JP2000207524A - Card issuing device, card using device and personal identification device/system/method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent the 'pretense' of the other person by improving the accuracy and the reliability of personal identification. SOLUTION: At the time of using a card, an identification terminal 3 reads face picture data printed in the card issued by an issuing terminal 1 and buries an 'electronic watermark' in the face picture data. The identification terminal 3 photographs the face picture of a user, generates face picture data and buries the different 'electronic watermark' in the face picture data. The identification terminal 3 transmits face picture data with 'electronic watermark', face picture data with the different 'electronic watermark' and a password inputted by the user to a data center 5. The data center 5 reads the 'electronic watermark' and the different 'electronic watermark' which are buried in face picture data, compares the 'electronic watermarks' with a content registered in customer data and identifies the validity of the card and whether the use is the registered person or not.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to a card issuing device, a card using device, an identification device, an identification system and an identification method. Hereinafter, the personal identification system will be described.

[0002]

2. Description of the Related Art Various unmanned terminals (terminal devices for users to perform various processes without human intervention) are installed in credit member stores and banks. For example, it is a cash dispenser (CD) or an automatic teller machine (ATM), and a user performs various processes using a predetermined card issued in advance. At this time, the unattended terminal prompts the user to enter a signature or password, determines whether the entered signature or password matches a previously registered signature or password, and determines whether the user has the card holder himself / herself. Identify if there is.

[0003]

In the above-described identification system, when a person who is not the principal (hereinafter, referred to as another person) knows the signature or the password registered on the card, the other person becomes the principal. The card can be used by impersonating. Therefore, Japanese Patent Application No. 63-33
In the personal identification system of 076, the unmanned terminal is provided with a function of photographing the face image of the user,
The face image of the user photographed by the unattended terminal is compared with the face image of the user registered at the time of issuing the card, so that the user is identified. However, in this personal identification system, the predetermined person can compare the face image of the user photographed by the unattended terminal only with the face image at the time of issuing the card. Therefore, if the appearance of the person changes after the card is issued, the change cannot be grasped, and so-called "spoofing" of another person may be permitted.

Accordingly, it is an object of the present invention to prevent the "spoofing" of another person by improving the accuracy and reliability of personal identification.

[0005]

According to a first aspect of the present invention, there is provided a card issuing apparatus for acquiring information for specifying a card issuing requester, and mounting the acquired information on a card to be issued. Means, and means for adding the identification code assigned to the requester to the specific information.

In a preferred embodiment according to the first aspect of the present invention, the specific information includes at least image information, audio information, a name, an address, and a password relating to the card issuer. The image information is, for example, image information relating to the requester's face or fingerprint. The identification code is given to image information or audio information of the specific information. The identification code is added to the image information or the audio information by, for example, a digital watermark.

As the card, for example, an IC card is used. Issuance of a card is performed after a notice of issuance permission is received from an external device.

[0008] A card using apparatus according to a second aspect of the present invention comprises: a first means for reading, from an issued card, specific information relating to a card issuance requester mounted on the card; A second unit for reading the specific information, a unit for assigning an identification code assigned to the requester to at least the specific information read by the second unit, and sending the read specific information to an external device. Means.

[0009] In a preferred embodiment according to the second aspect of the present invention, the specific information includes image information, audio information, and a password relating to the card issuer, and at least any one of these. One is used.

[0010] The identification code is given to image information or audio information of the specific information. This identification code is added to image information or audio information by a digital watermark.

A personal identification device according to a third aspect of the present invention specifies an identification code added to information for specifying a card user, which is input when a card is used, and a card issue requester recorded on the card. Means for collating the identification code given to the information for identifying the card, means for confirming the validity of the identification code, and means for confirming that the identification codes match each other and that the identification code is valid. Is determined to be the card issuing requester.

In a preferred embodiment according to the third aspect of the present invention, for example, an IC card is used as the card, and the specific information to which the identification code is added is recorded in the memory of the IC card.

In the above embodiment, the identification code is
Means for replacing with an identification code given at the time of card issuance, matching of specific information having the replaced identification code with specific information having the identification code at the time of card issuance, and matching the two. Means for determining whether or not to do so.

A personal identification system according to a fourth aspect of the present invention comprises a card using device for executing necessary information processing on a card to be set, and a device for identifying whether or not the card user is the user, A card use device configured to read, from the issued card, specific information relating to a card issuance requester mounted on the card; a second unit configured to read input specific information relating to the card issuance requester; At least means for assigning an identification code assigned to the requester to the specific information read by the second means, and means for sending each read specific information to an external device, the personal identification device comprises: The identification code entered when the card was used and assigned to the information for identifying the card user is compared with the identification code assigned to the information for identifying the card issuer recorded on the card. Means for verifying the validity of the identification code; and means for determining that the card user is the card issue requester when the identification codes match and the identification code is confirmed to be valid. Having.

