JP2002342285A - Information-issuing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information issuing system, capable of improving security, and easily collecting and issuing necessary information. SOLUTION: A user management terminal 3 conducts authentication processing, based on authentication information transmitted from a portable telephone; and when the authentication is established, the user management terminal 3 issues an one-time password being information for executing authentication for receiving the permission of the issue of information to the portable telephone. Then, the issues one-time password and the identification information of the portable telephone being the target of the issue of the issued one-time password are stored to be made to correspond to each other; the identification information and one-time password issued from an issuing terminal are received; the authentication processing is executed, based on the temporarily stored information; and when the authentication is established, the issuance of the information is permitted.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information issuing system for issuing information requested to be issued from a mobile phone.

[0002]

2. Description of the Related Art Conventionally, when a public certificate such as a resident's card or a seal certificate is required, a user has to go to an administrative organization such as a ward office to issue necessary documents.
However, according to this method of going to the administrative organization and issuing the required documents, if the administrative organization does not handle the issuance of documents due to holidays or after hours,
Users were not able to have the documents issued immediately. Therefore, it is established in government agencies such as government offices and ministries,
Using a database that manages data on documents to be issued, a system for issuing documents by connecting a document issuing terminal that issues documents via the Internet is constructed. Then, it is conceivable that the document issuing terminal is installed in a place where a plurality of users can use it, such as a station, to provide a document issuing service.

[0003]

However, in the system for issuing documents described above, documents can be issued by operating a document issuing terminal.
There is a possibility that the issuing terminal is operated by a malicious third party to issue a document, and the document is abused. The present invention has been made in view of such circumstances, and an object of the present invention is to provide an information issuing system capable of improving security and easily obtaining and issuing necessary information.

[0004]

In order to achieve the above object, the present invention relates to information (for example, a resident's card, a seal stamp, etc.) transmitted from a mobile phone (for example, the mobile phone 1 in the embodiment). A user management terminal (for example, the user management terminal 3 in the embodiment) that receives a request to issue a public certificate such as a certificate or a paid ticket, and an instruction from the user management terminal. Information connected to an issuing terminal (for example, issuing terminal 4 in the embodiment) for reading and issuing information requested to be issued from the mobile phone from a database (for example, personal information database for document issuance 51 in the embodiment). An issuance system (for example, an information issuance system in the embodiment), wherein the user management terminal is an authentication system which is information for authenticating the mobile phone. Information (for example, a user ID and a password in the embodiment) and identification information (for example, a telephone number and an individual ID in the embodiment) transmitted from the mobile phone for identifying the mobile phone. A first storage unit (for example, the authentication user management database 32 in the embodiment), and the authentication information and the identification information transmitted from the mobile phone are stored on the basis of the information stored in the first storage unit. A first authentication unit that performs an authentication process (for example, the authentication unit 33 in the embodiment), and performs authentication for receiving information issuance permission when authentication is established in the authentication process of the first authentication unit. One-time password issuing means for issuing a one-time password as information and transmitting the one-time password to the mobile phone (for example, a one-time password issuance in the embodiment) Unit 31), and associates the one-time password issued by the one-time password issuing means with the identification information (for example, the individual ID in the embodiment) of the mobile phone to which the issued one-time password is issued. Second storage means for storing (for example, the authentication user management database 32 in the embodiment), and identification information and one-time password transmitted from the issuing terminal are received and stored in the second storage means. A second authentication unit (for example, the authentication unit 33 in the embodiment) that performs an authentication process based on the information that has been authenticated, and permits the issuance of information when authentication is established in the authentication process of the second authentication unit. Issue permission control means (for example, the authentication unit 33 in the embodiment) for controlling transmission of issue permission information to be issued to the issue terminal.
The issuing terminal receives the identification information and the one-time password transmitted from the mobile phone, and controls the transmission of the received identification information and the one-time password to the user management terminal. A control unit 41 according to the embodiment, and an issuing unit (for example, a printing unit according to the embodiment) for reading and issuing information to be issued from the database when issuing permission information is received from the user management terminal. 42).

