WO2005057477A1

WO2005057477A1 - Network system, medium, market survey system

Info

Publication number: WO2005057477A1
Application number: PCT/JP2004/017727
Authority: WO
Inventors: Wataru Yamamoto
Original assignee: Wataru Yamamoto
Priority date: 2003-12-08
Filing date: 2004-11-29
Publication date: 2005-06-23
Also published as: JP4284551B2; JPWO2005057477A1

Abstract

A network system includes: an identifier having information for authentication which is disclosed; particular information for identifying the identifier; true-false judgment means for judging true-false of the identifier by using a different method; a terminal sector having an information processing device; an integration sector having an information processing device; and groups organizing the information processing device of the terminal sector and the information processing device of the integrating sector. In the groups, the information processing device of the terminal sector has an observation unit for observing the identifier and collecting information. The information processing device of the integrating sector has storage means for storing in advance data on the identifier while correlating it to the particular information. The true-false judgment means judges true-false of the identifier according to the information on the identifier observed by the observation unit and the data on the identifier stored in the integrating sector. A plurality of groups are provided.

Description

Network systems, media, market research systems.

Technical field

The present invention relates to a medium for property authentication (such as an ID card) in personal authentication, and more particularly to a medium for property authentication that can be used in a plurality of different authenticity determination systems. Further, the present invention relates to an authenticity determination system, a network system and an information transmission system employing the same.

Background art

[0002] At present, ID cards (including credit cards and point cards) held by consumers are issued by each business operator, so in addition to credit cards, there are many cards such as membership cards at retail stores. I was not able to receive services such as coupons. Therefore, as an attempt to integrate ID cards required for each authentication system into one card, a multi-application in which an IC card equipped with an IC chip is provided with a plurality of OSs is known.

However, since this IC card proves the authenticity of the IC card by the data stored in the IC, it is necessary to protect this data, and "manage access rights to data in the internal memory", "access Many techniques are required, such as checking the legitimacy of the user, and verifying the legitimacy of the device or software to be accessed, such as increasing the memory capacity of the IC chip mounted on the IC card, The development and manufacture of the IC card itself, including the development of programs stored on the card, required significant costs.

In the past, IC cards used to prove the authenticity of the card itself using stored data, and prescribed a method for accessing the stored data, and this method of access was not disclosed to outsiders. Therefore, it was impossible for anyone to freely use the information stored on the IC card to prove the authenticity.

Under such circumstances, ID cards that can be used in common among authentication systems independently constructed by multiple operators have been powerless.

In addition, the media (identifier) used for authenticity determination, such as commonly used ID cards, is managed. There were no institutions to manage.

Patent Document 1: JP-A-9-305697

Patent Document 2: JP 2002-63555

Patent Document 3: JP-A-11-218416

Patent Document 4: JP-A-10-240884

Disclosure of the invention

Problems to be solved by the invention

[0003] In view of the above circumstances, the present invention can be used in common between different authentication systems by using identifiers that can be authenticated by groups each having different authentication units and that disclose information proving authenticity. The main issues are to provide an ID card (medium) with a unique identifier and a network system with an authentication system to manage the identifier. In addition, the cost of the ID card used for the network is low, and the security of the security is high.

In addition, compared to a network system that uses a conventional IC card, which costs more to manage access rights when the terminal accesses the IC card and develop an internal OS, the ID itself has a simpler structure and a lower cost. The main task is to reduce the cost of the entire network system by using cards. As a further subject, we propose a network system described later that collectively manages the suspension and abolition of the effect due to the loss of the ID card. The present invention relates to a medium (such as an ID card) for property authentication in personal authentication, and in particular, for example, a credit card and a point of a nearby store by an identifier of a medium for authenticity judgment of an authenticity judgment system of a different business operator. The present invention relates to an authenticity determination system in which a card shares the same identifier, a network system and an information transmission system employing the same.

Means for solving the problem

[0004] In the first invention, the network system includes: an identifier in which information for proving authenticity is published;

Identification information for identifying the identifier, authenticity determination means capable of determining the authenticity of the identifier by a different method, a terminal sector including the information processing device, and an information processing device. An information processing device of the terminal sector and an information processing device of the terminal sector. The information processing device of the terminal sector in the group observes the identifier and obtains information. The information processing device of the supervising sector has a storage unit for storing the data of the identifier in advance in association with the specific information, and the information of the identifier observed by the observation unit and the information The information processing device of the supervising sector is provided with the authenticity determining means for determining the authenticity of the identifier based on the data of the identifier stored in the information processing device, and it is assumed that there are a plurality of groups.

[0005] A second invention is based on the network system of the first invention, wherein the identifier is provided with a physical feature using accidental property.

In a third aspect, in the network system according to the first aspect, the information processing device of the terminal sector and the information processing device of the supervising sector belonging to the same group are stored in advance in the information processing device of the supervising sector. Collecting the data of the identifier and the information processing device of the terminal sector necessary for the authenticity determination of the identifier; and transmitting the information of the identifier collected by the information processing device of the terminal sector to the supervising sector as a data group. A determining step of determining authenticity based on the data group transmitted from the information processing apparatus of the supervising sector and the data of the identifier stored in advance, and a step of determining `` true '' in the determining step. And transmitting the identifier determination result to the information processing device of the terminal sector that has transmitted the identifier information.

[0006] A fourth invention provides a network system according to the first invention, wherein the data group includes an identifier number (T) and identifier code data (F) for authenticity determination means for determining the authenticity of the identifier. Encoding method data (a), the information processing device of the supervising sector stores identifier data (Ta) related to the identifier number (T) of the data group, and stores the code from the identifier data (Ta). Means for generating dummy data (f) based on the conversion method data (a), and verifying the authenticity by collating the dummy data (f) with the identifier code data (F).

A fifth invention is the network system according to the first invention, wherein the identifier-related information, which is information associated with the specific information, and the information processing device of the supervising sector store the identifier-related information. It has a storage means and an information supplementing means for supplementing the identifier related information. The medium of the sixth invention is based on the network system of the first invention, and has an identifier provided with a physical characteristic by using accident.

According to a seventh aspect of the present invention, in the first network system, the medium includes the identifier and a base material to which the identifier is attached.

The medium according to an eighth aspect of the present invention is the medium according to the first network system, wherein the personal information of the owner of the identifier stored in the information processing device of the supervising sector and the personal information registered when the medium having the identifier is issued. And a level display for displaying the disclosure level of the above.

A ninth invention is directed to the network system according to the first invention, wherein the supervising sector includes a management sector having an information processing device and a terminal management sector having an information processing device, and organizes the information processing device. An information processing device of the terminal management sector, wherein the information processing device of the terminal management sector can be mutually authenticated with the information processing device of the management sector; It is said that it is knitted from.

In a tenth aspect, in the network system according to the ninth aspect, the identifier is provided with a physical feature using accidentalness.

An eleventh invention is directed to the network system according to the ninth invention, wherein the personal terminal of the owner of the identifier and a step of performing personal authentication when the information processing device of the management sector is accessed from the customer terminal, When the owner of the identifier accesses the information processing device of the terminal management sector through the information processing device of the management sector after being authenticated, the information processing device of the management sector and the information processing device of the terminal management sector are A means is provided for displaying information stored in the information processing device of the terminal management sector on the customer terminal, connected by mutual authentication.

[0010] In a twelfth aspect, in the network system according to the ninth aspect, the information processing device of the terminal sector and the information processing device of the management sector belonging to the same group belong to the same group. Collecting the data of the identifier stored in advance in the device, the information processing device of the terminal sector collecting information necessary for authenticity determination of the identifier, and the information of the identifier collected by the information processing device of the terminal sector. Transmitting to the information processing device of the management sector as a group; A judging step of judging authenticity based on the obtained data group and the data of the pre-stored identifier, and an information processing device of a terminal sector which has transmitted the information of the identifier when judged as "true" in the judging step. And transmitting the determination result of the identifier.

A thirteenth invention is the network system according to the twelfth invention, wherein the information processing device of the management sector includes personal information of an owner of the identifier,

If the result of the determination is “true”, the information processing device of the terminal management sector belonging to the same group as the information processing device of the terminal sector that has collected the information of the identifier is provided with the information processing device capability of the management sector. The personal information is to be transmitted.

[0012] A fourteenth invention provides a network system according to the twelfth invention, wherein the data group includes an identifier number (T) and identifier code data (F) for authenticity determination means for determining the authenticity of the identifier. And the information processing device of the management sector stores identifier data (Ta) related to the identifier number (T) of the data group, and stores the identifier data (Ta) from the identifier data (Ta). Means for generating dummy data (f) based on the encoding method data (a), and verifying the authenticity by collating the dummy data (f) with the identifier code data (F).

A fifteenth invention is the network system according to the ninth invention, wherein the identifier-related information, which is information associated with the specific information, and the information processing device of the management sector store the identifier-related information. It has storage means and information supplementing means for supplementing the identifier related information.

In a sixteenth aspect based on the network system of the fifteenth aspect, the financial institution having a settlement function and the identifier-related information are approval data from the financial institution.

According to a seventeenth invention, in the network system according to the ninth invention, in the information processing device of the terminal sector belonging to the same group and the information processing device of the terminal management sector, the information processing device of the terminal management sector Has a storage means for storing the identifier-related information, and information supplementing means for supplementing the identifier-related information,

The information supplementing means, when the point information is added to the information processing device of the terminal sector in association with the identifier number, the information is added to the information processing device of the terminal management sector. Point information is stored.

An eighteenth invention is directed to the network system according to the seventeenth invention, wherein the customer terminal of the owner of the identifier and access from the customer terminal to access the identifier-related information stored in the information processing device of the terminal management sector. Means, and display means for displaying the identifier-related information stored in the terminal management sector on the customer terminal by the access means.

[0015] A nineteenth invention is a network system according to the ninth invention, wherein the recording means for recording the status data of the identifier in the information processing device in the management sector; An access means for accessing the situation data and a situation data changing means for changing the situation data by the owner of the identifier by the access means are provided.

According to a twentieth aspect, in the network system according to the nineteenth aspect, when the status data is changed by the status data changing means, all of the status data recorded in the supervising sector is changed. It has updating means.

[0016] The medium of a twenty-first invention is characterized in that, in the network system of the ninth invention, the medium is provided with the identifier to which a physical feature is added by using accidental characteristics.

According to a twenty-second aspect, in the network system according to the ninth aspect, the medium includes the identifier and a base material to which the identifier is attached.

[0018] A medium according to a twenty-third aspect is the network system according to the ninth aspect, wherein the medium issues the personal information of the owner of the identifier stored in the information processing device of the management section and the medium including the identifier. And a level display for displaying a disclosure level of the personal information registered at that time.

[0019] The market research system according to a twenty-fourth aspect is the network system according to the ninth aspect, wherein the use information when the identifier is used in the terminal sector and the use information are stored in the terminal management sector. A use information recording means for recording the information in the information processing apparatus, and the information processing apparatus in the terminal management sector can investigate the dynamics of the owner of the identifier from the use information.

[0020] An event information transmission system according to a twenty-fifth aspect is the event information transmission system according to the ninth aspect. In the system, a retail store provided with the information processing device of the terminal sector, a customer center provided with the information processing device of the terminal management sector, an e-mail-enabled shipment, and the contents of the event were recorded. An event generating instruction step for transmitting the event instruction information from the information processing device at the retail store to the information processing device at the customer center; and The information processing device at the center refers to an event information processing step of referring to the stored identifier number using the retail store and transmitting the e-mail to the mail address of the owner of the identifier of the identifier number. .

[0021] In the network system according to the second invention, the identifier observing unit according to a twenty-sixth invention is characterized in that the information processing device of the terminal sector observes the identifier, It is assumed that the system includes output identifier analysis data and a first information processing unit for storing the identifier analysis data, and is connected to the first information processing unit of the information processing device of the terminal sector.

The invention's effect

[0022] In the network system of the first invention, an identifier in which information for proving authenticity is disclosed,

Identification information for identifying the identifier, authenticity determination means capable of determining the authenticity of the identifier by a different method, a terminal sector including an information processing device, a supervising sector including an information processing device, The information processing apparatus of the terminal sector includes an observation unit that observes the identifier and collects information in the group. The information processing device of the supervising sector has a storage unit for preliminarily storing the data of the identifier in association with the specific information, and the information processing device of the supervising sector and the information of the identifier observed by the observation unit are stored in the information processing device of the supervising sector. The apparatus is provided with the authenticity judging means for judging the authenticity of the identifier based on the stored data of the identifier.

In the present invention, since information for proving the authenticity of the identifier is disclosed, the group in which the information processing devices of the terminal sector and the supervising sector are organized is different from each other (observation method 'code method'). It is possible to develop an authenticity judgment means for judging an identifier with The Therefore, it is possible for a group operated by a company, a business or an organization with a different capital to participate in the network system of the present invention by employing a unique identifier authenticity determination means.

Further, for example, in the case where an identifier is determined by a single authenticity determining unit as in the related art, if the method of the authenticity determining unit is decrypted, the security of the entire network is threatened. On the other hand, in the network of the present invention, since the authentication means can be different for each group, even if the method of the authentication means of a certain group is decrypted, the problem does not spread to other groups. Despite using it, each group has a great effect! If you can establish security independence!

Furthermore, since identifiers can be used in common by each group, the number of issued identifiers can be significantly reduced as compared with the case where each group issues an identifier, and the entire network can be used. An excellent effect that the cost can be reduced can be obtained. On the other hand, a person who needs an identifier needs to have a plurality of identifiers issued by each group, but the network of the present invention can be used by a plurality of groups if one identifier is possessed. The effect is also obtained.

[0023] In the second invention, in the network system of the first invention, since the identifier is provided with a physical feature using accidental property, a highly secure identifier that is difficult to duplicate is provided. Because it can be obtained, it is effective to ensure the security of the entire network system.

Also, since each identifier has different characteristics, it is necessary to copy each copy one by one, so it is impossible to produce a large number of copies.

[0024] In a third invention, in the network system of the first invention, in the information processing device of the terminal sector and the information processing device of the control sector belonging to the same group, the information processing device of the control sector Collecting the data of the identifier stored in advance in the terminal sector, and the information processing device of the terminal sector collecting information necessary for authenticating the identifier; and transmitting the information of the identifier collected by the information processing device of the terminal sector to the data. Transmitting to the supervising sector as a group; and transmitting the data transmitted by the information processing device of the supervising sector. A judging step of judging the authenticity based on the group and the data of the identifier stored in advance, and information of the terminal sector which transmitted the information of the identifier when it is judged as “true” in the judging step. When the information of the identifier is collected and transmitted to the supervising sector, the information processing device of the supervising sector of the same group determines the authenticity and transmits the determination result to the information processing device of the terminal sector. Therefore, the information processing device in the terminal sector can confirm the authenticity of the identifier.

