JP2002133341A - Principal authentication system, its control method and storing medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a principal authentication system capable of preventing card fraud. SOLUTION: The system comprises the steps of receiving card information read from a card information reading terminal and terminal information on the card information reading terminal (step S11), retrieving an information database based on the received data (step S12), acquiring an installation location of the card information reading terminal (step S13), acquiring a phone number of a PHS of a person to be authenticated (step S14), acquiring a current position of the person to be authenticated based on the phone number utilizing a current position retrieving service provided by a mobile communication system provider (step S15), collating the current position of the person to be authenticated and the installation location of the card information reading terminal (step S16), and determining the card user as the person to be authenticated if the card information reading terminal is present within a specific area including the current position of the person to be authenticated (step S17→S18).

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an identity authentication system for preventing unauthorized use of a card when purchasing goods or using various services by using an information recording medium such as a credit card, a control method therefor, and a control method therefor. It relates to a storage medium.

[0002]

2. Description of the Related Art At present, an IC (Integr) for storing information is used.
In the case of a credit card or the like having an attached circuit or a magnetic storage unit, in order to authenticate the identity of the card holder when using the card, it is common to use a personal identification number, a handwritten signature and a face photograph written on the card. It is a target. The password for using a credit card etc. usually consists of about 4 digits of alphanumeric characters.
For example, authentication is performed by inputting a personal identification number to a card information reading terminal. In some cases, the identity of the user is authenticated by a handwritten signature written on the card or a face photograph printed on the card.

[0003]

However, in the above-mentioned conventional personal authentication method, when an unauthorized user obtains or guesses a personal identification number by some means and uses the card, authentication of the personal identity is easily performed. In addition, in the collation based on the signature, the unauthorized user can easily imitate the handwriting, and the collator cannot instantly recognize the difference in the handwriting when using the card. Further, in the collation based on the face photograph described on the card, if the card itself is illegally forged, it cannot be recognized that the user is an unauthorized user.

[0004] In recent years, due to the convenience of card settlement and the like, the circulation of cards has been drastically increased, and accordingly, illegal use crimes such as forgery and theft of cards have been increasing. On the other hand, one person owns a plurality of cards, and even if the card is lost or stolen, the person often does not notice or delays notice. Therefore, it is often the case that an unauthorized user does not notice that the card has been used until the card management company notifies the card management company that the card has been stopped. In particular, if the card is forged without your knowledge,
Frequently, you will not notice any unauthorized use until you receive a statement of use of the card.

The present invention has been made in view of this point, and an identity authentication system capable of preventing unauthorized use of a card without the knowledge of the card owner.
It is an object of the present invention to provide a control method and a storage medium.

[0006]

In order to achieve the above object, the personal authentication system according to claim 1 is connected to a communication line and reads a plurality of personal information from an information storage medium in which the personal information is stored. An information reading terminal, and the personal information transmitted by any of the information reading terminals via the communication line is received, and the information reading medium is read by the information reading terminal based on the received personal information. A host computer that authenticates that the user of the information reading terminal that is being authenticated is an identity (authenticatee) to be authenticated. Storage means for storing personal information of a person to be authenticated, including unique information of a communication terminal, and unique information of each information reading terminal; Current position acquisition means for acquiring the current position of the information reading terminal user from the unique information of the mobile communication terminal being used, and the installation location of the information reading terminal used by the information reading terminal user. An installation location acquisition unit for acquiring based on the unique information of the reading terminal; a current position of the information reading terminal user acquired by the current location acquisition unit; and an installation of the information reading terminal acquired by the installation location acquisition unit. Matching means for checking whether or not the information reading terminal user is a person to be authenticated based on the location, wherein each of the information reading terminals stores unique information for each of the information reading terminals. Storage means for reading, personal data stored in the information storage medium, reading means for reading personal information stored in the information storage medium, and information for collating with some of the read personal information. Input means for inputting the information including the stored unique information and the read personal information, and having a transmitting and receiving means for transmitting and receiving with the host computer via the communication line.

According to a second aspect of the present invention, in the personal authentication system according to the first aspect, the current position acquiring means uses a current position search service provided by a provider of the mobile communication terminal. Acquiring the current position of the information reading terminal user by acquiring the current position of the mobile communication terminal.

According to a third aspect of the present invention, in the personal authentication system according to any one of the first and second aspects, the collating means includes the acquired current position of the information reading terminal user and the acquired position. The information reading terminal is compared with the installation location of the information reading terminal, and when the two substantially coincide with each other, the information reading terminal user is collated as the person to be authenticated.

According to a fourth aspect of the present invention, in the personal authentication system according to any one of the first and second aspects, the collating means includes the acquired current position of the information reading terminal user and the acquired position. The information reading terminal is compared with the installation location of the information reading terminal, and when the current position of the information reading terminal user is within a predetermined range including the installation location of the information reading terminal, the information reading terminal user is affected. It is characterized by collating with the authenticator.

[0010] According to a fifth aspect of the present invention, in the personal authentication system according to any one of the first to fourth aspects, the host computer is connected to the owner of the mobile communication terminal via the mobile communication terminal. And whether or not the information reading terminal user is the authenticated person by the authenticated person confirming means for receiving a response from the owner in response to the inquiry. If the collation cannot be obtained,
The owner of the mobile communication terminal is prompted for a response as to whether or not he / she is a person to be authenticated, and when a response to the effect that the owner is a person to be authenticated is obtained from the owner, the user is a person to be authenticated. And a determination means for determining.

