JP2006031454A - Authentication system, authentication communication apparatus, and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a method for surely authenticating a representative as a regular representative when requesting the representative to receive articles, money, information, duties, or the like and for making the representative receive the articles safely. <P>SOLUTION: The provider of the articles or the like uses a first communication apparatus 1 before delivering the articles or the like to the representative to transmit specific information 2, such as a face image of the representative or the like, to a requester. The requester receives a specific information signal 3 by using a third communication apparatus 4 and, on the basis of a specific information output 5, authenticates whether the representative is the regular representative. After the authentication processing, the requester transmits authentication result information 6, and the first communication apparatus 1 receives an authentication result signal 7. A decision part 8 decides on the basis of a authentication result output 9 whether or not the provision is possible and the contents of the articles provided or the like. On the basis of a decision result 10, the provider provides the representative with the articles or the like or refuses to do so. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an authentication method and an authentication system for authenticating an authorized agent when a client who has the right to receive an article requests the agent to receive the article, and in particular, the client himself directly represents the agent. The present invention relates to a method for authenticating a person and an authentication system.

  In the prior art, there is an authentication system for authenticating a purchaser at the time of purchase using a credit card or the like. In this authentication system, the purchaser's face image information registered with a credit card company is sent to a member store of the card, and the member store confirms the image with an authentication terminal for authentication. (For example, refer to Patent Document 1).

  In addition, a system is also described in which a member store confirms the face image displayed on the screen of the purchaser's mobile phone by sending the face image registered with the credit card company to the purchaser's mobile phone using the same system. (For example, refer to Patent Document 2). In the technique described in Patent Document 2, the telephone number of a mobile phone held by a card contractor is registered in a credit card company. Therefore, first, the mobile phone holder is authenticated by verifying the phone number of the mobile phone held by the card holder with the registered number. Next, the face image of the registered card contractor is sent to the card holder's mobile phone or the terminal of the member store. Then, the member store confirms the face image and authenticates that it is a regular card contractor.

  Furthermore, a system is also described in which authentication is performed by using a device for authentication (identity authentication server) and performing authentication based on a registered contractor's face image and a purchaser's face image (for example, Patent Document 3). reference.).

Japanese Patent Laid-Open No. 2001-306984 (first, third, fourth page, FIG. 2) JP 2002-032572 A (page 1-4, FIGS. 5 and 6) JP 2001-306517 A (page 1-4, FIG. 1)

  Each of the above known techniques has problems.

  In the techniques described in Patent Documents 1 and 2, only a regular purchaser, that is, a card contractor, registers face images. Therefore, it cannot be applied when the contractor wants to request another person for purchasing.

  In the techniques described in Patent Documents 1 and 2, in order to enable purchase by an agent, for example, the purchaser rewrites registration information or contracts all persons who may become agents with a credit card company. Sometimes it is necessary to register.

  However, it is dangerous for the security to allow the purchaser to rewrite the registration information. When the card is lost or the card is stolen, there is a risk that the card acquirer becomes a legitimate buyer by rewriting the registration information. When registering an agent, it is desirable to register only for a necessary period, and to delete the immediate registration when it is no longer necessary. However, a simple registration change that allows such a response is dangerous.

  As for the method of registering agents at the time of contracting, there is a possibility that the number of registered persons will increase because no agents other than registered persons can be used. However, for safety, it is necessary to limit the number of people who can use the card to a minimum.

  As described above, the method of registering face images in advance is inappropriate for the request of purchasing agent.

  Further, there is a problem in authenticity with respect to the method for the member store to confirm the face image. This is because there is a possibility that a person with a similar member store may mistakenly authenticate a person as a regular purchaser. It is difficult to correctly determine whether the person is the same person by comparing the first person and the photograph. In addition, it is speculated that there are circumstances that member stores cannot make strict judgments. Thus, there is a problem with the authentication method of confirming a face image by a member store.

  In the technique described in Patent Document 2, authentication using a mobile phone number is also performed before authentication using a face image. However, the problem pointed out above has not been solved in that only registered persons can be authenticated and the member store confirms the face image.

  The technique described in Patent Document 3 also has a problem that it is not suitable for a purchasing agent in that it uses information such as registered face images.

  Furthermore, there is a problem with mechanically processing and authenticating face image information. The human face is a three-dimensional shape with a complicated shape, and the color is also subtly distributed. Therefore, the accuracy beyond authentication by human eyes cannot be obtained by mechanical processing. Furthermore, since it is not possible to expect a flexible response to mechanical processing, it is necessary to set strict certification standards for safety. In that case, it can be said that there is a big problem in that there is a possibility that a legitimate purchaser may be rejected in actual operation.

  As described above, the conventional technique has a drawback that authentication cannot be performed because the face image is authenticated by the first meeting person or the machine, which cannot be applied to purchases other than registered persons. That is, the conventional technique has a drawback that it cannot cope with a case where an agent purchases an article using a credit card.

  The above is a problem related to the purchase of goods using a credit card, but the same is true when cash is withdrawn at a bank ATM or the like. At the time of cash withdrawal with ATM, since all processing is performed by a machine, application of the technique described in Patent Document 3 can be considered. This technique has the problem of uncertainty for machine authentication, as explained above. There is also a problem that it is not possible to withdraw from registered contractors.

  Furthermore, in the techniques described in Patent Documents 1, 2, and 3, when requesting a proxy from another person, it is necessary to deposit a credit card with the proxy in order to prove that it is a proxy. Giving a credit card or cash card to another person, and notifying another person of your PIN is extremely dangerous and should be avoided as much as possible.

When requesting an agent, in order to further ensure safety, it is desirable that an authorized contractor can confirm the goods to be purchased, the amount to be withdrawn, etc. immediately before the purchase or withdrawal. In addition, it is desirable that the contents of purchase or withdrawal (article, amount, etc.) can be changed as necessary. Furthermore, it is desirable to be able to confirm the contents actually purchased and withdrawn immediately after the purchase or withdrawal. The conventional technology cannot respond to them at all.
(Object of invention)
The present invention has been made in view of the above technical defects, and it is possible for a contractor such as a credit card or a cash card to request an agent for receipt of goods and cash withdrawal. It is an object of the present invention to provide an authentication method and an authentication system that can be requested from an agent safely and reliably without the necessity of depositing the agent or notifying a personal identification number.

