JP2002324050A - Personal authentication data providing system and method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a personal authentication data providing system and a method that can easily perform personal authentication and can minimize the risk of personal information leakage. SOLUTION: If a client terminal 4 is connected, by operating it, through the Internet 11, to a data management server 2, and a registrant ID is transmitted to the data management server 2, the data management server 2 reads out the personal authentication data corresponding to the received registrant ID from a database 8, and transmits the data to the client terminal 4, making the data to be displayed on a display 14.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal authentication data providing system and method, and more particularly, to a personal authentication data providing system suitable for a rental service provider to identify a user of a rental service. About the method.

[0002]

Generally, a rental company that provides a rental service of goods asks a user of the rental service to present an ID card to guarantee the goods to be rented. Checking. For continuous users, a membership card is issued after confirming the identity of the user for the first time using the identification card at the first use. Then, at the time of next use, a method of confirming the identity by presenting the member card is adopted. A rental license, a health insurance card, a passport, and the like are recognized as such identification cards by a rental company.

[0003] However, not all individuals have the above-mentioned identification cards, and even those who have identification cards do not always carry them. For this reason, the method of providing a rental service on the condition that an ID card is presented is a cause of decreasing the willingness of those who do not have an ID card or those who do, but do not carry it. Was.

[0004] The above-mentioned membership card is issued for each store of a rental company. For this reason, a user who uses a plurality of stores will have the same number of member cards as the number of stores to use. If the number of member cards in possession is large as described above, there is a problem in that management becomes complicated and it is difficult to find even if the member card is lost.

[0005] Furthermore, the information of the identification card presented when using the rental service is managed for each store, but the risk of information leakage is high because of the large number of management points. Even if information leaks, it is difficult to find the source of the leak.

SUMMARY OF THE INVENTION The present invention has been made in view of the above circumstances, and has as its object to provide a personal authentication system capable of easily performing personal authentication and suppressing the risk of leakage of personal information. A data providing system and method are provided.

[0007]

According to a first aspect of the present invention, there is provided a personal authentication data providing system which records personal authentication data relating to a registrant to be managed together with a registrant ID for identifying the registrant. A personal authentication data management server having a registrant information database to be held, and transmission / reception control means for transmitting and receiving data connected to the outside via a communication line such as the Internet, the personal authentication data management server, and the communication line External communication means for connecting via a PC, input means for inputting the registrant ID,
A requester terminal having control means for transmitting the input registrant ID to the personal authentication data management server through the external communication means, wherein the personal authentication data management server When receiving the registrant ID, a personal authentication data providing service for reading the personal authentication data corresponding to the registrant ID from the registrant information database and transmitting the data to the requester terminal is performed. .

According to the above configuration, the registrant registers his / her own personal authentication data in advance in the database of the personal authentication data management server, so that the requester can authenticate the registrant ID through the requester terminal. By transmitting the data to the personal data management server, desired personal authentication data is received, and personal authentication of the registrant can be performed based on the personal authentication data. Therefore, even if you do not have a driver's license, health insurance card, passport, etc. which is generally recognized as an ID card, by registering in advance personal information authentication data in place of it, Personal authentication can be easily performed. Further, even if the user holds the identification card, the registrant of the personal authentication data does not need to carry the identification card at all times, and thus the personal authentication can be easily performed. Therefore, for example, the use of the rental service in the rental company can be promoted. Moreover, since the personal authentication data can be collectively managed by the personal authentication data management server, the risk of leakage of personal information can be reduced.

In this case, it is preferable that the requester terminal includes storage means for storing a registrant ID of a registrant who has performed personal authentication based on the received personal authentication data (the invention of claim 2). . According to the above configuration, the registrant ID input by the input means and the registrant I stored in the storage means
The registrant can be identified based on D.

The input means may comprise a reading means provided for each registrant and reading a recording medium on which a registrant ID is recorded (claim 3). According to the above configuration, since the registrant ID recorded on the recording medium cannot be read without passing through the reading means, it is possible to prevent the registrant ID from being known to others as much as possible.

