JP2005004333A - Personal identification method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To protect identification data from exposure to others and increase security by selecting, in an order registered in advance, identification image data comprising image data that, like face images, has a large amount of information and is difficult to identifiably memorize. <P>SOLUTION: A personal identification method has a step of displaying identification image data registered in advance and dummy image data registered in advance on a screen, and a step of requesting the selection of the identification image data in an order registered in advance from among the image data displayed on the screen. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a personal authentication method.
[0002]
[Prior art]
Conventionally, users of financial institutions such as banks, credit unions, post offices, etc., when conducting financial transactions such as deposits, withdrawals, transfers, balance inquiries, etc., have been arranged at the branch of the financial institution, that is, a sales office. When operating automatic transaction equipment such as ATM (Automatic Teller Machine), CD (Cash Dispenser), etc., use a cash card and for authentication to authenticate the identity It is necessary to enter a password as data. In this case, the personal identification number is generally constituted by a combination of arbitrary four numbers selected in advance by the person among numbers from 0 to 9.
[0003]
However, the user generally tends to select a personal identification number that is easy to memorize and difficult to forget. For example, a number included in a birthday, an address, a telephone number, etc. In many cases. Such a personal identification number can be easily guessed even by a third party other than the principal. For this reason, if the cash card is transferred to a third party due to loss or theft, it may be used illegally.
[0004]
In addition, since it is easy to forget the password, some users put a memo with the cash card in the wallet or write the password directly on the front or back of the cash card. In this case, if the memo or the cash card is transferred to a third party, there is a high possibility that the cash card will be used improperly immediately.
[0005]
Furthermore, in recent years, from the back of a user who is operating an automatic transaction apparatus using a cash card, he / she sniffs the operation of inputting a personal identification number, and after confirming the personal identification number, steals the cash card, There have also been reports of crimes in which a burglar is stolen and the cash card PIN is obtained directly from the user and then stolen.
[0006]
In any case, the authentication data is only a simple password that is a combination of four numbers, and it is authentication data that can be relatively easily guessed and obtained by a third party. ing.
[0007]
Thus, a personal authentication method using a plurality of image data as authentication data has been proposed (see, for example, Patent Document 1). In the personal authentication method, when operating an automatic transaction apparatus using a cash card, image data registered in advance is selected as authentication data. Use can be prevented.
[0008]
[Patent Document 1]
JP 2002-189967 A
[0009]
[Problems to be solved by the invention]
However, in the above-described conventional personal authentication method, image data such as birds, Mt. Fuji, trees, sun, clouds, cars, etc., which are relatively easy to identify and use a small amount of information, are used as authentication data. However, the image data can be identified and stored, and the security cannot be sufficiently increased. For example, when a third party steals the operation of selecting the image data from behind a user who is operating an automatic transaction apparatus using a cash card, the information amount of the image data is relatively small. Since the identification is easy, the third party can store the image data. Therefore, the third party can select the image data without fail and use the cash card illegally.
[0010]
Further, when creating a memo so as not to forget the registered image data, it is necessary to accurately describe the feature when trying to distinguish the image data from similar image data. For example, when the registered image data is car image data, it is necessary to describe the type and color of the car. Therefore, when the memo is in the hands of a third party, the third party can definitely select the image data based on the description of the memo and illegally use the cash card. Moreover, since a malicious person such as a robber can accurately hear the characteristics of registered image data by threatening the user, the cash card can be used illegally.
[0011]
The present invention solves the problems of the conventional personal authentication method, and pre-registers authentication image data consisting of image data that is abundant in information and cannot be stored in an easily identifiable manner such as a face image. It is an object of the present invention to provide a personal authentication method with high security so that authentication data is not comprehended by another person in the order of selection.
[0012]
[Means for Solving the Problems]
Therefore, in the personal authentication method of the present invention, a step of displaying pre-registered authentication image data and pre-registered dummy image data on the screen, and the authentication data from the image data displayed on the screen. Selecting image data in the order of registration.
[0013]
In another personal authentication method of the present invention, the authentication image data and the dummy image data are sequentially displayed on a plurality of screens, and the authentication image data is selected from among the image data sequentially displayed on the plurality of screens. select.
