JP2010066917A - Personal identification system and personal identification method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reduce equipment costs and to make it unnecessary for a user side to perform any troublesome operation for personal identification, while securing the high security property thereof. <P>SOLUTION: In addition to an authentication method for authenticating a user by an existing computer 1 based on a cash card and a password, a computer 12 temporarily registers a one-time password in a password database 11 and mail-transmits the one-time password to the portable telephone number of a user registered in a customer address registration database 13. When the mail-transmitted one-time password is input as the second password from an ATM 3, the existing computer collates the second password with the password registered in the password database, and only when those passwords are matched, the existing computer allows the user to continue processing using the ATM. This invention includes authentication based on a "2ND password" and authentication based on "blank e-mail" using the portable telephone. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a personal authentication system and a personal authentication method, and more particularly, to personal authentication of a user for using an ATM (automatic cash deposit / payment machine) of a financial institution (such as a bank).

ATMs and host computers managed and operated by financial institutions authenticate users with host computers based on management data recorded on cash cards inserted into ATMs and PINs entered by users, and make automatic cash payments Etc. can be executed. In this authentication method, if the passwords match, even a third party who is not the principal can withdraw cash from the ATM. As a countermeasure, there is a method in which the user frequently changes the personal identification number, but the burden of changing the personal identification number is a burden on the user.
As a personal authentication system that enhances security, the ATM has a telephone function, the mobile phone number of the owner is registered in the cash card, and the mobile phone number from the cash card inserted in the ATM is used for user authentication. Is automatically connected to this telephone number, and automatic cash payment can be executed only when a response signal “YES” is received in response to an inquiry (synthetic sound) to the mobile phone. (For example, refer to Patent Document 1).
However, even in this method, if the recorded contents of the cash card are stolen, impersonation by a third party may occur.

As a personal authentication method for strict protection, cash at least by registering at least a mobile phone number, a refund time for cash refund operation, and a refund selection password indicating the correct answer to a question in a choice answer format, and using a cash card When an inquiry for user personal authentication is received from the ATM that has detected the user operation of the refund, it is checked whether the current time satisfies the refund time registered for reservation, and if it is satisfied, a call is made to the mobile phone of the registered telephone number. If there is a response, a question in the selected answer format is presented to the user, the user selects the answer from the multiple answer candidates, and the reservation is registered for refund If it matches with the selected password and it matches, the fact that the user's personal authentication has been obtained can be returned to the ATM, and the cash withdrawal operation by the ATM can be executed. Some systems (for example see Patent Document 2).
In this system, it is possible to select the recorded contents of the cash card from a large amount of data and perform strict monitoring including the operation time as a requirement. However, even in this system, the possibility of leakage of passwords and telephone numbers remains.
As a method for improving the security of personal authentication, there are methods combining a one-time password method and a biometric authentication method. The one-time password method changes the password that is entered every time it connects to an ATM, etc. so that the host computer such as an authentication server cannot use the password from the next time if the password is used once. Protect.
The biometric authentication method registers physical feature data such as human fingerprints, eyeball irises, and voiceprints in a database on the authentication server side, reads the user's fingerprints and iris patterns with ATM, and authenticates them by collation. You can confirm that you are the person.
JP 2005-174271 A JP 2008-009513 A

The biometric authentication method has stronger security than password authentication, but in order to implement it in a financial institution system using an ATM as a terminal, each ATM is provided with a fingerprint reading device and a retinal photographing camera. A verification process is required with a computer such as an authentication server, and expensive hardware and software are required. Also, fingerprint and retinal image verification has a problem that it takes time to authenticate the user and makes the user troublesome.
An object of the present invention is to provide a personal authentication system and a personal authentication method in which equipment costs are low and a troublesome operation on a user side is unnecessary while ensuring high security.

The present invention is characterized by the following systems and methods in order to solve the above problems.
(1) When a user uses an ATM (automated deposit / payment machine) using a cash card of a financial institution, the management data recorded on the cash card inserted in the ATM and the password entered by the user A personal authentication system for authenticating a user with an existing computer on the financial institution side, comprising a password database for temporarily registering a one-time password, a computer for personal authentication service, and a customer address registration database. The personal authentication service computer temporarily registers the assigned disposable password in the password database when the cash card is inserted into the password and is authenticated by the existing computer for the entered first password. Of users registered in the address registration database Means for sending a disposable password to a mobile phone number, and when the disposable password sent by mail is input as a second password from an ATM operated by a user, the existing computer The second security code is compared with the security code temporarily registered in the password database, and a means for allowing the processing using the ATM to be continued only when they match is provided.

