JP2001312476A - Individual authenticating device for network, authenticated transaction system, and individual authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To perform high-reliability individual authentication for respective use sites on a network by an individual authenticating device for the network for terminal users using the Internet without registering authentication information individually for the use sites. SOLUTION: Fingerprint images of network users read by fingerprint readers 18 that a personal terminal 11, a portable telephone 12, personal terminals 14a, 14b... of an intranet 14, a financial institution 16, and an authentication station device 17 are equipped with are registered on the authentication station device 17 and a fingerprint image to be authenticated which is read by a fingerprint reader 18 of each terminal and sent to the authentication station device 17 at an authentication request from the terminal for the limitation of a terminal user and person matching in network transaction is matched against the registered fingerprint images to decide its identity; and an authentication OK/NG decision result is reported to the terminal as the authentication request source to allow or disallow terminal use and the network transaction.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal authentication device, an authentication transaction system, and an individual authentication system in a network for terminal users using a communication network such as the Internet.

[0002]

2. Description of the Related Art In recent years, transmission and reception of various information using the Internet, financial transactions, commercial transactions, and the like have been rapidly spread and developed, but information provision that can be accessed by a user registration system is provided. Sites and especially financial transactions,
Commerce sites require individual user authentication.

Heretofore, personal authentication has been used in combination with an ID code and a user's personal password that are assigned when a user registers at each site. Such ID codes and passwords are numbers and symbols. Therefore, when stolen by a malicious user, there is a problem that it is easy to be illegally used.

[0004] Conventionally, registration to a site that requires personal authentication has to be performed individually at each of the use sites, which is not only troublesome but also requires a different password for each site to prevent unauthorized use. When registering, there is a problem that the user has to store a plurality of different passwords in association with each site.

[0005]

SUMMARY OF THE INVENTION The present invention has been made in view of the above-mentioned problems, and it is not necessary to individually register authentication information for each scene where personal authentication is required on a network. It is an object of the present invention to provide a personal authentication device, an authentication transaction system, and a personal authentication system in a network that can easily perform high-level personal authentication on a network.

[0006]

According to a first aspect of the present invention, there is provided a personal authentication apparatus in a network, comprising: a personal image registering means for registering one type of image data unique to each user who uses the network; Collation determination means for collating image data read by an image reading device on a network and received via the network with image data registered by the personal image registration means to determine identity; And a decision result transmitting means for transmitting a decision result by the means via a network.

In the personal authentication device in the network according to the first aspect of the present invention, the image data read by the image reading device on the network and received through the network is registered in the personal image registration means. The identity of each user who uses the network is compared with one type of image data unique to each individual, and the determination result is transmitted through the network. This personal authentication device can be implemented collectively.

According to a fourth aspect of the present invention, there is provided an authentication transaction system in a network, comprising: a certification authority connected to the network and a virtual shop device, wherein the certification authority is unique to each user who uses the network. Of 1
Personal image registration means for registering image data of a type, and in response to a request for authentication of a business partner transmitted from the virtual store apparatus, read by an image reading device of the business partner on the network and read via the network A collation determining means for collating the received image data with the image data registered by the personal image registering means to determine the identity, and transmitting a result of the determination by the collation determining means to the virtual store apparatus via a network Means for transmitting a request for authentication of a business partner to the certificate authority via a network, and a determination for receiving a result of the determination transmitted from the certificate authority. And a result receiving means.

In the authentication transaction system in the network according to the fourth aspect of the present invention, in response to a request for authentication of the business partner from the virtual store apparatus, the certificate authority uses the image reading device of the business partner on the network. The image data read and received via the network is compared with one type of image data unique to each user who uses the network registered by the personal image registration means, and identity is determined. Since this determination result is notified to the virtual shop device via the network, the certification authority can perform the personal authentication of the transaction partner without registering the personal identification information of the user for each virtual shop device. .

