JP2005354264A - System and method for providing personal information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To safely provide personal information of portable communication terminal carriers possessed by portable telephone service providers or the like via a portable communication terminal by data communication using a communication path via the portable communication terminal. <P>SOLUTION: A communication provider server 4 acquires the personal information of the portable telephone terminal carrier from a personal information database on the basis of a request from the portable telephone terminal 2, encrypts the acquired personal information by a session key shared only among store terminals 1, and replies it to the portable telephone terminal 2. The portable telephone terminal transmits the received encrypted personal information to the store terminal 1. The store terminal 1 decrypts the received encrypted personal information by a session key shared only among the communication provider servers 4. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a personal information providing system and method.

  In recent years, various stores such as retail stores, rental shops, beauty salons, etc. have registered customers for the purpose of customer management and customer preferential treatment, etc., and issued membership cards to registrants. It has been broken. When issuing a membership card, you will be asked to enter personal information (name, address, date of birth, etc.) to identify the customer when they visit the store, and for identity verification to prevent unauthorized use as necessary. ID card such as license, insurance card, passport, etc.

Also, as an online service user identification method, the output device is equipped with a function to read identification cards such as licenses, insurance cards, passports, etc., and the contents of the identification card read by the output device are provided via the network A technique is known in which a service provider identifies a service user based on the description of the transmitted identification card transmitted to the apparatus (see, for example, Patent Document 1).
JP 2002-259716 A

  However, since it is cumbersome to fill in personal information every time for customer registration in a new use store or service, there are users who avoid registration, which misses the opportunity to acquire customers for stores and service providers It is an important issue that could be a problem. In addition, the user needs to carry an identification card for identity verification, which is inconvenient for the user.

  Under such circumstances, it is considered to acquire and use personal information from a personal information database managed by a third party organization. For example, it is conceivable that the mobile phone operator owns the subscriber's personal information and uses this personal information database for the personal authentication service. In this case, it is not preferable to directly access the authentication server of the mobile phone operator from the terminal of the store or service provider from the viewpoint of protecting the subscriber's personal information. In addition, since there are a plurality of mobile phone operators, it is necessary for stores and service providers to prepare facilities for accessing the authentication servers of all mobile phone operators, which may be supported depending on the stores and service providers. A situation that cannot be done occurs. For this reason, it is preferable that the store or the service provider accesses the authentication server of the mobile phone operator via the user's mobile phone and receives provision of personal information.

  Therefore, when a mobile phone is used as a communication relay device, a problem is to safely transmit personal information from the authentication server of the mobile phone operator to the terminal of the store or service provider. In other words, the number of users is unspecified, and therefore the mobile phone that serves as a communication relay device is also targeted to the unspecified number. Even in such a communication environment, personal information can be safely provided by data communication. Is required.

  The present invention has been made in consideration of such circumstances, and the object thereof is the data communication using a communication path passing through the mobile communication terminal, and the mobile communication terminal owner owned by the mobile phone operator or the like. An object of the present invention is to provide a personal information providing system and method capable of safely providing personal information via a mobile communication terminal.

  In order to solve the above-mentioned problems, a personal information providing system according to the present invention is capable of data communication with a personal information transmitting device that can access a database that stores personal information and the personal information transmitting device via a wireless communication network A personal information providing system having a portable information terminal and a personal information receiving device capable of data communication with the portable communication terminal, wherein the personal information transmitting device is shared with the personal information receiving device. Means for generating a key; means for generating a session key by inputting a random number generated each time personal information is provided and the master shared key into a one-way conversion function; and encrypting data using the session key And the personal information receiving apparatus generates a master shared key shared with the personal information transmitting apparatus, and the generated master shared key Means for inputting a random number into the one-way conversion function to generate a session key; and means for decrypting data using the generated session key. Based on the request from the communication terminal, the personal information of the mobile communication terminal holder is acquired from the database, the acquired personal information is encrypted and returned to the mobile communication terminal, and the mobile communication terminal The encrypted personal information received from the transmitting device is transmitted to the personal information receiving device, and the personal information receiving device decrypts the encrypted personal information received from the mobile communication terminal.

  In the personal information providing system according to the present invention, the personal information transmitting device generates a key obtained by converting the generated session key using the one-way conversion function, transmits the generated key to the mobile communication terminal, and receives the personal information The apparatus generates a key obtained by converting the generated session key using the one-way conversion function.