  The authentication system of the present invention transmits predetermined specific information input from the outside, receives the authentication result information that is the authentication result based on the specific information, and the specific information from the first communication device. A second communication device that receives and transmits authentication result information to the first communication device, and a determination unit that performs a predetermined determination based on the authentication result information.

  The unique information may be information that identifies a subject that inputs unique information to the first communication device. The determination unit may determine whether or not a predetermined offer can be provided. Offerings may include goods, money, information or services.

  The authentication system of the present invention may include a third communication device that transmits unique information to the first communication device. The provision request information, which is information related to the request contents of the provision, may be input from the outside by the first communication device. Or you may provide the 3rd communication apparatus which transmits provision request information to a 1st communication apparatus.

  In addition, the first communication device transmits the provision request information to the second communication device, and the second communication device transmits the provision permission information that is the provision permission content based on the provision request information to the first communication device. The determination unit may determine the provided content of the provision based on the provision permission information.

  The second communication device transmits provision designation information, which is information for designating the provision content of the provision, to the first communication device, and the determination unit determines the provision content of the provision based on the provision designation information. Good.

  The third communication device may use a dedicated program for transmitting the unique information to the first communication device. The dedicated program may add identification information indicating that the unique information is communicated by the dedicated program to the unique information. When the specific information has been created and a predetermined time has elapsed, the dedicated program may not communicate the specific information. The dedicated program may be activated by inputting predetermined activation information. The dedicated program may operate on the third communication device or may operate on the information providing device on the network.

  The first communication device, the second communication device, and the third communication device may be connected to a network including an information providing device that provides information, and may transmit information via the information providing device.

  The first communication device, the second communication device, and the third communication device may use wireless communication. Or you may communicate with another communication apparatus by a cable or direct connection. You may provide the access function to the medium which can exchange information using a predetermined medium.

  The unique information transmitted by the third communication device may include third communication device information that identifies the third communication device. The first communication device may transmit first communication device information that identifies the first communication device to the second communication device. The second communication device may transmit second communication device information that identifies the second communication device to the first communication device.

  The unique information may include at least one of a still image, a moving image, and audio. The unique information may include numerical information or character information set to identify the subject.

  The authentication communication device may be an ATM system or a door opening / closing system.

  In the authentication method and authentication system of the present invention, when requesting an agent to receive an article, the agent requesting the agent using the agent's unique information indicates that the person requesting the receipt is an authorized agent. The client himself authenticates. Therefore, there is an effect that the authentication is reliable and there is no possibility that the provision of the article is erroneously permitted or rejected. Since it is not necessary to register unique information such as the face image of the agent, the agent can be freely selected.

  Further, since the unique information of the agent is sent to the client using the communication device, the authentication process can be performed from a remote place. Therefore, even when receiving a product at a place where the client cannot go, the agent can go to the place and receive it.

  Further, there is no need for a dangerous act such as lending a device such as a cash card or a credit card that proves the right to receive, and there is no need to notify secret information such as a personal identification number.

  Thus, in the authentication method and authentication system of the present invention, an agent can be freely selected, the agent is surely authenticated, there is no geographical restriction on the place of receipt, and the agent can be maintained with extremely high security. There is a remarkable effect that it can be requested.

  Next, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is a block diagram showing the best mode for carrying out the present invention. FIG. 2 is a flowchart showing the operation of the best mode. FIG. 3 is a block diagram showing a form in which some functions of the best form are changed. FIG. 4 is a block diagram showing the first embodiment. FIG. 5 is a flowchart showing the operation of the first embodiment. 6, 7 and 8 are block diagrams showing an embodiment in which some of the functions of the second embodiment are changed. FIG. 9 is a block diagram showing the second embodiment. FIG. 10 is a flowchart showing the operation of the second embodiment. FIG. 11 is a block diagram showing a third embodiment. FIG. 12 is a flowchart showing the operation of the third embodiment. FIG. 13 is a block diagram showing the fourth embodiment. FIG. 14 is a flowchart showing the operation of the fourth embodiment. FIG. 15 is a block diagram showing the fifth embodiment. FIG. 16 is a flowchart showing the operation of the fifth embodiment.

  The best mode for carrying out the present invention will be described with reference to FIGS. In the present embodiment, it is assumed that the client requests the agent to receive the item from the provider, and the agent receives the item from the provider on behalf of the client.

  For example, this corresponds to a case where a credit card contractor (client) requests a person (agent) to purchase an article at a store (provider) and purchases it instead. Alternatively, the client may request the agent to withdraw cash at the bank's ATM.

  At this time, the credit card or the cash card itself is not lent to the agent, and the agent sends information for authenticating the client to the client from the store, for example, a face image. The client performs authentication by looking at the sent face image and informs the store of the authentication result. The store confirms that the agent has been authenticated, and provides goods and cash to the agent.

  The best mode for carrying out the present invention and the flow of information will be described with reference to FIGS.

  First, the first communication device 1 inputs the unique information 2 (S1). This input is done by the agent. The first communication device 1 corresponds to a credit card reader or a device in which a reading function of the unique information 2 is added to the ATM.

  The first communication device 1 transmits the unique information signal 3 to the second communication device 4 based on the input unique information 2 (S2). The second communication device 4 corresponds to a mobile phone held by the client.

  The second communication device 4 receives the unique information signal 3 and outputs it as the unique information output 5 (S3). The unique information output 5 is an output based on the unique information 2 and corresponds to the display of the agent's face image on the screen of the mobile phone. The client performs a predetermined authentication process based on the unique information output 5.

  For example, if the unique information output 5 is a face image, it is determined whether or not it is a face image of the agent himself. If the unique information output 5 belongs to the agent himself / herself, information indicating “authentication completed” is added to the authentication result information 6, and if the unique information output 5 does not belong to the agent himself / herself, information indicating “authentication impossible” is added.