[0014]
In still another personal authentication method of the present invention, the authentication image data and the dummy image data are face photographs.
[0015]
In still another personal authentication method of the present invention, the authentication image data and dummy image data are randomly arranged and displayed on the screen.
[0016]
According to still another personal authentication method of the present invention, the method further includes the step of inputting an authentication code composed of a number registered in advance after selecting the authentication image data.
[0017]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
[0018]
FIG. 1 is a block diagram showing a configuration of a system using a personal authentication method according to the first embodiment of the present invention, and FIG. 2 is a perspective view showing a card according to the first embodiment of the present invention.
[0019]
In FIG. 1, reference numeral 10 denotes a personal authentication terminal according to the present embodiment, for example, an automatic transaction apparatus such as ATM, CD, etc., and an apparatus for a user to perform a personal transaction by performing personal authentication by himself / herself. However, any device may be used as long as the user performs personal authentication. Reference numeral 20 denotes a personal authentication device according to the present embodiment, which is a host device for performing personal authentication of the user. The personal authentication device 20 is communicably connected to the personal authentication terminal 10 and manages the authentication data 14. Any device can be used. The personal authentication terminal 10 and the personal authentication device 20 may be integrally configured.
[0020]
In the present embodiment, for convenience of explanation, the personal authentication terminal 10 is an automatic transaction apparatus for performing financial transactions, and the personal authentication apparatus 20 performs personal authentication of a user who operates the automatic transaction apparatus. A case where it is a higher-level device will be described.
[0021]
In this case, the personal authentication terminal 10 is disposed in a branch office of a financial institution such as a bank, a credit union, a post office, a store of a store such as a convenience store, a supermarket, etc., and is operated by a user by himself / herself. It is a device for conducting financial transactions such as deposit, withdrawal, passbook entry, balance inquiry, transfer, transfer, remittance, fixed deposit. The user opens his / her own account at the financial institution, and uses the account to make deposits, withdrawals, transfers, transfers, time deposit settings, withdrawals, balance inquiries, obtaining deposit / withdrawal statements, etc. A person who uses various financial services.
[0022]
The personal authentication terminal 10 may be a multi-function terminal such as a kiosk terminal having other functions such as a ticket reservation function, a product purchase application function, a credit card credit confirmation function, and a facility information guidance function. Good. In addition, the personal authentication terminal 10 is a main store, branch, etc. of a financial institution, a store of a store such as a convenience store, a supermarket, a department store, a station premises, an underground mall, a city hall, a public facility such as a hospital, a factory, an office, etc. It may be installed in any place, such as a private company, a parking lot, or an outdoor roadside.
[0023]
The personal authentication terminal 10 is a kind of computer that includes a calculation means such as a CPU and an MPU, a storage means such as a semiconductor memory and a magnetic disk, a communication means, and the like, and an input unit 12 such as a keyboard, a touch panel, and a mouse. And an operation unit including a display unit 11 such as a CRT, a liquid crystal display, and an LED (Light Emitting Diode) display. The operation unit is preferably a touch panel having the functions of the input unit 12 and the display unit 11.
[0024]
The personal authentication terminal 10 has a card reading unit 13 that reads data such as an ID code stored in a magnetic stripe 15a as a storage medium of a card 15 such as a cash card as shown in FIG. The card reading unit 13 includes a card slot (not shown) into which the card 15 is inserted. The card reading unit 13 reads a data stored in the card 15 and a magnetic stripe 15a of the card 15 in the card slot. A read / write head such as a magnetic head for overwriting, erasing and the like is provided. The card 15 may be an IC card containing an IC instead of the magnetic stripe 15a as a storage medium.
[0025]
Furthermore, the personal authentication terminal 10 has a money deposit / withdrawal part comprising a not-shown passbook entry part for depositing in a passbook such as a bankbook and a banknote deposit / withdrawal part for handling banknotes and a coin deposit / withdrawal part not shown for handling coins. Have. The personal authentication terminal 10 includes a transmission / reception unit connected to a personal authentication device 20 as a host device via a network (not shown) and a billing host computer that executes financial transaction processing in a financial institution (not shown). Have. The number of the personal authentication terminals 10 is actually plural, but in the present embodiment, one personal authentication terminal 10 is representative.
