JP2005352570A - System and method for personal information presentation certificate issue management, and system and method for individual authentication - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To securely confirm whether individual authentication and personal information are correct by enabling personal information of a person insured to easily be confirmed. <P>SOLUTION: On a card holder type insurance certificate 2 with an IC tag, necessary items as the insurance certificate are displayed by printing etc. The card holder type insurance certificate 2 with the IC tag is provided with the IC tag 5 stored with a gateway key which is uniquely generated from an individual authentication key stored on a card for individual authentication (IC card 1) used while put in the card holder type insurance certificate 2 with the IC tag when the card holder type insurance certificate 2 with the IC tag is issued. Consequently, it is proven that the IC card 1 and card holder type insurance certificate 2 with the IC tag are in regular combination by confirming consistency between the individual authentication key of the IC card 1 and the gateway key of the IC tag 5 of the card holder type insurance certificate 2 with the IC tag. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a personal information presentation certificate issuance management system, a personal information presentation certificate issuance management method, a personal authentication system, and a personal authentication method using a personal information presentation certificate in the form of a card holder.

  Health insurance insured ID cards are issued by various issuers such as government-managed health insurance, seafarer insurance, daily health insurance, national health insurance, health insurance issued by health insurance associations and mutual aid associations. . For such insured cards (also simply referred to as insurance cards), the issuing organization prints necessary information such as the insured's symbol, number, name, date of birth, insurer number, and is issued. The insurance premium claim and receipt management of the medical institution is performed based on the insured person information written on the insurance card.

By the way, such insurance charges and receipt management work are enormous, and there is a concern about the increase in the amount of work in each local government and insurance association. For this purpose, the following application has made a proposal for networking insurance billing and receipt management office work and making IC cards for insurance cards held by insured persons.
Claim 2 of Patent Document 1 describes means for storing personal identification information of an insured person on an IC card. Patent Document 2 describes an idea of integrating a booklet and an IC card.
JP 2002-230156 A JP 11-348471 A

  By the way, in addition to the necessary items described in the insurance card in the past, there are currently some experiments in which information such as examination history and medication history is stored in the IC card and the IC card is used instead of the insurance card. It is being piloted between municipalities, health insurance associations, and medical institutions. However, although the above information is stored in the IC card, people (especially elderly people) who have become accustomed to the insurance card made of perennial paper have a considerable psychology to use the IC card itself as the insurance card. As the applicants of the present application and others who experiment with making an insurance card into an IC card are concerned, there are concerns about unexpected accidents and troubles.

  Because of these concerns, the applicants, for example, as shown in the following prior document, the idea that the booklet and the IC card are integrated as an insurance card, and the booklet part is the certificate of the insurance card, Various trials and errors, such as the idea of writing necessary information such as the name of the insured person and the insurance number on the surface, are being conducted.

  However, all of these ideas are considered to be costly, not costly, and, as with conventional paper insurance cards, the necessary information as a personal insurance card is confirmed visually, and Proposals have been awaited for a smooth introduction of a card that stores insurance information that can be used to check information such as examination history and medication history.

  In addition, from the viewpoint of card issuance costs, it is possible to display and store necessary information on IC cards issued by other entities such as the Basic Resident Register Card, and use this card as an insurance card. Card issuers and responsibilities are vague and problems arise.

  The present invention has been made to solve the above problems, and its purpose is to easily confirm personal information related to an insured person's personal insurance card, etc., as well as personal authentication and correctness of personal information. Is to provide a personal information presentation certificate issuance management system, a personal information presentation certificate issuance management method, a personal authentication system, and a personal authentication method.

  To achieve the above object, the present invention provides personal authentication information reading means for reading personal authentication information for identifying an individual stored in a personal authentication card, and personal authentication information read by the personal authentication information reading means. From the identification information creation means for creating unique identification information based on a predetermined identification information creation method, and the identification information created by the identification information creation means, specific personal information about the individual is displayed, and the individual And an identification information recording means for recording in a storage unit provided in a personal information presentation card in the form of a card holder for accommodating an authentication card.