  Then, the client inputs the authentication result information 6 to the second communication device 4 (S4). The second communication device 4 transmits the input authentication result information 6 as an authentication result signal 7 (S5). The first communication device 1 receives the authentication result signal 7 and outputs it as the authentication result output 9 to the determination unit 8 (S6).

  The determination unit 8 performs a predetermined determination based on the authentication result output 9, and outputs a determination result 10 (S7). The provider provides the article according to the determination result 10.

  As described above, according to the authentication method of the present invention, since the client himself authenticates the agent, the authentication is reliable and the registration of unique information is unnecessary, so the agent can receive the item safely and flexibly. Can be requested.

  In the best embodiment described above, the agent inputs the unique information 2 to the first communication device 1. The unique information 2 can also be transmitted to the first communication device 1 using a predetermined communication device. For example, a case where a face image is transmitted to the first communication device 1 using a communication device such as a mobile phone possessed by an agent corresponds to this. FIG. 3 is an embodiment in which the agent transmits the unique information 2 to the first communication device 1 using the third communication device 11. The operation after the first communication device 1 receives the unique information 2 from the third communication device 11 is the same as that shown in FIGS.

  The unique information 2 is information for authenticating that the agent is a legitimate agent and may be information that can identify the agent. For example, the agent's face image, moving image, voice, or a personal identification number agreed with the client 35 may be used.

  By adopting the above authentication method, the agent can be reliably authenticated, and the agent can be securely requested to receive the item.

  The provision provided by the provider is not limited to tangibles such as goods and money, but may be intangibles such as information and services. The provider is not necessarily a “person” (person), and may be an automated device. For example, a bank ATM machine may perform all the processes of the first communication device 1, the determination unit 8 and the provider, or a device such as a credit card reader may be used as the first communication device 1 and the determination unit 8. It may be used as a human being only to provide an offer.

  In the present embodiment, the information communication method between the client, the agent, and the provider, that is, the first communication device 1, the second communication device 4, and the third communication device 11 are particularly limited. It is not something. Therefore, it is possible to use wireless communication such as a cellular phone, short-range wireless communication, or wired communication such as a fixed telephone. When the client, agent, and provider are in the same place, various communication devices such as a connection with a communication partner using a cable and a direct connection using a connector can be used. Alternatively, information communication using a predetermined storage medium or paper can also be used.

  The first communication device 1, the second communication device 4, and the third communication device 11 can also transmit information specifying each communication device to the transmission partner. In this case, since the transmission side can be determined on the reception side, it is possible to determine whether or not the transmission source is correct when receiving the unique information 2, the unique information signal 3, the authentication result signal 7, and the like. This is because the transmission sources of the unique information 2, the unique information signal 3, and the authentication result signal 7 are known in advance.

  In the above-described embodiment, information regarding articles to be provided is not exchanged. The present invention can also deal with the exchange of information related to the provided articles.

  The operation of the first embodiment corresponding to the exchange of information about the article will be described with reference to FIGS.

  First, the agent inputs the unique information 2 to the first communication device 1 (S1). Next, the agent inputs the provision request information 12 to the first communication device (S1-1). The order of the S1 step and the S1-1 step is not particularly limited.

  The provision request information 12 is information on the contents of the request from the agent to the provider. Information for specifying the provider, such as the name and location of the store, and information necessary for purchasing the article, such as the item and quantity of the article. Including. The operation (S2 to S5) from when the first communication device 1 inputs the unique information 2 and the provision request information 12 until the authentication result signal 7 is received is the same as that shown in FIGS.

  When receiving the authentication result signal 7, the first communication device 1 outputs the authentication result signal 7 and the provision request information 12 to the determination unit 8 as the authentication result output 13 (S6-1). The authentication result output 13 is different from the authentication result output 9 in that the provision request information 12 is included.

  The determination unit 8 performs determination based on the authentication result signal 7 and the provision request information 12 in the authentication result output 13, and outputs the determination result 10 (S7-1).

  In the first embodiment, since the provision request information 12 is transmitted to the determination unit 8, a provision can be designated.

  Various methods can be used for inputting or transmitting the unique information 2 and the provision request information 12 to the first communication device. FIG. 6 shows an example in which the unique information 2 and the provision request information 12 are transmitted from the third communication device 11 to the first communication device 1. FIGS. 7 and 8 show an embodiment in which one of the unique information 2 and the provision request information 12 is input to the first communication device 1 and the other is transmitted from the third communication device 11. 6, 7, and 8, the operation after the first communication apparatus 1 inputs or receives the unique information 2 and the provision request information 12 is the same as that in FIGS. 4 and 5. .

  When the first communication device 1 inputs or receives the unique information 2 and the provision request information 12, the received information can be transmitted to the second communication device 4. Thereby, the client can confirm the contents of the provision request information 12.

  The form and the information flow of the second embodiment in which the first communication device 1 transmits the unique information 2 and the provision request information 12 to the second communication device 4 will be described with reference to FIGS. 9 and 10.

  First, the agent inputs the unique information 2 to the first communication device 1 (S1). Next, the provision request information 12 is input (S1-1). The order of the S1 step and the S1-1 step is not particularly limited.

  The first communication device 1 transmits the input unique information 2 and provision request information 12 to the second communication device 4 as a unique information signal 14 (S2-1). The unique information signal 14 differs from the unique information signal 3 in that it includes the provision request information 12.

  The second communication device 4 outputs the received unique information signal 14 as the unique information output 15 (S3-1). The unique information output 15 is different from the unique information output 5 in that it includes an output related to the provision request information 12. The client performs a predetermined authentication process based on the unique information output 15.

  For example, the client determines whether the face image in the unique information output 15 is the face image of the agent himself. Next, if the face image is that of the agent, the provision request information 12 in the unique information output 15 is confirmed, and it is confirmed whether it is the requested article content. If it is different from the request content, it is corrected, and if it is desired to change the request content, it is corrected and added to the authentication result information 16 as provision permission information. The authentication result information 16 is different from the authentication result information 6 in that it includes provision permission information.