[0025] In the fourth invention, in the network system of the third invention, the data group includes an identifier number (T) and identifier code data (F) for authenticity determination means for determining the authenticity of the identifier. And the information processing device of the supervising sector stores identifier data (Ta) related to the identifier number (T) of the data group, and stores the identifier data (Ta) from the identifier data (Ta). A means for generating dummy data (f) based on the encoding method data (a) and the dummy data (f) are compared with the identifier code data (F) to determine the authenticity. Even if the data of the identifier is eavesdropped, there is an excellent effect that the illegal copy of the data can be invalidated by changing the encoding method.

[0026] In a fifth aspect, in the network system according to the first aspect, the identifier-related information, which is information associated with the specific information, and the information processing device of the supervising sector include the identifier-related information. Since the storage means and the information supplementing means for supplementing the identifier related information are provided, related information such as the personal information of the owner and the use history are stored in association with the specific information for specifying the identifier. And can supplement these identifier related information.

[0027] In the sixth to eighth inventions, the medium used in the first network system includes an identifier to which a physical feature is added by using chance, and the identifier and the identification A substrate to which the child is attached,

A level display for displaying the personal information of the owner of the identifier stored in the information processing device of the supervising sector, a disclosure level of the personal information registered when the medium having the identifier is issued, and the level display. Therefore, in the sixth invention, since a medium that is difficult to copy is obtained, the security of the medium is enhanced, and the entire network system is further improved. Safety can be ensured.

Further, in the seventh invention, since the identifier is attached to the base material, it is possible to form the medium by attaching the identifier to a base material of various shapes such as a card or a stick shape, and in the eighth invention, In addition, the disclosure level of the personal information of the media owner can be displayed.

In a ninth aspect, in the network system according to the first aspect, the supervising sector includes a management sector having an information processing device and a terminal management sector having an information processing device,

An information processing device of the terminal management sector that can mutually authenticate with the information processing device of the management sector; and a plurality of terminal sectors that can mutually authenticate with the information processing device of the terminal management sector. Since the information processing device is composed of a plurality of information processing devices, the information processing device of a plurality of terminal management sectors that mutually authenticates with the information processing device of the management sector, and the plurality of information processing devices that mutually authenticate with the information processing device of the terminal management sector. A pyramid-type network system that forms a group can be configured with the information processing devices in the terminal sector. In addition, the information processing device in the management sector manages specific information for specifying the identifier, and the authenticity of the identifier is verified. By making the determination, the operation efficiency of the entire network system can be improved, and the customer management center and the Their like are participating Furanchai's headquarters makes it possible to manage the terminal sector, respectively.

[0029] In a tenth aspect, in the network system according to the ninth aspect, since the identifier is provided with a physical feature using contingency, a highly secure identifier that is difficult to duplicate is provided. Because it can be obtained, it is effective to ensure the security of the entire network system.

[0030] In an eleventh invention, in the network system according to the ninth invention, a customer terminal of an owner of the identifier is provided,

Authenticating the user when accessing the information processing device of the management sector from the customer terminal;

When the owner of the identifier accesses the information processing device of the terminal management sector via the information processing device of the management sector after the identity authentication, the information of the management sector is obtained. Since the processing device and the information processing device of the terminal management sector are mutually authenticated and connected to each other and have means for displaying the information stored in the information processing device of the terminal management sector on the customer terminal, Access to the information processing devices in the terminal management sector, and if the user is authenticated, cross-authentication is established with the information processing device in the terminal management sector, so that access is made to the information processing devices in multiple terminal management sectors. Even if it does, it is possible to obtain the effect of increasing convenience without having to authenticate each time.

[0031] In a twelfth invention, in the network system according to the ninth invention, in the information processing device of the terminal sector and the information processing device of the management sector belonging to the same group, the information processing device of the management sector Collecting the data of the identifier stored in advance in the terminal sector and the information required by the information processing device of the terminal sector to determine the authenticity of the identifier; and transmitting the information of the identifier collected by the information processing device of the terminal sector to the data. A step of transmitting to the information processing device of the management sector as a group; a determining step of determining authenticity by the data group transmitted from the information processing device of the management sector and the data of the previously stored identifier; If it is determined to be "true" in the determination step, the identifier determination result is transmitted to the information processing device of the terminal sector that transmitted the identifier information. With this step, when the information of the identifier is collected and transmitted to the management sector, the authenticity is determined and the result of the determination can be transmitted to the information processing device of the terminal sector. Thus, the effect that the authenticity of the data can be confirmed can be obtained.

[0032] In a thirteenth aspect, in the network system according to the twelfth aspect, the information processing device of the management sector includes personal information of an owner of the identifier, and is determined as "true" in the determination step. The personal information is transmitted from the information processing device of the management sector to the information processing device of the terminal management sector belonging to the same group as the information processing device of the terminal sector that has collected the information of the identifier. Therefore, since the personal information of the identifier owner is not transmitted to the terminal sector, the privacy of the identifier owner is protected, which contributes to crime prevention and the terminal management is performed by the personal information transmitted to the terminal management sector. This has the effect that the sector can provide services such as transmitting information to the identifier owner.

In the fourteenth invention, the authenticity of the identifier of the network system of the twelfth invention is determined. According to the authenticity determination means, the data group has an identifier number (T), identifier code data (F), and encoding method data (a), and the information processing device of the management sector includes: Means for storing identifier data (Ta) related to an identifier number (T), generating dummy data (f) from the identifier data (Ta) by the encoding method data (a), Since the authenticity is determined by collating with the identifier code data (F), for example, when the information processing device of the management sector and the information processing device of the terminal management sector are interconnected and the data of the identifier is intercepted during communication. Even in this case, there is an excellent effect that invalid data copying can be invalidated by changing the encoding method.

[0033] In a fifteenth invention, in the network system according to the ninth invention, the identifier-related information, which is information associated with the specific information, and the information processing device of the management sector include the identifier-related information. Since the information processing device of the management sector has the storage means for storing the information and the information supplementing means for supplementing the identifier-related information, the information processing apparatus of the management sector stores the identifier-related information, which is the information associated with the specific information specifying the identifier. In addition, it is possible to store information such as the owner's personal information and usage history, and it is possible to supplement these identifier related information.

In the sixteenth aspect, in the network system according to the fifteenth aspect, the financial institution having a settlement function and the identifier-related information are approval data from the financial institution. With the approval of the institution, it is possible to manage information on whether or not it is powerful.

[0034] In a seventeenth invention, in the network system according to the ninth invention, in the information processing device of the terminal sector belonging to the same group and the information processing device of the terminal management sector, the information processing device of the terminal management sector Has information storage means for storing the identifier-related information, and information supplementation means for supplementing the identifier-related information, wherein the information supplementation means associates the information processing device of the terminal sector with the identifier number. When the point information is added, the point information can be stored in the information processing device of the terminal management sector.

In an eighteenth aspect based on the network system of the seventeenth aspect,

Customer terminal of the owner of the identifier, and information of the terminal management sector from the customer terminal An access means for accessing the identifier-related information stored in the processing device; and a display means for causing the customer terminal to display the identifier-related information stored in the terminal management sector by the access means. It is possible to enhance the convenience of the person.

[0035] In a nineteenth aspect based on the network system of the ninth aspect, in the network system according to the ninth aspect, recording means for recording the status data of the identifier in an information processing device in the management sector; Since there is provided access means for accessing data and status data change means for changing the status data by the owner of the identifier by the access means, when the identifier is lost, the identifier owner can manage the customer terminal card. The information processing device in the sector can be accessed and the status data of the identifier can be invalidated, thereby preventing unauthorized use of the identifier in the management sector.

[0036] In a twentieth aspect, in the network system according to the nineteenth aspect, when the status data is changed by the status data changing means, all of the status data recorded in the supervising sector is changed. With the data updating means, even if there are a plurality of information processing devices in the registered supervised sector, all status data can be invalidated collectively, which is convenient for the owner of the identifier. This has the effect of preventing unauthorized use of the identifier.

[0037] The medium of the twenty-first invention is characterized in that, in the network system of the ninth invention, the medium provided with the identifier to which physical characteristics are imparted by using chance is provided. Therefore, there is an effect that the security of the medium is high and the security of the entire network system can be secured.

Medium.

[0038] The medium according to a twenty-second aspect is the network system according to the ninth aspect, wherein the identifier and the base material to which the identifier is attached are provided. To form a medium.

[0039] A medium according to a twenty-third aspect of the present invention is the network system according to the ninth aspect, in which the personal information of the owner of the identifier stored in the information processing device in the management section and the medium having the identifier are issued. Level display to indicate the disclosure level of the personal information registered at the time And the level display, the disclosure level of the personal information of the owner of the medium can be displayed.

[0040] The market research system according to a twenty-fourth invention is the network system according to claim 9, wherein the identifier is used by the terminal management sector when the identifier is used in the terminal sector. Means for recording information in the information processing device of the terminal management sector, and the information processing device of the terminal management sector makes it possible to investigate the dynamics of the owner of the identifier from the usage information. The customer center and franchise headquarters of the U.S.A. are able to investigate the dynamics of the media owner based on the usage information using the identifier, so that customers who visit retail stores and franchisees in the terminal sector that they manage can use the This has the effect of enabling services such as store marketing.

[0041] In the event information transmission system according to a twenty-fifth aspect, in the network system according to the ninth aspect, the retail store including the information processing device of the terminal sector and the information processing device of the terminal management sector are provided. A customer center provided, an e-mail-capable shipment, and event instruction information in which the content of the event is recorded. The information processing device of the retail store sends the event to the information processing device of the customer center. The information processing apparatus of the customer center refers to the stored identifier number using the retail store based on the event generation instruction step for transmitting the instruction information and the event information. An event information processing step of sending the e-mail to the e-mail address of the owner of this identifier number is provided, so that retail stores in the terminal sector can When the event instruction information that records the content of an event such as end-of-sale is transmitted to the information processing device in the terminal management sector of the same group, the information of the identifier owner of the identifier managed by the information processing device in the terminal management sector is transmitted. The effect of enabling the contents of the event to be transmitted to the mail address is obtained.

[0042] In the network system according to claim 2, the identifier observing unit according to a twenty-sixth invention is characterized in that the information processing device of the terminal sector includes an observing unit that observes the identifier and a monitoring unit that observes the identifier. An identifier analysis data to be output; and a first information processing unit for storing the identifier analysis data, the first information processing unit being connected to a first information processing unit of the information processing device of the terminal sector. Therefore, it is possible to observe an identifier to which a physical feature is assigned by using the chance.

BEST MODE FOR CARRYING OUT THE INVENTION

[0043] The present invention is a network system for performing personal authentication for identifying a person by possession, and by using a supervising sector described later, registration and abolition of an identifier used in a group in which a plurality of authentication methods are different are used. It is possible to perform it all at once.

Example

[0044] According to the configuration of the description of the embodiment of the present invention.

The description of this embodiment can be roughly divided into chapters.

Chapter 1, explanation of terms related to identifiers,

Chapter 2, a description of the analysis and encoding of the identifier,

Chapter 3, a description of an authentication system for determining the authenticity of the identifier, Chapter 4, a description of a network system equipped with a card authentication system, Chapter 5, an issuance of a card 250 with an identifier.

Chapter 6: Description of the specific card shape with the identifier,

It is.

Hereinafter, this embodiment will be described along the table of contents.

[0045] Chapter 1: Explanation of terms related to identifiers and the like.

First, terms related to the identifier will be described.

1) The identifier is an IC having a means for outputting stored data (information), or an analog chip described later.

2) An analog chip, which is one type of the identifier, has an object to be analyzed, has a planar structure or a three-dimensional structure, and is given a physical feature by using accidentality. Each one has its own unique pattern!

[0046] 3) The object to be analyzed is a figure or a substance (including a magnetic substance) provided with analog information arranged on an IC or an analog chip, and is a plane (two-dimensional) or three-dimensional (three-dimensional). ).

[0047] 4) The element of the analyte is the information stored in the IC, the position of the magnetic material, the magnetic strength, or the shape. , Color, size, position, physical properties, etc.

[0048] 5) The two-dimensional analog chip is an identifier having an object to be analyzed (figure 'substance) having a planar shape.

6) The three-dimensional analog chip means that the identifier has a three-dimensional structure.

The 3D analog chip may be classified as 2D data or 3D data depending on the observation method of the observation unit. In other words, when observing a certain identifier, it is processed as two-dimensional data in the observation unit that uses a normal camera, but it is processed in three-dimensional data in an observation unit such as a stereo camera that can analyze a three-dimensional structure. Classify as data.

[0050] 7) The identifier information is identifier analysis data that is data from an observation unit that observes the identifier.

This is a superordinate concept that includes the concept of (Ka) and the concept of identifier code data in which elements of the analyte are encoded.

[0051] 8) The cut-out point is a point that serves as a reference for a physical position when analyzing an identifier (particularly, an analog chip) and when encoding the identifier. 9) The positioning unit is a mechanism that physically locates the identifier that has a method for specifying the position of the identifier (particularly, an analog chip), or detects the position of the identifier using a photo force blur or the like. Various mechanisms can be adopted in consideration of costs and the like.

[0052] 10) Framing refers to connecting extracted elements with lines according to conditions and drawing a frame figure. In the case of an analog chip having a three-dimensional structure, information on the X axis, the Υ axis, and the Ζ axis is used. FIG. 11) The identification information is information for identifying an identifier, specifically, an identifier number stored in association with the identifier in the identifier database, personal information of the owner, a personal identification number, and the like.

[0053] Regarding the encoding method.

Conventionally, the purpose of encryption is to conceal certain information, to reproduce information before being encrypted by the decryption, and to transmit the encrypted information secretly. On the other hand, the encoding method according to the present invention aims to prove that an identifier having a certain amount of information exists at the place at that time, and the identifier is encoded. When the data is delivered through an information network, the data is decrypted. However, not all information of the identifier is necessarily obtained. In the case where the data obtained by encoding the identifier has all the information of the identifier, even if the data of the identifier distributed on the information network is intercepted, all the information of the original identifier is retained. The effect is that it cannot be reproduced. Furthermore, since the encoding method, which is an algorithm for encoding, can be set in each authentication system (observation method group and encoding method group described later), illegally acquiring data on an information network can be performed. The effect is that it is extremely difficult to perform illegal activities such as “spoofing”.

[0054] Chapter 2: Identifier analysis and encoding

Identifiers will be explained sequentially based on the second chapter below.

Chapter 2 Table of Contents

Section 1: An example of an irregular pattern identifier (analog chip) Example 2: Identifier using an IC that outputs data

The different types of identifiers, the analysis of the identifiers, and the encoding are described below.

[0055] Chapter 2: Section 1: An embodiment of an identifier of an irregular pattern (analog chip) An embodiment related to the analysis and encoding of the identifier 1 is shown below. It will be explained based on.

The feature of the identifier 1 of the present embodiment shown in FIG. 1 is that analytes having various elements are randomly placed on the base 3 by using chance.

[0056] The identifier 1 is a two-dimensional analog chip having a base 3 having a neutral color on which the analyte is placed. The base 3 is divided into a grid of columns XI-X10 and a row Y1-Y6. Is done. On the base 3, the analyzed objects of the irregular shapes 5a-5d, the square shapes 6a-6e, and the circular shapes 7a-7i are arranged. Is shown.