A personal identification method according to a fifth aspect of the present invention comprises a first step of assigning an identification code to information for identifying a card user, which is input when a card is used; A second step of checking an identification code given to the information for identifying the card issue requester to be recorded; a third step of checking the validity of the identification code; And a fourth step of determining that the card user is the card issuing requester when the identification code is confirmed to be valid.

[0016]

FIG. 1 shows the overall configuration of a personal identification system according to an embodiment of the present invention.

In this system, a card issuing terminal (hereinafter, issuing terminal) for issuing a card necessary to use the card is used.
1, and a card authentication terminal (hereinafter referred to as an authentication terminal) 3 used by the user to perform various processes using the card.
It has different types of unattended terminals. The system includes a data center 5 for storing various user information (for example, a face image of a user at the time of issuing and using a card, a name, a date of birth, etc.), and a management for managing each user information. A terminal 7 is also provided. The above-described system not only connects each of the terminals 1, 3, and 7 communicatively to the data center 5, but also
A network 9 is also provided for connecting the issuing terminal 1 and the management terminal 7 so that they can communicate with each other. Hereinafter, the configurations and functions of the terminals 1, 3, 7 and the data center 5 will be described.

First, the configuration and functions of the issuing terminal 1 will be described with reference to FIG.

The issuing terminal 1 has a display 11 for a card issuer (requester) to input information (specific information) for identifying the card issuer, a video camera 13 for photographing the face of the requester, a card And a card issuance control unit (hereinafter referred to as an issuance control unit) 15 that performs various processes for issuing a card. The issuing terminal 1 also includes a modem (or DSU) 17 for communicating with the data center 5 and the management terminal 7, and a card issuing machine (hereinafter, issuing machine) 19 for issuing a card on which predetermined information is recorded. Prepare.

The display 11 employs, for example, a touch panel. The touch panel is touch-operated when inputting, for example, a name, a date of birth, an address, a telephone number, a password, and the like as the specific information.

The issue control unit 15 has a built-in capture board (not shown) for digitizing and capturing the face image of the requester taken by the video camera 13. The issuance control unit 15 transmits the input specific information and the captured face image data to the data center 5 via the modem 17. When this transmission is completed, the issuance control unit 15
Receives from the data center 5 the above-mentioned specific information, notification of completion of registration of the face image data, and unique information necessary for personal identification. When the specific information and the face image information are transmitted from the data center 5 to the management terminal 7 and a card issuance instruction is given from the management terminal 7, the issuance control unit 15 receives the instruction and issues the card with the unique information and The captured face image information is sent to the issuing machine 19.

The issuance control unit 15 adds “digital watermark (watermark)” to the face image data to be transmitted to the data center 5 in order to guarantee the authenticity of the face image data when the card is issued.
Embed The “digital watermark” includes, for example, [issuing date] and [issuing machine code] (code for identifying a card issuing terminal). After the transmission of the face image data is completed, the issuance control unit 15 transmits, for example, [card number] (a number for identifying a card) and [issue date and time] from the data center 5 as unique information necessary for personal identification. , [Issue Machine Code], [Issue Date] as [Last Use Date], [Issue Machine Code] as [Last Use Machine Code] (identification code of authentication terminal used just before), and [Card Number ] To the issuing machine 19.

The issuing machine 19 has a function of printing the face image data from the issuing control unit 15. The issuing machine 19 receives the above information from the issuance control unit 15, writes the unique information on a magnetic stripe (or IC memory) of the card, prints face image data at a predetermined position on the card, and prints the card. Issue.

The card issued by the issuing terminal 1 has a magnetic stripe (or IC) on which the above-mentioned unique information is written.
Memory) and a face image when the card is issued. As described above, [card number], [last use date and time], and [last use machine code] are written in the magnetic stripe.

Next, the configuration and functions of the authentication terminal 3 will be described with reference to FIG.

The authentication terminal 3 includes a card reader / writer (hereinafter referred to as R / W) 21 for reading and writing necessary information on the card, and a card user (user), for example, a password in the specific information. And a video camera 13 for capturing a face image of the user. The authentication terminal 3 also includes a card authentication control unit (hereinafter, authentication control unit) 27 for performing various processes required for card authentication, and a modem (or DSU) 17 for communicating with the data center 5.