  Then, the client inputs the authentication result information 16 to the second communication device 4 (S4-1). The second communication device 4 transmits the input authentication result information 16 as an authentication result signal 17 (S5-1). The first communication device 1 receives the authentication result signal 17 and outputs it as the authentication result output 18 to the determination unit 8 (S6-2). The authentication result output 18 is different from the authentication result output 9 and the authentication result output 13 in that it includes provision permission information.

  The determination unit 8 performs a predetermined determination based on the authentication result output 18 and outputs a determination result 10 (S7-2). That is, the determination unit 8 makes a determination based on the authentication result information 16 and the provision permission information in the authentication result output 18, determines whether or not to provide the content, and determines the content of the provided object. Output. The provider provides the article according to the determination result 10.

  In the second embodiment, since the client confirms the provision request information 12, it is possible to specify the provision, confirm the provision, and change the provision as necessary. Therefore, an offer different from the requested content is not provided by mistake.

  The third communication device 11 can be used for inputting or transmitting the specific information 2 and the provision request information 12 to the first communication device, as in FIGS.

  In the second embodiment, information about the provision request is transmitted from the agent to the determination unit 8, but it may be transmitted from the client.

  With reference to FIG. 11 and FIG. 12, the form of the third embodiment in which the client transmits the provision designation information to the first communication device 1 using the second communication device 4 and the flow of information will be described. The provision designation information is information indicating the contents of the article that the client wants to request the agent to receive.

  First, the agent inputs the unique information 2 to the first communication device 1 (S1). The first communication device 1 transmits the input unique information 2 as the unique information signal 3 to the second communication device 4 (S2).

  The second communication device 4 outputs the received unique information signal 3 as the unique information output 5 (S3). The client performs a predetermined authentication process based on the unique information output 5. For example, the client determines whether the face image in the unique information output 5 is the face image of the agent himself.

  Next, if the face image belongs to the agent, provision instruction information indicating a provision that the agent wants to receive is added to the authentication result information 19. The authentication result information 19 is different from the authentication result information 6 and the authentication result information 16 in that it includes provision instruction information.

  Then, the client inputs the authentication result information 19 to the second communication device 4 (S4-2). The second communication device 4 transmits the input authentication result information 19 as an authentication result signal 20 (S5-2). The authentication result signal 20 is different from the authentication result signal 7 and the authentication result signal 17 in that it includes provision instruction information. The first communication device 1 receives the authentication result signal 20 and outputs it as the authentication result output 21 to the determination unit 8 (S6-3). The authentication result output 21 is different from the authentication result output 9, the authentication result output 13, and the authentication result output 18 in that it includes provision instruction information.

  The determination unit 8 performs a predetermined determination based on the authentication result output 21 and outputs a determination result 10 (S7-2). That is, the determination unit 8 makes a determination based on the authentication result information and the provision designation information in the authentication result output 21 and outputs the determination result 10. The provider provides the article according to the determination result 10.

  In the third embodiment, since the client designates the provision as the provision designation information, it is possible to request only the receipt without notifying the agent of the contents of the provision.

  Next, a fourth embodiment of the present invention will be described with reference to FIG. The present embodiment is an embodiment in which the present invention is applied to cash withdrawal at a bank ATM, and shows a specific configuration. In the present embodiment, an example will be described in which a client who has a deposit at a bank requests an agent to withdraw cash, and the agent withdraws cash from an ATM system using a mobile phone.

  FIG. 13 is a block diagram of the fourth embodiment. The bank ATM system 30 includes an ATM operation unit 31 for inputting information for operation and displaying internal information, an ATM communication unit 32 for receiving information from a mobile phone and outputting an authentication result output 18, and an authentication result output 18 And a determination unit 8 that determines whether or not the cash 33 is paid out and a cash payout unit 34 that pays out the cash 33. The cash payout unit 34 corresponds to the provider in the best embodiment, and pays out the cash 33 that is an offer according to the instruction of the determination unit 8. The ATM communication unit 32 and the ATM operation unit 31 correspond to the first communication device 1 in the best mode.

  The mobile phone 4 is a general mobile phone possessed by the client 35, and includes a mobile phone operation unit 36 for inputting information and displaying information for operating the mobile phone 4, and an e-mail for editing e-mail and controlling transmission / reception. A unit 37, a browser unit 38 that controls the display of content specified by the received URL, input / output of information on the browser screen, and transmission / reception control, and a mobile phone communication unit 39 that controls transmission / reception of various information and communication control. The mobile phone 4 corresponds to the second communication device 4 in the best embodiment.

  The mobile phone 11 is a general mobile phone possessed by the agent 40, and includes a mobile phone operation unit 41 for inputting and displaying information for the agent 40 to operate, an e-mail unit 42 for editing e-mail, An application unit 43 that operates a downloaded dedicated application program (hereinafter referred to as a dedicated application), a camera unit 44 that captures an image, and a mobile phone communication unit 45 that transmits and receives e-mail and transmits information such as the captured image. . The mobile phone 11 corresponds to the third communication device 11 in the best embodiment.

  The dedicated application does not necessarily need to operate on the application unit 43, and may operate on the Web. In that case, the application unit exchanges commands and data with a dedicated application operating on the Web. The mobile phone communication unit 45 also has a function of connecting to the Web.

In the fourth embodiment, the communication functions of the ATM communication unit 32, the mobile phone communication unit 36, and the mobile phone communication unit 45 are not particularly limited. You may use the original wireless communication function as a mobile phone. Alternatively, other wireless communication may be used, a fixed telephone communication function, or other wired communication. Further, since the agent 40 and the ATM system 30 are in the same place, the communication device of the mobile phone communication unit 45 is an infrared communication, a short-range wireless communication such as a wireless LAN, Bluetooth, Felica, a wired communication or a cable. Alternatively, direct connection using a connector or the like may be used. Alternatively, information exchange using a predetermined medium may be performed. The same communication device can be used when the client 35 requests the agent 40 for the agent and is present at the same place.
(Operation of the embodiment)
Next, a series of operations according to the present embodiment will be described in order with reference to FIGS. The flowchart of FIG. 14 shows the flow of the operation of the present invention, and the operation is performed over a plurality of subjects, and does not show the processing procedure of a certain component.

