WO2002046941A1

WO2002046941A1 - Portable information apparatus, personal authentication system, and method for erasing authentication data

Info

Publication number: WO2002046941A1
Application number: PCT/JP2001/010649
Authority: WO
Inventors: Akinori Kosaka
Original assignee: Citizen Watch Co., Ltd.
Priority date: 2000-12-08
Filing date: 2001-12-05
Publication date: 2002-06-13
Also published as: JP2002175505A

Abstract

For the storage of sets of authentication data are stored in one portable information apparatus while application fields of a personal authentication system diversify, this invention purposes to solve the problem that convenience decreases by the complexity of a management means, that the storage capacity of an information apparatus runs short, and that the expansion of the risk of authentication information leakage is worried about. This invention comprises a means for storing the condition to erase authentication data as conditional data, a means for arbitrarily erasing authentication data by utilizing the conditional data.

Description

Description Portable information device, personal authentication system and authentication data erasing method

The present invention relates to a portable personal authentication system used for services such as introduction to a research institute, ticket gates, log-in to a computer, credit processing, cashing processing, merchandise sales, use of rental equipment, and the like. This is related to information devices, especially portable information devices for personal authentication, and personal authentication systems that improve the security and efficiency of personal authentication systems, especially for system providers and users of personal authentication systems. It relates to a system and an authentication data erasing method. Background art

The personal authentication system is a security system that confirms that the user is an authorized user when using the service. Introduction to laboratories, ticket gates, login to computers, credit processing

Authenticating users in an information processing system that manages services such as cashing, buying and selling goods, using rental equipment, and downloading information is called "personal authentication." User authentication is an information processing handbook as a security measure for information processing systems.

(1st edition, 1989, IPSJ), refers to external security, internal security, and user authentication, as well as user authentication to confirm that the user is an authorized and authorized user. The most widely used method is that the system management device refers to something that only the user has at the time of getting started, purchasing a product, logging in to the computer, etc., so that the user is the user himself. Certified and service available It is a function.

At present, it is common to use a password or a credit card. However, these personal authentication methods have few means to identify the original user, and are easily used by others, and have security problems. However, because of its convenience, services using the personal authentication system have spread to society, and the security of the personal authentication system is further questioned in electronic commerce using the Internet.

In recent years, personal authentication methods using an IC card having a relatively large storage capacity and replacing passwords and the like with complex data have begun to spread. For example, data including personal biometric information stored in a card and biometric information actually acquired at the site of authentication are processed, and whether or not they match is highly secure. Various personal authentication systems have been proposed.

If the data required for personal authentication is called authentication data, the authentication method using an IC card can be used legitimately because the authentication data containing a large amount of personal information is stored on a single storage medium. Is determined to be a person. It is a relatively simple, safe, and reliable method based on the premise that biometric features that only individuals can possess are used. Also, with the spread of portable information devices such as mobile phones connected to the Internet, a method of storing authentication data in these devices and performing personal authentication on the go is being considered. By using a portable information device that the user carries everyday with multiple personal authentication systems, the convenience for the user is improved, and the user is free from the inconvenience of holding multiple cards and storing multiple passwords. You. The system provider can also improve the efficiency of systems used by multiple users by quickly performing personal authentication of multiple portable information devices by data communication.

However, with the spread of personal authentication systems using portable information devices, At times, the loss of a portable information device may result in the leakage of detailed and large amounts of personal information and information on unchangeable physical characteristics of individuals, which is likely to pose a safety issue. Also, when performing personal authentication with data, it is necessary to frequently update old authentication data with new authentication data to ensure security, and it is also necessary to manage authentication data efficiently.

For IC cards and portable information devices, there has been proposed a method of erasing authentication data and making it unusable to ensure security. Authentication data is data that is used to identify a user who is authorized to use the personal authentication system and a person who is not authorized to use it, or to identify another user and perform personal authentication. Has a means of identification after issuance. For example, internal security controls to prevent duplication and unauthorized use such as encryption, password information, information such as signatures, biological information such as biometrics, information read from storage media, It contains merchandise sales proof information, and possesses these to identify the user himself / herself.

The means for identifying after issuance may be, for example, an electronic key using encryption technology or a part of the electronic key. As a usage method, when a user carries a portable information device in which authentication data is stored in advance to a service receiving site and a device managed by a system provider identifies the authentication data, the user is permitted to use the service. Is done. A system provider is a person or organization that provides services to users using a personal authentication system. Because it is data, it can be stored in a single portable information device, erased conveniently, or updated to a new one. In addition, a system that performs personal authentication simply by referring to authentication data enables quick authentication at sites with many users.

IC force illegal use prevention device (Japanese Patent Application No. 8-274136) It has a receiving unit that receives a wireless signal, and a storage unit that stores data for identifying the owner. When the receiving unit cannot receive a predetermined wireless signal for a predetermined time, the authentication data stored in the storage unit To make them unusable or unusable. This makes it impossible to use the IC card immediately if it is lost or stolen.

In addition, the information device and the input device of the personal authentication system (Japanese Patent Laid-Open No. 11-28 2981) have means for detecting the state of wearing of the human body in the portable information device. Disable the authentication data stored in the portable information device. Although these are considered to be safe, the authentication data is simply erased by the configuration provided on the IC card and the portable information device, and the user or the system provider can use the specific authentication data. It is difficult to improve convenience such as arbitrarily deleting. Furthermore, the document does not describe improving the security of multiple stored authentication data individually, so that the authentication data can be efficiently managed, the storage capacity of the portable information device can be effectively used, and the personal authentication system can be used. It is difficult to respond to the diversification of fields.

As a conventional problem, as described above, when the field of use of the personal authentication system is diversified, new problems may arise in efficiency and security. In particular, storage of multiple authentication data in a single portable information device owned by an individual and reduced convenience due to the complexity of the data management method used for authentication for use at multiple service sites, Unnecessary authentication data remains after use, resulting in a shortage of storage capacity of the portable information device and an increase in the risk of leakage of authentication information, which raises issues with system efficiency and security. Disclosure of the invention

An object of the present invention has been made in view of the above problems, It is an object of the present invention to provide a portable information device in which service providers and users individually increase the efficiency and security of an authentication system.

It is another object of the present invention to provide a portable information device, a personal authentication system, and an authentication data erasing method having a novel function and improving security and efficiency.

According to the present invention, in a portable information device used for personal authentication, authentication data input means for externally inputting authentication data, authentication data storage means for storing authentication data, and conditions for erasing authentication data. Condition data input means for inputting condition data externally or internally, condition data storage means for storing condition data, control data input means for inputting control data externally or internally, control data and conditions The apparatus includes a processing determining unit that determines by processing the data and an authentication data erasing unit that erases the authentication data, and erases the authentication data based on a determination result of the processing determining unit.

By providing such a configuration in the portable information device, the system provider and the user can arbitrarily set the conditions for erasing the authentication data and input them in advance, so that when the conditions are satisfied By deleting specific authentication data from multiple authentication data stored in the, additional controllability is added to each authentication data and individual management is possible, preventing inadvertent leakage and improving safety Secure. Furthermore, efficiency can be ensured by improving the convenience by eliminating the trouble of securing the storage capacity of the portable information device and managing the authentication data. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a configuration diagram of an example of a portable information device of the present invention and a personal authentication system including the same.

Fig. 2 explains the correspondence between authentication data and condition data in the present invention. FIG.

FIG. 3 is a configuration diagram of another example of the portable information device of the present invention and a personal authentication system including the same.

FIG. 4 is a configuration diagram of still another example of the portable information device of the present invention and a personal authentication system including the same.

FIG. 5 is an explanatory diagram showing the relationship between the control data type and the configuration required for the control data input means of the present invention.

FIG. 6 is a configuration diagram of still another example of the portable information device of the present invention and a personal authentication system including the same.

FIG. 7 is a configuration diagram of still another example of the portable information device of the present invention and a personal authentication system including the portable information device.

FIG. 8 is a flowchart showing a method of erasing authentication data in the portable information device of the present invention.

FIG. 9 to FIG. 13 are explanatory diagrams of a fourth embodiment according to the present invention. FIG. 14 is a supplementary explanatory diagram of the second embodiment according to the present invention.

