]
Here, when a personal identification number is used for the response operation by the user himself / herself, the personal identification number and the mobile phone number are used together with the personal identification information and the mobile phone number for the purpose of verification for the response operation, that is, whether the entered personal identification number is correct It is necessary to record on the card C.
[0065]
Embodiment 4 [Application to User Authentication Method on the Internet]
[0066]
Embodiment 4 of the personal authentication method of claim 6 using the personal authentication system of claim 5 will be described with reference to FIGS.
[0067]
This embodiment is suitable for a case where a partner is authorized and a connection permission is determined in a wide area network such as the Internet.
[0068]
Step S1: User identification information is input and transmitted from the computer 8 on the user side.
[0069]
Step S2: The cellular phone number and password of the user registered in advance in the computer 9 on the operator side are searched from the storage device based on the transmitted user identification information.
[0070]
Step S3: Next, the mobile phone number of the user is called through the communication means 2.
[0071]
Step S4: When the mobile phone 3 is called and a ring tone sounds, the user presses the call start button of the mobile phone 3 and then inputs a personal identification number, and the signal is sent to the computer 9 on the operator side. .
[0072]
Step S5: The computer 9 on the operator side determines whether the personal identification number transmitted via the communication means 2 matches the personal identification number read from the storage device.
[0073]
Step S6: If the password is correct, the authentication is established.
[0074]
Step S7: When authentication is established, connection is made to the computer 9 on the operator side.
[0075]
Step S8: If there is no legitimate response, that is, if the password is wrong or there is no response within a certain period of time, a denial decision is made.
[0076]
Step S9: Reject the connection to the computer 9 on the operator side. Then proceed to other necessary procedures after denial.
[0077]
Embodiment 5 [Application to Electronic Payment System Using Personal Computer]
[0078]
Embodiment 5 to which the personal authentication system according to claims 1 and 5 and the personal authentication method according to claims 2 and 6 are applied will be described with reference to FIGS.
[0079]
In this case, the user identification information and the user's mobile phone number and password are registered in advance in the storage device of the financial institution or information processing center 1 with which the electronic payment system is contracted.
[0080]
For the user, the user identification information and bank account information recorded on the cash card are registered in advance in a recording medium such as a floppy disk or a storage device such as a hard disk so as to be easy to use. Alternatively, a cash card can be used by connecting the card reader directly to a personal computer.
[0081]
When using this electronic payment system, the following procedure is used.
[0082]
Step S0: First, by operating the personal computer 8, user identification information and bank account information are read from a recording medium such as a floppy disk, a storage device such as a hard disk, or a card reader, and transaction information (the desired transaction (Information such as merchandise and payment details) to the other party's computer 10. This step S0 corresponds to the entrance of the flowchart of FIG.
[0083]
Step S1: The computer 10 of the counterparty who is a member store (participant) of the electronic payment system adds its membership to the transmitted user identification information (including the personal identification number) and bank account information (and transaction information). The store (person) information and the transaction amount are added and transmitted to the financial institution of the electronic settlement system or the information processing center 1.
[0084]
Step S2: At the financial institution or the information processing center 1, the mobile phone number of the user registered in advance is searched from the storage device based on the user identification information (customer number, user name, etc.).
[0085]
Step S3: Call the user's mobile phone 3 via the communication means 2.
[0086]
Step S4: The user's mobile phone 3 rings and confirms whether the user can establish the electronic commerce, and the member stores a key for personal authentication necessary for the member store. The user is prompted to perform a response operation, and the user inputs a password.
[0087]
Step S5: Confirm key operation. That is, the information processing center 1 determines whether or not the password transmitted from the mobile phone 3 matches the registered password.
[0088]
Step S6: If it is determined that the user is the user, the transaction amount is transferred from the bank account of the user to the bank account of the member store (person) and the computer 10 of the counterparty who is the member store (person). Information on authentication establishment and payment completion is sent to.
[0089]
Step S7: Since personal authentication and necessary procedures by this system are completed, the procedure proceeds to other necessary procedures.
[0090]
Step S8: If there is no legitimate response, that is, if the password is wrong or there is no response within a certain time, a denial process is performed and denial information is transmitted to the counterparty's computer 10.
[0091]
Step S9: Then, proceed to other necessary procedures after denial.
[0092]
【The invention's effect】
As described above, the personal identification method and the user authentication method using the normal password may cause the code number to be deciphered, whereas the personal authentication system and the personal authentication method of the present invention allow the authentication. In order to check the individual who should be called by calling the mobile phone owned by the user, even if the unauthorized user knows the mobile phone number, the unauthorized user who is a third party It becomes impossible to interrupt the communication means. Therefore, it is safe because only the person who owns the mobile phone can operate the mobile phone and input the personal identification number . In addition, since the personal identification number is used, even if the mobile phone is stolen and possessed, the identity cannot be confirmed, and the safety is further enhanced.
[Brief description of the drawings]
FIG. 1 is a flowchart for explaining claims 1, 2, 5, and 6 and embodiments 1, 2, 4, and 5. FIG.
FIG. 2 is a flowchart for explaining claims 3 and 4 and embodiment 3;
FIG. 3 is a conceptual diagram for explaining Embodiment 1;
4 is a conceptual diagram illustrating Embodiment 2. FIG.
FIG. 5 is a conceptual diagram for explaining a third embodiment.
6 is a conceptual diagram illustrating Embodiment 4. FIG.
7 is a conceptual diagram illustrating Embodiment 5. FIG.
[Explanation of symbols]
C Personal card R Card reader 1 Information processing center such as financial institution 2 Wireless communication means 3 Mobile phone 4 Wired communication means 5 Display installed at the office window 6 Door 7 Door lock controller 8 User side computer 9 Operator Side computer 10 Counterpart computer

