JP2004341944A - One-time pin number system and collation device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a one-time PIN number system and collation device which stop the illicit use of a card and producing the card at low cost. <P>SOLUTION: The collation device inputs user information, changes, on receipt of a PIN number issuing request from a portable terminal, a PIN number generated according to the user information, assigns a new PIN number to use specification data, and transmits them to the portable terminal. The user information read from the card and the PIN number received by the portable terminal are transmitted to the collation device. The collation device collates the received user information and PIN number with the user information and PIN number inputted to the collation device. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a single-use password system and a collation device that use a portable terminal via a network when a card is used.
[0002]
[Prior art]
Conventionally, after reading card information with a card reader, inputting or signing a personal identification number verifies the identity of the person and permits the use of the card. There is a problem that the personal identification number is easy to be remembered by the user and is easily detected, and that it is difficult to verify the identity of the person from the handwriting of the signature, so that the card is illegally used.
[0003]
As a prior art example, "a card settlement method and system using a portable information terminal" which realizes convenience by realizing a settlement service by an IC card with a settlement function using a portable information terminal having an IC card read / write function. (For example, see Patent Document 1). Further, there is a “transaction mediation system, transaction mediation device, transaction mediation method, recording medium, and program” for improving the security of commercial transactions performed via a network (for example, see Patent Document 2). Further, there is an “information issuing system” that can improve security and easily obtain and issue necessary information (for example, see Patent Document 3).
[0004]
[Patent Document 1]
JP 2002-163584 A [Patent Document 2]
JP 2002-245383 A [Patent Document 3]
JP, 2002-342285, A
[Problems to be solved by the invention]
However, the invention described in Patent Literature 1 requires a service center including an authentication server for authenticating a user. Similarly, the invention described in Patent Literature 2 also requires a transaction to determine the validity of a user. Therefore, installation costs and information transmission / reception cannot be simplified. In addition, the inventions described in Patent Documents 1 to 3 all authenticate a user and issue a one-time password only when the authentication is successful, and issue a new password when the authentication is not successful. Since the password is not protected, the previous password may be used illegally.
[0006]
SUMMARY OF THE INVENTION The present invention has been made in view of the above circumstances, and in a system for collating a user with a personal identification number and a user code such as a card number and a user ID, a database is stored when a personal identification number is requested from a mobile terminal. It is another object of the present invention to provide a one-time use password system and a collation device that generates a password that is valid only for one use and automatically changes the password every time the card is used.
[0007]
[Means for Solving the Problems]
In order to achieve the above object, a one-time use personal identification number system according to claim 1 includes a portable terminal that performs network communication, a card reader that reads card information, and a verification device that verifies the personal identification number of the card via a network. In a single use personal identification number system to be connected, a collating device is a user information input means for inputting first user information, and a collating device is for inputting a personal identification number based on the input first user information. A password generating means for generating, a connecting means for connecting the mobile terminal to the verification device via the network, a password issuing instruction means for instructing the verification device to issue a password to the verification device, and The password changing means for changing the password generated by the number generating means, and the collating device transmits the changed password to the portable terminal via the network. A personal identification number transmitting means, a personal digital assistant receiving and storing a personal identification number by the portable terminal, and the card reader reading second user information from the card, and providing the second user information Second user information transmitting means for transmitting the usage data of the card and the card to the verification device via the network, and a second means for transmitting the stored personal identification number to the verification device via the network by the portable terminal. The password transmitting means, the second user information received from the card reader by the verification device, the password received from the portable terminal, the first user information registered in the verification device, and the changed password A collating means for collating the number, a collating apparatus for writing usage data of the card received from the card reader into utilization statement data of the collating apparatus, and a card reader. And a license information display means for receiving the license information of the card from the combination device via the network and displaying the license information. And when a request for issuing a password is made, a new password is generated and added to the usage statement.
[0008]
The one-use PIN code system according to claim 2 is the one-use PIN code system according to claim 1, wherein when the portable terminal connects to the collation device via a network, the first user information registered in the collation device. If not, an error screen is displayed on the mobile terminal.
[0009]
According to a third aspect of the present invention, in the one-use password system according to the first aspect, in the second password transmitting means, the password transmitted to the verification device is input from a card reader. And
[0010]
According to a fourth aspect of the present invention, in the one-use password system according to the first aspect, in the second password transmission means, the password transmitted to the verification device is transmitted to the infrared transmission means provided in the portable terminal and downloaded. It is characterized by being inputted by any one of means.
