JPS60214075A - Personal identification system - Google Patents

Abstract

PURPOSE:To improve the convenience of the operation for personal identification by discriminating whether a password read from a card coincides with a password inputted from a password input means or not to identify a user. CONSTITUTION:After the password setting operation, the personal identifying operation is performed before data input/output. First, it is discriminated whether a card reader set flag is set or not. Since the card reader set flag is reset, the user inputs a password with a key from a keyboard 36. When the password is inputted with the key, this password is stored in an area m4 of a memory 32. It is discriminated whether a password stored in an area m2 coincides with the password stored in the area m4. If they do not coincide with each other, the user inputs a password with the key again. If they coincide with each other, the control advances to the next processing.

Description

DETAILED DESCRIPTION OF THE INVENTION Field of the Invention The present invention relates to a personal authentication system, and more particularly to a system for authenticating an individual using a terminal, for example, in a terminal.

Prior Art Conventionally, when handling special data (such as confidential data or data related to financial transactions) in an online system that has a center and multiple terminals, user authentication is required at the terminal to prevent misuse. The system allows only authorized persons to use the terminal.

By the way, with the recent development of communication technology, various systems have been proposed in which each home is equipped with a terminal and banking transactions and shopping can be carried out at home. It is desirable that the above-mentioned personal authentication be performed in such terminals installed in homes as well to prevent misuse. However, when a terminal is installed at home, there is less opportunity for it to be misused than when the terminal is installed in a public place, so strict personal authentication is not necessary. If personal authentication at home were to be carried out strictly, the operation would become troublesome and lack convenience.

Conversely, if the strictness of personal authentication in public places is made to match that at home, the incidence of abuse will increase, which is a problem.

Purpose of the Invention This invention provides a terminal device at home and a terminal device in public places.
The purpose is to provide a personal authentication system in which the severity of personal authentication differs depending on the terminal device.

Structure and Effects of the Invention To summarize, the present invention divides terminals connected to a center into a first group and a second group, and sets a password in advance for the terminals of the first group. The user is authenticated based on whether the password entered by the password input means matches a preset password, while the second group of terminals allows users to use cards with prerecorded passwords. The user is authenticated depending on whether the password read from the card matches the password input from the password input means.

According to the present invention, the second group of terminals has a higher level of personal authentication rigor than the first group of terminals in proportion to the number of cards used. Therefore, in the first group of terminals, the operation for personal authentication is simplified and convenience can be improved.

On the other hand, the second group of terminals can improve the effectiveness of preventing abuse.

Hereinafter, this invention will be described in more detail with reference to embodiments shown in the drawings.

DESCRIPTION OF EMBODIMENTS FIGS. 1 and 2 are schematic block diagrams showing an embodiment of the present invention. In particular, FIG. 1 shows a first group of terminals, and FIG. 2 shows a second group of terminals. Show the machine.

First, the first group of terminals shown in FIG. 1 will be explained. This terminal is installed in a place, such as a home, where personal authentication is not required to be very strict. In the figure, a memory 12 and a transmission device 13 are connected to a CPU 11. The memory 12 is a CPU
It stores 11 operating programs and various data. The transmission device 13 is connected to a center (not shown) and has a CP
Performs data transmission between LJll and the center. Also,
The display unit 1 is connected to the CPU 11 via the interface 14.
5 and a keyboard 16 are connected.

The keyboard 16 is used to input passwords and other various data.

Next, the second group of terminals will be explained with reference to FIG. This second group of terminals is! They are installed in places where there are many opportunities for terminal devices to be misused, such as public places. In the figure, CPtJ 21 includes memories 22. A transmission device 23 is connected, and the transmission device 23 is connected to a center (not shown). Further, a display 25 and a keyboard 26 are connected to the CPU 21 via an interface 24 . The configuration up to this point is the same as the terminal shown in FIG. In general, a card reader 27 is connected to the CPU 2.1 via an interface 24.

This card reader 27 is for reading recorded data from a so-called cash card or credit card. It is assumed that a password is recorded in advance on the card used in this embodiment.

FIGS. 3A and 3B are flowcharts showing part of the operating program of CPLJll in the first group of terminals shown in FIG. FIG. 4 is a flowchart showing a part of the operating program of the CPU 21 of the second group of terminals shown in FIG. Hereinafter, the operation of each terminal will be described with reference to FIGS. 3A to 4.

First, the operation of the first group of terminals shown in FIG. 1 will be explained. For the first group of terminals, a password must be set in advance. This password setting operation is shown in FIG. 3A.

That is, the password is entered manually from the keyboard 16. This key manually entered password is stored in memory 1
2 is stored. This completes the password setting. Note that a dip switch for setting a password may be provided on the circuit board inside the terminal, and the password may be set by operating this dip switch.

Next, the operation when personal authentication is performed using the first group of terminals shown in FIG. 1 will be described. This operation is illustrated in Figure 3B. First, a password is entered manually from the keyboard 16. Subsequently, it is determined whether or not the password preset in the memory 12 matches the password entered manually. If they do not match, enter the password again. On the other hand, if the passwords match, you can proceed to the next process. in this way,
If the passwords do not match, you will not be able to proceed to the next process and will be prohibited from using the terminal.

Next, referring to FIG. 4, the personal authentication operation of the second group of terminals shown in FIG. 2 will be explained. First, a card (not shown) (such as a cash card or credit card) is inserted into the cart reader 27.

In response, the card reader 27 reads the data recorded on the card. This read data is stored in the memory 22 by the CPU 21. Subsequently, a password is entered from the keyboard 26.

