JP2001265738A - Internet personal authentication method and information terminal equipment - Google Patents

Abstract

PROBLEM TO BE SOLVED: To generate an electronic signature hard to steal and to use it for authentication. SOLUTION: A client (transmission source) transmits information with the electronic signature generated on the basis of physical features or the like through a communication network such as Internet to a transaction destination. On the other hand, the transaction destination transfers the transmitted electronic signature to an identification center connected to the communication network for an identification request. The authentication center retrieves a corresponding electronic signature out of the transferred electronic signature and an electronic signature for each client previously registered on an electronic signature data base, compares and decides the truth/false of the transferred electronic signature and the authentication is performed for every individual.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to, for example, in a business transaction on a communication network such as the Internet, an electronic signature for certifying the identity of a business partner is authenticated by an authentication center, which is a third party connected to the communication network. And an information terminal device.

[0002]

2. Description of the Related Art As one of conventional personal authentication methods on the Internet, there is a simple method using a password. That is, the user (individual) registers the identification number and password in advance at the time of contract. Next, when using (trading) a contractor, an identification number and a password may be requested on a predetermined screen such as a contractor's homepage. At that time, if the identification number and the password are correctly entered, they match those at the time of the contract, so that the contractor is authenticated and the use is permitted.

[0003] As another authentication method, an encrypted password is transmitted to a credit card company or the like and registered, and the credit card company authenticates a customer at any time.
There is a method of issuing an electronic certificate. That is, when a transaction is performed via the Internet, the business partner who has received the order from the customer needs to authenticate the customer in some way, and in fact, requests the corresponding credit card company in this transaction for authentication. I do. For example, the encrypted password transmitted from the customer is transferred to the credit card company, and the credit card company decrypts and compares the decrypted password with the registered customer password. As a result of the comparison, if they match, it is known that the customer is the person himself, so the digital certificate is encrypted and sent to the business partner for authentication, the business partner decrypts it with the private key and takes out the digital certificate, Check the legitimacy of the customer.

[0004] However, in the conventional examples, authentication is performed only depending on a password. Therefore, in principle, a person who knows a password is authenticated as an individual. Even though passwords are stored with sufficient care, there is a high risk that they will be easily stolen, and there is a problem in terms of the reliability of the authentication method.

[0005]

SUMMARY OF THE INVENTION The present invention has been made in view of the above problems, and generates an individual's electronic signature based on the physical characteristics of the individual, which is difficult for others to steal, and generates the electronic signature. It is an object of the present invention to provide a method for securely and securely authenticating an individual by using the terminal, and a terminal device for implementing the method.

[0006]

According to the present invention, in order to achieve the above object, an electronic signature described below is registered in an authentication center via a communication network instead of a conventional password.

[0007] The electronic signature is generated from data of physical characteristics of the individual.

Further, the registered electronic signature is generated from a unique identification number indicating a transmission source.

[0009] Further, the registered electronic signature is generated by a method of combining data of physical characteristics of a transmission source individual and a unique identification number indicating the transmission source.

[0010] Then, the transmission source transmits the information with the electronic signature via the communication network, while the transmission destination transfers the transmitted electronic signature to the authentication center connected to the communication network. The authentication center is an Internet personal authentication method for performing authentication for each individual by judging the authenticity of the transferred electronic signature and the transferred electronic signature from the corresponding electronic signature registered in advance, Is a step of generating an electronic signature by inputting physical characteristics of an individual, a step of registering an electronic signature in an authentication center by combining an electronic signature with a personal identifier, and a step of generating various information including an electronic signature with a personal identifier and Transmitting the electronic signature together with the personal information, and receiving the various information and extracting the electronic signature with the personal identifier. Transferring the electronic signature to the authentication center, the authentication center registers the electronic signature, searches for the electronic signature for each registered personal identifier, transfers the electronic signature, And a step of judging the authenticity by comparing the two, and a step of giving authentication to each individual based on the judgment result.

An information terminal device connected to a communication network to generate an electronic signature and generate and transmit information with an electronic signature, the information terminal device being provided at a transmission source for transmitting the electronic signature. The digital signature generating means includes a generating means and a communication means for transmitting and receiving information via a communication network, wherein the electronic signature generating means generates an electronic signature from a signal obtained by reading a physical characteristic by an optical / electrical conversion method.