[0011]
According to a fifth aspect of the present invention, there is provided a one-time use personal identification number system according to the first aspect, wherein the collating device disables use of a personal identification number having usage data.
[0012]
According to a sixth aspect of the present invention, in the one-use PIN number system according to the first aspect, the collation device stores portable terminal information and permits connection only to registered portable terminals.
[0013]
A one-use password system according to claim 7 is the one-use password system according to any one of claims 1 to 6, wherein the password is a password.
[0014]
In the one-use password system according to the eighth aspect, in the one-use password system according to the first aspect, the portable terminal displays or does not display the password received by the first password transmitting unit. It is characterized by the following.
[0015]
The one-use PIN code system according to claim 9 is the one-use PIN code system according to claim 1, wherein the first user information and the second user information include personal information of the user, portable terminal information, and card number. It is characterized by including at least one of them.
[0016]
In the one-use PIN code system according to claim 10, in the one-use PIN code system according to claim 1, the collation device collates the portable terminal based on the first user information when the portable terminal connects to the collation device. It is characterized by the following.
[0017]
The one-use password system according to the eleventh aspect is characterized in that in the one-use password system according to the first aspect, the mobile terminal displays a card number input screen when the connection to the collation device is permitted.
[0018]
A one-use password system according to a twelfth aspect of the present invention is the one-use password system according to the first or eleventh aspect, wherein the collation device collates the card number after receiving the instruction to issue the personal identification number.
[0019]
According to a thirteenth aspect of the present invention, there is provided a one-use password system according to the first aspect, wherein the password changing means discards the password generated in advance by the password generating means and generates a new password. It is characterized by the following.
[0020]
According to a fourteenth aspect of the present invention, in the one-use password system according to the first or fifth aspect, the use data includes at least one of a card use date, date and time, and a use amount. I do.
[0021]
The one-use password system according to claim 15 is the one-use password system according to claim 1, wherein the usage statement data is at least one of a management ID for managing the usage statement, user information, a password, and usage data. It is characterized by comprising.
[0022]
17. A collating apparatus according to claim 16, wherein the portable terminal for performing network communication and a card reader for reading card information are connected to a single-use password system connected via a network, and wherein a user of the card is used. An input means for inputting information, and user information inputted from the input means are registered, and a password for generating and registering a personal identification number based on the user information is transmitted and received between the mobile terminal and the card reader. Transmitting and receiving means, and collating means for collating the personal identification number received from the portable terminal and the user information received from the card reader with the personal identification number and the user information registered in the database.
[0023]
A collation device according to a seventeenth aspect is the collation device according to the sixteenth aspect, wherein the database has a password generation unit that generates an arbitrary password and a password change unit that changes a used password. It is characterized by.
[0024]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.
[0025]
A description will be given of an identity verification when a credit card is used, which is an embodiment of the present invention. FIG. 1 shows the overall configuration of the system as the configuration of the embodiment.
[0026]
The mobile terminal 1 has a character / symbol input function, a WEB screen display function, and a voice / information transmission / reception function. The receiver 2 has a function of receiving information transmitted by the portable terminal 1 by wire or information transmitted by radio. The transmitting / receiving device 4 has a function of transmitting information of the receiver 2 and information of the reading device 3 to the transmitting / receiving unit 7, a function of receiving information transmitted from the transmitting / receiving unit 7, and a function of displaying a license. The network 5 is a communication line such as a telephone line. Here, the receiver 2, the reading device 3, and the transmitting / receiving device 4 may be functions included in a card reader, or may be independent devices.
[0027]
FIG. 2 shows the configuration of the matching system 6. The transmission / reception unit 7 has a function of transmitting / receiving information to / from the mobile terminal 1 and a function of displaying a WEB screen on the mobile terminal 1. The database 9 (hereinafter DB9) has a function 9-1 for generating an arbitrary password and a function 9-2 for automatically changing the password.
[0028]
Next, the operation of the embodiment of the present invention will be described. First, user information such as personal information and a mobile phone number is input to the DB 9 via the input unit 10. Next, the DB 9 generates a password as a part of the user information based on the input information described above.
[0029]
Next, the mobile terminal 1 connects to the collation device 6 via the network 5. At this time, a check is made to see if the information matches the user information registered in the DB 9. If not, an error screen is displayed on the mobile terminal. If they match, the connection of the mobile terminal is permitted, and the menu screen is displayed on the mobile terminal.