FIG. 15 is a supplementary explanatory diagram of the third embodiment according to the present invention. BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, various embodiments of the present invention will be described with reference to the drawings.

(Embodiment 1)

FIG. 1 is a configuration diagram of an example of a portable information device of the present invention and a personal authentication system including the same. When the user carries the portable information device in which the authentication data is stored in advance to the service receiving site and the device managed by the system provider identifies the authentication data, the user is permitted to use the service. When the fields of use of such personal authentication systems are diversified, sharing personal information with one portable information device may create new problems in the efficiency and security of the personal authentication system. You. In other words, when a plurality of authentication data are stored and used in one portable information device, the efficiency of the user is considered to decrease due to the storage capacity of the portable information device and the troublesome management of the authentication data. In addition, there is a problem in safety that authentication data including personal information is frequently leaked due to theft of portable information devices.

According to the present invention, the conditions for deleting the authentication data are arbitrarily set by the system provider or the user and are input in advance to the portable information device, so that the conditions are stored in the portable information device when the conditions are satisfied. Specific authentication data is erased from multiple authentication data to be added, controllability is added to each authentication data, and individual management becomes possible. As a result, it is possible to prevent undesired information leakage caused by storing the authentication data used after the theft in the portable information device. In addition, depending on the purpose, authentication data can be greatly complicated to increase security, or multiple authentication data can be used but automatically deleted after use, thereby increasing the storage capacity of portable information devices. Efficiency is ensured, and users do not have to worry about management when using multiple authentication data, and it is possible to always update and use new authentication data. In this way, users and system administrators can respond to the diversification of fields of use of personal authentication systems, such as using one portable information device with multiple personal authentication systems or performing personal authentication using only data communication. It provides a portable information device with high security and efficiency, a personal authentication system, and a method for deleting authentication data.

In FIG. 1, the portable information device 1, a personal authentication device 102, a user 101, and information transmission paths 103 and 104 between the portable information device 1 and the personal authentication device 102 are provided. Further, the personal authentication device 102 has a user identification unit 105, an information processing unit 106, and an authentication data reference unit 107. The user identification unit 105 communicates with the portable information device 1 via the information transmission path 104. , Use The user reference unit 113 communicates with the portable information device 1 via the information transmission path 103. With this configuration of the personal identification device 102, the user identification unit 105 and the information processing unit 106 are installed inside the door of the home, and only the authentication data reference unit 107 is installed outside the door, and the personal identification device 102 is installed. Respond to diversification of the system, such as ensuring the security of the authentication system. Alternatively, a plurality of user identification units 105, information processing units 106, and authentication data reference units 107 may be installed separately, and each may be connected by an information transmission path and used as one device. The portable information device 1 is lightweight and power saving so that it can be carried by an individual. Mainly mobile phones, PHS, portable computers, wristwatches, wristwatch-type information devices, portable information terminals, portable game machines, portable devices that function by inserting an IC card, and these devices Since the portable information device 1 stores the authentication data, the personal information is authenticated at the service receiving site, and the user 101 is permitted to receive the service. Reference numeral 2 denotes authentication data storage means for storing authentication data. There are various types of storage devices such as semiconductor devices, magnetic drives, optical disks, etc., but the emphasis is on securely storing authentication data, and the air-tightness of the personal authentication system is taken into account. It should be selected according to the weight, lightness, durability and cost. A storage medium such as an easy-to-distribute IC card may be inserted into the portable information device 1 like a cassette card to form a storage medium. The storage device stores data using electricity, magnetism, light, etc. Reference numeral 3 denotes authentication data input means, which is input from outside the portable information device 1.

In FIG. 1, the information is input from the user identification unit 105 to the portable information device 1 via the information transmission path 10. In order for the user 101 to correspond to the portable information device 1 with the authentication data, it is necessary to input the information to the specific portable information device 1 specified by the specified user 101. The identification method of the portable information device 1 is based on the portable information based on the unique identification number referred to when the user 101 was identified. The method for specifying the device 1 and the method for inputting to the portable information device 1 communicating with the user specifying unit 109 and the information transmission path 104 when specifying the user 101, and the user specifying unit 109 for specifying the user 101 For example, there is a method of inputting to a specific portable information device 1 that has been connected to and has not been confirmed to be disconnected.

The condition data storage means 4 stores condition data in the portable information device 1 for use in erasing specific authentication data. The authentication data is stored in the same manner as the authentication data, and the storage device may be the same, but can be freely read out by processing the condition data. The condition data is data that can be processed, and includes at least a condition for deleting the corresponding specific authentication data. When the condition is satisfied, the specific authentication data in the portable information device 1 is deleted. In order to erase the authentication data in the portable information device 1, in addition to the conditions, an authentication data processing procedure for erasing specific authentication data and a condition data processing procedure for processing and judging whether or not the conditions are satisfied are described. The included program may be included in the condition data. In addition, the condition data may be added with specific control data that is arbitrarily input to delete the authentication data and a control data processing procedure for processing.The condition data may be deleted at the same time as the authentication data. The erasing procedure may be included in the condition data processing procedure.

It is necessary to set the contents of the program such as the conditions and procedures included in the condition data according to the type of control data input by the control data input means 8 of the portable information device 1. For example, before and after the authentication data is input and stored, the control information processing means 8 of the portable information device 1 or the personal authentication device 102 is checked, and the control data processing procedure is automatically performed to process specific control data. The user 101 sets the conditions appropriate for the control data, and adds them. In addition, authentication data that cannot be erased freely may be erased by using the authentication data processing procedure. 5 is a condition data input means, a portable information device. 1 Input from outside. The condition data may be input inside the portable information device 1.

In FIG. 1, the authentication data is input from the external user identification unit 105 via the information transmission path 104 at the same time as or before or after the authentication data. Reference numeral 6 denotes an authentication data erasing unit, which erases the authentication data stored in the authentication data storage unit 2 after the processing determining unit 7 determines that the authentication data is to be erased. There is an erasing mechanism in the portable information device 1 for all devices that can be erased by a single storage device such as a semiconductor element or a magnetic drive. When erasing is performed using an external electromagnetic field or an external electromagnetic wave, erasing is performed only on the outside of the portable information device 1, or on a combination of the outside and inside configurations. For example, an authentication method such as a magnetic card that erases authentication data by holding the portable information device 1 over the electromagnetic field generated by the personal authentication device 102, or authentication by irradiating the portable information device 1 with ultraviolet rays An erasing method for erasing data may be used.

Here, the erasure is to erase the information or to overwrite it with other information so that the authentication data cannot be read from the portable information device 1 using any means. In the embodiment, the erasure is performed by the erasure. Therefore, personal authentication becomes impossible, that is, not only the user 101 but also a criminal who steals the portable information device 1 is not permitted to use the service. Further, by automatically deleting the condition data after satisfying the condition data, the storage capacity of the portable information device 1 can be efficiently secured, and the user 101 can save the trouble of deleting after using the service.

The processing determining means 7 determines by processing condition data and control data. Processing is a series of operations performed on data to obtain necessary information. For example, reading data, creating data, erasing data, correcting data, identifying data with other data, comparing or comparing data with other data, Collation or ratio Before the comparison, the data change amount, error amount, constant value, average value is calculated, and the result of the comparison or comparison is obtained as to whether or not they match. The necessary information in the processing determination means 7 is information on whether or not to erase the authentication data. In this embodiment, in particular, the input control data and the previously stored condition data are processed, and whether or not the authentication data is to be deleted is mainly determined by the control data satisfying or not satisfying the condition. Is determined.

In the control data input means 8, the control data is data for triggering deletion of the authentication data, and a repair procedure may be included in the condition data as a control data processing procedure or the like. In the present embodiment, in particular, specific authentication data is deleted by inputting data satisfying the condition of the condition data as control data into the portable information device 1 and processing the condition data. It may be input only when necessary, may be input continuously, or may be input intermittently, and may be selected according to the type of authentication data and the configuration of the portable information device 1. For example, control data received by electromagnetic waves may be input only when received, and control data based on biological information is based on the amount of change in control data that is data obtained by periodically sampling biological information of the user 101. Intermittent input is needed to know if it is met. In FIG. 1, the input is made inside the portable information device 1. There are several types of control data as shown in FIG.

