JP2002197462A - System and method for authentication, and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a user authentication system, with which a user is efficiently authenticated. SOLUTION: This authentication system for authenticating a person to be authenticated is provided with a registered image database 120 for storing the respective stamp seal images of a plurality of seal impressions, owned by the person to be authenticated as the registered images of the person to be authenticated, while making the stamp seal images correspond to an authentication object showing the authentication object of the person to be authenticated and person to be authenticated identification information which authenticates the person to be authenticated, an inputting part for inputting one stamp seal image, the person to be authenticated identification information and the authentication object, and an authentication acceptance/rejection deciding part 108 for authenticating the person to be authenticated, when the stamp seal image and the authentication object inputted by the inputting part coincide with any registered image and the authentication object corresponding to the registered image stored, while being made to correspond to the person to be authenticated identification information, inputted by the inputting part in the database 120.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to an authentication system, an authentication method, and a recording medium. In particular, the present invention relates to a user authentication system using a seal image, an authentication method, and a recording medium.

[0002]

2. Description of the Related Art For example, when conducting a transaction,
You need to prove yourself. Means for authenticating the person include, for example, a seal and an identification card. In recent years, transactions using the Internet have been increasing. As authentication on the Internet, there is a method of negotiating user identification information for identifying a user who conducts a transaction in advance and using the user identification information.

[0003]

However, authentication using a seal or an identification card is troublesome and inefficient. Also,
Authentication on the Internet often has security issues. For this reason, provision of a new authentication method is desired.

[0004] Therefore, an object of the present invention is to provide a user authentication system, a user authentication method, and a recording medium that can solve the above-mentioned problems. This object is achieved by a combination of features described in the independent claims. The dependent claims define further advantageous embodiments of the present invention.

[0005]

According to a first aspect of the present invention, there is provided an authentication system for authenticating a person to be authenticated, the method comprising: As a registered image of the person to be authenticated, a registered image database stored in association with an authentication purpose indicating the purpose of authentication of the person to be authenticated and identification information of the person to be authenticated to authenticate the person to be authenticated, and one imprint image, Authenticated person identification information, and an input unit for inputting the authentication purpose, and the imprint image and the authentication purpose input by the input unit in the registered image database, in the authenticated person identification information input by the input unit An authentication determination unit that authenticates the subject when any one of the registered images stored in association with the authentication purpose corresponding to the registered image is matched.

A registration image extraction unit for extracting a registration image corresponding to the authentication purpose from the registration images stored in the registration image database in association with the identification information input by the input unit; And an image comparing unit that compares the extracted registered image with the imprint image input by the input unit.

In the registered image database, a registered image extracting unit for extracting the registered image stored in association with the identification information of the person to be authenticated input by the input unit; the extracted registered image; An image comparison unit that compares the imprint image input by the unit may be further provided. In the registered image database, when the authentication purpose set for the registered image that matches the seal imprint image matches the authentication purpose input by the input unit, the authentication permission / inhibition determination unit includes: The person to be authenticated may be authenticated.

[0008] The input unit may include authentication requester identification information for identifying an authentication requester who requests the authentication of the authentication target.
The information may be input for the purpose of authentication, and the registered image database may further store the authentication requester identification information in association with the registered image. When the authentication requester identification information is input by the input unit, the registration image extraction unit stores the authentication requester identification information in the registration image database in association with the input authentication-subject identification information and the authentication requester identification information. The registered image to be performed may be extracted.

[0009] The input unit may further input a transaction content indicating the content of the transaction with the user for the authentication purpose, and the registration image database further stores the transaction content in association with the registration image. May be. When the input unit has input the transaction content, the registered image extraction unit is stored in the registered image database in association with the authentication subject identification information, the authentication requester identification information, and the transaction content. The registered image may be extracted.

[0010] The input unit may further input a transaction content indicating the content of a transaction with the user for the authentication purpose, and the registered image database further stores the transaction content in association with the registered image. May be. When the input unit has input the transaction content, the registered image extracting unit extracts the registered image stored in the registered image database in association with the authenticated person identification information and the transaction content. Is also good.

[0011] The input unit may further input a transaction limit for the transaction with the user for the purpose of authentication, and the registered image database further associates the transaction limit with the registered image. It may be stored. When the input unit inputs the transaction limit, the registered image extracting unit may extract the registered image stored in the registered image database in association with the input transaction limit.

[0012] The image comparing section may determine a degree of coincidence between the registered image extracted by the image extracting section and the imprint image input by the input section.
Whether the user authentication is possible or not may be determined according to the degree of coincidence.

[0013] When the input unit inputs the imprint image, the authentication propriety determining unit determines that the transaction image is equal to or less than the transaction limit stored in the registered image database in association with the registered image for the input imprint image. In the transaction with the transaction limit, the authentication of the person to be authenticated may be permitted.

When the identification information of the person to be authenticated and one seal imprint image are inputted, the seal imprint history database for storing the inputted seal imprint image in association with the identification information of the person to be authenticated; A providing unit that provides information indicating whether or not the authentication of the authenticated person determined by the availability determination unit is possible;
When the information provided by the providing unit is notified that there is a possibility that the information is incorrect, a presentation that presents the imprint image designated as possibly incorrect and the registered image corresponding to the imprint image. Unit may be further provided.

According to a second aspect of the present invention, there is provided an authentication method for authenticating a person to be authenticated, wherein one of the plurality of seal imprint images possessed by the authenticator is imprinted with the person being authenticated. The input step of inputting the identification object identification information to be identified, and the authentication purpose indicating the purpose of authentication of the authentication target, and the input imprint image and the authentication purpose input the imprint image to the authentication object. As the registered image, in the registered image database stored in association with the authentication-subject identification information, any one of the registered images and the registration image stored in association with the input authentication-subject identification information. A step of determining whether or not to authenticate the person to be authenticated when the authentication object matches the corresponding authentication purpose.