  (2) When a user uses an ATM (automated deposit / payment machine) using a cash card of a financial institution, the management data recorded on the cash card inserted in the ATM and the password entered by the user A personal authentication system for authenticating a user with an existing computer on the financial institution side, comprising a personal authentication service computer, a customer address registration database, a password verification computer, and a password registration database. The personal authentication service computer stores the personal data of the user acquired from the financial institution side in the customer address registration database when the cash card is inserted into the personal computer and the existing password is authenticated by the existing computer. And attach a personal address to the user And a means for permitting the password verification computer to register the 2ND password from the user, and the password verification computer waits for the transmission of the 2ND password from the authorized user. When a 2ND password is entered for personal access, the password is compared with the registered password in the password registration database, and only when they match, means for allowing processing using ATM to be continued is provided.

  (3) When a user uses an ATM (automated deposit / payment machine) using a cash card of a financial institution, the management data recorded on the cash card inserted in the ATM and the password entered by the user A personal authentication system for authenticating a user with an existing computer on the financial institution side, comprising an SMTP server, a POP3 server, and a customer address registration database, wherein the SMTP server makes the POP3 server accessible in advance. In addition, the POP3 server includes means for delivering a blank e-mail to the user's mobile phone registered in the customer address registration database, and the POP3 server has returned a blank e-mail for confirmation to the blank mail distribution. The personal authentication is obtained by verifying the user's address, and the end of the authentication process is terminated by the SMTP server. The Notify existing computer, characterized by comprising means for enabling continued processing using ATM through.

  (4) The computer or server added for the personal authentication service of the user has means for performing communication for registration of the personal authentication service, user confirmation at the time of WEB registration, and user authentication via the IDC. It is characterized by.

  (5) When a user uses an ATM (automated deposit / payment machine) using a cash card of a financial institution, the management data recorded on the cash card inserted in the ATM and the password entered by the user A personal authentication method for authenticating a user with an existing computer on the financial institution side, comprising a password database for temporarily registering a one-time password, a computer for personal authentication service, and a customer address registration database. The personal authentication service computer temporarily registers the assigned disposable password in the password database when the cash card is inserted into the password and is authenticated by the existing computer for the entered first password. User's mobile phone registered in the address registration database A step of sending a disposable password to a talk number by e-mail, and when the disposable code number sent by e-mail is input as a second password from an ATM operated by a user, the existing computer The second security code is compared with the security code temporarily registered in the password database, and the process using the ATM can be continued only when they match.

  (6) When a user uses an ATM (automated deposit / payment machine) using a cash card of a financial institution, the management data recorded on the cash card inserted in the ATM and the password entered by the user A personal authentication method for authenticating a user with an existing computer on the financial institution side, comprising a personal authentication service computer, a customer address registration database, a password verification computer, and a password registration database. The personal authentication service computer stores the personal data of the user acquired from the financial institution side in the customer address registration database when the cash card is inserted into the personal computer and the existing password is authenticated by the existing computer. And attaching a personal address to the user And the step of permitting the password verification computer to register the 2ND password from the user, and the password verification computer waits for the transmission of the 2ND password from the authorized user. When a 2ND password is input for personal access, the registered password in the password registration database is collated, and the process using ATM can be continued only when the password matches.

  (7) When a user uses an ATM (automated deposit / payment machine) using a cash card of a financial institution, the management data recorded on the cash card inserted in the ATM and the password entered by the user A personal authentication method for authenticating a user with an existing computer on the financial institution side, comprising an SMTP server, a POP3 server, and a customer address registration database, wherein the SMTP server makes the POP3 server accessible in advance. And a step of delivering a blank email to the user's mobile phone registered in the customer address registration database, and the POP3 server returns a blank email for confirmation to the blank email delivery. Personal authentication is obtained by verifying the user's address, and the end of the authentication process is terminated by the SMTP server. The Notify existing computer through, characterized by having a step of enabling continued processing using ATM.

