JP2003296568A - Information authentication system, control method of information authentication system, control program of information authentication system and storage medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information authentication system capable of improving security at electronic settlement. <P>SOLUTION: A signature written on a credit card in advance and a handwritten signature which is not written in advance are read by a scanner 102 of a copying machine 100. The read signature and the handwritten signature are collated with each other, and it is determined whether the signature and the handwritten signature are identical or not based on the collation result. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention stores an information authentication system for authenticating information such as character strings at the time of electronic payment, a control method of the information authentication system, a control program of the information authentication system, and this control program. Regarding storage media.

[0002]

2. Description of the Related Art With the spread of the Internet, the number of virtual shops on the Internet has increased, and electronic commerce has come to be carried out. Along with that, the issue of Internet security has been raised. An extreme example is decryption or diversion by a third party when a credit card number is transmitted without any measures such as encryption during electronic payment.

[0003] On April 15, 1996, the Ministry of Posts and Telecommunications Bureau's Telecommunications Bureau published a report by the "Study and Study Group on Electronic Payment, Electronic Cash and Improvement of the Usage Environment of the Electronic Cash," stating that "(1) Does the content (transaction information) be stolen by a third party? (2) Is the communication (transaction) partner an authentic partner? (3) Is the communication content (transaction information) altered or tampered with ( 4) There is concern that the other party will not deny the fact that they have communicated (transacted), and it is necessary to eliminate such anxiety by developing and utilizing encryption technology. ”

Therefore, the use of encryption technology is widely practiced as a solution to security problems.

Some electronic mails have a function of encrypting a message to conceal the contents of communication, and a function of verifying tampering with the message by a digital signature and authenticating the sender. PGP (Pretty Good Privac)
y) and S / MIME (Secure / Multipur)
pose Internet Mail Extensi
ons) is famous.

A typical digital signature system is a digital signature based on a public key cryptosystem. The user creates a pair of different encryption keys, manages one of them as a secret key by himself, and the other is made open to the public as a public key. The user uses his / her private key (signing key) when sending data.
Then, the data is encrypted and transmitted to the other party, and the other party decrypts it using the public key (verification key) corresponding to the sender's private key. In this case, only the data encrypted by the private key corresponding to the public key (managed by the user only) can be decrypted using the public key. You can confirm that the signature was made. A typical example of this encryption method is RSA (RivestShamir A).
dleman) encryption.

The WWW browser has an encryption protocol SS.
L (Secure Sockets Layer) is installed to enable secure communication even on the Internet.

[0008]

However, the electronic signature does not correspond in all cases, and the electronic signature alone is not sufficient as means for confirming the identity of the individual. Even if the communication security is improved by the encryption technology, it cannot be said that the true security is improved unless the user is sufficiently authenticated that he / she is the person.

[0009] For example, when making an electronic payment with a credit card, it is possible for anyone other than the owner of the credit card to make an electronic payment. If you look at the credit card, the information necessary for payment, such as the member's name, member number, and expiration date, is written on the credit card, so it is easy for anyone other than the owner of the credit card to use the credit card. can do.

Also, looking at the usage details of the credit card, since most of the information is described, it is possible to make electronic payments without a credit card. Therefore, along with the improvement of encryption technology, confirmation of the identity of the person is possible. Establishment of means is indispensable.

The present invention has been made to solve the above-mentioned problems of the prior art, and its object is to provide an information authentication system and an information authentication system capable of improving security at the time of electronic payment and the like. And a storage medium storing the control program of the information authentication system and the control program.

[0012]

In order to achieve the above object, the information authentication system of the present invention comprises a first information reading means for reading first information described in advance and a second information reading means not described in advance. Second information reading means for reading information, and information collating means for collating the first information read by the first information reading means with the second information read by the second information reading means And a determining unit that determines that the first information and the second information are the same based on the matching result of the information matching unit.