[0026]
The network is preferably an online network, but is a local area network (LAN) or an intranet made up of a wireless or wired dedicated communication network, but is a wide area network such as a WAN (Wide Area Network). It may be anything. The network may be a VPN (Virtual Private Network) using a public communication line network.
[0027]
A billing host computer (not shown) is communicably connected to the network. Here, the host computer functions as a higher-level device for an accounting system that executes financial transaction processing in a financial institution, such as deposit, withdrawal, passbook entry, balance inquiry, transfer, transfer, remittance, time deposit setting, etc. Perform accounting-related work in financial institutions such as financial processing.
[0028]
The personal authentication device 20 is communicably connected to the network. Here, the personal authentication device 20 includes an arithmetic means such as a CPU and an MPU, a storage means such as a magnetic disk and a semiconductor memory, an input means such as a keyboard and a pointing device such as a mouse, a display means such as a CRT and a liquid crystal display, It is a kind of computer provided with an input / output interface, a communication interface, and the like. The personal authentication device 20 includes an authentication data registration unit 23 for registering authentication data 14 for authenticating a user, authentication data 14 registered by the authentication data registration unit 23, a name, an account number, and the like. A personal information storage unit 22 for storing and managing the user's personal information in a centralized manner, and a personal authentication unit 21 for performing personal authentication of the user based on the personal information stored in the personal information storage unit 22 Have.
[0029]
Here, when the user newly acquires the card 15, the authentication data registration unit 23 stores image data as authentication data 14 registered in advance, that is, authentication image data and dummy data. Image data, that is, dummy image data is registered as a set with an ID code stored in the magnetic stripe 15 a of the card 15. The personal authentication unit 21 personally uses the ID code stored in the magnetic stripe 15 a of the card 15 read by the card reading unit 13 and the authentication image data selected by the user by operating the input unit 12. Personal authentication of the user who operates the personal authentication terminal 10 compared with the ID code and authentication image data as personal information of the user received from the authentication terminal 10 and stored in the personal information storage unit 22 Is supposed to do.
[0030]
The personal authentication device 20 may be configured integrally with the accounting host computer. However, in the present embodiment, the personal authentication device 20 is configured separately and disposed in a personal authentication center (not shown). It is assumed that The personal authentication center associates with the financial institution, and when a user opens his / her own account at the financial institution and newly acquires the card 15, the authentication image data and dummy image data are stored in the card 15 The ID code stored in the magnetic stripe 15a as a set is registered and registered in the authentication data registration unit 23. The personal authentication center may be a department within the organization of the financial institution.
[0031]
Next, a personal authentication method using the system configured as described above will be described. First, the operation when the user newly acquires the card 15 will be described.
[0032]
FIG. 3 is a diagram showing an example of authentication image data registered when a new card is acquired in the first embodiment of the present invention, and FIG. 4 is a new card in the first embodiment of the present invention. FIG. 5 is a diagram showing an example of dummy image data registered when acquiring a card, and FIG. 5 shows a data structure of personal information of a user registered when acquiring a new card in the first embodiment of the present invention. FIG. 6 is a diagram showing data stored in the personal information storage unit in the first embodiment of the present invention.
[0033]
In this case, the operator of the personal authentication center operates the input means of the personal authentication device 20 and inputs the ID code stored in the magnetic stripe 15 a of the user's card 15. In addition, the operator uses a plurality of, for example, four authentication face photographs and image data as dummy data as shown in FIG. 3 as image data as authentication data 14, that is, authentication image data. That is, a plurality of, for example, six dummy face photographs as shown in FIG. 4 are read as dummy image data. Then, the authentication data registration unit 23 registers the authentication image data and dummy image data as a set with an ID code.