  First, the client 35 transmits information such as a bank name, an account number, a withdrawal amount, that is, provision request information 46 to the agent 40, and requests cash withdrawal (S10). For this purpose, the client 35 inputs the provision request input information 47 from the mobile phone operation unit 36, edits it by the electronic mail unit 37, and transmits it as an electronic mail from the mobile phone communication unit 39 to the mobile phone communication unit 45. Here, the communication function of the mobile phone 4 and the mobile phone 11 is used to transmit the provision request information 46, but the communication method is not particularly limited, and short-range wireless communication such as infrared or wireless LAN may be used. Wired communication may be used. Or you may communicate verbally or on paper, and you may communicate using media, such as a memory card.

  The provision request information 46 is received by the mobile phone communication unit 45 and the electronic mail unit 42 and displayed on the mobile phone operation unit 41 as an electronic mail. The agent 40 grasps the provision request information 46 by looking at the display output 48 of the mobile phone operation unit 41. Then, the agent 40 operates the ATM operation unit 31 to input the cash payout request 12 (S11), and transmits to the ATM system 30 that cash is withdrawn as an agent.

  In this embodiment, the cash withdrawal request 12 is input from the ATM operation unit 31 by the agent 40, but may be transmitted from the mobile phone communication unit 45 to the ATM communication unit 32.

  Then, the agent 40 inputs an activation instruction from the mobile phone operation unit 41 as the agent input information 49, and activates the dedicated application downloaded in advance on the application unit 43 (S12). The instruction for starting represents performing an operation for starting the dedicated application in accordance with the display output 48. When the dedicated application is activated, the information output screen of the dedicated application is displayed on the display output 48.

  In step S12, in order to start the dedicated application, it is only necessary to perform a start instruction operation. Furthermore, predetermined activation information 50 displayed on the ATM operation unit 31 may be input as the agent input information 49 to be activated. Specifically, the dedicated application is a program dedicated to the ATM system 30 and is not activated unless the activation information 50 associated with the cash payout request 12 is input. In this case, the dedicated application cannot be activated regardless of the ATM system 30 and the current cash payout request 12. Therefore, it can be assured that the operation using the dedicated application after step S13 is performed according to the instruction of the ATM system 30.

  Further, the platform on which the dedicated application activated in step S12 is not limited. A predetermined application may be started by inputting predetermined information from the mobile phone operation unit 41 and operating on a dedicated Web.

  Next, the agent 40 takes a face image with the camera unit 44 in accordance with the screen instruction of the dedicated application (S13). The face image 51 corresponds to unique information for authenticating the agent 40. The camera unit 44 outputs unique image information 52 including face image information of the agent 40 to the application unit 43.

  The agent 40 inputs the e-mail address of the mobile phone 4 of the client 35, the amount to be withdrawn, and the like from the mobile phone operation unit 41 according to the screen instruction of the dedicated application. The application unit 43 transmits the unique image information 52 as the unique information 2 from the mobile phone communication unit 45 to the ATM communication unit 32 under the control of the dedicated application (S14).

  In order to ensure safety, the application unit 43, when transmitting the agent's unique information 2, is not the unique image information 52 originally stored in the mobile phone 11, but the unique image information photographed on the spot in step S13. 52 is used. In order to clearly indicate that the unique image information 52 in the unique information 2 is taken in accordance with an instruction of the dedicated application, the application unit 43 includes information such as a flag and a photographing time in the unique information 2. Is added as identification information.

  The dedicated application also performs transmission control of the unique information 2. The dedicated application does not transmit the unique information 2 when the unique image information 52 in the unique information 2 has passed for a certain period of time or longer. This ensures that the unique image information 52 in the unique information 2 is a face image taken on the spot.

  The specific information (telephone number or the like) of the mobile phone 11 used for face image shooting may also be automatically added by a dedicated application and transmitted as the unique information 2 from the mobile phone transmission unit 45. Thereby, it becomes more certain that the unique image information 52 belongs to the agent 40.

  In the fourth embodiment, the communication function of the mobile phone 11 is used for transmitting the unique information 2 in S14. When the unique information is an image, the ATM operation unit 31 is equipped with a camera, and a facial image may be taken using the camera. If the unique information is voice, the ATM operation unit 31 may be provided with a microphone.

  The ATM system 30 receives the unique information 2 through the ATM communication unit 32. The unique information 2 includes, in addition to the unique image information 52, the specific information (first communication device information) of the mobile phone 11 used for photographing the face image, the e-mail address of the client 35 and the amount to be withdrawn. ing.

  The ATM system 30 transmits the unique image information 52 included in the unique information 2 from the ATM communication unit 32 to the mobile phone 4 of the client 35 as the ATM transmission mail 14 (S15). In step S15, the ATM system 30 simultaneously transmits ATM information (provider information) and cash payout request information 12 through the ATM transmission mail 14. The ATM information is information such as the bank name and installation location of the ATM system 30 operated by the agent 40, and the cash withdrawal request information is information relating to the withdrawal amount.

  Only the URL may be transmitted to the mobile phone 4 so that the contents of the ATM transmission mail 14 can be browsed by the browser unit 38 of the mobile phone 4 through the Web browser. In this case, the ATM communication unit 32 saves the content sent by the ATM transmission mail 14 in the Web server, and transmits the URL of the Web server, that is, the location information of the information providing device to the mobile phone 4. By transmitting only the URL and transmitting / receiving information via the server, the amount of transmitted data is reduced, and the communication time and communication fee are reduced.

  Here, an example in which URL transmission is used for transmission from the ATM system 30 including the first communication device 1 to the mobile phone 4 that is the second communication device 4 has been shown. Which communication device is transmitted to which communication device by URL transmission is arbitrary, and URL transmission may be used for transmission / reception between other communication devices.