  In addition, the present invention is characterized by comprising storage means for storing an issuance status of the card holder-like personal information presentation certificate.

  In order to achieve the above object, the present invention displays personal authentication information reading means for reading personal authentication information for identifying an individual stored in a personal authentication card, and specific personal information about the individual, Identification information reading means for reading identification information stored in a storage unit provided in a card holder-like personal information presentation card containing the personal authentication card, and personal authentication information read by the personal authentication information reading means; And determining means for determining consistency with the identification information read by the identification information reading means.

  Further, the present invention creates identification information from personal authentication information based on a predetermined identification information creation method used when creating unique identification information from personal authentication information read by the personal authentication information reading means. An identification information creating means is provided, wherein the judging means judges whether or not the identification information read by the identification information reading means matches the identification information created by the identification information creating means.

  In order to achieve the above object, the present invention reads personal authentication information for identifying an individual stored in a personal authentication card, displays specific personal information about the individual, and accommodates the personal authentication card. The identification information stored in the storage unit provided in the card holder-like personal information presentation certificate is read, and the consistency between the personal authentication information and the identification information is determined.

  Further, the present invention creates identification information from personal authentication information based on a predetermined identification information creation method used when creating unique identification information from the personal authentication information, and the read identification information and the It is characterized by determining whether or not the created identification information matches.

  According to the present invention, the personal information presentation certificate issuance management system reads the personal authentication information for identifying the individual stored in the personal authentication card by the personal authentication information reading means, and the identification information creating means. The unique identification information is created from the personal authentication information based on a predetermined identification information creation method, and the created identification information is displayed on the identification information recording means, and specific personal information about the individual is displayed, and the personal authentication is performed. The information is recorded in a storage unit provided in a personal information presentation card in the form of a card holder that accommodates the card. As a result, the personal information of the insured person can be easily confirmed, personal authentication can be surely performed by the personal authentication information of the personal authentication card, and the personal authentication can be performed from the personal authentication information and the identification information. There is an advantage that it is possible to prove that the card and the personal information presentation card in the form of a card holder that accommodates the card are a regular combination.

Hereinafter, the best mode for carrying out the present invention will be described.
1 and 2 are external views showing a personal authentication card (IC card) and an IC tag card holder type insured person card (personal information presentation card) used in the insured person card issue management system according to the present embodiment. It is. The IC card 1 shown in FIGS. 1 and 2 is the same as the IC card proposed by the inventor in Japanese Patent Laid-Open No. 2002-230156, and the card is provided with an IC 1-1. In the IC 1-1, a personal authentication key for identifying an individual is recorded. In the present embodiment, it is assumed that an IC card in which a personal authentication key for identifying an individual has already been written is distributed to each individual.

  The IC card 1 can be accommodated in a bag-shaped card holder main body 2 shown in FIGS. The card holder type insured card 2 with IC tag is formed of a synthetic resin material such as vinyl chloride or polypropylene, and has overall flexibility. The card holder type insured card with IC tag 2 having a substantially rectangular bag shape has an opening 3 on one side (upper side in FIG. 1) as shown in FIG. The front surface side and the back surface side are different in end length, and the back surface side is set short. At the center in the longitudinal direction of the opening 3 on the front surface side, a curved notch recess 4 is provided, and as shown in FIG. 2, the IC card is inserted from the opening 3 into the card holder body 2 in the direction of the arrow and accommodated. 1 can be held by the concave portion 4. That is, the card holder type insured card with IC tag 2 is formed in a bag shape so as to fit within the opening 3 in a state where the IC card 1 is accommodated.

  As shown in FIG. 3 (a), the surface of the card holder type insured person card 2 with an IC tag having a substantially rectangular shape is insured's symbol, number, name, gender, date of birth, insurer number. The necessary items for the health insurance card, such as the name of the insurer, are displayed by a method such as printing or printing (front side display section). In addition, the issuer's mark is also printed as with a conventional paper insurance card.