[0034]
Here, the four authentication face photographs as the authentication image data are pre-selected by the user. As shown in FIG. 3, numbers 1 to 4 are sequentially assigned as identification codes to each of the authentication face photographs, but the order of the authentication face photographs, that is, each authentication face photograph. The number assigned to is also selected in advance by the user. The identification code given to the authentication face photo indicates the order in which the authentication face photo is selected. That is, the order of selecting the authentication face photo is registered by registering the discrimination code given to the authentication face photo. The six dummy face photographs as the dummy image data are also selected in advance by the user. That is, the user selects 10 face photos in advance, and 4 of them are selected as authentication face photos, and the remaining 6 are selected as dummy face photos.
[0035]
Note that the authentication image data may be image data other than a face photograph, but the amount of information is abundant and cannot be stored in an easily identifiable manner. From the viewpoint that it is difficult to convey to other people in an identifiable manner and that it can be recognized identifiable by the user himself / herself by simple character information such as proper nouns such as personal names, as face image data A face photograph is desirable.
[0036]
Generally, it takes time to memorize a person's face accurately to such an extent that it can be distinguished from another person's face. In addition, it is extremely difficult to accurately convey the person's face to others using words or sentences. On the other hand, for a person who knows the person, it is easy to distinguish the face of the person from the face of another person, and the name, nickname, nickname, abbreviation, etc. given to the person are extremely short. It can be specified by proper nouns. Therefore, the authentication image data in the present embodiment has a large amount of information, is difficult to convey to others in a manner that can be identified by text information, and can be identified to the user by simple text information. It is desirable that the face photograph can be recognized.
[0037]
Furthermore, it is desirable that the face photograph does not wear a feature such as a hat, a bandana, glasses, or the like, that is, a wearable photo that can be identified by character information such as words and sentences. It is also desirable to use a face photograph that can be identified by the user but not known by others, such as a face photograph of the user's childhood and a face photograph of the grandchild.
[0038]
Note that the image data is abundant in amount of information, is difficult to be transmitted to others identifiable by text information, and is image data that can be identifiable to the user by simple text information. Other than a face photograph may be used, for example, a pet photograph such as a dog or cat, a flower photograph, a landscape photograph, or the like may be used.
[0039]
Here, the authentication data 14 for authenticating the user registered by the authentication data registration unit 23 has a data structure as shown in FIG. That is, the ID code stored in the magnetic stripe 15a of the user's card 15, the authentication face photograph and the dummy face photograph, and the discrimination code assigned to the authentication face photograph are registered as a set.
[0040]
Then, the authentication data 14 registered by the authentication data registration unit 23 is transmitted to and stored in the personal information storage unit 22. The data stored in the personal information storage unit 22 has a structure as shown in FIG. 6, and the corresponding data is stored in the columns of ID code, authentication face photo, dummy face photo, name and discrimination code. Has been.
[0041]
Next, an operation when the user performs personal authentication by operating the personal authentication terminal 10 will be described.
[0042]
FIG. 7 is a first diagram showing an example of an authentication image data display screen according to the first embodiment of the present invention, and FIG. 8 is an example of an authentication image data display screen according to the first embodiment of the present invention. FIGS. 9 and 9 are diagrams showing selected authentication image data received by the personal authentication apparatus according to the first embodiment of the present invention.
[0043]
First, a screen prompting insertion of the card 15 is displayed on the display unit 11 of the personal authentication terminal 10. Therefore, when the user inserts the card 15 into the card slot of the card reading unit 13, the ID code stored in the magnetic stripe 15 a of the card 15 is read by the reading / recording head of the card reading unit 13. The ID code is transmitted from the card reading unit 13 to the personal information storage unit 22 of the personal authentication device 20.
[0044]
Subsequently, the personal information storage unit 22 accesses data having a structure as shown in FIG. 6, searches for an ID code corresponding to the ID code received from the card reading unit 13, and stores the ID code in the ID code. The authentication face photograph and dummy face photograph registered correspondingly are acquired. The number of authentication face photos is four, and the number of dummy face photos is six. The personal information storage unit 22 arranges the authentication face photo and the dummy face photo in a random order and transmits them to the display unit 11 of the personal authentication terminal 10. As a result, as shown in FIG. 7, a total of ten face photographs are displayed on the display unit 11 in a state of being arranged in a random order.
