JP2004240706A - Electronic certificate issuing system for discriminating authentication with output certificate - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a certificate issuing system for issuing various certificates such as a resident card or seal impression certificate or family register or duplicate or register estreat or duplicate, which prevents the alteration of the issued certificates. <P>SOLUTION: In this electronic certificate issuing system, a client makes an electronic application by an application client, and a certificate issuing server accepts the application information, and transmits the accepted information to an authenticating server, and the authentication server receives electronic mount information constituted of an alternation preventing function, certificate issue information and the signature of a certificate authority, and adds the certificate contents and electronic signature to the received electronic mount information to transmit it to the application client, and the application client prints the certificate. The authenticating server is provided with electronic mount information to be printed while the alteration preventing function is included. <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
[Field of the Invention]
The present invention relates to an issuing system for issuing various certificates such as a resident's card, a seal certificate, and a family register abstract and a transcript, or a registry register abstract and a transcript.In particular, it is possible to prevent forgery of these issued certificates. Certificate issuing system.
[0002]
[Prior art]
Conventionally, issuance of various certificates such as resident's card, seal certificate, family register abstract and transcript, or register register abstract and transcript, has to go to each issuing organization such as city hall, town hall or legal bureau that issues these various certificates. , By submitting necessary information in a prescribed application form and submitting it.
[0003]
However, when issuing these certificates, it is necessary to go to each issuing organization and submit the application form during the daytime when each of the above-mentioned issuing organizations is accepting the application form. The users who want to receive these applications are often working during the time when these applications can be submitted, and it is difficult to go to each of the above-mentioned issuing organizations. In addition, a certificate issuing system for issuing various certificates has been put to practical use.
[0004]
These certificate issuing systems are usually connected to a management computer that manages each piece of information of the certificate contents described in the certificate, and are capable of data communication with the management computer, and actually print the certificate contents on a predetermined certificate sheet. And an application client for clearing the price of the issued certificate. The application client is supplemented with a certificate sheet for printing the contents of the issued certificate. In the event that these certificate papers are stolen from the storage and the improper certificate contents are printed, it is very difficult to identify the authentic certificate, and it is difficult to detect the improper certificate. There is a problem that enormous damage may occur.
[0005]
In recent years, an invention related to an electronic application system has been published based on the e-government concept. For example, JP-A-2000-334169 describes a storage registration number of a processed document for a series of processes from application to issuance, and An electronic application system and an electronic application processing certification method, in which issuance is certified by a series of processes related to the document by giving the storage registration number of the issued document, are described. There is no guarantee that the certificate is a genuine certificate and has not been tampered with.
[0006]
[Patent Document 1]
JP 2000-334169 A
In addition, since electronic proposals already proposed are based on a network, there is a problem that a certificate can only be obtained online. This problem may occur if the applicant for the certificate wishes to submit a paper attachment as an attachment, or issues a so-called digital debit, or a certificate for people who are not accustomed to operating information devices, such as the elderly or disabled. This is an event that becomes apparent when it is necessary to guarantee the authenticity of the medium certificate offline. The realization of e-government requires providing fair services to these digital divides.
Accordingly, the present invention has been made in view of the above-mentioned problems, and the certificate paper may be a normal printer paper without the need for a special paper, and it is difficult to forge easily. It is an object of the present invention to provide a certificate issuance system that can easily detect that these forged certificates are counterfeit.
[Problems to be solved by the invention]
[0008]
For the final user of the digital certificate, both a paper certificate that is easy to carry and has good readability and is effective in preventing forgery, and an electronic medium that has the speed of issuance and the geographical convenience of issuance Is to provide an electronic certificate that combines the advantages of:
[0009]
[Means for Solving the Problems]
In order to solve these problems, the electronic certificate stamp issuance system of the present invention includes an electronic application unit that sends application information in an application client and a reception unit that receives application information in a certificate issuing server and identifies the applicant. And data for sending the received information to an authentication server connected so as to be able to perform data communication and receiving electronic mount information returned from the authentication server, the electronic mount information including a forgery prevention function, certificate stamp issuing information, and a signature of a certificate authority. Communication means, at least a print issuing means for adding a certification content and an electronic signature to the received electronic mount information and sending it to the application client and printing the certificate at the application client, and an electronic application means for sending the application information at the application client An electronic certificate stamp issuing system comprising:
The certificate issuing server sends the fact that the certificate was issued to the applicant to a third-party certification authority server, for example, the Government Authentication Infrastructure (GPKI), and the applicant confirms that the content of the issued certificate is genuine. The three-party certification authority server can be referred to, and the authentication server includes storage means capable of updating and storing first identification pattern print data and second identification pattern to be printed on a certificate to be issued, and the print issuing means Includes a second identification pattern included in the first identification pattern print data stored in the storage means in a non-visual state and printed on a predetermined certificate sheet; It is characterized in that the included identification pattern is identifiably issued under infrared rays. According to this feature, the paper certificate, which is convenient to carry and has good readability and is effective in preventing forgery, and the geographical convenience of issuance and issuance are provided to the applicant who is the final user of the digital certificate. An electronic certificate that combines the advantages of both electronic media can be provided.