  An IC tag 5 is provided on the surface portion of the card holder type insured card 2 with IC tag. A small IC chip is incorporated in the IC tag 5, and information is exchanged wirelessly with an external reading device by an antenna connected to the IC chip. The IC tag 5 is configured to store a gateway key uniquely created from the personal authentication key stored in the IC card 1 when the card holder type insured card 2 with IC tag is issued. .

  On the other hand, as shown in FIG. 3 (b), the back side of the card holder type insured card 2 with IC tag is the same as the precautions for the insured card that is issued in the same manner as a conventional paper insurance card. Are also displayed by a method such as printing or printing (rear side display section).

  As for the surface of the cardholder-type insured card 2 with IC tag, the insured who receives the grant may request that the address or name be self-signed as necessary. There are cases where these self-signed parts and necessary items displayed on the front surface (display of name, address, etc. and marks), as well as precautions on the back side, are rubbed and erased by use. A transparent thermoplastic film of a corresponding size may be thermally welded to the front and back display portions of the IC tag-attached cardholder-type insured card 2 so that such erasure does not occur.

  As described above, according to the card holder type insured person card 2 with the IC tag according to the embodiment, for example, the IC card 1 storing the data of the personal authentication key is accommodated, while the conventional paper insured person card is used. Information necessary for the insured person such as the insured's symbol, number, name, gender, date of birth, insurer number, insurer name, etc., to be visually confirmed is displayed on the surface. With this configuration, the IC card 1 can be accommodated in the interior and carried together, and the card holder with an IC tag type insured card 2 has an insurance card on the surface as in the past. Since the necessary items are described, even the generation familiar with the insurance card made of paper for many years can recognize the card holder type insured card 2 with IC tag as the insurance card and accept it without resistance.

  The IC tag 5 is attached to the card holder type insured person ID card 2 with IC tag, and the gateway key created from the personal authentication key in the IC card 1 is used as the IC tag 5 of the card holder type insured person ID card 2 with IC tag. By comparing the personal authentication key of the IC card 1 and the gateway key of the IC tag of the IC tag-attached cardholder-type insured card 2 with the IC tag 1 It becomes possible to prove that the IC card 1 is a regular combination.

  In addition, in the said embodiment, although the card accommodated in the IC tag card holder type insured person card | curd 2 is set as the IC card 1, not only this but the magnetic card which memorize | stores information of an insured person and an insurer, Other card-like electronic storage media may be used. Further, the card may be shared with a basic resident register card and a credit card. Further, the IC tag 5 provided on the surface of the card holder type insured card with IC tag 2 may be configured by a medium capable of storing other information such as a two-dimensional barcode.

  Next, an embodiment of an insured card issuance management system for performing issuance management and operation management of an IC tag-attached cardholder insured card 2 according to the present invention will be described with reference to the drawings. FIG. 4 is a configuration diagram showing the configuration of the insured card issuance management system of the present embodiment.

  The cardholder-type insured card issuance management system 100 is a main system that is closed to an external network, and is a sub-system (ex. Connected).

  The card holder type insured person card issue management system 100 as the main system includes an insured person card issue management server 101, an IC tag card holder type insured person card issuer 102, an IC card reader / writer 103, An insured person information database (hereinafter referred to as DB) 110 and an insured person ID issuing status management DB 111 are configured.

  The insured person card issuance management server 101 includes an IC tag card holder type insured person issuance machine 102, an IC card reader / writer 103, an insured person information DB 110, an insured person card issuance status management DB 111, and the like. By performing data input / output control, the issuance status of the IC tag card holder type insured card 2 and the personal authentication key information of the IC card 1 accommodated, and the IC tag card holder type insured person card 2 The status of writing the gateway key to the IC tag 5 is managed in the insured card issue status management DB 111 in the own system (card holder type insured card issue management system 100). Further, the insured person card issuance management server 101 receives and stores the issuance status of the card holder type insured person card 2 with IC tag in the qualification confirmation DB 210 in the external system (qualification confirmation system 200) different from the own system. The effective classification of the insured qualification based on the information of the personal authentication key of the IC card 1 is managed.