Further, in order to achieve the above object, the control method of the information authentication system of the present invention is a control method for controlling the information authentication system for recognizing information, and is the previously described first information. Reading first information, reading second information not described in advance, reading second information, reading the first information in the first information reading step, and reading the second information An information collating step of collating the second information read in, and a determining step of determining that the first information and the second information are the same based on the collating result of the information collating step. It is characterized by having.

In order to achieve the above object, the control program of the information authentication system of the present invention is a computer-readable control program for controlling the information authentication system for recognizing information, and is described in advance. A first information reading step of reading first information, a second information reading step of reading second information not described in advance, the first information and the first information read in the first information reading step. (2) An information collating step of collating the second information read in the information reading step, and determining that the first information and the second information are the same based on the collating result of the information collating step. And a program code for causing a computer to execute the determining step.

Further, in order to achieve the above object, the storage medium of the present invention is characterized by storing a control program of the information authentication system.

[0016]

BEST MODE FOR CARRYING OUT THE INVENTION A portable device according to each embodiment of the present invention will be described below with reference to the drawings.

(First Embodiment) First, a first embodiment of the present invention will be described with reference to FIGS.

FIG. 1 is a block diagram showing the construction of a copying machine as a so-called multi-function digital machine which inputs and outputs general images to which the information authentication system according to the present embodiment is applied. In the figure, 100 is a copying machine as a multifunction digital machine.

The copying machine 100 is provided with an operation unit 101 for providing a user with operation of the apparatus, a scanner 102 for reading image information recorded on a document, read image information or an image sent from a host computer (not shown). A printer 103 for outputting information to a recording medium such as paper,
A device controller 10 that controls the operations of the scanner 102 and the printer 103 or performs various types of image information processing.
4. Memory 105 and hard disk 106 for temporarily or permanently storing image information data and processing programs
Etc.

FIG. 2 is a sectional view showing the structure of the image input / output portion of the copying machine 100 shown in FIG.

In FIG. 1, reference numeral 100 denotes a copying machine, which is constructed by providing a reader section R on the upper part and a printer section P on the lower part.

The document feeding device 201 of the reader unit R feeds documents one by one from the last page onto the platen glass 202, and discharges the document on the platen glass 202 after the reading operation of the document is completed. Is. When the document is conveyed onto the platen glass 202, the lamp 203 is turned on and the scanner unit 204 is started to move to expose and scan the document. The reflected light from the document at this time is reflected by the mirrors 205, 206, 207 and the lens 208.
CCD image sensor (hereinafter referred to as CCD) 2
It is led to 09.

The image information of the original scanned in this way is
It is read by the CCD 209. The image information data output from the CCD 209 is transferred to the printer unit P after being subjected to predetermined processing. The laser driver 210 of the printer unit P drives the laser emission unit 211, and causes the laser emission unit 211 to emit laser light according to the image information data output from the reader unit R. This laser light is applied to the photosensitive drum 212, and a latent image corresponding to the laser light is formed on the photosensitive drum 212.

At the latent image portion of the photosensitive drum 212,
The developer is attached by the developing device 213. Then, at the timing synchronized with the start of laser beam irradiation, the recording paper is fed from either the upper recording paper cassette 214 or the lower recording paper cassette 215, conveyed to the transfer unit 216, and the development attached to the photosensitive drum 212 is performed. Transfer the agent to the recording paper. The recording paper on which the developer is transferred is conveyed to the fixing unit 217, and the developer is fixed on the recording paper by the heat and pressure of the fixing unit 217. The recording paper that has passed through the fixing unit 217 is discharged by a discharge roller 218, and the sorter 221 sorts the discharged recording paper by storing the discharged recording paper in each pin.

