WO2022085265A1

WO2022085265A1 - Fraud detection device for checking and authenticating person, application fraud detection method, and application fraud detection program

Info

Publication number: WO2022085265A1
Application number: PCT/JP2021/027773
Authority: WO
Inventors: 敬起長谷川; 潤也近藤; 雄一郎池田
Original assignee: 株式会社Elements
Priority date: 2020-10-22
Filing date: 2021-07-27
Publication date: 2022-04-28
Also published as: GB202307441D0; JPWO2022085265A1; GB2616145A

Abstract

[Problem] To provide a fraud detection device for checking and authenticating a person online, an application fraud detection method, and an application fraud detection program. [Solution] An application fraud detection device 30 comprises: an application data reception unit 110 that receives an appearance and identification matter for an applicant and a terminal identifier of an application terminal; an applicant database 40 that accumulates the received data; an applicant data comparison unit 120 that compares the appearance and identification matter for the applicant with an appearance and identification matter for a previous applicant; and an application fraud determination unit 130 that executes first application fraud determination when a previous applicant whose appearance is similar to the appearance of the applicant is found yet the identification matter for the applicant and the identification matter for the previous applicant do not match, or when a previous applicant whose identification matter matches the identification matter for the applicant is found yet the appearance of the applicant and the appearance of the previous applicant are dissimilar.

Description

Identity verification, identity verification fraudulent application detection device, fraudulent application detection method, and fraudulent application detection program

The present invention relates to a fraudulent application detection device, a fraudulent application detection method, and a fraudulent application detection program in the case of identity verification and identity verification using face recognition or the like.

Conventionally, research and development have been conducted on methods for detecting fraudulent applications in the case of identity verification and identity verification using face recognition or the like. For example, Patent Document 1 (Japanese Unexamined Patent Publication No. 2017-12570) discloses a method for preventing a malicious applicant from repeatedly making an unauthorized application in a system for registering an application such as opening an account.

The method for preventing fraudulent applications described in Patent Document 1 is to input data necessary for application for account opening, etc. from the terminal device of the applicant, and to register the application for account opening, etc. based on the data. A mobile terminal device equipped with a camera for inputting certificate data necessary for opening an account, a transmitting unit for transmitting certificate data, a receiving unit for receiving certificate data, and authenticity of the received certificate data. The authenticity determination unit, the history information storage unit that stores the history information associated with the check results of the certificate data input in the past from the mobile terminal device and the mobile terminal device, and the determination result of the authenticity determination unit. It is a fraudulent application prevention system including an application registration server including a comprehensive judgment unit that performs comprehensive judgment of certificate data based on history information and a transmission unit that transmits judgment result information of the comprehensive judgment unit.

Further, Patent Document 2 (Japanese Unexamined Patent Publication No. 2018-163677) is a service capable of efficiently detecting similar unauthorized access by creating a database of information that may be unauthorized access as a black list. The provision system, service provision method, collation device, collation method and computer program are disclosed.

The unauthorized access detection system described in Patent Document 2 includes a WEB server and an authentication server. The WEB server provides a service providing means for providing the user's information to the authentication server and providing the service to the user determined to be a legitimate user, and a transmitting means for transmitting the operation information of the user to the WEB server to the collation server. Have. The authentication server has a determination means for determining whether or not the user is a legitimate user based on the user's information, and a receiving means for receiving the probability that the user is not a legitimate user from the matching server.
In addition, the collation server includes a whitelist database that records information on the behavior of a legitimate user and a blacklist database that is registered when it is determined that the record does not correspond to the record in the whitelist database. The information is compared with the data in the blacklist database, and the index that the user is not a legitimate user is calculated from the degree of approximation and sent to the authentication server.

Further, Patent Document 3 (Japanese Unexamined Patent Publication No. 2004-259253) discloses a personal authentication device that collates not only a face image of a person but also a face image of a person requiring attention at the time of personal authentication.

The personal authentication device described in Patent Document 3 is a personal authentication device that authenticates that the user is the person, and is an image pickup unit that captures the user's face and a user's face image captured by the image pickup unit. A specific person comparison unit that compares the image of the person with the face image of the specific person held in advance, a person image acquisition unit that acquires the person's face image from the storage device, and a user's face image captured by the image pickup unit. And an authentication unit that determines whether or not the person's face image acquired by the person's image acquisition unit is an image of the same person by a different determination method based on the comparison result by the specific person comparison unit.

Further, Patent Document 4 (Japanese Unexamined Patent Publication No. 2019-086971) discloses a more convenient identity verification system and identity verification method using a face image.

In the identity verification system described in Patent Document 4, the identity verification server is based on an image data receiving unit that receives the certification image data of the license taken by the camera of the mobile phone, the face image data of the user, and the certification image data. The character acquisition unit that acquires character data, the score acquisition unit that collates the face image and face image data of the certification image data and acquires the score, and the face recognition determination that determines that face authentication is possible when the score is equal to or higher than the threshold value. It is provided with a unit and a face determination result transmission unit that transmits the determination result and the personal identification data included in the character data to the mobile terminal. When the score is near the threshold value, the face recognition determination unit determines that face recognition is possible if the position data received from the mobile terminal is close to the address, and if the authentication result is face recognition, the mobile terminal. Provided an authenticated data transmission unit that transmits personal identification data to the bank server 7.

