JP2003109053A - Device for outputting anonymous id of card and device for managing parking lot for various facilities - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system which prevents registration numbers from being illegally stolen and wrongly used and imposes little burden on a manager on management and operation even when a personal identification card such as a driver's license, a bank card and credit card is used. SOLUTION: Original card data obtained by reading various person identification cards such as a driver's license with a card reading means A are stored in a card data storing means B, a card anonymous ID (electronic fingerprint) generating means C performs an arithmetic by using a one-wag function on the basis of the original card data stored in the card data storing means B to generate a new identification symbol. The new identification symbol is stored in a card anonymous ID storing means D, and a card anonymous ID outputting means F also outputs the new identification symbol to the outside. A card data erasing means G erases the original card data stored in the card data storing means B.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a card anonymous ID output device and a parking lot management apparatus for various facilities using the card anonymous ID output device, and more particularly, to a driver's license,
Read the identification data such as numbers of various credit cards, convert these identification data into new identification symbols,
Card anonymous ID output device and its output device that erases the original identification symbol, identifies, verifies, and authenticates individuals based on the new identification symbol, and manages entrance and exit to various facilities and use of facilities The present invention relates to a parking lot management device for various facilities using.

[0002]

2. Description of the Related Art For example, Japanese Unexamined Patent Publication No. 9-274673 "Parking lot management system" relates to a management system which manages entry and exit of a parking lot by using a license instead of using a parking ticket. There is a description. In this system,
When entering the parking lot, the license data (registration number) is read, and the registration number of these licenses is used as an ID symbol to calculate the parking time, calculate the parking charge, and issue a parking permit for each ID number. It describes that parking lot management will be performed.

[0003]

However, according to what is described in the above document, a driver's license, a bank card,
Since a credit card or the like is optically read and the read registration number is used as an ID, these registration numbers and the like are unprotected and stored in the system. There is a fear that it may be abused by a third party, and there is also the possibility.

For this reason, the administrator who manages such a facility takes protective measures to prevent the misuse of these important data, and educates the employees who are in charge of operations to prevent the leakage of personal data. It was burdensome and burdensome because various measures had to be taken to prevent this.

By reading the registration number of a driver's license, cash card, etc. and recording the registration number directly and using it for verification, authentication, etc., it is possible to use existing resources without issuing a new parking ticket. By doing so, it can be said that the operation cost can be reduced and it is very economical and rational. However, the information is important personal information that can identify an individual, and entails a great deal of risk such as leakage in terms of safety management and operation from the standpoint of personal information protection.

[0006] Also, for example, it is psychologically uncomfortable to record the registration numbers of these cards, etc., which can identify an individual to use a parking lot, even if he / she only eats at a restaurant. . On the other hand, it is sufficient for the parking lot management side to know when the vehicle enters and leaves the vehicle, but handling it with the provision of personal information that can identify an individual does not cause a leak. As described above, the burden on the management such as the management of the device and the education of the parking manager has been forced, which is very troublesome.

The present invention has been made in view of the above problems, and an object thereof is to illegally register these registration numbers even when a driver's license or a personal identification card such as a bank card or a credit card is used. It is to provide a system that is not stolen and abused and has a low administrative and operational burden on the administrator.

[0008]

In order to achieve the above object, the main constituent features of the card anonymous ID output device according to the present invention are, as described in claim 1, a driver's license, various credit cards, etc. Is a personal identification information output device for reading out the identification information consisting of the numbers and symbols and outputting the personal information to newly identify, collate, and authenticate the individual based on the identification information, and a card for reading the personal identification information. Data reading means, card data storage means for storing the personal identification information read by the card data reading means, and identification for generating new personal identification information based on the card data stored in the card data storage means The symbol generation means, the identification symbol storage means for storing the new identification symbol generated by the identification symbol generation means, and the identification symbol storage means are described. And the identification information output means and outputting a new identification symbol which is characterized by being composed by the card data erasing means for erasing the card data read by said card reading means.

