JP2006260134A - Portable identification device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent a physical theft and electronic theft of identification information memorized in a credit card and cash card. <P>SOLUTION: A portable identification device for certifying a user appointed in advance as a specific user is provided with a first unit 1 capable of retaining the unit on an optional part of the user body so that the user always keeps physical contact with the unit 1, and a second unit 2 capable of obtaining electronic contact between both units at least right before using the unit 2. The first unit includes a nonvolatile memory means 104 memorizing identification information of the user. The second unit includes a volatile memory means 205 for temporarily retaining memory of the identification information of the user transmitted from the first unit, and means 206 and 207 for controlling the memory in this volatile memory means in a short period on the basis of a designated period or the times of designated motions. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a portable authentication device in which authentication information of a user himself / herself is stored, and in particular, portable authentication that protects the authentication information from physical and electronic theft and can perform stronger authentication. Relates to the device.

  For example, credit cards, cash cards, etc. generally store personal information such as the user's name and card number, except for passwords recorded on the center side. Therefore, when this type of card is lost or stolen, the above information may be leaked.

  In addition, in the case of using a credit card or the like, it is unavoidable to temporarily leave the user's hand. In other words, in shopping and the like, it is necessary to hand it over to the store and receive authentication. At this time, there is an unavoidable risk that information in the card is taken out maliciously, and there is a risk of so-called electronic theft.

  In this type of credit card or cash card, various measures are taken against physical theft and electronic theft of information in the card. For example, by adding a fingerprint reading authentication function, A device that prevents the drawer or the like has been known (for example, see Patent Document 1 and Patent Document 2).

JP 11-31225 A JP2003-67687

However, the above-described conventionally known measures cannot prevent the leakage of personal information from a credit card or cash card, and some measures must be taken separately.
In particular, users such as credit cards often have to remove the card from physical management in the usage situation, and there is also a problem that the risk of loss or theft is higher than the shape of the card. Therefore, it is important to prevent the information leakage described above.

  Further, such an information leakage problem is not limited to the above-described credit card and the like, but also applies to various money cards, portable telephone terminals, and the like.

  The present invention has been made in view of such circumstances, and portable authentication that can reliably prevent physical theft and electronic theft of authentication information stored in a credit card, a cash card or the like. The object is to obtain a device.

  In order to meet such an object, a portable authentication device according to the present invention (the invention according to claim 1) is a portable authentication device that proves that a user is a predetermined user. It consists of divided devices, one of which is a first device that can be held on any part of the body so that the user can always maintain physical contact, and the other one is this first device. A second device capable of obtaining electronic contact with at least the device immediately before use.

  The portable authentication device according to the present invention (the invention according to claim 2) is the portable authentication device according to claim 1, wherein the first device includes a non-volatile storage means for storing the authentication information of the user. The second device comprises a volatile storage means for temporarily storing the user's authentication information transferred from the first device, and the storage in the volatile storage means is controlled in a short period of time. And a means for performing.

  The portable authentication device according to the present invention (the invention according to claim 3) is the portable authentication device according to claim 2, wherein the means for controlling the storage in the volatile storage means in the second device is preset. The memory is erased after a lapse of time.

  The portable authentication device according to the present invention (the invention according to claim 4) is the portable authentication device according to claim 2, wherein the means for controlling the storage in the volatile storage means in the second device is preset. The memory is erased after a certain number of authentication operations.

  The portable authentication device according to the present invention (the invention according to claim 5) is preset in the portable authentication device according to claim 4 by means for controlling storage in the volatile storage means in the second device. The number of authentication operations is one.

  The portable authentication device according to the present invention (the invention according to claim 6) is the portable authentication device according to any one of claims 1 to 5, wherein the first device and the second device are connected. Electronic contact is characterized by being obtained either by physical contact or non-contact.

