JP2003242268A - Personal information registration utilizing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To store facial photograph data in a school to be used when an examinee takes examinations of a plurality of schools and limit a field of usage of a facial photograph to examinations. <P>SOLUTION: In the personal information registering and utilizing system, pieces of personal information are registered from a plurality of communication terminals via a communication line in a personal information storage connected to a web server and they are used. The personal information storage is provided with a storing means for storing the personal information, an outputting means for reading and outputting the personal information, and a control means for controlling the storing means and the outputting means. The communication terminal is provided with an inputting means for inputting at least the personal information and a sending and receiving means for sending and receiving the personal information. The personal information storage has registering, rewriting and reading means for the personal information sent from the communication terminal and an issuing means for a personal information registration number. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system for registering and using personal face image information as personal information together with personal data in a third party organization.

[0002]

2. Description of the Related Art Conventionally, when an examinee attaches a facial photograph to an application document and submits it, the test organizer side who receives the application form
A lot of time was spent to attach the attached person's face photo to the related documents. On the other hand, the deadline for application documents was set just before the test date, so the test organizer had to mail the examination voucher in a short period of time. In addition, when the examination is completed, it is necessary to notify the successful applicants in a short period of time, such as notification of passing, confirmation of admission payment of students who decided to enroll, preparation of photo admission register, preparation of photo student ID, etc. The department in charge of the school was a heavy burden. To improve the efficiency of such test-related work, JP-A-8-21226
Japanese Patent No. 3 discloses a technique for converting facial photograph data into electronic data.

[0003]

Problems to be Solved by the Invention
According to the technology disclosed in Publication No. 3, it is provided by the examinee in various operations that occur in connection with examinations such as university entrance exams, such as acceptance of application forms, enrollment list, and student ID issuance. The aim is to improve the efficiency of test-related work by converting facial photograph data into electronic data and submitting it online. However, the present invention is intended for the case where the examinee takes the examinations at a plurality of schools, the facial photograph data is stored in the schools, and the application field of the facial photograph is limited to the examination.

[0004]

In order to solve the above problems, the invention according to claim 1 of the personal information registration / use system of the present invention is a personal information storage device connected to a web server, a communication line. A system for registering and using personal information from a plurality of communication terminals via a personal information storage device, wherein the personal information storage device includes storage means for storing the personal information, output means for reading and outputting the personal information, storage means, The communication terminal includes control means for controlling the output means, the communication terminal includes at least the input means for inputting the personal information, and the transmitting / receiving means for transmitting / receiving the personal information, and the personal information storage device stores the personal information transmitted from the communication terminal. It is characterized by having a registration, rewriting and reading means and a means for issuing a personal information registration number.

The invention described in claim 2 is the same as claim 1.
In the invention described in (3), the personal information is personal face image information to which personal data is attached.

The invention described in claim 3 is the same as claim 1
In the invention described in (3), the input means of the communication terminal inputs the personal information registration number registered in the personal information storage device in a collatable manner in advance to access the personal information storage device on the input screen of the web server. It is characterized by.

The invention according to claim 4 is the same as claim 1
In the invention described in (3), the personal data and the face image information input by the input means of the communication terminal are input in the input frame of the electronic form input screen provided by the web server.

The invention described in claim 5 is the same as claim 1.
(4) In the invention described in any one of (4) to (4), the personal information transmitted by the transmitting / receiving means of the communication terminal is encrypted by an encryption key that is changed as appropriate and transmitted.

[0009]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A personal information registration / use system of the present invention will be described below with reference to the drawings. Figure 1
FIG. 2 is a diagram for explaining devices constituting the system and means provided in each device, FIG. 2 is a diagram for explaining various kinds of information transmitted / received via a communication line, and FIG. 3 is a diagram for explaining communication lines from a communication terminal. FIG. 4 is a diagram for explaining a procedure for registering personal information in the personal information storage device through FIG.
FIG. 5 is a diagram for explaining a procedure for a user to obtain face image information from a personal information storage device using a communication terminal.
FIG. 6 is a diagram for explaining the first embodiment, FIG. 6 is a diagram for explaining the second embodiment, and FIG. 7 is a diagram for explaining the third embodiment.

An apparatus constituting the personal information registration / use system of the present invention will be described with reference to FIG. Connected on the communication line 3 are a plurality of communication terminals 2 for registering, changing, and reading personal information, and a personal information storage device 1 for receiving personal information from these communication terminals and registering the personal information. There is. The communication terminal 2 has a keyboard for inputting character information such as personal data, a display for visually confirming the input information, a flexible disk drive for recording the input information, and a connection terminal for connecting with various external devices. Is provided. Personal information registration of the present invention
In the utilization system, in order to register a face image of an individual, a photographing means for capturing the face image, a copying means, and an output means for outputting the input image information to a communication terminal or the like are required. As a shooting method for capturing the former face image,
There are methods using a digital camera and a video tape recorder, which directly shoot a face as an object and record it in a memory.
Further, as a copying means, there is a method of printing a face image on photographic paper once and taking out the face image from the photographic paper, using a scanner or copying. In either method, face image information is recorded as digital information.