Further, the main constituent features of the parking lot management apparatus for various facilities according to the present invention are as set forth in claim 4 above.
A storage device provided at the entrance of the parking lot, a register or accounting department of various facilities, and a delivery device provided at the exit of the parking lot,
In a parking lot of a facility equipped with a delivery gate that is controlled to be opened and closed by the delivery device, and a central management device that comprehensively manages the storage device, the register, and the delivery device, the storage device, the register or the accounting unit and the delivery device, Each of them is provided with a card processing device for processing card information, and each of these card processing devices has a card data reading means for reading personal identification information such as a driver's license, various credit cards and the like, and a card data reading means as described above. Card data storage means for storing the personal information read by the card data reading means, identification symbol generation means for generating new personal identification information based on the card data stored in the card data storage means, and the identification Identification symbol storage means for storing a new identification symbol generated by the symbol generation means, and storage in the identification symbol storage means Identification information output means and outputting a new identification symbol which is characterized in that it allowed to include a card anonymous ID output device constructed in accordance with the card data erasing means for erasing the card data read by said card reading means.

[0010]

BEST MODE FOR CARRYING OUT THE INVENTION A card anonymous ID output device according to an embodiment of the present invention will be described below with reference to FIGS.

FIG. 1 shows a card anonymous I according to an embodiment of the present invention.
It is a block diagram which shows the basic composition of a D (digital fingerprint) output device. The card anonymous ID output device 1 according to the present embodiment is a card reading unit A for reading the contents of a card CK / CT such as a driver's license, a normal credit card, a bank card, and the card contents read by the card reading unit A. Card data storage means B, a card anonymous ID generation means C which is a new identification symbol or an identification symbol generation means for generating a new identification symbol based on the card data stored in the card data storage means B, and a card anonymous Card anonymous ID, which is identification symbol storage means for storing new card anonymous ID (digital fingerprint) data generated by the ID generation means C
Based on the memory means D and the card anonymous ID data generated by the card anonymous ID generating means C, further repeating,
Data generated by the card anonymous ID regenerating means E, which is the identification information reproducing means for regenerating a new identification symbol, and the card anonymous ID generating means C, or the card anonymous I
Anonymous ID (digital fingerprint) is generated by the card anonymous ID output unit F, which is an identification information output unit that outputs the data regenerated by the D regeneration output unit E to an external host computer, and the card anonymous ID generation unit C. The card data erasing means G for erasing the normal card data stored in the card data storage means B after being erased.

FIG. 2 is a mechanical block diagram of the card anonymous ID output device 1. In FIG. 2, reference numeral 2 denotes a card transport passage, and in the card transport passage 2, a card detection unit 4
A card guide portion 2K for guiding the insertion and return conveyance of the cards CK and CT, and card feeding mechanisms (feed rollers) 3 and 3 for feeding the cards existing in the card guide portion 2K,
A registration number reading unit 5 for reading the registration numbers of the cards CK and CT is provided, and these members constitute the card reading means A described above.

In FIG. 2, 6 is a control unit for performing various controls, 7 is a computing unit for performing various calculations to be described later, and 8 is a RAM for storing the card number read by the card number reading unit 5. The RAM 8 includes the card data storage unit B for storing the card data read by the registration number reading unit 5 and the card anonymous ID for storing the anonymous ID data generated by the card anonymous ID generating unit C. It corresponds to the storage means D. Reference numeral 9 is a ROM storing various calculation reference data, and 10 is a communication control unit for sending the calculation result of the calculation unit 7 to an external device such as a host computer.

FIG. 3 is a block diagram of a card anonymous ID (digital fingerprint) output device, and the same or corresponding parts as those in FIG. 2 are designated by the same reference numerals. As shown in FIG.
Card detecting unit 4, registration number reading unit 5, and control unit 6
The arithmetic unit 7, the RAM 8, the ROM 9, and the communication control unit 10 are connected by a bus 11.

The cards CK and CT sent by the card sending mechanisms 3 and 3 are detected by the card detector 4.
The registration number reading unit 5 has an image scanner, and the image scanner is a device for reading the image data of the driver's license of the visitors. The registration number reading unit 5 responds to the card detection signal detected by the card detection unit 4,
The registration number of the card is read and the read registration number of the card is stored in the RAM 8. The calculation unit 7 calculates the card data read by the registration number reading unit 5 based on the reference calculation data in the ROM 9, converts the card data into a card anonymous ID symbol, and stores it in the RAM 8. Therefore, the RAM 8 corresponds to the card data storage means B and the card anonymous ID storage means D described above. As the reference calculation data stored in the ROM 9, a one-way function, for example, a hash value is stored. The control unit 6 includes a calculation unit 7, a RAM 8 and a ROM.
Control 9 The communication control unit 10 outputs the new card anonymous ID symbol stored in the RAM 8 to the outside as a one-way function of character string information / card anonymous ID (digital fingerprint). Further, the control unit 6 controls the card anonymous ID output unit F stored in the RAM 8 and causes the card data erasing unit G to erase the original card data stored in the registration number reading unit 5.