Further, the requester terminal is configured to transmit the requester ID for identifying the requester terminal together with the registrant ID to the personal authentication data management server, and the personal authentication data management server includes: A requester information database that records and holds a requester ID for each requester terminal to be managed; and an authentication unit that performs personal authentication of the requester terminal based on the received requester ID. The transmission / reception control means may be configured to determine whether or not to transmit the personal authentication data on the basis of the above. According to the above configuration, it is possible to prevent a terminal that is not managed by the personal authentication data management server from illegally acquiring the personal authentication data of the registrant.

[0012] Further, the personal authentication data includes biometric information of an individual that can be identified from another person, biometric information input means for inputting biometric information to a requester terminal, and It is also a good configuration to provide a matching unit for comparing the included biological information with the biological information input by the biological information input unit (the invention of claim 5). Since biometric information such as fingerprints and irises is unique to all and remains the same for a lifetime, it is optimal for identifying an individual. Therefore, according to the above configuration, high reliability in personal identification can be ensured.

[0013] Furthermore, a level corresponding to confidentiality is set in the personal authentication data, and the level of the personal authentication data that restricts reception by the requester terminal is set as an authentication level in the requester terminal. Preferably, the personal authentication data management server is configured to transmit personal authentication data of a level equal to or lower than the authentication level of the requester terminal to the requester terminal (the invention of claim 6).

According to the above configuration, for example, by setting an authentication level according to the type of business of the requester who manages the requester terminal, only an appropriate level of personal authentication data is transmitted for each requester terminal. Can be. For this reason, personal authentication data with a high level of secrecy is not unnecessarily transmitted, and leakage of personal information can be prevented as much as possible.

The personal authentication data stored and held in the registrant information database is configured such that the level to be disclosed can be set as a reference level on condition that the registrant has been granted permission to publish the information. Terminal of the registrant includes a disclosure permission information input unit for inputting disclosure permission information of the data for personal authentication at a reference level or higher by the registrant, and the data management server for personal authentication receives the disclosure permission information of the registrant from the requester terminal. It is preferable that the personal authentication data of the registrant be transmitted at the reference level or higher among the personal authentication data of the registrant (the invention of claim 7). According to the above configuration, it is possible to prevent the personal authentication data with high secrecy from being easily disclosed without the knowledge of the data registrant.

In addition, external communication means for connecting to a personal authentication data management server via a communication line,
Input means for inputting D, data input means for inputting personal authentication data, and the input registrant ID
A personal authentication data registration server having control means for transmitting the personal authentication data to the personal authentication data management server through the external communication means, and the personal authentication data registration server, An authentication unit that performs personal authentication of the registrant based on the registrant ID received from the terminal; and a registrant information database that is stored and held in the registrant information database based on the registrant ID and the personal authentication data received according to the authentication result of the authentication unit. And a registration unit for rewriting personal authentication data.

According to the above configuration, the registrant can easily update or delete personal authentication data by operating the registration-only terminal. Therefore, the time lag from the request for correction of the personal authentication data to the actual correction can be shortened.

In this case, the input means of the registration-only terminal may be constituted by reading means provided for each registrant and reading a recording medium on which the registrant ID is recorded (claim 9).
According to the above configuration, the registrant ID recorded on the recording medium cannot be read without passing through the reading means. Therefore, it is possible to prevent the registrant ID from being known to others.

The transmitting means of the registration-only terminal is configured to transmit a registration-dedicated terminal ID for identifying the registration-dedicated terminal together with the registrant ID and the personal authentication data to the personal authentication data management server, The personal authentication data management server has a terminal information database that records and holds a registration-only terminal ID for each registration-only terminal to be managed, and identifies a registration terminal based on the terminal ID that has received the authentication unit. Preferably, the registration unit is configured to determine whether or not to perform the rewriting process of the personal authentication data based on the identification result of the authentication unit (the invention of claim 10). According to the above configuration, it is possible to prevent the registered personal authentication data from being illegally modified through a terminal that is not managed by the personal authentication data management server.

Further, the personal authentication data management server has a counting means for counting the number of executions of the personal authentication data providing service for each requester terminal within a predetermined period, and a unit price of the personal authentication data providing service, 2. A personal authentication data providing system according to claim 1, further comprising: a calculating means for calculating a usage fee within a predetermined period for each requester terminal by multiplying the requesting user's terminal. According to the above configuration, the personal authentication data management server can collectively manage the usage fee for each requester terminal.