A storage step of storing the imprinted person identification information and the imprinted image when the imprint image is input, in association with the to-be-authenticated person identification information; A providing step of providing information indicating whether or not the subject can be authenticated determined in the step, and specifying that the provided information may be incorrect when notified that the provided information may be incorrect The presenting step of presenting the registered image corresponding to the given imprint image and the imprint image, and based on the presented imprint image and the registered image corresponding to the imprint image, provided information is incorrect. Paying a compensation if confirmed.

A registration step of registering the registration image to be registered in the registration database and authentication requester identification information of an authentication requester requesting authentication of the user using the registration image, for the authentication purpose; Is also good. The registered image database may store the registered image registered in the registration step in association with the authenticator identification information of the authentication requester.

[0018] The information processing apparatus may further include a registration step of registering the registered image to be registered in the registered image database and transaction contents of a transaction using the registered image for the authentication purpose. The registered image database may store the registered image registered in the registration step in association with the transaction content.

According to a third aspect of the present invention, there is provided a recording medium for storing software of a computer for authenticating a person to be authenticated, wherein the software stores, on the computer, a plurality of seals possessed by the person to be authenticated. One of the imprint images of the imprint image, the subject identification information identifying the subject, and an input module for inputting an authentication purpose indicating the purpose of authentication of the subject, and the input module input In the registered image database storing the seal imprint image and the authentication purpose, the seal imprint image is stored as the registered image of the person to be authenticated in association with the person to be authenticated identification information. If any of the registered images stored in association with the identification information and the authentication purpose corresponding to the registered image match, And an authentication possibility determination module to authenticate the witness's.

The above summary of the present invention does not list all of the necessary features of the present invention, and a sub-combination of these features may also be an invention.

[0021]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described through embodiments of the present invention. However, the following embodiments do not limit the claimed invention and have the features described in the embodiments. Not all combinations are essential to the solution of the invention.

The “receiving unit” in the embodiment of the invention is an example of the “input unit” described in the claims. The “registration unit” in the embodiment of the invention is an example of the “requester registration unit” and the “transaction limit registration unit” described in the claims. The “overall matching degree” in the embodiment of the invention is an example of the “matching degree” described in the claims. Further, “user” and “transaction company” in the embodiment of the invention are examples of “authenticatee” and “authentication requester” in the embodiment of the invention, respectively.

FIG. 1 shows a user authentication system including a seal authentication server 100. The seal stamp authentication server 100 stores a seal image of a seal stamp owned by a registered user registered in the seal seal authentication server 100 as a registered image of the registered user. The seal authentication server 100 is a trading company server 30
Receives a seal imprint image of a seal carried by the user via a communication line. The seal authentication server 100 authenticates the user based on the received seal image using the registered image. The communication line in the present embodiment is the Internet 10.

The trading company server 30 includes the seal authentication server 1
From 00, the authentication result of the imprint image is received, and whether or not to conduct a transaction with the user who provided the imprint image can be determined based on the authentication result.

For example, a user who intends to make a transaction with the trading company server 30 seals a contract for a transaction between the user and the trading company. The user transmits the imprint image to the scanner 22.
To take in the user terminal 20. The user terminal 20 transmits the captured seal imprint image to the trading company server 30 via the Internet 10, for example, by including it in an e-mail. The trading company server 30 transmits the imprint image received from the user terminal 20 to the seal authentication server 100. The seal authentication server 100 authenticates the user based on the received seal image, and transmits the authentication result to the trading company server 30 via the Internet 10. As described above, the trading company server 30 can determine whether or not to make a transaction with the user of the user terminal 20 based on the result received from the seal authentication server 100.

FIG. 2 is a block diagram showing a functional configuration of the seal authentication server 100. A series of operations of the seal authentication server 100 are mainly realized by the cooperation of the CPU and programs stored in the ROM and the RAM. However, the seal authentication server 100 may be realized by other components, and the design flexibility is high. Seal authentication server 10
0 indicates a receiving unit 102, a grayscale direction determining unit 104, an image comparing unit 106, an authentication permission / inhibition determining unit 108,
2, a registration unit 114, a registered image extraction unit 118, a registered image database 120, and an imprint history database 12
2

The receiving unit 102 receives, from the trading company server 30, the purpose of the user authentication of the trading company server 30, that is, the transaction contents and the imprint image to be traded by the trading company server 30 via the Internet 10. Here, the transaction contents include user identification information for identifying the user who the trading company server 30 intends to trade, trading company identification information for identifying the trading partner company server 30, and trading company server 30 and the user. Trade. The receiving unit 102 may receive an electronic mail including such information.

The shading direction determining unit 104 receives the imprint image and the user identification information from the receiving unit 102. The shading direction determining unit 104 obtains a shading direction indicating the shading direction of the seal imprint indicated in the received seal imprint image. Shading direction determination unit 10
4 sends the obtained shading direction and the user identification information received from the receiving unit 102 to the image comparing unit 106.

The registration unit 114 associates the imprint images of a plurality of seals owned by the registered user registered in the seal authentication server 100 with registered user identification information for identifying the registered user as registered images of the registered user. To the registered image database 120. The registration unit 114 further registers the registration image in association with the transaction content in the registration database 1.
20.

The registration image database 120 stores the registration unit 1
14, the imprint image, the user identification information, and the transaction content are received, and the shading direction of the imprint image is received from the shading direction determining unit 104. The registered image database 120 stores the received imprint image as a registered image in association with the corresponding user identification information and transaction contents. The registered image database 120 further receives from the shading direction determining unit 104
The shade direction of the registered image is received, and the shade direction is stored in association with the registered image. The registered user identification information may be, for example, an identification number given to each user.