[0010] A personal authentication system in a network according to a sixth aspect of the present invention has a certification authority and a terminal device connected on the network, and the certification authority has a unique personality for each user who uses the network. Personal image registration means for registering one type of image data in association with the affiliation of each individual, and reading by image reading means of the terminal device in response to a terminal user authentication request transmitted from the terminal device A collation judging means for collating the image data of the terminal user received through the network with the image data registered by the personal image registering means to determine the identity; and A network is established with the affiliation registered in the personal image registration means in association with the registered image data to be compared. And a determination result transmitting unit for transmitting the image data of the terminal user to the terminal device. The terminal device reads the image data of the terminal user, and reads the authentication request of the terminal user by the image reading unit. Authentication request transmitting means for transmitting the image together with the image to the certificate authority via a network, and a determination result output means for receiving and outputting the determination result and the information of the affiliation transmitted from the certificate authority. Features.

[0011] In the personal authentication system in the network according to claim 6 of the present invention, in response to a terminal user's authentication request from the terminal device, the certificate authority reads the image by the image reading means of the terminal device. The image data of the terminal user received via the network, and one type of image data unique to each user of the user who uses the network registered by associating the affiliation of each individual with the personal image registration means. Are compared to determine the identity, and the determination result is notified to the terminal device via a network together with the affiliation registered in the personal image registration means in association with the registered image data to be compared. Since it is output, it is possible to prove the affiliation of the terminal user by requesting the certificate authority without registering the personal identification information of the user for each terminal device Personal authentication is that can be implemented that.

[0012]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a diagram showing the configuration of a personal authentication device, an authentication transaction system, and a network system implementing a personal authentication system in a network according to the present invention.

The Internet 10, which is an intercommunication network of this network system, includes a number of personal computer terminals 11,...
Computer terminals used in various industries and places such as a corporate intranet 14, various electronic malls / cyber shops 15, and financial institutions 16 are connected. Further, a certificate authority 17 is connected to the Internet 10. .

The certification authority device 17 provides a personal authentication service for each individual user using the Internet 10 for a fee. The certification authority device 17 stores a multi-tone image of a fingerprint of each registered user. Registered.

, The personal computer terminals 11..., The portable telephones 12, the personal terminals 14 a, 14 b,... Connected to the server computer 14 S in the corporate intranet 14, the financial institution 16. Are provided with a fingerprint image reading device 18 for each of them, and perform personal registration with the certificate authority device 17;
When personal authentication (fingerprint authentication) is performed in (2), a fingerprint image of a user operating each terminal is read as an image to be registered or an image to be collated as an optical multi-tone image.

FIG. 2 is a block diagram showing a configuration of a computer terminal in the certificate authority 17 connected to the network system.

The computer terminal of the certificate authority device 17 is provided with a control unit (CPU) 21 for performing fingerprint registration processing and authentication processing in accordance with a certificate authority control program stored in advance in a storage device 22 composed of a hard disk device or a semiconductor memory. And controls the billing process associated with it,
The control unit (CPU) 21 includes, in addition to the storage device 22,
A fingerprint reading device 18, a database device 23, and a network connection unit 24 for connecting to the Internet 10 are connected.

The database device 23 has a registered user data memory 23a and a transaction site data memory 23b.

FIG. 3 is a diagram showing registered user data in a registered user data memory 23a provided in the database device 23 of the certificate authority device 17.

The registered user data stored and registered in the registered user data memory 23a includes the user code, name, address, fingerprint collection source, fingerprint image data, and billing data of each registered user. It is stored and registered in association with each other.

Here, the registered user data memory 23
The fingerprint image data stored in a is the data size,
The pixel pitch and the number of gradations are standardized and registered, and the fingerprint collection source data corresponding to this fingerprint image data includes the terminal belonging to the fingerprint reading device 18 that has read the fingerprint image. For example, “personal” in the case of the personal computer terminal 11 and the mobile phone 1
2 if it is "communications carrier (telephone company)", if it is a personal terminal 14a, 14b,... In the corporate intranet 14, "company name"; if it is a computer terminal of the financial institution 16, it is " If it is a "financial institution" or a computer terminal of the certificate authority device 17, it is registered as a "certificate authority".

The user code is individually assigned to each individual at the time of registration.