In the personal authentication device 102, the authentication data is input to the specific portable information device 1 of the identified user 101, and later, at the service site, by referring to and identifying the authentication data stored in the portable information device 1, It is a device for personal authentication. At this time, user identification means 108 for identifying user 101, authentication data issuing means 110 for issuing authentication data that can be identified later, authentication data input means 3, and authentication stored in portable information device 1. Authentication data reference means 112 for referring to data, and valid authentication data Authentication data identifying means 111 for identifying whether the service is used, and service use permitting means 113 for permitting use of the service. With the personal authentication device 102 having these means, the user 101 and the other users or those who are not permitted to use are identified at the service site using the portable information device 1. The user specifying unit 105 has at least a user specifying unit 108 and an authentication data input unit 3. The user specifying unit 105 further includes a condition data input unit 5 and a condition data setting unit 109. However, the user can prepare to automatically erase the authentication data in advance by selecting conditions while looking at the screen on the spot, improving convenience. The user identification means 108 identifies that the user 101 who uses the authentication data is a valid user authorized by the system provider, and confirms, for example, that collection is possible. By starting to identify the user, the user 101 is associated with the authentication data to be used later, and the use of the personal authentication system is started.

The method of identifying the user 101 is to know the password, or to identify the user by using the identification number or password of the portable information device 1 owned by the user, or to identify the user. , Computers and

The user identification unit 105 is installed on a large terminal such as a convenience store, measures biological information such as biometrics, and compares it with past measurement data. A convenient method, such as using a method, identification by a storage medium such as a credit card or IC card, or simply identifying a person who has purchased a product or a usage right, all of which require the necessary efficiency and reliability You can select it with.

The condition data setting means 109 automatically executes the authentication data processing procedure, the condition data processing procedure, the control data processing procedure, and the like in addition to the conditions that need to be set at least, or User 101 する Set by the system provider. For example, the control data processing procedure is automatically set according to the type of the control data input means 8 of the portable information device 1. The conditions are set by the user 101 selecting from a plurality of conditions preset by the system provider from the panel on the user specifying unit 105. The information processing unit 106 uses at least the authentication data identification unit 111. Personal information such as usage status may be stored in a database and managed by a computer. At this time, the authentication data issued by the authentication data issuing means 110 and the authentication data identification data may be centrally managed in the database. The authentication data issuing means 110 issues authentication data that can be identified later while the identification of the user 101 and the identification of the portable information device 1 are certain. The identification method of the authentication data by the authentication data identification means 111 is such that a part necessary for personal authentication such as an electronic key by the authentication data issuing means 110 is input to the portable information device 1 as authentication data, Authentication data identification data, which is a part, may be issued at the same time, and the authentication data referred to by the portable information device 1 may be used by the authentication data identification means 111 when performing personal authentication. As another method, the authentication data issuing means 110 issues information for identifying the user 101 and the identification number of the portable information device 1 with the authentication data included. There is a method of identifying the portable information device 1 and using it in the authentication data identification means 111, and a method of issuing authentication data more suitable for the system configuration and the like may be used.

The authentication data reference unit 107 has at least an authentication data reference unit 112, and may additionally have a service use permission unit 113. The authentication data reference unit 112 refers to the authentication data stored in the portable information device 1 using the information transmission path 103. Referencing is a series of operations performed to obtain information that identifies the authentication data stored in the authentication data storage means 2.It establishes a data transmission / reception means for the authentication data storage means 2, detects data, and stores data. Check for presence, read data, compare or Is a series of matching operations. The authentication data is data of a special pattern such as a bar code, the park code is projected on the display screen of the portable information device 1, and the camera of the authentication data reference section 107 reads the pattern of the park code, and An information transmission path that converts data after image processing may be used, and any information transmission path that can send information reliably is acceptable. The information transmission path 103 and the information transmission path 104 may use the same communication method. The portable information device 1 has a wireless cellular phone connection means and an Internet connection means and communicates using the same, a short-range wireless communication, a communication using electromagnetic waves such as infrared rays, and a wired connection. However, the leakage of the authentication data may be suppressed as much as possible by communicating by contacting the devices. The service use permission unit 113 permits the use of the service when the referred authentication data is identified as valid authentication data issued when the user 101 is specified. For example, if you ’re using a ticket gate or an entrance,

If the product is delivered, the service will be indicated by displaying the identity of the person or by logging in to the computer. In this way, opening and closing the door, opening and closing the door, ticketing the vehicle, starting operation of the computer, inputting a personal signature by the computer, sending a contract by the computer, displaying proof of identity, and purchasing goods It depends on the field of use, such as settlement, depositing cash, paying cash, refunding cash, and starting operation of equipment.

FIG. 2 is an explanatory diagram of a correspondence relationship between authentication data and condition data stored in the portable information device 1. Since the portable information device 1 stores a plurality of authentication data, the user 101 uses a plurality of personal authentication systems. Authentication data A is used for personal authentication in personal authentication system A, authentication data B is used in personal authentication system B, and authentication data C is used for personal authentication in personal authentication system C. When the authentication data A and the authentication data D (205) are aligned, it is also possible to use the personal authentication system D for personal authentication. Personal authentication system Each of the systems A to D has its own personal authentication device, and may be managed by different system providers. Although the size of the authentication data is different in the figure, it shows the size of the authentication data. Data with sufficient internal security will generally be large, but not all personal authentication systems will require the use of large authentication data, and the system provider may choose to use it as needed. The size varies depending on conditions and procedures including condition data.

The condition data A (201) is stored for the purpose of deleting the authentication data A. When the condition of the condition data A is satisfied, only the authentication data A is deleted from the portable information device 1. The authentication data B is deleted when the condition of the condition data B (202) is satisfied, but is deleted even when the condition of the condition data C (203) is satisfied. When the condition of the condition data C is satisfied, the authentication data B and the authentication data C are deleted. The authentication data C is downloaded just before receiving the service using the authentication data B, the authentication data C is stored as the latest authentication data in the portable information device 1, and the authentication data C is used on site. When receiving authentication data C, authentication data C is received and the condition of condition data B is satisfied and authentication data B is erased, or the condition of condition data C is satisfied and authentication data B and authentication data C are erased at the same time. Is also good. The authentication data D has no corresponding condition data because the user 101 sets the condition data on the portable information device 1 after the authentication data is input. Also, condition data may not be set for insignificant authentication data as in the past. The condition data D (204) is the condition data that has already been entered at the time of shipment of the portable information device 1, and the user 101 is set to erase specific authentication data stored on the portable information device 1. I do. The operability is improved by preparing the condition data in advance in accordance with the type of the control data input means 8 provided in the portable information device 1. FIG. 3 is a configuration diagram of another example of the portable information device of the present invention and a personal authentication system including the same, and is a configuration diagram of a personal authentication system provided by a system provider different from the personal authentication system of FIG. is there. The portable information device 1 used by the user 101 is the same. In this personal authentication system, a personal authentication device 301 different from the personal authentication device 102 is used, but the means to be used are the same as those of the personal authentication device 102. The difference is that the user identification unit 304, the information processing unit 305, and the authentication data reference unit 306 are separated and installed at different locations. Each may have a different owner, but acts as a single device for personal authentication. The user identification unit 304, the information processing unit 305, and the authentication data reference unit 306 are connected by information transmission paths 302, 303, respectively. For example, diversifying the system by placing the user identification unit 304 in a private home, placing the authentication data reference unit 306 in a retail store at the service site, and placing the information processing unit 305 in the system provider company It becomes easy to respond to. A plurality of user identification units 304 and authentication data reference units 306 may be present, and at least one information processing unit 305 performs unified management. The user identification unit 304 includes at least the user identification unit 311 and the authentication data input unit 309, the information processing unit 305 includes at least the authentication data identification unit 312, and the authentication data reference unit 306 includes at least the authentication data reference unit 313. Have.

In FIG. 3, the user specifying unit 304 further has condition input means 310, and the authentication data reference unit 306 further has control data input means 314. The same means as the condition data setting means 109, the authentication data issuing means 110, and the service use permission means 113 of the personal authentication apparatus 102 shown in FIG. The selection may be made according to the operation method of the road system. However, the personal authentication device 306 must be a device that is sufficiently managed by the system provider or a device that has been certified at the desired level. For example, set up in a private home If the user identification unit 306 is not reliable for the system provider, the reliability of the authentication data is also lost.