  A portable authentication device according to the present invention (invention according to claim 7) is the portable authentication device according to any one of claims 1 to 6, wherein the second device is a credit card or a cash card. The authentication information of the user himself / herself transferred from the first device is temporarily stored in the second device, and the stored information is erased after a predetermined time or a predetermined number of authentication operations. It is characterized by having constituted so.

  A portable authentication device according to the present invention (invention according to claim 8) is the portable authentication device according to any one of claims 1 to 6, wherein the second device is used as a ticket purchase or a small amount of goods. A purchase money card is used to temporarily store and hold the authentication information of the user himself / herself transferred from the first device to the second device, and the memory is stored after a predetermined time or a predetermined number of authentication operations. It is characterized in that it is configured to erase after the elapse of time.

  The portable authentication device according to the present invention (the invention according to claim 9) is the portable authentication device according to any one of claims 1 to 6, wherein the second device is a portable telephone terminal. By temporarily storing and holding the authentication information of the user himself / herself transferred from the first device to the second device, a part or all of the functions of the portable telephone terminal can be used, It is characterized in that it is configured so that it cannot be used after a lapse of time or after a predetermined number of operations.

  As described above, according to the portable authentication device of the present invention, the non-volatile storage means for storing the authentication information of the user himself / herself is transferred to the second device from the first device. By providing a volatile storage means for temporarily storing and holding the user's authentication information and means for controlling the storage in the volatile storage means in a short time such as a predetermined time or a predetermined number of times, a simple configuration In spite of the fact, there is an excellent effect that it is possible to prevent the information leakage problem from physical theft or electronic theft.

That is, according to the present invention, the second device configured to temporarily release the physical contact state is, for example, a credit card, a cash card, various money cards, or a portable telephone terminal. Even if each of them is temporarily separated for use, the information from the device can be read only for a predetermined short period of time, for example, a predetermined time or a predetermined number of operations. Reading can be prevented.
Therefore, according to the portable authentication device of the present invention, the leakage of information from the device is prevented as much as possible, and it is effective in preventing unauthorized use against the danger of loss or theft. There is an advantage that can be.

1 to 3 show an embodiment of a portable authentication device according to the present invention.
In these drawings, the portable authentication device shown in FIG. 1 proves that the user is a predetermined user when the user carries it and needs it. As shown, it is composed of a pair of divided devices.

  One is a first device 1 that can be worn on a body part where a user can always maintain physical contact, and the other is a physical contact with the first device 1 at all times. It is the 2nd apparatus 2 which can release this physical contact as needed while maintaining a state. Here, in this embodiment, what shows a holder shape as the 1st apparatus 1 is shown, and it constituted so that cards, such as a credit card as the 2nd apparatus 2, could be loaded in a holder from the slot of the holder. The case is illustrated. In the loaded state, the holder and the card in this embodiment are stowed in, for example, a wallet or put in a pocket or the like.

  As shown in FIG. 1, the first device 1 includes a communication unit 101 that exchanges information with the second device 2, and an encryption that encrypts and decrypts ID information and authentication information, which will be described later. A decryption / decryption unit 102, an ID storage unit 103 that stores ID information, and a nonvolatile authentication information storage unit 104 that stores authentication information such as personal information of the user.

  Here, as information stored in the non-volatile authentication information storage unit 104 described above, operations such as authentication information, a mobile phone use permission number, etc. are permitted to specify a user, such as a card number of a cash card, for example. Authentication information, valid period information such as how many minutes are valid, and a counter initial value of a usage count counter such as how many times it can be used, which are appropriately selected as necessary.

  As shown in FIG. 1, the second device 2 includes a communication unit 201 that exchanges information with the communication unit 101 of the first device 1, and encryption and decryption of ID information and authentication information, which will be described later. Encryption / decryption unit 202 that performs ID processing, ID storage unit 204 that stores ID information, and volatile authentication information storage unit that temporarily stores authentication information transferred from the first apparatus 1 side 205, a time measuring device 206 that measures a predetermined time, and a use number counter 207 that counts a predetermined use number.