[0012]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below in detail with reference to the drawings.

FIG. 1 is a sequence diagram showing an example of a customer authentication procedure performed between a customer, a business partner, and an authentication center according to the Internet personal authentication method of the present invention. Let's start with an overview. The customer (transmission source) transmits, for example, information with an electronic signature, such as an order table, to a business partner via a communication network such as the Internet. On the other hand, the business partner (transmission destination) receives the information transmitted from the customer (transmission source), and transfers the extracted electronic signature to an authentication center connected to the communication network for an authentication request. The authentication center searches for the corresponding electronic signature from the transferred electronic signature and the electronic signature of each customer registered in the electronic signature database in advance, compares and determines the authenticity of the transferred electronic signature,
This is an Internet personal authentication method for performing authentication for each individual by notifying a business partner (transmission destination) of the authentication result.

The Internet personal authentication method of the present invention will be specifically described. According to the present invention, a customer (source) inputs a physical characteristic of an individual or an identification number unique to the customer to generate an electronic signature, and a personal identifier, for example, a personal identification number determined in advance with a counterpart. Requesting the authentication center to register the electronic signature by combining the electronic signature with the like, and registering the electronic signature, and generating various information such as an order table including the electronic signature together with the personal identifier, and sending the information to the business partner (transmission destination). Sending,

[0015] The business partner (transmission destination) receives the various information and retrieves the electronic signature, transfers the electronic signature to the authentication center, and, based on the authentication result, for example, an electronic certificate. Sending back corresponding information, such as an order notification, to the transmission destination),

The authentication center registers the electronic signature of the request from the customer (source), searches the electronic signature database, compares the transferred electronic signature with the corresponding electronic signature, and verifies the authenticity. The method includes a determination step and an authentication step for each individual based on the determination result, for example, issuance of an electronic certificate.

FIG. 2 is an image diagram showing an embodiment according to the present invention in which a customer terminal, a customer terminal, and an authentication center are connected via the Internet. Customer terminal a
The (information terminal device) connects to the Internet through a dial-up IP connection, and the customer terminal La (information terminal device) connects to the Internet via a LAN such as an intranet, for example. Further, the business partner (transmission destination) terminal and the personal authentication device of the authentication center are connected to the Internet via an Internet server, for example.

FIG. 3 shows the customer terminal a, La according to the present invention.
FIG. 3 is a block diagram illustrating an example of a relationship between an electronic signature generated in the (information terminal device) and a physical feature or a unique identification number. The present invention will be described with reference to FIG. 2 and FIG. When the customer terminal a, La (information terminal device) generates an electronic signature, the customer terminal a, La (information terminal device), based on the physical characteristics of the individual that is difficult for others to steal, and the unique identification number in the present invention, It is intended to generate electronic signatures. Examples of physical characteristics of an individual include a pattern based on relatively easy-to-retrieve physical characteristics such as a fingerprint, a fundus retinal pattern, a palm (a wrinkle pattern such as a palm), and a tooth pattern. An electric signal is generated using an input device based on the electric conversion method. This electric signal is encoded by digital signature generation means through digital processing such as edge enhancement processing, binarization, sampling, and the like, and an electronic signature can be generated. Handwriting (signature) is similar to physical characteristics. Signing your name is one of the things that it ’s hard for others to copy,
For example, a sign pattern is converted into an electric signal with high accuracy using a pointing device such as a tablet or a digitizer.

Voices are also unique to an individual, and are difficult for others to imitate. For example, a song or the like is read aloud, and a voice pattern is converted into an electric signal by a sound-electric conversion method using a microphone.

An identification number associated with the customer terminal a, La (information terminal device) may be considered as a thing that is difficult for others to steal along with the physical characteristics of the individual. When the customer terminal a (information terminal device) is connected to the Internet by dial-up IP connection, a telephone number unique to the line can be used as a unique identification number. Since the originator of the dial-up IP connection has a line-specific telephone number, the originating line-specific telephone number obtained from the exchange of this office is used alone or in combination with physical characteristics to generate an electronic signature as described above. An electronic signature is generated by the means. Since the generation of the electronic signature is limited to the case of using the line of the same telephone number, a correct electronic signature cannot be generated from another place, and for example, unauthorized access to a personal account or the like can be prevented.

