JP2004362329A - Authentication card - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication card describing a code table consisting of a plurality of authentication codes, which is adapted so that a person cannot easily steal glances at the content of the code table. <P>SOLUTION: The code table 8 having a plurality of authentication codes for confirming whether an operator is a valid operator or not arranged in a matrix is described in the authentication card 7. The authentication codes are not visible at ordinary temperature, and becomes visible at about the human body temperature. At the time of individual authentication, different line number and row numbers are designated in each case, and to input the authentication code described in this position is requested. A user makes only the necessary authentication code visible and inputs the read authentication code. Since the authentication code of a different position is requested in the next individual authentication, only the user who is carrying the authentication card can receive the individual authentication. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an authentication card. The authentication card is used to perform personal authentication such as, for example, confirmation of an operator at the time of accessing the computer system, confirmation of a contractor at the time of online processing at a financial institution, and confirmation of passability at the time of passing through an entrance door.
[0002]
[Prior art]
In an online banking system or the like, as a method of performing personal authentication, a user is required to input a contract number and a password when accessing the system. If the entered contract number and password match the contract number and password stored in the system, the system authenticates that the user is accessing.
In such a system, a malicious person may steal an input operation situation of a user, obtain a contract number and a password, and perform unauthorized access.
[0003]
As a method of preventing such a situation, it has been proposed to print a code table in which a plurality of authentication codes are arranged in a matrix on an authentication card (see Patent Document 1). In this method, at the time of personal authentication, the system side specifies a row number and a column number of a code table and requests the user to input an authentication code at that position. The designation of the row number and the column number is different each time personal identification is performed.
[0004]
The user reads and inputs the authentication code described at the designated position from the code table. The system compares the input authentication code with the authentication code at the position of the specified row number and column number in the stored code table. Here, if it is determined that the authentication codes match, it is determined that the authorized user has the authentication card, and the personal authentication is completed.
[0005]
According to the system described above, even if a malicious party steals the operation status of the user and accesses the system using the subscriber number, password, and authentication code used at that time, even if the malicious user accesses the system, Is not authenticated. That is, the authentication code at a different position is designated every time the personal authentication is performed, so that even if the authentication code used once is misused for the subsequent personal authentication, the probability of being authenticated as the individual is low.
[0006]
By using the above code table, possession of an authentication card can also be used as an authentication condition, and the accuracy of identity verification is improved.
[0007]
[Patent Document 1]
JP-A-9-305541
[Problems to be solved by the invention]
The above code table is merely printed on the authentication card. Therefore, a malicious person can obtain the contents of the code table by performing an action such as peeping at the contents of the code table or taking a photograph. In this case, even when the system side specifies a different row number and column number each time during personal authentication, an unauthorized user is authenticated as a legitimate user.
[0009]
SUMMARY OF THE INVENTION It is an object of the present invention to provide an authentication card in which a code table including a plurality of authentication codes is described, which prevents a malicious person from easily seeing the contents of the code table.
[0010]
[Means for Solving the Problems]
The present invention has been made to solve the above problems. The authentication card of the present invention describes a code table in which a plurality of authentication codes for confirming whether or not the operator is an authorized operator are arranged in a matrix. This authentication code is invisible at normal temperature and is visible at about human body temperature.
[0011]
Since the authentication code of this authentication card cannot be visually recognized in a normal state, it cannot be seen by others. On the other hand, when the user wants to check the authentication code, if the temperature is raised to about the body temperature by touching with a finger or the like, the authentication code in that portion becomes visible. According to this authentication card, the chance of seeing the authentication code by others is reduced, so that security can be improved.
[0012]
Further, by touching only the designated position in the code table with the fingertip, only the necessary authentication code can be visually recognized, and the other authentication codes can be left invisible. At the time of personal authentication, a different row number and column number are designated each time, and if another authentication code is hidden, the authentication code at the designated position cannot be responded. Therefore, security can be further improved.