  The IC tag-attached cardholder-type insured card issuing machine 102 is a card issuing machine that performs the process of issuing the IC tag-added cardholder-type insured person card 2 described above, and controls the insured person card issue management server 101. Under the insured person information DB 110, the insured person information including the insured person's symbol, number, name, gender, date of birth, and date of qualification acquisition is used. 2 is printed (based on the front and back of the insured card information shown in FIG. 3), printing processing based on the input of the insured person card information, holder creation processing, gateway key writing processing to the IC tag 5, Issue insurance card 2

  The IC card reader / writer 103 is a reader / writer that reads the data of the personal authentication key of the IC card 1 described above, and is under the control of the insured card issuance management server 101, and is a card holder with IC tag. A personal authentication key is read from the IC card 1 accommodated in the insurance card 2.

  The insured person information DB 110 is a storage device that stores insured person information, and employs, for example, a field configuration as shown in FIG. As shown in FIG. 5, the insured person information includes information on the insured person who joins each insurer (for example, insurer A) (data No., symbol / number, name, gender determined by a predetermined rule). , Date of birth, date of qualification, date of loss of qualification, and other information).

  The issuance status management DB 111 of the insured person ID, in addition to the replica data having the insured person information stored in the insured person information DB 110 as a master, issuance date of the insured person ID as the issuance situation of the insured person ID, The insured card expiration date, personal authentication key, gateway key created from the personal authentication key when the IC tag-attached card holder insured person card 2 is issued, gateway key writing date, and the like are stored.

  The personal authentication key is identification information unique to each individual who owns the IC card. The gateway key is unique identification information corresponding to the personal authentication key created from the personal authentication key by a predetermined method (encryption or the like). For example, when a method of creating a gateway key from an odd number of a personal authentication key is adopted as a predetermined method, if the personal authentication key is “123456789”, the gateway key is “13579”. When using the card holder type insured card 2 with IC tag, the gateway key and the personal authentication key of the IC card 1 corresponding to the card holder must be matched.

  The qualification confirmation system 200 as a subsystem is composed of a qualification confirmation server 201 for each insurer and a qualification confirmation database 210 for each insurer, and is connected to the qualification confirmation terminal 301 of each medical institution via the Internet 300. The

  The qualification confirmation server 201 searches the qualification confirmation database 210 by inputting necessary information from the notation of the insured card, or by using the personal authentication key written in the IC card 1, and confirms the validity of the insured qualification. / A server that determines invalidity and returns a qualification confirmation result.

  The database for qualification confirmation 210 is replica data having the insured person information stored in the issuance status management DB 111 of the insured person as a master, and at least a personal authentication key of the insured person who joins each insurer, It consists of data necessary to determine the validity / invalidity of the insured qualification such as the insured person identification information such as a symbol / number and name.

  The qualification validity / invalidity judgment indicates whether the insured's enrollment qualification is valid or invalid, the qualification confirmation date / time falls between the date of qualification acquisition and the date of loss of qualification, and Judgment is valid if the insured's certificate is within the validity period, and is invalid if the qualification confirmation date has passed the date of loss of qualification, or if the insured person's certificate has expired. Is done.

  The qualification confirmation terminal 301 is a combination of the personal authentication key of the IC card 1 and the gateway key of the IC tag 5 of the card holder type insured card with IC tag 2 in each medical institution having an external network such as the Internet 300. It is a communication terminal that judges correctness and makes a qualification confirmation request to the qualification confirmation server 201 based on the personal authentication key. The qualification confirmation terminal 301 is connected to a card reader device that reads a personal authentication key from the IC card 1 and a reader device that reads a gateway key wirelessly from the IC tag 5 of the card holder type insured card with IC tag 2 (or (Not shown).

  Next, the operation of the insured card issuance management system of the present embodiment will be described with reference to the drawings. FIG. 6 is a flowchart showing a process of issuance management / operation processing of the IC tag-attached cardholder-type insured card 2 by the insured card issuance management system of the present embodiment.

  Now, when each insurer issues a new insured card, the insured is given a predetermined symbol, number, name, date of birth, etc. according to the insured's new enrollment procedure (step S1 in FIG. 6). Register in the information DB 110 (step S2).