In recent years, not only character information but also image information has been digitized because it is convenient in terms of transmission using a storage communication line. The digitized information is recorded and stored in a magnetic recording medium such as a flexible disk, a hard disk, a VTR, an optical recording medium such as a magneto-optical disk, a semiconductor memory such as an IC chip, or the like. As described above, when the image information is digitized, it is convenient because it can be taken into a PC (personal computer) or the like and trimmed, reduced, or enlarged on the display. In the case of a qualification certificate or a face image to be attached to a certificate as in this system, the storage area does not change significantly for each individual because the size to be used is approximately fixed, and it is easy to handle.

On the other hand, the image information recorded in the above-mentioned storage medium can be taken into the hard disk of the PC by using the flexible disk drive of the PC or the adapter from the PC card connector. The captured face image can be enlarged / reduced and trimmed in the PC, and for example, it is also possible to trim the group image from the group photograph to make it a certificate photograph only for the individual.

By accessing the home page of the personal information registration agency on the Internet (3), opening the face image registration page, and following the instructions on the screen, personal data required for face image registration, such as name, age, current address required for contact, Enter the phone number etc. in the designated space. Next, the face image is read out from the file stored in the hard disk and pasted on the face image registration page. After entering the necessary information, specify the payment method for the registration fee, sign a simple agreement between the personal information registration agency and the user, and complete the registration procedure. The transmitted personal information is encrypted by the encryption key of the user and the encryption key of the personal information registration agency, and stored in the personal information storage device 1 via the web server of the personal information registration agency. The personal information registration number is sent as a proof of the completion of storage.

Various information transmitted and received through the communication line will be described with reference to FIG. In the following description of the present invention, the key used for encryption is the public key of the public key system and the secret key, but it is not particularly limited thereto. The user uses the communication terminal 2 to obtain the public key certificate of the public key method from the certificate authority 6. In addition, the certification photograph taken by the digital camera is stored in the photograph image file of the communication terminal. For the communication terminal used by the user, open the home page of the personal information registration organization, select the personal information (face image information, personal data) from the input frame on the personal information input page, and
Enter the public key certificate. Confirm the entered information and make a digital signature. The entered personal information and public key certificate are encrypted with the private key of the user, received by the web server of the personal information registration organization, and the public key certificate proves that the information was sent by the principal. Personal information and a public key are stored in the personal information storage device. When the personal information and the public key are stored in the personal information storage device of the personal information registration organization, the personal information registration number is attached by a random number or the like. This personal information registration number is sent as a proof of personal information registration to the user, because it is used as a search code when submitting a facial image later.

Since the user has acquired the qualification, the user is to submit the registered face image to the submission destination 5. I accessed the home page of the personal information registration organization mentioned above, opened the personal information issuance request page, and entered the personal information registration number in the input box. In order to encrypt the personal information registration number, I clicked the electronic signature field and signed. The personal information storage device reads the personal information using the personal information registration number, encrypts the personal information, and sends the encrypted personal information to the user.

The user confirms the content of personal information and submits it to 5
The personal information (face image) was encrypted and sent to, and the application procedure was completed. The submission destination cited here may be a university, a company, or a government office, depending on the user. The target for which the face image is used changes depending on the user. For example, in the case of a university, it may be a student ID or staff ID. In the case of a company, it may be an employee ID card, a credit card, fitness, golf membership card, or the like. In the case of a government office, it may be a license or passport.
In addition, the submission route may be requested via the personal information registration agency 1, in which case the submission destination is 5
Submit personal information including face image to.

The personal information must always be the latest information and can be rewritten within a fixed period. For this,
During the personal information registration period, the personal information maintenance fee is paid as a personal information storage fee. However, if there is no request from the user, the personal information registration number acquired first will not change. The personal information registration authority 1 is given the authority to independently verify whether the public key certificate applied by the user 2 has been officially authenticated, and confirms it if necessary.

With reference to FIG. 3, a procedure for registering personal information in the personal information storage device via the communication line from the communication terminal and acquiring the personal information registration number will be described. Although partially overlapping with the description of FIG. 2, first, the user presents the private key S2 generated by the certificate authority and the public key (P2) together with the address, name, etc. of the person, and obtains the public key certificate ( S301). The personal information registration organization attaches the public key P1 (S307) and publishes the input screen of the home page encrypted with the secret key S1 (S308). The part to be encrypted may be encrypted over the entire screen, or only the input frame may be encrypted. The user opens an input screen (S302) and inputs personal information (S303). For personal information, access the home page of the personal information registration organization and enter only the instructed contents in the input box on the input screen. A program is linked to the input box, and if you deviate from the procedure as instructed, you will be asked to rewrite. As a result, the procedure from the registration of personal information to the issuance of the information is facilitated.