Further, according to the present invention, there is provided a user management terminal for receiving a request for issuing information transmitted from a mobile phone, and the information requested to be issued from the mobile phone based on an instruction from the user management terminal. A user management terminal used in an information issuing system to which an issuing terminal that reads out and issues from a database is connected, the authentication information being information for authenticating the mobile phone, and a mobile phone transmitted from the mobile phone. A first storage unit for storing identification information that is information for identifying the user, and authenticating the authentication information and the identification information transmitted from the mobile phone based on the information stored in the first storage unit. A first authentication unit for performing processing, and a one-time password which is information for performing authentication for receiving permission to issue information when authentication is established in the authentication processing of the first authentication unit. A one-time password issuing unit for issuing a password and transmitting the one-time password to the mobile phone; and a one-time password issued by the one-time password issuing unit and identification information of the mobile phone to which the issued one-time password is issued. A second storage unit that stores the identification information and the one-time password transmitted from the issuing terminal in association with each other and performs an authentication process based on the information stored in the second storage unit; A second authentication unit, and an issuance permission control unit that controls transmission of issuance permission information for permitting issuance of information to the issuance terminal when authentication is established in the authentication process of the second authentication unit;
It is characterized by having.

[0006] Further, according to the present invention, in the above-mentioned user management terminal, the one-time password issuing means issues a different one-time password for each issue.

Further, according to the present invention, a user management terminal for receiving an issuance request of information transmitted from a mobile phone, and an issuance request from the mobile phone based on an instruction from the user management terminal. An issuing terminal used in an information issuing system connected to an issuing terminal that reads and issues information from a database, receives identification information and a one-time password transmitted from a mobile phone, and receives the received identification information. Control means for controlling transmission of a one-time password and the user management terminal, and issuing means for reading and issuing information to be issued from the database when issuing permission information is received from the user management terminal, ,
It is characterized by having.

[0008]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An information issuing system according to an embodiment of the present invention will be described below with reference to the drawings. FIG.
1 is a schematic block diagram illustrating a configuration of an information issuing system according to an embodiment of the present invention. The mobile phone 1 is wirelessly connected to an authentication user management database 32 provided in a user management center via a network 2. The mobile phone 1 has an individual I for identifying the mobile phone 1.
D is set in advance. Note that the mobile phone 1 may be a terminal of a digital simple telephone system. The network 2 is, for example, an official site network provided by a communication company that provides a communication service of the mobile phone 1. Here, a network other than the Internet is used as the network 2.

[0009] The user management device 3 includes a one-time password issuing unit 31 and an authentication user management database 32.
And an authentication unit 33, which is connected to the issuing terminal 4 via the network 10 and has a function of transmitting document issuing permission information to the issuing terminal 4. One-time password issuing unit 3
1 issues a one-time password to the mobile phone 1 in response to an instruction from the mobile phone 1. Here, the one-time password is information for performing authentication for receiving permission to issue a document, and a different one-time password is issued each time it is issued. The issued one-time password is stored in the authentication user management database 3 in association with the user ID (or individual ID) of the issuance destination.

[0010] The authentication user management database 32 stores user management information for authenticating the user of the mobile phone 1. FIG. 2 shows an example of the user management information stored in the authentication user management database 3. As shown in FIG. 2, the user management information includes personal information, which is personal information of each user, such as a user ID for performing user authentication, a password, a user's address, name, and telephone number. Individual I
D, an e-mail address of the mobile phone 1, an identification ID which is information used for managing issued logs and managing issued documents to confirm the authenticity of the certificate, and a one-time password issuing unit 31. The issued one-time password and the like are associated and stored. The authentication user management database 32 corresponds to the above-described first storage unit and second storage unit.

When the authentication unit 33 receives the authentication request from the mobile phone 1, based on the information stored in the authentication user management database 32, the password and the individual ID included in the authentication request are converted into the user ID. Authenticating is performed by detecting whether or not the authentication is supported. The authentication unit 33 receives the one-time password transmitted from the issuing terminal 4 and performs an authentication process based on the user management information stored in the authentication user management database 32. Further, the authentication unit 33 performs control to issue issue permission information to the issue terminal 4 for permitting information to be issued. The authentication unit 33 corresponds to the above-described first authentication unit, second authentication unit, and issue permission control unit.