The billing data includes a registration fee written when the user registers his / her personal information and at regular intervals,
Alternatively, it is a service fee written for each authentication service, and the registration fee and the authentication service fee are collected from the registered user according to the billing data.

The transaction site data memory 23b stores the address of each site on the Internet 10 using the personal authentication by the certificate authority device 17 and the management number of the authentication request site assigned at the time of authentication request.

FIG. 4 is a diagram for explaining a method of fingerprint authentication in the certificate authority device 17, wherein FIG. 4A shows a registered fingerprint image A stored and registered in a registered user data memory 23a. FIG. 2B is a view showing a collation fingerprint image B to be collated and authenticated, which is sent to the registered fingerprint image A via the Internet 10.

A method of fingerprint authentication in the certificate authority device 10 is described in the prior application (Japanese Patent Application No. 10-37 by the same applicant).
No. 2205) is preferably adopted.

According to the image data collation method disclosed in the prior application, a plurality of rectangular template areas A0 to A4 serving as a reference are arranged on a registered fingerprint image A, and the image data of each of the rectangular template areas A0 to A4 is The maximum correlation areas B0 to B4 having the correlation of
After detecting the above, the plurality of rectangular template areas A
0 to A4 and the maximum correlation areas B0 to B4
It is determined whether or not the registered fingerprint image A and the collation fingerprint image B are the same person's fingerprint based on whether or not the relative positional relationship of FIG. The collation method has a feature that the collation can be performed regardless of the type of the image reading device as long as the pixel pitch is at least the same.

FIG. 5 is a diagram showing header information of fingerprint image data read and transferred by the fingerprint reading device 18 in each terminal on the network system.

The header information of the fingerprint image data includes its data size, pixel pitch, gradation data, and front and back types (whether the shape of the trace of pressing the finger on the reading surface is viewed from the front or back). Is described.

The registered fingerprint image A and the collated fingerprint image B which are read by the fingerprint reading device 18 of each terminal and sent to the certificate authority 17 are based on the header information as shown in FIG. The size, pixel pitch, and number of gradations are standardized and registered.

Next, the operation of the network system having the above-described configuration when a fingerprint image is registered in the certificate authority 17 will be described.

(1) Personal Registration When a user personally brings a certificate or the like to the certificate authority (device) 17 and registers from the computer terminal on the spot, or the personal computer terminal 11 or There is a case where the user accesses and registers from the mobile phone 12.

(2) Company / Group Registration When joining a credit company or opening an account with a bank, a computer terminal of the financial institution 16 uses a certificate authority 1
Access the registration site 7 and register. In this case, data such as a fingerprint image to be registered may be stored on a CD or the like and separately sent to the certificate authority 17 or may be sent by data communication. The registered user data memory 23a of the certificate authority 17 The collection source data is registered as a “financial institution”.

When the company uses the authentication system in the intranet 14, the fingerprint image data of each person in the company obtained from each personal terminal 14a, 14b,... In the intranet 14 is collected from the server computer 14S. Sent to the certificate authority 17. And the certificate authority device 1
7, the collection source data of each individual in the company is registered as a "company name" in the registered user data memory 23a.

FIG. 6 is a flowchart showing a fingerprint registration process in the certificate authority 17.

When the personal computer terminal 11 or the mobile phone 12 or the computer terminal of the financial institution 16 or the server computer 14S of the corporate intranet 14 accesses the registration site of the certificate authority 17 via the Internet 10, this fingerprint registration process is performed. Is activated, and when the fingerprint image data of the registration target user and the associated data such as the name are received (step a)
1) The received fingerprint image data is checked for the data size, pixel pitch, gradation data, and front / back type data described in the header information, and is standardized to a predetermined format (step a2). Note that this standardization may be at least uniform in pixel pitch as long as the authentication method disclosed in Japanese Patent Application No. 10-372205 is used.

The standardized image data is associated with a user code, a name, an address, and collection source data in a registered user data memory 23 in the database device 23.
is stored and registered (step a3).

Next, an operation of the network system having the above-described configuration when a fingerprint image is authenticated by the certificate authority 17 will be described.