First, as personal data required for personal information registration, for example, the name of the applicant (user), the date of birth, the current address, and in some cases the occupation, etc. are input. Also, input the face image of the applicant from the flexible disk drive of the communication terminal. The input personal data and face image information (A) are associated with each other and stored in the input screen. Also, the applicant is the public key P2 certified by the certification authority.
Attach (C) and public key certificate (D). The public key and the secret key paired with the public key are often stored in a storage unit such as an IC card. In particular, the secret key (S2) is stored in the memory of the IC card in an unreadable manner. . Complete the information that must be entered (S3
04) and the program of the input screen in the electronic form obtains a hash digest (also called a hash value) (B) of the personal data and the face image information (A), and the hash digest (B) and the public key. The certificate is encrypted with the user's private key (S2) (S305), and the entire transmission information including personal data and face image information (A) is encrypted with the public key P1 of the personal information registration agency. And sends it to the personal information registration agency web server (S306).

The personal information of the user transmitted via the communication line is received by the web server of the personal information registration organization, and all the encrypted information is decrypted by the private key S1 of the personal information registration organization (S309). . With the decrypted public key P2,
The encrypted personal data, the hash digest (B) of the face image information (A), and the public key certificate are decrypted (S31).
0). The hash digest (B) of the personal data and face image information (A) is compared with the hash digest of the personal data and face image information (A). If it is proved to be correct, the personal data and face image information (A),
The public key P2 (C) is registered (S311). When the registration work is completed, the personal information storage device generates a personal information registration number and attaches it to the registered personal data, face image information (A), and public key P2 (C). Also, a message indicating that registration has been completed and a personal information registration number are transmitted to the input page of the communication terminal connected by the communication line (S312). The communication terminal stores the personal information registration number in a predetermined file and closes the personal information input page of the personal information registration organization (S313). The personal information storage device of the personal information registration organization completes the registration work (S314). In practice,
In step 312, the personal information storage device of the personal information registration agency
You may finish the registration process with. In that sense, S313,
S314 is indicated by a broken line.

A procedure for a user to obtain registered personal information (face image information) from a personal information registration agency will be described with reference to FIG. Use the user's communication terminal to access the web server of the personal information registration organization and open the personal information issuance request page. The personal information registration number is input in the input frame, and a face image (personal information) transmission request is made (S401). Although not described, the transmission information including the personal information registration number to be transmitted is encrypted and transmitted by the above-mentioned procedure. The web server of the personal information registration organization receives the personal information registration number, decrypts it with the public key P2, reads the face image information of the user with this personal information registration number, encrypts it with the public key P2, and further with the secret key S1. Encrypt and send to user (S4
03). The user decrypts the face image information with the attached public key P1, confirms that the information was transmitted correctly, and further decrypts the personal information including the face image information with the client's secret key S2.

(Embodiment 1) Referring to FIG. 5, a face image submission destination is requested and a face image of a user (hereinafter referred to as a client in Embodiments 1, 2, and 3) is transmitted from a personal information registration organization. An example will be described. The client enters the code of the personal information registration agency on the face image request page of the home page of the personal information (hereinafter referred to as face image) submission destination, and further enters the client's personal information registration number and client information, The personal information registration number and the client information were encrypted with the client's secret key S2, and the whole was encrypted with the public key P3 and sent to the face image submission destination. The client receives the transmission contents from the client (S501). Of the information received from the client, the face image submission destination encrypts the personal information registration number encrypted by the client's private key S2 with the submission destination private key S3, and the public key P
3 was attached and transmitted to the personal information registration agency designated by the client (S502). The personal information registration agency decrypts the received information with the public key P3, retrieves the personal information (face image information) of the client who is registered with the personal information registration number, decrypts it with the public key P2, and uses the public key P3. The encryption destination is transmitted to the submission destination (S503). The submission destination receives the transmission information from the personal information registration agency, decrypts the client's personal information (face image information) with the secret key S3 (S504), and requests. The face image of the person and the client information sent from the client, for example, the client information requested by the recipient is used (S50
5).

