JP2006040235A - Method for registering and collating personal identification number - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a method for registering and collating personal identification numbers by which safety is guaranteed against theft or the like of a password and a financial card. <P>SOLUTION: A character entry object and a video image are transmitted to a registration/collation device. The character entry object is inputted as code data and the video image is inputted as password video data in the registration/collation device and a comprehensive personal identification number is formed from the code data and the password video data. The comprehensive personal identification number is stored with a plurality of pieces of dummy video data and an affiliate card which records an identification number is transmitted to an affiliate candidate. An affiliate claims settlement of money to an information terminal using the affiliate card of himself/herself. The information terminal transmits the identification number, the registration/collation device reads the password video data and the plurality of pieces of dummy video data combined with the identification number and transmits them to the information terminal. In the information terminal, the password video data and the plurality of pieces of dummy video data are simultaneously displayed on a display part and a specific video image is selected from the plurality of video images. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a method for registering and verifying a personal identification number, and more particularly to a method for registering and verifying a personal identification image and a secret word for identifying an individual with an electronic information processing apparatus.

The personal identification number occupies an important position in daily life for admission to money accepting banks, credit unions and important facilities, and safety checks for countering terrorism.
In recent years, a leaflet issued by the National Bank Association has been distributed at the bank counter asking, "Is your security code OK?"
“When you withdraw your deposit, there is a risk of your PIN being stolen from behind or being known to others. Others, such as bank employees, bank association staff, police officers, etc., outside the store, telephone etc. You may also be asked for your PIN. Please be careful. "

Also, “Use a password that is difficult for others to guess, avoiding your date of birth, telephone number, street address, and car number.” This is because these passwords can be easily confirmed by others with a driver's license or the like.
Furthermore, it is recommended that flyers change the flyers quickly if they use numbers that are easy to guess.
On the other hand, the bank has recently owned multiple cash cards across multiple banks and multiple credit cards. In addition, it has a safety card for entering the management area within the company, a payment card for employee cafeterias, and about 10 economic / life cards. It is common to own multiple IDs and passwords (passwords) on the Internet.

Conventionally, only the character / symbol data is taken into the information processing apparatus on the management side, and the personal identification number is composed of a series of character strings combining the character / symbol data itself.
For individuals who own a large number of economic / life cards, it is difficult to remember the PIN number for each card. It tends to be set to date, phone number, address lot number, car number, etc.
For the sake of complexity, it is dangerous for security to write these IDs and passwords (passwords) in a notebook for each purpose.

Recently, for personal identification, human body feature direct input methods include collation of fingerprints, eye irises, voice prints, facial features, and the like. These are reliable and safe, but the cost of equipment and the personal burden of the beneficiaries are high, and it is difficult to put them into practical use except for special safety organizations.
Confirmation of ID and password (password) was very troublesome for ordinary housewives. In addition, it is difficult to remember if these passwords are set by the other party, such as a bank. When using it, I looked at the notes I wrote every time, so there was a risk of being seen by others.

Therefore, there is a strong desire to share all registration IDs and passwords (passwords).
The representative invention of the conventional example uses an individual difference in the time of pressing a key, JP-A-2003-193723, uses an individual-specific fingerprint, and JP-A-2001-356671 input timing (rhythm) -305654 There are some that take into account the input characteristics of the keyboard, and Japanese Patent Application Laid-Open No. 2002-6884. The company specifications that use photographer's photograph and iris of the eye are expensive and unsuitable for the general public.

The problem to be solved was not safe when the date of birth, telephone number, street number of the address, and car number were used as the PIN code, which would be deciphered when meeting the theft. If a special random number is used, a single number is sufficient, but if it is provided separately on a large number of cards, it becomes difficult to remember, and if it is written as a memo, there is a risk that it will be completely defenseless if it is stolen.
In the present invention, the person himself / herself is memorized and well-versed in the ability, and by using characters and images that are hardly known to others, almost completely against theft, loss, misplacement, etc. of passwords and financial cards The purpose is to provide a method for registering and verifying a security code that guarantees safety.