The fingerprint image of the user to be authenticated is stored in the fingerprint reading device 18 of each terminal connected to the Internet 10.
And sent to the certificate authority 17. Then, the authentication station device 17 performs personal authentication on the fingerprint image sent from the terminal, and notifies the terminal of the authentication result.

FIG. 7 is a flowchart showing a fingerprint authentication process in the certificate authority 17.

The verification fingerprint image B to be subjected to personal authentication received from a terminal on the Internet 10 is standardized based on the data size, pixel pitch, gradation data, and front / back type data described in the header information. (Step b1), the identity of the user is determined by collating with the registered fingerprint image A registered in the registered user data memory 23a in the database device 23 (Step b2).

Then, the authentication result data in accordance with the determination of the identity between the inter-registration fingerprint image A and the collation fingerprint image B is transmitted to the corresponding terminal. The source data associated with the image A is also transmitted together (step b3).

For example, the personal computer terminal 11 or the fingerprint image read by the fingerprint reader 18 of the mobile phone 12 is used to perform personal authentication by the certificate authority 17 via the Internet 10 so that the terminal user can be identified. Limited services can be provided.

Next, a description will be given of a specific example in which a company entrance / exit system is constructed in a network system to which a certificate authority 17 capable of performing the fingerprint registration process and the fingerprint authentication process as described above is connected.

In this case, the fingerprint image of each employee of the company is sent to the certificate authority 17 from the server computer 14S of the company intranet 14, for example, and the registered user data memory 23a is also associated with the employee number. be registered.

FIG. 8 is a flowchart showing the computer terminal processing and the certification authority processing at the entrance / exit gate in a case where a company entrance / exit system is constructed by the network system.

FIG. 9 is an external view showing a computer terminal device installed at an entrance / exit gate when a company entrance / exit system is constructed by the network system.

When a user is detected by an infrared sensor provided at a computer terminal installed at an entrance / exit gate of a company research institute or the like, the computer terminal at the entrance / exit gate sends the computer terminal of the certificate authority 17 to the computer terminal.
An authentication request is transmitted via the Internet 10 and, as shown in FIG. 9, a guide message prompting the user to input an employee number and a fingerprint image is displayed on the display screen of the gate terminal (step c1).

When the authentication request from the gate terminal is received by the computer terminal of the certificate authority 17 (step d).
1), and waits for reception of data to be authenticated from the gate terminal (step d2).

Then, at the gate terminal, the user's own employee number is input by the operation of the ten key 18 b by the user who wants to enter, and a fingerprint image of the user is collected from the reading window 18 a of the fingerprint reading device 18. (Step c2), the input employee number and fingerprint image data are transmitted to the computer terminal of the certificate authority 17 (step c3).

When the computer terminal of the certificate authority 17 receives the employee number and fingerprint image data of the user to be authenticated transmitted from the gate terminal (step d).
2) According to the fingerprint authentication process in FIG. 7, the identity is determined by comparing with the registered fingerprint image registered in the registered user data memory 23a of the database device 23 and associated with the corresponding employee number (step). d3) The authentication result data indicating whether the authentication is OK or NG is notified to the gate terminal (step d4).

Then, at the gate terminal, the data of the authentication result notified from the certificate authority device 17 is received (step c4), the gate is opened when the authentication is OK, and the gate is opened when the authentication is NG. Does not open.

Therefore, the entrance / exit system of the company can be easily and highly reliable by using the authentication processing function based on the fingerprint image of the employee registered in the certificate authority device 17.

Similarly, in addition to using the authentication processing function based on the fingerprint image of each employee registered in the certificate authority device 17 in advance by accessing from the corporate intranet 14, information on the affiliation of the employee can be obtained. , A service for limiting the users of the in-company computer terminals 14a, 14b,..., A service for checking confidential data access authority, and a service for certifying the identity in accordance with an authentication request from the mobile phone 12 are easily and easily provided. It can be built as a highly reliable system.

Next, a description will be given of a specific example in which a network transaction system is constructed in a network system to which the certification authority 17 capable of performing the fingerprint registration processing and the fingerprint authentication processing as described above is connected.