The extraction point 8 of the identifier 1 is defined as the four corners of the identifier, and the four corners of the extraction point force grid and the position of the object to be analyzed are obtained. It should be noted that the cut-out point is not limited to the four corners of the identifier, and may be arbitrarily provided as a cut-out point based on a specific figure or the like. Next, the identifier analysis data of the identifier 1 and an identifier code obtained by encoding the identifier analysis data will be described.

The following table shows examples of conditions for encoding an identifier in the present embodiment.

First, Table 1 shows observation means data for specifying the content of the observation method of the observation unit that observes the identifier, and an example of the content of the observation method.

[Table 1]

[0061] Next, Table 2 shows the contents of an encoding method when the identifier analysis data (Ka) obtained by the observation means is encoded by the information processing device.

[Table 2]

Further, for the identifier code data “F1”-“F6” shown in FIGS. 1 to 6, observation means data (A), identifier analysis data (Ka), and encoding method data (a) Table 3 below shows the relationship. Note that the identifier code data “F1”-“F6” shown in the present embodiment is a diagram for convenience for explaining the variety of authentication methods in the present invention, and is output from a first information processing unit described later. It does not directly represent the identifier code data (F).

[Table 3] Identifier code data Observation means data Identifier analysis data Encoding method data

(F) (A) (Ka) (a)

F1 A1 Kal al

F2 A1 Kal a2 + a4

F3 A1 Kal a3 + a4

F4 A1 Kal a5 -f a7

F5 A1 Kal a2 + a4 ten a7

F6 A1 Kal a3 + a4 + a7

F2 A2 Kbl al

F5 A2 Kbl a4 + a7

F3 A3 Kcl al

F6 A3 cl a4 + a7

The contents of the encoding method shown in the above table will be described based on the identifier code data shown in FIG. 1, FIG. 5, and FIG.

First, the encoding method of the identifier code data “F1” shown in FIG.

In the first stage, the identifier 1 is analyzed. At this time, the data number “A1” of the observation means is all information of the element of the identifier 1 (in this embodiment, full-color image data). In the second stage, the identifier analysis data “Kal” obtained by the observation means “A1” is encoded. The content of the encoding method data “al” at this stage is to extract all information of the data.

[0066] Through these two steps, identifier 1 is encoded into identifier code data "F1" shown in FIG. Therefore, in this encoding method, the identifier analysis data “Kal” and the identifier code data “Fl” are the same. In other words, FIG. 1 shows the identifier 1 itself, and at the same time, the information of the identifier analysis data “Kal” and the identifier code data “F1”. Therefore, it is shown that it is also possible to construct an authenticity judgment system that employs only the encoding method data “al” (extract all information).

Next, the encoding method of the identifier code data “F5” shown in FIG.

The first step, the analysis of the identifier, is to extract all the element information from the observation means data “A1”.

In the second stage, the identifier analysis data “Kal” obtained in the first stage is encoded. At this time, the algorithm of the encoding method data is to first extract “a2” (extract a red figure), The third step is “a7” (framing the center of gravity of the selected figure). Through the above three steps, the identifier code data “F5J” including the frame graphic 9b is obtained.

Further, the encoding process of the identifier code data number “F6” shown in FIG. 6 will be described.

In the first stage, since the observation means of the identifier code data “F6” shown in FIG. 6 is “A3” (using a filter that excludes red), a figure having a blue element is extracted. In the second stage, the encoding method data first performs "a4" (extracts a circular figure) and performs "a7" (framing the center of gravity of the extracted figure). By the above two steps, identifier code data “F6” including the frame pattern 9c is obtained.

The other identifier code data “F2”, “F3”, and “F4” are also coded according to the contents described in Tables 1 to 3 above, and a detailed description thereof will be omitted.

Next, an encoding method when the position information of the element is the identifier code data will be described based on the identifier analysis data “Kal” shown in FIG. In the first stage, observation means data = A1 (all information),

In the second stage, the identifier code data is obtained under the above conditions, as code data method = a2 (extracts red figure) + a4 (extracts circular figure) + a8 (detects position information of the extracted figure). The position of the circular figure is circular figure 7a (X8-Y5) figure 7c (XI · Υ5) figure 7g (X4 · Υ2) figure 7h (X8 'Yl). It can be coded data. That is, in the system of the encoding method of this example,

"F7" = "(X8 'Y5), (X1 -Y5) (X4-Y2) (Χ8 · Υ1)"

It can be.

[0070] In this encoding method, the order in which the figures are extracted may be a zigzag scanning method or the like. In the present embodiment, the right force of line # 6 in the uppermost line is also searched to the left, and until the end of the line. Then, the bottom line # 5 was also searched for the right edge force, and finally a scanning method was used to reach the grid of (XIXI1) .Therefore, by changing the scanning order, identifier code data different from the embodiment could be easily obtained. Obtainable.

[0071] Further, for example, a red element and an element of an amorphous figure are selected, and a grid of the figure is selected. Numbers can be used as identifier code data.Furthermore, figures with arbitrary color elements and graphic elements can be extracted, and the number of figures can be used as identifier code data to represent various character information. It is possible to arbitrarily select a suitable encoding method.

As described above, a large number of encoding methods, such as the scanning order of the elements (shape, size, and color) of the object to be analyzed, the area of the elements, the number of elements, the frame diagram in which the elements are framed, and the like, Depending on the observation method, various identifier code data can be obtained with one identifier power.

[0073] In the present embodiment, the base 3 is an intermediate color. However, since the object is to enable analysis of the object to be analyzed, any color can be arbitrarily selected, and the base 3 is transparent. Is also good.

[0074] Although the identifier 1 has been described as being two-dimensional, the paint may have a certain thickness to form a three-dimensional analog chip. The paint may be adhered so as to have a three-dimensional structure, and the paint may be extended. What is necessary is just to draw using the contingency of the method of shaping etc.

[0075] Further, the positions where the circular figures and the square figures are arranged are not fixed, and they can be printed at random by a computer. In the case of a three-dimensional structure, various analytes are mixed with a resin powder, and solidified with a solvent (eg, methyl methacrylate). It is good to arrange by using the coincidence and arrange the identifier of the same pattern.

Note that these figures are examples of an analyte, and it goes without saying that various substances having various shapes, sizes, colors, magnetism, and the like can be used as the analyte. No. In addition, if the identifier has a three-dimensional structure, even if a malicious person tries to copy the identifier, it is very difficult to copy the three-dimensional structure, so that an effect of suppressing forgery can be obtained.

[0077] Other observation methods

In the embodiment, when excluding or extracting elements (eg, blue data), a method is described in which a filter is provided in the observation unit to extract elements of a specific substance. However, the method is not limited to such filters. For example, a method of irradiating an infrared ray to extract an element of an analyte that is visible with the infrared ray can be adopted. For example, various methods such as an optical reading method of an image disclosed in JP-A-9-305697 can be adopted. Simple observation means can be adopted. Furthermore, when a special observation method is used for the observation unit, it is necessary to store the corresponding identifier data “Ta” in an identifier table 66 shown in FIG. 18 described later. With regard to the safety aspects of the fixed system, the fact that the observation unit is special can be expected to make it more difficult to forge the observation unit. Note that this special observation method includes a reader that reads a magnetic material when the magnetic material is adopted as the identifier.

Further, an analyte is kneaded into a transparent base material as an identifier structure to create an identifier in which the analyte is randomly distributed in three dimensions. It is possible to analyze with a three-dimensional shape measurement system and use the position information of the analyte as identifier code data, or to frame the location information of the analyte and use the frame diagram as the identifier analysis data. By kneading various analytes in a transparent base material, the observation means (A) and the encoding method data (a) are set independently by each authentication system, and each authentication system Independence can be secured by constructing an original authentication system. Therefore, even if the analyte is an identifier randomly distributed in three dimensions, it can be adopted as the identifier of the present invention. This identifier is extremely difficult to forge the same thing because the analytes are randomly distributed in a three-dimensional manner, making it more difficult to prevent unauthorized use.

[0080] Chapter 2: Section 2: An embodiment of an identifier employing an IC that outputs data

In the present invention, an identifier other than an analog chip can be adopted as an identifier as long as it has a function of outputting certain data as information proving authenticity. As an example, an IC chip that outputs data (information) is adopted as an identifier, and the analysis and encoding of the IC chip (identifier) will be described. Since the method of accessing the information stored in the IC chip is open to the public, anyone can use this IC chip data to participate in the network system.

Therefore, this IC chip can be duplicated with the IC chip equipment, so the security is not high.However, it is convenient to adopt RFID (Radio Frequency IDentification). The effect is that it can be increased.

First, the embodiment of this section will be described with reference to a table format. FIG. 7A shows an example of the data output from the identifier 1 and the observation means thereof, and the identifier analysis data 15 of the identifier (recorded in the identifier table 66a as the identifier data 19 (Ta)). ) And a digit table 56 showing the relationship between the digit number 11 assigned to each digit. (B) shows the encoding method table 55, and (C) shows the identifier code data 16 obtained by encoding, for example, the identifier number 14 `` T556 '' with the encoding method data 12 `` a32 ''. Show. More specifically, first, (A) the symbol table 56 shows that the digit numbers dl-dl4 are assigned to all the digits of the identifier data 19, respectively. For example, the identifier analysis data 15 corresponding to the digit number ll “d8” is “1”.

Next, (B) the encoding method table 55 is a table in which the digit numbers 11 are randomly arranged to form encoding method data 12, and the contents of the encoding method when the encoding method data 12 is “a30” 17 indicates “d5, d8, dl, · ′ (110). (C) shows an example in which the identifier“ Τ556 ”is encoded, and the encoding method data 12 is In the case of “a32”, the identifier code data (F) 16 of the identifier number 14 “T556” is encoded as “02318314.” As described above, even if it is an IC (RFID), it can be encoded as an identifier. Thus, the authenticity can be determined in the same manner as an analog chip.

Further, in the present embodiment, it is possible to independently construct an authenticity determination system having a different encoding method by using different encoding method tables 55 in card authentication systems of different companies. For example, even if an identifier code data (F) is obtained by eavesdropping on a line of a system of a certain company, it is determined to be false (False) by a system of another company and cannot be passed at all.

In other words, it means that there is no encoding method and no IC that outputs data, and that a group described later cannot generate proper identifier code data (F). It is very difficult to "spoof" by eavesdropping on the line, which has the effect of increasing reliability. In this embodiment, the data output from the RFID has been described. Power other than that described above can be used as an identifier by outputting data for specifying the form number from a mobile phone. In short, the present invention can be adopted as long as it has a function of outputting fixed data. [0085] In the above embodiments, different types of identifiers have been described. However, it goes without saying that identifiers of different types may be used in combination in consideration of the characteristics of these identifiers. Although the identifier has been specifically described based on the embodiment, the identifier is not limited to the above-described embodiment, but can be variously changed. For example, a conventional bar code or the like can be adopted. Needless to say,.

[0086] Chapter 3: An authentication system for determining the authenticity of the identifier!

In this chapter, a description will be given of an authenticity determination system according to an identifier encoding system. It should be noted that the symbols and the like assigned to the figures in this chapter have the same functions and effects as those of the above-described embodiment, except for those which are particularly described, and thus the description thereof will be omitted.

The description will be made sequentially based on the following third table of contents.

Chapter 3, Table of Contents,

Section 1: An authentication system with the encoding method (a)!ヽ

Item 1: outline of the authenticity judgment system that can change the encoding method

Item 2: First Information Processing Unit!

1): Regarding the embodiment of the first information processing unit that changes the encoding method using a remote signal

2): Regarding the embodiment of the first information processing unit capable of autonomously changing the encoding method Section 3: About the second information processing unit

Item 3: Regarding the second information processing unit

Section 2: An analysis data authentication system that determines the authenticity by comparing identifier analysis data (Ka).

The following describes this chapter in detail.

[0088] Chapter 3: Section 1: Encoding method (a) About the authentication system 200 provided with (a).

In this section, an example of an authenticity judgment system for encoding the identifier analysis data “Ka” will be described with reference to FIGS.

The most significant feature of the authenticity determination system 200 provided with the encoding method is that the encoding analysis method (a), which is an algorithm for encoding the identifier analysis data “Ka” by the identifier encoding unit 76, is changed. It is possible.

[0089] Chapter 3: Section 1: Section 1: Outline of an authentication system that can change the encoding method. FIG. 8 is a diagram schematically showing an authenticity determination system 200 provided with a method for encoding identifier 1.

Hereinafter, the embodiment of this section will be described with reference to FIG.

An identifier 1 provided on a medium (not shown) (such as an ID card), an identifier number display 2 indicating an identifier number which is identification information for identifying the identifier, a bar code 41,

The authentication system 200 includes a barcode reader 60 (automatic input unit) that reads a barcode 41 on which data of an identifier number is written, and an observation unit 61 that observes the identifier 1 whose position is specified by the positioning unit 40. And an information processing apparatus having a first information processing section 62, a second information processing section 90 connected to the information processing apparatus via an information network 101, and an identifier database 97 (hereinafter, referred to as an identifier DB). With an information processing device!

The first information processing section 62 and the second information processing section 90 of the information processing section of the present embodiment are connected via an information network 101.

The first information processing unit 62 has a terminal input unit 72, an identifier information storage unit 63, an identifier code conversion unit 76 that converts identifier analysis data (Ka) into identifier code data, and an output unit 82. Then, the code data group 84 is transmitted to the second information processing section 90 via the information network 101. In the code data group 84, the identifier number is input from the automatic input unit as the identification information for identifying the identifier. However, when the medium is composed of only the identifier, the personal information of the identifier owner Number · Identifier number etc. can be input by the identifier owner as identifier specific information using a keyboard or the like.

[0091] The second information processing section 90 receives an input section 83 to which the code data group 84 sent from the information network 101 is input, and the data of the code data group 84 and the data from the not-shown identifier table 66. And a code determining unit 85 that determines authenticity by collating with data. The identifier DB97 indicates a database, and a database according to the purpose of the system can be adopted. The identifier DB97 in the example of this section includes a judgment table 86 and an identifier table 66.

[0092] Chapter 3: Section 1: Section 2: First Information Processing Department!

Next, the role of the first information processing unit 62 in the authenticity determination system of this chapter will be described with reference to FIGS.

Note that there are two types of systems, A and B, in the identifier coding section 76 in this chapter. To do. First, the feature of the A-type identifier encoding unit 76A shown in FIG. 9 is that it has a remote encoding method data output unit 77 and uses the remote encoding method data (R) transmitted from an external source. The encoding method (a) used to encode the identifier analysis data (Ka) can be changed! The feature of the B type identifier encoding unit 76B shown in FIG. The first method is to include a conversion method data output unit 88, and the first information processing unit 62 itself outputs the encoding method data (a) when encoding the identifier analysis data (Ka).

[0093] Chapter 3: Section 1: Section 2: 1), an embodiment of the first information processing unit including the identifier encoding unit A76 for changing the encoding method by a remote signal. An example in which the encoding method data (a) 12 can be changed by the remote signal R will be described with reference to FIG.