  (8) The computer or server added for the user personal authentication service has steps of performing registration for personal authentication service, user confirmation during WEB registration, and communication for user authentication via the IDC. Features.

  As described above, according to the present invention, in addition to the existing authentication method for authenticating an ATM user, the user's cash card and the authentication code is obtained by the computer of the financial institution by inputting the first password. Authentication with a “disposable password” using a mobile phone, authentication with a “2ND password”, and authentication with a “blank mail”, while ensuring high security, low equipment costs and troublesome operations on the part of the user There is an effect to make it unnecessary.

(Embodiment 1)
(A) System Configuration FIG. 1 shows a system in which the personal authentication method of the present invention is applied to a bank ATM service. The existing ATM service system is equipped with an existing computer 1 as a host computer on the bank side and a database 2 for storing customer deposit data, personal identification number, etc., and an ATM 3 is installed on the store side. The host computer 1 can be connected online via a communication network, and a user inputs / operates a cash card and a personal identification number in the ATM 3 to enable authentication and automatic cash payment.
In this embodiment, a personal authentication service system with improved security is added to such an existing ATM service system. In this personal authentication service system, a password database 11 for temporarily registering a one-time password is installed on the bank side, and a personal authentication service computer 12 and a customer address registration database 13 are installed. The database 11 is not limited to being installed on the bank side, but may be installed on the computer 12 side and the data transferred to the computer 1 side.
The computer 12 constructs a personal identification number allocation function and a mobile mail distribution function for executing personal authentication processing with hardware and software using its resources, and one-time password registration in the database 11 and personal data from the database 2 Acquire and register the customer address with the database 13 and perform verification. The computer 12 and the database 13 can be installed in a newly installed service center or in a bank.

A personal authentication method based on the system configuration as described above will be described. The user obtains personal authentication using a personal mobile phone in addition to the cash card. The user registers the address of the mobile phone in the database 13 through the computer 12. This address registration is applied at the bank window, and its management and operation is performed on the computer 12 side acquired via the database 2.
When the user receives automatic payment using ATM, the user inserts a cash card into ATM 3 and inputs the first password. On the computer system side, the host computer 1 compares the first password with the registration number in the database 2 and if it matches, the host computer 1 accesses the password allocation function of the computer 12. The computer 12 temporarily registers the disposable password assigned by this function in the database 11 and sends it to the user's mobile phone by e-mail.

On the other hand, the ATM 3 operated by the user is switched to a screen for inputting the second password. The user inputs the second password sent by e-mail to the mobile phone. This input is sent to the computer 1 and collated with the personal identification number temporarily registered in the database 11, and when it matches, the ATM 3 is shifted to a cash withdrawal amount input screen or the like. As with the system, automatic payment processing by the user can be continued.
Note that the second password is equivalent to a general one-time password, prohibiting the user from using it twice or more, and can greatly improve the security against card forgery.
In addition, the user has personal authentication with both a cash card and a mobile phone, and can securely protect against forgery of the cash card. In addition, the user only has to enter the password for the second time and read the password for the second time from the screen of the mobile phone, which can greatly reduce the burden on the user compared to the conventional biometric authentication method and simplify the authentication process. Processing time can be shortened.

(B) Registration process of personal authentication service Fig. 2 (a) shows the case of bank counter proxy processing. The user goes to the bank counter, applies for documents, and confirms the identity of the mobile phone number to be registered. Apply. When this confirmation is obtained, the computer 12 performs a service center registration substitute process via the bank side computer 1, the computer 12 connects to an IDC (Internet Data Center) 14, and registers personal information by online input. When the registration is completed, a service registration completion notification mail is sent from the IDC 14 to the user's mobile phone or the like.
FIG. 2B shows the case of personal WEB processing. The user accesses the WEB portal site, makes a service registration request by online input, and receives a service registration completion notification mail via the IDC 14.
Therefore, the computer 12 uses the IDC 14 to register the user, thereby simplifying registration and authentication using the user's mobile phone. Moreover, the security can be improved by using IDC14.