The issuing terminal 4 has a control unit 41 and a printing unit 42, and is provided in, for example, a convenience store, a station, a department store, and the like. The control unit 41 identifies the mobile phone 1 transmitted from the mobile phone 1 and identifies the mobile phone 1 (for example, information that cannot be easily changed by the user such as a telephone number and an individual ID).
And the one-time password, and transmits the received identification information and the one-time password to the user management terminal 3. In addition, when the control unit 41 receives the document issuance permission information from the user management terminal 3, the control unit 41 performs control to transmit the received document issuance permission information to the issue information management device 5. The document issuance permission information is information for transmitting information stored in the issue information management device 5 to the issue terminal 4 and permitting the issue terminal 4 to issue the issue. Further, the control unit 41 transmits the information specifying the issue to the issue information management device 5 when the information specifying the issue is input via the input unit. Here, the information that specifies the issue is
This is information for designating information stored in the issue information management device 5 to issue an issue.

The printing section 42 prints a printed material according to an instruction from the control section 41. Further, the issuing terminal 4 displays a CRT (Cathode RayTub) for displaying various information.
e) or a display unit such as a liquid crystal display device, an input unit such as a keyboard and a mouse, and a charging unit that calculates a charge based on information designating the issue and adjusts the charge input from the input unit. . The display unit and the input unit may be configured by a touch panel or the like.

The publication information management device 5 has a personal information database 51 for issuing documents, and is connected to the issuing terminal 4 by a dedicated line 11. The document issuance personal information database 51 stores information on the individual user. The information on the individual user includes, for example, personal information such as the user's address and name, and information for creating and issuing documents such as a resident's card and a seal certificate based on the individual's information. It is. When the information specifying the issue is received from the issuing terminal 4, the issue information management device 5 reads the information on the individual user corresponding to the received information specifying the issue from the personal information database 51 for document issuance. Is transmitted to the issuing terminal 4 via the dedicated line 11 as issuance data. Further, the issue information management device 5 has a function of issuing an identification ID in response to a request from the issue terminal 4.

Next, the operation of the information issuing system having the above configuration will be described with reference to the drawings. FIG. 3 is an explanatory diagram for explaining the operation of the information issuing system in the configuration of FIG. Here, a case where a resident's card is issued as an issue will be described. Also, here, the mobile phone 1
It is assumed that the user knows the e-mail address of the issuing terminal 4 or that the mobile phone 1 stores the e-mail address of the issuing terminal 4. First, the user
Carry the mobile phone 1 and go to the place where the issuing terminal 4 is installed. Then, the user operates an input key of the mobile phone 1 to access a home page for authentication for establishing communication with the user management terminal 3 via the network 2 (official site network). Then, an authentication request including a user ID and a password is input according to the input format of the homepage, and transmitted to the user management terminal 3 via the network 2. At this time, the authentication request is further transmitted with the individual ID of the mobile phone 1 indicating the transmission source added (step S1).

Upon receiving the authentication request from the mobile phone 1, the user management terminal 3 receives the authentication user management database 32.
The authentication unit 33 detects whether the password and the individual ID included in the received authentication request correspond to the user ID based on the information stored in the authentication unit 33, and performs an authentication process (step S2). ). In the authentication process, if the password and the individual ID do not correspond to the user ID, the user management terminal 3 transmits an error to the mobile phone 1.

On the other hand, in the authentication process, when the password and the individual ID correspond to the user ID, the user management terminal 3 issues a one-time password by the one-time password issuing unit 31 and issues the issued one-time password. Is stored in the authentication user management database 32 in association with the user ID of the mobile phone 1 and transmitted to the mobile phone 1 (step S3). This one-time password is transmitted by setting an e-mail address stored in the authentication user management database 32 as a destination in association with the authenticated user ID and password.

Upon receiving the one-time password from the user management terminal 3, the mobile phone 1 displays on the display screen that the one-time password has been received. At this time, the one-time password itself is not displayed on the display screen. After confirming that the one-time password has been received, the user transfers the one-time password in which the e-mail address of the mobile phone 1 is set as the transmission source and the individual ID to the e-mail to the issuing terminal 4 (step S4). ).