In this case, the unit price of the personal authentication data providing service is determined by the level of the transmitted personal authentication data, that is, the level of confidentiality, from the viewpoint of preventing the personal authentication data having high secrecy from being easily disclosed. (The invention according to claim 12).

The personal authentication data providing method according to a thirteenth aspect of the present invention provides the personal authentication data relating to the registrant to be managed by a registrant I for identifying the registrant himself.
A personal authentication data management server that includes a registrant information database that records and holds the data together with the data D, and performs a personal authentication data providing service; and a plurality of personal authentication data management servers connected to the personal authentication data management server via a communication line such as the Internet. Transmitting a registrant ID from the requester terminal to the personal authentication data management server; and an individual corresponding to the registrant ID received by the personal authentication data management server. Reading the authentication data from the registrant information database and transmitting the authentication data to the requester terminal.

[0023]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A first embodiment of the present invention will be described below with reference to FIGS. First, the overall configuration of a personal authentication data providing system (hereinafter, data providing system) 1 will be described with reference to FIG. The data providing system 1 according to the present embodiment, for example, allows a person providing a rental service of valuables or money to perform personal authentication data necessary for the identity verification of a person using the rental service by a third party in advance. This system is registered with a data manager for personal authentication (hereinafter referred to as a data manager) and can be taken out as needed in response to a request from a rental service provider. Therefore, in the present embodiment, the rental service provider is a “requester of personal authentication data (hereinafter, data requester)”, and the rental service user is a “registrant of personal authentication data (hereinafter, data registrant)”. Becomes

In FIG. 1, the data providing system 1
It includes a personal authentication data management server (hereinafter, data management server) 2, a registrant IC card 3, and a client terminal 4 as a requester terminal. In FIG. 1, the registrant IC card 3 and the client terminal 4 are each 1
Although shown individually, there are a plurality of each of them.

The data management server 2 is managed by a data manager, and stores input / output control unit 5 serving as transmission / reception control means, authentication unit 6, management unit 7, and personal information on a large number of registrants of personal authentication data. It has a registrant information database 8 to be held and a requester information database 9 to store and hold information on a large number of requesters for personal authentication data.
Input / output control unit 5, authentication unit 6, management unit 7, database 8
And 9 are connected to each other via a business LAN 10.

The input / output control unit 5 controls data input from the client terminal 4 connected via the Internet 11 and controls data output to the client terminal 4. The authentication unit 6 confirms and authenticates whether the data requester and the data registrant related to the data request are contractors in response to the data request from the client terminal 4, and checks the data registrant from the database 8 Has a function of reading the personal authentication data of the client terminal 4 and transmitting the data to the client terminal 4. The management unit 7 includes a database 8
Has the function of managing personal information stored in the database 9 and customer information stored in the database 9.

The registrant IC card 3 is managed by the data registrant, and is issued by the data registrant when the data registrant registers personal authentication data with the data manager. The registrant IC card 3 has a registrant I, which is a registrant ID assigned to each registrant.
D, registrant key, and trust level are recorded. The registrant key is a password character string written in the IC chip, and is configured so that neither the data registrant nor the data requester can refer to it. This registrant key is
The data is stored and managed by the management unit 7 of the data management server 2.

Here, the registration work will be described. In the present embodiment, the registration work is performed by mailing a registration form filled with personal authentication data to the data manager. As shown in FIG. 2, the personal authentication data is
It consists of basic data and optional data. Also, a level corresponding to the confidentiality is set in the personal authentication data.

More specifically, the basic data is data that must be entered in order to register, and is composed of the name, address, age, and gender of the data registrant. The level of the basic data is set to the lowest “1”. On the other hand, the optional data is entered by the data registrant's voluntary intention, and includes a telephone number, an e-mail address, information on an insurance card, information on a driver's license, and the like. The level of optional data is
The value is set from “2” to “5” according to the content.

The data manager who has received the registration form filled with the personal authentication data records the personal authentication data in the database 8 together with the registrant ID, and according to the level of the registered personal authentication data. Record the set trust level.

That is, when only the basic data is registered, the trust level is set to “1”. On the other hand, when optional data of level 2 is registered in addition to the basic data, the confidence level is set to “2”. When the optional data of level 2 and level 3 are registered in addition to the basic data, the confidence level is set to “3”.