Next, it is determined whether the password in the card data stored in the memory 22 matches the password entered manually. If they do not match, enter the password again.

On the other hand, if the passwords match, you can proceed to the next process. In this way, in the second group of terminals,
The terminal can only be used when the card is inserted and the password entered manually matches the password recorded on the card.

Therefore, since the second group of terminals requires the use of a card, the level of personal authentication is greater than that of the first group of terminals.

In the embodiment described above, the first group of terminals and the second
Although different terminals are used for each group, one type of terminal may be used for both the first group and the second group.

FIG. 5 is a schematic block diagram showing an embodiment in which one terminal can be used as both the first group of terminals and the second group of terminals as described above. In the figure,
A memory 32 and a transmission device 33 are connected to the CPtJ31. The transmission device @33 is connected to a center (not shown). Further, a display 35J5 and a keyboard 36 are connected to the CPU 31 via an interface 34. The grooves up to this point are similar to those of the terminal shown in FIG.

Furthermore, a card reader 37 is detachably connected to the interface 34.

FIG. 6 is an illustrative diagram showing a part of the storage area of the memory 32 shown in FIG.

In the figure, the memory 32 includes areas +n1 to +m4. In area m1, card reader 37 is connected to interface 3.
This is used as an area for storing a flag indicating whether or not a card reader is attached to the card reader 4, that is, a card reader attachment flag. Area m2 is used as an area for storing a preset password or a password included in card data. Area m3 is used as an area for storing data read from the card by the card reader 37 (hereinafter referred to as J-card data). Area ll1
4 is used as an area for storing a password entered manually from the keyboard 36.

FIG. 7 is a flowchart for explaining the personal authentication operation of the CP (J31) shown in FIG. 5. Hereinafter, the operation of the embodiment shown in FIG. 5 will be explained with reference to FIG.

First, the operation when the terminal of this embodiment is used as the first group of terminals will be explained. In this case, the card reader 37 is removed from the interface 34. As a result, the card reader attachment flag stored in area m1 is reset. Additionally, a password is set in advance. This password setting operation is almost the same as the operation shown in FIG. 3A described above, and the password entered manually at this time is stored in area m2 of the memory 32.

After the password setting operation, the personal authentication operation shown in FIG. 7 is performed before data input/output. First, it is determined whether or not the card reader attachment flag is set. As mentioned above, since the card reader attachment flag has been reset, the password is then input manually from the keyboard 36. When the password is entered, the memory 3
The password is stored in area 4 of 2. continue,
It is determined whether the password stored in area m2 and the password stored in area m4 match. If they do not match, enter the password again. On the other hand, if the passwords match, you can proceed to the next process.

Next, the operation when the terminal shown in FIG. 5 is used as the second group of terminals will be explained. In this case, a card reader 37 is connected to the interface 34. As a result, the card reader installation flag is set. Thereafter, before data input/output is performed, the personal authentication operation shown in FIG. 7 is performed.

First, it is determined whether the card reader attachment flag is set. As mentioned above, since the card reader installation flag is set to Sera 1~, then the card reader 3 is installed.
Have 7 insert the card. When the card is inserted, the card reader 37 reads the data recorded on the card.

This read card data is stored in area m of the memory 32.
I remember it in 3.

Next, the password is searched from the card data stored in 197m3, and this password is
will be forwarded to. Next, enter the password manually. When the password is entered manually, it is determined whether the password stored in area m2 and the password stored in area m4 match. If they do not match, you will be prompted to enter the password again. On the other hand, if the passwords match, you can proceed to the next process.

In the above-described embodiment, the personal authentication operation is switched according to the attachment and detachment of the card reader 37, but a switch for switching the personal authentication operation is provided, and the personal authentication operation is switched according to the operation of this switch. You can do it like this.

[Brief explanation of the drawing]

1 and 2 are schematic block diagrams of terminals showing one embodiment of the present invention, in particular, FIG. 1 shows the first group of terminals, and FIG. 2 shows the second group of terminals. shows. 3A and 3B are flowcharts for explaining the operation of the CPU II shown in FIG. 1. FIG. 4 is not shown in FIG. 2 and is for explaining the operation of the CPU 21.
It is diyat. FIG. 5 is a schematic block diagram showing another embodiment of the invention. Figure 6 shows the memory 3 in Figure 5.
FIG. 2 is an illustrative diagram showing a part of the storage area of No. 2; FIG. 7 is a flow chart for explaining the operation of the CPU 31, which is not shown in FIG. In the figure, 11, 21 #Jl;hi 31 LtCP
U. 12. 22. 32 is a memory, 13. 23 J3 and 33 are transmission devices, 16. 26 and 36 are keyboards, and 27 and 37 are card readers.・′− Agent Patent Attorney Hisabe Fukami□゛−1□・−＋
i-4 (and 2 others) Heart 3A Diagram Marriage, 3B Centroid 4 Diagram 2 Shakuuchi Ryosho ~ Advance 5 Centroid 6 Diagram

Claims (1)

[Scope of Claims] A system comprising a first group of terminals and a second group of terminals, in which each terminal authenticates a user, the first group of terminals having a password in advance. a password setting means in which a password is set; a password input means for inputting a password; and a password input means for inputting a password, and the use of the terminal is restricted only when the password input by the password input means and the password set in the password setting means match. the second group of terminals includes: a card on which a password is recorded in advance; a reading means for reading the password from the card; a password inputting means for inputting the password; and the password inputting means. A personal authentication system comprising means for permitting use of the terminal only when a password inputted by the means and a password read by the reading means match.