  In the personal information providing system according to the present invention, the personal information receiving device transmits the generated session key to the mobile communication terminal after normal reception of the encrypted personal information.

  The personal information providing method according to the present invention includes a personal information transmitting device that can access a database that stores personal information, a mobile communication terminal that can perform data communication with the personal information transmitting device via a wireless communication network, and the mobile communication. A personal information providing method in a personal information providing system having a personal information receiving device capable of data communication with a terminal, wherein the personal information transmitting device generates a master shared key shared with the personal information receiving device Means for generating a session key by inputting a random number generated each time personal information is provided and the master shared key into a one-way conversion function; and means for encrypting data using the session key; The personal information receiving device includes means for generating a master shared key shared with the personal information transmitting device, and the generated master shared key and the random number. Means for generating a session key by inputting to the one-way conversion function; and means for decrypting data using the generated session key, wherein the personal information transmitting device is connected to the mobile communication terminal. A process of acquiring personal information of the mobile communication terminal holder from the database based on the request, a process of encrypting the acquired personal information and returning the personal information to the mobile communication terminal, and the mobile communication terminal Transmitting the encrypted personal information received from the information transmitting device to the personal information receiving device, and the personal information receiving device decrypting the encrypted personal information received from the mobile communication terminal. It is a feature.

  In the personal information providing method according to the present invention, the personal information transmitting device generates a key obtained by converting the generated session key using the one-way conversion function and transmits the generated key to the mobile communication terminal; The information receiving apparatus further includes a step of generating a key obtained by converting the generated session key using the one-way conversion function.

  In the personal information providing method according to the present invention, the personal information receiving device transmits the generated session key to the mobile communication terminal after the normal reception of the encrypted personal information.

  According to the present invention, the encrypted personal information transferred from the personal information transmitting device to the personal information receiving device via the mobile communication terminal is shared only between the personal information transmitting device and the personal information receiving device. Therefore, the personal information can be safely provided to the personal information receiving apparatus via the mobile communication terminal.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of a personal information providing system according to an embodiment of the present invention. In FIG. 1, a store terminal 1 is a customer registration terminal provided in a store. The mobile phone terminal 2 is a terminal owned by a store user and a subscriber terminal of the mobile phone communication network 3. The mobile phone terminal 2 has a function of performing a voice call and data communication via the mobile phone communication network 3 by wireless communication.

  The communication carrier server 4 is a server of the carrier of the mobile phone communication network 3 and is connected to the mobile phone communication network 3 for communication. The personal information database 5 stores personal information (name, address, date of birth, etc.) of subscribers of the mobile phone communication network 3 and is managed by the business operator of the mobile phone communication network 3. The telecommunications carrier server 4 can access the personal information database 5 by communication to search and acquire personal information.

Next, operations related to the personal information providing system of FIG. 1 will be described with reference to FIG.
FIG. 2 is a sequence chart showing a flow of personal information providing processing in the personal information providing system shown in FIG.
First, a user enters authentication information (password, fingerprint, etc.) into the mobile phone terminal 2 to make the mobile phone terminal 2 usable. Then, the mobile phone terminal 2 is operated to start local communication with the store terminal 1 of the store that may provide the user's own personal information. This local communication may be wireless communication such as infrared communication or short-range wireless communication, or may be wired communication using a communication cable.

  Next, the user operates the mobile phone terminal 2 to activate software for providing personal information. Thereby, the mobile phone terminal 2 first generates a random number R and transmits it to the store terminal 1 (step S1).

  Next, when the store terminal 1 receives the random number R, it adds an electronic signature to the random number R with its own public key C (step S2), and sends the public key C and its public key certificate together with the random number R and its signature to the mobile phone. It transmits to the terminal 2 (step S3).

  Next, the mobile phone terminal 2 verifies whether the random number R received from the store terminal 1 matches that transmitted by itself, and verifies the signature (step S4). In addition, the name of the store operator obtained from the received public key certificate is displayed. The user confirms the name of the displayed store operator.