In order to achieve the above object, the personal authentication system according to claim 6 is connected to a communication line, and comprises a plurality of information reading terminals for reading personal information from an information storage medium in which personal information is stored; Receiving the personal information transmitted by any of the information reading terminals via a communication line, and causing the information reading terminal to read the information storage medium based on the received personal information; In a personal authentication system comprising a host computer that authenticates that a user of a terminal is a person to be authenticated (a person to be authenticated), the host computer stores the unique information of the mobile communication terminal owned by the person to be authenticated. Storage means for storing personal information of the person to be authenticated,
A current position acquiring means for acquiring the current position of the information reading terminal user from the unique information of the mobile communication terminal stored for each subject, and the acquired current position of the information reading terminal user; Transmitting means for transmitting the information to the information reading terminal, wherein each of the information reading terminals reads personal information stored in the information storage medium, and storage means for storing unique information for each of the information reading terminals. Reading means, input means for inputting information for collating with a part of the read personal information, information including the read personal information and the current position of the information reading terminal user, Transmitting / receiving means for transmitting / receiving to / from the host computer via the communication line, and the current position of the acquired information reading terminal user received by the transmitting / receiving means; Based on the location of the information reading terminal, said information reading terminal user and having a collating means for collating whether or not the person to be authenticated.

According to a seventh aspect of the present invention, in the personal authentication system according to the sixth aspect, the current position obtaining means uses a current position search service provided by a provider of the mobile communication terminal. Acquiring the current position of the information reading terminal user by acquiring the current position of the mobile communication terminal.

According to an eighth aspect of the present invention, in the personal authentication system according to any one of the sixth and seventh aspects, the collating means comprises: the acquired current position of the information reading terminal user; It is characterized in that the location of the reading terminal is compared with the location of the reading terminal, and when the two are substantially the same, the information reading terminal user is collated as the person to be authenticated.

According to a ninth aspect of the present invention, in the personal identification system according to any one of the sixth and seventh aspects, the collating means comprises a step of determining the current position of the acquired information reading terminal user and the information related to the information. Comparing with the installation location of the reading terminal, when the current location of the information reading terminal user is within a predetermined range including the installation location of the information reading terminal, the information reading terminal user is It is characterized in that it is matched with a certain one.

In order to achieve the above object, a personal identification system control method according to a tenth aspect of the present invention includes a plurality of information reading terminals connected to a communication line for reading the personal information from an information storage medium storing the personal information. Receiving the personal information transmitted by any of the information reading terminals via the communication line, and causing the information reading terminal to read the information storage medium based on the received personal information. In a personal authentication system control method for controlling a personal authentication system including a host computer that authenticates that a user of an information reading terminal is a user to be authenticated (a person to be authenticated), Personal information of a person to be authenticated, including unique information of a mobile communication terminal owned by each authenticator, and unique information of each information reading terminal A storage step of storing in a storage means; a current position obtaining step of obtaining a current position of the information reading terminal user from unique information of the mobile communication terminal stored for each person to be authenticated; The installation location of the information reading terminal that is being used, the installation location obtaining step of obtaining based on the unique information of the information reading terminal, and the current location of the information reading terminal user obtained by the current location obtaining step, And a collation step of collating whether the information reading terminal user is a person to be authenticated, based on the installation location of the information reading terminal acquired by the installation location acquiring step, A storage step of storing the unique information of each information reading terminal in a storage unit, and storing the unique information in the information storage medium. A reading step of reading the read personal information, an input step of inputting information to be compared with a part of the read personal information using an input unit, and the stored unique information and the read information. Transmitting and receiving information including the obtained personal information to and from the host computer via the communication line.

According to an eleventh aspect of the present invention, in the personal authentication system control method according to the tenth aspect, in the current position acquiring step, a current position search service provided by a provider of the mobile communication terminal is provided. And acquiring the current position of the information reading terminal user by acquiring the current position of the mobile communication terminal.

A personal authentication system control method according to a twelfth aspect of the present invention is the personal identification system control method according to any one of the tenth and eleventh aspects, wherein in the collating step, the acquired information reading terminal user's current Compare the position and the installation location of the obtained information reading terminal,
When the two substantially match, the information reading terminal user is collated as the person to be authenticated.

A personal authentication system control method according to a thirteenth aspect of the present invention is the personal authentication system control method according to any one of the tenth and eleventh aspects, wherein in the collating step, the acquired information reading terminal user's current Compare the position and the installation location of the obtained information reading terminal,
When the current position of the information reading terminal user is within a predetermined range including the installation location of the information reading terminal, the information reading terminal user is collated as a person to be authenticated.