FIG. 10 shows terminal processing at the personal computer terminal 11 or the mobile phone 12 and virtual store processing at the cyber mall / cyber shop 15 when the network transaction system is constructed with the network system.
7 is a flowchart showing the certificate authority processing in FIG. 7 in association with each other.

FIG. 11 is an external view showing the mobile phone 12 using the Internet transaction system.

An electronic mall / cyber shop 15 from a mobile phone 12 as a personal terminal via the Internet 10
When the user accesses the site of the virtual store terminal, the product content distributed from the virtual store terminal is displayed (step f).
1), is displayed on the display screen of the mobile phone 12 (step e1).

Here, for example, an order instructing operation is performed in accordance with the product content displayed on the mobile phone 12, and the virtual store terminal is notified to determine that a transaction has occurred in the virtual store terminal ( Step f2), an authentication request is transmitted to the computer terminal of the certificate authority 17 (step f3).

When the computer terminal of the certificate authority device 17 receives the authentication request from the virtual store terminal (step g1), a management number for the authentication request is generated and notified to the virtual store terminal (step g1). g
2).

When the virtual store terminal receives the authentication management number notified from the certificate authority device 17 (step f).
4), this management number is further notified to the mobile phone 12 as the terminal of the business partner, and at the same time, an authentication instruction message requesting fingerprint authentication to the terminal user of the business partner is transmitted (step f5).

Here, the mobile phone 12 receives the authentication management number and the authentication instruction message transmitted from the virtual shop terminal, and displays the authentication instruction message on the display screen as shown in FIG. 11, for example. (Step e2), the terminal user's finger is
When the fingerprint image is collected by being pressed against the reading window 18a (step e3), the data of the authentication management number notified through the virtual store terminal together with the collected fingerprint image data is transferred to the computer of the certificate authority device 17. It is transmitted to the terminal (step e4).

When the computer terminal of the certificate authority 17 receives the fingerprint image and the authentication management number data of the transaction target user transmitted from the mobile phone 12 as the client terminal (step g3), the computer terminal shown in FIG. According to the fingerprint authentication process, the registered fingerprint image registered in the registered user data memory 23a of the database device 23 is compared with the registered fingerprint image to determine its identity (step g4).
Is transmitted to the virtual mall terminal, which is the cyber mall / cyber shop 15, together with the authentication management number and the registered fingerprint collection source data (step g).
5).

Then, the virtual store terminal receives the authentication result data notified from the certificate authority 17 together with the authentication management number and the registered fingerprint collection source data (step f).
6) If the authentication is OK, the process is shifted to a transaction process such as confirmation of the ordered product, confirmation of the delivery destination, and confirmation of the transaction amount debit destination with the corresponding mobile phone 12 (step). f7.e5). If the authentication is NG, the transaction is processed as a transaction error.

Then, the data of the transaction amount accompanying the transaction processing is notified from the virtual shop terminal to the certificate authority 17 (step f8), and the certificate authority 17 uses the authentication management number in accordance with the received transaction amount. A billing discount process is performed for the registered user who has performed the managed fingerprint authentication (step g).
6). That is, the virtual store on the Internet 10 is
By signing a contract with the certificate authority (17) to take charge of the user's usage fee to the certificate authority (17) according to the transaction amount, this can be used as a transaction advantage at this store site to increase the number of transaction users. And the publisher can expect to increase the advertising revenue on the homepage.

FIG. 12 is a flowchart showing a transaction process in the virtual shop terminal when the above-mentioned network transaction system is constructed.

That is, when the result data of the authentication OK is received from the certificate authority 17 together with the data from which the registered fingerprint has been subjected to the fingerprint authentication (step h1), the data obtained is "individual", "communication carrier" (Telephone company), “Company name”, “Financial institution”, “Certification authority”, etc., the credit of the transaction amount is set (step h2). This credit is used to limit the amount of the transaction.

When it is determined that the current transaction amount falls within the range of the set credit rating, the process is shifted to an actual transaction process with the mobile phone 12 as the destination terminal (step h3 → h4). If it is determined that the current transaction amount does not fall within the range of the set credit, the transaction is processed as a transaction error (step h3 → h6).