FIG. 4 is a block diagram showing still another example of a portable information device of the present invention and a personal authentication system including the same, and is a detailed block diagram of the portable information device. In FIG. 4, the identification information stored in the identification number storage means 407 of the portable information device 1 is used to identify the identified portable information device 1 of the user 101 from the plurality of portable information devices, and the authentication data is obtained. input. The identification number is a number by which the portable information device 1 can be identified, and if the portable information device 1 has a wired telephone connection means or a wireless telephone connection means, a telephone number or the like, If you have an Internet connection means, it is an address number or equivalent. By using a reliable identification number for the system provider, it is possible to collect money efficiently.

In the condition data input means 402, as another method of inputting from the personal authentication device 102 external to the portable information device 1 as in the condition data input means 5, condition data is input inside the portable information device 1. This is how you enter it. At the same time, the portable information device 1 has condition data setting means 406, specifies authentication data to be deleted from a plurality of stored authentication data, and automatically or under what conditions the deletion is performed. Set by user 101. In addition to the conditions, a program including an authentication data processing procedure, a condition data processing procedure, a control data processing procedure, and a condition data erasing procedure are added. In particular, it is necessary to set condition data according to the control data input means 8 provided in the portable information device 1. There is also a method in which some conditions, condition data processing procedures and control data processing procedures are set when the portable information device 1 is shipped, authentication data is stored, and then the authentication data processing procedure is set and input as condition data. .

In addition, the portable information device 1 notifies the user 101 of the following: There may be means. Authentication data erasure condition notification means 403 for notifying under what conditions the stored authentication data is to be erased, and personal authentication service notification means for notifying which personal authentication system the stored authentication data can be used for personal authentication. 404 and authentication data erasure notice means 405 for giving notice of erasure of authentication data. By providing these means in the portable information device 1, the convenience of the user 101 in the personal authentication system using the portable information device is improved.

FIG. 5 is an explanatory diagram showing the relationship between the control data type and the configuration required for the control data input means of the present invention. The control data input means 8 inputs control data from the described configuration. The input means includes a control data input means 8 in the portable information device 1 as shown in FIG. 1, and a control data input means 704 from outside the portable information device 1 as shown in FIG. The types of control data include control data obtained from externally received electromagnetic waves, control data input from an input unit, control data obtained from time information, control data obtained from biological information, and signal information. There is control data available. Each is described below.

Control data obtained from externally received electromagnetic waves is input using electromagnetic waves using a wireless telephone network or short-range communication method. The information is input from the outside of the portable information device 1 or from the communication unit provided in the portable information device 1. For example, the system provider can arbitrarily delete the authentication data in the communicable area. If the authentication data A is deleted by receiving the control data A, the system provider inputs the control data A and the condition data A corresponding to the authentication data A to be processed from the personal authentication device 102 in advance. The control data input from the input unit is input by the user 101 or a system provider from input buttons and an input interface provided in the portable information device 1, and is used for arbitrary deletion. The control data obtained from time information is portable information equipment. Input from the time information generator provided in unit 1 and optionally delete by date and time. The control data obtained from the biological information is erased by detecting that the user 101 has died or is ill due to an input from the biological information sampling unit provided in the portable information device 1.

The control data obtained from the position information is deleted when the position data exceeds a certain position due to the vast position information input from the position information acquisition unit provided in the portable information device 1. The control data obtained by the signal information is input from a sensor unit provided in the portable information device 1, and is deleted when another person comes into contact with the information device, attaches / detaches the information device, and detects poor physical condition. For example, a temperature sensor, a pressure sensor, a humidity sensor, a barometric pressure sensor, a photo sensor, a pressure sensor, an image sensor, a biosensor, a magnetic sensor, Distance sensors, etc., for measuring the body temperature, biological pulse, pulse, body fluid components, blood flow, etc. of the user 101, and various sensors for measuring the current and voltage values generated by the body temperature, etc. is there. The portable information device 1 has a means for directly measuring the situation, and the user 101 or the portable information device 1 at the authentication site can be set by arbitrarily setting conditions for deleting the authentication data based on the condition data. Improve security by preventing leakage of authentication data according to the situation.

In the embodiment, the portable information device 1 has a time information generating unit as the authentication data input unit 8, and has a control data input unit 8 for inputting control data based on time information, and further has a communication unit. Then, the control data is input from the personal authentication device 102 to the portable information device 1 by the control data input means 704.

FIG. 6 is a configuration diagram of still another example of the portable information device of the present invention and a personal authentication system including the same, and shows a configuration diagram of an authentication data erasing method. It is a configuration that changes the condition data and finally deletes the authentication data . The portable information device 1 only needs to have the condition data changing means 601. For example, the condition data is changed by inputting the control data by the input unit as the control data input means 8. In addition, the condition data includes information on the service use limit number, the control data is input by the control data input means & for each service use, and the service use is performed by the condition data changing means 601 of the processing determination means 7. When the limit number is subtracted and the result becomes “0”, it is judged that the condition is satisfied, and specific authentication data is erased by the authentication data erasing means 6. And it can be used like a free card.

FIG. 7 is a configuration diagram of still another example of the portable information device of the present invention and a personal authentication system including the same, and shows a configuration diagram of the authentication data erasing method of the first embodiment. When the control data is input from the communication unit 702, the authentication data erasure system configuration is the same as that shown in FIG. Figure 7 shows the result. In the embodiment, the authentication data erasing method using FIG. 1 and the authentication data erasing method using FIG. 7 are used. It comprises a portable information device 1, an individual authentication device 102, an information transmission line 103, and an information transmission line 104 using a wireless telephone communication network 701. Reference numeral 703 denotes a communication unit of the personal authentication device 102, and reference numeral 702 denotes a communication unit of the information device, which may have a wireless telephone connection means and an Internet connection means. In the embodiment, the communication unit is used for communication over a wireless telephone network. When a certain condition similar to the portable information device 1 is satisfied inside the personal authentication device 102, a system for inputting control data to the portable information device is configured, and the control data is controlled by the personal authentication device 102. The data is input by the data input unit 704.

At this time, the portable information device 1 of the user 101 is specified from a large number of portable information devices by the identification number that was clarified when the user was specified. In the portable information device 1, the received electromagnetic wave is transmitted from the personal authentication device 102. If it is determined that the received control data is arbitrary control data, the condition of the condition data is satisfied and the authentication data is deleted. It is necessary to set and add in advance control data processing procedures for processing any control data to be transmitted to the condition data. The information transmission path 103 is used by the authentication data reference means 112, and does not use electromagnetic waves, but uses another secure communication method with a low risk of leakage such as contact.

FIG. 8 is a flowchart showing the authentication data erasing method in the portable information device of the present invention. Embodiment 1 will be described below with reference to FIGS. 1 to 7 described above.

For example, the configuration in Fig. 1 is a personal authentication system used at the event site. However, in the personal authentication device 102, as in the personal authentication device 301 in FIG. 3, the user identification unit 105, the information processing unit 106, and the authentication data reference unit 107 are installed separately and communicate via an information transmission path connecting them during operation. And managed and owned by the system provider. On the screen of the portable information device 1 owned by the user 101, the user purchases the entry right with the expiration date of the event by communicating with the user identification unit 105, and stores the authentication data B in the portable information device 1. In addition, at the event site, authentication data B is presented by communication with the authentication data reference section 107, and personal authentication is performed to begin.

Further, the authentication data B stored in the portable information device 1 is automatically erased when the expiration date has passed or when specific control data has been received. Fig. 8 includes a personal authentication preparation stage, an individual authentication stage, and an authentication data deletion stage. Input of condition data 801 from condition identification 801 in Fig. 8 is in preparation for personal authentication 806, authentication data B can be referred to Service start from 807 810 is in personal authentication execution stage, service usage right expires from control data input 811 814 is the authentication data erasing stage.