The registered image extracting unit 118 receives the user identification information and the transaction content from the receiving unit 102. The registered image extracting unit 118 extracts a registered image corresponding to the received transaction content, user identification information, and partner company identification information from the registered images stored in association with the received user identification information.

The image comparing section 106 is provided with a shading direction determining section 10.
From 4, the transaction company identification information of the transaction company server 30 that has transmitted the seal image, the grayscale direction information, the user identification information, and the seal image to the seal authentication server 100 is received. Image comparison unit 1
In step 06, the degree of coincidence between the registered image received from the registered image extracting unit 118 and the imprint image received by the receiving unit 102 is obtained. Although the same seal image is created from the same seal,
The shading of the imprint image differs depending on the degree of red meat adhesion and the degree of pressing force on the seal. The image comparison unit 106 obtains the degree of coincidence in consideration of such shading. When comparing the registered image stored in the registered image database 120 with the imprint image received by the receiving unit 102, the image comparing unit 106 rotates the imprint image to determine the degree of coincidence with the registered image, and The degree of coincidence is determined as the degree of coincidence of the imprint images. The image comparison unit 106 stores the imprint image, the shading direction, the obtained matching degree, and the like in the imprint history database 122 in association with the received user identification information of the user.

When performing user authentication, the imprint history database 122 stores the user identification information, the imprint image, and the information related to the imprint image received by the receiving unit 102 in association with each other.

The authentication permission / non-permission judgment unit 108 includes the image comparison unit 10
The degree of coincidence is received from 6. The authentication permission / non-permission determining unit 108 determines whether the user and the trading company server 30
Judge whether user authentication is possible or not in the transaction with. That is, when the received matching degree is equal to or higher than the preset matching degree, the authentication possibility determination unit 108 sends the authentication permission information indicating that the user authentication has succeeded to the providing unit 116.
As described above, the authentication permission / non-permission determination unit 108 controls the image comparison unit 10
By comparing the degree of coincidence determined by 6 with the degree of coincidence set in advance, it can be determined whether or not the user authentication has succeeded. If the received matching degree is equal to or higher than the previously set matching degree, the authentication possibility determination unit 108 provides the authentication failure information indicating that the user authentication has not been successful.
Send to 16.

The providing unit 116 receives the authentication permission information or the transaction refusal information from the authentication propriety judging unit 108 and transmits the information to the trading company server 30 via the Internet 10.
When the receiving unit 102 receives a notification that the information provided from the providing unit 116 to the trading company server 30 may be incorrect, the presenting unit 112 is specified in the notification received by the receiving unit 102. Among the registered imprint images and the registered images stored in the registered image database 120, the registered image corresponding to the imprint image is presented to the operator of the user authentication server 100. Thereby, the operator of the seal stamp authentication server 100 can check whether or not the authentication of the seal image specified by the notification has an error. further,
If the operator recognizes an error in the authentication of the imprint image specified by the notification, the operator may take measures such as paying compensation to the trading company server 30 that has erroneously notified the possibility of the transaction by electronic money. it can. For example, 100 million yen may be paid as compensation.

FIG. 3 shows an example of the shade direction of the imprint image. With reference to this drawing, the grayscale direction determined by the grayscale direction determination unit 104 will be described. The seal image is an image showing the seal created when the user presses the seal. Therefore, shading unevenness occurs in the imprint image depending on the degree of pressing of the seal. The shading direction determining unit 104 detects an area where the seal image is displayed darker and an area where the seal stamp is displayed lighter in the seal image. The shading direction determining unit 104 determines the direction from the darker area to the lighter area as the shading direction. The shading direction is the shading direction on the paper surface where the seal is pressed. In the imprint image shown in this figure, the direction from the left side to the right side of the paper surface is the shading direction. As described above, the light and shade direction determining unit 104 can determine the light and shade direction by detecting the dark and light areas of the imprint in the imprint image.

For example, the imprint image when a user presses the seal tends to be dark on the left side of the paper on which the seal is pressed, and the imprint image when another user presses the seal is on the upper side of the paper. Tend to be darker,
The shading direction of the imprint image is often unique to the user. Therefore, the light and shade direction can be used for user authentication.

FIG. 4 shows an example of an imprint image. The rotation of the imprint image when the image comparing unit 106 compares the imprint image and the registered image will be described with reference to FIG. FIG.
(A) shows a registered image. FIG. 4B shows an imprint image. When the image comparing unit 106 compares the imprint image of the present figure with the registered image of the present figure, it determines the degree of coincidence with the registered image while rotating. The image comparing unit 106 rotates the imprint image until the degree of coincidence between the imprint image and the registered image becomes highest. When the imprint image in the figure is rotated to the left by an arrow, the degree of coincidence with the registered image becomes highest. As described above, the image comparing unit 106 can obtain the degree of coincidence with the registered image by rotating the received imprint image. Another example is
The image comparison unit 106 may rotate the registered image instead of the imprint image, and obtain the degree of coincidence between the imprint image and the registered image.

FIG. 5 shows the data structure of the registered image database 120. The registered image database 120 has a table for each registered user. The table for each registered user includes a registered user ID field, a registered user name field, a business partner ID field, a business partner field, a business amount field, a level field, a registered seal field, a shade direction field, Having.

The registered user ID field stores a user ID for identifying a registered user. The registered user name field stores the name of the registered user. The supplier ID field is a trading company server 3 that does business with the registered user.
0 is stored. The trading company field stores the name of the trading company server 30. The transaction amount field stores the transaction limit, that is, the amount that can be transacted. The level field stores the level of the registered image. For example, when the imprint image of the real seal is set as the registered image having the highest importance, the level of the registered image corresponding to the real seal is set to 1. That is, in the present embodiment, level 1, level 2,... Are set from registered images having higher importance.

The registered seal field stores a registered image of the registered seal registered by the registered user. The shade direction field stores the shade direction of the registered imprint image. As described above, the registered image database 120 has a table for each registered user.
A plurality of registered images are stored for one registered user in association with the trading company identification information and the transaction amount.