[0013]
In a preferred aspect of the present invention, the authentication code is not visible at normal temperature and is visible at about human body temperature by being covered with the temperature indicating paint.
In another preferred embodiment, the authentication code is described by a temperature-indicating paint, so that the authentication code cannot be visually recognized at normal temperature and can be visually recognized at about human body temperature.
Further, in another preferred embodiment, a matrix position of the authentication code is shown, and an index and a guide line which are always visible are described. Thereby, even if the number of authentication codes increases, the designated position can be easily specified, and the usability is improved.
[0014]
BEST MODE FOR CARRYING OUT THE INVENTION
The authentication card of the present invention will be described with reference to the drawings.
FIG. 1 shows a configuration of a content service system using an authentication card. The content server 1 and a plurality of user terminals 2 are connected via the Internet 3.
[0015]
The content server 1 includes a user authentication module 4, a user DB (database) 5, and a content DB 6. The user authentication module 4 is a module that performs user authentication processing described below. The user DB 5 stores a contract code, a password, and a code table for each user. The content DB 6 stores contents to be provided to users.
[0016]
An authentication card used in the system of FIG. 1 will be described with reference to FIG.
(A) shows the appearance of the authentication card 7.
On the authentication card 7, the name of the contractor, the operation procedure, and the code table 8 are described in order from the top on the left side, and notes are written on the right side.
The operation procedure includes (1) accessing the displayed URL, (2) inputting the contract number displayed, (3) inputting the password (not displayed), and (4) confirmation number in the table below. (Authentication code) is described.
[0017]
In the code table 8, the row number 1-4 and the column number Ao are displayed. The authentication code is described at the position specified by the row number and the column number, but is invisible due to the application of the temperature indicating paint 9.
FIG. 2B shows a code table in a state where the temperature indicating paint 9 is removed.
Here, random number authentication codes 10 are arranged in a matrix. As an index 11 for determining the position of the authentication code 10, a row number and a column number are given. A guide line 12 is printed as a guide to make it easier to see the relationship between the authentication code 10 and the index 11 and to reliably identify the authentication code at the specified position. The index 11 and the guide line 12 are always visible.
[0018]
Since the temperature indicating paint 9 is known, a detailed description thereof is omitted here. An example in which a temperature indicating paint is used for an information hiding label is described in JP-A-11-73110.
The temperature-indicating paint used to cover the authentication code used in the present embodiment is opaque at normal temperature and transparent when the temperature reaches about the body temperature of a person. Therefore, the authentication code is invisible at normal temperature and becomes visible by warming at body temperature.
[0019]
The personal authentication process using the authentication card of FIG. 2 in the system of FIG. 1 will be described with reference to FIG.
The user accesses the URL displayed on the card from the user terminal 2 and connects to the content server 1 according to the procedure indicated by the authentication card 7 (see FIG. 2A), and requests login (S1).
[0020]
The content server 1 uses the user authentication module 4 to transmit data requesting a contract number and a password (S2).
The user terminal 2 displays a guide on the display unit based on the received data (S3).
[0021]
The user inputs the contract number and the password from the keyboard according to the guide displayed on the display unit of the user terminal 2. These are transmitted to the content server 1 (S4).
The content server 1 searches the user information DB 1 based on the received contract number, and extracts user information having the same contract number. Then, the received password is collated with the password of the extracted user information (S5).
[0022]
Here, if the verification is NG, the request data of step S2 is transmitted again. If this NG is repeated a predetermined number of times, the login is rejected and the process is terminated.
If the collation is YES, matrix information in which one row and one column of the code table are selected is generated (S6). The authentication code described in the selected row and column is extracted from the code table of the user information extracted in step S4 and stored (S7). Data including the selected row number and column number is transmitted to the user terminal 2 (S8).
[0023]
Upon receiving the data, the user terminal 2 displays a guide for inputting the authentication code on the display unit (S9). In this guide, the user is instructed to input the authentication code located at the specified row number and column number from the code table of the authentication card possessed by the user.