In the personal authentication preparation stage, the user 101 uses the portable information device 1 storing the authentication data B at the entrance site of the event venue to receive the service. This is the preparation stage for personal authentication. The user 101 identified by the authentication data B is associated with the portable information device 1, and authentication data that can be identified at the time of personal authentication is issued. In addition, condition data is entered to arbitrarily delete authentication data B.

The user identification 801 identifies the user 101 and, at the same time, checks whether the personal authentication system can be used. In the embodiment, the user 101 operates the portable information device 1 having the wireless telephone connection means and the Internet connection means, and the system provider inputs a unique identification number of the portable information device 1 such as a telephone number and an address number. Assuming that the user 101 has a means of collecting fees from the user 101, the user 101 purchases the right to use the event venue from the system provider by providing the identification number. At the time of purchase, this is a simple user identification means 108 for making the user 101 operating the portable information device 1 a valid purchaser.

The issuance of authentication data 802 simultaneously issues authentication data B and authentication data identification data, and the authentication data identification data is stored in the personal authentication device 102. The authentication data input 804 inputs the authentication data B issued to the portable information device 1 specified by the unique identification number referred to in the user specification 801. The service use right occurrence 805 indicates that if the user 101 has the portable information device 1 that stores the authentication data B, personal authentication is performed.

The condition data setting 803 sets conditions and procedures for the condition data. In the embodiment, two types of condition data B and C are input to the portable information device 1. User 101 selects the entry deadline until 19:00 on September 8 from the selection frame set by the system provider, and sets the condition data B to delete the authentication data B when the time expires at 19:00 on September 8 I do. As for the condition of the condition data B, the control data B indicating 19:00 on September 8 is input, and the added procedure is recognized by the authentication data erasing means 6 according to the result of the processing determining means 7. Authentication data processing procedure for erasing authentication data B, condition data processing procedure for processing condition data B by processing determination means 7 and processing it as control data, and time information input from time information generator The control data processing procedure for processing the control data B by the processing determination means 7 and the procedure for erasing the condition data B after erasing the authentication data B are included in the condition data processing procedure.

In this embodiment, the condition is selected by the user 101, but the procedure is as follows. The personal authentication is performed by checking the configuration, processing determining means, and authentication data erasing means necessary for the authentication data input means of FIG. 5 provided in the portable information device 1. Device 102 sets automatically. Further, using the system in FIG. 7, the control data C is transmitted from the personal authentication device 102 through the information transmission path of the wireless telephone communication network 701, and the condition data C is set to delete the authentication data. .

The condition of condition data C is that any control data C determined by the system provider is input, and the authentication data processing procedure and condition data erasing procedure are the same as condition data B, but the condition data processing procedure and control data processing The procedure is different because the type of control data and the configuration required for the control data input means differ as shown in Fig. 5. Condition data B and condition data C are input to the portable information device 1 by the condition data input means 5 and stored in the condition data storage means 4. The user 101 may confirm the stored authentication data B by the personal authentication possible service notifying means 404, and may set arbitrary condition data D by the condition data setting means 406 of FIG. Although authentication data B is not supported in Fig. 4, authentication data processing procedure for erasing authentication data B is added to correspond.

The personal authentication execution stage is a stage in which the user 101 is personally authenticated using the authentication data at the event entry site to receive the service. When the portable information device 1 is brought into contact with the authentication data reference section 107, the authentication data is referred to by the authentication data reference means 112 807, and the authentication data identification means 111 is referred to. Then, the authentication data issuance 802 is processed by the authentication data identification data and the authentication data B issued by the authentication data issuance 802, and the authentication data is identified 808 to perform the personal authentication 809 of the user. After the personal authentication, the user 101 is opened by the service permission means 113 and is allowed to enter, and the service is started 810.

In the authentication data erasing step, after receiving the service, the user 101 and the system provider delete the authentication data B that is no longer needed. In some cases, they are deleted without receiving service. In control data input 811, control data is input by control data input means 8 or control data input means 704. The condition data and the authentication data are processed by the processing determining means 7 to determine 812 whether or not the condition of the condition data is satisfied. When the condition is satisfied, the authentication data is erased 813. The authentication data erasing method will be described separately for condition data B and condition data C. The configuration shown in Fig. 1 is used to erase authentication data B using condition data B. The control data B is input to the portable information device 1 from the time information generating unit, and the control data B is processed according to the authentication data processing procedure in the processing determination means 7, and the condition data B is processed according to the condition data processing procedure. Is being processed.

If it is determined that the condition of the condition data B is included by including data indicating an arbitrary time in the control data B, the authentication data B is erased by the authentication data erasing means 6 according to the authentication data processing procedure. The configuration shown in Fig. 7 is used to delete authentication data B using condition data C. The control data C is input from the personal authentication device 102 to the portable information device 1 using the information transmission path 104 at any time of the system provider. The control data C is processed by the processing determination means 7 according to the authentication data processing procedure, and the condition data B is processed according to the condition data processing procedure. A judgment is made that the control data B contains arbitrary data and satisfies the condition of the condition data C. In accordance with the authentication data processing procedure, the authentication data erasing means 6 erases the authentication data B. When the authentication data B is deleted, personal authentication becomes impossible and the service usage right expires. Further, the authentication data B may be automatically erased according to the number of uses by using the configuration of FIG. The authentication data B is automatically erased from the portable information device 1 by expiration of the expiration date set by the system provider or the user 101, or by receiving arbitrary control data through the wireless telephone network, thereby causing theft. Unnecessary leakage of authentication data can be prevented beforehand, management can be reduced, and the storage capacity of the information device can be used effectively.

(Embodiment 2)

Next, a second embodiment will be described below. The present embodiment is composed of a personal authentication system of a home security system used for unlocking a front door of a home, and an individual authentication system of an in-house security system used for opening a front door of a company.

The second embodiment will be described below with reference to FIGS. The two authentication data are used independently in each personal authentication system. The authentication data A used in the company security system is automatically deleted at the company exit after use in the company to secure the storage capacity, and the user is not bothered by the management of the authentication data. The authentication data B used in the home security system is erased by detecting the explosion of the portable information device 1 or by inputting an incorrect password, thereby preventing leakage of the authentication data due to theft and unauthorized use.

The personal authentication system of the company security system uses the system configuration shown in Figure 3. The personal authentication device 301 is separately installed in a user identification unit 304, an information processing unit 305, and an authentication data reference unit 306, and uses the authentication data A. The personal authentication system of the home security system uses the authentication data B using the system configuration shown in Fig. 1. You. The difference from the first embodiment is that the personal authentication device 102 and the personal authentication device 301 are different devices, and two independent personal authentication systems use one portable information device 1 owned by the user 101. This is the point of personal authentication.

The system configuration of the personal authentication system of the company security system will be described with reference to FIG. It comprises a portable information device 1 carried by the user and a personal authentication device 301 installed in the company. The personal authentication device 301 includes a user identification unit 304 installed in front of the gate, a plurality of authentication data reference units 306 installed at each door inside the company, and an information processing unit 303 for identifying issued authentication data. Be composed. The user identification unit 304 and the information processing unit 305, and the authentication data reference unit 306 and the information processing unit 305 are connected by wired information transmission paths 302 and 303, respectively. The portable information device 1 and the user identification unit 304, and the portable information device 1 and the user reference unit 306 both have information transmission paths 307 and 308 that employ the same communication method by contact. The user specifying unit 304 includes at least a user specifying unit 304 and an authentication data input unit 309, and further includes a condition data input unit 310. The information processing unit 305 has at least authentication data identification means 312, and simultaneously issues authentication data A, and centrally manages and stores the authentication data identification data together with personal information of the user using a database or the like. May be. Authentication data reference section 306 has at least authentication data reference means 313, and the door is opened when authentication data A is identified by authentication data identification means 312. Further, of the plurality of authentication data reference units 306, only the authentication data reference unit 306 installed at the door of the company exit has the control data input means 314.