Further, Patent Document 5 (Japanese Unexamined Patent Publication No. 2020-087461) discloses a personal authentication system, an authenticator, a program, and a personal authentication method with improved security.

In the personal authentication system described in Patent Document 5, in the personal authentication system including a mobile terminal equipped with a camera possessed by the user and a personal authentication server connected to the mobile terminal so as to be communicable, the mobile terminal is a personal authentication system. , An image storage processing unit that stores a face image, which is an image of the face of the holder holding a driver's license, acquired through a camera when verifying the identity of the user in the collation image storage unit as a collation image, and a service. At the time of use, the face image acquisition collation unit that acquires the face image of the service user via the camera and collates it with the collation image stored in the collation image storage unit, and the collation result by the face image acquisition collation unit are stored in the personal authentication server. It is provided with a collation result transmission unit for transmitting to. The personal authentication server includes a service use permission unit that permits the use of the service based on the collation result.

Japanese Unexamined Patent Publication No. 2017-12570 Japanese Unexamined Patent Publication No. 2018-163677 Japanese Unexamined Patent Publication No. 2004-259253 Japanese Unexamined Patent Publication No. 2019-086971 Japanese Unexamined Patent Publication No. 2020-087461

In recent years, transactions via the Internet have expanded due to the development of information and communication technology and the improvement of services of businesses pursuing customer convenience. For example, financial institutions are developing various financial services such as opening an account or transferring funds through the Internet.
On the other hand, such Internet transactions are more anonymous than face-to-face transactions, and the unauthorized use of services by criminals is increasing.
Therefore, businesses such as financial institutions are working to prevent abuse of their services by performing online identity verification and identity verification when providing services via the Internet.
In online identity verification, in general, the identity described in the identity verification document is based on the identity verification data taken by the software provided by the business operator and the image data of the identity verification document with the identity such as a driver's license. We confirm specific matters (for example, name, date of birth, address, driver's license number, etc.), and confirm that the identity verification data matches the image data of the identity verification document. However, the current situation is that criminals are constantly misrepresenting their identity (for example, name, date of birth, address, driver's license number, etc.) and impersonating another person or a fictitious person. This is because the forgery of the identity verification document is easy, and it is difficult to detect the elaborate one from the image data.
In addition, in online identity verification, the customer whose identity has been confirmed is authorized to access the service by means of authentication such as ID and password, but the password is stolen by phishing by a criminal. , The current situation is that unauthorized access is expanding.

In the method of preventing an unauthorized application described in Patent Document 1, the authenticity determination unit checks whether the characters, symbols, etc. described in the image data of the driver's license conform to the predetermined rules, and the truth of the application data is obtained. Judge false. Further, the history information storage unit compares the terminal ID of the mobile terminal device with the terminal ID recorded in the history information table, and determines whether or not the terminal ID has been determined to be forged in the past. In the case of the method of Patent Document 1, even if the driver's license is forged, if the characters, symbols, etc. described in the image data of the driver's license conform to the predetermined rules, it is not an illegal application. There is a risk of being judged.

In the unauthorized access detection method described in Patent Document 2, operation information such as OS, browser, language, IP address, time, and page transition is checked, and when the operation information is different even though the user is the same user. Prevents unauthorized access by determining that there is a high possibility of unauthorized access by a malicious third party, but determines that there is a high possibility of unauthorized access by a malicious third party. For this purpose, for example, normal access data of 20 times or more is required in advance, and it is considered that there is a high risk of using this unauthorized access detection method alone.

In the personal authentication device described in Patent Document 3, the face image of the user captured by the imaging unit is compared with the face image of a specific person held in advance, and the face image of the user is the face of the specific person. When it is similar to the image, it is more strictly determined whether or not the user's face image captured by the imaging unit and the person's face image acquired by the person's image acquisition unit are the same person's image. It is a thing.
However, in this case, if the face image of the person acquired by the person image acquisition department is not originally the person's, that is, if the name, date of birth, etc. are falsely registered at the time of the first registration, the person is not the person. May be authenticated.

In the identity verification system described in Patent Document 4 and Patent Document 5, the identity verification is performed by collating the proof image data of the driver's license with the face image data of the user, and if the license is forged, an error is made. There is a possibility that you will be authenticated.