If sorting is not set, the sorter 221 stores the recording paper on the top pin. When double-sided recording is set, after the recording paper is conveyed to the discharge roller 218, the rotation direction of the discharge roller 218 is reversed, and the flapper 219 guides the recording paper to the re-feed conveyance path 220. Further, when the multiplex recording is set, the flapper 219 is set so that the recording paper is not conveyed to the discharge roller 218.
The sheet is guided to the re-feeding conveyance path 220 by. Refeeding conveyance path 22
The recording paper led to 0 is transferred to the transfer unit 2 at the timing described above.
16 is fed.

With the spread of the Internet nowadays, such a copying machine 100 is used in a specific network (LAN).
Not only staying inside, it is widely connected to the world through the firewall.

FIG. 3 is a diagram showing a network configuration to which the copying machine 100 shown in FIG. 1 is connected. In FIG.
The same parts as those in FIG. 1 are designated by the same reference numerals.

In FIG. 3, 301 is the Internet (communication network), 302 is a hardware or software support center, and 303 is a hardware or software sales company. A web server 304 is connected to the Internet 301 and provides a specific service to Internet users. An electronic money server 305 performs payment processing between a financial institution 306 such as a bank and a consumer client. Reference numeral 307 is a service provider that performs a connection process between an individual user's terminal and the Internet 301.

A firewall 308 connects the inside of the LAN network shown below with an external communication network (Internet 301) to perform security management and the like. A device management server 309 manages devices 310 to 313, which will be described later, connected by a LAN network, manages users, and manages data such as accounting information. A file server 310 manages data,
Data is output to the copying machine 100 and a printer 313 described later as needed. A mail server 311 and a personal computer (personal computer) 312 connected as a terminal device browse information provided from the web server 304 via the Internet 301, and output image data to the copying machine 100 or a printer 313 described later. can do. A printer 313 prints image data from the personal computer 312 or the file server 310 on a recording medium.

In FIG. 3, reference numeral 100 denotes a copying machine, which mainly has functions such as image input / output. In this copying machine 100, 101 is an operation unit for a user to operate, and 102
Is the operation unit 101 or a personal computer (personal computer)
A scanner for inputting an image according to an instruction from the computer 312, a printer 103 for printing data from the personal computer 312 or the file server 310, and a console 104.
Or the scanner 102 based on an instruction from the personal computer 312.
Or printer 103, memory 105 or hard disk 10
6 or a device controller for controlling input / output of image data with the personal computer 312, for example, storing image data captured from the scanner 102 in the memory 105 or the hard disk 106 as necessary, or outputting to the personal computer 312. Control, or printing by the printer 103 is performed.

The configuration below the firewall 308 may be under the control of an individual user who is connected to the Internet 301 via the service provider 307.

Conventionally, such a copying machine 100 has been installed in an office, a school or the like and used for copying a document.

However, at present, it is also installed in convenience stores, supermarkets, etc., and in the future,
It is expected to be used as a multimedia terminal.

The background is that such a copying machine 100
As shown in FIG. 3, a specific network (LAN)
This is because it is not limited to being inside and is widely connected to the world through the firewall 308. That is, the copying machine 10
0 is not limited to staying within a particular network and is able to communicate with the world.

Next, under such an environment, the copying machine 10
A method of using signature authentication will be described as a means of confirming the identity of the person at the time of electronic payment in electronic commerce using 0.

In electronic commerce, a payment method using a credit card is generally used. 4A and 4B are views showing a general credit card. FIG. 4A shows the front surface of the credit card, and FIG. 4B shows the back surface of the credit card.

Usually, on the surface 400 of the credit card, the name 401 of the credit company or the credit card,
Membership number 402, credit card expiration date 403,
Member name 404 and the like are described. Further, on the back surface 405 of the credit card, a magnetic section 406 and a signature section 407 are provided.
There is. Member information including information on the surface 400 is registered in the magnetic unit 406 and can be read by a dedicated reader. The signature unit 407 includes a self-signed 408 and a member number 409 for confirming the identity of the individual.