That is, for example, when it is notified that the source of the registered fingerprint of the transaction user who has been authenticated is “financial institution”, the credit of the transaction amount is set to be large as full credit, and “ If you are notified that you are a “communications carrier (telephone company)”, you can register only for transactions via the provider operated by the telephone company, for example, by setting creditworthiness according to the customer database of that telephone company. By changing the creditworthiness of the user according to the registration source, the security of the transaction can be enhanced.

On the other hand, in step h1, the authentication N
If the result data of G is received, the process proceeds to a process associated with the authentication mismatch, such as transmission of a message instructing retry of fingerprint authentication (step h5).

Therefore, this network transaction system is also constructed as an easily and highly reliable and secure system using the authentication processing function based on the fingerprint image registered in advance from each terminal on the network in the certificate authority 17. become able to do.

In the above embodiment, the image data of the registered user registered in the database device 23 of the certificate authority 17 is a fingerprint image of each user, and each terminal on the network has the fingerprint reading device 18. In this configuration, the registered fingerprint image is captured and the verification fingerprint image to be authenticated is captured. However, if the image data of the registered user is an image unique to each user, for example, other body parts (such as the iris of the eye) ) May be a read image or a voice print image.

[0074]

As described above, according to the personal authentication device in the network according to the first aspect of the present invention, the image data read by the image reading device on the network and received through the network can be used as the personal data. The identity of each user using the network registered in the image registration means is compared with one type of image data unique to each individual to determine the identity, and the determination result is transmitted via the network. Thus, the required personal authentication can be collectively performed by the personal authentication device.

According to the authentication transaction system in the network according to the fourth aspect of the present invention, in response to a request for authentication of the transaction partner from the virtual store apparatus, the certificate authority sets the image reading device of the transaction partner on the network. The image data read and received via the network is compared with one type of image data unique to each user using the network registered by the personal image registration means to determine the identity. This determination result is notified to the virtual store device via the network, so that the certificate authority can perform the personal authentication of the business partner without registering the personal identification information of the user for each virtual store device. Become.

Further, according to the personal authentication system in a network according to claim 6 of the present invention, in response to a terminal user's authentication request from the terminal device, the certificate authority reads out the image by the image reading means of the terminal device. Image data of the terminal user received via the network by means of a personal image registering means, and a personal image registering means which associates the affiliation of each individual with one type of image data unique to each individual who uses the network and is registered. Are compared to determine the identity, and the determination result is notified to the terminal device via a network together with the affiliation registered in the personal image registration means in association with the registered image data to be compared. Is output and output, so without having to register the user's personal identification information for each terminal device, request a certificate authority to prove the affiliation of the terminal user Identity authentication is to be able to implement that.

Thus, according to the present invention, in the personal authentication required on the network, it is not necessary to individually register authentication information for each scene requiring various authentications, and a highly reliable personal authentication can be performed on the network. This can be easily performed for each of the above sites.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of a personal authentication device, an authentication transaction system, and a network system implementing a personal authentication system in a network according to the present invention.

FIG. 2 is a block diagram showing a configuration of a computer terminal in the certificate authority 17 connected to the network system.

FIG. 3 is a diagram showing registered user data in a registered user data memory 23a provided in a database device 23 of the certificate authority device 17.

FIG. 4 is a diagram for explaining a method of fingerprint authentication in the certificate authority device 17; FIG. 4A shows a registered fingerprint image A stored and registered in a registered user data memory 23a; FIG. 4B is a diagram showing a collation fingerprint image B to be collated and authenticated, which is sent to the registered fingerprint image A via the Internet 10.

FIG. 5 is a diagram showing header information of fingerprint image data read and transferred by the fingerprint reading device 18 in each terminal on the network system.

FIG. 6 is a flowchart showing a fingerprint registration process in the certificate authority device 17;

FIG. 7 is a flowchart showing a fingerprint authentication process in the certificate authority device 17;

FIG. 8 is a flowchart showing a computer terminal process and a certificate authority process in an entrance gate when a company entrance / exit system is constructed by the network system;

FIG. 9 is an external view showing a computer terminal device installed at an entrance / exit gate when a company entrance / exit system is constructed with the network system.