Next, a usage method will be described. The user 101 brings the portable information device 1 into contact with the user identification section 304 installed in front of the company, and is further identified by the user identification means 311 by using a fingerprint or other biometrics. . If it matches the biometric information of the employee measured in the past stored in the information processing unit 305, the authentication data A that can be identified later is sent to the portable information device 1 in contact with the user identification unit 304 by the authentication data input unit 309. input . The portable information device 1 stores the authentication data A in the authentication data storage means 4. At the same time, provided that control data A is input through communication with the user reference section 306, an authentication data processing procedure for deleting the authentication data A using the processing determination means 7 and the authentication data erasing means 6 And a control data processing procedure for processing the control data A and a condition data processing procedure for processing the condition data A and the control data A are automatically set as the condition data A, and the condition data input means 310 is used. Input to portable information device 1.

The portable information device 1 stores the condition data A in the condition data storage means 4. The user 101 is personally authenticated by contacting the portable information device 1 with the authentication data reference unit 306 in the company, and passes by opening the door. At the time of leaving the company, when the user touches the authentication data reference unit 306 installed at the exit gate, the control data A is input by the control data input unit 314. The control data A is processed by the condition data A and the processing judging means 7, and when the condition for inputting the control data A of the condition data A is satisfied, the authentication data erasing means 6 causes the portable information device 1 to receive the control data A. Delete the stored authentication data A. Before or after this, the exit door opens, and the user 101 goes to his home with the portable information device 1 from which the authentication data A has been deleted. The authentication data A for the company is changed and updated every day, so that security can be improved.

The configuration of the personal authentication system of the home security system will be described with reference to Fig. 1. It comprises a portable information device 1 carried by a user, a personal authentication device 102 installed at home, and information transmission lines 103 and 104 employing the same communication method by contact. The personal authentication device 102 is installed at the door of the house. Place. The user identification unit 103 in the personal authentication device 102 has user identification means 108, authentication data input means 3, condition data setting means 109, and condition data input means 5. The information processing unit 106 includes an authentication data issuing unit 110 and an authentication data identification unit 111.

The user identification unit 105 and the information processing unit 106 are located inside the house and cannot be operated from outside the house. The condition data setting means 109, the condition data input means 5, and the authentication data issuing means 110 may be located in either the user specifying unit 105 or the information processing unit 106. The authentication data reference unit 107 has authentication data reference means 112 and service use permission means 113. The authentication data reference ^ 107 is arranged outside the door, and opens the door by referring to and identifying the authentication data in the portable information device 1 outside the house. How to use will be described. Before going out, the user 101 contacts the portable information device 1 with the user identification section 105. When the personal authentication device 102 matches the stored identification number, the personal authentication device 102 inputs the authentication data; B to the portable information device 1. At the same time, the control data input means 8 of the portable information device 1 is checked, and the condition data B, which is a condition for detecting crushing and impact, is automatically set by the condition data setting means 109, and the condition data input means 5 input.

The condition data B includes a control data processing procedure for processing a signal of the shock sensor 1 of the portable information device 1 as control data, a condition data processing procedure, and a program including an authentication data processing procedure. Further, the user 101 sets condition data C on condition that data other than the password is input to the portable information device 1 by the condition data setting means 406, and inputs the condition data C by the condition data input means 402. .

The condition data C includes a control data processing procedure for processing an input from the input unit of the portable information device 1 as control data, a condition data processing procedure, and a program including an authentication data processing procedure. . Condition data B and condition data C are stored in condition data storage means 4. As shown in FIG. 2, the authentication data B is deleted when the condition data B or the condition data C is satisfied. In the company, the authentication data A and the condition data A are also stored, and a plurality of authentication data and condition data exist in the portable information device 1.

After returning home, the portable information device 1 is brought into contact with the authentication data reference section 107 outside the door, and a password for instructing the start of communication is input to the portable information device 1, and the personal authentication device 102 refers to the authentication data B and performs authentication. When the data B is identified by the authentication data identification means 111, the door is opened by the service use permission means 113. On the way home, when the portable information device 1 is stolen and a signal that the sensor detects a blasting shock such as taking out a storage element is input as control data, the processing determining means 7 processes the condition data B. Then, the authentication data B is erased by the authentication data erasing means 4 based on the determination that the condition of the condition data B of sensing the destructive impact is satisfied. Also, if another person inputs an incorrect password as control data, the processing judging means 7 processes the condition data C and judges that the condition for inputting data other than the password is satisfied. Authentication data B is erased by data erasing means 4.

Next, details of the portable information device 1 will be described with reference to FIG. It has an authentication data storage means 2, a condition data storage means 4, an authentication data erasing means 6, a processing determination means 7 for processing and determining condition data and control data, and a control data input means 8. Further, control data is input from the personal authentication device 301 by the control data input means 314. It also has an identification number storage means 407 used for security at home, and an input button and a pressure sensor or a displacement sensor for sensing an impact as the control data input means 8.

If there is another control data input means shown in Fig. 5 Authentication data can be erased by receiving it, at a certain time, by not being able to measure the biometric information of the user 101, or by going out of a certain area. In addition, as shown in FIG. 4, the portable information device 1 has condition data setting means 406 and condition data input means 402 therein, and specifies and erases any authentication data from the stored authentication data. In addition to the condition data, the portable information device 1 may include an authentication data erasure condition notification unit 403, a personal authentication enabled service notification unit 40, an authentication data erasure notification unit 405, and the like.

The convenience of the user 101 is improved by providing the portable information device 1 with these means. In this way, by individually erasing authentication data A and authentication data B from portable information device 1, it is possible to adapt to diversifying fields of use and prevent unnecessary leakage of authentication data due to theft. This makes it possible to reduce the complexity of management and to effectively utilize the storage capacity of the information device. FIG. 14 is a supplementary explanatory diagram of Embodiment 2 described above.

(Embodiment 3)

Next, a third embodiment will be described below. This example is a personal authentication system used for purchasing expensive products. This will be described with reference to FIGS. First, in FIG. 1, the personal authentication system according to the present embodiment includes a portable information device 1 in which a user 10 1 is mobile and a personal authentication device 102. The personal authentication device 102 includes a user identification unit 105 built in computers of a plurality of private homes performing e-commerce, an authentication data reference unit 107 installed in a plurality of retail stores, a bank as a system provider, It consists of one or more information processing units 106 located in a card company, etc., separated as in the case of the personal authentication device 301 in Fig. 3, but connected via a wired information transmission path. It works as

There is no infrared communication between the portable information device 1 and the user identification unit 105. The line information transmission path 104 has a wired information transmission path 103 for transmitting and receiving data by connecting to the portable information device 1 and the authentication data reference unit 107. The user specifying unit 105 belonging to the personal authentication device 102 has a user specifying unit 108, an authentication data input unit 3, a condition data setting unit 109, and a condition data input unit 5, and after specifying the user 101, The issued authentication data and the set condition data are input to the portable information device 1. The authentication data reference section 107 has authentication data reference means 112 and service use permission means 113. When the authentication data reference section 107 contacts the portable information device 1, the authentication data reference section 107 refers to the authentication data A via the information transmission path 103.

The information processing unit 106 includes an authentication data issuing unit 110 and an authentication data identification unit 111, and uses a database or the like to centrally manage personal information, authentication data identification data, the use status of the personal authentication system, and the like. At the same time, the authentication data identification means 111 can be managed efficiently. With the authentication data reference means 112, the system provider also manages the issuance of the authentication data at hand, and always uses the authentication data by the latest encryption technology.

The portable information device 1 includes an authentication data storage unit 2, a condition storage unit 4 and a storage unit, an authentication data erasing unit 6, a processing determination unit 7, and a control data input unit 8. Further, in order to input control data as the control data input means 8, it has a biological information sampling unit for measuring biological information and a position information acquiring unit for measuring position information, as shown in FIG. The processing determining means 7 has condition data changing means 601. It has a configuration according to the control data type shown in Fig. 5, and can be arbitrarily received by receiving an arbitrary electromagnetic wave, entering an arbitrary date and time, inputting a password other than an arbitrary password, or detecting an impact caused by an arbitrary burst. In addition, the authentication data may be deleted. Further, as shown in FIG. It may include data setting means 406, condition data input means 402, authentication data erasure condition notification means 403, personal authentication enabled service notification means 404, authentication data deletion advance notification means 405, and the like. By having these means, the use of the personal authentication system by the portable information device 1 becomes more convenient and the efficiency is improved.