In general transactions that are not electronic commerce,
A trader reads the magnetic information of the magnetic unit 406 with a card reader (not shown) to confirm the validity of the credit card, and the credit card user himself / herself signs it on a predetermined form, and it is written on the signing and the credit card. By confirming the self-signed 408 with the trader, the identity is confirmed. In this way, when the validity and identity of the credit card are confirmed, the sale is completed.

On the other hand, in electronic commerce, the validity of the credit card can be confirmed because the Internet or the like is used, but since it is difficult to confirm the identity of the credit card, it is possible for someone other than the person to make a payment. For example,
By stealing a credit card or stealing payment details or the like, main credit card information can be obtained, and based on the information, the credit card can be illegally used.

Electronic settlement, which was previously possible only at a specific place, can now be done by anyone using terminals installed at convenience stores or supermarkets.

Therefore, the information authentication system according to the present embodiment is capable of easily and surely confirming the identity of a machine (terminal) used by an unspecified number of people.

In the present embodiment, the case where the copying machine 100 that performs digital processing is used will be described as an example.

FIG. 5 is a diagram showing the configuration of the operation unit 101 of the copying machine 100. As shown in FIG. 5, the operation unit 101 is composed of a liquid crystal display, and the screen is switched by touching a predetermined position on the display. It consists of a touch panel.

FIG. 5 shows an example of a screen display at the time of copying, in which the mode is switched by the mode switching buttons such as the copy button 502, the fax button 503, the electronic settlement button 504 displayed on the mode switching unit 501. You can When the copy button 502 is selected, the status of the device is displayed on the display unit 505. A copy magnification setting unit 506 displays the set magnification in the display area 509. Reference numeral 507 denotes a paper size selection unit, and the selected paper size is displayed in the display area 510. Reference numeral 508 is a copy mode selection unit for copying. In addition, the number of copies set by the ten key unit (not shown) is displayed in the display area 511.

FIG. 6 shows an example of screen display during electronic payment.
In the figure, 601 is a mode switching unit, 602 is a copy button, 603 is a fax button, 604 is an electronic payment button, 605 is a display unit, 606 is a procedure display unit,
607 is an OK button, 608 is a cancel (Cance
l) button.

At the time of electronic payment, the operation unit 101 shown in FIG.
The electronic payment mode 604 is selected. The status display unit 605 becomes a display prompting signature authentication, and a series of procedures is displayed on the procedure display unit 606. Procedure display unit 606
In accordance with the instructions displayed on the credit card, the credit card is read by the scanner 102 (specifically, the platen glass 20 shown in FIG.
Place the surface 400 on 2). After that, when the OK button 607 on the screen shown in FIG. 6 is pressed, the self-signed portion 408 and the member number 409 previously described on the back surface 405 of the credit card are read. When the reading of the self-signed member 408 and the member number 409 is completed, the screen is switched to the screen shown in FIG. 7, and “Reading completed” is displayed on the status display portion 705 as shown in FIG.

In FIG. 7, 701 is a mode switching unit, 702 is a copy button, 703 is a fax button, 704 is an electronic payment button, 705 is a display unit, and 706.
Is a procedure display portion, 707 is an OK button, and 708 is a cancel button.

When the OK button 701 is pressed on the screen of FIG. 7, the screen is switched to the screen shown in FIG.

In FIG. 8, 801 is a mode switching unit, 802 is a copy button, 803 is a fax button, 804 is an electronic payment button, 805 is a display unit, and 806.
Is a procedure display portion, 807 is an OK button, and 808 is a cancel button.

When the OK button 701 is pressed on the screen of FIG. 7, as shown in FIG. 8, "Sign verification" prompting the signature verification is displayed on the status display section 805. According to the instruction of the procedure display unit 806, the handwritten signature column 809
Then, self-sign with a pen not shown. With a normal touch panel, the self-sign is not displayed, but the pressure of the pen may be sensed, and the part where the pressure is sensed may be displayed in the handwritten signature field 909 on the screen shown in FIG.