This invention was made to solve the above problems. In the first invention, the member applicant sends a text entry in which the name and its attributes are entered and a video designated by the member applicant to the operating organization. This operating organization is equipped with a registration / verification device that enables payment of money, supply of information, and admission to the facility, and the registration / verification device uses the input device to convert the character entry from a character pattern to a code. The video is input as password video data from the photoelectric conversion device as data, and the registration / verification device forms an overall password by combining an identification number with the code data and the password video data. It is stored in the database together with the dummy video data of and becomes a member, and the same general PIN is created and stored independently for multiple member applicants. In accordance with the attribute of the name, a member card in which the code data and the identification number in the comprehensive password are recorded is sent to the member applicant as a member, and the member is connected to an information terminal provided separately from the registration / verification device. Use your own membership card to request money settlement, supply of information and permission to enter, and the information terminal transmits the code data and identification number of this membership card to the registration / verification device via the communication channel. The registration / verification device reads the personal identification video data and the plurality of dummy video data that are paired with the identification number from the database and sends them to the information terminal,
In the information terminal, the personal identification video data and the plurality of dummy video data are simultaneously displayed on a display unit, the member selects a specific video from the plurality of videos, and the selected video is the security video. If they match, the information terminal operates so as to respond to the payment of money and supply of information or admission, and if they do not match, the membership card is discharged.
A second aspect of the present invention is characterized in that a plurality of images can be specified by the member applicant and a plurality of images can be selected.
According to a third aspect of the present invention, the total number of the password image and the plurality of dummy images simultaneously displayed on the display unit can be arbitrarily set.

  In the second invention, a member applicant converts a character pattern from a character entry into a code data by using an input device to code data, and converts a video designated by the member applicant by a photoelectric conversion device. It is set as password video data, and these data are sent from the information terminal to the operating organization via the Internet, and this operating organization is provided with a registration / verification device that enables payment of money and supply of information. Data and personal identification data are combined with an identification number to form a total personal identification number, and the total personal identification number is stored in a database together with a plurality of dummy video data, and a similar total personal identification number is created independently for a plurality of applicants. After that, according to the attribute of the name from the operating organization, the member wishing to receive the code and the identification data in the general password The number is sent via the Internet as a member, and the member requests payment of money and supply of information from the information terminal. Therefore, the information terminal sends the code data and identification number of the member card via the Internet. The registration / verification device reads out the password video data paired with the identification number from the database and the plurality of dummy video data from the database and sends them to the information terminal via the Internet. Then, the password video data and the plurality of dummy video data are simultaneously displayed on a display unit, the member selects a specific video from the plurality of videos, and the selected video data is registered via the Internet. When the registration / verification device matches the personal identification video data, the registration / verification device Qian operates to respond to the supply of payment information, so as not respond if they do not match.

  The PIN code registration and verification method of the present invention is easy to use even for elderly people and housewives, and it is almost complete and does not require special number management for theft, loss, misplacement, etc. Can be widely used as a number. It is possible to provide a broad security code that cannot be imitated by anyone other than the user.

In the present invention, a picture or picture of some video born from daily life that an individual never forgets is registered as a password in a financial institution or an information providing site on the Internet. Since photos and the like related to memories rooted in an individual's long daily life cannot be completed by anyone other than the family, the only memory in the individual's brain is digitized to be a broad password.
In addition, a secret word is registered as a secret word from a word born from daily life that an individual never forgets. Words related to memory rooted in the long life of an individual cannot be completed by anyone other than the family, so the only memory in the individual's brain is digitized and used as a broad password.

The password registration and verification method of the present invention will be described with reference to the drawings. The manual registration / verification apparatus for carrying out the present invention will be described in detail with reference to the drawings.
A registration / verification device 1 when installed in an office center of a financial institution such as a bank includes a video input unit 2, a member database 3, a calculation unit (CPU) 4, a calculation storage device (RAM) 5, and a comparison unit 6. The keyboard 7, the display device 8, the registration program 9, the read / write unit 10, the random number generation unit 11, and the similar video generation unit 29 are configured. The arithmetic unit (CPU) 4 is connected to a communication line via a modem 12 for communication. The office center is fully equipped with facilities for issuing cash cards, etc., but explanations are omitted.
The video input unit 2 is operated by a staff member of a financial institution and is a device that electronically captures a photograph or an image sent by a member registration applicant through a mail 39 or the like.

FIG. 2 shows an example of the contents of the postal matter 39, and an entry form 25 and an enclosed photograph (video matter) 26 are sent. On the entry form 25, the branch name, name, address, telephone, declaration word, desired display frame number and registration number to be transferred to the member database 3 are entered.
When registering a plurality of photographs (video objects) 26, they are pasted in the first, second, and third distinction columns, and the genre of the pasted photo is coded in the first, second, and third distinction columns. Enter the cats, mountains, and fruits that have been converted.
For example, if the photograph (video object) 26 is a calico image of a pet, the genre is a cat, and the desired display frame number 6 is the number of images displayed together with a dummy image when selected later. The registered number 3 is the number of password videos used at the time of selection. The member database 3 is composed of a large-capacity hard disk or the like.

The modem 12 communicates with an external branch bank or ATM, receives inquiry data, and conversely sends necessary data from the member database 3 to a communication line.
The calculation unit (CPU) 4 assigns a card number in association with the name / address / phone input from the keyboard 7 according to the registration program 9, and reports the secret word A and the password video data B from the video input unit 2. Are combined to generate a general password C. The secret word A corresponds to a conventional password by a character string. The registration program 9 includes an initial program, a change program, a display program, and a copy number program.