As described above, the registered image database 1
Since the registered image is stored in 20, the seal authentication server 100 can authenticate the seal by comparing the registered image with the received seal image.

The registered image database 120 stores a plurality of registered images of the same user in association with the trading company identification information of the trading company server 30 that authenticates using the registered images and the transaction amount. . That is, different registered images are registered according to the transaction contents. Therefore, since the user needs a seal in accordance with the transaction contents, it is possible to prevent an unauthorized transaction by a person other than the user.

For example, the registered image extraction unit 118 receives the transaction company XX Bank, the transaction amount 2.5 million yen,
When receiving the transaction content indicating the user ID 0001,
A registered image corresponding to level 2 is extracted from the registered image database 120 and sent to the image comparing unit 106.

As another example, the registered image database 1
20 may further store the personal information of the registered user. For example, when the trading company server 30 is a bank, the account number of the registered user at the trading company may be stored. Thus, the seal authentication server 100 can further determine whether or not to make a transaction with the user by using the personal information.

FIG. 6 shows the data structure of the imprint history database 122. The imprint history database 122 has a table for each user. The table for each user is
It includes a transaction ID field, a seal image field, an overall matching field, an image matching field, a rotation angle field, and a shading direction field. The transaction ID field stores a transaction ID for identifying a transaction between the user and the trading company server 30. The imprint image field is
The seal image of the user received by the seal authentication server 100 when performing user authentication is stored. The overall matching degree field stores the overall matching degree between the imprint image and the registered image. The image coincidence field stores the coincidence between the seal image and the seal image represented in the registered image.

The rotation angle field is stored in the image comparison unit 106
Stores the rotation angle when it is determined that the degree of coincidence between the imprint image and the registered image is the highest. The seal imprint when a user presses the seal is inclined to the right with respect to the paper surface, and the seal imprint when another user presses the seal is inclined to the left with respect to the paper surface.
The inclination of the imprint with respect to the paper surface is often unique to the user. Therefore, by storing the rotation angle based on the registered image, the rotation angle can be used for user authentication. Specifically, when the rotation angle is greater than the above, it can be determined that there is a high possibility that a user other than the registered user presses the registered seal. The shading direction field stores the shading direction of the imprint image obtained by the shading direction determining unit 104.

As described above, the imprint history database 122
Stores the overall matching degree between the imprint image and the registered image received for the transaction, in association with each transaction ID. Therefore, when receiving the notification that the information provided to the trading company server 30 may be incorrect, the presentation unit 112
Can present information used for the seal imprint image and the seal stamp authentication when stored in the seal imprint history database 122. Therefore, the operator can check the judgment result of the seal authentication server 100.

FIG. 7 is a flowchart showing the operation of the seal authentication server 100 when authenticating a user. The receiving unit 102 of the seal authentication server 100 uses the Internet 1
The e-mail including the seal image and the transaction contents is received from the trading company server 30 via the transaction server 0 (S100). Next, the registered image extracting unit 118 receives the transaction content from the receiving unit 102. The registered image extracting unit 118, in the registered image database 120, among a plurality of registered images stored in association with the user identification information indicated in the transaction content received from the receiving unit 102, the transaction amount indicated in the received transaction content Then, a registered image stored in association with the trading company identification information is extracted (S102). in this way,
Since the registered image is registered according to the transaction content, the seal authentication server 100 can authenticate the user by using the registered image corresponding to each transaction.

Next, the shading direction determining unit 104
02, the imprint image is received, and the shading direction of the imprint image is determined (S104). Next, the image comparing unit 106 obtains the overall matching degree between the imprint image and the registered image (S106).
If the matching degree obtained in S104 is lower than the predetermined permission matching degree (S108), and the imprint image and the registered image do not completely match (S110), the authentication permission / non-permission determining unit 108 sets the authentication permission information to Send to providing section 116. Further, the providing unit 116 notifies the trading company server 30 via the Internet 10 that the authentication is permitted (S1).
12). That is, the authentication permission / inhibition determination unit 108
If the seal imprint image and the transaction content received from 02 match the registered image and the transaction content stored in the registered image database 120 in association with the user identification information received by the receiving unit 102, the user is authenticated.

If the matching degree obtained in S104 is lower than the permitted matching degree (S108), and if the imprint image and the registered image completely match (S110), the authentication permission / non-permission judgment unit 108
Sends the transaction disable information to the providing unit 116. Further, the providing unit 116 notifies the trading company server 30 via the Internet 10 that the authentication is not permitted (S114). S
When the matching degree obtained in 104 is higher than the permitted matching degree (S108), the process jumps to S114. Thus, the operation of the seal authentication server 100 ends.

As described above, the registered image database 1
Since the registered image of the registered user is stored in 20, the seal stamp authentication server 100 can authenticate the user by comparing the imprint image received for the purpose of authentication with the registered image.

Further, the seal authentication server 100 does not permit the transaction when the seal image and the registered image completely match. Since the imprint image is limited to an image created by the user pressing the seal, the shading direction and the rotation angle of the imprint image are different for each imprint image. Therefore, the imprint image and the registered image completely match only when the registered image is used as the imprint image. Therefore, when the imprint image and the registered image completely match, it can be determined that the registered image has been illegally used for the seal stamp authentication. Therefore, in the case where they completely match each other, by not permitting the transaction, it is possible to prevent an unauthorized transaction with a person who has illegally obtained the registered image.

As another example, the seal authentication server 100
May use a plurality of imprint images for one transaction to authenticate the imprint images. In this case, in S100, the receiving unit 102 receives a plurality of imprint images. Further, the seal stamp authentication server 100 authenticates all of the received seal imprint images. If the authentication possibility determination unit 108 determines that the transaction is to be permitted for at least one of the received seal imprint images, the transaction is permitted. Trading company server 3
0 may be notified. The operation of the authentication server 100 in this case is the same as the operation of the authentication server 100 described with reference to FIG.