  The ATM transmission mail 14 is received by the mobile phone communication unit 39 and the e-mail unit 37, and the face image, ATM information, and cash payout request information are displayed as the unique information output 15 on the mobile phone operation unit 36 (S16). The client 35 visually confirms the facial image of the agent 40 in the unique information output 15 and the specific information of the mobile phone 11 used for photographing. The client 35 confirms that the agent 40 is about to withdraw cash, that is, authenticates (S17).

  The fact that the agent 40 is actually in front of the ATM system 30 can be confirmed by the fact that the ATM transmission mail 14 including the unique image information 52 has been received from the ATM system 30 and the ATM information.

  If the client 35 confirms that the person who is going to withdraw cash is 40 agents and also confirms the withdrawal amount, he writes in the authentication result information 16 that the cash is permitted to be paid out. To correct the withdrawal amount, the cash withdrawal request information is corrected.

  Next, the authentication result information 16 including the password for paying out cash is input from the mobile phone operation unit 36 or the screen of browser software displaying the content of the transmitted URL, and the mobile phone communication unit 39 To the ATM communication unit 32 as an authentication result signal 17 (S18). The telephone number of the mobile phone 4 that is information for specifying the mobile phone 4 is simultaneously transmitted as an original function of the mobile phone 4 at this time.

  When the client 35 determines that the agent 40 is not the authorized agent 40, the requester 35 transmits that fact as an authentication result signal 17 from the mobile phone communication unit 39 to the ATM communication unit 32.

The ATM communication unit 32 receives the authentication result signal 17 transmitted from the mobile phone 4, and also acquires the phone number of the mobile phone 4 (S19).
The determination unit 8 of the ATM system 30 checks whether or not the contents of the authentication result output 18 permit cash payment (S19). If the payout is not permitted, the agent 40 is notified that “no payout is possible” by displaying on the ATM operation unit 31 (S20). If the payout is permitted, the match between the telephone number of the mobile phone 4 acquired in step S19 and the mobile phone information of the client 35 registered in advance, and the received personal identification number and the ATM system 30 are registered. Each of the matching passwords is confirmed (S21). If there is no match, the client 35 is notified of this by the ATM transmission mail 14 (S20).

  When the agent 40 is authenticated and both the telephone number and the personal identification number match, a cash withdrawal process is performed using a normal ATM. First, based on the authentication result output 18, the determination unit 8 determines whether or not cash can be paid out and when it can be paid out, determines a payout amount. Then, the cash payout unit 34 is notified as the payout amount information 10, and the cash payout unit 34 pays out the payout cash 53 to the agent 40 (S23). Then, the client 35 is notified of the cash paid out and the amount thereof as provision result information by the ATM transmission mail 14 (S24).

  In this embodiment, a bank ATM system is used as an example, but the application to which the present invention can be applied is not limited to this. It can also be applied to card payments such as debit cards and credit cards.

  In the case of a David card, it is only necessary to replace the bank ATM system in the fourth embodiment with a dedicated terminal at the store. In this case, you will receive purchased items and receipts instead of cash withdrawals.

  Also in the case of a credit card, the bank ATM system in the fourth embodiment only needs to be replaced with a dedicated terminal in the store, and the purchased item and receipt are received instead of cash withdrawal. Since it is problematic in terms of security to allow a proxy for a signature to be signed, it may be replaced with transmission of a personal identification number in step S18.

  Regarding the unique information 2 of the agent 40 used for authenticating the agent 40, the face image may be either a still image or a moving image. The unique information 2 may be the voice of the agent 40. Alternatively, it may be a predetermined personal identification number including characters, numerical values and the like set by the client 35 as information that can specify the agent. In the case of a personal identification number, the authentication method is determined as coincidence or non-coincidence, and the determination method is clear. Therefore, automatic processing by the mobile phone 4 is possible instead of authentication by the client 35 itself.

  The present invention is not limited to those related to the receipt of money as in the present embodiment, but can also be applied to the receipt of other general items. Moreover, it can be applied not only to tangible objects but also to applications that provide intangible objects such as information and services.

  FIG. 15 shows a fifth embodiment in which a service is used as an offer. In the fifth embodiment, when a visitor arrives at a certain facility, the owner of the facility authenticates the visitor from a remote place and unlocks the door.

  The operation of the fifth embodiment will be described with reference to FIGS. The visitor 40 visits a certain facility, and inputs the door unlocking request 12 to the door operation unit 31 of the door opening / closing system 30 (S30). When the door unlocking request 12 is input, the door operation unit 31 captures the face image 51 of the visitor 40 using the camera unit 44, and inputs the unique image information 52 (S31).

  Next, the door opening / closing system 30 transmits the unique information signal 3 including the unique image information 52 from the visitor information communication unit 32 to the mobile phone 4 possessed by the owner 35 of the facility (S32). When the mobile phone 4 receives the unique information signal 3, the mobile phone 4 displays the visitor's unique image included therein as the visitor image output 5 (S33).

  The owner 35 visually checks the visitor image output 5 and authenticates the visitor 40 (S34). Specifically, it is determined whether or not access to the facility is permitted, and when it is permitted, information “authenticated” is input, and when it is not permitted, information “authenticated” is input as authentication result information 6. In addition, a password for unlocking the door is also entered.

  The cellular phone 4 opens and closes the door and transmits the authentication result signal 7 including the authentication result and the password to the system 61 (S35). At this time, the telephone number of the mobile phone 4 is also transmitted as an original function of the mobile phone 4.

The door opening / closing system 30 receives the authentication result signal 7 transmitted from the mobile phone 4, and also acquires the phone number of the mobile phone 4 (S36).
The determination unit 8 of the door opening / closing system 30 checks whether the authentication result output 13 permits the door to be unlocked (S37). If the unlocking is not permitted, the visitor 40 is notified that “unlocking is not possible” by displaying the door operation unit 31 or the like, and the owner 35 is notified by the e-mail 3 (S38). If the unlocking is permitted, the telephone number of the mobile phone 4 acquired in step S36 matches the information of the mobile phone of the owner 35 registered in advance, and the received personal identification number and the door opening / closing system 30 Each registered password is checked for coincidence (S39). If even one of them does not match, the fact is notified to the owner 35 and the visitor 40 (S38).