According to a fourteenth aspect of the present invention, in the personal authentication system control method according to any one of the tenth to thirteenth aspects, the host computer is connected to the personal computer via the mobile communication terminal. Inquiring of the owner of the mobile communication terminal whether or not it is a person to be authenticated,
An authenticated person confirming step for receiving a response from the owner in response thereto, and the collating step, wherein when the information reading terminal user cannot be collated as the authenticated person, the authenticated person confirming step is performed. Prompts the owner of the mobile communication terminal to make a response as to whether or not he or she is the authenticated person. When a response to the effect that the owner is a person to be authenticated is obtained, And a determining step of determining that

In order to achieve the above object, a personal authentication system control method according to claim 15 includes a plurality of information reading terminals connected to a communication line for reading personal information from an information storage medium storing personal information. Receiving the personal information transmitted by any of the information reading terminals via the communication line, and causing the information reading terminal to read the information storage medium based on the received personal information. In a personal authentication system control method for controlling a personal authentication system including a host computer that authenticates that a user of an information reading terminal is a user to be authenticated (a person to be authenticated), A storage step of storing personal information of a person to be authenticated in a storage means, including unique information of a mobile communication terminal owned by each of the certifiers; A current position obtaining step of obtaining the current position of the information reading terminal user from the unique information of the mobile communication terminal stored for each authenticator; and A transmitting step of transmitting to the reading terminal, for each of the information reading terminals, a storing step of storing unique information for each of the information reading terminals in a storage unit; A reading step of reading the read personal information, an input step of inputting information to be compared with a part of the read personal information using input means, and the read personal information and the information reading. A transmitting / receiving step of transmitting / receiving information including a current position of the terminal user to / from the host computer via the communication line; Has been received Te,
A collation step of collating whether or not the information reading terminal user is a person to be authenticated based on the obtained current position of the information reading terminal user and the installation location of the information reading terminal. And

A personal authentication system control method according to a sixteenth aspect of the present invention is the personal authentication system control method according to the fifteenth aspect, wherein in the current position acquisition step, a current position search service provided by a provider of the mobile communication terminal is provided. And acquiring the current position of the information reading terminal user by acquiring the current position of the mobile communication terminal.

According to a seventeenth aspect of the present invention, in the personal authentication system control method according to any one of the fifteenth and sixteenth aspects, in the collating step, the acquired information reading terminal user's current The position and the installation location of the information reading terminal are compared, and when the two substantially match, the information reading terminal user is collated as the person to be authenticated.

The personal authentication system control method according to claim 18 is the personal authentication system control method according to any one of claims 15 and 16, wherein, in the collating step, the acquired information reading terminal user's current Comparing the position with the installation location of the information reading terminal, when the current location of the information reading terminal user is within a predetermined range including the installation location of the information reading terminal, It is characterized by collating with the person to be authenticated.

In order to achieve the above object, a storage medium according to claim 19 is connected to a communication line, and a plurality of information reading terminals for reading personal information from an information storage medium storing personal information, Receiving the personal information transmitted by one of the information reading terminals via a line, and causing the information reading terminal to read the information storage medium based on the received personal information; A storage medium storing a program that can be realized by a computer, including a personal authentication system control method for controlling a personal authentication system including a host computer that authenticates that a user of the user is a user to be authenticated (a person to be authenticated). The personal authentication system control method may further include a mobile communication terminal owned by the user to be authenticated with respect to the host computer. The storage step of storing the personal information of the person to be authenticated, and the unique information of each information reading terminal in the storage means, and the unique information of the mobile communication terminal stored for each person to be authenticated, A current position obtaining step of obtaining a current position of the information reading terminal user; and a setting location of obtaining the setting position of the information reading terminal used by the information reading terminal user based on the unique information of the information reading terminal. Acquisition step, based on the current position of the information reading terminal user acquired by the current position acquisition step, and the installation location of the information reading terminal acquired by the installation location acquisition step,
A collation step of collating whether or not the information reading terminal user is a person to be authenticated. For each of the information reading terminals, the unique information for each of the information reading terminals is stored in storage means. A storage step of storing, a reading step of reading personal information stored in the information storage medium, and an input of inputting information to be compared with a part of the read personal information using an input unit. And transmitting and receiving the information including the stored unique information and the read personal information to and from the host computer via the communication line.

[0025] The storage medium according to claim 20 is the storage medium according to claim 1.
9. The storage medium according to claim 9, wherein in the current position obtaining step, the information reading is performed by obtaining a current position of the mobile communication terminal using a current position search service provided by a provider of the mobile communication terminal. The current position of the terminal user is obtained.

The storage medium according to claim 21 is the storage medium according to claim 1.
21. The storage medium according to any one of 9 or 20, wherein in the collating step, the obtained current position of the information reading terminal user is compared with the obtained installation location of the information reading terminal, and the two substantially match. Then, the information reading terminal user is collated with the user to be authenticated.

[0027] The storage medium according to the twenty-second aspect is the first aspect.
21. The storage medium according to any one of 9 or 20, wherein in the checking step, the obtained current position of the information reading terminal user is compared with the obtained installation location of the information reading terminal, and the information reading terminal is read. When the current position of the information reading terminal user exists within a predetermined range including the installation location of the information reading terminal, the information reading terminal user is collated as the person to be authenticated.