The issuing terminal 4 sends an electronic mail including the one-time password and the individual ID received from the mobile phone 1 to the user management terminal 3 by the control unit 41, and inquires whether the one-time password is correct. An authentication request is made (step S5). Upon receiving the e-mail transmitted from the issuing terminal 4, the user management terminal 3 determines the one-time password of the mobile phone 1 included in the e-mail based on the information stored in the authentication user management database 32. The authentication unit 33 determines whether the individual IDs correspond to each other.
And authentication is performed (step S6). In the authentication process, of the one-time password and the individual ID,
If either one does not match, an error occurs.

On the other hand, if the one-time password and the individual ID match in the authentication process, the user management terminal 3
Reads out a part of the personal information (for example, address and name) of the user whose one-time password and the individual ID match, from the user management database for authentication 32, and reads the part of the read personal information and the document. Issue permission information and issue terminal 4
(Step S7).

When the issuing terminal 4 receives a part of the personal information and the document issuing permission information from the user management terminal 3, the issuing terminal 4 displays a service selection screen for selecting a required document on the display unit. Then, when the user designates the item of “resident's card” from the service selection screen and charges a fee for issuing the “resident's card” to the issuing terminal 4 (step S8), the control unit of the issuing terminal 4 41 transmits the information for designating the "resident card", a part of the personal information, and the command for issuing the identification ID to the issue information management device 5 via the dedicated line 11 (step S9).

The issuance information management device 5 includes information for designating a “resident card” from the issuing terminal 4, a part of personal information, and an identification ID.
When receiving the command to issue a resident card, the personal information corresponding to the information designating the "resident's card" and a part of the personal information is read, and the resident card is read based on the read information about the user. Generate issue data to issue. Then, the publication information management device 5 issues the identification ID, and transmits the issued identification ID and the issued data to the issuing terminal 4 (step S10). Further, the issue information management device 5 stores the identification ID in the document issuance personal information database 51, and
Is notified of a part of the identification ID personal information. Issuing terminal 4
Receives the issuance data transmitted from the issue information management device 5, prints and issues a resident card by the printing unit 42 based on the received issuance data (step S11).
The user management terminal 3 stores the notified identification ID in the authentication user management database 32 in association with the user ID corresponding to a part of the personal information transmitted from the publication information management device 5.

According to the embodiment described above, when transmitting the one-time password in step S3, the user is not required to input the e-mail address of the transmission destination of the one-time password, but is transmitted in step S1. An e-mail address corresponding to the user ID and the password is read from the authentication user management database 32, and the one-time password is transmitted with the read e-mail address as a transmission destination. Thus, access from any device other than the mobile phone 1 (for example, a personal computer) can be prevented, and the one-time password can be reliably transmitted to the mobile phone 1 to which the password is issued.

Further, according to the above-described embodiment, the issuance terminal 4 and the issue information management device 5 are connected via the dedicated line 11, so that unauthorized intrusion from the outside can be reduced. . Further, according to the above-described embodiment, by applying the official site network to the network 2, it is possible to easily determine which mobile phone 1 has been accessed based on the individual ID of the mobile phone 1. In other words, by using the official site network, the individual ID given after the user is authenticated by the communication company at the time of the communication service contract of the mobile phone 1 is notified to the user management terminal 3 when the electronic mail is transmitted. , The mobile phone I accessed
Can be specified. In addition, it is possible to restrict access only from a specific terminal, so that access can be made only from a mobile phone having a limited function compared to a personal computer or the like. Therefore, fraudulent activities such as hacking can be reduced by using the official website network.

Further, according to the above-described embodiment, the information issuing system can perform the issuing process without human intervention, and a 24-hour system can be realized without limiting the use time. It is possible and can improve administrative services. Further, according to the above-described embodiment, it is also possible to obtain all the public documents issued by a plurality of local governments just by going to one place where the issuing terminal 4 is located (such as a convenience store or a station). is there.

When the user himself / herself performs the issuing operation on the issuing terminal 4 side, the issued printed matter can be received immediately, and the printed matter can be received without a third party. The case where the printed matter is stolen before the user receives it can be reduced.