Furthermore, the customer terminal La (information terminal device) is LA
When connecting to the Internet via N, for example, a MAC address which is a physical address of a LAN board or the like can be used as a unique identification number. This MAC
The address is unique to the LAN board or the like. The MAC address written in the ROM of the LAN board is read by a dedicated program, and this MAC address is used alone or in combination with physical characteristics to generate an electronic signature. When trading,
Since the generated electronic signature is limited to the same customer terminal La as at the time of registration, it is possible to prevent unauthorized access or the like by a false electronic signature from another customer terminal.

When the latest CPU (central processing unit) used by the customer terminals a and La (information terminal device) is of the 80 × 86 type, a processor serial number is provided in the LSI chip of the microprocessor. . This processor serial number is CPU-specific data,
The processor serial number is read by a dedicated program, and is used alone or in combination with a physical feature to generate an electronic signature by electronic signature generation means. In this way, an electronic signature that is difficult for others to steal or imitate is obtained. In other words, in a commercial transaction on a communication network such as the Internet, the generated electronic signature is limited to the same customer terminals La and La as at the time of registration, so that other customer terminals cannot generate a correct electronic signature. Therefore, it is possible to prevent illegal shopping such as impersonation of another person, illegal access to a personal account, and the like. The highly secure digital signature of the individual obtained as described above is registered for each individual in the personal authentication device of the authentication center, and the business partner can access the personal authentication device from the client terminal via, for example, an Internet server or the Internet. Request authentication to, you can get the authentication reliably.

In an open network environment such as the Internet, which is used by an unspecified number of people, there is a high risk that data is stolen and falsified. In order to improve security during registration and authentication of the electronic signature, the electronic signature is encrypted and transmitted. Encryption algorithms include public key cryptography and secret key cryptography, and these are used.
For example, RSA (Ronald Rivest, Adi Shamir, Leonard), one of the encryption algorithms employing public key cryptography
Adleman) algorithm or D of secret key cryptosystem
The use of the ES (Data Encryption Standard) algorithm prevents theft and enhances security. If the decryption private key is stored only in the authentication center, the decryption is performed only in the authentication center, so that all the electronic signatures on the Internet are encrypted electronic signatures, and the security is further improved.

FIG. 4 is a block diagram showing one embodiment of the information terminal device (customer terminal) provided at the transmission source according to the present invention. 1 is a CPU (Central Processing Unit), ROM
(Read Only Memory), RAM (Random Access Me)
mory), a customer terminal control unit having an interface and the like. For example, by storing a dedicated program in a ROM, a MAC address, a processor serial number,
Obtain a line-specific telephone number from the exchange. A communication control unit 2 controls dial-up IP connection via a telephone line. A display unit 3 displays characters and images on a monitor.
Reference numeral 4 denotes a feature input unit that includes, for example, a CCD camera, a tablet, a digitizer, and the like, and inputs a physical feature as an electrical signal. Reference numeral 5 denotes an input unit provided with a mouse, a keyboard, and the like for inputting an instruction command to a customer terminal. Reference numeral 6 denotes a voice input unit that includes a microphone and the like and converts voice into an electric signal and inputs the signal. Reference numeral 7 denotes a LAN control unit provided with a LAN board when the customer terminal is connected to the Internet via a LAN. 8 is the feature input unit (4);
An electronic signature creation unit that combines an electrical signal from the voice input unit (6) with, for example, a MAC address or the like extracted by a dedicated program, or creates an electronic signature by digital signal processing of the combination. Reference numeral 9 denotes an encryption processing unit that encrypts information such as a digital signature using a predetermined encryption algorithm.

The main operation of the information terminal device (customer terminal) of the present invention will be described with reference to FIG. First, the operation of creating an electronic signature will be described. In the feature input unit (4), fingerprints, fundus retina patterns, palms (wrinkle patterns such as palms), tooth patterns, and the like, which are individual physical features of the individual, are captured by using a CCD camera or the like, for example, optical / electrical. Conversion is performed based on the conversion method to obtain an electric signal. The voice input unit (6) converts the handwriting (sign) into an electric signal with high accuracy using a pointing device such as a tablet, for example. The electronic signature generation unit (8) performs digital signal processing based on the electric signal to create an electronic signature. Alternatively, the MAC address, the processor serial number, and the line-specific telephone number obtained from the customer terminal control unit (1) are used alone or in combination with an electric signal based on the above-mentioned physical characteristics of the individual to perform predetermined digital processing. To generate an electronic signature.