The R / W 21 is provided with a scanner (not shown) for reading a face image to be printed on the card. The R / W 21 reads the face image of the set card and the above specific information from the magnetic stripe, and reads them. This is transmitted to the authentication control unit 27. If the [use date and time] and the [use machine code] of this use are received from the authentication control unit 27 after the identification in the data center 5 is completed, the R / W 21 sets the [use date and time] of this time to [last time]. Use date and time] and this time [Usage code]
Overwrite each of the above magnetic stripes as [Last used machine code].

The authentication control unit 27 includes a capture board (not shown) for digitizing and capturing the face image of the user captured by the video camera 13, similarly to the issuance control unit 15 described with reference to FIG. . The authentication control unit 27 transmits the user information from the display 23, the face image data and unique information read by the R / W 21, and the captured face image data at the time of use to the modem 17.
To the data center 5 via the. An “digital watermark” is embedded in each face image data transmitted to the data center 5, similarly to the face image data from the issue control unit 15. In the face image data from the R / W 21, the “last use date” and “last use machine code” are used as the “digital watermark”.
Is embedded, and the [use date and time] and the [use machine code] at the time of this use are embedded in the captured face image data at the time of use. After the transmission is completed, the identification that the user is the card owner is performed in the data center 5, and the authentication control unit 27
[Use date and time] and [Use device code] at the time of use this time are received together with the notification of the completion of the personal identification process. These [use date and time] and [use machine code] are transmitted from the authentication control unit 27 to the R /
It is transmitted to W21.

Next, the configuration and functions of the data center 5 will be described with reference to FIG.

The data center 5 includes a customer data creation unit (hereinafter, creation unit) 31 for creating customer data based on a customer data creation command from the management terminal 7, and a customer data storage for storing the created customer data. Unit (hereinafter, storage unit) 33
And an identification unit (hereinafter, identification unit) 35 for identifying whether or not the user of the authentication terminal 3 is the identification person.

The creating unit 31 creates customer data as shown in FIG. 5 based on the user information and the face image data received from the issuing terminal 1 or the two types of face image data received from the authentication terminal 3. . According to FIG.
At the time of card issuance, the above-mentioned [Card number], [Issue date and time] and [Issue machine code], [Password], [Name],
.., Etc., and customer data based on face image data at the time of card issuance in which “digital watermark” is embedded. The creating unit 31 stores the created customer data in the storage unit 33, and notifies the issuing terminal 1 of the registration completion. When the card is used, the creation unit 31 refers to the user information received from the authentication terminal 3 to acquire the corresponding customer data, and embeds the customer data in the face image data from the authentication terminal 3 as “digital watermark”. The last use date and time, the last use machine code, and the face image data at the time of using the card in which they are embedded are registered in the customer data. Since then
The creation unit 31 sets the present [use date and time] and [use machine code] to [previous use date and time] and [previous use machine code] every time the personal identification associated with the use of the card is completed. It overwrites the face image data at the time of the previous use, and stores the customer data in the storage unit 33.

The identification unit 35 reads the above-mentioned [last use date and time] and [last use machine code] received from the authentication terminal 3 and reads them into the [last use date and time] and [last use time] registered in the customer data. Machine code] to identify the authenticity of the face image data of the card. The identification unit 35 identifies the validity of the authentication terminal 3 from the [use date and time] and the [use device code] embedded in the face image data at the time of use this time. The identification unit 35 identifies whether or not the user is the card holder from the identification and the validity of the user information for identification including the password input to the authentication terminal 3.
When the identification unit 35 identifies that the user is himself,
The completion of personal identification is notified to the authentication terminal 3, and the user is permitted to use the system. When a problem such as exceeding the usage limit of caching occurs in the use of the system, the identification unit 35 outputs four types of face image data, that is, face image data at the time of issuing a card registered in customer data, The face image data of the last use, the face image data printed on the card, and the face image data of the present use are transmitted to the management terminal 7, and the operator of the management terminal 7 is identified. When the management terminal 7 has identified that the user is the user, the identification unit 35 receives the notification of the user identification completion from the management terminal 7 and notifies the authentication terminal 3 of the user identification completion.

Finally, the function of the management terminal 7 shown in FIG. 1 will be described.

The management terminal 7 is a computer including a modem or a DSU (not shown) for communicating with the issuing terminal 1 and the data center 5, and a dedicated operator is stationed at the management terminal 7. When the card issuing user information is input to the issuing terminal 1, the management terminal 7 determines the validity thereof, and when it is determined to be valid, instructs the data center 5 to create customer data. On the other hand, as another process, when the above four types of face image data are transmitted from the data center 5, the management terminal 7 displays them to the operator, and the operator can use the four types of face image data by himself / herself. Identify if there is. When the operator identifies himself / herself, the management terminal 7 notifies the data center 5 of the completion of the identity identification.