[0094] The first information processing unit 62 includes a terminal input unit 72 to which signals from input devices such as a camera (observation unit), a barcode reader, a keyboard, and a pointing device are input. And an identifier information storage unit 63 for collecting and storing information necessary for authenticating the identifier. The observation means data (A) and the identifier number (T) in the identifier information storage section 63 are output to the information network 101 via the output section 82 as a part of the code data group 84.

On the other hand, the identifier analysis data (Ka) is encoded by the algorithm of the encoding method data 12 output from the remote encoding method data output unit 77 in the code output unit 78, and then the identifier code is output. The data 16 is output to the information network 101 as part of the code data group 84 via the output unit 82 as data 16.

[0096] The remote signal 73 (R) in the present embodiment is also stored as the code method data (a) in the second information processing unit 90 that manages the authentication determination system. U, delivered from the side, preferably.

[0097] The remote signal 73 (R) enables the coding method data 12 output from the remote coding method data output unit 77 to be changed by remote control. When the code data group 84 is communicated via the network 101, even if the code data group 84 is stolen due to eavesdropping or the like, if the coding method data (a) is changed by the remote signal 73, the coding method After the data 12 is changed, the previous identifier code data 16 is determined as a “False” counterfeit by the code determination unit 85 in the second information processing unit 90, so-called It is possible to prevent illegal acts by impersonating the card holder.

[0098] Conventionally, in the case of "spoofing" which is an unauthorized use of a magnetic card or the like, the force required to take measures such as changing the card by contact from the card owner. The second information processing unit 90 without changing the card also responds to fraud by transmitting a new remote signal 73 (R), preventing crimes such as unauthorized use of the card. Is obtained.

[0099] Chapter 3: Section 1: Section 2: 2), an embodiment of the first information processing unit capable of autonomously changing the encoding method.

Next, based on FIG. 10, a description will be given of a different embodiment of the output method of the encoding method (a). This embodiment is different from the above embodiment in that an autonomous encoding method data output unit 88 is provided in place of the remote encoding method data output unit 77 of the above embodiment. In the present embodiment, the encoding method data “a” is output by an autonomous encoding method data output unit 88 which changes the encoding method data “a” periodically or autonomously based on a fixed algorithm. The code output unit 78 is controlled by the method to convert the identifier analysis data (Ka) into the identifier code (F).

[0100] The effect of the configuration shown in Fig. 10 is that the encoding method data (a) is changed by the autonomous encoding method data output unit 88 periodically or based on a fixed algorithm. If a malicious person attempts to impersonate the card holder by eavesdropping on the code data group 84 in the information network 101, the identifier code data 16 (F) may be periodically or based on a certain algorithm. Unless the malicious person knows the timing of the autonomous change with the changed code data 16 (F) corresponding to the changed coding method data 12 (a) and the malicious code, Since "spoofing" cannot be performed by transmitting the data group 84, it is possible to prevent unauthorized use.

[0101] Chapter 3: Section 1: Section 3: Second Information Processing Department

Next, a second information processing unit 90 that processes the code data group 84 transmitted from the first information processing unit 62 via the information network 101 will be described with reference to FIG. A code data group 84 is input via an input unit 83, and for example, the observation means data “A1” of the code data group 84 and the data “T238” of the identifier number 14 are output to the identifier number processing unit 91, and the identifier number is output. When the signal processing unit 91 inquires of the identifier table 66, the identifier data 14 of "T238" of the identifier number 14 registered in advance 13 The identifier data 19 observed by "Α1" 19 "Tal" is read out, and the code dummy data is read out. Output to the generation unit 92.

[0102] The code dummy data generating unit 92 encodes the identifier data 19 "Ta 1" with the encoding method data 12 "a 1" input from the code data group 84, thereby forming the dummy data 17 "Ta 1". fl ”and outputs it to the code collation unit 95. To explain the collation method of the code collation unit 95, "Tal" of the identifier data 19 recorded in advance in the identifier table 66 is obtained by analyzing "T238" of the identifier number 14 with "Α1" of the observation means data 13. This is the data obtained.

[0103] To further explain, the identifier number processing unit 91 of the code determination unit 85 determines the corresponding identifier based on the observation means data 13 (Α) and the identifier number 14 (Τ) of the transmitted code data group 84. The identifier data 19 (Ta) is inquired of the identifier table 66, and the identifier data 19 (Ta) obtained by the inquiry is transmitted to the code dummy data generator 92. The code dummy data generation unit 92 encodes the identifier data 19 “Tal” distributed from the identifier number processing unit 91 based on the encoding method data 12 “al” of the encrypted data group. Generates dummy data 17 "fl".

Next, the code collating unit 95 first obtains the identifier code data 16 “F1” distributed from the encrypted data group 87, and receives the dummy data transmitted from the code dummy data generation unit 92. 17 "f1" is collated with the identifier code data 16 "F1" to determine authenticity.

Therefore, the dummy data 17 “fl” obtained by encoding the identifier data 19 “Tal” with the encoding method data 12 “al” and the identifier number transmitted through the information network 101 14 The identifier code data of "T238" 16 "F1" means that the observation data 13 and the encoding method data 12 are the same, so that the dummy data "fl" and the identifier code data "F1" If true, it is determined as "True". This determination result is recorded in the determination table 86.

In the configuration shown in FIGS. 10 to 11, the synchronous encoding has a time table (not shown) for outputting a signal synchronized with the autonomous encoding method data output unit 88 to the second information processing unit 90. A method data output unit is provided, and the synchronous code data output unit 88 estimates the code data 12 (a) output from the autonomous code data output unit 88. Alternatively, the code data group 84 may be changed to the code data 12. In other words, the system can be constructed by managing the same time table of the encoding method data 12 (a) output by the autonomous encoding method data output section 88 on the second information processing section 90 side. It becomes.

[0107] Note that various methods can be adopted as the observation means. For example, a method of reading with visible light, a method of reading with radio waves or light of other wavelengths, and the like may be used. Accordingly, each observation method group having its own observation means can construct its own card authenticity judgment system.

Further, different identifier analysis data (Ka) can be obtained by exchanging the filter of the observation means automatically or by a remote signal from the analysis data collating unit 65.

[0109] Chapter 3: Section 2: Analysis data authenticity determination system that determines authenticity by comparing identifier analysis data (Ka).

[0110] One feature of the embodiment of the identifier analysis data authenticity determination system 202 shown in Fig. 12 described in this section is that the encoding analyzer extracts all information of the identifier analysis data when encoding the identifier analysis data. By adopting only the method, the system is simplified.

That is, the identifier encoding unit 76 of the above embodiment is omitted, the identifier analysis data (Ka) output from the observation unit in place of the code collation unit 95, and the analysis data stored in the analysis data table 231. 15a (Ka) is collated with the analysis data collation unit 96, and the result is stored in the decision table 86.

[0112] To further explain based on Figs. 12 to 14, identifier analysis data 13 (image data) and a number for identifying identifier 1 (in the present embodiment, identifier number 14) are stored in terminal input section 72. When input, the first information processing section 62 converts the identifier number 14 (T), the identifier analysis data 15 (Ka), and the observation means data 13 (A) indicating the observation method of the identifier 1 into an analysis data group 94. To the second information processing unit 90b.

[0113] In the second information processing unit 90b, the identifier number 14 (T) and the data corresponding to the observation means data 13 (A) of the transmitted analysis data group 94 are analyzed by the identifier number processing unit 91 by the analysis data table 231. Contact On the other hand, in the analysis data table 231 of the identifier DB97, the identifier number 14 for identifying the identifier 1 and the identifier number 14 Since the analysis data 15a (image data) corresponding to the observation means data 13 is stored, when there is an inquiry from the identifier number processing section 91, the identifier number 14 (T) stored in advance and the observation number are obtained. Analysis data 15a (Ka) corresponding to the means data 13 (A) is output. The output identifier data (Ta) 19 is sent to the analysis data collating unit 96, and is compared and collated with the identifier analysis data 15 (Ka) sent from the first information processing unit 62 to determine authenticity. The judgment result 20 is stored in the judgment table 86 together with the judgment date 28.

[0114] As described above, since the system is simple, a system for directly collating and determining identifier analysis data is particularly suitable for an authenticity determination system of a customer management database of a small-scale store.

In the present embodiment, “JPEG” which is an image compression encoding method, “Huffman code” which is a data compression method, and the like can be arbitrarily adopted.

As means for analyzing the position of the object in the identifier in the present embodiment, a three-dimensional shape analysis optical system or the like well-known in Japanese Patent Publication No. The position can be analyzed.

In this embodiment, as a means for outputting a card number or an identifier number (T) separately from the identifier 1, a signal output from the IC chip is adopted, and the number is received by a mechanism for receiving the signal. It may be automatically read, and according to this configuration, there is an advantage that it is more difficult to make a copy of the card.

[0118] In the present embodiment, the power that a filter can be used in a method of extracting a color element for the observation means The meaning of this filter does not indicate only optical processing, but includes, for example, red, green, In the observation unit having each blue light source, when observing, for example, only one type of light source is turned on to change the light source, and it is possible to obtain identifier analysis data (Ka) using different light sources. When a magnetic material is used for the identifier 1, a magnetic sensor may be used, and various observation means can be arbitrarily adopted in the observation unit without departing from the gist of the present invention.

Chapter 4: Description of Network System Equipped with Identifier Authenticating System, One Embodiment of Network System Equipped with Authenticating System of Identifier 1 Based on Chapter 4 Table of Contents and Figures below explain. Chapter 4 Table of Contents Chapter 4: Section 1: Overview of the whole structure and parts! /

Section 1: Overview of the overall configuration of the network system and its purpose. Item 2: Management Sector Identifier Overview and role of Management Center! /,hand

Item 3: Overview and roles of customer centers and retailers! /

Item 4: Overview and Role of Franchise Headquarters and Merchants! /

Clause 5: Overview and role of financial institutions and personal credit bureaus

Section 6: Overview of Management Center 175 and User Registration Terminal 178

Clause 7: Personal Credit Security Agency 145

[0120] Chapter 4: Section 2: About each database (identifier DB97)

Section 1: About the integrated database 103 in the Identifier Management Center 102 Section 2: About the service database 111 in the Customer Center 110! /, Section 3: About the retail store database 151 in the retail store 150

Section 4: About the franchise headquarters 161 member store database 162 Section 5: About the financial customer database 182 within the financial institution 180

Section 6: Management Database 176 in Management Center 175!

Clause 7: Choosing the level of information disclosure and marketing support.

[0121] Chapter 4: Section 3: About the processing flow of the network system 100!

Clause 1: Registration of identifiers at retail stores

Item 2: How to send event information of retail stores 150 to cardholders 105 Item 3: Changes to personal information!

Clause 4: Question of registration status of identifiers

It is. The details will be described below.

[0122] Chapter 4: Section 1: An overview of the overall structure and parts!

The outline of the network system will be described below.

[0123] Chapter 4: Section 1: Section 1: Overview of the overall configuration of the network system and its purpose.

[0124] About the purpose of the network system.

The network system 100 described in this chapter enhances the convenience of the owner of the card with the identifier 1 and protects the privacy of the cardholder when registering customers. The purpose is to enable the management of points such as identifier-related information, the management of situation data, etc., and the transmission of event information, etc., by using the card 250 even in a small individual store.

[0125] In particular, with regard to privacy protection, conventionally, when a cardholder 105 registers a customer at a nearby retail store 150, the address. A point card etc. was issued with it described. However, in the case of female customers living alone, disclosing their first and last names and addresses to employees of nearby stores was a favorable security measure.

[0126] On the other hand, on the side of the retail store 150, it was time-consuming and time-consuming to retrieve personal information such as name and address from customers. However, if the contact information such as the customer's address and name is unknown, event information cannot be sent to prospective customers and business opportunities will be missed, or lost power points will be used illegally by third parties. There was a problem that there was no means to prevent such fraud.

[0127] Also, if a cardholder registers a special card at various retail stores or franchise chains, etc., the cardholder will not be able to receive services such as point and point possessing such a special card. . Furthermore, if the owner tries to check the points given to the special card at the retail store, he or she cannot find the points at all, or it will be written on the receipt, etc. There are a number of special cards that must be contacted by the issuing entity.

[0128] As described above, the card owner has to manage various exclusive cards, which is extremely troublesome.

According to the present invention, in view of such a situation, a cardholder can register a customer at a nearby retail store or the like without disclosing information such as a residence name, and further, various points of a retail store, etc. Identifier related information can be known via the Internet. On the other hand, retailers will be able to manage customers without having to collect customer power information, and will be able to send event information to customers as needed. Furthermore, the present invention proposes a system in which the cardholder 105 can select the level at which personal information is disclosed. This system allows cardholders 105 to use their information unnecessarily. It is possible to obtain information on retail stores without disclosing the information, and it is also possible for the retail stores to obtain the information necessary for information power marketing disclosed by visiting customers. The present invention proposes a network system, an information transmission system, and the like that realize all or some of these objects.

[0129] An example of an outline of an embodiment of the overall configuration of the network system in the present embodiment will be described.

FIG. 15 is a schematic diagram showing an embodiment of the overall configuration of the present invention. The customer terminal 170, the customer center 110, the franchise headquarters 161 and the management center 161 are connected to the identifier management center 102 via the information network 101. Center 175, Financial Institution Headquarters 181 and Personal Credit Information Agency 145 are connected. In addition, a plurality of retail stores 150 are connected to the customer center 110 via the information network 101, a franchise headquarters 161 is connected to a member store 165 via the information network 101, and the management center 175 is provided with a service terminal 178. The branch 185 is connected to the financial institution headquarters 181 via the information network 101a.

FIG. 16 is a conceptual diagram showing a hierarchical structure for explaining that the authenticity determination system of this embodiment has a plurality of determination means. In the authenticity determination hierarchy 300, the lowest layer is the identifier information collecting means 301. In this hierarchy, information related to the identifier is collected, and the determination means 302 of the upper floor performs the authenticity determination of the identifier. The judging means 302 has two layers of a simple judging means 303 and an authenticity judging means 304, and the simple judging means 303 visually judges, for example, that the analog chip has a three-dimensional structure or has the same shape. It is a means for confirming or simply checking whether the identifier number (T) and card number are registered in the database! The authenticity determining means 304 is a means for determining the authenticity by comparing the information obtained by observing the identifier with the information recorded by the institution that manages the identifier, and is an authenticity determining system 200 provided with an encoding method. (See FIG. 18), means for determining including an authentication / authentication system 201 (see FIG. 22) having an encryption unit and an analysis data authentication / authentication system 202 (see FIG. 26).

[0131] The card authentication system 310 shown in FIG. 17 is a conceptual diagram showing the relationship between the elements constituting the system with respect to the observation method and the encoding method in the authenticity determination. First, the card authentication system 310 is weak in the terminal sector 311, the terminal management sector 312, and the management sector 3 13 sectors are divided into layers. The terminal sector 311 at the bottom includes customers serving customers such as retail stores 150, member stores 165, service terminals 178, and branches 185. The terminal management sector 312 includes administrators such as the customer center 110, the franchise headquarters 161 and the management center 175. The management sector 313 includes the identifier management center 102 indicated by oblique lines and the financial institution headquarters 181.