In this embodiment, in order to prevent the personal authentication data from being unnecessarily disclosed, even if the registered personal authentication data is not authorized by the data registrant, the data management server 2 does not need to be authorized. Is configured so that the data registrant can set the level of data that cannot be transmitted from the client terminal 4 to the client terminal 4. This data level is referred to as a reference level. For example, when the reference level is set to “4”, personal authentication data of level 4 or higher cannot be transmitted without the permission of the data registrant. . As will be described later, the data registrant who has set the reference level registers fingerprint image data as disclosure permission information in the data management server 2.

FIG. 3A shows personal information stored in the database 8. As shown in this figure, the value of the reference level is data for personal authentication, registrant ID,
It is recorded in the database 8 together with the trust level.

The client terminal 4 is managed by the data requester and has a function as a personal computer. The client terminal 4 includes a control circuit 12 and an external network communication unit 1 connected to the control circuit 12.
3, display 14, input unit 15, fingerprint input device 1
6, a storage device 17, and an IC card reader 18. The control circuit 12 mainly includes a CPU, a ROM, a RAM, and various circuits, and stores a control program that controls the entire operation.

The external network communication section 13 functions as an external communication means for accessing the Internet 11 as a communication line, and
Can access the data management server 2 by connecting to the Internet 11 through the external network communication unit 13.

The storage device 17 comprises a hard disk device or the like, and is configured to store and hold various data. The fingerprint input device 16 is provided with an optical sensor unit and a CCD element (both not shown), and when fingerprint information or biometric information is input, generates fingerprint image data. Therefore, the fingerprint input device 16 functions as a biological information input unit. As will be described later, the fingerprint image data constitutes the disclosure permission information of the personal authentication data at a reference level or higher by the data registrant. Therefore, the fingerprint input device 16 functions as a disclosure permission information input unit. I do.

The data requester makes a maintenance and management contract with the data manager, and obtains the client IC card 19 to use the service for providing personal authentication data. The client IC card 19 includes:
Client ID as the requester ID, client key,
The certification level is recorded. Client key is IC
This is a password character string written in the chip, and is configured so that neither the data requester nor the data registrant can refer to it. The client key is stored and managed by the management unit 7 of the data management server 2.

The authentication level is a value set when the data requester makes a maintenance and management contract with the data manager, and the level of the personal authentication data provided is determined by the value of the authentication level. That is, the personal authentication data provided to the data requester whose authentication level is 3 is only data of level 3 or lower. Note that the higher the value of the authentication level of the data requester, the higher the contract fee with the data administrator.

FIG. 3B shows customer information of the data requester stored in the database 9. As shown in the figure, the database 9 stores a client ID, an authentication level, and store information of a data requester.

Next, the operation of this embodiment will be described focusing on the procedure when the rental service provider receives a service for providing personal authentication data relating to the rental service user. Here, the description will be made assuming that the client terminal 4 is connected to the data management server 2. For connection, the terminal operator of the client terminal 4, which is the data requester, sets the client IC card 19 in the IC card reader 18 and sets the client IC card 1
9 is read and transmitted to the data management server 2.

Then, the authentication unit 6 of the data management server 2
Confirms that the client terminal 4 is a legitimate client terminal 4 (data requester) based on the client ID and the client key, and displays a processing screen (not shown) on the display 14 of the client terminal 4. Therefore, the terminal operator performs various operations in accordance with the display on the screen of the display 14.

First, the terminal operator sets the registrant's IC card 3 of the service user in the IC card reader 18, reads information recorded on the registrant's IC card 3, and transmits the information to the data management server 2. I do. Then, the authentication unit 6 of the data management server 2 checks whether or not the user is a registered service user, that is, a data registrant, based on the registrant ID and the registrant key. When it is confirmed that the user is a legitimate data registrant, the personal authentication data and the trust level corresponding to the received registrant ID are read from the database 8 and transmitted to the client terminal 4 side.

At this time, if the authentication level of the data requester is lower than the trust level of the data registrant, only the data of the data registrant whose data is lower than the authentication level is transmitted. When the reference level is set, only the personal authentication data of a lower level than the reference level is transmitted among the personal authentication data of the data requester.

The personal authentication data transmitted from the data management server 2 is displayed on the display 14 of the client terminal 4. Therefore, the data requester can display 1
4, the trust level of the data registrant can be confirmed. When the data registrant's trust level is lower than the level required by the data requester, for example, the provision of the rental service to the data registrant can be refused.