Claims (6)

Identification information input means for entering individual identification information such as customer number, user name, resident number, etc.
Storage means for pre-registering personal identification information , personal identification number and mobile phone number;
A communication means connected to a computer for calling a mobile phone of the personal mobile phone number retrieved from the storage means based on the personal identification information input from the identification information input means;
A mobile phone for personal identification number entry ,
Having a computing means for judging whether the personal identification number sent from the mobile phone via the communication means is the same as the personal identification number registered in advance ;
A personal authentication system configured to authenticate the individual as the person himself / herself based on the determination of the computing means. When personal identification information such as customer number, user name, and resident number is input from the identification information input means and transmitted to the computer of the information processing center, the information registered in the storage means of the computer in advance the mobile phone number and PIN of personal, reading and searching from the memory means based on the identification information of the individual calls via the communication means connected to the mobile telephone of the personal computer, personal identification from the mobile phone When the number input operation is performed , the signal is received by the computer of the information processing center, and it is determined by the calculation means whether the password is the same as the password registered in advance , A personal authentication method characterized by authenticating the person himself / herself. Personal identification information such as customer number, user name, resident number, etc., personal cards such as cash cards, credit cards, members cards, administrative IC cards, etc. , where PIN numbers and mobile phone numbers are recorded,
Identification information input means for inputting personal identification information , personal identification number and mobile phone number using the personal card;
Communication means for calling a mobile phone of the mobile phone number read from the identification information input means;
Individuals to possession, a mobile phone for personal identification number input,
Having a computing means for judging whether the personal identification number sent from the mobile phone via the communication means is the same as the personal identification number read from the personal card ;
A personal authentication system configured to authenticate the individual as the person himself / herself based on the determination of the computing means. Using personal cards such as cash cards, credit cards, members cards, administrative IC cards, etc., where personal identification information, personal identification number and mobile phone number are recorded, personal identification information, personal identification number and cellular phone number when but that are sent to the computer is input from the identification information inputting means, a mobile telephone in which the individual owns, calls via the communication means connected to the computer, when the input operation of personal identification number from the mobile phone is made A personal authentication method comprising: receiving the signal, determining whether the personal identification number is the same as the personal identification number read from the personal card by a computer, and authenticating the personal identity. Among a plurality of computers connected to each other via a communication means, the computer on the operator side is a user personal authentication system for confirming the individual user of the user side computer,
The user has user identification information input means on the user side computer, and also has a mobile phone for inputting a personal identification number ,
The operator's computer registers the user's identification information , personal identification number and mobile phone number in the storage means in advance, and based on the individual identification information input from the identification information input means of the user's computer. Communication means for calling a mobile phone having a mobile phone number retrieved from the storage means;
Having a computing means for judging whether the personal identification number sent from the mobile phone via the communication means is the same as the personal identification number registered in advance ;
A personal authentication system characterized in that, based on the determination of the calculation means, the user is authorized. When a user's identification information is inputted and transmitted from a user's computer between a plurality of computers connected to each other via communication means, the user's identification information is received and transmitted to the other computer. Oite to a management's side of the computer, pre-registered mobile phone number and the personal identification number of the user, searching from the storage means on the basis of the identification information of the user, computer and mobile phone of the user When the password is entered via the communication means connected to the mobile phone, the signal is received and whether the password is the same as the password registered in advance. A method for personal authentication of a user, characterized by judging and authenticating the user.

Images