A main object of the present invention is to provide an online identity verification and authentication fraudulent application detection device, a fraudulent application detection method, and a fraudulent application detection program.
In an online identity verification application, the combination of personal appearance data, personal identification items (for example, name, date of birth, address, driver's license number, etc.) and user's terminal identifier should be uniquely determined. Utilizing this feature, it detects the deception of a criminal's identity and the impersonation of another person or a fictitious person. That is, when multiple personal appearance data are applied for the same personal appearance data, when multiple personal appearance data are applied for the same personal identification matter, and from the same terminal identifier. When there are multiple applications for personal appearance data and personal identification items, it is detected as the first fraud judgment.
Further, the commercial database (black list) may be utilized for the personal identification items, the address, the telephone number, and the IP address of the access source at the time of the personal verification application, and if applicable, it may be detected as the first fraud determination.
In addition, by registering the personal appearance data, personal identification items, and terminal identifiers that have been first fraudulently determined in the gray list database and referencing them during online identity verification and personal authentication, further by the same criminal. Prevent unauthorized use. That is, when an application or access is made by any of the personal appearance data, the personal identification item, and the terminal identifier registered in the gray list database, it is detected as the second fraud determination.
Another object of the present invention is to provide a plurality of businesses to which a criminal provides a service with the same personal appearance data and a plurality of different personal identification matters, or with a plurality of different personal appearance data and the same personal identification matter. Or, a fraudulent application detection device, fraudulent application detection method, and fraudulent application detection program that can reliably detect fraudulent applications even when applying for identity verification with the same terminal identifier and multiple different personal identification items / personal appearance data. Is to provide.
If the fraudulent application detection device is closed by a single business operator, for example, apply for identity verification and personal authentication to different business operators with the same personal appearance data and multiple different personal identification items. Cannot detect fraud. The present invention provides a fraudulent application detection device, a fraudulent application detection method, and a fraudulent application detection program that can reliably detect fraud even in such a case.

(1)
The fraudulent application detection device for identity verification and identity verification that follows one aspect can use at least one of the applicant's identity data, the applicant's identity identification data, and the terminal identifier data of the applicant's application terminal. The application data receiving unit to be received, the applicant database that stores the personal appearance data, the personal identification matter data, and the terminal identifier data received by the application data receiving unit, and the personal appearance data of the applicant are stored in the applicant database. When the application data comparison department that compares the personal appearance data of the previous applicant and the application data comparison department finds the personal appearance data of the previous applicant that is similar to the personal appearance data of the applicant, the applicant If the personal identification matter data and the personal identification matter data of the previous applicant do not match, the fraudulent application determination unit that makes the first fraudulent application determination is included.
The personal identification matter data of the applicant is, for example, the applicant's name, date of birth, address, driver's license number, and other arbitrary information.

It is very unlikely that there will be another person with the same personal identification, so if an applicant with similar personal appearance and different personal identification is found, at least one of the applicants or previous applicants. Considering that there is a high possibility that one of them has made a fraudulent application, the first fraudulent application judgment is made.

(2)
The identity verification and identity verification fraud application detection device according to the second invention is the identity verification according to one aspect, and the application data comparison unit further applies for the applicant's identity identification matter data in the identity verification fraud application detection device. Compared with the previous applicant's personal identification matter data accumulated in the person database, the fraudulent application judgment department has the previous applicant's personal identification matter data that matches the applicant's personal identification matter data in the application data comparison department. In the case of discovery, if the personal appearance data of the applicant and the personal appearance data of the previous applicant are not similar, the first fraudulent application determination may be performed.

If the personal identification items match and the personal appearances are not similar, it is highly likely that the same person is impersonating another person with different personal identification items, so the first fraudulent application judgment is made.

(3)
The identity verification and identity verification fraud application detection device according to the third invention is the identity verification and identity verification fraud application detection device according to one aspect or the second invention. The terminal identifier data is compared with the terminal identifier data of the previous applicant stored in the applicant database, and the fraudulent application judgment unit is the terminal identifier of the previous applicant that matches the terminal identifier data of the applicant in the application data comparison unit. When the data is found, the applicant's personal appearance data and the previous applicant's personal appearance data are not similar, or the applicant's personal identification matter data and the previous applicant's personal identification matter data If they do not match, the first fraudulent application determination may be made.

The terminal identifier may be, for example, "a combination of terminal information such as an operating system (OS) type and version, a browser (BROWSER) type and version, and a terminal model", or "for software installed on the terminal". The issued UUID (UNIVERSALLY UNIQUE IDENTIFIER) "etc. can be used.

(4)
The fraudulent application detection device for identity verification and personal authentication according to the fourth invention is the fraudulent application detection device for identity verification and personal authentication according to the third invention from one aspect, and the fraudulent application determination unit determines the first fraudulent application. It may include a gray list database that records the applicant's personal appearance data, personal identification matter data, and terminal identifier data.

The applicant who made a fraudulent application in the previous personal application may also make a fraudulent application in the subsequent personal application. Therefore, by creating a gray list database that records the personal appearance of the applicant who was judged as the first fraudulent application judgment or the second fraudulent application judgment, the personal identification matter, and the terminal identifier, and using this, fraudulent application detection can be performed. Comprehensiveness can be improved.

(5)
In the identity verification and identity verification fraud application detection device according to the fifth invention, the identity verification and identity verification fraud application detection device according to the fourth invention, the gray list database registers arbitrary data related to the applicant. It may be possible. For example, the business operator that provides the service to the applicant or the system provider may be able to automatically or manually register the data.

In this case, the necessary data can be registered in the gray list database at the discretion of the business operator that provides the service to the applicant, the system provider, or the like.