On the other hand, when the trust level of the data registrant is equal to or higher than the level required by the data requester, and when the personal authentication data required by the data requester is transmitted from the data management server 2, The data requester confirms the identity of the data registrant based on the personal authentication data displayed on the display 14. When performing personal authentication based on a fingerprint image or the like as biometric information, fingerprint image data of a data registrant is created from the fingerprint input device 16.
Then, the control circuit 12 verifies the identity by comparing the created fingerprint image data with the fingerprint image data transmitted from the data management server 2. Therefore, in the present embodiment, the control circuit 12 constitutes a matching unit.

Further, the trust level of the data registrant is higher than the level required by the data requester, but the personal authentication data required by the data requester is data that is higher than the reference level set by the data registrant. In some cases, data is requested after obtaining permission for transmission from the data registrant.

That is, the data requester is required to input the fingerprint input device 16
Reads the fingerprint image data of the data registrant and transmits it to the data management server 2. The authentication unit 6 of the data management server 2 collates the fingerprint image data recorded in the database 8 with the received fingerprint image data. If the identity of the data registrant is verified as a result of the verification,
The data management server 2 transmits the personal authentication data of the reference level or higher to the client terminal 4 together with the result of the personal identification. Therefore, personal authentication data with a high level of confidentiality and higher than the reference level that the data registrant does not want to disclose is transmitted only to the data requester authorized by the data registrant. Therefore, it is possible to prevent personal authentication data with high secrecy from being easily disclosed.

When the identification of the data registrant is completed as described above, the terminal operator registers the registrant ID in the storage device 17 of the client terminal 4. As a result, the information of the registrant's IC card 3 is stored in the IC card reader 1 from the next use.
By simply reading in step 8, the identity of the data registrant can be confirmed.

As described above, according to the present embodiment, the data registrant registers the personal authentication data with the data manager, and thereby the registrant I issued by the data manager.
The C card 3 can be presented to the data requester as an identification card. Therefore, even a person who does not have a general identification card can easily perform personal authentication. Also, the personal authentication data is transferred to the data management server 2.
, The risk of leakage of personal information can be reduced.

Moreover, the registrant I presented by the data registrant
The information in the C card 3 is stored in the storage device 1 of the client terminal 4.
If the information is stored in the IC card reader 7, the information in the registrant IC card 3 is read by the IC card reader 18 and compared with the information in the storage device 17 from the next time to confirm the identity, without issuing a so-called membership card. It can be performed. For this reason,
It is not necessary to request the data management server 2 for personal authentication data every time. In addition, the membership card conventionally issued for each store can be eliminated.

Further, in this embodiment, a registrant IC card 3 for storing a registrant ID is provided. Therefore, there is no problem that the data registrant forgets the registrant ID and cannot receive the personal authentication data providing service from the data management server 2. In addition, registrant IC card 3
Since the registrant ID stored in the registrant cannot be read without passing through an ID card reader, it is possible to prevent the registrant ID from being known to others.

Further, a client IC card 19 is provided for each client terminal 4 and a client ID is stored in the client IC card 19. The data management server 2 is configured to authenticate the client terminal 4 based on the client ID, and then transmit the personal authentication data to the client terminal 4. Therefore, when the client terminal 4 is not managed by the data management server 2, it is possible to prevent the personal authentication data from being transmitted by mistake.

FIG. 4 shows a second embodiment of the present invention, and the points different from the first embodiment will be described. The data providing system 1 of the second embodiment includes a registration-only terminal 2
1 is provided, and a registration unit 22 is provided in the data management server 2. Although the configuration of the client terminal 4 is simplified in FIG. 3, it is the same as that of the first embodiment.

The registration-only terminal 21 is connected to the data management server 2
The system 1 is used to change the contents of the personal authentication data registered in the database 7, to set a higher trust level by adding data, or to cancel the registration. Stores that have introduced,
It is set in a place such as a convenience store where data registrants can easily use it.

The registration-only terminal 21 includes a control circuit 23 and an external network communication unit 2 connected to the control circuit 23.
4, a display 25, an input unit 26, an imaging device 27, a storage device 28, and an IC card reader 29. The control circuit 23 includes an
M, a RAM and various circuits are provided, and a control program for controlling the entire system is stored. A registration terminal ID and a registration terminal key are set in the registration-dedicated terminal 21, and the registration terminal ID and the registration terminal key are stored in the control device 23.