BEST MODE FOR CARRYING OUT THE INVENTION
(Example)
[0010]
The procedure for issuing a certificate stamp will be described based on the overall system diagram of FIG.
The applicant applies electronically to the certificate issuing agency (server) at the issuing window (application client).
Upon receipt of the application, the certificate issuing ministry requests a certificate authority (certification server) to issue an electronic certificate.
The certificate authority issues an electronic mount including a forgery / tamper-proof image, issuance information, and a digital signature of the certificate authority.
The certificate issuing ministry sends the digital certificate stamp to the applicant's client with the electronic certificate application content issued by the certificate authority and a signature.
Output the certificate at the client (issuing window) of the applicant.
The certificate issuing ministry sends the applicant the fact that the certificate was issued to the Government Authentication Infrastructure (GPKI),
The applicant can inquire GPKI online that the content of the issued certificate is genuine.
The applicant can make an online inquiry to the certificate authority that the issued certificate itself is authentic.
The applicant can determine that the issued certificate itself is genuine not on the electronic medium but on the paper medium.
[0011]
The application client 10 used in this embodiment will be described. As shown in FIG. 2, its appearance is similar to a cash machine (ATM) of a bank. An operation indicator 12 for notifying the operation / non-operation of the apparatus, a personal ID capable of identifying the applicant, together with personal information such as the user's name, date of birth and address are recorded on the upper surface of the device. A card insertion slot 14 for receiving an ID card for issuing a certificate issued from a magnetic card issued to a (resident) in advance, and a receipt issuing port 13 for issuing a receipt for the issue price of the certificate are provided.
[0012]
A flat portion facing upward is formed at the center of the housing, and the flat portion is displayed on the liquid crystal display panel 25 on which operation guides and various selection menus are displayed. A display unit 17 in which a transparent touch panel 26 capable of performing menu selection and input by pressing a menu display position is integrated, a bill insertion slot 16 for receiving bills as a certificate issuance price, and a certificate A coin slot 15 for receiving coins as an issue price is provided, and the user can perform various operations and inputs in an interactive manner according to the operation guide displayed on the display unit 17, and a certificate to be issued. The bill can be settled by being inserted into the bill insertion slot 16 or the coin insertion slot 15.
[0013]
In addition, a certificate issuance opening 18 for discharging the issued certificate is provided in front of a portion protruding forward below the flat portion, and a certificate issuance opening is provided below the certificate issuance opening 18. A storage unit 19 is provided for storing the obtained certificate so that the user can take it out.
[0014]
As shown in FIG. 6, inside the application client 10, in addition to a control microcomputer 32 for controlling the operation of the application client 10, the operation indicator 12, the display unit 17, the dedicated line 50a, Are recorded in the communication unit 28 for performing data communication with the management server 80 installed in the city hall via 50b, 50c,..., And in the certificate issuing ID card that is connected to the card insertion slot 14 and received. A magnetic card reader 23 for reading recorded data, a small printer 24 for printing the receipt, and identification and counting of coins inserted in the coin insertion slot 15 and counting and returning coins as change. When identification and counting of the possible coin identification and counting unit 21 and the bills inserted and connected to the bill insertion slot 16 are performed. FIG. 5 shows a banknote identification and counting unit 22 capable of counting and returning banknotes as change, a multi-function printer 20 for printing a certificate to be issued, and a control program in which the control contents of the control microcomputer 32 are described. A storage device 31 that stores data such as an identification pattern library in which a copy-forgery-inhibited pattern data file name is registered in association with a copy-forgery-inhibited pattern ID as shown in the figure, and is connected to the control microcomputer 32 to control each unit. . Can transmit and receive various data to and from the certificate issuing ministry server 80 connected via the dedicated lines 50a, 50b, 50c,. It is possible to update each data of the identification pattern library and the like stored in the storage device 31 and manage the application client 10. You have me.
[0015]
The multi-function printer 20 used in the present embodiment is capable of performing full-color printing of photographic image quality by an ink jet method, and capable of printing with a pigment-based black ink. In addition to printing characters and barcodes, it is possible to print an invisible latent identification pattern using the pigment black ink.
[0016]
The applicant inserts an IC card in which an ID number previously assigned to the applicant, together with personal information such as name, date of birth, address, etc., into the IC card slot of the application client, and is connected to the application client via a network. Electronic application for a certificate to the certificate issuing ministry server. The certificate issuing agency server matches the applicant's ID number and personal information with the ID and attribute information registered in the certificate issuance management database, and if all match, issues an issuance permit number and generates an issuance request file. .