In the embodiment described above, an expiration date may be set for the one-time password, and the expired one-time password may be deleted from the authentication user management database 3. As a result, it is possible to reduce the abuse of the one-time password and the unauthorized access. When it is necessary to confirm the authenticity of the issue, the personal information database 51 for document issuance determines whether the issue to be authenticated has been issued in the issue information management device 5 or not. This is performed by confirming whether or not the ID is recorded. As a result, it can be used for detecting forgery or the like of an issue, and security can be improved. Further, the authenticity of the issue may be confirmed using the identification ID stored in the authentication user management database 32 of the user management terminal 3.

In the above-described embodiment, the case where a public certificate (resident certificate) is issued by the issuing terminal 4 has been described. However, the issue issued by the issuing terminal 4 is limited to a public certificate. Not something. That is, the information stored in the personal information database for document issuance 51 is not limited to information relating to the individual user, but may be any information that can be provided to the user. For example, there are information such as images and paid tickets such as air tickets and concert tickets.

Further, in the above-described embodiment, the case where the one-time password is transmitted from the mobile phone 1 to the issuing terminal 4 using the e-mail has been described, but the one-time password can be transmitted. If so, other than e-mail may be used.
For example, short-range wireless communication (infrared, BLUETOOTH
) May be used to transmit the one-time password. Further, a one-time password may be transmitted between the mobile phone 1 and the issuing terminal 4 using a connection connector or the like.

In the above-described embodiment, a portable information terminal such as a palmtop computer or a wearable computer may be applied as the portable telephone 1. Further, when a recording medium such as an IC chip capable of recording and removing user information is mounted on the portable information terminal or the mobile phone 1, the recording medium is taken out from the portable information terminal or the mobile phone 1, and After connecting, the issuance terminal 4 may read out the user information stored in the recording medium and perform authentication, and then perform a one-time password issuance process.

Further, in the above-described embodiment, when the user management terminal 3 authenticates a password or the like, the user I is not authenticated a plurality of times (for example, three times).
A function for locking D may be provided to prevent unauthorized use of the mobile phone 1 due to theft or theft.

Also, a program for realizing the functions of the one-time password issuing unit 31, the authentication unit 33, the control unit 41, and the printing unit 42 in FIG. 1 is recorded on a computer-readable recording medium, and is recorded on the recording medium. Issuance management of information may be performed by causing a computer system to read and execute the recorded program. In addition,
Here, the “computer system” includes an OS and hardware such as peripheral devices.

The "computer system" is a WW
If the W system is used, a homepage providing environment (or display environment) is also included. The “computer-readable recording medium” is a flexible disk, a magneto-optical disk, a ROM, a CD-ROM, or the like.
It refers to a portable medium such as a ROM or a storage device such as a hard disk built in a computer system. Further, a "computer-readable recording medium" refers to a communication line for transmitting a program via a network such as the Internet or a communication line such as a telephone line, and dynamically holds the program for a short time. In this case, it is also assumed that a program that holds a program for a certain period of time, such as a volatile memory in a computer system serving as a server or a client in that case, is included. The above program
The present invention may be for realizing a part of the functions described above, or may be for realizing the aforementioned functions in combination with a program already recorded in a computer system.

Although the embodiment of the present invention has been described in detail with reference to the drawings, the specific configuration is not limited to this embodiment, and includes a design and the like within a range not departing from the gist of the present invention. It is.

[0035]

As described above, according to the present invention, the authentication process is performed based on the authentication information and the identification information transmitted from the mobile phone, and when the authentication is established, the information is issued. Issue a one-time password, which is information for performing authentication for the mobile phone, temporarily store the issued one-time password in association with the identification information of the mobile phone to which the issued one-time password is issued, The identification information and the one-time password transmitted from the issuing terminal are received, an authentication process is performed based on the temporarily stored information, and the issuance of the information is permitted when the authentication is established. As a result, security can be improved, and necessary information can be easily obtained and issued.

When a user makes a request for issuing information,
Since an issuance request can be made from a mobile phone, information can be issued more easily than when using a computer. Further, according to the present invention, since a different one-time password is issued for each issuance, the effect of further improving security can be obtained.

The issued certificate has an identification ID.
Is provided, the authenticity of the issued certificate can be confirmed using the identification ID, and the effect of improving security can be obtained.

[Brief description of the drawings]

FIG. 1 is a schematic block diagram showing a configuration of an information issuing system according to an embodiment of the present invention.