FIG. 10 shows a terminal processing in the personal computer terminal 11 and the mobile phone 12, a virtual store processing in the cyber mall / cyber shop 15, and a certificate authority in the certificate authority device 17 when a network transaction system is constructed by the network system. 9 is a flowchart showing processing in association with each other.

FIG. 11 is an external view showing the mobile phone 12 using the online transaction system.

FIG. 12 is a flowchart showing a transaction process in the virtual shop terminal when the network transaction system is constructed.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 ... Internet 11 ... Personal computer terminal 12 ... Mobile telephone 13 ... Communication carrier 14 ... Company intranet 14S ... Intranet server computer 14a, 14b, ... Intranet personal terminal 15 ... Electronic mall / cyber shop 16 ... Financial institution 17 ... Authentication Station device 18 Fingerprint reading device 18a Fingerprint reading window 18b Numeric keypad 21 Control unit (CPU) 22 Storage device 23 Database device 23a Registered user data memory 23b Transaction data memory 24 Network connection unit

Claims (6)

[Claims] 1. A personal authentication device in a network, comprising: a personal image registration unit for registering one type of image data unique to each user who uses the network; Means for comparing the image data received via the network with the image data registered by the personal image registering means to determine the identity; and A personal authentication device in a network, comprising: a determination result transmitting means for transmitting. 2. The image data of a network user personal registered in the personal image registering unit is registered in association with information on an image collection source of the image data. And transmitting the result of the determination together with the information on the image collection source registered in the personal image registration means in association with the registered image data to be compared.
A personal authentication device in a network according to claim 1. 3. A standardizing means for standardizing image data read by an image reading device on the network and received via the network in accordance with the specification of the image data registered by the personal image registering means. 3. The method according to claim 1, wherein the collation determination unit collates the image data standardized by the standardization unit with the image data registered by the personal image registration unit. 4. Personal authentication device in a network. 4. An authentication transaction system in a network in which a certificate authority and a virtual shop device are connected on a network, wherein the certificate authority is configured to generate one type of image data unique to each user who uses the network. Personal image registration means for registering, and image data read by an image reading device of a business partner on the network and received via the network in response to a business partner authentication request transmitted from the virtual store apparatus Matching determination means for comparing the image data registered by the personal image registration means with the image data registered by the personal image registration means, and determination result transmitting means for transmitting the determination result by the comparison determination means to the virtual store apparatus via a network. The virtual shop device transmits a request for authentication of a business partner to the certificate authority via a network. An authentication transaction transmitting system in a network, comprising: an authentication request transmitting unit that performs authentication processing; and a determination result receiving unit that receives a determination result transmitted from the certificate authority. 5. The virtual shop apparatus further comprises a transaction volume transmitting unit for transmitting a transaction volume with a counterparty to the certificate authority, and the certificate authority is further subjected to collation by the collation determination unit. Charging means for charging a fee to the user corresponding to the registered image data, and charging discount means for discounting the fee charged by the charging means according to the transaction volume transmitted from the virtual store. The authentication transaction system in a network according to claim 4, wherein 6. A personal authentication system in a network in which a certification authority and a terminal device are connected on a network, wherein the certification authority transmits one type of image data unique to each user who uses the network. Personal image registration means for registering in association with the affiliation of each individual; and in response to a terminal user authentication request transmitted from the terminal device, read by image reading means of the terminal device and received via a network. Matching and judging means for comparing the image data of the terminal user to be executed with the image data registered by the personal image registering means to determine the identity; The terminal device via a network together with an affiliation registered in the personal image registration means in association with data The terminal device comprises: an image reading unit that reads an image of a terminal user; and an authentication request for the terminal user via a network together with the image of the terminal user read by the image reading unit. An individual in a network, comprising: an authentication request transmitting unit that transmits to the certificate authority; and a determination result output unit that receives and outputs the determination result and the affiliation information transmitted from the certificate authority. Authentication system.