  When the visitor 40 is authenticated and both the telephone number and the password are matched, the door unlocking process is performed. First, the determination unit 8 outputs the unlocking instruction signal 10 to the door key opening / closing device 34, and the door opening / closing device 34 unlocks the door (S40). Then, the owner 35 is notified by e-mail 3 that the door has been unlocked (S41).

  In this way, by applying the present invention, authentication can be performed from a remote location, and services can be provided safely and reliably.

  Of course, it is also possible to provide both services and goods at the same time. For example, in the fifth embodiment, it can be requested by the owner 35 that the visitor 40 visits a facility and picks up a predetermined item in the facility.

It is a block diagram which shows the best form of this invention. It is a flowchart which shows operation | movement of the best form of this invention. It is a block diagram which shows the form which changed a part of best form of this invention. It is a block diagram which shows the 1st Example of this invention. It is a flowchart which shows operation | movement of the 1st Example of this invention. It is a block diagram which shows the Example which changed a part of 1st Example of this invention. It is a block diagram which shows the Example which changed a part of 1st Example of this invention. It is a block diagram which shows the Example which changed a part of 1st Example of this invention. It is a block diagram which shows the 2nd Example of this invention. It is a flowchart which shows operation | movement of the 2nd Example of this invention. It is a block diagram which shows the 3rd Example of this invention. It is a flowchart which shows operation | movement of the 3rd Example of this invention. It is a block diagram which shows the 4th Example of this invention. It is a flowchart which shows operation | movement of the 4th Example of this invention. It is a block diagram which shows the 5th Example of this invention. It is a flowchart which shows operation | movement of the 5th Example of this invention.

Explanation of symbols

1 First communication device 4 Second communication device (mobile phone)
8 Judgment Unit 11 Third Communication Device (Mobile Phone)
30 ATM system (door opening and closing system)
31 ATM operation unit (door operation unit)
32 ATM Communication Department (Visitor Information Communication Department)
33 Cash 34 Cash dispenser (door opener)
35 Client (owner)
36 Mobile phone operation unit 37 E-mail unit 38 Browser unit 39 Mobile phone communication unit 40 Agent (visitor)
41 Mobile phone operation unit 42 E-mail unit 43 Application unit 44 Camera unit 45 Mobile phone communication unit

Claims (69)