(C) User confirmation process at the time of WEB registration Fig. 3 shows a case where a new service registration is performed. The user inputs the address, designated contact information, bank account number, mobile phone address, etc. Request to IDC14. The IDC 14 verifies the user's name, account number, etc., with the computer 1 of the financial institution, deletes the user data from the database 14A after the personal identification by the computer 1, and registers the user's mobile phone address in the database 14B. And start the service.
FIG. 4 shows a case where the service registration is changed. The user inputs a mobile address by a personal computer (PC) and transmits it to the IDC 14 or transmits a blank mail by a mobile phone to the IDC 14. The IDC 14 collates the mobile phone address registered in the database 14B with the address transmitted from the user, confirms the identity if it matches, and waits for the address change transmission from the user when this confirmation is obtained. . When the old address and the new address are transmitted from the user, the IDC 14 updates the mobile phone address and starts the service.

(D) Cooperation between Bank Side Computer and IDC FIG. 5 shows a personal authentication method by cooperation between the bank side computer 1 and the IDC 14, and the functions of the computer 12 and the database 13 in FIG. For the first password input from the user, the computer 1 confirms the identity with the personal data registered in the existing database 2, and the IDC 14 temporarily registers the disposable password in the new database 11 by this notification, and the disposable password is entered. Send the number to the user's mobile phone by e-mail. After that, when the user inputs the password for the second time, the personal identification is obtained by collating with the disposable password registered in the new database 11, and the database 11 sends a confirmation notification to the database 2, and the user makes a confirmation. Enter automatic payment system.
Thus, by performing personal authentication using the IDC 14, it is possible to simplify the construction of the system and improve security. Further, by operating the existing database 2 and the new database 11 separately, the bank-side computer 1 does not need to directly perform data input or delete processing in real time.

(Embodiment 2)
(A) System Configuration FIG. 6 shows a system in which the personal authentication method of the present invention is applied to a bank ATM service, and parts equivalent to those in FIG.
The existing ATM service system is equipped with a host computer 1 on the bank side and a database 2 for storing customer deposit data, personal identification number, etc., and an ATM 3 is installed on the store side. Online connection is possible via a communication network.
The personal authentication system according to the present embodiment strictly confirms a user using a 2ND password (second password). The personal authentication service computer 12A uses the personal authentication process as a transaction process. When executing personal authentication, the personal authentication service computer 12A acquires personal data from the database 2 on the bank side, registers it in the customer address registration database 13, and An email with a personal address (URL) attached is distributed to the user.

Next, the computer 12A permits the password verification computer 12B to verify the 2ND password for the user in which the transaction has occurred. The computer 12B waits for the 2ND password transmission from the authorized user, and when the 2ND password is input by the user for personal use, it is collated with the 2ND password registered in the password registration database 15. .
Next, the computer 12A notifies the computer 1 of the end of the personal authentication transaction process by collating the 2ND password. The computer 1 on the bank side receives the notification of the completion of the 2ND password verification process from the computer 12A after the basic password registered in the existing system is input from the user, and the automatic payment process by the user is performed. Make it continuable.
Also in this embodiment, the user becomes personal authentication with both a cash card and a mobile phone, and can reliably protect against counterfeit cash card. Furthermore, the operation only requires the input of the basic password and the 2ND password, and the burden on the user can be greatly reduced as compared with the conventional biometric authentication method, and the time until authentication can be shortened.

(B) Registration processing of personal authentication service In this embodiment, registration is performed by the same processing as in FIG. 2, and detailed description thereof is omitted.
(C) Identity Confirmation Processing During WEB Registration FIG. 7 shows a case where service registration is newly performed, and a 2ND password registration database 14C is newly added to FIG. 3, but is the same as address registration.
Further, when changing the registration of the 2ND password, it is the same except that the 2ND password registration is performed instead of the mobile address registration in FIG.
(D) Cooperation between Bank Side Computer and IDC FIG. 8 shows a personal authentication method by cooperation between the bank side computer 1 and the IDC 14, and the functions of the computers 12A and 12B and the database 15 in FIG. Is installed on the bank side.
For the first password input from the user, the computer 1 confirms the identity with the personal data registered in the existing database 2, and with this confirmation, the authentication service flag of the new database 13 is set and notified to the IDC 14. In the IDC 14, the mobile mail automatic transmission function 14 </ b> D transmits a dedicated mail to the user.
In response to this transmission, when the user's cellular phone is accessed and a 2ND password is entered, the 2ND password registered in the database 15 is verified from the personal authentication WEB server 14E, and the user information is sent to the computer 1 on the bank side. Etc., and automatic payment processing by the user is continued.
In this way, system construction is simplified by performing personal authentication using the IDC 14. Further, by operating the existing database 2 and the new database 13 separately, the bank-side computer 1 does not need to manage 2ND passwords or newly add / change personal authentication processing.