The storage medium according to the twenty-third aspect is the first aspect.
23. The storage medium according to any one of claims 9 to 22, wherein the personal authentication system control method comprises the steps of: Inquires whether
An authenticated person confirming step for receiving a response from the owner in response thereto, and the collating step, wherein when the information reading terminal user cannot be collated as the authenticated person, the authenticated person confirming step is performed. Prompts the owner of the mobile communication terminal to make a response as to whether or not he or she is the authenticated person. When a response to the effect that the owner is a person to be authenticated is obtained, And a determining step of determining that

In order to achieve the above object, a storage medium according to claim 24 is connected to a communication line and includes a plurality of information reading terminals for reading personal information from an information storage medium storing personal information; Receiving the personal information transmitted by one of the information reading terminals via a line, and causing the information reading terminal to read the information storage medium based on the received personal information; A storage medium storing a program that can be realized by a computer, including a personal authentication system control method for controlling a personal authentication system including a host computer that authenticates that a user of the user is a user to be authenticated (a person to be authenticated). The personal authentication system control method may further include a mobile communication terminal owned by the user to be authenticated with respect to the host computer. Storing the personal information of the person to be authenticated in the storage means, including the unique information of the user, and acquiring the current position of the information reading terminal user from the unique information of the mobile communication terminal stored for each person to be authenticated. And a transmitting step of transmitting the obtained current position of the user of the information reading terminal to the information reading terminal. A storage step of storing unique information for each reading terminal in a storage unit, a reading step of reading personal information stored in the information storage medium, and information for collating with some of the read personal information To
An input step of inputting using the input means; a transmitting / receiving step of transmitting / receiving the read personal information and information including the current position of the information reading terminal user to / from the host computer via the communication line; A collation step of collating whether or not the information reading terminal user is a person to be authenticated, based on the obtained current position of the information reading terminal user and the installation location of the information reading terminal received in the step. And characterized in that:

The storage medium according to claim 25 is the storage medium according to claim 2
4. The storage medium according to claim 4, wherein in the current position obtaining step, the information reading is performed by obtaining a current position of the mobile communication terminal using a current position search service provided by a provider of the mobile communication terminal. The current position of the terminal user is obtained.

[0031] The storage medium according to the twenty-sixth aspect is the second aspect.
In the storage medium according to any one of Items 4 and 25, in the collating step, the acquired current position of the information reading terminal user is compared with the installation location of the information reading terminal. And that the information reading terminal user is a person to be authenticated.

The storage medium according to claim 27 is the storage medium according to claim 2
26. The storage medium according to any one of claims 4 and 25, wherein in the collating step, the acquired current position of the information reading terminal user is compared with the installation location of the information reading terminal, and the installation location of the information reading terminal is compared. When the current position of the information reading terminal user is present within a predetermined range including the following, the information reading terminal user is collated as the person to be authenticated.

[0033]

Embodiments of the present invention will be described below in detail with reference to the drawings.

FIG. 1 is a block diagram showing a schematic configuration of a personal authentication system according to an embodiment of the present invention, in which the present invention is applied to a card payment system for performing card payment when purchasing a product.

As shown in FIG. 1, the card settlement system according to the present embodiment includes a host computer 1 installed at a card issuing company, a card information reading terminal 2 installed at each store, and a host computer 1. And a communication line N for connecting to the card information reading terminal 2. Usually, the card information is read by the card information reading terminal 2 installed in each store, and the communication line N
The data is output to the host computer 1 of the card issuing company connected via the PC, and data such as whether or not card settlement is possible is exchanged.

FIG. 2 is a block diagram showing a schematic configuration of the host computer 1.

As shown in FIG.
Is composed of a system control unit 11, a registration information search unit 12, an information database 13, an authentication determination unit 14, a position information acquisition unit 15, and a line interface 16.

The system control section 11 controls the entire system.

The registration information retrieval unit 12 retrieves the requested item from the information database 13 as needed.

The information database 13 stores the personal information of the registered card user, the current card use status, and the ID of the mobile communication terminal for confirming the current position of the card user.
It stores information of a card information reader.

The authentication determining unit 14 detects the current position of the person to be authenticated obtained by the position information obtaining unit 15 and the card information reading terminal 2 detected based on the data obtained from the information database 13 and the card information reading terminal 2. To determine whether the card user is himself.

The location information acquisition unit 15 obtains a PHS (personal handy) from a location information service provided by the mobile communication system provider registered for personal authentication.
The current position of the person to be authenticated is obtained by obtaining the current position of the mobile communication terminal such as a phone system. In recent years, as a method of acquiring a current position using a mobile communication terminal or the like such as a PHS, a base station having the strongest electrolytic strength is selected, and an ID for identifying the base station is used to register a registered base station. It is a well-known fact that a current location search service is provided by a mobile communication system provider in a method of calculating a current location of a mobile communication terminal from a location.

The line interface 16 is used to transmit / receive data to / from the card information reading terminal 2 or to perform data communication for obtaining position information by a position information search service provided by a mobile communication system provider. Perform line control.

FIG. 3 is a block diagram showing a schematic configuration of the card information reading terminal 2.

As shown in the figure, the card information reading terminal 2 includes a line interface 21, a terminal control unit 22,
It comprises a card information reading unit 23, an input / output user interface 24, and a terminal information recording unit 25.

The line interface 21 controls the line for transmitting and receiving data between the card information reading terminal 2 and the host computer 1.