The hash function is a computer process having a characteristic that a unidirectional and variable length input is returned as a fixed length character string called a hash value. The hash value is called the message digest. In the field of cryptography, it is used to obtain a small character string (digest) from large data. Since this processing is faster than the calculation using the public key, it is mainly used to speed up the processing of the electronic signature. MD4, MD5 and SHA are common ones.

MD5 is 128b for any input
Outputs the value of it (32 lines in hexadecimal). For example,
The character string "password" is converted into a new function by using the hash function md5. The result obtained through this new function is irreversible, and it is impossible to derive the original character string "password" from this converted character string.

FIG. 4 is a basic flow chart of a card anonymous ID (digital fingerprint) output device according to an embodiment of the present invention. Figure 4
As shown in, the control unit 6 determines whether or not the card detection unit 4 has detected a card in step S1. When a card is detected, the process proceeds to step S2, and the control unit 6 causes the card feeding mechanism 3 to start card transportation. Next, step S
At 3, the card registration number reading unit 5 reads the card number. In the next step S4, the card registration number data is stored in the RAM 8. In step S5, the calculation unit 7 calculates the card anonymous ID of the one-way function (for example, hash value) of the character string information to obtain the card anonymous ID.
(Electronic fingerprint) is generated and this card anonymous ID is stored in RAM
Store in 8. Then, in step S6, the data of the card registration number stored in the RAM 8 is erased. next,
In step S7, the calculated card anonymous ID is output to the communication control unit 10. In step S8, the card feeding mechanism 3 performs card return conveyance, and in step S9, it is determined whether or not the card detection unit 3 detects the card. If a card is detected, the process proceeds to step S10 to stop conveyance. If not detected, the process returns to step S8.

The card anonymous ID (digital fingerprint) output device of the present invention optically outputs registration number information of cards such as a driver's license, cash card and credit card, or I.
Rather than outputting the registration number information itself read by a communication technology such as a C card, a one-way function (for example, a hash value) that is character string information called an electronic fingerprint is calculated from the read registration number information. However, the original read registration number information itself is erased. The electronic fingerprint information as a result of this is recorded and used as an identification ID for collation and authentication purposes.

The electronic fingerprint information obtained as a result of this calculation has a characteristic that the original registration number cannot be restored, and is an anonymous ID meaningless character string that cannot reach personal information. Therefore, even if the digital fingerprint information is used, provided to a third party, or leaked, the user of the parking lot or the like will not be damaged.

Further, according to this card anonymous ID (digital fingerprint) output device, in the calculation of a one-way function (eg, hash value) which is a digital fingerprint, the number of repetitions of the calculation can be arbitrarily set. So, for example, the same driver's license,
Even with registration number information of cards such as cash cards and credits, the electronic fingerprint information will give different character string data results if the number of times of calculation is changed.

As a result, by changing the set number of times for each system of entry / exit and keeping it secret, even if the electronic fingerprint information is brought to another similar system, the electronic fingerprint information has no meaning. Since it is only a non-character string,
It is almost impossible to detect the driver's license number by any means.

As described above, the anonymous number can be used for the registration number information of cards such as driver's license, cash card and credit card.
By converting it into (digital fingerprint information) and handling it, it is possible to construct a system that manages the appropriateness (duty) of personal information and has a low work load. This frees you from the troublesome management and operation work related to personal information.

FIG. 5 is a block diagram showing an embodiment of a parking lot management apparatus for various facilities using the card anonymous ID output apparatus according to the present invention. The parking lot management apparatus for various facilities of FIG. 5 shows the case of a roadside restaurant.

In FIG. 5, reference numeral 20 denotes a storage device installed at the entrance of the parking lot, and the storage device 20 has the card anonymous ID output device of the present invention built therein. Reference numeral 21 is a storage gate that is controlled to be opened and closed by the storage device 20, and reference numeral 22 is a storage device at the exit of the parking lot. The storage device 22 also incorporates the card anonymous ID output device of the present invention. 23 is a delivery machine 22
The exit gate 30 is controlled to be opened and closed by a host computer 30 as a parking lot management computer arranged in the parking lot management room 30X or the like. Reference numeral 31 is a register provided in a settlement office of a restaurant in the facility, and the card anonymous ID output device 1 according to the present invention is disposed in the settlement office. The receiving machine 20 is connected to the host computer 30 by a communication line F1, the card anonymous ID output device 1 of the restaurant and the host computer 30 are connected by a communication line F2, and the issuing machine 23 and the host computer 30 are connected by a communication line F3. It is connected.