[0132] On the other hand, an observation method group 206 and an encoding method group 205, which are the system of the authentication system, are arranged so as to traverse these layers! The observation method group 206 is a group in which the observation means data (A) for observing the identifier 1 is the same.

In addition, the observation means of a plurality of observation method groups can be arbitrarily set in each group.

On the other hand, the encoding method group 205 is a group in which the encoding method (a) for encoding the identifier analysis data 15 (Ka) of the identifier 1 is the same.

[0133] The present example will be specifically described.

The observation method group 206a has two encoding method groups: an encoding method group 205a and an encoding method group 2005b. Therefore, in the observation method group 206a, regardless of the same performance of the observation unit 61, if the encoding method group is different, the identifier code data (F) sent from the retail store 150 to the identifier management center 102 is different. It will be. This means that even if the information related to the identifier is eavesdropped in a specific group in the information network 101, it is possible for the other encoding method group 205 and observation method group 206 to all judge as fake. This means preventing data misuse.

If necessary, it is possible to construct an authenticity judgment system having its own observation method and encoding method as exemplified in the financial institution headquarters 181. The headquarters 181 and the identifier management center 102 are connected by a line L1 and can share status data. More specifically, if the situation data table 218e of the financial institution headquarters 181 described later and the situation data table 218a of the identifier management center 102 are associated with each other, V, regardless of the authenticity determination system described in the present specification, Even if such an authentication system is adopted, the situation data can be shared, so that the cardholder can If the cardholder contacts the financial institution headquarters 181 or the identifier management center 102 when the card is lost, the card function can be stopped at once, which has the effect. It should be noted that the groups of the present invention are not formed only by the observation method or the coding method, but that the group may be formed on a company basis or an organization basis. It is a good thing.

[0135] Next, Figs. 18 to 23 show the concept of the identifier DB97 (integrated database 103, service database 111, retail store database 151, member store database 162, financial customer database 182, management database 176). The figure is shown. FIG. 26 to FIG. 30 are block diagrams showing the processing flow of the network system.

First, 100 in FIG. 15 indicates the entire network system, 101 indicates an information network such as the Internet, and 101a indicates an information network using a dedicated line, for example, a terminal network of a bank, etc. . This information network 101 is connected to an identifier management center 102, a customer center 110, a franchise headquarters 161, a financial institution headquarters 181, a personal credit information agency 145, a management center 175, a customer terminal 170, and the like. . In this chapter, it is assumed that the identifier 1 is used for the card 250 (see FIG. 31) which is a so-called credit card.

[0137] Chapter 4: Section 1: Section 2: Overview and role of the identifier management center 102 of the management sector. The identifier management center 102 shown in Fig. 15 is composed of an integrated database 103 and an information processing device. 104 (second information processing unit). An overview of the role of this identifier management center 102 is:

Provision of information to the customer management center 110 of the terminal management sector 312, the franchise headquarters 161 and the management center 175. Judgment of identifier 1

Management of status data (S) such as registration, abolition of identifiers, suspension of credit, etc.

Management of personal information of the owner of the identifier.

When the owner of the identifier 1 makes an inquiry to the identifier management center 102 through the customer terminal 170, the registration information of the identifier 1 owned by the owner's disclosure of identifier-related information and the like. And so on. [0138] Chapter 4: Section 1: Section 3: Overview and Roles of Customer Center 110 and Retail Store 150. First, the features of the customer center 110 in the terminal management sector 312.

The first feature is that a terminal (information processing device 152 provided with a first information processing unit) is installed at a retail store 150 in a terminal sector 311 and an identifier is independently analyzed or encoded by the terminal, thereby enabling independent code encoding. It is possible to provide the system of the dagger method group 205. In addition, the customer center 110 can perform customer management for the retail store 150 in which the information processing device 152 is installed. The second feature is that when an application for registration of the card 250 is made at the retail store 150 and the authenticity is determined by the identifier management center 102 of the management sector 313 to be “True”, the identifier is transmitted from the identifier management center 102. It manages the personal information of the owner of the incoming card 250, and if false is determined to be false, sends that information to the retail store 150 to alert and prevent unauthorized use of the card It is.

[0139] The third feature is that when the retail store 150 conducts an event or tries to provide point information, the card possession is performed according to the identifier number 14 and the condition 31 sent from the retail store 150 side. It has means for distributing information to people via e-mail, mail, telephone and other communication means. The fourth feature is that when an inquiry is made from the cardholder 105, the points and grades of the group retail stores 150 managed by the customer center 110 can be disclosed, and in particular, the inquiry via the Internet can be made. May have a customer service query 214b, described below, that links to the home page of the retail store 150. The fifth feature is that the service database 111 provided in the customer center 110 can be a small identifier DB as compared with the integrated database 103 in the identifier management center 102.

[0140] The sixth feature is that the customer center 110 can set up a terminal in a retail store or the like to construct a unique encoding method group 205, and at the same time, encode a card issued anywhere. If the card is registered at the retail store 150 in the dani method group, it is possible to manage the customer's personal information as his own customer. The seventh feature is that it can be an issuer having an issue function for issuing a card.

The eighth feature is that it can function as an entity that manages various services, such as using points as a unique currency of the local community. [0141] Customer Center 110 Conditions

A security level shall be provided to keep the registered customer's personal information confidential and not exposed to outsiders.

[0142] Overview of retail stores 150

The retail store 150 includes a terminal having a barcode reader 60 (input unit) for analyzing the identifier 1, an observation unit 61, and a first information processing unit 62. Therefore, when the customer applies for registration of the card 250 having the identifier 1, the input unit and the observation unit 61 observe the identifier, and request the identity management center 102 to determine the authenticity via the customer center 110. Therefore, if it is determined that the judgment result power S “True” of the card is true, it is possible to award points and the like to the card. It should be noted that the retail store 150 of the present embodiment includes not only a store that sells goods, but also a service counter of a laundry store, a window for providing services of government offices, and the like.

[0143] Relationship between owner of card 250 (card holder 105) and retailer 150.

Cardholder 105 is registered as a customer of retailer 150 by registering the identifier number (T) of card 250. At the time of registration, the cardholder 105 does not need to disclose personal information such as name, address, telephone number, e-mail address, etc. Since there is no need to request a customer, labor saving during customer registration is possible.

[0144] Relationship between customer center 110 and retail store 150.

The customer center 110 receives the personal information 29 (name 22, address 23, address 23, etc.) transmitted when the identifier management center 102 verifies the authenticity of “Tme” by the identifier 1 of the card 250 applied for registration at the retail store 150. Email address 24). Therefore, when the retail store 150 plans an event or the like, it is possible to inform the card holder 105 of the event information by sending or sending an e-mail or the like via the customer center 110. I can do it. In addition, the card holder 105 has the power to accumulate points by reading the card 250 at the time of purchase of the product. The customer center 110 can also manage the points of the card holder 105. Further, the customer center 110 conducts market research such as analysis of customer dynamics according to the marketing support described below, and It will be possible to support the sales of 150 retail stores.

[0145] Chapter 4: Section 1: Section 4: Overview and Role of Franchise Headquarters 161 and Merchant 165.

Franchise Headquarters 161

The franchise headquarters 161 has a relatively large business scale and multiple affiliated stores 165 are registered.

Therefore, since the number of cards 250 issued by the franchise headquarters 161 is increased, it is most possible to enjoy economies of scale even if the card 250 with the identifier 1 registered in the identifier management center 102 is issued by itself. It is a big feature.

[0146] Next, further features will be described below.

The first feature is that the franchise headquarters 161 is capable of collecting customer information on its own by becoming the issuer of the card 250, and is able to design and issue its own card 250. At the same time, even if the card 250 has been issued by another issuing entity, the customer can manage the customer by registering the identifier number (T), the card number 251, the identifier number 14, or the analysis data 15d of the identifier 1 etc. . The second feature is that a terminal can be installed at the member store 165, and the identifier 1 can be analyzed or encoded by the terminal, or a unique authentication judgment system can be provided by the observation method group and the encoding method group. It is. Third, when an event is planned, the franchise headquarters 161 has a means of distributing event information to the cardholder 105 by e-mail, mail, telephone, or other shipment. The fourth feature is that when an inquiry is made from the cardholder 105, the point and grade of the cardholder 105 (customer) can be disclosed.

[0147] An overview of the member stores 165.

The member store 165 is provided with a barcode reader 60 (input unit) for analyzing the identifier 1, an observation unit 61, and a card reader 166 having a first information processing unit. Therefore, when the card 250 with the identifier 1 that is not issued by the franchise headquarters of the series is applied for registration, the identifier is analyzed by the input unit and the observation unit 61 and the identifier management center 102 judges the authenticity. Request, the card is authenticated, and if "True" is determined to be true, the card 250 is registered as a customer in the F customer table 227 of the affiliated store database 162 in the franchise headquarters 161, and points, etc. Coupon can be given It works. On the other hand, when using the card 250 issued by the affiliated franchise headquarters 161, if the franchise headquarters has the identifier table 66 d, it is authenticated as necessary, and if the standard is reached in purchasing behavior etc. Coupons can be given to power.

[0148] Chapter 4: Section 1: Section 5: Overview and roles of Financial Institution Headquarters 181 and Branch 185.

About the features of the Financial Institution Headquarters 181.

The first characteristic is that the financial institution headquarters 181 is the headquarters of the financial institution 180 and manages terminals 186 such as automatic teller machines installed at branches 185 (including unmanned branch offices) at the lower part of the affiliate. The second feature is that it becomes the issuer of the card and collects customer information on its own, so that it is possible to design and issue its own card 250 and at the same time, issue the card issued by another issuer. Even if it is 250, it is possible to register the card number 251, the identifier number 2, or the analysis data of the identifier and manage the customer according to the security level. The third feature is that it is possible to provide an independent authentication system with its own observation method.

The fourth feature is that when an event is planned at a financial institution, the event information is distributed to the cardholder 105 by e-mail, mail, or telephone. The fifth feature is that when an inquiry is made from the cardholder 105, it is possible to disclose the usage status 35 of the cardholder 105 (customer) managed by the financial institution headquarters 181.

[0149] Overview of branch 185.

The branch 185 is provided with a terminal having a barcode reader 60 (input unit) for collecting information of identifier 1, an observation unit 61, and a first information processing unit 62.

[0150] Chapter 4: Section 1: Section 6: Overview of Management Center 175 and Service Terminal 178.

For an overview of the features of Administration Center 175,

The management center 175 manages a system that authenticates and restricts users such as bicycle parking lots and parking lots, and coin lockers that temporarily store luggage, and also authenticates user cards at home or business. It is a management center of a security company or the like that performs locking and unlocking, charging, and the like by registering and managing identifiers. [0151] The identifier 1 is analyzed, or analyzed and encoded, by the service terminal 178. The identifier management center 102 transmits the card 250 having the identifier 1 requested to be used by the identifier management center 102 via the management center 175. The authenticity is determined, and the result of the authenticity determination is reported to the management center 175. At this time, if the card 250 determined to be “True” in the authenticity determination is a card approved by the financial institution 180, the management center 175 inquires the financial institution 180 about the card number 4 and the result is obtained. Recorded in the column of approval data 49 in the financial approval table 223 in FIG. 23, if the approval is obtained, the cardholder 105 can receive a financial service such as automatic payment in a service that generates a charge. The related personal information is registered in the management database 176 of the management center 175 shown in FIG.

[0152] When the use of the registered card 250 is requested from the service terminal 178, the management database 176 checks the status data 21 and the like of the card 250, and if the registration status satisfies the standard, the management center 175. Permits the use of Card 250.

[0153] With such a configuration, according to the management center 175 of this embodiment, the permission to use facilities such as parking lots, the permission to use equipment such as coin lockers, and the It enables the construction of a system for controlling the locking of a front door lock, and can be applied to a system for charging the card 250 as needed.

[0154] Chapter 4: Section 1: Section 7: Personal Credit Security Agency 145

Personal Information Security Agency 145 is a conventional organization that guarantees personal credit, such as JCB (registered trademark) visa card (registered trademark) that issues and manages credit cards, debit cards, etc.

[0155] Chapter 4: Section 2: About each database (identifier DB97).

In this section, each database (identifier DB97), which is a storage means of the information processing apparatus, will be described with reference to FIGS. In the present embodiment, a database format that is a relational database is adopted, a plurality of tables are provided according to the data to be managed, the data of the tables are correlated, and the conditions of these data are determined. A query that searches and displays the data of a user, and a form that allows input such as “change of address, change of email address, change of phone number, change of name” at the request of the user. And one. Not all of these tables, queries, and forms are required, but the identifiers of DB97s are determined by combining arbitrarily required tables, queries, and forms, and reports (not shown) that determine the print format. What is necessary is just to be comprised.

[0156] Chapter 4: Section 2: Section 1: About the Integrated Database 103 in the Identifier Management Center 102.

The integrated database 103 will be described below with reference to FIG. The integrated database 103 is provided in the identifier management center 102, and includes an identifier table 66a, an identifier user table 211, an encoding method table 212a, a determination table 86a, a situation data table 218a, and an identification table 226a. , An integrated service query 214, a change form 232a, an identifier search query 233, and the like.

[0157] The identifier table 66a stores the identifier number 14 (T), the observation means data 13 (A) that is the observation method thereof, and the identifier data 19 (Ta) obtained by the observation method. It is a table for outputting data when there is an inquiry from the storage unit 104 (second information processing unit 90), and it is preferable to store all identifier data 19 (Ta) to be issued.

[0158] The encoding method table 212 stores the encoding method data 12 (a) in the observation means data 13 (A) and the encoding 27, which is an algorithm for the encoding method data 12 (a). When the means data 13 (A) and the encoding method data 12 (a) in the observation method are specified, the tape output is for outputting the predetermined contents 27 of the encoding method which is the algorithm.

[0159] The determination table 86a stores the result of determination of the identifier 1 by the information processing device 104 of the identifier management center 102, the identifier number 14, the determination date and time 28 which is the date and time when the determination was performed, the determination result 20 and the like. It is a table.

[0160] The status data table 218a indicates whether the identifier 1 is available for "valid", whether the identifier is in a "stopped" state, or if the identifier 1 is stolen, lost, expired, etc. This is a table that stores whether the card is in an “invalid” state and has lost data, and also stores data of the issuer 34 that issued the card (medium).

[0161] The identifier user table 211 stores the personal information of the owner of identifier 1 of "name 22". Field, address 23, phone number 38, e-mail address 24, etc., which is personal information including contact information, and `` Customer Center, Finance, '' belonging to the terminal management sector 312 of the group in which the owner registered the card. This is a table that stores information related to identifier 1 such as an expiration date 26, along with a column for a registration center 25 that records URL data such as “institution headquarters, franchise headquarters”.