The terminal control section 22 controls the system inside the card reading terminal 2.

The card information reading section 23 reads out magnetic recording information recorded on the card and recorded information from an IC mounted on the card.

The input / output user interface 24 allows a card settlement user to input a personal identification number and display an authentication result when using the card.

The terminal information recording section 25 stores the unique information of the terminal 2 such as the identification ID assigned to the card information reading terminal 2.

The control processing executed by the card payment system configured as described above, specifically, in the system including the host computer 1 and the card information reading terminal 2, the information database 13 of the host computer 1 is used for personal authentication. A process of performing personal authentication at the time of card payment when a PHS is registered in a registered mobile communication terminal will be described below with reference to the flowcharts of FIGS. 4 and 5.

FIG. 4 is a flowchart showing the procedure of the personal authentication processing executed by the card information reading terminal 2, and FIG. 5 is a flowchart showing the procedure of the personal authentication processing executed by the host computer 1.

In FIG. 4, when performing card settlement, first, the card used for settlement is passed through the card information reading section 23 of the card information reading terminal 2 and stored on the card via the card information reading section 23. The read information is read (step S1). Next, the terminal control unit 22 transmits the read data and the unique information of the terminal recorded in the terminal information recording unit 25 to the host computer via the line interface 21 (Step S2). After the data transmission, the terminal control unit 22 waits for an authentication result transmitted from the host computer 1 to determine whether or not the card user is an authenticated person (step S3).

On the other hand, in FIG. 5, when the host computer 1 receives the card information and the terminal information from the card information reading terminal 2 via the communication line interface 16 (step S11), the system control section 11 sends the registration information search section The individual information of the card reading terminal 2 and the person to be authenticated (card owner) is searched based on the data received from the information database 13 via the server 12 (step S12). From the search result, the installation location of the card information reading terminal 2 is obtained (step S13), and the number of the PHS which is the mobile communication terminal for confirming the current position of the person to be authenticated is obtained (step S1).
4).

Based on the PHS number obtained by searching the information database 13, the position information obtaining unit 15
The current position information of the authenticated person is obtained by acquiring the current position of the current position confirmation PHS of the authenticated person by using the current position search service of the mobile communication terminal provided by the mobile communication system provider through Acquire (Step S1
5).

The authentication determination unit 14 checks whether the user of the card information reading terminal 2 is the authenticated person based on the acquired current position of the person to be authenticated and the positional information of the card reading terminal 2 ( Step S16).

If it can be determined that the card information reading terminal is installed in the current position area of the person to be authenticated obtained by the PHS, it is determined that the card user is the person to be authenticated (step S18). Conversely, if the card information reading terminal 2 is not installed in the current location area acquired by the PHS, it is determined that the card is used by an unauthorized user, and the card user is not an authenticated person. A determination is made (step S19).

When it is determined in step S19 that the card user is not the person to be authenticated, if the current position confirmation PHS can transmit and receive voices and messages like a normal PHS, this PHS To the owner of the PHS, a voice or a message for confirming whether or not the person to be authenticated is transmitted. May be authenticated.

The system control unit 11 transmits the authentication determination result determined by the authentication determining unit 14 to the card information reading terminal 2 that has read the card information via the line interface 16 (step S20).

Returning to FIG. 4, the card information reading terminal 2 in the card user authentication waiting state (step S3)
The card user authentication result is received from the host computer 1 (step S4), the authentication result received by the terminal control unit 22 is analyzed, and if the card user is authenticated by the host computer 1 (step S5), the card is Is permitted (step S6), the subsequent card payment processing is continued, and the input / output user interface 24 for the next processing is executed.
(Step S7).

Conversely, if the card user is not authenticated by the host computer 1 (step S5), the use of the card is refused (step S8), the subsequent card settlement processing is refused, and the use of the card is stopped. (Step S9).

In the present embodiment, the PHS has been described as an example of a mobile communication terminal for confirming the current position of a person to be authenticated. However, another mobile communication terminal capable of acquiring position information is used. It goes without saying that the same result can be obtained in such a case.

The position information of the card information reading terminal 2 is stored in the card information reading terminal 2 side, and based on the current position information of the person to be authenticated obtained in the host computer, the card information reading terminal 2 side Then, these two pieces of position information may be collated to determine whether or not the card user is a person to be authenticated.

A storage medium storing a program code of software for realizing the functions of the above-described embodiments is supplied to a system or an apparatus, and a computer (or CPU or MPU) of the system or apparatus stores the storage medium in the storage medium. It goes without saying that the object of the present invention is also achieved by reading and executing the stored program code.

In this case, the program code itself read from the storage medium realizes the novel function of the present invention, and the storage medium storing the program code constitutes the present invention.

As a storage medium for supplying the program code, for example, a floppy (registered trademark) disk, hard disk, optical disk, magneto-optical disk, C
A D-ROM, a CD-R, a magnetic tape, a nonvolatile memory card, a ROM, or the like can be used. Further, the program code may be supplied from a server computer via a communication network.

When the computer executes the readout program code, not only the functions of the above-described embodiments are realized, but also an OS or the like running on the computer based on the instructions of the program code. Does a part or all of the actual processing, and the processing realizes the functions of the above-described embodiments.