(6)
The identity verification and identity authentication fraud application detection device according to the sixth invention is the identity verification and identity authentication fraud application detection device according to the fourth or fifth invention, and further, the applicant's personal appearance data is graylisted. Compared with the personal appearance data of the previous applicant accumulated in the database, the fraudulent application judgment department finds the personal appearance data of the previous applicant similar to the personal appearance data of the applicant in the application data comparison department. In, the second fraudulent application determination may be made.

In this case, it is possible to improve the comprehensiveness of fraudulent application detection by searching whether or not a previous applicant whose personal appearance data is similar to that of the applicant is in the gray list database.

(7)
The fraudulent application detection device for identity verification and identity verification according to the seventh invention is the identity verification and fraudulent application detection device for identity verification according to the fourth to sixth inventions. The personal identification matter data is compared with the personal identification matter data of the previous applicant stored in the gray list database, and the fraudulent application judgment department is the same as the personal identification matter data of the applicant in the application data comparison department. When the personal identification matter data of the above is found, the second fraudulent application determination may be made.

In this case, it is possible to improve the comprehensiveness of fraudulent application detection by searching whether the previous applicant whose personal identification item matches the applicant is in the gray list database.

(8)
The identity verification and identity authentication fraud application detection device according to the eighth invention is the identity verification and identity authentication fraud application detection device according to the fourth to seventh inventions. The terminal identifier data is compared with the terminal identifier data of the previous applicant stored in the gray list database, and the fraudulent application judgment unit is the terminal identifier of the previous applicant that matches the terminal identifier data of the applicant in the application data comparison unit. When the data is found, the second fraudulent application determination may be made.

In this case, it is possible to improve the comprehensiveness of fraudulent application detection by searching whether the previous applicant whose terminal identifier data matches the applicant is in the gray list database.

(9)
The identity verification and identity verification fraud application detection device according to the ninth invention is the identity verification and identity verification fraud application detection device according to the eighth invention from one aspect, and the applicant database and the gray list database are the applicants. It may be built across multiple operators that provide services to.

An applicant who applies for fraudulent identity verification may contact multiple businesses that provide services, such as multiple banks, with the same personal appearance data and multiple different personal identification items, or with multiple different personal appearances. In many cases, applications such as opening an account are made with specific matters, or with the same terminal and multiple different personal identification matters / personal appearances.
In the fraudulent application detection device for identity verification and personal authentication according to the fourth invention, the same personal appearance data and a plurality of different personal identification matters are used among a plurality of businesses, or a plurality of different personal appearances and the same personal identification matters. Even if an application for opening an account or the like is made with the same terminal and a plurality of different personal identification matters / personal appearances, it can be determined that the application is fraudulent.
Further, when a certain business operator records the data in the gray list database, it can be detected as an illegal application even when an application for identity verification, identity verification, etc. is made to another business operator.

(10)
The identity verification and identity verification fraud application detection device according to the tenth invention is the identity verification and identity verification fraud application detection device according to the ninth invention from one aspect. Upon receiving the access source IP address at the time of application, the fraudulent application determination unit may make the first fraudulent application determination when there is a suspicious point in the IP address.
The case where there is a suspicious point in the IP address is, for example, the case where the country code of the IP address is not Japan, or the case where it seems that an anonymous network is used.

Applicants who make fraudulent personal applications may apply via a foreign network or via an anonymous network.
The fraudulent application detection device for identity verification and personal authentication according to the fifth invention can detect a fraudulent application in such a case.

(11)
The identity verification and identity verification fraud application detection device according to the eleventh invention is the identity verification and identity verification fraud application detection device according to the tenth invention from one aspect. Upon receiving the address, the fraudulent application determination unit may make the first fraudulent application determination when the applicant's address is a non-existent address or a suspicious address.

In the case of fraudulent account opening or user registration application, a fictitious address may be listed as the applicant's address.
The fraudulent application detection device for identity verification and personal authentication according to the eleventh invention detects that the application is fraudulent if the address described in the application form is not an existing address or if the house is vacant. be able to. In detecting whether the application is fraudulent, for example, the address of the applicant may be collated with arbitrary data or information such as a commercial database.

(12)
The fraudulent application detection device for identity verification and identity verification according to the twelfth invention is the identity verification and fraudulent application detection device for identity verification according to the eleventh invention from one aspect. Upon receiving the telephone number, the fraudulent application determination unit may make the first fraudulent application determination when the applicant's telephone number does not exist or is a suspicious telephone number.

In the case of fraudulent account opening or user registration application, a fictitious telephone number or a telephone number for which payment of usage fees has been delayed may be listed as the applicant's telephone number.
In the fraudulent application detection device for identity verification and personal authentication according to the twelfth invention, when the telephone number described in the application form is not an actual telephone number, or when the payment of the usage fee is delayed, etc. Can detect that the application is fraudulent. In detecting whether or not the application is fraudulent, the applicant's telephone number may be collated with arbitrary data or information such as a commercial database.

(13)
The fraudulent application detection device for identity verification and personal authentication according to the thirteenth invention is the identity verification and fraudulent application detection device for personal authentication according to the twelfth invention from one aspect. The first fraudulent application determination may be made when the matter data corresponds to a person requiring attention.

In this case, the first fraudulent application determination can be made for the person requiring attention.