The encryption processing unit (9) encrypts the electronic signature using the RSA algorithm or the DES algorithm, and via the communication control unit (2) via the Internet, the personal authentication device of the authentication center. The encrypted electronic signature is registered in (FIG. 2). Or, LAN control unit (7)
Then, the encrypted digital signature is registered in the personal authentication device (FIG. 2) of the authentication center via the LAN and the Internet via the Internet.

[0027]

As described above, according to the present invention, an electronic signature for certifying the identity of a transaction partner is used in a commercial transaction on a communication network such as the Internet or the like, and an authentication center which is a third-party organization that connects to the communication network. With regard to the Internet personal authentication method and the information terminal device which are authenticated by the above, the digital signature of the individual is generated based on the physical characteristics of the individual which is difficult for others to steal, and by using this digital signature, the security is secured. It is intended to provide a method for surely authenticating an individual and a terminal device for implementing the method. Therefore, there is an advantage that the security and reliability of electronic commerce can be improved.

[Brief description of the drawings]

FIG. 1 relates to an Internet personal authentication method of the present invention.
FIG. 11 is a sequence diagram illustrating an example of a customer authentication procedure performed between a customer, a business partner, and an authentication center.

FIG. 2 is an image diagram showing an embodiment in which a customer terminal, a business partner terminal, and an authentication center are connected via the Internet according to the present invention.

FIG. 3 shows an electronic signature generated at a customer terminal a, La (information terminal device) and a physical feature or
It is a block diagram showing an example of a relation with a unique identification number.

FIG. 4 is a block diagram showing one embodiment of an information terminal device (customer terminal) provided at a transmission source according to the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Customer terminal control part 2 Communication control part 3 Display part 4 Feature input part 5 Input part 6 Voice input part 7 LAN control part 8 Digital signature creation part 9 Encryption processing part

Continuation of the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat II (Reference) G06F 17/60 502 G06F 17/60 502 G09C 1/00 640 G09C 1/00 640E 660 660E H04L 9/32 H04L 9/00 673D F-term (reference) 5B049 BB11 BB46 CC05 CC36 DD00 DD01 DD03 EE03 EE05 EE09 EE10 FF03 FF04 GG04 GG07 GG10 5B055 CB09 EE02 EE03 EE17 EE21 EE27 FA05 HB02 HB03 HB04 EA05 EA05 EA21 EE27 FA05 HB02 HB03 HB04 EA05 KA19 MA01 PA10 9A001 BB04 CC08 EE03 FF03 HH16 HH27 HH28 JJ25 JJ62 KK56 KK60 LL03

Claims (22)