  In the above configuration, when the first device 1 and the second device 2 are brought into contact with each other, a communication line is connected between the first and second devices 1 and 2 as shown in S101 in FIG. . The transfer of the authentication information may be performed as appropriate while the card that is the second device 2 is loaded in the holder that is the first device 1, or the card is removed by a SW or a sensor. It may be performed immediately before use.

  In the above connection state, as shown in S102, the ID information held in the ID storage unit 204 from the second device 2 to the first device 1 is encrypted by the encryption / decryption unit 202, The data is transmitted to the first device 1 through the communication units 201 and 101. The first device 1 receives the information from the second device 2 through the communication unit 101 and decrypts it by the encryption / decryption 102 as in S103.

  In S104, the first device 1 compares the ID information registered in itself with the ID information in the second device 2, and in S105, whether or not the ID information of the second device 2 has been registered. If it is registered, the process proceeds to S106. If it is not registered, the authentication information transfer process is terminated.

  In S106, the first device 1 stores the authentication information stored in and stored in the nonvolatile authentication information storage unit 104 to the encryption / decryption unit 102, and after encrypting, the second device 2 side through the communication unit 101 Forward to.

  In the second device 2, as shown in S 107, the authentication information encrypted through the communication unit 201 is received, decrypted by the encryption / decryption unit 202, and temporarily stored in the volatile authentication information storage unit 205. . Further, when storing the authentication information, the second device 2 initializes the time measuring device 206 and the use number counter 207.

  In the state described above, when the second device 2 to which the authentication information has been transferred is detached from the first device 1 in accordance with the use situation and used, the time measuring device 206 and the use number counter 207 are activated, The information is erased from the volatile authentication information storage unit 205 after a preset time or after a preset number of uses.

  In this way, it is possible to minimize the outflow of information with respect to loss or theft of the second device 2. Further, for example, it can be effective against electronic theft by skimming a credit card or the like a plurality of times. Note that setting the number of uses in the use number counter 207 to 1 is more effective for the electronic theft.

  In the authentication device having the above-described configuration, the case where the second device 2 is loaded and carried with the first device 1 has been described. However, the present invention is not limited to this, and a plurality of second devices 2 are carried and used. A modification in which the above-described authentication information is transferred by temporarily loading the first apparatus 1 is also conceivable.

  In the above-described authentication apparatus, the case where the first apparatus 1 is mounted on a body part where the user can always maintain physical contact has been described. However, the present invention is not limited to this, and the user always performs physical contact. Any device may be used as long as it can be held at any part of the body so that it can be maintained. For example, a device that is embedded in the body may be used.

  Further, the second device 2 has been described as a device that can maintain the physical contact state with the first device 1 at all times and can release the physical contact as necessary. It is not limited to this. In short, the second device 2 that can obtain electronic contact with the first device 1 at least immediately before use may be used, and the first device 1 and the second device 2 may be used. Electronic contact with the device 2 may be obtained by either physical contact or non-contact. Such exchange of data by electronic contact will be easily understood because it is completed in a few seconds.

  Note that the present invention is not limited to the structure described in the above-described embodiment, and the shape, structure, and the like of each part including the first and second devices 1 and 2 constituting the portable authentication device are appropriately set. Needless to say, it can be modified and changed.

  For example, the second device 2 is not limited to the card 2 such as a credit card or a cash card as shown in FIG. 3, but may be a money card 2 for ticket purchase or small-item purchase as shown in FIG. In some cases, a portable telephone terminal 2 as shown in FIG. 5 may be used.

  Furthermore, the first device 1 is not limited to a simple holder type as shown in FIG. 3, but may be of a buckle type as shown in FIGS. 4 and 5, and as described above, A method of embedding may be used. In short, the second device 2 may be a structure that can be detachably mounted or loaded, or a structure that allows electronic contact by physical contact or non-contact. For example, in FIG. 4, data can be exchanged by electronic contact in a non-contact state in which the second device 2 is temporarily brought into contact with or close to the buckle-type first device 1. An example is shown.