In FIG. 9, 901 is a mode switching unit, 902 is a copy button, 903 is a fax button, 904 is an electronic payment button, 905 is a display unit, and 906.
Is a procedure display portion, 907 is an OK button, 908 is a cancel button, and 909 is a handwritten signature column.

In the screen shown in FIG. 9, after performing self-signing in the handwritten signature field 909, the OK button 907 is pressed, and the device controller 104 displays the self-signed signature 408 previously described on the credit card and the handwritten signature not described previously. The handwritten signature in the column 909 is collated. This matching method may be well-known pattern matching, and the method is not particularly limited. Further, since the size of the self-signed 408 is different from that of the handwritten signature in the handwritten signature column 909, when the self-signed 408 is read by the scanner 102, the device controller 104 scales the size to a desired size and collates them. Is also good.

When the collation between the self-signed signature 408 and the handwritten signature in the handwritten signature column 909 is completed by the above work,
Switch to the screen shown in 0.

In FIG. 10, 1001 is a mode switching unit, 1002 is a copy button, 1003 is a fax button, 1004 is an electronic payment button, 1005 is a status display unit, 1006 is a matching rate display unit, and 1007 is a procedure display unit.

As shown in FIG. 10, the status display section 1
“Collation completed” is displayed in 005, and the matching rate is displayed in the matching rate display unit 1006. Furthermore, if the identity is recognized based on the collation rate, the fact that the user has been authenticated is displayed on the procedure display unit 1007, and the device controller 104 performs electronic payment. If the user is not authenticated, electronic payment will not be made. In addition, the operation record is stored in the memory 10
5 and the hard disk 106 to prepare for a follow-up investigation of illegal use.

In the present embodiment, the case where the present invention is applied to the copying machine 100 which is a multi-function machine for performing digital processing has been described. However, the present invention also includes a device controller equipped with a network interface for a machine for performing analog processing. If it is a device, it can be widely applied.

As described above, according to the information authentication system of this embodiment, the copying machine 100, which is a multi-function machine having a network interface, is used.
By performing handwritten signature authentication using, electronic payment can be performed from a multimedia terminal or the like used by an unspecified number of people installed in convenience stores, supermarkets, and the like. Further, as a means for confirming the identity, since a biometrics (biological information) authentication system that authenticates based on human characteristics is used, the accuracy of the identity confirmation is improved,
Improves security in electronic payments.

(Second Embodiment) In the above-described first embodiment, the handwritten signature authentication is performed by the operation unit 101 of the copying machine 100 which is a multi-function machine. It may be done with an edit board that can be specified. Alternatively, handwritten signature authentication may be performed using a commercially available digitizer or tablet.

(Other Embodiments) The object of the present invention is to
A storage medium recording a program code of software that realizes the functions of the above-described embodiments is supplied to a system or apparatus, and a computer (or CPU, MPU, or the like) of the system or apparatus stores the storage medium in the storage medium. Needless to say, this can also be achieved by reading and executing.

In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the storage medium storing the program code constitutes the present invention.

A storage medium for supplying the program code is, for example, a floppy (registered trademark) disk, a hard disk, a magneto-optical disk, or a CD-RO.
M, CD-R, CD-RW, DVD-ROM, DVD-
RAM, DVD-RW, DVD + RW, magnetic tape, non-volatile memory card, ROM, etc. can be used.

Further, by executing the program code read by the computer, not only the functions of the above-described respective embodiments are realized, but also the OS (operating system) running on the computer is operated based on the instruction of the program code. It goes without saying that this also includes the case where the system) performs a part or all of the actual processing and the processing realizes the functions of the above-described embodiments.

Further, after the program code read from the storage medium is written in the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, based on the instruction of the program code, It goes without saying that a case where the CPU or the like provided in the function expansion board or the function expansion unit performs a part or all of the actual processing and the processing realizes the functions of the above-described embodiments is also included.