[Claims] 1. A transmission source transmits information with an electronic signature via a communication network, and a transmission destination receives an information from the transmission source and extracts an electronic signature extracted from the authentication center connected to the communication network. The authentication center determines the authenticity of the transferred electronic signature and the electronic signature transferred from the corresponding electronic signature registered in advance, authenticates each individual, and notifies the destination of the authentication result. An internet personal authentication method, wherein the pre-registered electronic signature is generated from data of physical characteristics of an individual. 2. A transmission source transmits information with an electronic signature via a communication network, and a transmission destination receives information from the transmission source and outputs an electronic signature extracted from the authentication center connected to the communication network. The authentication center determines the authenticity of the transferred electronic signature and the electronic signature transferred from the corresponding electronic signature registered in advance, authenticates each individual, and notifies the destination of the authentication result. An internet personal authentication method, wherein the electronic signature registered in advance is generated from a unique identification number indicating a transmission source. 3. A transmission source transmits information with an electronic signature via a communication network, and a transmission destination receives the information from the transmission source and extracts an electronic signature extracted from the authentication center connected to the communication network. The authentication center determines the authenticity of the transferred electronic signature and the electronic signature transferred from the corresponding electronic signature registered in advance, authenticates each individual, and notifies the destination of the authentication result. An Internet personal authentication method, wherein the pre-registered digital signature is generated by a method of combining data of physical characteristics of a transmission source individual and a unique identification number indicating the transmission source. Internet personal authentication method. 4. The Internet personal authentication method according to claim 2, wherein the unique identification number indicating the transmission source is a telephone number unique to the transmission source line obtained from the exchange. 5. The Internet personal authentication method according to claim 2, wherein the unique identification number indicating the transmission source is a MAC address unique to the terminal of the transmission source. 6. The Internet personal authentication method according to claim 2, wherein the unique identification number indicating the transmission source is a processor serial number unique to the terminal of the transmission source. 7. The Internet personal authentication method according to claim 1, wherein the digital signature is transmitted after being encrypted. 8. The Internet personal authentication method according to claim 7, wherein said encryption algorithm is an RSA algorithm. 9. The Internet personal authentication method according to claim 7, wherein said encryption algorithm is a DES algorithm. 10. A transmission source transmits information with an electronic signature via a communication network, and a transmission destination receives the information from the transmission source and outputs the digital signature extracted from the authentication center connected to the communication network. The authentication center determines the authenticity of the transferred electronic signature and the electronic signature transferred from the corresponding electronic signature registered in advance, authenticates each individual, and notifies the destination of the authentication result. An Internet personal authentication method, wherein the sender inputs an individual's physical characteristics to generate an electronic signature, registers an electronic signature in an authentication center by combining an electronic signature with a personal identifier, Generating various information including an electronic signature together with the electronic signature, and transmitting the generated information to a transmission destination. The transmission destination receives the various information and retrieves the electronic signature. Transferring the signature to the authentication center; returning corresponding information to the sender based on the authentication result; registering the digital signature for each personal identifier; searching and transferring the digital signature database An Internet personal authentication method comprising the steps of comparing authenticated electronic signatures with corresponding electronic signatures to determine authenticity, and performing authentication for each individual based on the determination result. 11. The method according to claim 11, wherein the step of inputting the physical characteristics of the source individual and generating the electronic signature includes the step of generating an electronic signature from a unique identification number indicating the source or the physical characteristics of the source individual. 11. The Internet personal authentication method according to claim 10, wherein the step of generating an electronic signature is performed by a method of combining the data of (1) and a unique identification number indicating a transmission source. 12. An information terminal device provided at a transmission source connected to a communication network for generating an electronic signature and generating and transmitting information with an electronic signature, wherein the electronic signature for generating the electronic signature is provided. Generating means, and communication means for transmitting and receiving information via a communication network, wherein the electronic signature generating means generates an electronic signature from a signal obtained by reading a physical characteristic by an optical / electrical conversion method. Information terminal device. 13. The information terminal device according to claim 12, wherein the physical feature is a fingerprint. 14. The information terminal device according to claim 12, wherein the physical feature is a fundus retinal pattern. 15. The information terminal device according to claim 12, wherein the physical feature is a palm (a wrinkle pattern of a palm or the like). 16. The information terminal device according to claim 12, wherein the physical feature is a tooth pattern. 17. An information terminal device provided at a transmission source connected to a communication network to generate an electronic signature and generate and transmit information with an electronic signature, wherein the electronic signature for generating the electronic signature is provided. Generating means, and communication means for transmitting and receiving information via a communication network, wherein the electronic signature generating means generates an electronic signature from a signal obtained by reading a characteristic unique to an individual using a pointing device. Terminal device. 18. The information terminal device according to claim 17, wherein the characteristic unique to the individual is a handwriting (sign). 19. An information terminal device provided at a transmission source connected to a communication network for generating an electronic signature and generating and transmitting information with an electronic signature, wherein the electronic signature for generating the electronic signature is provided. Generating means, and communication means for transmitting and receiving information via a communication network, wherein the electronic signature generating means generates an electronic signature from a signal obtained by reading characteristics unique to an individual by a sound / electric conversion method. Information terminal device. 20. The information terminal device according to claim 19, wherein the characteristic unique to the individual is a voice pattern. 21. The information terminal device according to claim 17, wherein the information terminal device is connected to the Internet by dial-up IP. 22. The information terminal device according to claim 17, wherein the information terminal device is connected to the Internet via a LAN.