(Embodiment 2) With reference to FIG. 6, an embodiment in which the face image of the user (client) is transmitted from the user to the submission destination will be described. The submission destination generates the public key P3 (S60
7) Then, the input screen of the homepage encrypted with the secret key S3 is made public (S608). The part to be encrypted may be encrypted over the entire screen, or only the input frame may be encrypted. The client opens the entry screen of the submission destination (S
602), and input the personal data and face image information (A) acquired in FIG. 4 according to the instruction on the input screen. The applicant also attached the public key P2 (C) certified by the certification authority and the public key certificate (D). When the input of the information that should be input is completed (S604), the program of the input screen converted into the electronic form obtains the hash digest (B) of the personal data and the face image information (A). This hash digest (also called a hash value) (B),
And the public key certificate (D) is encrypted with the client's private key S2 (S605). The hash digest (also called a hash value) (B) encrypted in S2, the public key certificate (D), personal data and face image information (A), and the public key P.
2 (C) was encrypted with the public key P3 of the submission destination and transmitted to the submission destination (S606). The submission destination decrypts the received information with the private key S3, and the public key certificate with the attached public key P2,
Hash digest (also called hash value) (B)
And a hash digest of personal data and face image information (A) and the decrypted hash digest (B)
Was confirmed to be in agreement, and the validity of the public key was confirmed by the public key certificate, and the personal data and face image information (A) acceptance work was completed (S609).

(Embodiment 3) With reference to FIG. 7, an embodiment in which the user requests the personal information registration institution to send the face image of the user (hereinafter referred to as the client of this section) to the submission destination will be described. . The client is the personal information (hereinafter referred to as face image) submission request page of the personal information registration agency, the name of the submission destination (F),
The client information requested by the submission destination and the client's personal information registration number were entered according to the instructions in the input box, encrypted with the public key P1 of the personal information registration agency, and transmitted.
The personal information registration agency web server receives the request information transmitted from the client (S701). The received information is decrypted with the private key S1 of the personal information registration agency (S70
2). The personal information (I) stored in the personal information storage device is read by the personal information registration number (S703). The personal information registration organization opened the personal information input screen from the home page of the submission destination, entered the client information and personal information (face image information), and encrypted it with the private key S1 of the personal information registration agency. The public key P1 is attached to the encrypted information, encrypted with the public key P3 of the submission destination, and transmitted to the submission destination terminal (S
705). The submission destination terminal receives the transmission information from the personal information registration agency, decrypts the personal information (face image information) of the client with the private key S3, and further decrypts it with the attached public key P1 to request the client. The face image and the client information sent from the client were used (S706).

[0025]

According to the present invention, it is not necessary to take a face photograph every time a certificate is issued or a membership card is issued, and it can be used as an authenticated face image. Moreover, since it is digitalized, the secondary use of data is easy. Also, a personal information registration organization that stores and manages face images can update the face images at a small cost. Also,
It becomes possible to provide the date of use and the list of recipients for users who want a list of usage history.

[Brief description of drawings]

FIG. 1 is a diagram for explaining devices constituting a system and means provided in each device.

FIG. 2 is a diagram for explaining various types of information transmitted and received via a communication line.

FIG. 3 is a diagram for explaining a procedure for registering personal information in a personal information storage device from a communication terminal via a communication line.

FIG. 4 is a diagram illustrating a procedure in which a user obtains face image information from a personal information storage device using a communication terminal.

FIG. 5 is a diagram for explaining the first embodiment.

FIG. 6 is a diagram for explaining Example 2;

FIG. 7 is a diagram for explaining a third embodiment.

[Explanation of symbols]

1 Personal information storage device, personal information registration agency 2 communication terminals, users 3 communication lines 4 Personal information 5 submission destination 6 Certificate Authority

Claims (5)

[Claims] 1. A system for registering and using personal information from a plurality of communication terminals via a communication line in a personal information storage device connected to a web server, wherein the personal information storage device stores the personal information. Storage means for storing,
An output unit for reading and outputting personal information, a storage unit, and a control unit for controlling the output unit are provided, and the communication terminal includes at least an input unit for inputting the personal information and a transmitting / receiving unit for transmitting / receiving the personal information. The storage device has means for registering, rewriting and reading personal information transmitted from the communication terminal and means for issuing a personal information registration number.
Utilization system. 2. The personal information registration / use system according to claim 1, wherein the personal information is personal face image information to which personal data is attached. 3. The input means of the communication terminal inputs the personal information registration number registered in the personal information storage device in advance so that it can be collated in order to access the personal information storage device, into the input screen of the web server. The personal information registration / use system according to claim 1. 4. The individual according to claim 1, wherein the personal data and the face image information input by the input means of the communication terminal are input in an input frame of an electronic form input screen provided by the web server. Information registration / use system. 5. The individual according to any one of claims 1 to 4, wherein the personal information transmitted by the transmitting / receiving means of the communication terminal is encrypted by an encryption key that is appropriately changed and transmitted. Information registration / use system.