(14)
The method for detecting identity verification and fraudulent application for identity verification according to other aspects is at least one of the applicant's identity data, the applicant's identity identification data, and the terminal identifier data of the applicant's application terminal. And the application data receiving step to receive
The application data storage step for storing the personal appearance data, personal identification data, and terminal identifier data received in the application data reception step in the applicant database,
The applicant's personal appearance data is compared with the previous applicant's personal appearance data stored in the applicant database, and the applicant's personal identification data is stored in the applicant database. Application data comparison step to compare with data,
When the applicant's personal appearance data similar to the applicant's personal appearance data is found in the application data comparison step, the applicant's personal identification data and the previous applicant's personal identification data are one. If you haven't done so, or
When the previous applicant's personal identification data that matches the applicant's personal identification data is found in the application data comparison step, the applicant's personal appearance data and the previous applicant's personal appearance data are similar. If not, the fraudulent application determination step of performing the first fraudulent application determination is included.

The method for detecting fraudulent applications for identity verification and personal authentication according to other aspects is an invention of a fraudulent application detection method corresponding to the fraudulent application detection device for identity verification and personal authentication according to the first aspect and the second invention.

(15)
The fraudulent application detection program for identity verification and identity verification that follows other aspects is at least one of the applicant's identity data, the applicant's identity identification data, and the terminal identifier data of the applicant's application terminal. , The application data reception process to receive, and
The application data storage process that stores the personal appearance data, personal identification data, and terminal identifier data received in the application data reception process in the applicant database,
The applicant's personal appearance data is compared with the previous applicant's personal appearance data stored in the applicant database, and the applicant's personal identification data is stored in the applicant database. Application data comparison processing to compare with data and
When the applicant's personal appearance data similar to the applicant's personal appearance data is found in the application data comparison process, the applicant's personal identification data and the previous applicant's personal identification data are one. If you haven't done so, or
When the applicant's personal identification data that matches the applicant's personal identification data is found in the application data comparison process, the applicant's personal appearance data and the previous applicant's personal appearance data are similar. If not, the fraudulent application determination process for performing the first fraudulent application determination is included.

The identity verification and fraudulent application detection program according to the other aspects is the invention of the fraudulent application detection program corresponding to the identity verification and the fraudulent application detection device for the identity verification according to the first aspect and the second invention.

It is a schematic conceptual diagram of the identity verification or the identity authentication system including the fraudulent application detection device in the embodiment. It is a schematic diagram which shows the structure of the fraudulent application detection device. It is a table showing an example of the applicant database. It is a table which shows an example of a gray list database. It is a schematic flowchart which shows an example of fraudulent application judgment by a person's appearance, a person's identification matter, and an application terminal identifier. It is a schematic flowchart showing an example of fraudulent application judgment by comparison with the gray list database. It is a schematic flow chart showing an example of an incorrect application judgment based on the access source IP address, address, telephone number, and comparison of persons requiring attention.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the following description, the same parts are designated by the same reference numerals. Their names and functions are the same. Therefore, the detailed description of them will not be repeated.

[Embodiment]
(Overall configuration of identity verification or identity authentication system 60 including fraudulent application detection device 30)
FIG. 1 is a schematic overall configuration diagram of an identity verification or identity authentication system 60 including a fraudulent application detection device 30 according to the present embodiment, and FIG. 2 is a schematic diagram showing an example of the configuration of the fraudulent application detection device 30. ..

As shown in FIG. 1, the identity verification or identity authentication system 60 includes an applicant terminal 10, a reception terminal 20, a fraudulent application detection device 30, and a business operator terminal 50. The fraudulent application detection device 30 includes an applicant database 40 and a gray list database 45, and the applicant database 40 and the gray list database 45 are fraudulently included in another identity verification or identity authentication system 60. It is a common database with the application detection device 30.
The applicant terminal 10 transmits the applicant application data 70 such as the person's appearance, personal identification matters, address, and telephone number to the reception terminal 20. Further, the reception terminal 20 obtains a terminal identifier based on a combination of the OS type and version of the applicant terminal 10, the browser type and version, the terminal model name, and the like, and the IP address of the applicant terminal 10.
The applicant application data 70 such as the personal appearance, personal identification matters, address, and telephone number received by the reception terminal 20 is transmitted to the business terminal 50.
Further, the application data 80 including the applicant application data 70 such as the personal appearance, personal identification matters, address, and telephone number received by the reception terminal 20 and the terminal identifier and IP address of the applicant terminal 10 is the fraudulent application detection device 30. Will also be sent.
The fraudulent application detection device 30 stores the received application data 80 in the applicant database 40, and also uses the application data 80 stored in the applicant database 40 by its own fraudulent application detection device 30 and another fraudulent application detection device 30. The presence or absence of fraudulent application is determined, and the fraudulent application determination result 100 is transmitted to the business terminal 50.