(Embodiment 3)
(A) System Configuration FIG. 9 shows a system in which the personal authentication method of the present invention is applied to a bank ATM service, and parts equivalent to those in FIG.
The personal authentication system according to the present embodiment authenticates a user by using an electronic mail transmission / reception function by an SMTP (Simple Mail Transfer Protocol) server and a POP3 (Post Office Protocol) server.
For personal authentication, the SMTP server 16A makes the POP3 server 16B accessible in advance, and refers to the customer address registration database 13 to deliver a blank mail to the user's mobile phone. When the user returns a confirmation blank mail to the POP3 server 16B in response to this blank mail, the POP3 server 16B obtains authentication by collating the user, and the SMTP server 16A terminates the authentication process by the computer on the bank side. Notification to 1 enables automatic cash payment by the user.
Also in this embodiment, the user becomes personal authentication with both a cash card and a mobile phone, and can reliably protect against counterfeit cash card. Furthermore, the operation can be done by returning the basic password and the empty mail distributed from the SMTP server to the POP3 server, which can greatly reduce the burden on the user compared to the conventional biometric authentication method, and the time until authentication. Can be shortened.

(B) Registration processing of personal authentication service In this embodiment, registration is performed by the same processing as in FIG. 2, and detailed description thereof is omitted.
(C) Identity Confirmation Processing During WEB Registration Also in this embodiment, the processing is the same as in FIG. 3 (new) and FIG. 4 (change), and detailed description thereof is omitted.
(D) Cooperation between Bank Side Computer and IDC FIG. 10 shows a personal authentication system by cooperation between the bank side computer 1 and IDC 14, and the functions of the ANTP server 16A and POP3 server 16B in FIG. Is installed on the bank side.
For the first password input from the user, the computer 1 confirms the identity with the personal data registered in the existing database 2, and with this confirmation, the authentication service flag of the new database 13 is set and notified to the IDC 14. The IDC 14 transmits a blank mail to the user by the mobile mail automatic transmission function of the SMTP server 16A.
In response to this transmission, if a blank mail is returned from the user's mobile phone to the POP3 server 16B, the POP3 server 16B transaction and the reply mail are confirmed, the user information is returned to the computer 1 on the bank side, and automatic payment by the user Continue processing.
In this way, system construction is simplified by performing personal authentication using the IDC 14. In addition, by operating the existing database 2 and the new database 13 separately, the bank-side computer 1 does not require password management or new addition / change of personal authentication processing.

1 is a configuration diagram of a personal authentication system in Embodiment 1. FIG. The registration processing procedure figure of a personal authentication service. The user confirmation processing procedure figure at the time of WEB new registration. The user confirmation processing procedure figure at the time of WEB change registration. The authentication processing procedure figure by cooperation of a bank side computer and IDC. The block diagram of the personal authentication system in Embodiment 2. FIG. FIG. 10 is a flowchart of identity verification processing at the time of WEB registration. The authentication processing procedure figure by cooperation of a bank side computer and IDC. The block diagram of the personal authentication system in Embodiment 3. FIG. The authentication processing procedure figure by cooperation of a bank side computer and IDC.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 Existing computer, 2 Database, 3 ATM, 11 Password database, 12 Personal authentication service computer, 13 Customer address registration database, 14 IDC (Internet data center), 15 Password registration database, 16A SMTP server, 16B POP3 server

Claims (8)