Further, after the program code read from the storage medium is written into a memory provided on a function expansion board inserted into the computer or a function expansion unit connected to the computer, based on the instructions of the program code, It goes without saying that the CPU included in the function expansion board or the function expansion unit performs part or all of the actual processing, and the functions of the above-described embodiments are realized by the processing.

[0069]

As described above, according to the present invention,
At the time of card payment, in addition to the existing authentication method, it is determined in real time whether the card user is an unauthorized user based on the place where the card user made the card payment and the location information of the authenticated person It is possible to provide a highly secure personal authentication system for preventing unauthorized use such as forgery of a card, a control method thereof, and a storage medium.

[Brief description of the drawings]

FIG. 1 is an overall configuration diagram showing the configuration of an entire personal authentication system according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a configuration of a host computer of FIG.

FIG. 3 is a block diagram illustrating a configuration of a card information reading terminal of FIG. 1;

FIG. 4 is a flowchart showing a procedure of a personal authentication process executed by the card information reading terminal of FIG. 3;

FIG. 5 is a flowchart illustrating a procedure of a personal authentication process executed by the host computer of FIG. 2;

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Host computer 2 Card information reading terminal 11 System control unit 12 Registration information search unit 13 Information database 14 Authentication judgment unit 15 Position information acquisition unit 16 Line interface 21 Line interface 22 Terminal control unit 23 Card information reading unit 24 Input / output user interface 25 Terminal information recording unit

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G06F 17/60 506 G06F 17/60 506 G07F 7/12 G07F 7/08 B

Claims (27)