The random number generation unit 11 generates, for example, a four-digit random number, and this random number is assigned (assigned) as a card unique number (ID) to a registration applicant, and the display device 8 is a CRT or liquid crystal electronic display unit. . This unique number is issued uniquely to a cash card or the like, and is used for an initial determination as to whether or not it can be accepted on the device side when an ATM or the like to be described later is inserted, and cannot be read by the cardholder.
An arithmetic storage device (RAM) 5 is a work memory, in which data being calculated by the calculation unit 20 is read and written.
The video input unit 2, the hard disk of the member database 3, the calculation unit 4, the calculation storage device (RAM) 5, the keyboard 7, the display device 8, and the modem 12 have the same functions and structures as those of an ordinary personal computer or computer. .

The member database 3, the comparison unit 6, and the read / write unit 10 will be described in detail with reference to FIG. The member database 3 includes a branch name field 23, a number password field 19, a name / address / phone field 20, a secret field 21, a password video field 22, and a dummy data part 27.
The branch name column 23 is pre-registered with the branch name of the financial institution or bank, the number PIN column 19 is a unique number (ID) number, and the name / address / phone column 20 is registered (member) Each person's name is registered at the time of subscription.
In the password field 21, a password of a character string declared by a registration (member) applicant is registered, and in the password video field 22, one or a plurality of password videos declared by a registration applicant at the time of member registration are registered.
The number password column 19, name / address / phone column 20, password column 21, and password video column 22 constitute a regular data section 28.

In the dummy data section 27, the secret data of a non-existent virtual member, video data for each genre, and arbitrary video data are stored in advance. These dummy video data are taken from the video input unit 2 by photoelectric conversion, and the more the better, the better.
The similar image generating unit 29 generates a dummy image similar to the password image registered in the password image field 22. For example, if the PIN code is a calico cat, a misleading similar video such as a red cat, a cat that stretches even in the same calico cat, or a Persian cat is generated.
These similar dummy videos supplement the data from the video input unit 2 with numbers, and are stored in the dummy data unit 27 by genre classification. For example, a cat is classified into a cat genre, a PIN video is classified into a mountain genre if it is a mountain landscape, and a PIN genre is classified into a cup ramen genre, etc.

The letters / numbers declared by applicants for registration are words that are familiar to the person but rarely known to others, such as the countryside or parents who are not living together, uncles, aunts, nephews, nephews, brothers, Use the names of sisters, close acquaintances, legends of distant ancestors, past pets, past private car names, etc. These are passwords of character strings such as personal computer passwords.
As shown in Fig. 2, the registration applicant's video is a picture of their favorite scenery, pet cat / dog, hobby boat, car, fruit, figurine, etc. The video is almost unknown to others. Thereafter, this character string or video becomes a secret word, a cue or a key for confirming itself on the ATM.
A plurality of videos familiar to the user can be registered in the password video field 22 as password videos with first, second,...
The personal identification number and secret characters / numbers in the member database 3 are coded international standard data formats and have identification codes such as characters, while the personal identification video is a video data format including predetermined compression software. And a video identification code.

In FIG. 3, the comparison unit 6 includes a separation unit 15, a character comparator 16, a video comparator 17, an AND circuit 18, and an order confusion unit 24, and the read / write unit 10 includes a regular read unit 13 and a dummy read unit 14. Composed.
The regular reading unit 13 is connected to the member database 3 and is controlled by the calculation unit (CPU) 4 and has an address distribution function (address decoder). The member database 3 is searched according to the received unique number (ID) address, Various data are read from the corresponding address in the regular data section 28.
In this reading, the character string of the secret word is first read from the secret word column 21 and the first video, the second video,...

The dummy reading unit 14 is connected to the member database 3 and is controlled by the calculation unit (CPU) 4 to read out only the video data from the dummy data unit 27 based on the four-digit addresses randomly selected by the random number generation unit 11. . According to the display program of the registration program 9, the number of times of reading is designated by the arithmetic unit (CPU) 4 as 9 times, for example.
In the case of a read command relating to the password video data, the calculation unit (CPU) 4 causes the random number generation unit 11 to generate a random number nine times (9) for only the address of the dummy data unit 27. The dummy reading unit 14 repeatedly performs the dummy reading operation using the random number as an address.
The order confusion unit 24 rearranges the order of the video data read from the regular reading unit 13 and the dummy reading unit 14 in a random manner. Accordingly, when the legitimate personal identification video declared by the applicant for registration is read, the order is changed together with nine different dummy videos each time.