[0064]

As described above, according to the present invention,
Information such as a character string (signature) written in advance is collated with information such as a character string (signature) entered at the time of payment, and payment can be made only when the person is authenticated. Occasionally, by performing signature authentication, payment by anyone other than the person himself / herself is not permitted, and the security of electronic payment is improved.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a copying machine to which an information authentication system according to a first embodiment of the present invention is applied.

FIG. 2 is a sectional view showing the configuration of a copying machine to which the information authentication system according to the first embodiment of the present invention is applied.

FIG. 3 is a diagram showing a network configuration having a copying machine to which the information authentication system according to the first embodiment of the present invention is applied.

FIG. 4 is a diagram showing an example of a credit card used in the information authentication system according to the first embodiment of the present invention.

FIG. 5 is a diagram showing a screen display example of an operation unit in a copying machine to which the information authentication system according to the first embodiment of the present invention is applied.

FIG. 6 is a diagram showing a screen display example of an operation unit in a copying machine to which the information authentication system according to the first embodiment of the present invention is applied.

FIG. 7 is a diagram showing a screen display example of an operation unit in a copying machine to which the information authentication system according to the first embodiment of the present invention is applied.

FIG. 8 is a diagram showing a screen display example of an operation unit in a copying machine to which the information authentication system according to the first embodiment of the present invention is applied.

FIG. 9 is a diagram showing a screen display example of the operation unit in the copying machine to which the information authentication system according to the first embodiment of the present invention is applied.

FIG. 10 is a diagram showing a screen display example of the operation unit in the copying machine to which the information authentication system according to the first embodiment of the present invention is applied.

[Explanation of symbols]

100 copiers 101 Operation unit 102 scanner 103 printer 104 device controller 105 memory 106 hard disk 301 Internet 302 Support Center 303 Sales company 304 web server 305 Electronic Money Server 306 financial institution 307 Service Provider 308 firewall 309 Device management server 310 File Server 311 mail server 312 PC (personal computer) 313 Printer

Claims (12)

[Claims] 1. A first information reading means for reading first information written in advance, a second information reading means for reading second information not written in advance, and reading by the first information reading means An information collating unit that collates the obtained first information with the second information read by the second information reading unit, and the first information and the second information based on a collation result of the information collating unit. An information authentication system, comprising: a determination unit that determines that the information is the same. 2. The information authentication system according to claim 1, wherein the first information reading unit has a scaling function. 3. The information authentication system according to claim 1, wherein the first information reading unit has an information recognition function. 4. The information authentication system according to claim 1, wherein a locus of motion is not displayed when the second information reading means reads the second information. 5. The information authentication system according to claim 1, wherein when the second information reading unit reads the second information, a trajectory of an operation is displayed. 6. The information authentication system according to claim 1, wherein the determination means is capable of changing the determination standard. 7. The information authentication system according to claim 1, wherein the information is a character string. 8. The information authentication system according to claim 3, wherein the information recognition function is a character recognition function. 9. The storage device according to claim 1, further comprising a storage device that stores a series of operations when the determination device determines that the first information and the second information are not the same. The information authentication system described in 8. 10. A control method for controlling an information authentication system for recognizing information, comprising: a first information reading step of reading first information written in advance; and a second information not written in advance. A second information reading step of reading, and an information collating step of collating the first information read in the first information reading step and the second information read in the second information reading step, A control method of an information authentication system, comprising: a determination step of determining that the first information and the second information are the same based on the collation result of the information collating step. 11. A computer-readable control program for controlling an information authentication system for recognizing information, comprising: a first information reading step of reading first information described in advance; Second information reading step for reading second information, and information for collating the first information read in the first information reading step with the second information read in the second information reading step And a program code for causing a computer to execute a collation step and a determination step of determining that the first information and the second information are the same based on the collation result of the information collating step. Information authentication system control program. 12. A storage medium on which the control program of the information authentication system according to claim 11 is stored.