[Claims] A plurality of information reading terminals connected to a communication line for reading said personal information from an information storage medium storing said personal information; and said one of said information reading terminals transmitting said information via said communication line. The user of the information reading terminal receiving the personal information and having the information reading terminal read the information storage medium based on the received personal information is the person (authenticatee) to be authenticated. An authentication system comprising: a host computer that authenticates the personal computer; wherein the host computer includes personal information of a subject to be authenticated, including unique information of a mobile communication terminal owned by each of the subject, and each of the information reading terminals. A storage unit for storing the unique information, and a current position of the information reading terminal user from the unique information of the mobile communication terminal stored for each person to be authenticated. Current position acquisition means for acquiring the information reading terminal user, the installation location acquisition means for acquiring the installation location of the information reading terminal used based on the unique information of the information reading terminal, the current position acquisition Based on the current position of the information reading terminal user acquired by the means, and the installation location of the information reading terminal acquired by the installation location acquiring means, whether the information reading terminal user is a person to be authenticated Each of the information reading terminals includes a storage unit that stores unique information for each of the information reading terminals, and a reading unit that reads personal information stored in the information storage medium. Input means for inputting information to be compared with a part of the read personal information; and the stored unique information and the read personal information. A personal authentication system, comprising: transmitting / receiving means for transmitting / receiving information including personal information to / from the host computer via the communication line. 2. The information reading terminal user according to claim 2, wherein the current position acquiring means acquires a current position of the mobile communication terminal by using a current position search service provided by a provider of the mobile communication terminal. 2. The personal authentication system according to claim 1, wherein the current position of the user is acquired. 3. The comparing means compares the obtained current position of the information reading terminal user with the obtained installation location of the information reading terminal.
3. The personal authentication system according to claim 1, wherein the information reading terminal user is verified as a person to be authenticated. 4. The comparing means compares the obtained current position of the information reading terminal user with the obtained installation location of the information reading terminal, and compares the obtained current location of the information reading terminal with the installation location of the information reading terminal. 3. The personal authentication according to claim 1, wherein when the current position of the information reading terminal user is present, the information reading terminal user is verified as a person to be authenticated. system. 5. The host computer, via the mobile communication terminal, inquires of an owner of the mobile communication terminal whether or not the user is an authenticated person, and receives a response to the response from the owner. Authenticator confirmation means, When the collation means, the collation that the information reading terminal user is a person to be authenticated is not obtained, by the authenticated person confirmation means, the owner of the mobile communication terminal Prompts a response as to whether or not the user is a subject, and when a response indicating that the subject is a subject is obtained from the owner,
The personal authentication system according to any one of claims 1 to 4, further comprising a determination unit for determining that the user is a subject. 6. A plurality of information reading terminals connected to a communication line and reading said personal information from an information storage medium storing personal information, and said information reading terminal transmitted by any one of said information reading terminals via said communication line. The user of the information reading terminal receiving the personal information and having the information reading terminal read the information storage medium based on the received personal information is the person (authenticatee) to be authenticated. An authentication system comprising: a host computer that authenticates the identity of the user; a storage unit that stores personal information of the user to be authenticated, including personal information of a mobile communication terminal owned by the individual to be authenticated; Current position acquisition means for acquiring the current position of the information reading terminal user from the unique information of the mobile communication terminal stored for each authenticator; Transmission means for transmitting the current position of the information reading terminal user to the information reading terminal, wherein each of the information reading terminals stores unique information for each of the information reading terminals, and Reading means for reading personal information stored in the information storage medium; input means for inputting information for collating with some of the read personal information; and Transmitting / receiving means for transmitting / receiving information including the current position of the information reading terminal user to / from the host computer via the communication line; and the acquired current position of the information reading terminal user received by the transmitting / receiving means Matching means for checking whether or not the information reading terminal user is a person to be authenticated based on the installation location of the information reading terminal. Identity authentication system. 7. The information reading terminal user by acquiring the current position of the mobile communication terminal using a current position search service provided by a provider of the mobile communication terminal. The personal authentication system according to claim 6, wherein the current position of the user is acquired. 8. The collating means compares the acquired current position of the information reading terminal user with the installation location of the information reading terminal. The personal authentication system according to claim 6, wherein the authentication is performed as a person to be authenticated. 9. The comparing means compares the acquired current position of the information reading terminal user with the installation location of the information reading terminal, and sets the information reading terminal within a predetermined range including the installation location of the information reading terminal. 8. The personal authentication system according to claim 6, wherein when the current position of the information reading terminal user exists, the information reading terminal user is collated with the user to be authenticated. 10. A plurality of information reading terminals connected to a communication line and reading said personal information from an information storage medium storing personal information, and said one of the information reading terminals transmitted by said information reading terminal via said communication line. The user of the information reading terminal receiving the personal information and having the information reading terminal read the information storage medium based on the received personal information is the person (authenticatee) to be authenticated. In a personal authentication system control method for controlling a personal authentication system including a host computer that authenticates the existence of a mobile communication terminal, the authentication method includes: Storing in the storage means personal information of each of the information reading terminals and the unique information of each of the information reading terminals; A current position obtaining step of obtaining the current position of the information reading terminal user from the unique information of the mobile communication terminal, and setting an installation location of the information reading terminal used by the information reading terminal user, An installation location acquisition step of acquiring based on the unique information, based on the current location of the information reading terminal user acquired by the current location acquisition step, and an installation location of the information reading terminal acquired by the installation location acquisition step And a collation step of collating whether the information reading terminal user is a person to be authenticated, and storing, for each of the information reading terminals, unique information for each of the information reading terminals. A reading step of reading personal information stored in the information storage medium; and a reading step of reading the personal information stored in the information storage medium. An input step of inputting information to be compared with a part of the information using an input unit; and information including the stored unique information and the read personal information, via the communication line. A personal authentication system control method, comprising: a transmitting / receiving step for transmitting / receiving to / from a host computer. 11. In the current position obtaining step, the information reading terminal user is obtained by obtaining a current position of the mobile communication terminal using a current position search service provided by a provider of the mobile communication terminal. The personal authentication system control method according to claim 10, wherein the current position of the user is acquired. 12. In the collating step, the obtained current position of the information reading terminal user is compared with the obtained installation location of the information reading terminal. 12. The personal authentication system control method according to claim 10, wherein the user is verified as a person to be authenticated. 13. In the collating step, the obtained current position of the information reading terminal user is compared with the obtained installation location of the information reading terminal, and a predetermined range including the installation location of the information reading terminal is compared. 12. The personal authentication according to claim 10, wherein when the current position of the information reading terminal user exists, the information reading terminal user is collated with the user to be authenticated. System control method. 