The separating unit 15 is connected to the regular reading unit 13 and separates the data group read from the member database 3 into wording (regular password) data and password video data according to the character identification code and the video identification code.
The character comparator 16 compares the word data (regular password) data from the separator 15 with the characters / numbers input at the time of collation received from the ATM or the like. If they match, an OK signal is indicated. Is generated.
The video comparator 17 compares the password video data from the separation unit 15 with the video data selected at the time of collation received from an ATM or the like with a time difference. If they match, an OK signal is detected. appear.

The AND circuit 18 outputs an OK signal to the arithmetic unit (CPU) 4 only when it receives an OK signal from the character comparator 16 and similarly from the video comparator 17 at the same time.
An example of the contents of the personal identification video column 22 in the member database 3 in FIG. 3 is shown in detail in FIG.
That is, in the Taro column of the personal identification video field 22, the first video is a cat: genre cat, the second video is a landscape: genre mountain, the third video is an apple: genre fruit personality video, and the Jiro column is Ramen: Genre Ramen in the first video, Old phone: Genre phone in the second video, Grandfather image: Genre face in the third video, Yacht: Genre boat in the first video in the Hanako column, Second video None, no third video, no footage, footage: genre footwear in the first video, letter: genre mail in the second video, and no third video are registered in the first column. When registration is completed, a cash card or the like is sent to the applicant who applied for the mail 39.
Further, the change program of the registration program 9 enables the change of the registered secret password and password by the same operation as the registration by the change program after the OK signal is output from the AND circuit 18. Furthermore, the number of desired display frames and the number of registered sheets can be changed according to the age, sex, and preference.

Next, the configuration of an ATM for identifying a person by collating a personal identification number or the like according to the present invention and the individual determination device 30 of a bank terminal will be described with reference to FIG.
A large number of individual determination devices 30 are installed in different places from the office of the financial institution, and are, for example, ATMs, and are devices that withdraw cash using a cash card. The financial institution registration / verification apparatus 1 and the plurality of individual determination apparatuses 30 in FIG. 1 are connected by a communication line.
The individual determination device 30 includes a determination information processing unit 31, a display unit 32, a touch sensor 33, a determination unit 34, a drive circuit 35, an operation device 36, a reception program 38, and a communication modem 37.
When the determination information processing unit 31 receives an OK signal from the communication line via the communication modem 37, it outputs a GO signal to the drive circuit 35.

The touch sensor 33 is overlapped on the upper surface of the display unit 32. In FIG. 6, the display unit 32 is automatically activated by the receiving program 38, and can display, for example, a numeric keypad 40, a Japanese syllabary character key 41, and a video group 42. It is. The determination unit 34 determines OK due to the coincidence signal or NG due to the disagreement signal, and outputs the GO signal when it is determined as the OK signal.
In the touch sensor 33, addresses are assigned with a uniform predetermined area, and when "8" having a numeric keypad 40 or the like is pressed, the numeral "8" is coded. Since a known technique is used for the method of decoding the touch sensor 33 and the displayed key and the configuration thereof, description thereof is omitted.
The drive circuit 35 receives the GO signal output from the determination unit 34 from the determination information processing unit 31 and outputs the drive signal to the operation device 36.

Next, a method for registering the password image and secret password in the registration / verification apparatus 1 according to the present invention will be described.
First, Mr. Yamada will be described in detail with reference to the configuration of FIG. 1 to FIG. 6 along the flow of FIG. To do.
Mr. Yamada uses the application form and envelope he received from a financial institution, along with the entry form 25 with his / her name / address, telephone number, etc., as well as the entry form 25 he / she wishes, along with his / her name / address / phone number. A picture such as a cat 26, such as a cat, is sent as a mail 39.
For example, a pet cat in the Yamada family sits on these photos, and a plurality of photos, pictures, etc. set aside are sent with the first, second and third identification numbers. If you have a picture of your pet cat sitting, you will never forget it, but it is almost impossible for others to know. A genre symbol is attached to these photos. The genre symbol is prepared in advance by a financial institution according to common sense and is included in a notice sent to be used when Mr. Yamada fills in.
For example, if the name of a grandmother who passed away at the age of 90 years ago “Yoshiko” is 20 years ago, this letter is almost impossible for others to know.

At the office of the financial institution, the mail 39 is received and opened, and the following operation is started. At this stage, the registration / verification device 1 becomes a password registration device. The postal matter 39 is secret content, and a copy remains at Mr. Yamada's hand and is stored in a safe place.
In step S1, when an employee of a financial institution sits in front of the password registration device 1, the initial program of the registration program 9 is read out, and “declaration word of member applicant, name / address, etc. are inputted in characters on the display unit 8”. "Please do". Therefore, the staff uses the keyboard 7 or inputs these letters and numbers into this device by an automatic reading device (OCR). The grandmother's name “Yoshiko” and the name / address, etc., which are the declaration words, are coded and input.