As shown in FIG. 2, the fraudulent application detection device 30 includes an application data receiving unit 110, an application data comparison unit 120, a fraudulent application determination unit 130, an applicant database 40, and a gray list database 45. The applicant database 40 and the gray list database 45 are common databases with the fraudulent application detection device 30 included in the other identity verification or identity authentication system 60.
The personal appearance, personal identification matters, address, telephone number, terminal identifier of the applicant terminal 10, IP address, etc. received by the application data receiving unit 110 are stored in the applicant database 40 and sent to the application data comparison unit 120.
The application data comparison unit 120 compares the applicant's personal appearance, personal identification items, terminal identifier of the applicant terminal 10, IP address, etc. with the data stored in the applicant database 40, and the result of the comparison is the fraudulent application determination unit 130. Will be sent to.
The fraudulent application determination unit 130 compares the data of the applicant sent from the application data comparison unit 120 with the data stored in the applicant database 40, and for example, address existence determination, telephone number existence determination, IP address determination, etc. Use our commercial database to determine if your identity verification application is fraudulent. The details of the fraudulent application determination will be described later in (Flowchart for determining fraudulent application).
The fraudulent application determination result 100 is transmitted to the business operator terminal 50, and when a new fraudulent application is determined, it is added to the gray list database 45.

(Configuration example of applicant database 40)
FIG. 3 shows an example of the applicant database 40.
The applicant database 40 contains personal identification matter data, personal appearance data, application terminal identifier, access source IP address, address, and the like. The personal identification matter data is, for example, a name, a date of birth, an address, a driver's license number, and the like.

(Configuration example of gray list database 45)
FIG. 4 shows an example of the gray list database 45.
In the gray list database 45, in addition to the data of the applicant database 40, the fraudulent application determination result 100 is described. In the column of the fraudulent application determination result 100, it is desirable to specifically describe "reuse of personal appearance", "reuse of personal identification matters", and the like.
Further, the gray list database 45 may allow a business operator who provides a service to the applicant to register arbitrary data.

(Flow chart of fraudulent application judgment)
5 to 7 show a flowchart of fraudulent application determination. FIG. 5 is a flowchart of fraudulent application determination based on the person's appearance, personal identification items, and application terminal identifier, FIG. 6 is a flowchart of fraudulent application determination by comparison with the gray list database 45, and FIG. 7 is an access source IP address. , Address, telephone number, and a flowchart of fraudulent application determination by comparison with persons requiring attention.

First, the flow chart of the person's appearance, the person's identification item, and the fraudulent application determination based on the application terminal identifier will be described with reference to FIG.
(S1) The application data receiving unit 110 receives data such as a person's appearance, a person's identification item, an application terminal identifier, an IP address, an address, and a telephone number.
(S2) The application data receiving unit 110 sends the received data to the applicant database 40, and the applicant database 40 stores the received data. At this time, the application data receiving unit 110 also sends the received data to the application data comparison unit 120.
(S3, S4) The application data comparison unit 120 compares the personal appearance sent from the application data receiving unit 110 with the personal appearance of the data stored in the applicant database 40, and the applicant with a similar personal appearance is the applicant. Check if you are in database 40. The comparison result is sent to the fraudulent application determination unit 130.
(S5-S7) Based on the comparison result sent, if there is an applicant with a similar personal appearance in the applicant database 40, the fraudulent application determination unit 130 identifies the applicant's personal appearance. Compare with similar applicant's identity identification items. If the personal identification matter of the applicant and the personal identification matter of the applicant with similar personal appearance are different, the first fraudulent application judgment (reuse of the personal appearance) is made and the fraudulent application judgment result 100 is transmitted to the business terminal 50. At the same time, the applicant is registered in the gray list database 45.

(S8, S9) The application data comparison unit 120 compares the personal identification items sent from the application data receiving unit 110 with the personal identification items of the data stored in the applicant database 40, and the applicant has the same personal identification items. Check if is in the applicant database 40. The comparison result is sent to the fraudulent application determination unit 130.
(S10-S12) Based on the comparison result sent, the fraudulent application determination unit 130 shows the applicant's personal appearance when the applicant and the applicant with the same personal identification items are in the applicant database 40. Is compared with the personal appearance of the applicant who has the same personal identification matters. If the personal appearance of the applicant and the personal appearance of the same applicant are different from each other, the first fraudulent application judgment (reuse of the personal identification matter) is made and the fraudulent application judgment result 100 is transmitted to the business terminal 50. At the same time, the applicant is registered in the gray list database 45.

(S13, S14) The application data comparison unit 120 compares the terminal identifier sent from the application data reception unit 110 with the terminal identifier of the data stored in the applicant database 40, and the applicant with the same terminal identifier is the applicant. Check if you are in database 40. The comparison result is sent to the fraudulent application determination unit 130.
(S15-S18) In the fraudulent application determination unit 130, when an applicant having the same terminal identifier is in the applicant database 40 based on the sent comparison result, the terminal identifier determines the personal appearance of the applicant. Compare with the personal appearance of the same applicant. When the personal appearance of the applicant is similar to the personal appearance of the applicant having the same terminal identifier, the personal identification item of the applicant is further compared with the personal identification matter of the applicant having the same terminal identifier. If the personal appearance of the applicant is not similar to the personal appearance of the same applicant with the same terminal identifier, or if the personal identification items of the applicant and the personal identification items of the same applicant with the same terminal identifier are different, As the first fraudulent application determination (reuse of terminal identifier), the fraudulent application determination result 100 is transmitted to the business terminal 50, and the applicant is registered in the gray list database 45.