14. The host computer, via the mobile communication terminal, inquires of an owner of the mobile communication terminal whether or not the user is an authenticated person, and a response from the owner to the inquiry. An authentication-subject confirming step for accepting the information-reading terminal user, if the information-reading terminal user cannot be verified as an authenticator by the collation step, A prompt for a response as to whether or not the user is a user to be authenticated, and when a response indicating that the user is a user to be authenticated is obtained from the owner, The personal authentication system according to any one of claims 10 to 13, further comprising: 15. A plurality of information reading terminals connected to a communication line for reading said personal information from an information storage medium storing personal information, and said information reading terminal transmitted by any of said information reading terminals via said communication line. The user of the information reading terminal receiving the personal information and having the information reading terminal read the information storage medium based on the received personal information is the person (authenticatee) to be authenticated. In a personal authentication system control method for controlling a personal authentication system including a host computer that authenticates the existence of a mobile communication terminal, each of the host computers includes unique information of a mobile communication terminal owned by the user. Storing the personal information in the storage means, and reading the information from the unique information of the mobile communication terminal stored for each person to be authenticated. A current position obtaining step of obtaining the current position of the terminal user, and a transmitting step of transmitting the obtained current position of the information reading terminal user to the information reading terminal. A storage step of storing unique information for each information reading terminal in storage means; a reading step of reading personal information stored in the information storage medium; and a reading step of reading the personal information. An inputting step of inputting information to be compared with the partial information using an inputting means; and information including the read personal information and a current position of the information reading terminal user, via the communication line. A transmitting / receiving step for transmitting / receiving to / from the host computer; and a current position and a position of the acquired information reading terminal user received by the transmitting / receiving step. And a collation step of collating whether or not the user of the information reading terminal is a person to be authenticated based on the installation location of the information reading terminal. 16. In the current position obtaining step, the information reading terminal user is obtained by obtaining a current position of the mobile communication terminal by using a current position search service provided by a provider of the mobile communication terminal. The personal authentication system control method according to claim 15, wherein the current position of the user is acquired. 17. In the collating step, the obtained current position of the information reading terminal user is compared with the installation location of the information reading terminal. 17. The personal authentication system control method according to claim 15, wherein the verification is performed as to be a person to be authenticated. 18. The comparing step, wherein the acquired current position of the information reading terminal user is compared with the installation location of the information reading terminal, and the location is set within a predetermined range including the installation location of the information reading terminal. 17. The personal authentication system control method according to claim 15, wherein when the current position of the information reading terminal user is present, the information reading terminal user is compared with the user to be authenticated. . 19. A plurality of information reading terminals connected to a communication line for reading the personal information from an information storage medium storing the personal information, and the information reading terminal transmitted by any one of the information reading terminals via the communication line. The user of the information reading terminal receiving the personal information and having the information reading terminal read the information storage medium based on the received personal information is the person (authenticatee) to be authenticated. A storage medium storing a program that can be realized by a computer, including a personal authentication system control method for controlling a personal authentication system including a host computer that authenticates the user, wherein the personal authentication system control method includes: Is the personal information of the subject, including the unique information of each mobile communication terminal owned by the subject, A storage step of storing unique information for each information reading terminal in storage means; and a current position obtaining step of obtaining a current position of the information reading terminal user from the unique information of the mobile communication terminal stored for each subject. An installation location obtaining step of obtaining the installation location of the information reading terminal used by the information reading terminal user based on the unique information of the information reading terminal; and information obtained by the current location obtaining step. Based on the current position of the reading terminal user and the installation location of the information reading terminal obtained in the installation location obtaining step, a collation step of collating whether the information reading terminal user is a person to be authenticated. A storage step for storing the unique information for each of the information reading terminals in the storage means. A reading step of reading personal information stored in the information storage medium; and an inputting step of inputting information to be compared with a part of the read personal information using input means. A transmission / reception step of transmitting / receiving the information including the stored unique information and the read personal information to / from the host computer via the communication line. 20. The information reading terminal user by acquiring the current position of the mobile communication terminal by using a current position search service provided by a provider of the mobile communication terminal in the current position obtaining step. 20. The storage medium according to claim 19, wherein the current position of the storage medium is obtained. 21. In the collating step, the obtained current position of the information reading terminal user is compared with the obtained installation location of the information reading terminal. 21. The storage medium according to claim 19, wherein the storage medium is collated as a user to be authenticated. 22. In the collating step, the obtained current position of the information reading terminal user is compared with the obtained installation location of the information reading terminal, and a predetermined range including the installation location of the information reading terminal is compared. 21. The storage medium according to claim 19, wherein when the current position of the information reading terminal user is present, the information reading terminal user is verified as an authenticated person. . 23. The personal authentication system control method, wherein the host computer inquires, via the mobile communication terminal, an owner of the mobile communication terminal as to whether or not the user is an authenticated person. An authenticated person confirming step for receiving a response from the owner in response to the authenticated person confirmation step; and if the information reading terminal user cannot be collated as the authenticated person, Prompts the owner of the mobile communication terminal to make a response as to whether or not he or she is the authenticated person. When a response to the effect that the owner is a person to be authenticated is obtained, 23. The storage medium according to claim 19, further comprising: a determination step of determining that the following condition is satisfied. 24. A plurality of information reading terminals connected to a communication line and reading said personal information from an information storage medium storing personal information, and said one of the information reading terminals transmitted by said information reading terminal via said communication line. The user of the information reading terminal that receives the personal information and has the information reading terminal read the information storage medium based on the received personal information is the person to be authenticated (authenticatee). Including a personal authentication system control method for controlling a personal authentication system consisting of a host computer for authenticating that there is
In a storage medium storing a program that can be realized by a computer, the personal authentication system control method includes: for the host computer, personal information of a subject to be authenticated, including personal information of a mobile communication terminal owned by each of the subject to be authenticated. A current position obtaining step of obtaining the current position of the information reading terminal user from the unique information of the mobile communication terminal stored for each person to be authenticated, and the obtained information Transmitting a current position of the reading terminal user to the information reading terminal; and for each of the information reading terminals, storing unique information for each of the information reading terminals in storage means. A storage step; a reading step of reading personal information stored in the information storage medium; An inputting step of inputting information to be compared with the partial information using an inputting means; and information including the read personal information and a current position of the information reading terminal user through the communication line. A transmitting / receiving step of transmitting / receiving to / from the host computer; and the information reading terminal user being authenticated based on the obtained current position of the information reading terminal user and the installation location of the information reading terminal received in the transmitting / receiving step. A collation step of collating whether or not the user is a person. 25. The information reading terminal user by acquiring the current position of the mobile communication terminal by using a current position search service provided by a provider of the mobile communication terminal in the current position obtaining step. The storage medium according to claim 24, wherein the current position of the storage medium is obtained. 26. The collating step, wherein the obtained current position of the information reading terminal user is compared with the installation location of the information reading terminal, and when the two substantially match, the information reading terminal user is 26. The storage medium according to claim 24, wherein the storage medium is collated with a person to be authenticated. 27. The collating step, wherein the obtained current position of the information reading terminal user is compared with the installation location of the information reading terminal, and the information reading terminal is located within a predetermined range including the installation location of the information reading terminal. 26. The storage medium according to claim 24, wherein when the current position of the information reading terminal user is present, the information reading terminal user is verified as an authenticated person.