  The insured person submits an IC card (personal authentication card) 1 (step S3). The insured certificate issuance management server 101 reads the personal authentication key of the IC card 1 with an IC card reader / writer (step S4), and creates a gateway key by encryption or the like from the read personal authentication key (step S5). . The IC card (personal authentication card) 1 is returned to the insured (step S6).

  Next, the insured person card issuance management server 101 issues the card holder type insured person card with IC tag 2 in which the gateway key is written in the IC tag 5 by the card holder type insured person card issuing machine 102 (step) S7). The insured person receives the issued IC tag-attached cardholder-type insured person card 2 (step S8).

  Next, the insured card issuance management server 101 registers the insured person information such as the issuance status of the cardholder type insured card 2, personal authentication key, gateway key, etc. in the issuance status management DB 111 of the insured person (Step S9).

  Then, the insured person certificate issuance management server 101 receives the insured person information stored in the insured person issuance status management DB 111 in the qualification confirmation DB 210 in the qualification confirmation system 200 via the qualification confirmation server 201. The insured person information is written as replica data with the master as a master (step S10).

  Next, the qualification confirmation operation when receiving a service at a medical institution or the like using the card holder type insured card with IC tag and the IC card will be described. FIG. 7 is a block diagram showing an outline of a qualification confirmation operation when receiving a service at a medical institution or the like. In a medical institution or the like, the qualification confirmation terminal 301 reads the gateway key from the IC tag 5 of the IC tag-attached cardholder-type insured card 2 and reads the personal authentication key from the IC card 1. The qualification confirmation terminal 301 confirms the combination of the gateway key and the personal authentication key. The confirmation is made based on whether or not the value created by the same predetermined method as that at the time of issuance described above matches the gateway key read from the IC tag 5 from the personal authentication key read from the IC card. If the combination is correct, the system gateway is set to “open”. Next, the qualification confirmation server 201 is accessed, and the qualification of the insured person is confirmed from the qualification confirmation DB 210 of the insurer using the personal authentication key. If the qualification is valid, the system can be used. .

  Next, the qualification confirmation operation will be described with reference to FIG. FIG. 8 is a flowchart showing a qualification confirmation operation when receiving a service at a medical institution or the like. The insured person presents a card holder type insured person card 2 with an IC tag in which an IC card (personal authentication card) 1 is inserted every time he / she consults at a medical institution or the like (step S20). The qualification confirmation terminal 301 such as a medical institution reads the personal authentication key from the IC card 1 and also reads the gateway key from the IC tag 5 of the card holder type insured card 2 with IC tag (step S21).

  Next, the qualification confirmation terminal 301 compares the personal authentication key read from the IC card 1 with the gateway key read from the IC tag 5, and determines whether the combination is correct or not based on the relationship between the key information of the two (step S22). ). That is, it is determined whether or not the value created by the same predetermined method as that at the time of issuance described above matches the gateway key read from the IC tag 5 from the personal authentication key read from the IC card 1. Then, the correctness / incorrectness of the combination of the IC card 1 and the IC tag cardholder-type insured card 2 is displayed on the terminal screen (step S23). Here, if the combination of the IC card 1 and the card holder type insured card with IC tag 2 is not correct, it is determined that the combination is incorrect use or illegal use, and the IC card 1 and the IC card 1 Stop using the tagged cardholder insured card 2.

  On the other hand, if the combination of the IC card 1 and the IC tag-attached card holder insured person card 2 is correct, the qualification confirmation terminal 301 uses the personal authentication key via the Internet 300 to the qualification confirmation server 201 of the insurer. Access is made (step S24).

  The qualification confirmation server 201 refers to the insurer's qualification confirmation DB 210, confirms the qualification of the insured person indicated by the personal authentication key, and returns the result to the qualification confirmation terminal 301 of the medical institution (step S25). ).

  The qualification confirmation terminal 301 displays the qualification confirmation result from the qualification confirmation server 201 on the terminal screen (step S26).