[0162] The integrated service query 214 includes the personal information 29 (address, name, date of birth, gender, telephone number, e-mail address, etc.) of the cardholder 105 corresponding to the identifier number 14, and the registration center 25, This is a query to collect the status data 21, issuer 34, expiration date 26, etc.When the user makes an inquiry via the information network 101, the conditions are specified from each table and the identifier number 14 Corresponding data can be collected and displayed on the customer terminal 170 of the cardholder 105. Note that “Sel”, “Se4”, “Se9”, and the like described in the column of the registration center 25 are abbreviations in the description of the embodiment representing the customer center, management center, and the like in which the card 250 is registered. The role of the column of the registration center 26 is, for example, when "Sel" indicating the customer center 110 in the column of the registration center 25 is clicked, the customer service query 217b of the customer center 110 is automatically displayed on the screen of the user. Alternatively, a hyperlink for displaying a home page is set in the display portion of “Sel”.

[0163] The change form 232a allows the cardholder 105 to transmit the personal information (name 22, address 23, telephone number 38, e-mail address 24, etc.) of the user associated with the identifier 1 via the information network 101 such as the Internet. It is for changing. The identifier search query 233 is a table for identifying the identifier number 14 from any of the personal information (name 22, address 23, telephone number 38, e-mail address 24, etc.) of the password owner 105 of identifier 1. In this way, if the identifier number 14 can also specify the personal information capability, a medium (such as an ID card) can be constituted by the identifier 1 alone.

In addition, personal information for specifying the identifier number 14 can be arbitrarily determined.

[0164] The personal authentication table 226a is a table for managing the personal identification number 106 for performing personal authentication when using the integrated service query 214, the change form 232, or the physical characteristics 107, and the like. In order to prevent unauthorized access to the integrated service query 214 and the change form 232a, as an example of personal authentication means, The provision of a security bulletin enables users to prevent crime when using the integrated service query. Note that as a specific example of the physical feature 107, various methods such as a voiceprint, a fingerprint, an iris of an eyeball, and a shape of a vein can be adopted.

[0165] Chapter 4: Section 2: Section 2: Service Database 111 in Customer Center 110.

The service database 111 will be described below based on FIG. The service database 111 is provided in the customer center 110, and includes a customer center customer table 228, an inquiry table 219, an analysis data table 231, an identity authentication table 226b, a shipping data table 215, It has a store management table 225 and a customer service query 217b. In this section, the components having the same reference numerals have the same functions, and the description thereof will not be repeated hereafter, and only the particularly necessary portions will be described.

[0166] The inquiry table 219 is used to temporarily store and relay data required for authenticity determination when an inquiry about authenticity determination is made at the time of new registration of the identifier 1 from the retail store 150. It is a table. Therefore, if necessary, the identifier number 14 and its related data, such as the observation means data 13, the encoding method data 12, and the identifier code data 16, are transmitted to the identifier management center 102 to determine the authenticity of the identifier 1. Done.

[0167] The customer center customer table 228 (CU customer table) stores the card holder stored in the identifier management center 102 when the identifier management center 102 determines that the card 250 is "Tme" in the authenticity determination of the card 250. This is a table to store the personal information of 105 sent, such as name 22, address 23, e-mail address 24, telephone number 38, etc.

[0168] The analysis data table 231 is a table for storing the identifier analysis data 15 (Ka) transmitted from the retail store 150, and the inquiry about the authenticity determination of the registered identifier 1 is sent to the retail store 150. Is a comparatively simple authentication system, which compares the images of the registered analysis data 15a and the newly analyzed identifier analysis data 15 (Ka) to determine the authenticity. This is a tape insert that enables the construction of the data authentication authenticity judgment system 201.

[0169] The user store management table 225 stores the store number 33, which is the serial number assigned to the retail store 150. And the identifier number 14 (T) registered in the store number 33. Points 37 assigned to the identifier number 14 according to the use status of the retail store 150 and grades 42 for the retail store 150 to differentiate customers are stored and managed.

[0170] The shipping data table 215 stores the status data 21 relating to the identifier number 14 and the name 22 which is personal information according to the point 37 and the grade 42 relating to the identifier number 14 (Τ) transmitted from the retail store 150. , Address 23, e-mail address 24, etc., are sent to the customer table 228 to provide the cardholder 105 with a service for sending outgoing goods 58 (e-mail, postcards, magazines). For example, based on the condition 31 of the event instruction table 230 from the retail store 150 to be described later, a grade 42 or a point 37 is designated and only the mail is sent, or the mail and the magazine are sent together. Etc. can be differentiated.

[0171] The service query for customer 217b is intended to disclose information registered in the service database 111 when an inquiry is made from the card holder 105. Furthermore, it is preferable that a hyperlink is set to allow the user to view the home page of the registered retail store 150 by clicking on the target portion of the store number 33 which is the information of the registered retail store 150. With this configuration, the cardholder 105 can be recorded in the service database 111 and know at a time the “points” and “grades” of a plurality of retail stores 150, and thus the card 250 Can increase convenience

[0172] Chapter 4: Section 2: Section 3: Retail Store Database 151 in Retail Store 150.

The retail store database 151 will be described below based on FIG. The retail store database 151 has an identifier registration table 220, a customer management table 221, an event instruction table 230, an encoding method table 212c, an authentication table 226c, and a customer service query 217c. .

[0173] The feature of this retail store database 151 is that even if there is no customer personal information such as name 22, address 23, telephone number 38, e-mail address 24, etc., the customer center 110 that installed the terminal at the retail store 151 To send event information, etc. to customers by sending postcards, magazines, and e-mails. The customer is managed by the identifier number 14 or the customer number 32 associated with the identifier number 14.

[0174] The identifier registration table 220 is a table for storing data relating to the identifier 1 that is inquired to the identifier management center 102 when the card holder 105 attempts to register or authenticate a card. The customer management table 221 is a table for managing the cardholder 105 at the retail store 150 and analyzing purchasing behavior, and stores the identifier number 14 (T), its grade, points, and the like. Needless to say, it is possible to freely collect personal information such as name and address at the retail store 150 that helps the customer's privacy.

[0175] The event instruction table 230 is used, for example, when the retail store 150 plans a seasonal event or the like, to set conditions 31 for instructing what kind of service to provide according to the point 37 or the grade 42. It is a table. When the condition 31 of the event instruction table 230 and the data of the contents 31a of the shipment corresponding to the condition are transmitted to the customer center 110 having the terminal installed at the retail store 150, the customer center 110 The cardholder 250 is notified of the provision of the service in accordance with the condition 31a of the condition 31 and the event to the holder 105 by a shipment 58 such as a letter, a postcard, a telephone, and an e-mail.

[0176] The customer service query 217c is a table for guiding points, grade registration status, services to the customer, and the like accumulated when a customer makes an inquiry.

[0177] The personal authentication table 226c is a table for storing a personal identification number 106 for performing personal authentication when the cardholder 105 contacts the retail store 150 via the information network 101 such as the Internet. is there.

[0178] Chapter 4: Section 2: Section 4: Merchant Database 162 in Franchise Headquarters 161

The merchant database 162 is described below with reference to FIG. The member store database 162 is provided in the franchise headquarters 161 and includes an identifier table 66d, an F customer table 227, a signing method table 212d, a judgment table 86, and a situation data table. It has a table 218d, a personal authentication table 226d, a financial approval table 223, and a customer service query 217d.

[0179] In the F customer table 227, the card number 4, the issuing entity 34, the identifier number 14, the personal information name 22, the address 22, and the address of the card having a settlement function issued by the franchise headquarters 161 by recruiting members are issued. 23, telephone number 38, e-mail address 24, expiration date 26, etc. are recorded. Note that the personal information data of the owner of the card 250 issued by another issuing entity is used by the identifier management center 102 to determine the authenticity of the identifier 1 and determine that the identifier is “Tme”. Sent from 102 to franchise headquarters 161. The details of this flow mechanism will be described later.

[0180] The financial approval table 223 stores the card number 4 of the card 250 affiliated with the financial institution 180, and the approval data 49 from the issuer who issued the card 250, and stores the financial Authorization is determined based on the approval data 49 queried from the agency 180.

[0181] Chapter 4: Section 2: Section 5: Financial Customer Database 182 in Financial Institution 180.

The financial customer database 182 is described below with reference to FIG.

The financial customer database 182 includes an authentication system for the card 250 of the high security level provided in the financial institution 180 for this purpose, and further manages personal information of the customer and credit information. The contents of the database include a credit management table 224, an identifier table 66e, an encoding method table 212e, a determination table 86e, a situation data table 218e, a customer service query 217e, and an identity authentication table 226e. I have.

[0182] The credit management table 224 stores a card number 4 including a financial institution number, a branch number, a customer number, etc., an identifier number 14, It contains personal information 29 such as the customer's name, address, e-mail address, gender, date of birth, etc., the validity period 26 of the card 250, the customer's credit information 43, and the usage status 35.

[0183] The customer service query 217e discloses the card usage status 35 and the like to the cardholder 105 when the customer terminal 17 is also contacted via the information network 101 such as the Internet. This is the tape to do.

In the financial customer database 182, the identifier table 66e, the encoding method table 212, and the determination table 86 are provided. If necessary, 180 may construct an authentication system for the card 250 without relying on the identifier 1, of course.

[0185] Chapter 4: Section 2: Section 6: Management Database 176 in Management Center 175!

The management database 176 will be described below with reference to FIG.

The management database 176 is provided in the management center 175. This management database 176 allows the cardholder 105 to be charged, and includes a user management table 222, a financial approval table 223, a signing method table 212f, a determination table 86f, and a status data table 218f. , An identity authentication table 226f and a usage status query 229.

[0186] The user management table 222 is a table for registering and managing the card 250 on the assumption that payment is made. The card number 4, the identifier number 14, the personal information name 22, address 23, telephone Number 38, e-mail address 24, etc., and the expiration date of the card 250 are recorded.

[0187] The financial approval table 223 is a table for managing approval data on whether or not the card 250 can be used by a financial institution registered in the card 250. Regarding the authentication of the card 250 when approving the use of the card 250, it is optional to determine whether the identifier 1 is authenticated by the identifier management center 102 or the authentication system of the financial institution that issued the card. it can. The usage status query 229 is a query for disclosing the usage status 35, which is a usage history storing the use of the identifier, to the identifier owner when the identifier owner makes an inquiry to the management center 175 via the customer terminal. It is.

[0188] Chapter 4: Section 2: Section 7: Selecting Information Disclosure Level and Marketing Support.

In addition, this section describes a system in which the cardholder can limit the information that the cardholder discloses by himself by selecting the disclosure level at which the personal information is gradually distinguished when issuing the card. In addition, even small-scale retail stores 150 can receive data on customer attributes and purchasing behavior. In addition, the customer center 110 manages the retail Analyze customer attributes (gender 'age' annual income, etc.) and purchasing behavior (purchased products 'consumption amount', purchase frequency, etc.) of customers who come to the store upon request from store 150, and plan events according to seasonal factors, etc. We propose a system that enables marketing support to make proposals.

[0189] In addition, the card holder can select the disclosure level at the window where the card is used, and furthermore, if it is deemed that more desirable services are necessary, the customer attributes described later can be used. Registering 235 allows you to receive services based on the cardholder's purchasing behavior.

The details will be described below with reference to FIGS. 24 and 25.

The disclosure level forms shown in (A) to (F) of FIG. 24 correspond to the identifier user table 211 of the identifier management center 102, the F customer table 227 of the franchise headquarters 161 or the customer center 110 of the customer center 110. This is an example of a form for recording personal information step by step in the customer table 228. In these forms, the personal identification number 106 is adopted as data required for personal identification, and the personal identification number is recorded in the personal identification table at the same time as the personal information, thereby enabling personal identification.

[0191] Fig. 24 (A) shows a disclosure level form 260 in which a level display 254 described later corresponds to the "level 1" card 250, and (B) shows a disclosure level form corresponding to the "level 2" card 250. (C) is the disclosure level form 262 corresponding to the “level 3” card 250, (D) is the disclosure level form 263 corresponding to the “level 4” card 250, and (E) Is the disclosure level form 264 corresponding to the “Level 5” card 250, and (F) is the disclosure level form 264 corresponding to the “Level 6” card 250. The customer attributes 235 in the disclosure level forms 263-265 are information required for market research (marketing) such as gender 'birth date' 'family composition' annual income. Therefore, according to these forms, for example, when a customer attempts to register a card, by specifying and registering a form of personal information that the customer is willing to disclose, the disclosure level Will be issued.

[0192] Next, when the relationship between the disclosure level that distinguishes personal information step by step and the content of the information that is stepwise distinguished is listed below,

a, "Level 1": "Not disclosed" b, "Level 2": "E-mail address"

c, "Level 3": "Name + address + phone number + email address"

d, "Level 4": "Customer attributes"

e, "Level 5": "Email address + customer attributes"

f, “Level 6”: “Name + address + phone number + email address + customer attribute”.

[0193] Therefore, when the level display 254 of the card 250 is, for example, "level 2", only the "e-mail address 24" is registered as the personal information relating to the card 250 !, na! /. If the level display is “Level 1” or “Level 4”, the customer contact information is unknown. In other words, if the cardholder wants to limit his or her personal information, he / she can select the corresponding disclosure level and register it. It is good.

On the other hand, the marketing table 246 shown in FIG. 25 is provided in the customer center 110, the franchise headquarters 161 and the like, and manages information such as the store number 33, the identifier number 14, the customer attribute 235, the usage information 236, etc. Record The usage information 236 is information required when conducting a market research (marketing) on the purchase behavior, purchase amount, purchase time, etc. of the cardholder, and the retail store power is also transmitted together with the point information. . Therefore, by analyzing the identifier number 14 and the usage information 236, it is possible to grasp the dynamics of the customers who own the identifiers that have visited the retail store 150, etc., and consequently corporate activities such as seasonal events and product purchases. Can be used as a basis. For further analysis, it is possible to understand the dynamics of the cardholder in more detail by analyzing the customer attribute 236.

As described above, when the personal information corresponding to the level display 254 of the card 250 is recorded in the identifier user table 211 and the marketing table 246 is set in the terminal management sector such as the customer center 110, a very small Even if it is a private store, it is possible to receive marketing support from the customer center 110 as needed, and at the same time, it is possible to obtain an effect that the cardholder 105 can avoid unnecessary disclosure of its own information [0196] In the present embodiment, a dedicated disclosure level form for recording personal information step by step is provided. However, each form is divided in this way in order to explain the present embodiment. Various forms of form can be adopted, such as one form that can register information of all disclosure levels. In addition, the card holder who owns a card 250 with disclosure level 6 (disclosure level form 265) that discloses the most personal information Selects the disclosure level at the window of a retail store 150, etc., and records the information recorded in the terminal management sector. Needless to say, it is possible to limit the

[0197] In addition, for the identifier 1 registered in the disclosure level forms 264 and 265 where the contact information of the cardholder 105 such as the name 22 and the address 23 and the e-mail address 24 is unknown, the identifier is managed by the identifier number 14. The service can be received by accessing the integrated service query 214 of the center 102. However, with the card 250 whose contact information is unknown, information such as events and the like are not sent to the customer center, and it is necessary to access the identifier management center and the like as necessary.