As another example, the seal authentication server 10
If the authentication permission / non-permission determination unit 108 determines that the transaction is not permitted in S114, the request may be sent to the trading company server 30 to transmit the imprint image again. In this case, the seal authentication server 100 further authenticates the imprint image received in response to the request, and when the authentication possibility determination unit 108 determines that the transaction is permitted with respect to this imprint image, the transaction You may notify the company server 30.

As still another example, in the present embodiment, the authentication permission / non-permission determining unit 108 determines that the transaction is not permitted when the imprint image and the registered image completely match. 108 is an imprint history database 1
If the imprint image used in the previous transaction and stored in 22 match the imprint image used in the current transaction, it may be determined that the transaction is not permitted. As a result, it is possible to prevent an unauthorized transaction with a person who has illegally obtained the imprint image used in the previous transaction.

FIG. 8 is a flowchart showing the detailed operation of the seal stamp authentication server 100 in the step (S106) of obtaining the overall coincidence in FIG. Image comparison unit 10
6 rotates the imprint image by a predetermined angle (S200).
Next, the image comparison unit 106 obtains an image matching degree between the registered image and the imprint image (S202). The image comparison unit 106
The operations from S200 to S204 are repeated until the degree of image matching becomes maximum. The image comparison unit 106, for example, rotates the imprint image by a predetermined angle in a certain direction, obtains an image coincidence for each rotation, detects a change point where the change in the obtained coincidence changes from increase to decrease, The coincidence at this time may be used as the image coincidence. Further, the image comparison unit 106 may further rotate the imprint image by a small angle at the change point, and further improve the accuracy of the image coincidence.

In S204, the maximum image coincidence is obtained, and the image comparison unit 106 obtains the total coincidence in consideration of the image coincidence, the rotation angle, and the shading direction (S20).
6). When the degree of image matching is high, the likelihood of being a seal image of the same seal is increased, and the seal imprint when the same person as the person in the registered image presses the seal stamp as the rotation angle is smaller and the shade direction is closer It is more likely that the image is an image. Therefore, the higher the image matching degree, the smaller the rotation angle, and the closer the shaded direction of the registered image and the imprint image, the higher the matching degree.

The image comparing section 106 may determine, for example, a value obtained by adding a value obtained by multiplying the image coincidence, the rotation angle, and a parameter in the light and shade direction as the overall coincidence. Further, for example, the image comparing unit 106 may obtain a value obtained by multiplying the image matching degree by a parameter based on the rotation angle and the shading direction as the overall matching degree.

Next, the image comparison unit 106 determines the imprint image, the shading direction, the rotation angle, the image coincidence, and the overall coincidence with the transaction ID.
Is stored in the seal imprint history database 122 (S208). In this way, the seal authentication server 100
It is possible to comprehensively determine the degree of coincidence between the imprint image and the registered image, that is, the degree of overall coincidence, based on the degree of coincidence of the images, the grayscale direction of the images, and the like. In addition, since the overall matching degree and the like are stored in the seal imprint history database 122 in this way, when a notification of a later authentication error is received, the presentation unit 11
No. 2 can present the operator with the overall coincidence and the imprint image.

FIG. 9 is a diagram showing the hardware configuration of the seal authentication server 100. The seal authentication server 100 is C
PU 700, ROM 702, RAM 704, communication interface 706, hard disk drive 70
8, a database interface 710, a floppy (registered trademark) disk drive 712, and a CD-RO
M drive 714. CPU 700 is a ROM
It operates based on programs stored in the RAM 702 and the RAM 704. The communication interface 706 communicates with the outside via the Internet 10 such as the user terminal 20 and the trading company server 30. The database interface 710 writes data to the database and updates the contents of the database. The hard disk drive 708 as an example of a storage device includes setting information and a CPU 7
00 stores the operating program.

The floppy disk drive 712 reads data or a program from the floppy disk 720 and provides it to the CPU 700. The CD-ROM drive 714 reads data or a program from the CD-ROM 722 and provides it to the CPU 700. The communication interface 706 transmits and receives data by connecting to the Internet 10. The database interface 710 connects to various databases 724 to transmit and receive data.

The software executed by the CPU 700 is:
It is stored in a recording medium such as the floppy disk 720 or the CD-ROM 722 and provided to the user. The software stored on the recording medium may be compressed or uncompressed. The software is installed in the hard disk drive 708 from the recording medium, and is stored in the RAM 704
And executed by the CPU 700.

The software stored in the recording medium and provided, that is, the software installed in the hard disk drive 708 has a receiving module, a shading direction determining module, a registration module, a registered image extraction module, It has an image comparison module, an authentication possibility determination module, a provision module, and a presentation module. The processing performed by each of the modules by the computer and performed by the CPU 700 is the same as the function and operation of the corresponding member in the seal stamp authentication server 100 of the present embodiment, and thus the description thereof is omitted.

The floppy disk 720 or the CD-ROM 722 as an example of the recording medium shown in FIG. 9 stores some or all of the functions of the seal authentication server 100 in all the embodiments described in the present application. can do.

These programs are directly stored in R
The program may be read and executed by the AM, or may be read and executed by the RAM after being once installed in the hard disk drive. Further, the program may be stored on a single recording medium or on a plurality of recording media. Also, it may be stored in an encoded form.

As a recording medium, a floppy disk,
In addition to CD-ROM, optical recording media such as DVD, MD
, A magneto-optical recording medium such as a PD, a tape medium, a magnetic recording medium, and a semiconductor memory such as an IC card or a miniature card. Alternatively, a storage device such as a hard disk or a RAM provided in a server system connected to a dedicated communication network or the Internet may be used as a recording medium, and the program may be provided to the seal stamp authentication server 100 via the communication network. Such a recording medium is used only for manufacturing the seal authentication server 100, and the manufacture and sale of such a recording medium as a business constitutes infringement of the patent right based on the present application. Is clear.