As will be described later, the IC card reader 29 of this embodiment is configured so that information stored in the set IC card can be rewritten.

Next, the operation of this embodiment will be described.
Here, it is assumed that the registration-only terminal 21 is connected to the data management server 2 via the Internet 11.
In the connected state, the display 2 of the registration-only terminal 21
5, a registration screen (not shown) is displayed. Therefore, the terminal operator who is the data registrant operates according to the display on the registration screen.

That is, the terminal operator sets the registrant IC card 3 in the IC card reader 29 of the registration-only terminal 21 and inputs the registrant ID and the registrant key in the registrant IC card 3. Then, the registrant ID and the registrant key are transmitted from the registration-dedicated terminal 21 to the data management server 2 together with the registration terminal ID and the registration terminal key. Then
The authentication unit 6 of the data management server 2 receives the registered terminal I
D and the registered terminal 21 based on the registered terminal key
, And whether or not the user is a legitimate data registrant based on the received registrant ID and registrant key.

When it is confirmed that both the registration-dedicated terminal 21 and the data registrant are legitimate, the personal authentication data corresponding to the received registrant ID is read from the database 8 and It is displayed on the display 25. Accordingly, the terminal operator looks at the display on the display 25 and adds or changes the content of the personal authentication data.

For example, when changing the address, the input unit 2
Enter the address after change from 6. In addition, when adding biometric information such as fingerprint image data, iris image data report, and face photograph having a higher level than the already registered data, the user inputs the biometric information using the imaging device 27. Therefore, in the present embodiment, the imaging device 27 functions as a biological information input unit.

When the trust level of the terminal operator is changed by adding new personal authentication data, the registration unit 22 changes the trust level stored in the database 8 and registers A setting change request signal is transmitted to the terminal 21. The registration-dedicated terminal 21 that has received the setting change request signal rewrites the trust level stored in the registrant IC card 3 via the IC card reader 18.

According to such a configuration, the registered personal authentication data can be changed, added, or deleted through the registration dedicated terminal 21. In addition, the contents of registration are changed after confirming that the terminal is a legitimate data registrant and the registration-dedicated terminal 21. Therefore, it is possible to reduce the time required for correcting the contents of the personal authentication data registered in the database 8, and to maintain the reliability of the personal authentication data registered in the database 8.

The configuration other than the above is substantially the same as that of the first embodiment. Therefore, in this embodiment, the same operation and effect as those of the first embodiment can be obtained.

FIG. 5 shows a third embodiment of the present invention, and the points different from the second embodiment will be described. The third embodiment is characterized in that personal authentication data can be registered via a personal computer 31 owned by an individual who is a data registrant. That is, when the personal computer 31 is connected to the data management server 2 via the Internet 11, the data management server 2 displays on the display of the personal computer 31 a processing screen relating to registration of personal authentication data. Therefore, the terminal operator can register personal authentication data by operating a keyboard or the like according to the processing screen of the display.

The personal authentication data that can be registered in the data management server 2 via the personal computer 31 is only basic data in order to prevent information leakage. When the personal authentication data is transmitted from the personal computer 31 to the data management server 2, the registration unit 22 sets the registrant ID and the registrant key, sets the trust level to “1”, and sets the registrant ID, the trust level, The personal authentication data is written in the database 8. The registrant key is managed by the management unit 7.

Further, the data manager sets the above registrant I
A registrant IC in which D, registrant key and trust level are written
Issue a card and send it to the terminal operator, that is, the data registrant. As a result, the data registrant can use the registration-only terminal 21
Thus, it is possible to add personal authentication data of level 2 or higher or change the content of the registered personal authentication data.

According to such a configuration, all of the personal authentication data can be registered using the terminals (the personal computer 31 and the registration-dedicated terminal 21) connected to the data management server 2 via the Internet 11. The time required for registration, change, and the like of the application data can be further reduced.
In particular, in the present embodiment, registration of personal authentication data of level 2 or higher with high confidentiality can be registered only through the registration-dedicated terminal 21, so that data leakage can be prevented as much as possible. Even if information leaks, the source of the leak can be found quickly.