A first communication device that transmits predetermined unique information input from outside, receives authentication result information that is an authentication result based on the unique information, receives the unique information from the first communication device, and An authentication system comprising: a second communication device that transmits authentication result information to the first communication device; and a determination unit that performs a predetermined determination based on the authentication result information. The authentication system according to claim 1, wherein the unique information is information that identifies a subject that inputs the unique information to the first communication device. The authentication system according to claim 1, wherein the determination unit determines whether or not a predetermined offer can be provided. 4. The authentication system according to claim 3, wherein the offer includes goods, money, information, or services. 5. The authentication system according to claim 3, wherein the first communication device inputs provision request information that is information relating to a request content of the provision from the outside. The first communication device transmits the provision request information to the second communication device, and the second communication device sends provision permission information, which is a provision permission content based on the provision request information, to the first communication device. The authentication system according to claim 5, wherein the determination unit determines the provided content of the provided based on the provision permission information. 5. The authentication system according to claim 3, further comprising a third communication device that transmits provision request information, which is information related to a request content of the provision, to the first communication device. The first communication device transmits the provision request information to the second communication device, and the second communication device transmits provision permission information, which is a provision permission content based on the provision request information, to the first communication device. The authentication system according to claim 7, wherein the determination unit determines the provided content of the offer based on the provision permission information. The second communication device transmits provision designation information, which is information for designating provision contents of the offering, to the first communication device, and the determination unit provides the offering based on the provision designation information. 5. The authentication system according to claim 3, wherein the content is determined. A first communication device that receives predetermined unique information, transmits the unique information, and receives authentication result information that is an authentication result based on the unique information; and receives the unique information from the first communication device. A second communication device that transmits the authentication result information; a third communication device that transmits the unique information to the first communication device; and a determination unit that performs a predetermined determination based on the authentication result information. An authentication system characterized by that. The authentication system according to claim 10, wherein the unique information is information that identifies an entity that transmits the unique information from the third communication device to the first communication device. The authentication system according to claim 10 or 11, wherein the determination unit determines whether or not a predetermined offer can be provided. The authentication system according to claim 12, wherein the offer includes goods, money, information, or services. 14. The authentication system according to claim 12, wherein the third communication device transmits provision request information, which is information related to a request content of the provision, to the first communication device. The authentication system according to claim 12 or 13, wherein the first communication device inputs provision request information that is information related to a request content of the provision from the outside. The first communication device transmits the provision request information to the second communication device, and the second communication device sends provision permission information, which is a provision permission content based on the provision request information, to the first communication device. The authentication system according to claim 14, wherein the determination unit determines the provided content of the offer based on the provision permission information. The second communication device transmits provision designation information, which is information for designating provision contents of the offering, to the first communication device, and the determination unit provides the offering based on the provision designation information. 14. The authentication system according to claim 12, wherein the content is determined. The authentication system according to any one of claims 10 to 17, wherein the third communication device uses a dedicated program for transmitting the unique information to the first communication device. . 19. The authentication system according to claim 18, wherein the dedicated program adds identification information indicating that the unique information is communicated by the dedicated program to the unique information. 20. The authentication system according to claim 18 or 19, wherein the specific program does not communicate the specific information when the specific information has been created and a predetermined time has elapsed. The authentication system according to any one of claims 18 to 20, wherein the dedicated program is activated by inputting predetermined activation information. The authentication system according to any one of claims 18 to 21, wherein the dedicated program operates on the third communication device. The information providing device for providing information on a predetermined network, wherein the third communication device is connected to the network and transmits information via the information providing device in the network. The authentication system according to claim 7, claim 8, and claims 10 to 22. The authentication system according to claim 23, wherein the dedicated program operates on the information providing apparatus. The authentication system according to any one of claims 10 to 24, wherein the third communication device uses wireless communication. The authentication system according to any one of claims 10 to 24, wherein the third communication device communicates with another communication device by a cable or direct connection. The said 3rd communication apparatus is provided with the access function to the said medium which can exchange information using a predetermined | prescribed medium, The claim in any one of Claim 10 thru | or 24 characterized by the above-mentioned. Authentication system. 28. The claim according to claim 10, wherein the unique information transmitted by the third communication device includes third communication device information for specifying the third communication device. The described authentication system. 29. The claim according to claim 1, wherein the first communication device transmits first communication device information for specifying the first communication device to the second communication device. The authentication system described in the section. 30. The claim according to claim 1, wherein the second communication device transmits second communication device information for specifying the second communication device to the first communication device. The authentication system described in the section. An information providing device that provides information on a predetermined network is provided, and one or both of the first communication device and the second communication device is connected to the network and transmits information via the information providing device. The authentication system according to any one of claims 1 to 30, wherein the authentication system is performed. The authentication system according to any one of claims 1 to 31, wherein the first communication device uses wireless communication. 32. The authentication system according to claim 1, wherein the first communication device communicates with another communication device through a cable or direct connection. The said 1st communication apparatus is provided with the access function to the said medium which can exchange information using a predetermined medium, The claim in any one of Claims 1 thru | or 31 characterized by the above-mentioned. Authentication system. The authentication system according to any one of claims 1 to 34, wherein the second communication device uses wireless communication. The authentication system according to any one of claims 1 to 34, wherein the second communication device communicates with another communication device by a cable or direct connection. The said 2nd communication apparatus is provided with the access function to the said medium which can exchange information using a predetermined | prescribed medium, The claim in any one of the Claims 1 thru | or 34 characterized by the above-mentioned. Authentication system. The authentication system according to any one of claims 1 to 37, wherein the unique information includes at least one of a still image, a moving image, and audio. 39. The claim according to any one of claims 2 to 9, and 11 to 38, wherein the unique information includes numerical information or character information set to identify the subject. Authentication system. A communication unit that transmits predetermined specific information input from the outside and receives authentication result information that is an authentication result based on the specific information, and a determination unit that performs predetermined determination based on the authentication result information. A communication device for authentication. 41. The authentication communication apparatus according to claim 40, wherein the unique information is information that identifies a subject that inputs the unique information to the communication unit. 42. The authentication communication apparatus according to claim 40 or 41, wherein the determination unit determines whether or not a predetermined offer can be provided. 43. The authentication communication apparatus according to claim 42, wherein the offer includes goods, money, information, or services. 44. The authentication communication device according to claim 42 or 43, wherein the communication unit inputs provision request information that is information related to a request content of the provision from the outside. The communication unit transmits the provision request information, receives provision permission information that is a provision permission content based on the provision request information, and the determination unit determines the provision contents of the provision based on the provision permission information. 45. The authentication communication apparatus according to claim 44, wherein the determination is performed. The communication unit receives provision designation information that is information for designating provision contents of the provision, and the determination unit determines the provision contents of the provision based on the provision designation information. 44. The authentication communication device according to claim 42 or 43. 47. The authentication communication apparatus according to claim 40, wherein the communication unit transmits communication unit information that identifies the communication unit. The said communication part is connected on a predetermined | prescribed network provided with the information provision apparatus which provides information, Information transmission via the said information provision apparatus is characterized by the above-mentioned. The authentication communication device according to Item. 49. The authentication communication apparatus according to claim 40, wherein the communication unit uses wireless communication. 49. The authentication communication device according to claim 40, wherein the communication unit communicates with another communication device by a cable or direct connection. 49. The authentication communication according to any one of claims 40 to 48, wherein the communication unit includes an access function to the medium capable of exchanging information using a predetermined medium. apparatus. 52. The authentication communication apparatus according to any one of claims 40 to 51, wherein the unique information includes at least one of a still image, a moving image, and audio. 53. The authentication communication device according to any one of claims 41 to 52, wherein the unique information includes numerical information or character information set to identify the subject. 54. The authentication communication apparatus according to any one of claims 40 to 53, wherein the authentication communication apparatus is a debit card or credit card reader. 54. The authentication communication device according to any one of claims 40 to 53, wherein the authentication communication device is an ATM system. 54. The authentication communication device according to any one of claims 40 to 53, wherein the authentication communication device is a door opening / closing system. A step of inputting predetermined specific information from outside, a step of transmitting the input specific information, a step of receiving the specific information and transmitting authentication result information which is an authentication result based on the specific information, and the authentication An authentication method comprising: receiving result information and performing a predetermined determination based on the authentication result information. 58. The authentication method according to claim 57, wherein the unique information is information for specifying a subject who inputs the unique information from the outside. 59. The authentication method according to claim 57 or 58, wherein the determination is a determination as to whether or not a predetermined offer can be provided. 60. The authentication method according to claim 59, wherein the offer includes goods, money, information, or services. 61. The authentication method according to claim 59, further comprising a step of inputting provision request information, which is information relating to request contents of the provision, from outside. Transmitting the provision request information; receiving the provision request information; transmitting provision permission information that is a provision permission content based on the provision request information; receiving the provision permission information; and providing the provision 62. The authentication method according to claim 61, further comprising a step of determining the provided content of the provided product based on information. Providing provision designation information, which is information for designating provision contents of the offer, and receiving the provision designation information and determining the provision contents of the offer based on the provision designation information. The authentication method according to claim 59 or 60. The authentication method according to any one of claims 57 to 63, wherein a dedicated program is used when the unique information is input from the outside. The authentication method according to claim 64, wherein the dedicated program includes a step of adding identification information indicating that the unique information is input by the dedicated program to the unique information. 66. The authentication method according to claim 64 or 65, wherein when the specific information has been created and a predetermined time has elapsed, the dedicated program does not communicate the specific information. 67. The authentication method according to claim 64, wherein the dedicated program is activated by inputting predetermined activation information. 68. The authentication method according to claim 57, wherein the unique information includes at least one of a still image, a moving image, and audio. 69. The authentication method according to claim 58, wherein the unique information includes numerical information or character information set to identify the subject.

Images