The issuance of the electronic mount is requested by sending the issuance request file to the authentication server of the certificate authority.
[0017]
The authentication server that has received the transmitted issuance request file records the issuance permission number and the applicant ID. Next, a file is created in which a forgery / tamper-proof image is created in a predetermined area for bibliographic items such as the name of the certificate, the address of the applicant, and the name of the applicant. , To the certificate issuing ministry server.
The forgery / falsification prevention image will be described in detail. A storage unit capable of updating and storing first identification pattern data and second identification pattern data to be printed on a certificate issued by the authentication server, wherein the print issuing unit includes: The first identification pattern print data stored in the storage means that includes the second identification pattern in an invisible state is a forgery / falsification prevention image.
[0018]
The certificate issuance ministry server matches the contents of the electronic application from the client with the certificate issuance management database based on the issuance permit number from the electronic mount data sent from the "certificate authority", extracts the application items, and The certificate to be certified is written into the certificate stamp, and an electronic certificate stamp with the digital signature of the certificate issuing agency is generated, issued, and transmitted to the applicant client.
[0019]
The applicant can print the received digital certificate from the client printer as necessary, and the certificate of the paper medium includes the first identification pattern, the visible copy-forgery-inhibited pattern and the second identification pattern. A latent image pattern that cannot be recognized under a visible light source and is identifiable when observed with an infrared viewer is incorporated. By printing the certificate on a predetermined certificate sheet, the certificate issued by the applicant can be determined in a paper medium state without using an electronic device, without using an electronic device. At this time, the printer at the application client may be a commercially available printer as long as it can print with pigment ink. This is because the black component of the first image is composed of black by subtractive color mixture of C, M, and Y, and the halftone dots of the second image are selectively formed in this area and printed with black pigment ink. is there.
When it is desired to determine whether a certificate issued by this system is genuine or not, the authenticity can be determined simply by visually checking with an infrared viewer or inputting an image with an infrared scanner.
[0020]
When the certificate issuance ministry server generates the issuance request file, it simultaneously transmits bibliographic items, such as the authorization number, the applicant ID, the applicant's address, and the name, to the "Government Authentication Infrastructure (GPKI)" via the network. I do.
[0021]
The applicant uses the IC card to input bibliographic items such as the applicant ID, name, address, etc. from the application client, and at the same time, inputs the certificate's issuance ID by keying to the “Government Authentication Infrastructure (GPKI)”. It is possible to inquire online that the issued certificate itself is authentic.
[0022]
The applicant entered the bibliographic items such as the applicant ID, name, address, etc. using an IC card from the application client and, at the same time, entered the certificate issuing ID, and was issued to the "certificate authority". You can query online that the mount itself is authentic.
[0023]
The applicant can determine that the issued electronic certificate itself is genuine in a state of being output on a paper medium.
[0024]
The special gradation image generation method which is an example of the forgery falsification prevention image in the present invention will be described. As described in Japanese Patent Application No. 2001-331891 by the present applicant, cyan, which is used in general commercial printing, This is a halftone dot generation method using magenta, yellow, and black process four-color inks, which cannot be duplicated by a current photoengraving apparatus and can recognize an invisible image by a commercially available apparatus. Cyan, magenta, and yellow transmit infrared light, and black absorbs infrared light. By utilizing this phenomenon, it is possible to form a special latent image in which the first image can be seen under a normal light source but the second image can be recognized when observed with an infrared camera or the like.
In FIG. 4, a halftone image P <b> 1 arranged by circular dots in a first identification pattern area for printing halftone dots for expressing continuous tone is printed in three colors of cyan, magenta, and yellow. The dot pattern P2 arranged with circular dots is printed with one color of black ink in the identification pattern area of, and the negative portions of the circular dots of the dot image P2 are arranged with solid colors of cyan, magenta and yellow. .
In the printed matter configured as described above, as shown in FIG. 8, the first image a can be seen under a normal light source, but a special name that can recognize the second image b when observed with an infrared camera or the like constitutes a halftone dot image. It is possible to do.
[0025]
Further, a special halftone dot having two functions of gradation and design, as disclosed by the present applicant in Japanese Patent Application Laid-Open No. H11-268228, is used for a falsification prevention image in the present invention. Alternatively, a colorless or colored fluorescent ink may be used to print the second identification pattern to form an image that is difficult to recognize under a normal light source and can be recognized under a specific wavelength light source.
As described above, the present invention has been described with reference to the drawings. However, the present invention is not limited to these embodiments, and it goes without saying that changes and additions without departing from the spirit of the present invention are included in the present invention. .