[0030]
The card user inputs the card number from the screen of the mobile terminal. When the mobile terminal 1 instructs the issuance of a password, the DB 9 discards the previously generated password, generates a new password, and changes the password. At this time, the generated new personal identification number is assigned to the usage specification management data of the collation device 6. The usage specification management data includes (1) a specification management ID for managing the specification, (2) user information such as a card number, (3) a password, and (4) usage data such as a usage date, date and time, and a usage amount. .
[0031]
Next, the collation device 6 transmits the generated new password to the portable terminal 1 from the DB 9 via the collation unit 8 and from the transmission / reception unit 7 via the network 5. Then, the mobile terminal 1 confirms or stores the new password.
[0032]
Next, the user information of the card is read by the reading device 3, and the user information is sent from the transmitting / receiving device 4 to the collating unit 8 via the network 5. At this time, card use data including the card use date, date and time, and use amount are also transmitted at the same time.
[0033]
On the other hand, the personal identification number stored in the mobile terminal 1 is received by the receiver 2, or is input by the card user using the keyboard while viewing the personal identification number displayed on the mobile terminal. Then, the data is transmitted from the transmission / reception device 4 to the transmission / reception unit 7 via the network 5 and transmitted to the collation unit 8.
[0034]
Next, the user information received from the reading device 3 and the personal identification number received from the mobile terminal 1 are compared with the user information registered in the DB 9 and the personal identification number of the usage specification management data having no usage data. If the verification is successful, the use of the card is permitted, and the received card use data is written in the use statement. Then, the license information of the card is transmitted from the transmission / reception unit 7 to the transmission / reception device 4 via the network 5, and the transmission / reception device 4 displays the license information.
[0035]
Next, when using the card at another occasion different from the above, the portable terminal 1 is again connected to the collation device 6 and receives the personal identification number. At this time, if the personal identification number is stored in the portable terminal 1, the previous personal identification number is discarded and confirmed or stored.
[0036]
As described above, according to the embodiment of the present invention, only the mobile terminal registered in the collation device 6 can be used, and the password changes every time. Therefore, it is not necessary to remember the password and even if the password is stolen. There is no misuse. The use of the card can be stopped by stopping the use of either the mobile terminal 1 or the card. In addition, the function of preventing unauthorized use of a card (posting of a photo, embedding of an IC chip, etc.) can be eliminated, and the card can be manufactured at low cost. Further, at the time of generating the personal identification number, it is only necessary to avoid duplication with a personal identification number having no use data, so that duplication of the personal identification number can be easily avoided. In addition, since it is displayed and entered on the mobile terminal, there is no limit on the number of digits in the PIN, and the number of digits in the PIN can be changed each time.Also, alphabets other than numbers can be used for the PIN And the estimation of the personal identification number can be made difficult.
[0037]
Further, as another embodiment of the present invention, the present invention can be applied to a general system for performing personal identification using a password instead of a password. As specific examples, (1) internet shopping, (2) use of a credit card, (3) entry into a security-controlled room, and the like can be considered.
[0038]
The password is obtained according to the following procedure. First, a URL is input on the mobile terminal, and a WEB screen for inputting a card number is displayed on the screen of the terminal. At this time, an error screen is displayed for mobile terminals not registered in the database. Next, a card number is input on the WEB screen, and an operation for issuing a password is performed. When receiving the instruction to issue the personal identification number, the database discards the existing personal identification number, generates a new personal identification number, and displays the new personal identification number on the WEB screen of the mobile terminal. At this time, the WEB screen also has a function of hiding, and the portable terminal has a function of storing and a function of hiding.
[0039]
The input method will be described. In the non-display input method, if the mobile terminal has a function such as infrared transmission, the input is performed by transmitting to the infrared receiver. If there is a connection cable, it is connected to the portable terminal and operated by operating the download function on the portable terminal side to input.
[0040]
For display input, a keypad or the like is operated by pressing a key while being displayed on the portable terminal to input a personal identification number.
[0041]
【The invention's effect】
As is clear from the above description, according to the present invention, the personal identification number is added to the usage specification management data when the personal identification number is requested from the mobile terminal, so that a third party can illegally obtain the personal identification number or card information. Also, since the use of a personal identification number with usage data is prohibited, use of only a registered mobile terminal can be restricted, and even if the personal identification number is stolen, it is not illegally used. Also, since the password changes every time, the user does not need to remember the password. In addition, the use of the card can be stopped by stopping the use of either the mobile terminal or the card. Further, the function of preventing unauthorized use of the card can be eliminated, and the card can be manufactured at low cost. Further, at the time of generating the personal identification number, it is only necessary to avoid duplication with a personal identification number having no use data, so that it is easy to avoid duplication of the personal identification number. In addition, since it is displayed and entered on the mobile terminal, there is no limit on the number of digits in the PIN, it is possible to change the number of digits in the PIN every time, and it is possible to use alphabets other than numbers for PINs And the estimation of the personal identification number can be made difficult.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating an entire configuration of a collation system according to an embodiment of the present invention.