[0045]
Subsequently, the user selects four authentication face photographs previously selected and registered as authentication image data from the ten face photographs displayed on the display unit 11. Here, it is assumed that the input unit 12 is a touch panel that also has a function with the display unit 11. Therefore, the user can select a predetermined face photo by touching the face photo displayed on the display unit 11.
[0046]
In this case, the user selects the four face images for authentication in the registered order, that is, the order in which the numbers 1 to 4 are assigned as the discrimination codes. Therefore, the user touches the face photos displayed on the display unit 11 in the order indicated by the arrows in FIG. 8 to select four authentication face photos. In addition, since the order of arranging the face photos side by side is randomly changed every time, even if the operation of selecting a face photo is stolen from behind and the display position of the face photo is remembered, It is possible to prevent a predetermined facial photograph from being appropriately selected by the third party. That is, spoofing can be prevented.
[0047]
Subsequently, the face photograph selected from the input unit 12 which is a touch panel is transmitted to the personal authentication unit 21 of the personal authentication device 20. In this case, the discrimination code given to the selected face photograph is transmitted to the personal authentication unit 21. In other words, the face photograph is only for display, and the personal authentication unit 21 does not strictly match the face photograph. Therefore, a discrimination code is associated with each of the authentication face photo and the dummy face photo, and the discrimination code assigned to the selected face photo is transmitted to the personal authentication unit 21. Then, as shown in FIG. 9, the discrimination codes assigned to the selected face photograph are transmitted in order. Subsequently, the personal authentication unit 21 determines whether or not the received determination code matches the determination code of the registered face image for authentication stored in the personal information storage unit 22. Further, it is also determined whether or not the order of the received discrimination codes matches the order of the numbers as discrimination codes assigned to the registered face images for authentication.
[0048]
And, all of the received discrimination codes coincide with the discrimination codes of the registered authentication face photos, and the numbers as the discrimination codes assigned to the registered authentication face photos with the order of the received discrimination codes The personal authentication unit 21 authenticates that the user is the registered person. In this case, the personal authentication unit 21 transmits a signal to the display unit 11 and performs the following operations such as deposit, withdrawal, passbook entry, balance inquiry, transfer, transfer, remittance, fixed deposit, etc. Display a screen that prompts you to select a transaction.
[0049]
Further, when any of the received discrimination codes does not match the discrimination code of the registered authentication face photo, or as the discrimination code given to the registered authentication face photo, the order of the received discrimination code If the number order does not match, the personal authentication unit 21 rejects the authentication. In this case, the personal authentication unit 21 transmits a signal to the display unit 11 to display a screen for instructing to redo an operation for performing personal authentication. It is also possible to display a screen for rejecting authentication.
[0050]
As described above, in the present embodiment, the pre-registered authentication image data and the pre-registered dummy image data are displayed on the screen of the display unit 11, and the authentication data is displayed from the image data displayed on the screen. Image data is selected in the order registered. Further, when all the image data is displayed on one screen on the display unit 11, operability is good.
[0051]
Therefore, even if the authentication image data is obtained and stored by a third party, the third party cannot select the authentication image data in the order registered in advance. I cannot impersonate a person and perform personal authentication.
[0052]
In the present embodiment, personal authentication is performed using a face photograph as authentication image data. In this case, the face photo is rich in information compared to other image data and cannot be stored in an easily identifiable manner, and can be identified by character information such as words and sentences. It is difficult for the user himself / herself to be transmitted to the user, and the user himself / herself can be identified by simple character information such as a proper noun such as a person's name. In other words, in the present embodiment, it is difficult to store in an identifiable manner or to transmit to other people in an identifiable manner using character information, and the user himself / herself recognizes in an identifiable manner using simple character information. The personal authentication is performed using the authentication data 14 that can be used.
[0053]
Therefore, even if a third party sees that the user is performing personal authentication using the face photo as the authentication data 14, the third party who does not know the person of the face photo Since it cannot be stored in an identifiable manner, the third party cannot impersonate a user and perform personal authentication.
[0054]
In addition, since it is difficult to transmit the authentication data 14 to others identifiable by text information, the user does not transmit the authentication data 14 to others by telephone or the like. The authentication data 14 is not acquired by a third party. Furthermore, even if a malicious person such as a robber tries to ask for the authentication data 14 by threatening the user, it is difficult to transmit it to others in a manner that can be identified by text information. The person cannot acquire the authentication data 14.