[0026]
In the above embodiment, a tax payment certificate was taken as an example of a certificate.However, in addition to the above-mentioned seal certificate, family register excerpt / transcript, registry register excerpt / transcript, certificates such as insurance card, license etc. It goes without saying that it is included in the subject of the invention.
[0027]
【The invention's effect】
The present invention has the following effects.
(1) According to the first and second aspects of the invention, even if the certificate paper is stolen from the application client, the certificate paper is not printed with an identification pattern such as a tint block in advance. Since the identification pattern is printed by the printing and issuing means when the certificate is issued, even if the certificate paper is stolen, it is possible to prevent the certificate from being easily forged.
(2) For the applicant who is the final user of the digital certificate, a paper certificate that is convenient to carry, has excellent readability, and is effective in preventing counterfeiting, and an electronic document that has the speed of issuance and the geographical convenience of issuance An electronic certificate that combines the advantages of both media can be provided. (3) The personal attribute of the certificate can be proved by printing an invisible identification pattern that differs for each applicant.
[0028]
[Brief description of the drawings]
FIG. 1 is an overall view of a system according to the present invention.
FIG. 2 is a diagram showing an overview of an application client.
FIG. 3 is a diagram illustrating a configuration of an authentication server.
FIG. 4 is an explanatory diagram of a special gradation image generation method that guarantees authenticity of a certificate on a paper medium in the present invention.
FIG. 5 is a diagram showing a file configuration of an identification pattern library in the authentication server.
FIG. 6 is a diagram showing an internal configuration of an application client.
FIG. 7 is an explanatory diagram of an output of a tax payment certificate which is one of the embodiments of the present invention.
FIG. 8 is a diagram showing a state when a certificate created by the present invention is determined to be authentic.
[Explanation of symbols]
1. Halftone dots forming the first identification image P1 Halftone dots forming the negative image of the second identification image P2 Halftone dots P1 forming the second identification image P2 First identification image P2 Second identification Image 10 Issuing device 12 Operation indicator 13 Receipt issuing port 14 Card slot 15 Coin slot 16 Bill slot 17 Display unit 18 Certificate issuing port 19 Reservoir 20 Multifunctional printer 21 Coin identification and counting unit 22 Bill identification and counting unit 23 Magnetic Card reader 24 Small printer 25 Liquid crystal display panel 26 Transparent touch panel 28 Communication unit 31 Storage device 32 Control microcomputer 50a Dedicated line 50b Dedicated line 50c Dedicated line 80 Management server 81 Central processing unit (CPU)
82 input device 83 communication interface 84 RAM
85 Storage device 86 Real-time clock (RTC)
87 data bus 90 communication device

Claims (2)

An electronic application means by which the applicant sends the application information at the application client; a reception means for accepting the application information at the certificate issuing server and identifying the applicant; and an authentication server connected to the data communication so that the received information can be transmitted. A data communication means that receives the electronic mount information consisting of the forgery prevention function, certificate issuing information and the signature of the certificate authority, which is sent and returned from the authentication server, and adds the certification contents and electronic signature to the received electronic mount information. An electronic certificate issuance system comprising at least a print issuing unit for sending a certificate to the application client and printing the certificate in the application client, and an electronic application unit for sending the application information in the application client,
The certificate issuing server sends the fact that the certificate has been issued to the applicant to the third party certification authority server, and the applicant refers to the third party certification authority server that the content of the issued certificate is genuine. An electronic certificate stamp issuance system, wherein the authentication server is provided with electronic mount information that can be printed including a forgery prevention function. An electronic application means by which the applicant sends the application information at the application client; a reception means for accepting the application information at the certificate issuing server and identifying the applicant; and an authentication server connected to the data communication so that the received information can be transmitted. A data communication means that receives the electronic mount information consisting of the forgery prevention function, certificate issuing information and the signature of the certificate authority, which is sent and returned from the authentication server, and adds the certification contents and electronic signature to the received electronic mount information. An electronic certificate issuance system comprising at least a print issuing unit for sending a certificate to the application client and printing the certificate in the application client, and an electronic application unit for sending the application information in the application client,
The certificate issuing server sends the fact that the certificate has been issued to the applicant to the third party certification authority server, and the applicant refers to the third party certification authority server that the content of the issued certificate is genuine. The authentication server includes a storage unit capable of updating and storing first identification pattern print data and a second identification pattern to be printed on a certificate to be issued, wherein the print issuing unit stores the first identification pattern print data and the second identification pattern in the storage unit In the first identification pattern print data, the second identification pattern is included in an invisible state and printed on a predetermined certificate sheet, and the identification pattern included in the second invisible state is detected under infrared light. An electronic certificate issuance system for recognizing an electronic certificate.

Images