Next, the seal authentication server 10 of the second embodiment
0 will be described. Seal authentication server 1 of the present embodiment
The registered image extraction unit 118 of 00 receives the transaction content and the user identification information from the reception unit 102, and extracts all registered images stored corresponding to the user identification information. Also,
When the imprint image and the registered image match, the authentication availability determination unit 108 of the present embodiment compares the transaction content stored in the registered image database 120 in association with the registered image with the received transaction content. If they match, the user authentication is permitted. In this regard, in the seal authentication server 100 of the present embodiment, the registered image extracting unit 118 stores one registered image stored in the registered image database 120 in association with the transaction company identification information and the transaction amount indicated in the transaction contents. This differs from the seal authentication server 100 of the first embodiment that extracts an image.

FIG. 10 is a flowchart showing the operation when the seal authentication server 100 in the second embodiment authenticates a user. Receiving unit 1 of seal authentication server 100
02 is a trading company server 30 via the Internet 10
Receives an e-mail including the imprint image and the transaction contents (S300). Next, the registered image extracting unit 118 receives the transaction content from the receiving unit 102. Registered image extraction unit 11
8 is the receiving unit 1 in the registered image database 120.
Then, a plurality of registered images stored in association with the user identification information received from No. 02 are extracted (S302). Next, the image comparing unit 106 selects one registered image from the plurality of registered images extracted by the registered image extracting unit 118 (S306), and compares the selected registered image with the imprint image received by the receiving unit 102. By comparison, the overall matching degree with the imprint image is obtained (S308).

The overall matching score obtained in S308 is lower than the preset allowed matching score (S310), and the imprint image and the registered image do not completely match (S312). When the transaction content stored in the registered image database 120 in association with the transaction content received by the receiving unit (S314), the authentication possibility determination unit 108 sends the authentication permission information to the providing unit 116. Further, the providing unit 116 notifies the trading company server 30 via the Internet that the user authentication is permitted (S31).
6). If the transaction contents do not match in S314, S3
Jump to 22.

If the overall matching score obtained in S308 is lower than the allowed matching score (S310), and if the imprint image and the registered image completely match (S312), the authentication propriety determining unit 1
08 sends the authentication failure information to the providing unit 116 (S32
2). Further, the providing unit 116 notifies the trading company server 30 via the Internet 10 that the authentication is not permitted.

If the total coincidence obtained in S308 is higher than the permitted coincidence (S310), the process proceeds to S320.
In S320, the image comparing unit 106 determines that the receiving unit 102
If the received seal image is compared with all the registered images extracted by the registered image extracting unit 118, S322
Proceed to. Thus, the operation of the seal authentication server 100 ends.

As described above, also in the present embodiment, similarly to the first embodiment, the seal stamp authentication server 100 compares the registered image stored in the registered image database 120 with the received seal image. Thereby, the imprint image can be authenticated.

The seal authentication server 10 in the present embodiment
The other configuration and operation of 0 are the same as the configuration and operation of the seal stamp authentication server 100 according to the first embodiment described with reference to FIGS.

Next, a user authentication system according to a third embodiment will be described. In the present embodiment, the trading company server 30 authenticates the seal. This is different from the user authentication system of the first embodiment in which the seal authentication server 100 has authenticated the seal. The seal authentication server 100 and the trading company server 30 according to the present embodiment will be described with reference to FIGS.

FIG. 11 is a block diagram showing a functional configuration of the seal stamp authentication server 100 according to the present embodiment. The seal authentication server 100 includes a receiving unit 160, a registration unit 114
, Registered image extracting unit 118, registered image database 1
20 and a transmission unit 160. The receiving unit 160 receives a registered image request for requesting a registered image from the trading company server 30 via the Internet 10. Receiver 1
60 also accepts user registration from the trading company server 30 or the user terminal 20 via the Internet 10. The transmitting unit 162 transmits the registered image extracted by the registered image extracting unit 118 to the trading company server 30. The functions of the registration unit 114, the registered image extraction unit 118, and the registered image database 120 are the same as the functions of the same reference numerals described with reference to FIG.

FIG. 12 is a block diagram showing a functional configuration of the trading company server 30 in the present embodiment. The trading company server 30 includes an input unit 150, a receiving unit 102, a shading direction determining unit 104, an image comparing unit 106, an authentication availability determining unit 108, a providing unit 116, and an imprint history database 122.

The input unit 150 of the trading company server 30 of the present embodiment acquires a user's imprint image via a terminal device provided at the trading company. The terminal device captures, as a seal image, a seal imprint on which the user has pressed the seal by using, for example, a scanner. The input unit 150 sends the input imprint image to the shading direction determining unit 104. The receiving unit 102 receives, via the Internet 10, a registered image of a user who performs authentication from the seal authentication server 30. Other configurations and operations of the trading company server 30 are the same as those of the seal authentication server 100 described with reference to FIGS.

As described above, in the present embodiment, the trading company server 30 receives the registered image from the seal authentication server 100, compares the imprint image input by the user with the received registered image, and compares the imprint image with the received registered image. Can be authenticated.

As described above, the user authentication can be performed by the cooperation of the seal authentication server 100 and the trading company 30.
Each part described as the configuration of the seal stamp authentication server 100 in the first embodiment may be included in any of the seal stamp authentication server 100 and the trading company server 30.

As another example, in the present embodiment, the input unit 1 is connected via a terminal device provided at the trading company.
50 receives the imprint image, but instead receives the imprint image.
02 may receive the imprint image from the user terminal 20 of the user via the Internet 10.

As another example, the providing unit 116
The availability of the transaction may be displayed on a terminal device provided at the trading company. Thus, the operator of the trading company can confirm whether or not the transaction is possible.