In step S2, “Please enter the enclosed photo from the video input unit 2 as password video data” is displayed. Therefore, the staff uses the video input unit 2 to photoelectrically convert the photograph 26 to create video data, which is taken into the apparatus 1. A plurality of photographs 26 may be input separately.
In accordance with the display program, the number of images to be displayed simultaneously on the ATM display unit 32 to be described later is designated. Generally, a young person displays 15 images at the same time for safety, and selects his / her personal identification image from among them. However, elderly people want to select their own password from about 6 images. It is a program corresponding to such various requests.
According to the number of programs, how many personal identification images are included in the displayed image. If the number is small, the operation is easy, but if it is seen, the safety is jeopardized. If the number is large, the operation is somewhat complicated, but the risk of being seen is extremely reduced, and a high level of safety is guaranteed. .

These simultaneous display number designation and personal identification number designation can be freely reported by a member at the time of registration (by mail) or at the time of change registration (from a terminal such as an ATM).
In step S3, the calculation unit 20 causes the random number generation unit 11 to generate a four-digit random number, for example, and assigns this random number as an identification number (ID number) unique to Mr. Taro Yamada.
In step S4, the arithmetic unit 20 combines the character / numeric data A of the declaration word, which is an attribute such as name / address, the password video data B from the video input unit 2, and the ID number from the random number generator 11. A general password C unique to Taro Yamada is generated. The unique general code number C is a set of data.

In step S <b> 5, the calculation unit 20 stores these comprehensive passwords C in the member database 3. As shown in FIG. 3, the ID number is recorded in the password field 19, the name and the like are recorded in the name / address / phone field 20, the declaration password is recorded in the password field 21, and the calico image is recorded in the password video field 22. In order to specify the number of password videos, a plurality of password video data B can be distinguished and set in the password video field 22.
After registration, the financial institution creates a cash card and sends it to Taro Yamada by registered mail a few days later. Although the name / address, bank name, branch name, and column ID number data are written on the cash card, secret character / number data A and password video data B are not stored.

In addition to steps S1 to S5, Jiro Yamada, Hanako, Kazumi, and Mr. Kinoshita, Mr. Ogawa, etc. perform a plurality of individuals, so that the general personal identification number C of many individuals is accumulated in the member database 3. Is done.
In the explanation, you just entered a picture of a pet cat, but you can freely choose a picture of an apple and a dish that you only know, a telephone and an underlay, and a picture of parents in the country, as shown in FIG.
A dummy data group is already stored in the dummy data part 27 in the member database 3, and these general passwords C are added to the regular data part 28 every day.

Next, the operation of Taro Yamada using this cash card to withdraw cash from the nearest ATM or bank terminal will be described. Here, the individual determination device 30 and the remote registration / verification device 1 operate in cooperation with each other, and the registration / verification device 1 functions as a password verification device.
First, the operation of one personal determination device 30 (ATM) will be described in detail with reference to the configuration of FIGS. 1 to 5 along the flow of FIG.
When Mr. Yamada stands in front of the password determination device 30, the collation program 38 is read and a guidance message “Please insert a cash card” is displayed on the display unit 32.

In step S10, when the cash card is inserted into the insertion slot, the determination calculation device 31 reads the data of the bank name, branch name, and column ID number, and in step S11, it is determined whether the cash card is a legitimate cash card. If it is a legitimate card of the bank, the process proceeds to step S12, and if it is another bank or an unauthorized one, the process proceeds to step 13 to display “unusable” or the like and discharge the cash card.
In step S12, as shown in FIG. 10, a guidance sentence “Please input a secret word (conventional return code)” and a Japanese syllabary keyboard 41 are displayed on the display unit 32 (touch sensor 33). On the other hand, in step S14, Taro Yamada inputs the grandmother's name “Yoshiko” from the Japanese syllabary keyboard 41.

In step S15, the character string “Yoshiko”, the bank name, the branch name, and the ID number “3579” are sent to the registration / verification device 1 at the remote location via the communication line via the modem 37, that is, the password verification device 1. . Thereafter, an answer is returned from the password verification device 1.
If the sent character string “Yoshiko” is not a declaration word, an “NG” signal is received in step S16, the process goes to step S13, and the display unit 32 displays “cannot be used with this card”.
When the character string “Yoshiko” is a secret word, the first collation is accepted, and in step S17, a mixed data of the total password number and dummy data is received from the remote password verification device 1.

That is, "Yoshiko", bank name, branch name, and "3579" character data, as well as nine pictures in pairs, mountain landscape, lawn dog, toy, calico, Persian cat, bicycle, glasses , The image of the human figure and goldfish are returned.
In step S18, as shown in FIG. 11, together with the video group 42 of 10 mountain landscapes, lawn dogs, triangle diagrams, calico cats, Persian cats, bicycles, glasses, portraits, and goldfish on the display unit 32, Please select your favorite photo from "" is displayed.
The number of images to be displayed is the number specified by the display program at the time of registration, 10, 7, 6, etc. The number of PIN images is the number specified by the number program, 3, 2, 1 etc. It becomes.