[0198] Although the present example has been described above, the card number 251, the identifier number 14, the identifier analysis data 15 and the like have been described as examples of codes for specifying a card (medium), but the present invention is not limited to this. It is also good as a code to identify the card by combining the independent information of!

[0199] In this example, it is needless to say that a database of another format may be used as long as data can be managed without being limited to the relational database format.

[0200] Chapter 4: Section 3: About the processing flow of the network system 100!

In this section, the processing flow of the network system 100 will be described with reference to FIG. 26 to FIG. 30 which are block diagrams.

[0201] Chapter 4: Section 3: Section 1: Registering Card 250 at Retail Store 150

An example of newly registering a card 250 (see FIG. 31) provided with an identifier in the retail store 150 will be described based on a retail store identifier registration sequence 280 shown in FIG. First, in the card registration application step S1, the card holder 105 presents the card 250 to the retail store 150 in the terminal sector 311 to apply for registration. In step S2 of collecting the identifier information and transmitting the data group, the identifier 1 of the registered card 250 is The data is converted into data by the device 152 (first information processing unit) and recorded in the identifier registration table 220. Next, the recorded data is transmitted to the customer center 110 of the supervising sector 314 as a data group (one of the code data group 84, the encrypted data group 87, the analysis data group 94, etc.). At this time, the retail store 150 and the customer center 110 belong to the same observation method group or the encoding method group.

[0202] In the data の中 In step S3, the customer center 110 records the data from the retail store 150 in the inquiry table 219 of the service database 111 and, if the identifier number 14 is not registered, the identifier management center. The data required for authenticity determination is transmitted to 102. In the determination step S4, the transmitted data group is received by the identifier management center 102 of the management sector 313, and the identifier code data 16 of the data group and the identifier data 19 (Ta) of the identifier table 66a are converted into the second information. The authenticity is determined by collation in the processing unit, and the result is recorded in the determination table 86a.

[0203] In the transmission step S5, the determination result 20 of the identifier 1 is transmitted to the customer center 110, and if the determination result is "True", it is stored in the status data table 218a of the integrated database 103. Status data 21 and personal information such as "name, address, telephone number, e-mail address, etc." are transmitted, and if the result of the authenticity judgment is "False", the customer center 110 Unacceptable information is sent.

[0204] In the recording step S6 in the service database, if the judgment result is "True", the customer center customer table 228 of the service database 111 of the customer center 110 based on the information from the identifier management center 102. Information such as “identifier number 14, status data 21, name 22, address 23, and e-mail address 24” is recorded. In the next transmission step S7, the customer center 110 transmits the determination result of the card 250 to the retail store 150.

[0205] In the identifier registration step S8, if the information from the customer center 110 is "True", a code (card number, identifier number, etc.) identifying the card 250 is stored in the retail store database 151 of the retail store 150. ) Is registered. Therefore, when the card holder 105 uses the card 250 thereafter, it is possible to accumulate points in the code specifying the card 250. If the information is "False", the card 250 is registered in the retail store database 151. Instead, cardholder 105 is notified of the result. The series of steps is completed by permitting the card holder 105 to use the card in step S9.

[0206] Chapter 4: Section 3: Section 2: How to Disseminate Event Information for Retail Stores 150 to Cardholders 105. Even if the cardholder 105 of the already registered card 250 does not disclose personal information such as address and name to the retailer 150, even if the retailer 150 can transmit event information etc. to the cardholder 105, This will be described with reference to the event information sequence 281 shown in FIG. When the cardholder 105 purchases a product in the product purchase step S15 and presents the card 250 in the card presentation step S16, the retailer 150 activates the card 250 in the card authentication step S17. Done.

[0207] The authentication of the card 250 is optional, and the card may be authenticated by the simple determination means 303 for checking the code (card number, identifier number, etc.) specifying the card 250. When performing up to the authenticity determination means 304, which is a more advanced authentication, the card 250 is determined by performing the above-described collection of the identifier information and the data group transmission step S2 to the identifier registration step S8. good.

[0208] Next, in the point processing step S18, information such as points 37 and grades 42 is added as identifier-related information according to the point grant criteria determined by the retail store 150, such as the purchase amount, and registered in the customer management table 221. Is done. The added information is reflected in the point 37 and the grade 42 of the store management table 225 of the service database 111 of the customer center 110 as needed.

[0209] In event planning step S19, retail store 150 plans event planning according to the opportunity.

In the next step, creation of an event instruction table S20, a numerical value of a point 37, a grade 42, and the like are set as conditions 31 for providing a service to the event instruction table 230. For the contents 31a of the shipment made when these conditions 31 are satisfied, for example, if the point 37 is “200” or more and the grade 42 is “G1 (ex. Free member)”, the e-mail is delivered and the point 31 If the number is “150” or higher and the grade is “G2 (eg paid member etc.)”, it is agreed to send e-mails and deliver magazines.

[0210] Event instruction table creation step The store 230 and the store number specifying the retail store 150 that planned the event are transmitted to the customer center 110 in the event generation instruction step S21. In the next event information processing step S22, the identifier number 14 associated with the store number 33 recorded in the customer store management table 225 of the customer center 110 and the service database 111 and the identifier number 14 are assigned. With reference to the points 37 and grade 42, a shipping data table 215 is created based on the contents of the event instruction table, and the shipment 58 of this table 215 is sent to the cardholder in the next shipping step S23. I do.

[0211] In the event information acquisition step S24, the series of steps is completed when the cardholder 105 receives the shipment 58 such as an e-mail or a magazine. According to these steps, the shipment 58 can be transmitted to the cardholder 105 via the customer center 110 even if the name and address of the customer are unknown at the retail store 150.

[0212] Chapter 4: Section 3: Section 3: Changing Personal Information!

The method for supplementing the identifier-related information and changing the data when the personal information such as the address of the cardholder 105, which is the identifier-related information related to the identifier, needs to be changed is described in FIG. 28. This will be described below based on the personal information etc. change sequence 282. If there is a situation where data such as loss, theft, dirt, address change, telephone number change, name change, etc. of the card 250 occurs in the step S30 where the change situation occurs, the card is owned in the next access step S31. Party 105 accesses identifier management center one 102 of management sector 313 via customer terminal 170.

[0213] In the personal authentication step S32, the identifier management center 102 asks the card holder 105 to input a personal identification number or perform personal authentication such as data of physical characteristics in order to perform personal authentication. And the data responded to this request is compared with the data of the personal identification number 106 or the physical characteristic 107 stored in the personal authentication table 226a of the integrated database 103 to determine whether or not the person is an individual. Is recognized, and when the person is authenticated, the process proceeds to the next step.

[0214] In the next data change step S33, a change form 232a of the integrated database 103 is created corresponding to the cardholder identifier number 14, and reflected on the customer terminal 170 of the cardholder 105. Change the contents of the change form 232a reflected on the customer terminal 170. When the cardholder 105 inputs in the change operation step S34, the changed data is reflected on the change form 232a of the integrated database 103. When the change is completed, the card holder 105 transmits data indicating the end of the change operation in a change operation end step S35.

[0215] When the change operation is completed, the identifier management center 102 transmits the data to the customer center or the like in which the identifier 1 of the card 250 is registered in the new data transmission step S36, so that the identifier user table 211 of the integrated database 103 is transmitted. The URL (Uniform Resource Locator) data of the customer center 110 belonging to the terminal management sector 312, the franchise headquarters 161 and the management center 175, etc. stored in the registration center 25 of the terminal are called and changed to the server of these URLs. New data is sent. In the change processing step S37, the change processing is performed based on the data relating to the identifier 1 transmitted to the terminal management sector 312. In the information transmission step S38 to the card holder 105, it is notified that the change has been reflected.

The card holder 105 confirms that the change has been reflected in the confirmation end step S39, and ends a series of change operations.

Further, it is also possible to transmit new data to the financial institution 180 at the time of the new data transmission step S36, and change the data of the financial institution 180 at the same time. In this example, the data is changed via the customer terminal 170 when changing the data. This example excludes various means such as changing the data by telephone or directly contacting the staff at the change window. is not.

[0216] Chapter 4: Section 3: Section 4: Registration Status of Identifiers

In this section, two examples of the method of inquiring the registration status of the identifier will be described.

An example of the first processing flow is that the cardholder 105 performs personal authentication at the identifier management center using the customer terminal 170 and then stores the information stored in the lower-level center via the identifier management center. In the second example, the flow of processing is to directly access each center and perform personal authentication each time.

[0217] In the case of the first processing flow, since the data of the personal authentication can be centrally managed by the identifier management center, the personal authentication table can be omitted in a lower center or the like. In addition, measures such as changing the PIN at the lower center It is possible to save time.

[0218] Hereinafter, the first embodiment of this section will be described based on the collective access sequence 283 shown in FIG.

In the card information inquiry step S45, the cardholder 105 confirms the number of customer centers registered with the customer's own card 250 and the number of points at which retail stores, etc. Using 170, it is possible to query the center where the identifier 1 is registered, or the headquarters of the financial institution where the card is registered.

[0219] First, when the identifier management center 102 is accessed from the customer terminal 170, in the personal authentication step S46, the identifier management center 102 inputs the personal identification number to the card holder 105 to perform personal authentication, or Requests data for personal authentication, such as physical characteristic data, and responds to this request with the data of personal identification number 106 or physical characteristic 107 stored in personal authentication table 226a of integrated database 103. Then, it is determined whether or not the person is the person, and if the person is authenticated, the process proceeds to the next step.

[0220] In the next step, step s47, which is access to the integrated service query 214, information on the card 250 in the identifier management center 102 is presented to the cardholder 105 by the integrated service query 214. In the column of the registration center 25 of the integrated service query 214, an arbitrary number of centers (the customer center 110, the franchise headquarters 161, the financial institution headquarters 181, the management center 175, and the like) in which the card 250 is registered are displayed and displayed. The links (URLs) to these centers or headquarters are set. For example, if you click “Sel” (tentative name) with the URL of the customer center 110 of the registration center 25 with your mouse, the customer information will be displayed. The process proceeds to the disclosure step S48, and the contents of the customer service query 217b of the customer center 110 are displayed on the display unit, not shown in the drawing of the customer terminal 170, and the retail store 150 managed by the customer center 110 in which the identifier 1 is registered is registered. And the points 37 and grades 42 granted at these retailers are displayed. Situation can be known.

[0221] Further, in the display of the store a displayed in the column of the store number 33 of the customer service query 217b, A link (URL) is set, so if you click this display with a mouse or the like and specify it, the contents of the a store's homepage or the customer service query 217c of the retail store database 151 will be stored in the customer terminal 170. It is possible to shift to the store information disclosure step S51 to be displayed, and after browsing the information at the retail store 150, it is possible to select whether to return to the access step S47 to the integrated service query 214 again or to shift to the end step S52. .

Next, the use status data disclosure step S49 will be described. When the card 250 is registered with the financial institution headquarters 181, the financial institution is displayed in the column of the registration center 25 of the integrated service query 214 of the identifier management center 102. By specifying the display of this financial institution, the contents of the service query 217e for the customer of the financial institution can be displayed on the customer terminal by the hyperlink function. After confirming this content, it is possible to select whether to access the integrated service query 214 again and return to S47, or to shift to the end step S52 for ending a series of steps.

Next, the usage status data disclosure step S50 for accessing the management center 175 will be described. If the card 250 is registered with the management center 175 (e.g., a bicycle storage management office, a coin locker management office, etc.), the management center 175 displayed in the registration center 25 of the integrated service query 214 is displayed. When the display to be specified is specified (clicked), the contents of the usage status query 229 of the management center 175 are displayed on the customer terminal 170 by the dipper link function (URL) embedded in the display, and the usage status of the cardholder 105 is confirmed. After confirming the content, the process proceeds to the end step s52. Note that it is also possible to return from the data disclosure step to the integrated service query access step S47. That is, since a single operation of the card information inquiry step s45 enables access to a plurality of customer centers, financial institutions, management centers, and the like, the personal authentication step S46 can be performed only once.

[0224] When connecting to another server by a hyperlink from the integrated service query 214, a function of performing mutual authentication between the server on the calling side and the server on the receiving side using SSL (Secure Sockets Layer) or the like to securely communicate. It is preferred to be configured to have

[0225] As described above, according to the first embodiment of this section, when the user is authenticated and accesses the integrated service query 214 of the identifier management center 102, the terminal management sector 31 in which the card 250 is registered is registered. It is possible to refer to the queries of 2 and the terminal sector 311 with one authentication. Further, in the first embodiment of this section, even if the personal identification number 106 of the personal authentication table 226 in the terminal management sector is not used, the security of communication is ensured by mutual authentication between information processing apparatuses. I have.

Next, FIG. 30 shows an outline of a second example of the processing flow of this section, in which a customer terminal 170 directly inquires of each customer center or a financial institution about the use situation. As shown in FIG. 30, the individual access sequence 284 is different from the access to the retail store 150 except for the steps S45a and S45d. The nature is generated.

[0227] Even in such a processing flow, it is possible to directly make an inquiry to each center or the like. Further, the second embodiment and the first embodiment of this section may be used in combination.

[0228] Chapter 5: Issuance of Card 250 with Identifier.

Issuance of a card 250 (medium) with an identifier.

Cards 250 are issued by applying to the Identifier Management Center 102, and cards issued by applying at counters such as financial institutions 180, franchise headquarters 161 and customer service centers 110.The settlement function is added as necessary. Is done. There is also a method in which a card 250 having a disclosure level of the identifier number 14 and the personal identification number 106 is created in advance and distributed at the retail store 150 at the same time as a pamphlet with the personal identification number 106 or the like. In this case, it is preferable to register the identifier number 14 in the customer management table 221 of the retail store database 151 in advance at the retail store to distribute.

[0229] Chapter 6: Description of specific card shapes with said identifiers,

This section describes an example of a card with identifier 1.

FIG. 31 shows a card 250 with an identifier adopted for a credit card issued by a financial institution.

Fig. 31 · (A) shows the front side and (B) shows the back side.

On the surface of the base material 258 of the card 250, a card on which an identifier 1, an identifier number display 2 for identifying the identifier 1, and a card number 251 indicating a branch number, a customer number, etc. of the issuer are entered. Number column 252, registration sticker pasting column 255, and identifier 1 There is provided a free card display 253 which is a mark indicating the personal information, and a level display 254 which indicates the disclosure level of the personal information of the owner of the card 250! /.

[0230] On the back side, a contact telephone number 256 and a signature field 257 are provided.

With such a configuration, for example, even a card 250 issued by a financial institution can be used as a point card at a nearby retail store. That is, the card holder is registered as a customer of the retail store 150 by the above-described retail store identifier registration sequence 280, and more preferably, a seal 259 indicating that the customer has been registered is registered in the registration sticker pasting box 255. By sticking, the card 250 can be used as an indicator of which retail store 150 is registered.