In the embodiment described above, the card is
It can be replaced with an IC card having a C memory. I
The C memory stores the face image data with the “digital watermark” transmitted to the data center 5 when the card is issued.
In this case, the issuing machine 19 of the issuing terminal 1 replaces the function of printing the captured face image data with the face image data containing the “digital watermark” transmitted to the data center 5 by the I.
It has a function of writing to the C memory. Further, the R / W 21 of the authentication terminal 3 has a function of reading face image data with “digital watermark” recorded in the IC memory, instead of the scanner for reading the face image printed on the card. . The “last use date and time” which is the “digital watermark” of the face image data recorded in the IC memory
Each time the card is used, the “use date and time” and the “use code” are overwritten on the “last use machine code”.

Hereinafter, differences between the above-described embodiment and this embodiment will be described.

First, the differences at the time of issuing a card will be described.

When the card is issued, the data center 5
Changes to the processing after the above-described unique information is transmitted to the issuing terminal 1. That is, the issuing control unit 15 of the issuing terminal 1 receives the unique information from the data center 5 and transmits the unique information and the face image data with the “digital watermark” transmitted to the data center 5 to the issuing machine 19. Issuer 1
Reference numeral 9 writes the unique information received from the issuance control unit 15 into a magnetic stripe (or another IC memory), and records face image data with an “electronic watermark” into the IC memory. Note that the “digital watermark” embedded in the face image data at the time of card issuance is the same as the above-described embodiment with the “issue date and time”.
And [Issuer code].

Next, differences when using the card will be described.

The R / W 21 of the authentication terminal 3 has the I /
The face image data recorded in the C memory and the unique information recorded in the magnetic stripe are read and transmitted to the authentication control unit 27. The authentication control unit 27 converts the user information from the display 11, the unique information, the face image data with the “digital watermark”, and the face image data at the time of use in which the “digital watermark” is embedded. Each is transmitted to the data center 5 via the modem 17. The identification unit 35 of the data center 5 acquires the corresponding customer data from the storage unit 33 from the user information received from the authentication terminal 3. Then, the identification unit 35 reads the “digital watermark” ([last use date and time] and [last use device code]), and registers it in the acquired customer data [last use date and time] and [last use device]. Code] to identify the authenticity of the face image data of the card. Further, the identification unit 35 registers the “digital watermark” of the face image data in the IC memory in the customer data.
Face image of an IC card with [Issue Date] and [Issuer Code] replaced with [Issue Date] and [Issuer Code] (that is, [Issue Date] and [Issuer Code] at the time of card issuance) The authenticity of the card to be used is identified by comparing the data with the face image data at the time of issuance containing [Issue date and time] and [Issue machine code] registered in the customer data. Identification unit 3
Reference numeral 5 identifies whether or not the user is the user based on these identifications, the above-described identification of the validity of the authentication terminal 3, and the identification of the validity of the user information for personal identification. Upon identifying that the user is the user, the identification unit 35 notifies the authentication terminal 3 of the completion of the user identification and allows the user to use the system. Upon receiving the notification of the completion of the personal identification from the data center 5, the authentication control unit 27 of the authentication terminal 3 sets the [Usage date and time] and [Usage device code] of this time to [Last use date and time] and [Last usage device code]. To the R / W21. The R / W 21 overwrites the [last use date and time] and [last use device code] received from the authentication control unit 27 with the [last use date and time] and [last use device code] recorded on the magnetic stripe, and These are also overwritten on the “digital watermark” of the face image data recorded in the IC memory.

According to the above-described embodiment, not only the signature or the password but also the "digital watermark" embedded in each of the face image data printed or recorded on the card and the face image data photographed and created. Since the identification is automatically performed by referring to the above, the accuracy and reliability of the identification are improved. In addition, if a problem occurs in the use of the system, the operator is referred to the four types of face image data of the user, and the operator is identified. Therefore, the accuracy and reliability of the identification are further improved. Can be improved.