In step S19, a tortoiseshell cat image is selected from the 10 photo images and a confirmation key is pressed. In step S20, the selected calico image, the character string “Yoshiko”, the bank name, the branch name, and the ID number “3579” are sent again to the personal identification collation apparatus 1 at the remote location.
In step S21, a response is returned from the password collation apparatus 1, but if the “curly cat” image is not a password image, in step S21, an “NG” signal is received, the process goes to step S13, and the display unit 32 displays “Cannot be used with this card”.
If the “curly cat” image is a password image, an “OK” signal is received in step S22, the process proceeds to step S23, the control circuit 35 is activated, and the operating device 36 is instructed to perform a payment operation. For example, the operating device 36 discharges bills and the like, and then discharges the card.

Next, the operation performed by the calculation unit (CPU) 4 of the registration / verification device 1 which is a remote password verification device when a cash card is used on an ATM or the like will be described with reference to FIG.
From step S15 of FIG. 8 in the personal determination device 30 such as ATM, the data group of the character string “Yoshiko”, the bank name, the branch name, and the ID number “3579” passes through the communication line to the password verification device 1 via the modem 12. Input (step S31).
In step S 32, the character comparator 16 compares the password “Yoshiko” from the address of the ID number “3579” with the received character string “...” In the RAM 5. In step S33, an OK signal is output to the AND circuit 18 and the process proceeds to step S34.
This operation is equivalent to the CPU 4 searching the database 3 and searching for registration data that matches the received data group. That is, it is searched whether there is a password that matches the received character string “...” On the address number ID “3579”. If there is no matching secret word (the received character string “...” Is different from “Yoshiko”), the process goes to step S43, where the “NG” signal is sent to the remote individual determination device 30 through the communication line and the process is terminated. Reply to step S16 in FIG.

In step S <b> 34, the “curly cat” password video is read from the password video field 22 of Taro Yamada in the database 3, and is first temporarily recorded in the arithmetic storage device (RAM) 5.
In step S35, the random number generation unit 11 generates a random number address for the address of the dummy data portion. In step S36, the dummy reading unit 14 reads only the video data from the dummy data unit 27 based on this address. The generation of the random number address and the data reading are performed 9 times, for example, and 9 pieces of video data are taken out.
In step S37, the PIN code of “calorie cat” in the RAM 5 is read out, and these nine dummy images are mixed by the order confusion unit 24. In this way, the images can be displayed on the display unit 32 of the individual determination device 30 in an arbitrary order on one screen.

In step S38, the mixed “curly cat” image and these nine dummy images are sent to the remote individual determination device 30 through the communication line.
In response to this, Mr. Yamada selects a personal identification video in step S20 in the personal determination device 30 of FIG.
Thereafter, the selected video, the character string “Yoshiko”, the bank name, the branch name, and the data group of the ID number “3579” are sent to the password collation apparatus 1 again.
In step S39, Mr. Yamada's reply and the selected video “...” Are received and temporarily recorded in the lower area of the RAM 5.
In step S40, the video comparator 17 receives the video “...” Selected by Mr. Yamada who is the lower area of the RAM 5 and the ID video “3579” address of Taro Yamada in the database 3 based on the address. The password read from the password is compared.

If they do not match, an “NG” signal is generated, the process proceeds to step S43, and sending to the remote person determination device 30 through the communication line is completed.
If they match, the process proceeds to step S41, where an “OK” signal is generated and sent to the personal determination device 30 of FIG.
That is, in step S41, the AND circuit 18 outputs an OK signal to the arithmetic unit (CPU) 4 only when it receives an OK signal from the character comparator 16 and also from the video comparator 17 at the same time.
In step S42, the current access (contents used by the individual determination device 30) is accumulated and recorded in the column of Taro Yamada in the database 3, and the process ends.
At this time, on the ATM side of the individual determination device 30, the determination calculation device 31 activates the control circuit 35 to instruct the operation device 36 to perform a payment operation, and the operation device 36 discharges bills and the like, and then the card. Is discharged. In case of an introductory card for important facilities, unlock the door.

In the above description, the secret word “Yoshiko” is input from the Japanese syllabary character key 41 one character at a time. However, as in the case of selecting a secret video, a plurality of dummy words are prepared in advance, and the secret words “ “Yoshiko” may be mixed and displayed and selected from them.
In addition, the personal identification number selection method of the present invention may be added to the conventional personal identification number method based on a birthday or the like. Further, the secret code selection method of the present invention may be added to the conventional password number method made from a birthday or the like. Furthermore, the personal identification number selection method and the secret word selection method of the present invention may be simultaneously added to the conventional personal identification number method based on the birthday.

