JP2006215770A - Ic card authentication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable an early awareness of missed removal or loss by missed removal when a fixed time passes after a logout in an authentication system using an IC card. <P>SOLUTION: When a fixed time passes after a logout following authentication using an IC card, an email is sent to a particular mail address. The user or administrator receives the email notifying the unremoved IC card. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an authentication system provided with means for notifying removal of an IC card reader when the IC card is used.

  In recent years, systems that record personal information on an IC card and perform personal authentication using the IC card have become widespread. With the widespread use of IC cards, problems due to forgetting to remove or losing IC cards will increase, which may lead to problems such as leakage of personal information and spoofing. A system that issues a warning to prevent forgetting to remove the IC card, and a system that requires authentication such as being prompted to enter a password when using the IC card have been devised to prevent problems. In addition, in order to prevent unauthorized use by third parties when they forget to remove the IC card, a limit on the number of authentication failures to the card is set, and if the authentication is made beyond the limit, access to the card becomes impossible. Such treatment is taken.

As another conventional example, Patent Literature 1 and Patent Literature 2 can be cited.
JP 05-324212 A JP 2000-099784 A

  Although the IC card has been prevented from being forgotten to be removed or illegally used by limiting the number of authentication failures, etc., the IC card lock, etc. due to the limitation of the number of authentication failures can occur when a third party tries to use the IC card This is a preventive measure against unauthorized use, such as when the access password to the IC card is entered incorrectly for a certain number of times, access to the IC card is locked. Originally, it is important for individuals to be aware that IC cards have been misused and to deal with them. However, in general, IC cards are used so that the causes of lost items, the location of lost items, and lost times are not accurately identified. It is also difficult for the user to quickly and accurately identify the IC card loss and the cause, location, and time.

  In the present invention, authentication is performed using an IC card, and when a certain period of time elapses after logout, an e-mail is sent to a specific e-mail address, and the user or administrator receives an e-mail forgetting to remove the IC card This makes it possible to quickly detect forgetting to pull out and forgetting lost due to forgetting to unplug.

  Furthermore, if the information in the e-mail contains information specifying the time when you forgot to pull out, the information that identifies the place where you forgot to pull it out, or how to stop the service, measures to prevent misuse or detect it Can be performed quickly and accurately.

  In the authentication system using an IC card according to the present invention as described above, if the IC card is not removed from the IC card reader for a certain period of time after logout, an e-mail is sent to a specific destination set in advance to the user. By notifying that the user has forgotten to remove the card, the user can notify the user that the user has forgotten to remove the card by e-mail so that the user can promptly detect the loss of the IC card. In addition, when searching, it is possible to know the cause of the loss that the loss has been forgotten by receiving the e-mail, and information such as time and location is added to the e-mail so that the search can be handled correctly. It is possible to carry out quickly and quickly.

  1 shows an embodiment of an IC card authentication system according to the present invention.

  FIG. 4 shows the overall configuration of a multifunction machine for realizing the authentication system representing an embodiment of the present invention.

  In FIG. 4, q01 is a controller for controlling the multifunction machine and has a hardware configuration as shown in FIG.

  q02 is a communication interface for the controller q01 to communicate with the outside of the multifunction device, and may be, for example, an IEEE1284 interface or other communication interface.

  q03 is a scanner engine, which is controlled by a controller q01.

  q04 is a printer engine, which is controlled by a controller q01, and may be, for example, a laser beam printer, an inkjet printer, or other printers.

  q05 is a FAX board for realizing a FAX function such as communication control of image transmission / reception characters, and is controlled by a controller q01.

  q06 is a user interface, which is composed of an LCD display, a keyboard, and the like, displays information from the controller q01, and conveys support from the user to the controller q01.

  q7 is an IC card reader for reading information of the IC card, and is controlled by the controller q01. The IC card is accessed according to an instruction from the controller q01, information is read, and the read result is notified to the controller q01.

  The multi-function peripheral having the above-described configuration allows the print job to be issued by selecting the printer engine q04. The scanner engine q03 is selected, and a scan job can be issued. Further, the printer engine q04 and the scanner engine q03 are selected, and a copy job can be issued. In addition, the printer engine q04, the scanner engine q03, and the FAX board q05 are selected, and a FAX reception job and a FAX transmission job can be issued. Also, the controller q01 and the communication interface q02 are selected to enable E-mail transmission.

  FIG. 5 is a schematic diagram showing a hardware configuration centering on the controller q1 of FIG. In the controller q1 in FIG. 4, the CPUr01, RAMr02, LCDr03, keyboard r04, ROMr05, communication interface r06, scanner engine r07, printer engine r08, FAX board r09, DISKr10, IC in FIG. A card reader r11 is connected to each other via a system bus R20.

  A program for controlling the controller q01 in FIG. 4 is stored in the ROMr05 or DISKr10, read to the RAMr02 as necessary, and executed by the CPUr01. In addition to the control program, ROMr05 and DISKr10 store the multifunction device and attribute information indicating the function and status of the job processed by the multifunction device, job data to be output, and the like.