[0055]
Further, since the user himself / herself can recognize the authentication data 14 so as to be identifiable by simple character information, when the user creates a memo for not forgetting the authentication data 14, the name and name It is only necessary to describe an extremely short proper noun assigned to the person, such as a nickname or abbreviation. Moreover, even if a third party sees the description of the memo, the authentication data 14 cannot be recognized in an identifiable manner, so that the third party cannot impersonate the user and perform personal authentication. The same applies to the case where the proper noun is written on the front or back surface of the card 15 instead of the memo.
[0056]
Next, a second embodiment of the present invention will be described. In addition, about what has the same structure as 1st Embodiment, the description is abbreviate | omitted by providing the same code | symbol. The description of the same operation and the same effect as those of the first embodiment is also omitted.
[0057]
FIG. 10 is a diagram showing an example of authentication image data registered when a new card is acquired in the second embodiment of the present invention, and FIG. 11 is a new card in the second embodiment of the present invention. FIG. 12 is a diagram showing an example of dummy image data registered when acquiring a card, and FIG. 12 shows the data structure of personal information of a user registered when a card is newly acquired in the second embodiment of the present invention. FIG. 13 is a diagram illustrating an example of an authentication image data display screen according to the second embodiment of the present invention.
[0058]
In the present embodiment, a case will be described in which the authentication data 14 is composed of a combination of a face photograph and an authentication code made up of numbers. In this case, the operator of the personal authentication center operates the input means of the personal authentication device 20 and inputs the ID code stored in the magnetic stripe 15 a of the user's card 15. Further, the operator may use one or a plurality of authentication image data as shown in FIG. 10, for example, one or two authentication face photographs and a plurality of dummy image data as shown in FIG. For example, 8 to 9 dummy face photos are read. Then, the authentication data registration unit 23 registers the authentication image data and dummy image data as a set with an ID code. In the present embodiment, it is assumed that there is one piece of authentication image data and nine pieces of dummy image data. Here, the authentication face photo and the dummy face photo as the authentication image data are pre-selected by the user. Further, as shown in FIG. 10, the authentication face photograph is assigned a number of 1 as a discrimination code.
[0059]
In this embodiment, the operator inputs a 4-digit number selected in advance by the user as a password. Then, the authentication data registration unit 23 registers, as a set of the authentication image data, dummy image data, and ID code, with the number obtained by combining the discrimination code and the password as an authentication code. Accordingly, the authentication data 14 for authenticating the user registered by the authentication data registration unit 23 has a data structure as shown in FIG. That is, the ID code stored in the magnetic stripe 15a of the user's card 15, the authentication face photograph and the dummy face photograph, and the authentication code made up of numbers are registered as a set.
[0060]
Subsequently, when the user performs personal authentication by operating the personal authentication terminal 10, when the user inserts the card 15 into the card slot of the card reading unit 13, the ID code stored in the magnetic stripe 15 a of the card 15. Is read by the reading and recording head of the card reading unit 13. Then, the authentication face photograph and dummy face photograph registered corresponding to the ID code are transmitted from the personal information storage unit 22 of the personal authentication device 20 and displayed on the display unit 11 of the personal authentication terminal 10. The personal information storage unit 22 arranges the face images for authentication and the dummy face photos in a random order and transmits them to the display unit 11 of the personal authentication terminal 10. As shown in FIG. 5, a total of 10 face photographs are displayed in a state of being arranged in a random order. The display unit 11 displays a numeric key for inputting an authentication code consisting of a number.
[0061]
Subsequently, the user selects one authentication face photo selected and registered in advance as authentication image data from the ten face photos displayed on the display unit 11. Here, it is assumed that the input unit 12 is a touch panel that also has a function with the display unit 11. Therefore, the user can select a predetermined face photo by touching the face photo displayed on the display unit 11. Subsequently, the user inputs authentication codes by sequentially touching the numeric keys displayed on the display unit 11 in the order indicated by the arrows in FIG. In addition, since the order of arranging the face photos side by side is randomly changed every time, even if the operation of selecting a face photo is stolen from behind and the display position of the face photo is remembered, It is possible to prevent a predetermined facial photograph from being appropriately selected by the third party. That is, spoofing can be prevented.