Next, a usage method will be described. The user 101 inserts an IC card into an electronic commerce computer at home and starts communication between the portable information device 1 and the user identification unit 105 via the information transmission path 104. When the biometric information matches the biometric information stored in the IC card by the biometry, the user 101 is specified by the user specifying means 108. At the same time, the authentication data B issued by the authentication data issuing means 110 is input to the portable information device 1 communicating with the user specifying unit 105 by using the information transmission path 104. The authentication data B. is stored in the authentication data storage means 2 of the portable information device 1. The IC card memorizes one and only biological information, so you should not carry it when you go out. In addition, the condition data setting means 109 allows the condition data B to delete the authentication data B when a certain change occurs in the control data B including the biological information measured value, and the retail store to be purchased selected by the e-commerce computer. Set the condition data C to delete the authentication data B by inputting the control data C including the position information other than the position information of the above.

The condition data B and the condition data C are input to the portable information device 1 using the information transmission path 104 by the condition data input means 5 and stored in the condition data storage means 4. When the user 101 confirms that the target authentication data B has been stored in the portable information device 1 by the personal authentication service notifying means 404, the condition data setting means 406 in the portable information device 1 sets the usage limit amount as a condition. Set as conditions for data D. The condition data D is stored in the condition data storage means 5. Several types of condition data D are set in the portable information device 1 having the condition data changing means 601 at the time of shipment. In this way, the maximum transaction amount for one authentication data using the portable information device 1 is restricted to enhance security.

Although the condition data D does not correspond to the authentication data B as shown in FIG. 2, the condition data D for deleting the authentication data B by adding an authentication data processing procedure for deleting the authentication data B by the condition data setting means 406 is added. And In this way, a plurality of condition data are stored corresponding to one authentication data.

When the portable information device 1 comes into contact with the user reference section 105 at the cash register at the retail store, communication with the authentication data storage means 2 is started by the authentication data reference means 112, and the authentication data B is sent by the authentication data identification means 111. Process and identify authentication data identification data. When the authentication data B is identified, an indication that the user 101 is the user is displayed on the panel of the user reference section 105 as the service use permitting means 113, and the clerk passes the product to the user 101.

In addition, the account is settled from the bank account of user 101. The settlement may be made when the authentication data is input to the portable information device 1. The control data B including the biological information of the user 101 input by the control data input means 8 is processed by the processing determination means 7 together with the condition data B. If the portable information device 1 is stolen while away from home and is away from the user 101, the control data B changes.For example, if the control data B falls below a certain voltage value, the condition data B The authentication data B is erased inside the portable information device 1 by the authentication data erasing means 6 operated according to the authentication data processing procedure added to the condition data B when the condition is satisfied. The control data B is processed by the processing determining means 7 in accordance with the control data processing procedure, and the condition data B is processed in accordance with the condition data processing procedure.

Also, when another person communicates with the personal authentication device of a retail store that is not scheduled to be purchased, the location information of the retail store other than the setting is input as control data C and the condition data is entered. Authentication data B is erased by satisfying data C. In addition, for each purchase, the used amount is input to the portable information device 1 as the control data D, and is subtracted from the usage limit amount, which is the condition of the condition data D, by the condition data changing means 601 in FIG. When the value is close to 0, the condition data D is satisfied, and the authentication data B is erased by the authentication data erasing means 4. Thus, by setting various condition data in advance and storing it in the portable information device 1, the authentication data B is erased from the portable information device 1 to prevent unnecessary leakage of the authentication data due to theft. Prevention and management are reduced, and the storage capacity of the portable information device can be effectively used. FIG. 15 is a supplementary explanatory diagram of Embodiment 3 described above.

(Embodiment 4)

Next, a fourth embodiment will be described below. 9 to 13 are explanatory diagrams of the fourth embodiment. In FIG. 9, the user purchases authentication data to be used when entering the event venue in a ticket-like manner by using the Internet from a digital mobile phone as the portable information device 1. The use of the personal authentication system of the embodiment includes three stages: a personal authentication preparation stage, a personal authentication execution stage, and an authentication data erasing stage. The user is a person who uses the service of entering the event of the event company, and the system provider is the event company that provides the service and the communication company that provides the communication of the portable information device 1 and the system. If two or more such organizations are system providers, determine in advance how to collect fees from users, and when coordination between devices is working, set up the settings to function as a single system. I just need.

In the fourth embodiment, the user is required to collect the service charge from the user at the same time as the communication fee based on the user purchase information exchanged between the communication company and the event company when the service is purchased. use The customer selects and purchases the service provided by the event company on the e-commerce page of the communication company. The portable information device 1 receives the encrypted authentication data B, stores the user purchase information in the customer database 105c of the communication company, and is billed at a later date together with the communication fee.

Fig. 13 (A) using encrypted authentication data B will be described as an example of a method of using an electronic key in the personal authentication execution stage. The encrypted authentication data B cannot be decrypted in plaintext by anyone other than the system provider, and no information is leaked. After performing personal authentication, the system provider decrypts the authentication data B sent from the user into plaintext with a secret key that is not disclosed, and performs personal authentication using the plaintext authentication data B. As a method of using an electronic key other than (A), when the identification number of the portable information device 1 is used for personal authentication as in (B), a public key is used so that the identification number is not leaked. However, the public key may be included in the authentication data B or a part of the condition data B. Even when the authentication data B is encrypted as in (C), a part of the authentication data B and the condition data B may include a public key. In any case, prevent the leakage of information when performing individual case authentication.

FIG. 10 shows a specific configuration of the portable information device 1 according to the fourth embodiment. Figures 11 (A) to (H) show the pages displayed on the portable device, (A) shows the event company page, (B) shows the user confirmation page, and (C) shows the expiration date. The selection page, (D) is the date selection page, (E) is the purchase confirmation page, (F) is the user purchase information confirmation notification page, and (G) and (H) are the authentication data B erasure condition confirmation page. . FIG. 12 shows an example of a communication packet structure in digital mobile phones and short-range wireless communication.

As is clear from the above description, the first to fourth embodiments of the present invention provide various effects as described below. That is, according to the present invention, the authentication data stored in the portable information device is arbitrarily erased. Therefore, unnecessary leakage of authentication data and a shortage of storage capacity of the portable information device can be prevented, and users and system providers can individually improve safety and efficiency.

Further, according to the present invention, the specific authentication data stored in the portable information device is arbitrarily erased. Therefore, controllability of authentication data stored in a plurality of portable information devices is improved, and the personal authentication system is diversified.

Further, according to the present invention, the specific authentication data stored in the portable information device is automatically deleted. Therefore, the user does not have to manage a plurality of authentication data in the management of the portable information device, and the efficiency of the personal authentication system is improved.

More specifically, the effects of the first, second, and fourth embodiments are that the management of authentication data is facilitated, and that the system provider mainly arbitrarily increases the convenience and security of the portable information device and the personal authentication system. Can be improved. The condition data must include data to be compared with control data obtained from the communication unit. When communication is possible by electromagnetic waves, the system provider deletes the data arbitrarily. For example, if the data specified in the condition data is obtained as control data, the authentication data is deleted. After that, new authentication data may be transmitted and updated without bothering the user. It may also be used as an emergency measure in case of theft or loss. A means for erasing authentication data may be secured over a wide area using a mobile phone communication network, or a device that simply transmits control data may be placed near the exit and used for vehicles, buildings, theme parks, etc. You may.

Further, as a supplementary effect in the second embodiment, by preventing unauthorized use in the event of theft, the user can arbitrarily improve the safety. The condition data is the data to be compared with the control data input with the input button. Must be included. For example, if the authentication data is made available only after the password specified in the condition data is input, the authentication data will be deleted if a different password is entered multiple times. This is particularly effective for unauthorized use when the portable information device can be easily used without permission by a person close to the user.

Further, as a supplementary effect of the first embodiment, management such as limitation of the use period of the authentication data becomes easy. The condition data must include data to be compared with the time information included in the acquired control data. When using a clock provided in a portable information device to erase authentication data, it is not expected to improve security for system providers because many have a time adjustment function. The convenience is improved by deleting the authentication data without bothering the user. It is possible for users to voluntarily use it to improve safety. At this time, the system provider expects that the authentication data will be automatically deleted for authentication data that does not cause a serious problem even if it leaks. In order to improve safety, it is necessary to automatically and properly correct the time by using an electromagnetic clock or communication for a certain period of time, and to erase the authentication data based on the appropriate time. is there.