FIG. 2 is a diagram illustrating a configuration of a matching device according to an embodiment of the present invention.
[Explanation of symbols]
REFERENCE SIGNS LIST 1 mobile terminal 2 receiver 3 reading device or input device 4 transmitting / receiving device 5 network 6 collating device 7 transmitting / receiving section 8 collating section 9 database (DB)
9-1 Password generation unit 9-2 Automatic password change unit 10 Input unit

Claims (17)

A mobile device for network communication,
A card reader for reading card information,
A one-time use PIN system in which a verification device that verifies the PIN of the card is connected via a network,
User information input means for inputting first user information,
A password generating unit configured to generate a password based on the input first user information,
Connection means for connecting the portable terminal to the collation device via the network,
The portable terminal, a password issuing instruction means for issuing a password issuing instruction to the collation device,
The collation device, a password changing means for changing the password generated by the password generating means,
A first password transmitting unit that transmits the changed password to the mobile terminal via the network,
The mobile terminal receives the personal identification number, a personal identification number storage means for storing,
A second user information that the card reader reads second user information from the card and transmits the second user information and the use data of the card to the verification device via the network; Transmission means;
A second password transmission unit, wherein the mobile terminal transmits the stored password to the verification device via the network;
The collation device, the second user information received from the card reader, and the personal identification number received from the mobile terminal, the first user information registered in the collation device, and changed Collation means for collating with the password,
Usage data writing means, wherein the verification device writes usage data of the card received from the card reader to usage specification data of the verification device,
The card reader, receiving the license information of the card from the collation device, via the network, having license information display means for displaying the license information,
When the card is used on another occasion, the portable terminal connects to the collation device, generates a new password at the time of requesting the issuance of a password, and adds it to the usage statement data. And single use PIN system. When the portable terminal connects to the collation device via the network, if the first terminal does not match the first user information registered in the collation device, an error screen is displayed on the portable terminal. 2. The one-use password system according to claim 1, wherein: 2. The one-use password system according to claim 1, wherein in the second password transmitting means, the password transmitted to the verification device is inputted from a card reader. 2. The personal identification number transmitted by the second personal identification number transmitting means, wherein the personal identification number transmitted to the verification device is input by one of an infrared transmitting means and a downloading means included in the portable terminal. Single use PIN system. The one-use password system according to claim 1, wherein the collation device disables the use of the password having the usage data. 2. The one-time use personal identification number system according to claim 1, wherein the verification device stores the mobile terminal information and permits connection only to a registered mobile terminal. The one-use password system according to any one of claims 1 to 6, wherein the password is a password. 2. The one-use password system according to claim 1, wherein the mobile terminal displays or does not display the password received by the first password transmitting unit. The one-use password according to claim 1, wherein the first user information and the second user information include at least one of personal information of the user, portable terminal information, and a card number. system. The one-use password system according to claim 1, wherein the collation device collates the mobile terminal based on the first user information when the mobile terminal connects to the collation device. The one-use personal identification number system according to claim 1, wherein the portable terminal displays a card number input screen when the connection to the collation device is permitted. 12. The one-use password system according to claim 1, wherein the collation device collates the card number after receiving the password issuing instruction. 2. The one-use password system according to claim 1, wherein the password changing unit discards the password generated in advance by the password generating unit and generates a new password. 6. The one-time use personal identification number system according to claim 1, wherein the use data includes at least one of a use date, date and time, and a use amount of the card. The system according to claim 1, wherein the usage statement data includes at least one of a management ID for managing the usage statement, the user information, the password, and the usage data. A mobile device for network communication,
A card reader for reading card information,
Is a verification device connected to a one-time PIN system connected via a network,
Input means for inputting card user information;
A database for registering the user information input from the input means, and for generating and registering a password based on the user information;
Transmitting and receiving means for transmitting and receiving information with the mobile terminal and the card reader,
Collation means for collating the personal identification number received from the mobile terminal and the user information received from the card reader with the personal identification number and the user information registered in the database;
A collation device comprising: The database is
A password generation unit that generates an arbitrary password,
A password changing unit for changing a used password,
17. The collating apparatus according to claim 16, comprising:

Images