It should be noted that the present invention is not limited to the above-described embodiment, and for example, the following modifications and extensions are possible. The client ID may be stored in the storage device 17 of the client terminal 4. In this case, when transmitting the registrant ID, the control circuit 12 reads the client ID from the storage device 17 and transmits it.

The biometric information may be a sound other than a fingerprint image or an iris image. The above system is not limited to the case where the rental service provider performs personal authentication of the rental service user.For example, when creating a credit card or the like at a bank, a credit company, a department store, etc., the bank etc. It can also be applied to the case where personal authentication is performed.

The recording medium in which the registrant ID is stored may be an IC card or a magnetic card. The provision of the recording medium for storing the registrant ID and the means for reading the recording medium may be omitted, and the registrant ID may be input by operating input means such as a keyboard.

Also, the data requester may be configured to charge each time the personal authentication data providing service is used once. Such a configuration is one of the data providing services.
Counting means for setting the usage fee (unit price) for each request and measuring the number of transmissions for each requester terminal within a predetermined period; and This can be realized by providing a calculation means for calculating the usage fee in the data management server.

In this case, the unit price of the data providing service may be set higher as the level of the transmitted personal authentication data is higher. According to such a configuration, it is possible to prevent personal authentication data with high secrecy from being easily disclosed.

[0073]

As is apparent from the above description, in the personal authentication data providing system and method of the present invention, the registrant registers his / her own personal authentication data in advance in the database of the personal authentication data management server. By doing so, the requester receives desired personal authentication data by transmitting the registrant ID to the personal authentication data management server through the requester terminal, and performs personal authentication of the registrant based on the personal authentication data. Since it is possible to perform personal authentication of registrants who do not have documents etc. to identify themselves, personal authentication data can be collectively managed by the personal authentication data management server Therefore, there is an excellent effect that the risk of leakage of personal information can be reduced.

[Brief description of the drawings]

FIG. 1 is a block diagram schematically showing an electrical configuration of an entire system according to a first embodiment of the present invention;

FIG. 2 is a diagram showing personal authentication data.

3A is a diagram showing personal information of a data registrant stored in a registrant information database, and FIG. 3B is a diagram showing personal information of a data requester stored in a requester database;

FIG. 4 is a view corresponding to FIG. 1, showing a second embodiment of the present invention;

FIG. 5 is a view corresponding to FIG. 1, showing a third embodiment of the present invention.

[Explanation of symbols]

In the figure, 1 is a personal authentication data providing system, 2 is a personal authentication data management server, 3 is a registrant IC card, 4 is a client terminal (requester terminal), 5 is an input / output control unit (transmission / reception control means), 6 is an authentication unit, 7 is a management unit, 8 is a registrant information database, 9 is a requester information database, 11
Is an internet (communication line), 12 is a control circuit (control means, collating means), 13 is an external network communication unit (external communication means), 15 is an input unit (input means), and 16 is a fingerprint input device (biological information input means) , Release permission information input means), 17 is a storage device (storage means), 18 is an IC card reader (input means, reading means), 19 is a client IC card (requester IC card), 21 is a registration-only terminal, 22 is A registration unit; 23, a control circuit (control means);
Denotes an external network communication unit (external communication unit), and 27 denotes an imaging device (biological information input unit).

Continued on the front page (72) Inventor Yoko Suwabe 1-1-1, Shibaura, Minato-ku, Tokyo Inside Toshiba Corporation Head Office (72) Inventor Shigeo Hirahara 1-1-1, Shibaura, Minato-ku, Tokyo Toshiba F-term in the head office (reference) 5B085 AE02 AE06 AE11 AE23 AE25 BG07

Claims (13)