Based on the management data recorded on the cash card inserted in the ATM and the password entered by the user when the user uses an ATM (automated teller machine) using the cash card of the financial institution In a personal authentication system that authenticates users with existing computers at financial institutions,
It includes a password database for temporarily registering one-time passwords, a personal authentication service computer, and a customer address registration database.
When a user inserts a cash card into an ATM and is authenticated by the existing computer for the entered first password, the personal authentication service computer temporarily registers the assigned one-time password in the password database. And means for mailing a disposable PIN to the user's mobile phone number registered in the customer address registration database,
When the disposable password sent by e-mail is input as the second password from the ATM operated by the user, the existing computer is temporarily registered in the second password and the password database. A personal authentication system comprising means for collating with a personal identification number and enabling processing using ATM only to be continued only when they coincide. Based on the management data recorded on the cash card inserted in the ATM and the password entered by the user when the user uses an ATM (automated teller machine) using the cash card of the financial institution In a personal authentication system that authenticates users with existing computers at financial institutions,
A personal authentication service computer, a customer address registration database, a password verification computer, and a password registration database;
When the user inserts a cash card into the ATM and is authenticated by the existing computer for the entered first password, the personal authentication service computer uses the personal data of the user to be obtained from the financial institution side. A means for registering in the customer address registration database, delivering a personally attached mail to the user, and allowing the password verification computer to register a 2ND password from the user;
The password verification computer waits for transmission of a 2ND password from an authorized user, and when the 2ND password is entered by a user for personal access, it is verified against the registered password in the password registration database. A personal authentication system comprising means for allowing processing using ATM to be continued only in the case of having been performed. Based on the management data recorded on the cash card inserted in the ATM and the password entered by the user when the user uses an ATM (automated teller machine) using the cash card of the financial institution In a personal authentication system that authenticates users with existing computers at financial institutions,
An SMTP server, a POP3 server, and a customer address registration database;
The SMTP server comprises means for making the POP3 server accessible in advance and delivering a blank e-mail to a user's mobile phone registered in the customer address registration database;
When the user returns a confirmation blank mail to the blank mail distribution, the POP3 server obtains personal authentication by verifying the user's address, and terminates the authentication process through the SMTP server. And a means for enabling the processing using ATM to be continued.   The computer or server added for the personal authentication service of the user is provided with means for performing communication for registration of the personal authentication service, user confirmation at the time of WEB registration, and user authentication via the IDC. The personal authentication system according to any one of claims 1 to 3. Based on the management data recorded on the cash card inserted in the ATM and the password entered by the user when the user uses an ATM (automated teller machine) using the cash card of the financial institution In the personal authentication method of authenticating users with existing computers on the financial institution side,
It includes a password database for temporarily registering one-time passwords, a personal authentication service computer, and a customer address registration database.
When a user inserts a cash card into an ATM and is authenticated by the existing computer for the entered first password, the personal authentication service computer temporarily registers the assigned one-time password in the password database. And e-mailing the disposable password to the user's mobile phone number registered in the customer address registration database,
When the disposable password sent by e-mail is input as the second password from the ATM operated by the user, the existing computer is temporarily registered in the second password and the password database. A personal authentication method comprising a step of collating with a personal identification number and allowing the processing using ATM to be continued only when they match. Based on the management data recorded on the cash card inserted in the ATM and the password entered by the user when the user uses an ATM (automated teller machine) using the cash card of the financial institution In the personal authentication method of authenticating users with existing computers on the financial institution side,
A personal authentication service computer, a customer address registration database, a password verification computer, and a password registration database;
When the user inserts a cash card into the ATM and is authenticated by the existing computer for the entered first password, the personal authentication service computer uses the personal data of the user to be obtained from the financial institution side. Registering in the customer address registration database, delivering a personally attached email to the user, and allowing the password verification computer to register the 2ND password from the user,
The password verification computer waits for transmission of a 2ND password from an authorized user, and when the 2ND password is entered by a user for personal access, it is verified against the registered password in the password registration database. A personal authentication method comprising a step of allowing processing using ATM to be continued only when it has been performed. Based on the management data recorded on the cash card inserted in the ATM and the password entered by the user when the user uses an ATM (automated teller machine) using the cash card of the financial institution In the personal authentication method of authenticating users with existing computers on the financial institution side,
An SMTP server, a POP3 server, and a customer address registration database;
The SMTP server has a step of making the POP3 server accessible in advance and delivering a blank e-mail to a user's mobile phone registered in the customer address registration database;
When the user returns a confirmation blank mail to the blank mail distribution, the POP3 server obtains personal authentication by verifying the user's address, and terminates the authentication process through the SMTP server. A personal authentication method, comprising the step of:   The computer or server added for the personal authentication service of the user has steps of performing registration for personal authentication service, user confirmation at the time of WEB registration, and communication for user authentication via the IDC. The personal authentication method according to claim 5.

Images