  Next, when the verification in step S4 is successful, the mobile phone terminal 2 starts access to the communication carrier server 4 via the mobile phone communication network 3, and performs terminal authentication processing with the communication carrier server 4. Perform (step S5). If access is permitted as a result of this authentication, the mobile phone terminal 2 transmits the random number R, signature, public key C, and public key certificate received from the store terminal 1 to the telecommunications carrier server 4, and the personal information is transmitted. A request is made (step S6).

  Next, when receiving the information from the mobile phone terminal 2, the telecommunications carrier server 4 accesses the personal information database 5 to acquire the personal information of the subscriber of the mobile phone terminal 2, and encrypts the personal information. Is performed (step S7).

  In this encryption process, first, a master shared key Km is generated from the private key of the carrier server 4 and the public key C received from the mobile phone terminal 2 using a DH (Diffie-Hellman) key sharing method. To do. Next, the master shared key Km and the random number R received from the mobile phone terminal 2 are concatenated, and this concatenated data is input to a one-way conversion function, for example, a one-way hash function, to obtain a conversion value. This converted value is used as a session key K. Since the session key K is generated based on the random number R generated each time personal information is provided, it differs every time. The session key K is a disposable key. Next, the personal information is encrypted using the session key K. Then, an electronic signature is added.

  Returning to FIG. 2, the telecommunications carrier server 4 then returns the encrypted personal information to the mobile phone terminal 2 (step S8). The mobile phone terminal 2 transfers the encrypted personal information received from the communication carrier server 4 to the store terminal 1 (step S9).

  Next, when the store terminal 1 receives the encrypted personal information from the mobile phone terminal 2, the store terminal 1 verifies the signature added to the encrypted personal information, and performs a process of decrypting the encrypted personal information when this verification is successful (step). S10).

  In this decryption process, a master shared key Km is generated from the secret key of the store terminal 1 and the public key of the communication carrier server 4. Thereby, the master shared key Km is shared only between the shop terminal 1 and the communication carrier server 4. In addition, what is necessary is just to acquire the public key of the communication carrier server 4 online or offline. Next, using the master shared key Km and the random number R, the session key K is similarly generated by the one-way conversion function common to the carrier server 4. Accordingly, the session key K is the same as the key generated by the communication carrier server 4 and used for encrypting the encrypted personal information. Next, the encrypted personal information is decrypted using the session key K.

  Thereby, the shop terminal 1 can obtain the user's personal information, and performs customer registration using this personal information.

  According to the above-described embodiment, the encrypted personal information is transferred from the telecommunications carrier server 4 to the store terminal 1 via the mobile phone terminal 2, and the encrypted personal information is stored in the store terminal 1 and the telecommunications carrier. Encryption is performed using a session key K based on a master shared key Km shared only between the servers 4. Therefore, even if the encrypted personal information is acquired by the mobile phone terminal 2 during the transfer from the telecommunications carrier server 4 to the store terminal 1, the information content cannot be tampered with. Personal information can be provided to the store terminal 1.

  Further, since the session key K is generated based on the generated random number R every time personal information is provided, the session key K is changed every time personal information is provided, so that unauthorized use can be prevented.

  In addition, since the user is provided with his / her personal information via his / her mobile phone terminal, the user can feel secure.

  According to this embodiment, the user can save the trouble of entering personal information every time for customer registration at a newly used store or service. Further, the user does not need to carry an identification card, and the convenience for the user is improved. This makes it easier for shops and service providers to solicit customer registration, and as a result, opportunities for acquiring customers can be increased.

  Note that the verification of the signature of the random number R and the confirmation of the store operator in step S4 may be executed by the communication operator server 4.

  Further, the transfer of the encrypted personal information to the store terminal 1 by the mobile phone terminal 2 may be an automatic transfer or a manual transfer by a user operation.

The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes design changes and the like within a scope not departing from the gist of the present invention.
For example, if the carrier server 4 generates a key K ′ obtained by converting the session key K using a one-way conversion function and provides the key K ′ to the mobile phone terminal 2, the store terminal 1 similarly generates the key K ′. The key K ′ can be shared between the mobile phone terminal 2 and the store terminal 1. Thereby, it becomes possible to perform data communication safely between the mobile phone terminal 2 and the store terminal 1 using the key K ′. For example, if the store terminal 1 encrypts the registered data (membership number, etc.) with the key K ′ and transmits it to the mobile phone terminal 2 after the customer registration process, the membership number etc. can be safely transmitted to the user. Can do.