[0024]
The user reads the authentication code at the position indicated by the designated row number and column number according to the instruction. Since the temperature indicating paint 9 is opaque at normal temperature and the authentication code cannot be visually recognized, the temperature of the temperature indicating paint can be raised to about the body temperature by pressing the corresponding position with a finger, and the authentication code can be visually recognized. To do. At this time, by making only the authentication code at the designated position visible, the authentication code at the other positions can be left invisible.
[0025]
The user inputs the visually recognized authentication code from the keyboard. Thereby, the authentication code is transmitted to the content server 1 (S10).
The content server 1 checks the received authentication code against the authentication code stored in step S5 (S11). If they do not match, the process returns to step S5 to request transmission of an authentication code. If this NG is repeated a predetermined number of times, the login is rejected and the process is terminated.
[0026]
If the result after the processing is YES, the login is started and the content service is started (S12).
According to the example described above, the plurality of authentication codes used for personal authentication are covered with the temperature indicating paint, and are not visible at normal temperature. Therefore, even if another person looks at the authentication card 7, the authentication code cannot be seen, so that the security can be improved.
[0027]
When the user looks at the authentication code, it is possible to raise the temperature only at the designated position and visually recognize the authentication code. As a result, the authentication code at another position is not seen by others. Since a different row number and column number are designated each time for personal authentication, the possibility of being authenticated by the unauthorized person by unauthorized access is reduced by preventing the authentication code of the other part from being seen. be able to.
[0028]
As described above, one embodiment of the present invention has been described, but the present invention can be variously modified as exemplified below.
(1) In the example of FIG. 2, the entire area on which the authentication code is described is covered with the thermal paint, but the guide wire 12 is not covered, and only the individual authentication code is covered. good. In this case, since the guide line 12 is always visible, the designated position can be easily confirmed.
[0029]
(2) The temperature-indicating paint that covers the authentication code may be omitted, and the authentication code may be described using the temperature-indicating paint. By printing the authentication code with a temperature indicating paint that becomes transparent at room temperature and becomes opaque at about body temperature, it can be made invisible at room temperature and visible at about body temperature.
Conversely, the background portion other than the authentication code can be printed with a temperature indicating paint that becomes transparent at room temperature and becomes opaque at about body temperature. In this case, when the temperature indicating paint becomes opaque, the authentication code appears in white.
(3) The index 11 and the guide line 12 can be omitted.
[0030]
【The invention's effect】
According to the present invention, it is possible to obtain an authentication card that describes a code table including a plurality of authentication codes and that can prevent a malicious person from easily seeing the contents of the code table.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of a content server system using an authentication card of the present invention.
FIG. 2 is a view showing the appearance of an authentication card to which the present invention is applied.
FIG. 3 is a diagram showing a personal authentication process in the system of FIG. 1;
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Content server 2 ... User terminal 3 ... Internet 4 ... User authentication module 5 ... User DB
6 ... Content DB
7 ... Authentication card 8 ... Code table 9 ... Temperature paint 10 ... Authentication code 11 ... Index 12 ... Guide line

Claims (5)

Authentication code for confirming whether or not the operator is a legitimate operator is an authentication card that describes a code table arranged in a plurality of matrix,
The authentication card is characterized in that the authentication code is invisible at normal temperature and visible at about human body temperature. 2. The authentication card according to claim 1, wherein the authentication code is covered with a temperature-indicating paint, so that the code cannot be visually recognized at normal temperature and can be visually recognized at about human body temperature. 2. The authentication card according to claim 1, wherein the authentication code is written in a temperature-indicating paint, so that the authentication code is invisible at room temperature and is visible at about human body temperature. The authentication card according to any one of claims 1 to 3, wherein a matrix position of the authentication code is shown, and an index that is always visible is described. The authentication card according to any one of claims 1 to 3, wherein a guide line that indicates a matrix position of the authentication code and is always visible is described.

Images