A registration / verification apparatus using the Internet or a telephone or a communication circuit on the premises of the present invention will be described in detail with reference to FIG.
A personal computer 50 in an office or home includes an electronic camera 51 for capturing an image, and can be connected to the registration / collation device 1 via an Internet communication path 52.
The portable electronic device, for example, the cellular phone 54 includes an electronic camera 56 for capturing images, and the wireless line and the Internet 52 can be connected to the registration / collation device 1 via a telephone or a communication circuit on the premises.
Those who wish to register access the registration / verification device 1 from the personal computer 50 or the mobile phone 54 via the telephone or the communication circuit on the premises, and register the contents of the postal matter 39 of FIG. .
Download the form on the entry form (card) 25, and enter the bank branch name, name, address, telephone, declaration word, desired number of displayed frames, and number of registrations.
Next, a photograph (video object) 26 to be registered is taken by the electronic camera 51 or the electronic camera 56, and the completed form and the personal identification video are registered in the registration / collation device 1.
In the case of registering a plurality of password videos, each photograph image is transmitted with the first, second and third distinction columns.

When the personal computer 50 and the mobile phone 54 are registered, the video input unit 2, the keyboard 7 and the mail 39 shown in FIG. 1 are used. The modem 12 is the Internet 52 and the communication circuit on the premises, and the others are a member database and a calculation unit (CPU). 4 or the like. Furthermore, when the personal computer 50 or the mobile phone 54 is billed for financial settlement or information, it becomes the ATM terminal 30 of FIG.
7, 8, and 9 are similarly applied to operations when the personal computer 50 or the mobile phone 54 communicates with the registration / verification device 1 of the financial institution to make a financial settlement request or information request. To do. Note that the Internet 52 of the second embodiment is designated by a display program so that three or more password videos can be selected in a telephone or on-premises communication circuit system. In the case of one image, if 10 images are changed and selected, it will always be a password image. If it is 2 or more and 3 or more, the number of combinations can be increased and the secret accuracy can be improved.
Mr. Yamada can satisfy his PIN by simply selecting a movie that he can remember at any time.At that time, his own `` PIN video '' can be remembered naturally, struggling to remember, or writing it down in a memo so that it will not be forgotten. There is no need to review the memo in public. The confidentiality of the PIN number is kept high, and anyone can easily hold the PIN number.

  Even if a modern person uses the same personal identification video for a personal identification number that can be used for a plurality of cards that cannot be avoided, passwords for participating Internet sites, etc., safety can be ensured. Bank cards are easy for users and are widely accepted by elderly people and housewives who are not familiar with electronic devices. It can be used as an inexpensive and simple method. It can be used as a safe entry card at important facilities.

  It is a figure which shows the structure of the information processing apparatus by the side of the center in which the PIN code registration and collation method of this invention is implemented.   It is a figure which shows the content of the mail piece input into the information processing apparatus used for this invention.   It is a figure which shows the structure of the principal part of the information processing apparatus in FIG.   It is a figure which shows the registration state of the PIN code in the database in FIG.   It is a figure which shows the structure of the terminal device by the side of the user by which the PIN code registration and collation method of this invention is implemented.   It is a figure explaining the display state of the display part in FIG.   It is a flowchart explaining operation | movement of the information processing apparatus of the center side at the time of PIN code registration in this invention.   It is a flowchart explaining operation | movement of the terminal device by the side of the user by which the collation method of this invention is implemented.   It is a flowchart explaining operation | movement of the information processing apparatus of the center side in which the collation method of this invention is implemented.   It is a figure of the display state which guides the secret word input by the terminal device side in this invention.   It is a figure of the display state which guides the password input by the terminal device side in this invention.   It is a figure which shows the whole structure of Example 2 with which the PIN code registration and collation method of this invention is implemented.   It is a figure explaining the display state of the secret word of the display part in FIG.

Explanation of symbols

1 Registration / Verification Device 2 Video Input Unit 3 Member Database 4 Computing Unit (CPU)
5 Operational storage device (RAM)
6 Comparison unit 7 Keyboard 8 Display device 9 Registration program 10 Reading / writing unit 11 Random number generation unit 12, 37 Communication modem 13 Regular reading unit 14 Dummy reading unit 15 Separation unit 16 Character comparator 17 Video comparator 18 AND circuit 19 Password column 20 Name・ Address / Telephone field 21 Secret word field 22 Password video field 23 Branch name field 24 Order confusion part 25 Form (card)
26 Enclosed photo (video)
27 Dummy Data Part 28 Regular Data Part 29 Similar Image Generation Part 30 Individual Judgment Device 31 Judgment Information Processing Unit 32 Display Unit 33 Touch Sensor 34 Judgment Unit 35 Drive Circuit 36 Actuation Device 38 Accepted Program 39 Postal Code 41 Alphabet Character Key 42 Video group 42
50 PC 52 Internet 51, 56 Electronic camera 54 Mobile phone A Password B Password video data C Total video password