  In addition, the controller calculates time information held by the RAMr02 by the CPUr01, thereby generating current time information and recording it in the RAM as information. Further, the CPUr01 displays through the LCDr03 and receives a user instruction from the keyboard r04. The CPU r01 communicates with the outside through the communication interface r06. Further, the CPU r01 communicates with the IC card reader through the IC card reader r11, detects the insertion or removal of the IC card, and reads the contents of the IC card.

  In the present embodiment, unless otherwise specified, in the MFP of FIG. 4, the CPU r01 receives user input from the keyboard r04 via the system bus r20, and RAMr02, LCDr03, ROMr05, communication interface r06, scanner The engine r07, printer engine r08, FAX board r09, DISKr10, and IC card reader r11 are controlled and executed.

  FIG. 6 is a block diagram of an IC card embodying the present invention.

  s01 indicates the entire IC card.

  s02 is an IC card system controller for controlling the IC card communication controller s03 and the database s04. The IC card s02 accesses the database s04 through the communication control unit s03 in response to an external request, and reads and writes information.

  s03 is a communication control unit. Requests and information from the outside are transmitted to the system control unit s02, and information is transmitted to the outside by requests from the system control unit s02.

  s04 indicates a database. The database s04 stores therein a data set s05, and information is read and written by the system control unit s01. The data set held by the database s04 is not limited to s05, and a plurality of data sets can be held.

  s05 is a data set held in the database s04, and holds personal information. Information held in the database s04 holds a user ID, a password, and an e-mail address. Note that the information held in the data set s05 is not limited to the scope of the present embodiment.

  FIG. 7 is an example of the data set s05 in FIG. 6, which is an IC card embodying the present invention.

  t1 is a user ID used for authentication.

  t2 is a password of the user ID t1 used for authentication.

  t3 is the destination to which the authentication system automatically sends an e-mail indicating that the user has forgotten to remove the IC card when the user t1 has logged in and the IC card is still inserted in the card reader after a certain period of time. .

  t4 is the destination to send the E-mail specified when there are multiple E-mail destinations.

  FIG. 8 is a system configuration diagram of an IC card authentication system configuration diagram implementing the present invention.

  u01 is a device control unit. The device control unit performs processing for reading information in the IC card via the IC card reader, and reception of IC card insertion / removal notifications transmitted from the IC card reader.

  u02 is a communication management unit. The communication management unit performs e-mail transmission when a certain time has elapsed after the user logs out with the IC card inserted.

  u03 is a user management unit. The user management unit holds a user information database u05, and the user information database u05 stores a user ID and a password corresponding to the user ID.

  u04 is an authentication control unit that performs authentication processing using the authentication information recorded in the IC card read through u01 and the user ID and password stored in the user information database managed by u03. If the user logs out with the IC card inserted, use u02 to determine whether to send an e-mail. In addition, time setting information until the user sends an e-mail after logging out with the card inserted is held, and the time setting information is set via the user interface of q06. The authentication control unit holds location information indicating the location of the present system, and is set via the user interface q06.

  FIG. 1 is a flowchart showing login processing of an authentication system embodying the present invention.

  101 waits for login and displays on LCDr03 a request to insert an IC card.

  A process 102 determines whether an IC card has been inserted. When the IC card is inserted, the controller q01 notifies the authentication system u01 that the IC card has been inserted, and the process proceeds to 103. In 103, the IC card information reading process is performed via the authentication system u01. As information in the IC card, the t1 user ID, t2 password, and t3 E-mail address (in the case of a plurality of e-mail addresses after t4 are read) are read, and the process proceeds to 104. The authentication process is performed in 104. If the authentication is successful, the process proceeds to 107. If the authentication is unsuccessful, the login failure display of 105 is performed and the process proceeds to In 106, when the IC card is removed, the state transits to the 101 login waiting state.

  FIG. 2 is a flowchart showing logout processing of the authentication system embodying the present invention.

  201 indicates a login state, which is equivalent to 107. In 202, when the IC card removal notification is received via the authentication system u01 from the login state via the authentication system u01, the logout process of 203 is performed, and a transition to the login waiting state of 206 is made. In 202, if an IC card removal notification has not been received via the authentication system u01, the process proceeds to 204, and if the logout button on the q03 user interface is pressed, the process proceeds to 205 logout processing. , 205, the authentication system control unit u04 records the logout time in the RAMr02. After logout processing, the instruction to remove the IC card 207 is displayed on the LCD of r03, and the process proceeds to 208. If a notification that the IC card has been removed is received via the system control unit s02 at 208, the process transits to a login waiting state at 206. In 208, if the notification that the IC card has been removed is not received via the authentication system u01, the process proceeds to 209, the time setting information of u04, the current time information held by the controller q01, and 205 to RAMr02. Referring to the recorded logout time, it is determined whether or not a certain time has passed with the IC card inserted after logout. At 209, if a predetermined time has passed, 210 e-mail transmission determination is performed. If it is determined in 210 that the e-mail has already been sent, the system switches to the 207 IC card removal instruction display state. If it is determined in 210 that the e-mail has not been sent yet, the authentication system The E-mail transmission process 211 is performed via the communication control unit u02. In the E-mail transmission process 211, the contents shown in FIG. 3 are transmitted as the E-mail body to the e-mail address set at t3, and the state transitions to the IC card removal instruction display state 207.