As shown in FIG. 1, the card anonymous ID output device 1 includes a card reading means, a card storage means, a card anonymous ID generation means, and a card anonymous ID storage means.
It is composed of a card ID regenerating means, a card anonymous ID outputting means and a card data erasing means.

Further, the warehousing machine 20 and the warehousing machine 22 are respectively provided with a vehicle detection sensor, an image scanner, a motor control circuit, a motor, a communication interface, an external storage device, an external storage interface, a memory, a control unit and the like. There is. The vehicle detection sensor is a sensor for detecting that a vehicle has arrived in front of the entrance gate 21 and the exit gate 23. The image scanner is a device for reading image data of driver's licenses of visitors and participants.

Reference numeral 30X is a parking lot management room, and this parking lot management room 30X serves as an integrated information processing device for controlling the storage device 20, the register 31, and the delivery device 22.
Host computer 30 which is a parking lot management computer
Is provided. The host computer 30 includes a keyboard, a keyboard interface, a display device, a display device controller, a communication interface, an external storage device, an external storage interface, a memory, a control unit, and the like. The keyboard is an input device through which an operator inputs characters and the like. The keyboard interface is a device for transmitting data such as characters input from the keyboard to the bus.

In the facility parking management apparatus of the embodiment shown in FIG. 5, when the customer's vehicle arrives in front of the entrance gate 21 of the parking lot, the vehicle detection sensor provided in the garage machine 20 detects the vehicle and detects it. Notify the control unit. The control unit first waits for the driver's license of the visitor to be inserted into the image scanner. When the driver's license is inserted, the image data is read by the image scanner.

Next, the control unit of the receiving machine 20 performs OCR processing on the image data of the driver's license to obtain the driver's license data, and at the same time, sends the driver's license data to the card anonymous ID via the communication interface. It is transmitted to the output device 1. The card anonymous ID output device 1 converts the driver's license data into a card anonymous ID symbol, and the communication control unit 10
It is transmitted to the host computer 30 via the communication line F1.

When the anonymous data is transmitted from the warehousing machine 20, the control unit of the host computer 30 detects the fact and receives the anonymous data from the warehousing machine 20 via the communication interface. Then, the control unit of the host computer records the anonymous ID data reception date and time in the entry / exit database. After the above processing is completed, the control unit of the host computer 30 notifies the device 1 that anonymous data has been received.
Send to.

Upon receipt of the notification from the host computer 30 that the anonymous data has been received, the control unit of the waiting storage device 20 instructs the motor control circuit to operate the motor to open the storage gate 21 and detect the vehicle. Wait for the sensor to notify you that the car has passed the entrance gate 21. When the car passes through the loading gate 21, the control unit of the loading machine 20
The motor control circuit is instructed again to operate the motor to close the storage gate 21.

In paying the fee, the customer of the restaurant finishes a meal, takes the receipt to the settlement counter, and the clerk inputs from the input device of the register 31 to start the settlement process. The control unit 31 starts processing. The control unit also receives data such as a barcode from the barcode. When the input of the barcodes of all the products is completed, the control unit of the register 31 instructs the display device controller to display the total price of the products on the display device.

When the store clerk receives the total amount, he / she inputs to the card anonymous ID output device 1 that the payment has been made, and at the same time, the card anonymous ID output device 1 converts the data of the driver's license into anonymous data. The converted card anonymous ID information and shipping permission information are transmitted to the host computer 30 through the communication line F2. The host computer 30 collates and confirms the card anonymous ID information from the register 31 with the anonymous data from the receiving machine 20, and transmits the card anonymous ID information and the leaving permission information to the issuing machine 22 through the communication line F3.

Next, the customer's car is at the exit gate 23 of the parking lot.
When it arrives before, the vehicle detection sensor provided in the delivery machine 22 detects the vehicle and notifies the control unit of that fact, and in response to this, the control unit starts processing. When the driver's license is inserted, the image data is read by the image scanner. The issuing machine 22 converts the driver's license data into an anonymous ID symbol, and the anonymous ID symbol is converted to the host computer 3
If it matches with the anonymous ID information and the exit permission information from 0, and if they match, the motor control circuit is instructed to open the exit gate 23, and if the vehicle passes through the exit gate 23,
The control unit of the delivery machine 22 instructs the motor control circuit again to operate the motor to close the delivery gate 23 and end the processing.