Although the present invention has been described with reference to the embodiment, the technical scope of the present invention is not limited to the scope described in the above embodiment. Various changes or improvements can be added to the above embodiment. It should be noted that such modified or improved embodiments may be included in the technical scope of the present invention.
It is clear from the description of the claims.

As a first modification, the receiving unit 102 of the seal authentication server 100 according to the present embodiment has received the imprint image from the trading company 10, but instead, the receiving unit 102 The imprint image may be received from the user terminal 20, and the trading company 30 and the user terminal 20 may be notified of whether the received imprint image can be traded. in this case,
The seal authentication server 100 receives the trading company identification information from the user terminal 20, and selects a registered image to be used for user authentication based on the identification information. Thus, the seal authentication server 100 can authenticate the user even when receiving the seal image from the user terminal 20.

As a second modification, in the present embodiment, the overall coincidence is determined based on the image coincidence, the rotation angle, and the shading direction. Instead, the authentication possibility determination unit 108 may determine whether the transaction is possible based on the degree of image matching. In this case, information such as the rotation angle and the shading direction may be used when the operator of the seal stamp authentication server 100 checks the overall coincidence.

As a third modification, in the present embodiment, the registered image extracting section 118 associates the registered image database with the transaction company identification information and the transaction amount indicated in the transaction content received by the receiving section 102. The registered image stored in the registered image 120 is extracted. Instead, the registered image extracting unit 118 sets the registered image to a higher level than the registered image stored in the registered image database 120 in association with the trading company identification information and the transaction amount. All the registered images stored in association with each other may be extracted. In the present embodiment, the registered images are registered according to the importance, that is, the level of the transaction. Therefore, if the registered image matches the registered image at the predetermined level, there is no problem even if the transaction contents of a lower level are permitted. Absent. Therefore, the authentication possibility determination unit 108 of the present example permits the user authentication when at least one of the registered images extracted by the registered image extracting unit 118 matches the imprint image. That is, the authentication availability determination unit 108
Allows the user to be authenticated in a transaction with a transaction amount equal to or less than the transaction amount stored in association with the registered image corresponding to the imprint image received by the receiving unit 102.

As a fourth modification, in the second embodiment, the receiving unit 102 receives the imprint image and the user identification information, and the presenting unit 116 displays the business partner who can make a transaction using the received imprint image. And the transaction amount, the trading company server 3
0 may be provided. In this case, the image comparison unit 106
All the registered images extracted by the registered image extracting unit 118 are compared with the imprint images received by the receiving unit 102. The authentication propriety judging unit 108 sends the transaction content stored in the registered image database 120 in association with the registered image matching the imprint image as a result of the comparison by the image comparing unit 106 to the providing unit 116. The providing unit 116 sends the transaction contents to the trading company server 30. The providing unit 116 also transmits the transaction contents to the user terminal 20.
May be sent to Thereby, the seal authentication server 100
Can receive the imprint image and present the contents of the transaction permitted by the imprint image. Therefore, the operator of the trading company server 30 can check the trading companies that can trade and the transaction amount.

[0088]

As is apparent from the above description, according to the present invention, a user can be efficiently authenticated.

[Brief description of the drawings]

FIG. 1 is a diagram showing a user authentication system including a seal authentication server 100.

FIG. 2 is a block diagram showing a functional configuration of the seal authentication server 100.

FIG. 3 is a diagram showing an example of a shading direction of a stamp image.

FIG. 4 is a diagram illustrating an example of an imprint image.

FIG. 5 is a diagram showing a data configuration of a registered image database 120.

6 is a diagram showing a data configuration of an imprint history database 122. FIG.

FIG. 7 is a seal authentication server 100 for authenticating a user.
6 is a flowchart showing the operation of the first embodiment.

FIG. 8 shows a step of obtaining the overall coincidence in FIG. 7 (S10).
It is a flowchart in 6) which shows the detailed operation | movement of the seal seal authentication server 100.

FIG. 9 is a diagram showing a hardware configuration of the seal authentication server 100.

FIG. 10 is a seal authentication server 100 according to a second embodiment.
Is a flowchart showing an operation for authenticating a user.

FIG. 11 is a seal authentication server 100 according to a third embodiment.
FIG. 2 is a block diagram showing a functional configuration of the first embodiment.

FIG. 12 is a block diagram illustrating a functional configuration of a trading company server 30 according to the third embodiment.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Internet 20 User terminal 30 Trading company server 100 Seal authentication server 102 Receiving part 104 Shading direction determining part 106 Image comparing part 108 Authentication propriety judging part 112 Presentation part 114 Registration part 116 Providing part 118 Registration image extracting part 120 Registration image database 122 Imprint History database 150 Input unit 160 Receiving unit 162 Transmitting unit 700 CPU 702 ROM 704 RAM 706 Communication interface 708 Hard disk drive 710 Database interface 712 Floppy disk drive 714 CD-ROM drive 720 Floppy disk 722 CD-ROM 724 Various databases

 ────────────────────────────────────────────────── ─── Continued on the front page (72) Inventor Shigeru Saito 15-6, Fuyuki, Koto-ku, Tokyo Daiwa Institute of Research Ltd. F-term (reference) 5B043 AA09 BA09 CA09 EA08 EA12 FA02 GA05 GA18 5J104 AA07 KA01 KA15 MA01 PA07

Claims (15)