FIG. 2 is a drawing for explaining user management information stored in an authentication user management database 3.

FIG. 3 is an explanatory diagram for explaining an operation of the information issuing system in the configuration of FIG. 1;

[Explanation of symbols]

Reference Signs List 1 mobile phone 3 user management terminal 4 issuing terminal 5 issue information management device 31 one-time password issuing unit 32 user management database for authentication 33 authentication unit 41 control unit 42 printing unit 51 personal information database for issuing documents

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) H04L 9/32 H04M 11/00 302 H04M 11/00 302 H04B 7/26 109S H04Q 7/38 H04L 9/00 673A F term (reference) 5B085 AA08 AE01 BA07 BE07 BG04 BG07 5J104 AA07 KA01 KA21 NA05 PA02 PA07 5K067 AA21 BB04 BB21 DD17 DD23 EE02 EE10 HH22 HH23 HH24 5K101 LL12 MM07 NN21 PP04

Claims (4)

[Claims] 1. A user management terminal that receives a request to issue information transmitted from a mobile phone, and reads information requested to be issued from the mobile phone from a database based on an instruction from the user management terminal. An information issuing system connected to an issuing terminal for issuing, wherein the user management terminal identifies authentication information, which is information for authenticating the mobile phone, and a mobile phone transmitted from the mobile phone. A first storage unit for storing the identification information, which is the information of the first type, and a second unit for performing the authentication process on the authentication information and the identification information transmitted from the mobile phone based on the information stored in the first storage unit. The first authentication means, and the first
If authentication is successful in the authentication process of the authentication means of
A one-time password issuance unit for issuing a one-time password, which is information for performing authentication for receiving permission to issue information, and transmitting the one-time password to the mobile phone; a one-time password issued by the one-time password issuance unit; Second storage means for storing the associated identification information 1 of the mobile phone to which the one-time password is to be issued, and receiving the identification information transmitted from the issuing terminal and the one-time password, and A second authentication unit for performing an authentication process based on the information stored in the storage unit; and issuing permission information for permitting the issuance of the information when the authentication is successful in the authentication process of the second authentication unit. Issuing permission control means for controlling transmission to the issuing terminal, wherein the issuing terminal includes identification information transmitted from a mobile phone and a one-time path. A first control unit for receiving the password and transmitting the received identification information and the one-time password to the user management terminal; and issuing the password when the issuance permission information is received from the user management terminal. Issuing means for reading out and issuing target information from the database. 2. A user management terminal for receiving an issuance request of information transmitted from a mobile phone, and, based on an instruction from the user management terminal, reading information requested to be issued from the mobile phone from a database. A user management terminal used in an information issuing system to which an issuing terminal to be issued is connected, for identifying authentication information that is information for authenticating the mobile phone and a mobile phone transmitted from the mobile phone. A first storage unit for storing identification information, which is information of the first type, and an authentication process for performing authentication processing on the authentication information and the identification information transmitted from the mobile phone based on the information stored in the first storage unit. And issuing a one-time password, which is information for performing authentication for receiving permission to issue information, when authentication is established in the authentication processing of the first authentication means. A one-time password issuance unit to be transmitted to the mobile phone; a one-time password issued by the one-time password issuance unit and identification information of a mobile phone to which the issued one-time password is issued is stored in association with each other. A second storage unit, a second authentication unit that receives the identification information and the one-time password transmitted from the issuing terminal and performs an authentication process based on the information stored in the second storage unit; Issuing permission control means for controlling transmission of issuance permission information for permitting issuance of information to the issuing terminal when authentication is established in the authentication processing of the second authentication means. Management terminal. 3. The one-time password issuing means,
3. The user management terminal according to claim 2, wherein a different one-time password is issued for each issue. 4. A user management terminal for receiving an issuance request for information transmitted from a mobile phone, and reading information requested to be issued from the mobile phone from a database based on an instruction from the user management terminal. An issuing terminal used in an information issuing system to which an issuing terminal to be connected is connected, which receives identification information and a one-time password transmitted from a mobile phone, and uses the received identification information and the one-time password. Control means for controlling transmission to the user management terminal, and issuing means for reading and issuing information to be issued from the database when issuing permission information is received from the user management terminal. Issue terminal.