Although some preferred embodiments of the present invention have been described above, these are merely examples for describing the present invention, and are not intended to limit the scope of the present invention only to these examples. . The present invention can be implemented in other various forms. For example, the data center 5 transmits the above four types of face image data to the management terminal 7 from the beginning, not only when a problem occurs in the use of the system, but also causes the operator of the management terminal 7 to perform personal identification. good. The “digital watermark” embedded in face image data is
Not only character information such as [use date and time] and [use machine code], but also a logo mark commonly used in the entire system may be used. Further, as another example, the card used in the system may include a voice recording memory for recording a voice of the user. In this case, the “digital watermark” is also embedded in the voice data of the user, and the data center 5 performs the identification by referring to the voice of the user and the “digital watermark” embedded in the voice data of the user. Can be. As still another example, the face image data recorded on the IC card can be overwritten and updated each time the card is used. Further, fingerprint image information may be used instead of face image information.

[Brief description of the drawings]

FIG. 1 is a diagram showing an overall configuration of a personal identification system according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a configuration of a card issuing terminal.

FIG. 3 is a block diagram showing a configuration of a card authentication terminal.

FIG. 4 is a block diagram showing a configuration of a data center.

FIG. 5 is a diagram showing an example of customer data.

[Explanation of symbols]

 1 Card Issuing Terminal 3 Card Authentication Terminal 5 Data Center 7 Management Terminal 9 Network 11 Display 13 Video Camera 15 Card Issuing Control Unit 17 Modem (or DSU) 19 Card Issuing Machine 21 Card Reader / Writer 27 Card Authentication Control Unit 31 Customer Data Creation Unit 33 Customer data storage unit 35 Identity verification unit

 ──────────────────────────────────────────────────続 き Continued on the front page F-term (reference) KA11 KA33 KA35 KA38 YA03 YA04

Claims (16)

[Claims] A means for acquiring information for specifying a card issuer; a means for mounting the acquired information on a card to be issued; and an identification code assigned to the requester. A card issuing device comprising: means for adding information; 2. The card issuing device according to claim 1, wherein the specific information includes at least image information, audio information, name, address, and password related to the card issuing requester. 3. The card issuing device according to claim 2, wherein the image information is image information relating to a face or a fingerprint of the requester. 4. The card issuing device according to claim 1, wherein the identification code is added to the image information or the audio information of the specific information. 5. The card issuing device according to claim 4, wherein the identification code is added to the image information or the audio information by a digital watermark. 6. The card issuing device according to claim 1, wherein the card is an IC card. 7. The card issuance device according to claim 1, wherein the issuance of the card is performed after receiving a notice of issuance permission from an external device. 8. A first means for reading, from an issued card, specific information relating to a card issuance requester mounted on the card, and a second means for reading input specific information relating to the card issuance requester. At least the specific information read by the second means,
A card using apparatus comprising: means for assigning an identification code assigned to the requester; and means for sending the read specific information to an external device. 9. The card using device according to claim 8, wherein the specific information includes image information, audio information, and a password relating to the card issuer, and at least one of these is used. Card utilization equipment. 10. The card using device according to claim 8, wherein the identification code is added to the image information or the audio information in the specific information. 11. The card using device according to claim 10, wherein the identification code is added to the image information or the audio information by a digital watermark. 12. An identification code, which is input when using a card and is assigned to information for identifying a card user, and an identification code assigned to information for identifying a card issue requester recorded on the card. Means for checking the identification code; means for confirming the validity of the identification code; and when the identification codes match with each other, and when the identification code is confirmed to be valid, the card user is the card issue requester himself. Means for determining that there is a personal identification device. 13. The personal identification device according to claim 12, wherein the card is an IC card, and the specific information provided with the identification code is recorded in a memory of the IC card. 14. The personal identification device according to claim 13, wherein the identification code is replaced with an identification code given at the time of issuing the card; and the identification information having the replaced identification code, Means for checking the held specific information having the identification code at the time of card issuance to determine whether or not the two coincide with each other. 15. A card use device for performing necessary information processing on a card to be set, and a device for identifying whether or not the card user is the user, wherein the card use device is configured to execute First means for reading specific information relating to a card issue requester mounted thereon, second means for reading input specific information relating to the card issue requester, and at least the second means for reading In the specific information,
A means for assigning an identification code assigned to the requester, and a means for sending each of the read specific information to an external device, wherein the personal identification device is inputted when a card is used, Means for checking the identification code given to the information for specifying the card and the identification code given to the information for specifying the card issuer recorded on the card, and A personal identification system comprising: means for confirming; and means for determining that the card user is the card issuing requester when the identification codes match and the identification code is confirmed to be valid. 16. A first step of assigning an identification code to information for identifying a card user, entered when using a card, identifying the identification code, and a card issue requester recorded on the card. A second step of checking an identification code given to the information for the third step, a third step of checking the validity of the identification code, and the identification codes are identical and the identification code is valid. A fourth step of, when confirmed, determining that the card user is the card issuer.