Next, a flowchart of fraudulent application determination by comparison with the gray list database 45 of FIG. 6 will be described.
(S19, S20) The application data comparison unit 120 compares the personal appearance sent from the application data receiving unit 110 with the personal appearance of the data stored in the gray list database 45, and the applicant with similar personal appearance is the gray list. Check if you are in database 45. The comparison result is sent to the fraudulent application determination unit 130.
(S21, S22) The application data comparison unit 120 compares the personal identification items sent from the application data receiving unit 110 with the personal identification items of the data stored in the gray list database 45, and the applicant has the same personal identification items. Check if is in the gray list database 45. The comparison result is sent to the fraudulent application determination unit 130.
(S23, S24) The application data comparison unit 120 compares the terminal identifier sent from the application data reception unit 110 with the terminal identifier of the data stored in the gray list database 45, and the applicant with the same terminal identifier is the gray list. Check if you are in database 45. The comparison result is sent to the fraudulent application determination unit 130.
(S25) Based on the comparison result sent, the fraudulent application determination unit 130 makes an application in which the applicant and the person-identifying matter have the same identity when there is an applicant having a similar appearance to the applicant in the gray list database 45. If a person is in the gray list database 45, or if an applicant with the same terminal identifier as the applicant is in the gray list database 45, the second fraudulent application determination is made and the fraudulent application determination result 100 is set as the business operator. Send to the terminal 50.

Next, a schematic flowchart showing an example of fraudulent application determination based on the access source IP address, address, telephone number, and person requiring attention will be described with reference to FIG. 7.
(S27, S28 and S32, 33) The fraudulent application determination unit 130 uses a commercial database for IP address determination, and the IP address of the access source is an IP address other than Japan, or an IP address used in an anonymous network. If there is a suspicious point in the IP address, such as in the case of Register at 45.
(S29 and S32, S33) The fraudulent application determination unit 130 confirms whether the applicant's address is a real address by using a commercial database for determining the existence of the address, and if it is not the real address, the first 1 The fraudulent application determination (address suspicious) is made, the fraudulent application determination result 100 is transmitted to the business terminal 50, and the applicant is registered in the gray list database 45.
(S30 and S32, S33) The fraudulent application determination unit 130 confirms whether the applicant's telephone number is an existing telephone number by using a commercial database for determining the existence of the telephone number, and if it is not an existing telephone number. The first fraudulent application determination (phone number suspicious) is set, the fraudulent application determination result 100 is transmitted to the business terminal 50, and the applicant is registered in the gray list database 45.
(S31 and S32, S33) The fraudulent application determination unit 130 uses a commercial database for searching for a person requiring attention to confirm whether or not the applicant corresponds to a person requiring attention, and if it corresponds to a person requiring attention. , The first fraudulent application determination (corresponding to a person requiring attention) is set, the fraudulent application determination result 100 is transmitted to the business terminal 50, and the applicant is registered in the gray list database 45.
If the first fraudulent application determination and the second fraudulent application determination are not made in the above-mentioned flow chart for fraudulent application determination, the fraudulent application determination unit 130 sets the fraudulent application determination result 100 to the business operator at the end of the fraudulent application determination. Send to terminal 50.

In this embodiment, the application data receiving unit 110 corresponds to the "application data receiving unit", the applicant database 40 corresponds to the "applicant database", and the application data comparing unit 120 corresponds to the "application data comparing unit". However, the fraudulent application determination unit 130 corresponds to the "fraudulent application determination unit", the fraudulent application detection device 30 corresponds to the "fraud application detection device", and the gray list database 45 corresponds to the "gray list database".

A preferred embodiment of the present invention is as described above, but the present invention is not limited thereto. It will be appreciated that various embodiments are made that do not deviate from the spirit and scope of the invention. Further, in the present embodiment, the actions and effects according to the constitution of the present invention are described, but these actions and effects are examples and do not limit the present invention.

30 Fraudulent application detection device 40 Applicant database 45 Gray list database 70 Applicant application data 110 Application data receiving unit 120 Application data comparison unit 130 Fraud application judgment unit