[Claims] 1. An authentication system for authenticating a person to be authenticated, wherein an imprint image of each of a plurality of seals possessed by the person to be authenticated is used as a registered image of the person to be authenticated. A registration image database that stores the authentication purpose indicating the authentication purpose and the authentication subject identification information that authenticates the authentication subject, and an input unit that inputs one imprint image, the authentication subject identification information, and the authentication purpose. Any one of the registered images and the registered images in which the imprint image and the authentication purpose input by the input unit are stored in the registered image database in association with the identification subject identification information input by the input unit; An authentication system, comprising: an authentication permission / inhibition determination unit that authenticates the subject when the authentication purpose matches the authentication purpose corresponding to the image. 2. Registered image extraction for extracting a registered image corresponding to the authentication purpose from among the registered images stored in the registered image database in association with the identification subject identification information input by the input unit. The authentication system according to claim 1, further comprising: a unit; and an image comparison unit that compares the extracted registered image with the imprint image input by the input unit. 3. A registered image extracting unit for extracting the registered image stored in the registered image database in association with the subject identification information input by the input unit; and the extracted registered image; An image comparison unit that compares the seal image input by the input unit; and the authentication object set for the registered image that matches the seal image in the registered image database; and the input unit. 2. The authentication system according to claim 1, wherein when the authentication purpose input by the user matches the authentication purpose, the authentication possibility determination unit authenticates the subject. 4. The input unit inputs authentication requester identification information for identifying an authentication requester who requests the authentication of the authentication target for the authentication purpose, and the registered image database further stores the authentication request. Storing the user identification information in association with the registered image; and when the authentication requester identification information is input by the input unit, the registered image extraction unit is configured to input the authenticated person identification information and the authentication 4. The authentication system according to claim 2, wherein the registered image stored in the registered image database is extracted in association with requester identification information. 5. The input unit further inputs transaction content indicating the content of a transaction with the user for the authentication purpose, and the registered image database further stores the transaction content in association with the registered image. When the input unit inputs the transaction content, the registered image extraction unit stores the registered subject identification information, the authentication requester identification information, and the transaction content in the registered image database in association with the transaction content. The authentication system according to claim 4, wherein the registered image to be extracted is extracted. 6. The input unit further inputs transaction content indicating the content of a transaction with the user for the authentication purpose, and the registered image database further stores the transaction content in association with the registered image. When the input unit inputs the transaction content, the registered image extracting unit extracts the registered image stored in the registered image database in association with the authenticated person identification information and the transaction content. The authentication system according to claim 2 or 3, wherein: 7. The input unit further inputs a transaction limit when conducting a transaction with the user for the purpose of authentication, and the registered image database further stores the transaction limit in association with the registered image. When the input unit inputs the transaction limit, the registered image extracting unit extracts the registered image stored in the registered image database in association with the input transaction limit. The authentication system according to claim 4 or 5, wherein 8. The image comparing unit obtains a degree of coincidence between the registered image extracted by the image extracting unit and the imprint image input by the input unit. The authentication system according to claim 2, wherein whether or not the user authentication is possible is determined accordingly. 9. The transaction limit stored in the registered image database in association with the registered image corresponding to the input imprint image when the input unit inputs the imprint image. 8. The authentication system according to claim 7, wherein authentication of the person to be authenticated is permitted in a transaction with a transaction limit equal to or less than the amount. 10. When the identification object identification information and one imprint image are input, the input imprint image is
A seal imprint history database that is stored in association with the identification target identification information, a providing unit that provides information indicating whether authentication of the authentication target is determined by the authentication determination unit, and a providing unit that provides the information. When a notification is given that there is a possibility that the information is erroneous, a presentation unit that presents the imprint image designated as possibly having an error and the registered image corresponding to the imprint image is further provided. The authentication system according to claim 1, wherein: 11. An authentication method for authenticating a person to be authenticated, wherein one of a plurality of imprint images of the plurality of seals possessed by the authenticator is imprinted image, authenticated person identification information for identifying the person to be authenticated, And an inputting step of inputting an authentication purpose indicating an object of authentication of the person to be authenticated, wherein the input imprint image and the authentication purpose are the imprint image, the registered image of the object to be authenticated, When the registered image database stored in association with the identification information matches any of the registered images stored in association with the input identification information of the subject and the authentication purpose corresponding to the registered image. And a step of judging whether or not the person to be authenticated can be authenticated. 12. A storage step in which, when the identification object identification information and one imprint image are input, storing the input imprint image in association with the identification object identification information; A providing step of providing information indicating whether or not the authentication of the person to be authenticated determined in the permission / inhibition step is possible; and when the provided information is notified that there is a possibility that the information is incorrect, there is a possibility that the information is incorrect. The presenting step of presenting the registered imprint image and the registered image corresponding to the imprinted image specified, and the provided information is incorrectly based on the presented imprinted image and the registered image corresponding to the imprinted image. 12. The authentication method according to claim 11, further comprising: a payment step of paying a compensation when it is confirmed that there is a payment. 13. The authentication requester identification information of the authentication requester who requests authentication of the user using the registration image to be registered in the registration image database and the user using the registration image,
The method further comprises a registration step of registering for the authentication purpose, wherein the registered image database stores the registered image registered in the registration step in association with the certifier identification information of the authentication requester. The authentication method according to claim 11, which performs the authentication. 14. A registration step of registering the registered image to be registered in the registered image database and transaction contents of a transaction using the registered image for the authentication purpose, wherein the registered image database includes the transaction contents. The authentication method according to claim 11, wherein the registration image registered in the registration step is stored in association with the registration image. 15. A recording medium for storing software of a computer for authenticating a person to be authenticated, wherein the software stores one of the seal imprint images of a plurality of seals possessed by the person to be authenticated on the computer. An image, an input module for inputting an authentication object indicating the authentication object of the authentication object, and an authentication object indicating the authentication object of the authentication object, and the imprint image and the authentication object input by the input module, In the registered image database that stores the imprint image as the registered image of the person to be authenticated in association with the person to be authenticated identification information, the image is stored in association with the person to be authenticated identification information input by the input module. If any of the registered images and the authentication purpose corresponding to the registered image match, the authentication possibility of authenticating the person to be authenticated Recording medium characterized by comprising a disconnection module.