Further, as a supplementary effect of the third embodiment, the authentication data is erased according to the state of the user and the state of the user and the portable information device, so that mainly the user can improve the safety. The condition data must include data to be compared with control data obtained from the biological information sampling unit. For example, by specifying a pulse value in the condition data, the user dies and the pulse stops, or the distance between the user and the portable information device is so large that the pulse cannot be measured, and the value obtained by the biological information sampling unit is reduced. If the value is less than the specified value, the authentication data will be deleted. Other than pulse, body temperature and blood flow may be used. Further, as a supplementary effect of the third embodiment, management such as limiting the use position of the authentication data is facilitated, and the user and the system provider can arbitrarily improve the security and convenience. The condition data needs to include data to be compared with the control data acquired from the position information acquisition unit. For example, the location data within a building, site, Tokyo, Japan, etc. can be arbitrarily specified in the condition data, and the authentication data is deleted if the location information obtained from the location information acquisition unit deviates from the specified location.

In addition, as a supplementary effect of the embodiment, a risk management means for authentication data is added, and the user can mainly improve the security. The condition data needs to include data to be compared with control data obtained from the signal output unit. For example, specify a numerical value in the condition data, and delete the authentication data whose control data obtained from the impact sensor is larger than the specified value. Detecting the impact of destroying the portable information device, detecting the removal of the exterior force par, detecting unauthorized reading and copying of the data stored in the authentication data storage means, etc. Authentication data may be deleted. Further, it may be possible to detect the push / pull of a button necessary for the work of detaching the portable information device from the user, or to detect a change in the distance or a distance from the user.

Further, as a further supplementary effect of the first embodiment, a means for risk management of authentication data is added, so that mainly users can improve safety. The condition data must include data to be compared with the control data obtained from the signal output unit. For example, if the control data obtained from the signal output unit falls below the specified value, the authentication data is deleted.

Further, as a further supplementary effect of the first and fourth embodiments, the convenience in storing a plurality of pieces of authentication data in a portable information device can be improved. Industrial applicability

According to the present invention, any authentication data or specific authentication data stored in the portable information device can be erased, so that unnecessary authentication data is leaked and the storage capacity of the portable information device is reduced. Prevent shortage, etc., and improve the security and efficiency of users and system providers individually, improve the controllability of multiple authentication data stored in portable information devices, and respond to the diversification of personal authentication systems In the management of the portable information device, the user does not need to manage multiple authentication data, and the efficiency of the personal authentication system can be improved. Is great.

Claims

δ 冃 range

1. In a portable information device used for personal authentication, authentication data input means for externally inputting authentication data, authentication data storage means for storing the authentication data, and conditions for erasing the authentication data are set. Condition data input means for externally or internally inputting condition data to be performed, condition data storage means for storing the condition data, control data input means for externally or internally inputting control data, and the control data And a process determining unit that processes and determines the condition data; and an authentication data erasing unit that erases the authentication data, wherein the authentication data is erased based on a determination result of the process determining unit. Characteristic portable information device.

2. The portable information according to claim 1, wherein the control data input means includes a communication unit that receives an external electromagnetic wave, and receives the control data by an external electromagnetic wave. apparatus.

3. The control data input unit according to claim 1, wherein the control data input unit includes an input unit for inputting data through an input button or an input interface, and the control data is input from the input unit. The portable information

4. The control data input means includes a time information generating unit for obtaining time information or a time information receiving unit for obtaining time information from outside, and the control data is obtained from the time information. A portable information device according to claim 1.

5. The portable information device according to claim 1, wherein the control data input unit includes a biological information sampling unit that obtains biological information, and the control data can be obtained from the biological information of a user. .

6. The control data input unit is a position information acquisition unit that obtains position information. The portable information device according to claim 1, further comprising: obtaining the control data from the position information.

7. The portable information device according to claim 1, wherein the control data input unit includes a signal output unit including a sensor, and the control data is obtained from a signal generated by the signal output unit.

8. The control data input unit according to claim 1, further comprising a signal output unit provided by a built-in power generation unit or a built-in charging unit, wherein the control data is obtained from a signal generated by the signal output unit. The portable information device as described.

9. The processing determining means includes condition data changing means for changing the condition data according to the control data, and the condition data changed by inputting the control data satisfies a specified condition. 2. The portable information device according to claim 1, wherein the data is deleted.

10. The portable information device according to claim 1, wherein the authentication data storage unit stores a part of the data necessary for personal authentication.

11. The portable information device according to claim 1, wherein the authentication data storage unit stores two or more pieces of authentication data.

12. The portable information device according to claim 1, wherein the condition data storage unit stores one condition data for deleting a plurality of pieces of authentication data.

13. The portable information device according to claim 1, wherein the condition data storage means stores a plurality of condition data for erasing one authentication data.

14. The portable information device according to claim 1, further comprising an authentication data erasure condition notifying unit for notifying a user under what condition the authentication data is erased.

15. The personal authentication enabled service notifying means for notifying the user of a service that can be used by personal authentication based on the currently stored authentication data by voice or display to the user is provided. Stated portable type

16. The portable information device according to claim 1, further comprising an authentication data erasure notifying unit for notifying a user of erasing the authentication data.

17. The portable information device according to claim 1, further comprising identification number storage means for storing an identification number.

18. The portable information device according to claim 1, further comprising at least one of a telephone network connection unit and an Internet connection unit.

19. The portable information device according to claim 1, wherein the authentication data erasing means performs erasing using an external electromagnetic field or an external electromagnetic wave.

20. The portable information device according to claim 1, further comprising condition data setting means for setting the condition data to be stored in the condition data storage means.

21. User identification means for identifying a user, authentication data issuing means for issuing authentication data that can be identified later, authentication data input means for inputting the authentication data to a portable information device, and the portable information A personal authentication device comprising: authentication data reference means for referring to authentication data stored in the device; authentication data identification means for identifying the authentication data; and service use permission means for permitting use of a service. An information transmission path by wire, wireless, or contact between the personal information device and the personal information device; and inputting the authentication data to the portable information device specified by the user specified by the personal authentication device. And then the personal authentication device A personal authentication system for performing personal authentication of a user by referring to the authentication data and identifying the authentication data, and permitting use of a service.

22. The personal authentication device has condition data setting means for setting condition data, and condition data input means for inputting condition data to the portable information device, and the condition data set in the personal authentication device. Is input to the portable information device, and the control data input after the portable information device stores the condition data and the condition data are processed in the portable information device and determined based on the result of the authentication. 22. The personal authentication system according to claim 21, wherein data is erased.

23. The personal authentication device includes a user identification unit having at least user identification means and authentication data input means, an information processing unit having at least authentication data identification means, and at least authentication data reference. An authentication data reference unit having a means, and a wired or wireless information transmission path between the user identification unit, the information processing unit, and the authentication data reference unit. A wireless or contact information transmission path, the user identification unit includes the portable information device and a wired, wireless or contact information transmission path, and is used by the user identification unit. The authentication data is input to the portable information device specified by the user, and the information processing unit identifies the authentication data after the authentication data reference unit refers to the authentication data, thereby providing a user service. Personal authentication system of claim 21, wherein the authorization child to use bis utilization

24. The personal authentication system according to claim 23, wherein the user specifying unit includes condition data setting means and condition data input means.

2 5. How to erase authentication data used in portable information device for personal authentication Authentication data input means for externally inputting authentication data, authentication data storage means for storing the authentication data, and condition data for setting conditions for erasing the authentication data from outside or inside. Condition data input means for inputting, condition data storage means for storing the condition data, control data input means for inputting control data from outside or inside, and processing and judging the control data and the condition data Portable information for personal authentication in a portable information device for erasing the authentication data based on a result of the determination by the process determining means, comprising: a processing determining means; and an authentication data erasing means for erasing the authentication data. In the authentication data erasing method used in the device,

Authentication data for inputting and storing authentication data and conditions corresponding to the authentication data in the portable information device, and erasing the authentication data by the portable information device identifying a signal satisfying the condition. How to erase.