The facility parking lot management insertion shown in FIG. 5 uses the number of the vehicle driver's license CK which the user of the parking lot must have as an ID, but never uses the data as personal information. It is a system that cannot be provided to the three parties and has a small burden of proper management (duty) of personal information.

Further, since no parking ticket is used, no mechanism for issuing a ticket is required, and the issuing permission is issued at the cash register 3 of the restaurant.
Since the procedure of 1 includes the settlement, a mechanism for handling coins and bills is not required. As a result, the main device is operated by the card anonymous I
The D (digital fingerprint) output device has a simple system and the price is low. In addition, since the parking ticket is not used, no waste is generated and low cost operation is realized.

Therefore, according to the present invention, at the time of entering the parking lot, the card anonymous ID (digital fingerprint) output device 1 reads the number of the driver's license CK, and the gate 21 opens to have the person enter the parking lot. , The electronic fingerprint information and the storage time are stored in the storage device), and if the card anonymous ID output device cannot identify, the ten-key pad that can input the registration number of the card is used. However, since the data to be stored is the electronic fingerprint information obtained as a result of the calculation, the personal information is properly managed. As an option, issue a sheet-type parking ticket (print the entry time and electronic fingerprint information) and print the journal.

As for the permission to leave the cashier at the cash register 31, ask the person who ate the food to present the driver's license at the cashier 31 and pay the driver's license number to the card anonymous ID (digital fingerprint).
Based on the electronic fingerprint information stored in the storage device and stored in the storage device and the entry time, the delivery permission is provided by free delivery or pay settlement. Regarding the issue from the parking lot,
At the time of leaving, the driver's license number is read by the card anonymous ID (digital fingerprint) output device 1 in front of the gate 23, collated with the leaving permission information, and the gate is opened to have the person leave the building.

FIG. 6 is a configuration diagram showing an example in which the parking lot management apparatus for various facilities of the present invention is applied to the parking lot of the hospital 32. The facility parking lot management device of FIG. 6 uses a driver's license CK or a medical examination ticket CT as a personal identification card, and other parts are the same as those of the management device of FIG. 5 and have the same effects.

In the parking lot management apparatus of FIG. 6 as well, a card that is uniquely issued by a hospital, a store, or an organization that provides a parking lot, for example, a paper card, a resin card, a magnetic card, or an IC card is used in a hospital. Use the medical examination ticket CT as it is, and operate and manage the parking lot without storing the medical examination ticket number etc. that can specify personal information as it is, and never use the data as personal information. It is a system that cannot be provided to a third party and has a small burden of proper management (duty) of personal information. Further, it is possible to provide a low-priced simple device system by reducing the running cost and the replenishment work of parking tickets and the like.

That is, according to the apparatus shown in FIG. 6, when the person enters the parking lot, the card anonymous ID (digital fingerprint) output apparatus 1 gives the examination ticket CT, or the person who does not have the examination ticket CT shows the driver's license CK. The number is read, the gate 21 is opened, and the customer is asked to enter the warehouse (at this time, the electronic fingerprint information and the warehouse time are stored in the storage device). If the card anonymous ID output device cannot identify, a numeric keypad is provided to enter the registration number of the card, but the stored data is the electronic fingerprint information of the calculated result, so the personal information is properly managed. . As an option, issue a sheet-type parking ticket (print the entry time and electronic fingerprint information) and print the journal.

Regarding the permission of leaving the accounting section 33 of the hospital 32, the accounting section 33 is required to present the examination ticket CT or the driver's license CK at the time of the visit such as medical examination and visit, and the card anonymous ID (digital fingerprint) is used. ) It is read by the output device 1 and the leaving permission is given by the free delivery permission or the paid settlement from the electronic fingerprint information and the entry time stored in the storage device.

When leaving the parking lot, the examination ticket number or the driver's license number is read by the card anonymous ID (digital fingerprint) output device 1 in front of the gate 23 at the time of leaving the parking lot, and it is collated with the leaving permission information, and the gate 23 is checked. Open and get the goods out. Further, for example, by storing a specific digital fingerprint such as a driver's license, an employee ID card, or a medical examination ticket in the exit device, it can be handled in the same manner as a commuter pass.