[0062]
Subsequently, the identification code of the selected face photograph and the input authentication code are transmitted from the input unit 12 which is a touch panel to the personal authentication unit 21 of the personal authentication device 20. Then, the personal authentication unit 21 determines whether or not the received discrimination code matches the discrimination code of the registered face image for authentication stored in the personal information storage unit 22. Further, it is also determined whether or not the received authentication code matches the registered authentication code.
[0063]
When the received identification code matches the registered identification code of the authentication face photograph and the received authentication code matches the registered authentication code, the personal authentication unit 21 Authenticate that is the registered person. In this case, the personal authentication unit 21 transmits a signal to the display unit 11 and performs the following operations such as deposit, withdrawal, passbook entry, balance inquiry, transfer, transfer, remittance, fixed deposit, etc. Display a screen that prompts you to select a transaction.
[0064]
If the received identification code does not match the registered identification code of the authentication face photograph, or if the received authentication code does not match the registered authentication code, the personal authentication unit 21 performs authentication. I refuse. In this case, the personal authentication unit 21 transmits a signal to the display unit 11 to display a screen for instructing to redo an operation for performing personal authentication. It is also possible to display a screen for rejecting authentication.
[0065]
Thus, in the present embodiment, the authentication data 14 is composed of a combination of a face photograph and an authentication code made up of numbers. For this reason, the user only has to store a small number of face photographs, so the authentication data 14 is not forgotten.
[0066]
In addition, this invention is not limited to the said embodiment, It can change variously based on the meaning of this invention, and does not exclude them from the scope of the present invention.
[0067]
【The invention's effect】
As described above in detail, according to the present invention, it is possible to provide a highly secure personal authentication method without authentication data being grasped by others.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a system that uses a personal authentication method according to a first embodiment of the present invention.
FIG. 2 is a perspective view showing a card in the first embodiment of the present invention.
FIG. 3 is a diagram showing an example of authentication image data registered when a new card is acquired according to the first embodiment of the present invention.
FIG. 4 is a diagram illustrating an example of dummy image data registered when a new card is acquired according to the first embodiment of the present invention.
FIG. 5 is a diagram showing a data structure of personal information of a user registered when a card is newly acquired according to the first embodiment of the present invention.
FIG. 6 is a diagram showing data stored in a personal information storage unit according to the first embodiment of the present invention.
FIG. 7 is a first diagram illustrating an example of an authentication image data display screen according to the first embodiment of the present invention.
FIG. 8 is a second diagram illustrating an example of an authentication image data display screen according to the first embodiment of the present invention.
FIG. 9 is a diagram showing selected authentication image data received by the personal authentication device according to the first embodiment of the present invention.
FIG. 10 is a diagram illustrating an example of authentication image data registered when a card is newly acquired according to the second embodiment of the present invention.
FIG. 11 is a diagram showing an example of dummy image data registered when a new card is acquired according to the second embodiment of the present invention.
FIG. 12 is a diagram showing a data structure of personal information of a user registered when a card is newly acquired according to the second embodiment of the present invention.
FIG. 13 is a diagram showing an example of an authentication image data display screen according to the second embodiment of the present invention.
[Explanation of symbols]
10 Personal authentication terminal
20 Personal authentication device

Claims (5)

(A) displaying pre-registered authentication image data and pre-registered dummy image data on a screen;
And (b) selecting the authentication image data from the image data displayed on the screen in the order registered in advance. The personal authentication method according to claim 1, wherein the authentication image data and the dummy image data are sequentially displayed on a plurality of screens, and the authentication image data is selected from image data sequentially displayed on the plurality of screens. The personal authentication method according to claim 1, wherein the authentication image data and the dummy image data are face photographs. The personal authentication method according to claim 1, wherein the authentication image data and the dummy image data are randomly arranged and displayed on a screen. The personal authentication method according to claim 1, further comprising a step of inputting an authentication code composed of a number registered in advance after selecting the image data for authentication.

Images