  According to the above-described embodiment, the IC tag 5 is attached to the card holder type insured card, and the gateway key created from the personal authentication key in the IC card 1 is used as the card holder type insured person card 2 with the IC tag. By recording on the IC tag 5, it is proved that the IC tag-attached card holder insured card 2 and the IC card 1 are a proper combination. As a result, it is possible to prevent inadvertent use and unauthorized use of the IC tag-attached cardholder-type insured card 2 and the IC card (such as Juki card) 1 in an incorrect combination.

  The above-mentioned insured card issue management server 101, qualification confirmation server 201, and qualification confirmation terminal 301 have a computer system therein. The processing steps of the above-described insured card issuance management server 101, qualification confirmation server 201, and qualification confirmation terminal 301 are stored in a computer-readable recording medium in the form of a program. By executing this, the above processing is performed. Here, the computer-readable recording medium means a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like. Alternatively, the computer program may be distributed to the computer via a communication line, and the computer that has received the distribution may execute the program.

It is an external view showing an IC card and a card holder with an IC tag type insured card used in the insured card issue management system according to the present embodiment. It is a front view which shows the state which inserts an IC card in a card holder type insured person card with an IC tag. It is a figure which shows the example of a print of a card holder type insured person card with an IC tag. It is a block diagram of an insured person card issue management system. It is a block diagram of an insured person information DB and an insured person card issue status management DB. It is a flowchart which shows the flow of issuance management / operation of an insured card. It is a block diagram which shows the outline of the qualification confirmation operation | movement at the time of receiving service in a medical institution etc. It is a flowchart which shows the qualification confirmation operation | movement at the time of receiving service in a medical institution etc.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... IC card, 2 ... Card holder main body, 3 ... Opening part, 4 ... Notch recessed part, 100 ... Card holder type insured person card issue management system, 101 ... Insured person card issue management server (identification information creation means), DESCRIPTION OF SYMBOLS 102 ... Card holder type insured person certificate issuing machine with IC tag (identification information recording means), 103 ... IC card reader / writer (personal authentication information reading means), 110 ... Insured person information DB, 111 ... Insured person ID Issuing status management DB, 201 ... qualification confirmation server, 210 ... qualification confirmation DB, 300 ... Internet, 301 ... qualification confirmation terminal (personal authentication information reading means, determination means, identification information creation means)

Claims (6)

Personal authentication information reading means for reading personal authentication information for identifying an individual stored in the personal authentication card;
Identification information creating means for creating unique identification information based on a predetermined identification information creating method from the personal authentication information read by the personal authentication information reading means;
Identification information created by the identification information creating means is recorded in a storage unit provided in a personal information presentation card in the form of a card holder in which specific personal information related to an individual is displayed and which accommodates the personal authentication card. And a personal information presentation certificate issuance management system.   2. The personal information presentation certificate issuance management system according to claim 1, further comprising storage means for storing an issuance status of the card holder-like personal information presentation certificate. Personal authentication information reading means for reading personal authentication information for identifying an individual stored in the personal authentication card;
Identification information reading means for displaying identification information stored in a storage unit provided in a personal information presentation card in the form of a card holder in which specific personal information related to an individual is displayed and containing the personal authentication card;
A personal authentication system comprising: judgment means for judging consistency between the personal authentication information read by the personal authentication information reading means and the identification information read by the identification information reading means. An identification information creating means for creating identification information from personal authentication information based on a predetermined identification information creating method used when creating unique identification information from the personal authentication information read by the personal authentication information reading means. And
4. The personal authentication system according to claim 3, wherein the determination unit determines whether or not the identification information read by the identification information reading unit matches the identification information created by the identification information creation unit.   The personal authentication information for identifying the individual stored in the personal authentication card is read, specific personal information about the individual is displayed, and provided on a personal information presentation certificate in the form of a card holder that accommodates the personal authentication card A personal authentication method comprising: reading identification information stored in a storage unit, and determining consistency between the personal authentication information and the identification information. Based on a predetermined identification information creation method used when creating unique identification information from the personal authentication information, the identification information is created from the personal authentication information,
6. The personal authentication method according to claim 5, wherein it is determined whether or not the read identification information matches the created identification information.

Images