[0045]

As described above, when reading the registration number of a driver's license or the number of a credit card and using the data as a management number for using a parking lot, for example, those data are leaked. However, there is a possibility that the data may be misused by a third party, and for that reason, it was necessary to construct a special mechanism for preventing data from being stolen. However, according to the present invention, the read driver's license, etc. The data is immediately replaced with a new identification number different from the original number and stored, and the original data is deleted, so that an important registration number or the like is not used by a third party. Further, since the identification number is generated by using a one-way function such as a hash value, it is not possible to misuse it because the original data cannot be known. Furthermore, since a new identification number is repeatedly generated based on the generated identification number, it is almost impossible to decipher the original driver's license number by any means. The benefits can be demonstrated.

[Brief description of drawings]

FIG. 1 is a block diagram of a card anonymous ID output device according to an embodiment of the present invention.

FIG. 2 is a mechanism block diagram of a card anonymous ID output device according to an embodiment of the present invention.

FIG. 3 is a block diagram of a card anonymous ID output device according to an embodiment of the present invention.

FIG. 4 is a basic flow diagram of a card anonymous ID output device according to an embodiment of the present invention.

FIG. 5 is a configuration diagram of a parking lot management device for various facilities according to an embodiment of the present invention.

FIG. 6 is a configuration diagram of a parking lot management apparatus for various facilities according to another embodiment of the present invention.

[Explanation of symbols]

1 Card anonymous ID output device 2 card reader 3 card feeding mechanism 4 Card detection section 5 Registration number reading section 6 control unit 7 operation part 8 RAM 9 ROM 10 Communication control unit 20 Storage machine 21 entrance gate 22 Delivery machine 23 Departure gate 30 Parking management computer 31 registers 32 hospitals 33 Accounting Department

─────────────────────────────────────────────────── ─── Continued Front Page (51) Int.Cl. ⁷ Identification Code FI Theme Coat (Reference) G06K 17/00 G06K 17/00 S

Claims (6)

[Claims] 1. Personal identification information for reading a driver's license, various credit cards, and other identification information consisting of numbers and symbols, and outputting the personal information to newly identify, collate, and authenticate the individual based on the identification information. The output device is a card data reading means for reading the personal identification information, a card data storage means for storing the personal information read by the card data reading means, and card data stored in the card data storage means. Based on the identification symbol generating means for generating new personal identification information, an identification symbol storing means for storing the new identification symbol generated by the identification symbol generating means, and a new identification symbol stored in the identification symbol storing means. Identification information output means for outputting an identification symbol, and a card for erasing the card data read by the card reading means Card anonymous I characterized by being constituted by data erasing means
D output device. 2. The card anonymous ID output device according to claim 1, further comprising identification information regenerating means for repeatedly generating a new identification symbol based on the newly generated identification symbol. . 3. The card anonymous ID output device according to claim 1, wherein the newly generated identification symbol is a unidirectional character string. 4. A storage device provided at the entrance of the parking lot, a register or accounting section of various facilities, a delivery device provided at the exit of the parking lot, a delivery gate controlled to be opened and closed by the delivery device, and In a parking lot of various facilities equipped with a receipt machine and a register or an integrated management device that comprehensively manages the accounting section and the exit machine, the receipt machine, the register or the accounting section and the exit machine each have a card for processing card information. Each of these card processing devices is equipped with a processing device, and each of these card processing devices reads the personal identification information such as a driver's license, various credit cards, etc., such as numbers and symbols, and the card data reading device. Card data storage means for storing personal identification information, and new personal identification information is generated based on the card data stored in the card data storage means. An identification symbol generation means, an identification symbol storage means for storing the new identification symbol generated by the identification symbol generation means, an identification information output means for outputting the new identification symbol stored in the identification symbol storage means, and A parking lot management apparatus for various facilities, comprising a card anonymous ID output device configured by a card data erasing means for erasing the card data read by the card reading means. 5. The card processing device has a card anonymous ID output device including identification information regenerating means for repeatedly generating a new identification symbol based on the newly generated identification symbol. The parking lot management device for various facilities according to claim 4. 6. The parking facility management apparatus for various facilities according to claim 4 or 5, wherein the newly generated identification symbol has a card anonymous ID output device that is a one-way character string. .