  FIG. 3 is an example of the body text of the E-mail transmitted in 211.

  301 represents a user ID used for authentication, and 302 describes the time when an e-mail forgetting to remove the IC card is transmitted. In 303, location information for specifying the location of the MFP that has sent the E-mail forgetting to remove the IC card, which is stored in the authentication system u02, is described.

  FIG. 9 represents another data set of IC cards s embodying the present invention. v01 is a user ID, and v02 is a password corresponding to v01.

  In the form of FIG. 9, the destination of the E-mail transmitted when a certain time has elapsed after logout with the IC card inserted is held in the user information database held by the user management unit in the u03 authentication system. -If email transmission is required, the authentication system selects the email address corresponding to the user ID.

FIG. 1 is a flowchart of a portion related to the present invention in a login process of an authentication system embodying the present invention. FIG. 2 is a flowchart of a portion related to the present invention from the logout process to the E-mail transmission process of the authentication system according to the present invention. FIG. 3 shows an example of information described in the E-mail transmitted by the E-mail transmission means of the authentication system embodying the present invention. 1 is an overall configuration diagram of a multifunction machine showing an embodiment of the present invention. FIG. 5 is a configuration diagram illustrating an example of a hardware configuration of a controller q01 in FIG. It is a block diagram which shows an example of an IC card system structure of the IC card which implemented this invention. It is an example of the data table which an IC card hold | maintains which implemented this invention. It is a block diagram which shows an example of the system configuration | structure of the authentication system which implemented this invention. It is an example of the form different from FIG. 7 of the data table which the IC card which implemented this invention hold | maintains.

Explanation of symbols

q01 Controller
q02 Communication interface
q03 Scanner engine
q04 Printer engine
q05 Fax board
q06 User interface
q06 IC card reader
r01 CPU
r02 RAM
r03 LCD
r04 keyboard
r05 ROM
r06 communication interface
r07 scanner engine
r08 printer engine
r09 fax board
r10 DISK
r10 IC card reader
r20 system bus
s01 IC card configuration
s02 System control unit
s03 Communication control unit
s04 database
s05 Authentication information DB
t1 User ID field
t2 password field
t3 E-mail address field
t4 E-mail address field
u1 Device control unit
u2 communication controller
u3 User Management Department
u4 Authentication control unit
u5 user information DB
v1 User ID field
v2 password field
101 Waiting for login step
102 IC card insertion discrimination step
103 IC card information reading step
104 Authentication steps
105 Login failure display step
106 IC card insertion discrimination step
107 Login steps
201 Login status
202 IC card removal judgment step
203 Logout step
204 Logout button press discrimination step
205 Logout step
206 Steps waiting for login
207 IC card removal instruction display step
208 IC card removal judgment step
209 Step to determine time after logout
210 E-mail transmission discrimination step
211 E-mail sending step
301 User ID field
302 Forgotten time field
303 Forgotten place field

Claims (8)

It has an IC card in which authentication information is recorded and an IC card reader for reading the information recorded in the IC card. The authentication information is read from the IC card via the IC card reader, and login and logout In the IC card authentication system capable of performing authentication, the authentication system is connected to a network, and an E-mail transmission means capable of automatically transmitting an E-mail via the network; Has IC card detection means to detect that the IC card has been removed from the card reader,
The authentication system automatically sends an e-mail to a predetermined destination when a predetermined time has passed without the IC card being removed from the card reader after the user logs out. Card authentication system.   2. The IC card according to claim 1, wherein when the user logs in by the authentication means using the IC card, the IC card detects that the IC card has been removed from the IC card reader, and automatically performs logout processing. Authentication system.   2. The IC card authentication system according to claim 1, wherein a user ID, a password, and the specific mail address are recorded on the IC card.   The IC card authentication system includes, as information to be added to the E-mail, information specifying a time when the user has not removed the IC card and a location where the IC card reader is installed. The IC card authentication system according to claim 1.   2. The IC card authentication system according to claim 1, wherein a plurality of E-mail addresses can be set as the destination address of the E-mail.   2. The IC card authentication system according to claim 1, wherein a destination address of the E-mail is recorded in an IC card.   The destination address of the E-mail corresponding to the user ID is registered in advance in a database held by the authentication system, and the IC card authentication system allows the IC card to be extracted from the IC card reader after the user logs out. 4. The IC card authentication system according to claim 3, wherein an e-mail address corresponding to the user ID is set as a destination address when a predetermined time elapses without being sent.   The IC card authentication system according to claim 1, wherein the setting of the time from when the user logs out until the e-mail is transmitted can be changed. Authentication system.

Images