Claims (7)

A member who wishes to send a text entry with his / her name and attributes and a video specified by the member wishes to the operating organization, which allows the settlement of money, supply of information and admission to the facility. A verification device is provided, and the registration / verification device inputs the character entry as code data by an input device that converts a character pattern from a character pattern into a code, and the video as a password video data from the photoelectric conversion device. Then, an identification number is combined with the code data and the password video data to form a total password,
This comprehensive password is stored in a database together with a plurality of dummy video data to become a member, and a similar comprehensive password is independently created and stored for a plurality of member applicants, and then the member according to the attribute of the name from the operating organization. A member card with the code data and identification number recorded in the general PIN number is sent to the applicant as a member. The member uses his / her member card in an information terminal provided separately from the registration / verification device. The information terminal transmits the code data and identification number of the membership card to the registration / verification device via a communication path, and the registration / verification device is connected to the database. Reads the personal identification video data and the plurality of dummy video data paired with the identification number from the information terminal,
In the information terminal, the personal identification video data and the plurality of dummy video data are simultaneously displayed on a display unit, the member selects a specific video from the plurality of videos, and the selected video is the security video. A password registration and verification method characterized in that, if they match, the information terminal operates so as to respond to the payment of money and supply of information, and if they do not match, the membership card is discharged.   2. The password registration and verification method according to claim 1, wherein a plurality of images can be specified by the member applicant and a plurality of images can be selected.   2. The password registration and verification method according to claim 1, wherein the total number of the password image and the plurality of dummy images displayed simultaneously on the display unit can be arbitrarily set. The member who wishes to convert the name and its attributes from a character entry into a code data by converting the character pattern into a code using an input device, and the video specified by the member applicant is converted into a code image data by a photoelectric conversion device. Data is sent from the information terminal to the operating organization via the Internet or a communication circuit, and this operating organization is provided with a registration / verification device that enables payment of money and supply of information. In this registration / verification device, the code data and password Combine the identification number with the video data to form a general PIN,
This comprehensive password is stored in a database together with a plurality of dummy video data, and a similar comprehensive password is independently created and stored for a plurality of member applicants, and then the member applicants according to the attribute of the name from the operating organization. Send the code data and identification number in the general PIN to the member via the Internet,
In order for a member to request payment of money and supply of information from the information terminal, the information terminal transmits the code data and identification number of the member card to the registration / verification device via the Internet or a communication circuit, The registration / verification device reads out the personal identification video data paired with the identification number from the database and the plurality of dummy video data, and sends them to the information terminal via the Internet or a communication circuit,
The information terminal simultaneously displays the password video data and the plurality of dummy video data on a display unit, and the member selects a specific video from the plurality of videos, and the selected video data is transmitted via the Internet. Sent to the registration / verification device,
The registration / verification device operates such that the registration / verification device responds to the payment of money and the supply of information when it matches the password video data, and does not respond when they do not match. Registration and verification methods.   5. The password registration and verification method according to claim 4, wherein a plurality of images can be specified by the member applicant and a plurality of images can be selected.   5. The password registration and verification method according to claim 4, wherein a total number of the password video and the plurality of dummy videos displayed simultaneously on the display unit can be arbitrarily set. Member applicants send their name, their attributes, certain character strings, and text entries filled in to the operating organization. This operating organization provides a registration / verification device that enables payment, information supply, and admission to the facility. Prepared,
An input device that converts a character pattern from the character entry into a code generates attribute code data from a name and its attribute, and generates secret data from the fixed character string and inputs it to the registration / verification device. In the device, an identification number is combined with the code data and the password data to form a general password,
This comprehensive password is stored in a database together with a plurality of dummy word data, a similar comprehensive password is created and stored independently for a plurality of member applicants, and then the member wishes according to the attribute of the name from the operating organization. A member card with the attribute code data and identification number in the general PIN number is sent to the member as a member. The member uses his / her member card for the information terminal provided separately from the registration / verification device. The information terminal transmits the code data and identification number of the membership card to the registration / verification device, and the registration / verification device combines the identification number with the identification number from the database. The secret word data and the plurality of dummy word data are read and sent to the information terminal,
The information terminal simultaneously displays the secret word and the plurality of dummy words on a display unit, and the member selects a specific word from the plurality of words, and the selected word matches the secret word. In the case, the password registration and verification method is characterized in that the information terminal operates so as to respond to the payment of money and the supply of information, and if they do not match, the membership card is discharged.

Images