  Further, the store terminal 1 may transmit the encrypted personal information and the session key K to the mobile phone terminal 2 after normal reception of the encrypted personal information. Thereby, the user can confirm the personal information from the communication carrier server 4.

  In the above-described embodiment, the random number R generated in the mobile phone terminal 2 is used as it is as the random number used to generate the session key K. However, every time the carrier server 4 provides personal information, the session key K is used. A random number for generation may be generated. This random number is transferred to the store terminal 1 together with the encrypted personal information.

  In the embodiment described above, the personal information database managed by the telecommunications carrier is used. However, a personal information database managed by another third-party organization may be used.

  The present invention can also be applied to on-line registration and unattended registration by machine. For example, the present invention can be applied to user identification of a cashing apparatus of a financial institution.

It is a block diagram which shows the structure of the personal information provision system which concerns on one Embodiment of this invention. It is a sequence chart which shows the flow of the personal information provision process in the personal information provision system shown in FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Store terminal (personal information receiving device), 2 ... Mobile telephone terminal, 3 ... Mobile telephone communication network, 4 ... Communication carrier server (personal information transmitting device), 5 ... Personal information database.

Claims (6)

Personal information transmitting device capable of accessing a database storing personal information, portable communication terminal capable of data communication with the personal information transmitting device via a wireless communication network, and personal information receiving device capable of data communication with the portable communication terminal A personal information providing system comprising:
The personal information transmitting device is:
Means for generating a master shared key shared only with the personal information receiving device;
Means for generating a session key by inputting a random number generated each time personal information is provided and the master shared key into a one-way conversion function;
Means for encrypting data using the session key;
The personal information receiving device includes:
Means for generating the master shared key shared only with the personal information transmitting device;
Means for inputting the generated master shared key and the random number into the one-way conversion function to generate a session key;
Means for decrypting data using the generated session key;
The personal information transmitting device is:
Based on the request from the mobile communication terminal, the personal information of the mobile communication terminal holder is acquired from the database, the acquired personal information is encrypted and returned to the mobile communication terminal,
The mobile communication terminal is
Transmitting the encrypted personal information received from the personal information transmitting device to the personal information receiving device;
The personal information receiving device is:
A personal information providing system that decrypts the encrypted personal information received from the mobile communication terminal. The personal information transmitting device generates a key obtained by converting the generated session key using the one-way conversion function and transmits the generated key to the mobile communication terminal,
The personal information providing system according to claim 1, wherein the personal information receiving apparatus generates a key obtained by converting the generated session key using the one-way conversion function.   3. The personal information providing system according to claim 1, wherein the personal information receiving apparatus transmits the generated session key to the mobile communication terminal after normal reception of the encrypted personal information. Personal information transmitting apparatus capable of accessing a database for storing personal information, portable communication terminal capable of data communication with the personal information transmitting apparatus via a wireless communication network, and personal information receiving apparatus capable of data communication with the portable communication terminal A personal information providing method in a personal information providing system having:
The personal information transmitting device is:
Means for generating a master shared key shared with the personal information receiving device;
Means for generating a session key by inputting a random number generated each time personal information is provided and the master shared key into a one-way conversion function;
Means for encrypting data using the session key;
The personal information receiving device includes:
Means for generating a master shared key shared with the personal information transmitting device;
Means for inputting the generated master shared key and the random number into the one-way conversion function to generate a session key;
Means for decrypting data using the generated session key;
The personal information transmitting device is
Acquiring the personal information of the mobile communication terminal holder from the database based on the request from the mobile communication terminal;
A process of encrypting the acquired personal information and returning it to the mobile communication terminal;
The mobile communication terminal is
Transmitting encrypted personal information received from the personal information transmitting device to the personal information receiving device;
The personal information receiving device is
Decrypting the encrypted personal information received from the mobile communication terminal;
The personal information provision method characterized by including. The personal information transmitting device generates a key obtained by converting the generated session key using the one-way conversion function and transmits the generated key to the mobile communication terminal;
The personal information receiving device generating a key obtained by converting the generated session key by the one-way conversion function;
The method for providing personal information according to claim 4, further comprising: 6. The personal information providing method according to claim 4, wherein the personal information receiving apparatus transmits the generated session key to the mobile communication terminal after the normal reception of the encrypted personal information.

Images