[0231] As a result, the owner of the identifier card can obtain benefits such as coupons issued by a number of retailers who could not be received without carrying a large number of membership cards by using a single identifier card. The powerful effect that can be received so far is obtained. In the present embodiment, the force described for the card in which the identifier 1 is provided in a part of the base material 258 of the card 250 can be used as the identifier 1 by using the entire base material 258 of the card 250, for example. In other words, information such as the card number 251 and the free card display 253 can be directly written into the identifier 1 and used as the card 250. Therefore, it goes without saying that the form of the card 250 of the present invention is not limited to the above-described embodiment, and various changes can be made without departing from the scope of the invention.

[0232] In the embodiment, the number or the symbol for specifying the identifier has been described. However, the means for specifying the identifier is not limited to these. For example, the identifier may be specified by the identifier code (F). Because it is possible to build a specific database

In the embodiment described above, the identifier 1 is used for a card having the same shape as a conventional credit card. However, the present invention is not limited to this. For example, the identifier 1 may be a bar, a cone, a cylinder, or a cube. It goes without saying that it is also possible to provide an identifier for a variety of shapes and a part of something normally carried such as a mobile phone.

[0234] Further, symbols and the like entered in each column of the table, query, form, and the like in the present embodiment are inserted above for convenience to illustrate and explain the structure of each table. It has no specific meaning.

[0235] Also, the order in which the above-described steps are performed is for illustrative purposes only, and the steps in each process may be performed in any order or in parallel.

[0236] Although the present invention has been specifically described based on the embodiments, the present invention is not limited to the above-described embodiments and may be variously modified without departing from the gist thereof. Needless to say.

Industrial applicability

[0237] The present invention can be adopted as a network system for managing credit cards and ID cards, and can be used as an observation method even if data is eavesdropped during communication that is difficult to forge a card.

By changing the encoding method and the encoding method, it is possible to counter malicious parties, so that the cost of security for the entire system can be reduced. It can be applied to various systems that require personal authentication, such as a key system for coin lockers, a key system for bicycle parking lots, and a personal registration card system for emergencies. Also, it is possible for the cardholder to select the personal information to be disclosed at his own will. Furthermore, even a small retail store is a system that enables customer management, issuance of coupons such as points, and transmission of information, and its industrial use has a wide variety of possibilities.

Brief Description of Drawings

FIG. 1 is a diagram showing an example of identifier analysis data and identifier code data of an identifier according to an embodiment.

FIG. 2 is a diagram showing an example of identifier analysis data and identifier code data.

FIG. 3 is a diagram showing an example of identifier analysis data and identifier code data.

FIG. 4 is a diagram showing an example of a frame figure of identifier code data.

FIG. 5 is a diagram showing an example of a frame figure of identifier code data.

FIG. 6 is a diagram showing an example of a frame figure of identifier code data.

FIG. 7 is a table structure diagram for explaining an example of an IC encoding method.

FIG. 8 is a block diagram showing an example of an authenticity judgment system provided with a code-making method.

FIG. 9 is a block diagram illustrating an example of a first information processing unit and a code data group. [10] FIG. 10 is a block diagram for explaining another example of the first information processing unit and the code data group. [11] FIG. 11 is a block diagram illustrating an example of a second information processing unit and an identifier DB (database).

[12] FIG. 12 is a block diagram for explaining an example of an authentication determination system including an analysis data determination unit.

[13] FIG. 13 is a block diagram illustrating an example of a first information processing unit and an analysis data group. [14] FIG. 14 is a block diagram illustrating an example of a second information processing unit and an identifier DB (database).

FIG. 15 is a conceptual diagram for explaining the overall concept of the network system.

[16] FIG. 16 is a conceptual diagram for explaining the authenticity judgment.

[17] FIG. 17 is a conceptual diagram for explaining the authenticity determination system.

FIG. 18 is a conceptual diagram for explaining an example of an integrated database provided in an identifier management center.

FIG. 19 is a conceptual diagram for explaining an example of a service database provided in a customer center.

[20] FIG. 20 is a conceptual diagram for describing an example of a retail store database provided in a retail store.

FIG. 21 is a conceptual diagram for explaining an example of a member store database provided in the franchise headquarters.

[22] FIG. 22 is a conceptual diagram illustrating an example of a financial customer database provided in a financial institution.

[23] FIG. 23 is a conceptual diagram illustrating an example of a management database provided in a management center.

FIG. 24 is a diagram showing an example of a table structure of a database form.

FIG. 25 is a diagram illustrating an example of a marketing table in the database.

FIG. 26 is a block diagram illustrating an example of a processing flow when registering an identifier at a retail store.

FIG. 27 is a block diagram for explaining an example of the flow of processing of event information. FIG. 28 is a block diagram for explaining an example of a flow of a process of changing identifier information. [En 29] FIG. 29 is a block diagram for explaining that a cardholder can browse information in a network with a single authentication.

FIG. 30 is a block diagram for explaining a flow of a process of individually accessing a cardholder when acquiring information in the network.

FIG. 31 is a plan view showing an example of a card provided with an identifier, wherein (A) shows a front surface and (B) shows a back surface.

Explanation of symbols

1: Identifier

2: Identifier number display

4 Card number

8 Cutting point

12: (a) Encoding method data

13: (A) Observation method data

14: (T) identifier number

15: (Ka) identifier analysis data

16: (F) Identifier code data

17: (f) Dummy data

18: (R) remote encoded signal

19: (Ta) identifier data

20: (G) Judgment result

29: Personal information

51, 54: Code table

55: Encoding method table

56: Symbol table

58: Shipment

62: 1st information processing section

66 · 66a-66e: Identifier table Remote signal

Identifier encoding unit

Output section

Input section

Code data group (Data group) Code judgment unit

Judgment table

Autonomous coding method data output section Analysis data judgment section

2nd information processing section

Code dummy data generator Analysis data group (data group) Identifier D B

: Network system

: Information network

a: Closed information network

: Identifier Management Center

: Integrated database

: Information processing device (2nd information processing

: Card holder

: PIN

： Physical characteristics

a-b: Customer Center

: Service database

: Information processing equipment

: Customer number

: Usage situation

: Store customer information 140 Public Institutions

141 Personal Database

142 Information processing unit

145 Personal Credit Intelligence Agency

146 Personal Credit Information Database

147 Information processing device

1 50a-1d: Retail store

151 zJ, shop database

152 Information processing unit (1st information processing unit)

160 franchise chains

16 1 Franchise Division (Customer Center

162 Merchant Database

163: Information processing device (first information processing unit)

165: Merchant

166: Card reader

170: Customer terminal

1 75: Management Center

1 76: Management database

1 77: Information processing device

178a-b: Service terminal

80: Financial institution

81: Financial Institution Headquarters

82: Financial Customer Database

83: Information processing device (second information processing unit) 85a-b: Branch

86: Terminal (1st information processing section)

90: Security agency

91: Customer management database : Information processing equipment

: Authentication system with encoding method

: Analysis data authentication system

a—e: Encoding method group

a-c: Observation method group

: Identifier user table

: Encoding method table

: Integrated service query

: Shipping data table

: Shipping management table

: Service query for customer

: Status data table

: Inquiry table

: Identifier registration table

: Customer management table

: User management table

: Financial approval table

: Credit management table

: User management table

: Authentication table

: F customer table

: Customer center customer table (CU customer table): Usage query

: Event instruction table

: Analysis data table

: Change form

: Customer attributes

: Purchasing information : Marketing table

: Card

: Free card display

: Level display

: Seal

-2 6 5: Disclosure Level Form

: Retail store identifier registration sequence

: Event information sequence

: Personal information change sequence

: Batch access sequence

: Individual access sequence

: Authentication system

: Terminal sector

: Terminal management sector

: Management sector

: Supervising sector

Line

楚 (鈸 2 ^,

Claims

The scope of the claims

[1] Identifiers whose information proving authenticity is published,

Identification information for identifying the identifier,

Authenticity determining means capable of determining the authenticity of the identifier by different methods, a terminal sector including an information processing device,

A controlling sector equipped with an information processing device;

A group comprising the information processing device of the terminal sector and the information processing device of the supervising sector,

In the group,

The information processing device of the terminal sector has an observation unit that observes the identifier and collects information,

The information processing device of the supervising sector has a storage unit that stores data of the identifier in advance in association with the specific information,

The authentication unit that determines the authenticity of the identifier based on the information on the identifier observed by the observation unit and the data on the identifier stored in the information processing device of the supervising sector, wherein a plurality of groups are provided. And a network system.

[2] The network system according to [1], wherein the identifier is provided with a physical feature by using contingency.

[3] In the information processing device of the terminal sector and the information processing device of the supervising sector belonging to the same group,

Identifier data stored in advance in the information processing device of the supervising sector;

A step in which the information processing device of the terminal sector collects information necessary for authenticating the identifier;

Transmitting the information of the identifier collected by the information processing device of the terminal sector to the supervising sector as a data group;

A judging step of judging the authenticity based on the data group transmitted by the information processing device of the supervising sector and the data of the pre-stored identifier;

The information of the terminal sector that transmitted the information of the identifier when it was determined as "true" in the determination step. 2. The network system according to claim 1, further comprising a step of transmitting the determination result of the identifier to a processing device.

[4] In the authenticity determining means for determining the authenticity of the identifier,

The data group has an identifier number (T), identifier code data (F) and encoding method data (a),

The information processing device of the supervising sector stores identifier data (Ta) related to the identifier number (T) of the data group,

Means for generating dummy data (f) from the identifier data (Ta) by the encoding method data (a);

4. The network system according to claim 3, wherein the dummy data (f) is compared with the identifier code data (F) to determine authenticity.

[5] identifier-related information that is information associated with the specific information;

The network system according to claim 1, wherein the information processing device of the supervising sector includes a storage unit that stores the identifier-related information, and an information supplement unit that supplements the identifier-related information.

[6] A medium used in the network system according to the above [1], wherein the medium is provided with an identifier provided with a physical characteristic by using accidental property.

[7] A medium used in the network system according to claim 1, comprising the identifier and a base material to which the identifier is attached.

[8] personal information of the owner of the identifier stored in the information processing device of the supervising sector;

A level display for displaying a disclosure level of the personal information registered when the medium having the identifier is issued,

The medium having an identifier used in the network system according to claim 1, wherein the medium is provided with the level indication.

[9] The controlling sector is

A management sector having an information processing device;

A terminal management sector having an information processing device,

The group that organizes the information processing device is: An information processing device of the terminal management sector that can be mutually authenticated with an information processing device of the management sector;

2. The network system according to claim 1, wherein the network system is composed of an information processing device of the terminal management sector and an information processing device of a plurality of terminal sectors that can be mutually authenticated.

[10] The network system according to [9], wherein the identifier is provided with a physical feature using contingency.

[11] a customer terminal of the owner of the identifier;

When the owner of the identifier accesses the information processing device of the terminal management sector via the information processing device of the management sector after the personal authentication, the information processing device of the management sector and the information processing device of the terminal management sector 10. The network system according to claim 9, further comprising: means for causing the customer terminal to display information stored in the information processing device of the terminal management sector.

[12] In the information processing device of the terminal sector and the information processing device of the management sector belonging to the same group,

A step in which the information processing device in the terminal sector collects information necessary for the identifier authenticity determination of the identifier sector previously stored in the information processing device in the management sector;

Transmitting the identifier information collected by the information processing device of the terminal sector to the information processing device of the management sector as a data group;

A judging step of judging the authenticity based on the data group transmitted by the information processing device of the management sector and the data of the pre-stored identifier;

10. The network according to claim 9, further comprising a step of transmitting the result of the determination of the identifier to an information processing device of a terminal sector that has transmitted the information of the identifier when the result of the determination is “true”. system.

[13] The information processing device of the management sector includes personal information of the owner of the identifier, and if determined to be “true” in the determination step, the terminal sector that has collected the information of the identifier. 13. The network system according to claim 12, wherein the personal information is transmitted to an information processing device in the terminal management sector belonging to the same group as the information processing device.

[14] In the authenticity determining means for determining the authenticity of the identifier,!

The information processing device of the management sector stores identifier data (Ta) related to the identifier number (T) of the data group,

13. The network system according to claim 12, wherein the dummy data (f) is compared with the identifier code data (F) to determine authenticity.

[15] identifier-related information that is information associated with the specific information;

10. The network system according to claim 9, wherein the information processing device of the management sector includes storage means for storing the identifier-related information, and information supplementing means for supplementing the identifier-related information.

[16] financial institutions with a settlement function,

16. The network system according to claim 15, wherein the identifier related information is approval data from the financial institution.

[17] In the information processing device of the terminal sector belonging to the same group and the information processing device of the terminal management sector,

The information processing device of the terminal management sector has a storage means for storing the identifier related information, and information supplementing means for supplementing the identifier related information,

The information supplementing means, when point information is added to the information processing device of the terminal sector in association with the identifier number, causes the information processing device of the terminal management sector to store the point information. 10. The network system according to claim 9, wherein

[18] a customer terminal of the owner of the identifier;

The identifier stored in the information processing device of the terminal management sector from the customer terminal Access means for accessing related information;

18. The network system according to claim 17, further comprising display means for causing said access means to display the identifier-related information stored in said terminal management sector on said customer terminal.

[19] A recording means for recording the status data of the identifier in the information processing device in the management sector,

Access means for accessing the situation data of a customer terminal of the owner of the identifier;

10. The network system according to claim 9, further comprising status data changing means for changing the status data by the owner of the identifier by the access means.

[20] The apparatus according to claim 19, further comprising: status data updating means for changing all of the status data recorded in the control section when the status data is changed by the status data changing means. The network system according to 1.

[21] The medium used in the network system according to the above [9], characterized in that the medium is provided with the identifier to which physical characteristics have been added by using contingency.

[22] The medium used in the network system according to claim 9, comprising the identifier and a base material to which the identifier is attached.

[23] a level display for displaying the personal information of the owner of the identifier stored in the information processing device of the management sector, and a disclosure level of the personal information registered when issuing a medium having the identifier;

10. The medium having an identifier used in the network system according to claim 9, wherein the medium is provided with the level indication.

[24] In the network system according to claim 9,

Usage information when the identifier is used in the terminal sector,

Having usage information recording means for recording the usage information in the information processing device of the terminal management sector,

A market research system, wherein the information processing device of the terminal management sector makes it possible to investigate the dynamics of the owner of the identifier from the usage information.

[25] In the network system according to claim 9,

A retail store equipped with the information processing device of the terminal sector,

A customer center equipped with the information processing device of the terminal management sector;

Having event instruction information in which the content of the event is recorded,

An event generation instruction step of transmitting the event instruction information from the information processing device of the retail store to the information processing device of the customer center;

The information processing device of the customer center refers to the stored identifier number using the retail store based on the event instruction information, and sends the e-mail to the mail address of the owner of the identifier of the identifier number. An event information transmission system, comprising: an event information processing step.

[26] In the network system described in claim 2,

The information processing device of the terminal sector,

An observation unit that observes the identifier,

Identifier analysis data output from the observation unit,

A first information processing unit that stores the identifier analysis data,

An identifier observing unit connected to the first information processing unit of the information processing device of the terminal sector.