[Claims] 1. A registrant ID for identifying personal registration data relating to a registrant to be managed.
A personal information data management server having a registrant information database to record and hold, and a transmission / reception control means for transmitting and receiving data connected to the outside via a communication line such as the Internet; the personal authentication data management server; External communication means for connecting via a communication line, input means for inputting the registrant ID, and control means for transmitting the input registrant ID to the personal authentication data management server through the external communication means The personal authentication data management server, when receiving the registrant ID from the requester terminal, the personal authentication data corresponding to the registrant ID, the registrant information Performing a personal authentication data providing service which is read from a database and transmitted to the requester terminal. Use data providing system. 2. The personal authentication data providing system according to claim 1, wherein the requester terminal includes storage means for storing the received personal authentication data together with the registrant ID. 3. The personal authentication data providing device according to claim 1, wherein the input means includes reading means provided for each registrant and reading a recording medium on which the registrant ID is recorded. system. 3. The personal authentication data providing system according to claim 2, wherein: 4. The requester terminal is configured to transmit a requester ID for identifying the requester terminal together with a registrant ID to a personal authentication data management server, wherein the personal authentication data management server comprises: A requester information database that records and holds a requester ID for each requester terminal to be managed; and an authentication unit that performs personal authentication of the requester terminal based on the received requester ID. 2. The personal authentication data providing system according to claim 1, wherein whether to transmit the personal authentication data is determined based on an authentication result of the authentication unit. 5. The personal authentication data includes biometric information of an individual that can be identified from another person. The requester terminal includes a biometric information input unit for inputting biometric information, 2. The personal authentication data providing system according to claim 1, further comprising a matching unit configured to match the included biological information with the biological information input by the biological information input unit. 6. A level according to confidentiality is set in the personal authentication data, and a level of the personal authentication data for restricting reception by the requester terminal is set in the requester terminal as an authentication level. 2. The personal authentication data management server is configured to transmit personal authentication data of a level lower than the authentication level of the requester terminal to the requester terminal. Personal authentication data providing system. 7. The personal authentication data stored in the registrant information database is configured such that a level to be disclosed on condition that the registrant has permission to publish is settable as a reference level. The requester terminal is provided with a disclosure permission information inputting means for inputting disclosure permission information of the personal authentication data at a reference level or higher by the registrant, and the personal authentication data management server transmits the registrant disclosure permission information from the requester terminal. 2. The personal authentication data providing system according to claim 1, wherein, when received, the personal authentication data of the registrant whose personal authentication data is equal to or higher than the reference level is transmitted. 8. An external communication means for connecting to a personal authentication data management server via a communication line, an input means for inputting a registrant ID, a data input means for inputting personal authentication data, and an input. A registration-only terminal having control means for transmitting the registered registrant ID and the personal authentication data to the personal authentication data management server through the external communication means. An authentication unit for performing personal authentication of a registrant based on the registrant ID received from the registration-dedicated terminal via the registrant ID, and registrant information based on the registrant ID and personal authentication data received according to the authentication result of the authentication unit. 2. A personal authentication system according to claim 1, further comprising a registration unit for rewriting personal authentication data stored in a database. Use data providing system. 9. The registration-dedicated terminal input means includes reading means provided for each registrant and reading a recording medium on which a registrant ID is recorded.
Data management system for personal authentication as described. 10. The transmitting means of the registration-only terminal includes a registrant I
The personal authentication data management server is configured to transmit a registration-only terminal ID for identifying the registration-dedicated terminal together with D and the personal authentication data to the personal authentication data management server. In addition to having a terminal information database that records and retains a registration-only terminal ID for each terminal, the authentication unit is configured to identify a registration terminal based on the received registration-only terminal ID, and the registration unit determines the identification result of the authentication unit. 9. The personal authentication data providing system according to claim 8, wherein it is determined whether or not rewriting processing of the personal authentication data is to be performed based on the information. 11. The personal authentication data management server includes: a counting unit for measuring the number of executions of the personal authentication data providing service for each requester terminal within a predetermined period; 2. The personal authentication data providing system according to claim 1, further comprising: a calculating unit that calculates a usage fee within a predetermined period for each requester terminal by multiplying the number of times. 12. The personal authentication data providing system according to claim 11, wherein the unit price of the personal authentication data providing service is set according to the level of the transmitted personal authentication data. 13. A registrant I for identifying the registrant himself / herself for personal authentication data relating to a registrant to be managed.
A personal authentication data management server that includes a registrant information database that records and holds the data together with the data D, and performs a personal authentication data providing service; and a plurality of personal authentication data management servers connected to the personal authentication data management server via a communication line such as the Internet. Transmitting a registrant ID from the requester terminal to the personal authentication data management server; and receiving the registrant ID from the requester terminal in the system. Reading the personal authentication data corresponding to the registrant ID from the registrant information database and transmitting the data to the requester terminal.