Claims

An application data receiving unit that receives at least one of the applicant's personal appearance data, the applicant's personal identification matter data, and the terminal identifier data of the applicant's application terminal.
An applicant database that stores the personal appearance data, the personal identification matter data, and the terminal identifier data received by the application data receiving unit.
An application data comparison unit that compares the personal appearance data of the applicant with the personal appearance data of the previous applicant stored in the applicant database.
When the applicant's personal appearance data similar to the applicant's personal appearance data is found in the application data comparison unit, the applicant's personal identification matter data and the previous applicant's personal appearance data are found. A fraudulent application detection device for identity verification and personal authentication, including a fraudulent application determination unit that determines a first fraudulent application when the personal identification matter data does not match.
The application data comparison unit further compares the personal identification matter data of the applicant with the personal identification matter data of the previous applicant stored in the applicant database.
When the fraudulent application determination unit finds the personal identification matter data of the previous applicant that matches the personal identification matter data of the applicant in the application data comparison unit, the personal appearance of the applicant. The fraudulent application detection device for identity verification and personal authentication according to claim 1, which performs the first fraudulent application determination when the data and the personal appearance data of the previous applicant are not similar.
The application data comparison unit further compares the terminal identifier data of the applicant with the terminal identifier data of the previous applicant stored in the applicant database.
When the fraudulent application determination unit finds the terminal identifier data of the previous applicant that matches the terminal identifier data of the applicant in the application data comparison unit, the fraudulent application determination unit and the personal appearance data of the applicant When the personal appearance data of the previous applicant is not similar, or when the personal identification matter data of the applicant and the personal identification matter data of the previous applicant do not match. The fraudulent application detection device for identity verification and identity verification according to claim 1 or 2, which performs the first fraudulent application determination.
Any of claims 1 to 3, including a gray list database that records the personal appearance data, the personal identification matter data, and the terminal identifier data of the applicant whose first fraudulent application is determined by the fraudulent application determination unit. The fraudulent application detection device for identity verification and identity verification described in item 1.
The gray list database is the fraudulent application detection device for identity verification and personal authentication according to claim 4, which enables registration of arbitrary data related to the applicant.
The application data comparison unit further compares the personal appearance data of the applicant with the personal appearance data of the previous applicant stored in the gray list database.
The fraudulent application determination unit makes a second fraud application determination when the application data comparison unit finds the personal appearance data of the previous applicant similar to the personal appearance data of the applicant. The fraudulent application detection device for identity verification and identity verification according to item 4 or 5.
The application data comparison unit further compares the personal identification matter data of the applicant with the personal identification matter data of the previous applicant stored in the gray list database.
The fraudulent application determination unit makes a second fraud application determination when the application data comparison unit finds the same personal identification matter data of the previous applicant as the personal identification matter data of the applicant. , The fraudulent application detection device for identity verification and personal authentication according to any one of claims 4 to 6.
The application data comparison unit further compares the terminal identifier data of the applicant with the terminal identifier data of the previous applicant stored in the gray list database.
The fraudulent application determination unit makes a second fraud application determination when the application data comparison unit finds the terminal identifier data of the previous applicant that matches the terminal identifier data of the applicant. The fraudulent application detection device for identity verification and identity verification according to any one of items 4 to 7.
The identity verification and identity verification according to any one of claims 1 to 8, wherein the applicant database and the gray list database are constructed across a plurality of businesses that provide services to the applicant. Fraud application detection device.
The application data receiving unit further receives the access source IP address at the time of application of the applicant, and receives the application data receiving unit.
The fraudulent application determination unit performs the first fraudulent application determination when there is a suspicious point in the IP address, the identity verification according to any one of claims 1 to 9, and the fraudulent application detection of personal authentication. Device.
The application data receiving unit further receives the address of the applicant and receives the address of the applicant.
The fraudulent application determination unit makes the first fraudulent application determination when the applicant's address is a non-existent address or a suspicious address, according to any one of claims 1 to 10. A fraudulent application detection device for identity verification and identity verification as described.
The application data receiving unit further receives the telephone number of the applicant and receives the telephone number of the applicant.
The fraudulent application determination unit according to any one of claims 1 to 11, wherein the fraudulent application determination unit makes the first fraudulent application determination when the applicant's telephone number does not exist or is a suspicious telephone number. Identity verification and identity verification fraudulent application detection device.
The identity verification according to any one of claims 1 to 12, wherein the fraudulent application determination unit determines the first fraudulent application when the applicant's personal identification matter data corresponds to a person requiring attention. Fraudulent application detection device for personal authentication.
An application data receiving step for receiving at least one of the applicant's personal appearance data, the applicant's personal identification matter data, and the terminal identifier data of the applicant's application terminal.
An application data storage step for storing the personal appearance data, the personal identification matter data, and the terminal identifier data received in the application data receiving step in the applicant database, and
An application data comparison step for comparing the personal appearance data of the applicant with the personal appearance data of the previous applicant stored in the applicant database, and
When the personal appearance data of the previous applicant similar to the personal appearance data of the applicant is found in the application data comparison step, the personal identification matter data of the applicant and the previous applicant A method for detecting fraudulent applications for identity verification and personal authentication, which includes a fraudulent application determination step of performing a first fraudulent application determination when the personal identification matter data does not match.
Application data reception processing for receiving at least one of the applicant's personal appearance data, the applicant's personal identification matter data, and the terminal identifier data of the applicant's application terminal.
The application data storage process for accumulating the personal appearance data, the personal identification matter data, and the terminal identifier data received in the application data reception process in the applicant database.
The application data comparison process for comparing the personal appearance data of the applicant with the personal appearance data of the previous applicant stored in the applicant database, and
When the personal appearance data of the previous applicant similar to the personal appearance data of the applicant is found in the application data comparison process, the personal identification matter data of the applicant and the previous applicant A fraudulent application detection program for identity verification and personal authentication, including fraudulent application determination processing, which performs a first fraudulent application determination when the personal identification matter data does not match.