  When a mobile phone terminal is used as the second device 2, the authentication information of the user himself / herself transferred from the first device 1 is temporarily stored and held, so that the mobile phone terminal It may be configured such that a part or all of the functions can be used, and the use is disabled after a predetermined time or a predetermined number of operations.

It is a block diagram which shows schematic structure of the whole apparatus which shows one Embodiment of the portable authentication apparatus which concerns on this invention. 4 is a flowchart for explaining authentication information transfer and the like in the portable authentication apparatus of FIG. 1. It is a schematic perspective view which shows one Embodiment of the portable authentication apparatus which concerns on this invention, and shows the example of a contact type which consists of cards, such as a credit card, and its holder. It is a schematic perspective view which shows another embodiment of the portable authentication apparatus which concerns on this invention, and shows the example of a non-contact type which consists of a buckle type 1st apparatus and a card type 2nd apparatus corresponding to it. It is a schematic perspective view which shows other embodiment of the portable authentication apparatus which concerns on this invention, and shows the example of a portable telephone terminal and the buckle type holder which can be loaded with it.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... 1st apparatus, 2 ... 2nd apparatus, 101,201 ... Communication part, 102,202 ... Encryption / decryption part, 103,204 ... ID memory | storage part, 104 ... Nonvolatile authentication information storage part, 205 ... volatile authentication information storage unit, 206 ... timing device, 207 ... use frequency counter.

Claims (9)

In a portable authentication device that proves that a user is a predetermined user,
Consisting of a pair of divided devices,
One is a first device that can be held on any part of the body so that the user can always maintain physical contact;
Another one is a portable authentication device, which is a second device capable of obtaining electronic contact with the first device at least immediately before use. The portable authentication device according to claim 1, wherein
The first device includes a non-volatile storage unit that stores the authentication information of the user.
The second device includes a volatile storage unit that temporarily stores and holds the user authentication information transferred from the first device, and a unit that controls storage in the volatile storage unit in a short period of time. And a portable authentication device. The portable authentication device according to claim 2, wherein
The portable authentication device characterized in that the means for controlling storage in the volatile storage means in the second device is configured to erase the storage after a preset time has elapsed. The portable authentication device according to claim 2, wherein
The portable authentication apparatus characterized in that the means for controlling the storage in the volatile storage means in the second apparatus is configured to erase the storage after a preset number of authentication operations. The portable authentication device according to claim 4, wherein
A portable authentication apparatus characterized in that the number of authentication operations preset by means for controlling storage in the volatile storage means in the second apparatus is one. The portable authentication device according to any one of claims 1 to 5,
The portable authentication device is characterized in that electronic contact between the first device and the second device is obtained by either physical contact or non-contact. The portable authentication device according to any one of claims 1 to 6,
The second device is a credit card or cash card,
The authentication information of the user himself / herself transferred from the first device to the second device is temporarily stored and retained, and the stored information is erased after a predetermined time or a predetermined number of authentication operations. A portable authentication device characterized in that it is configured as described above. The portable authentication device according to any one of claims 1 to 6,
The second device is a money card for purchasing tickets and small items,
The authentication information of the user himself / herself transferred from the first device to the second device is temporarily stored and retained, and the stored information is erased after a predetermined time or a predetermined number of authentication operations. A portable authentication device characterized in that it is configured as described above. The portable authentication device according to any one of claims 1 to 6,
The second device is a mobile phone terminal,
By temporarily storing and holding the authentication information of the user himself / herself transferred from the first device to the second device, a part or all of the functions of the portable telephone terminal can be used, and a predetermined time A portable authentication apparatus configured to be in an unusable state after elapse of time or after a predetermined number of operations.

Images