JP2007280173A - Fraudulent use prevention support system for card - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent fraudulent use of a card relating to money transactions such as a cash card while eliminating inconvenience in bio-authentication. <P>SOLUTION: An authentication server has an authentication means for slicing individual fingerprints from a fingerprint image file received from a client terminal, and collating the individual fingerprints with a fingerprint image of a card available person stored in a card information database to determine whether or not the fingerprints of persons other than the enabled user are included. This system includes: the above authentication server; a fingerprint imaging means for imaging the fingerprints on the surface of a card and generating the fingerprint image file; a communication means for transmitting the fingerprint image file along with the other card information required for authentication to the authentication server; and a client terminal having an authentication information processing means for determining whether or not the card is available based on the determination result received from the authentication server, and also presenting the information to the effect that there is the possibility of fraudulent use to the enabled user when the fingerprints of the others than the enabled user are included in the card. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a system that supports prevention of unauthorized use of cards related to money transactions such as cash cards and credit cards.

Among cash cards and credit cards, magnetic cards are currently mainstream. Damage caused by unauthorized use of these magnetic cards is becoming more serious. There are various methods of unauthorized use such as theft, unauthorized copying, falsification and forgery.
Recently, there has also been a technique called “skimming” in which a data storage device is embedded in the reading terminal and the magnetic data is stolen.
The technical background behind this is because the current mainstream capacity of magnetic cards is only 72 bytes. Maintaining security with only 72 bytes of information has already reached its limit.

As a means for solving the problems of conventional magnetic cards, an IC card has recently attracted attention. IC cards have a capacity of several hundred to several tens of kilobytes. This large capacity makes it possible to implement security such as advanced encryption. In addition, the IC card incorporates a CPU, not a simple memory medium, and can perform calculations and condition judgments inside the card.
Further, it is considered to use “biometric authentication” together with the use of an IC card as a means for ensuring further security. Examples of biometric authentication include “authentication using fingerprints” and “authentication using palm veins”. Some of these have been put into practical use. For example, when using a palm vein cash card, the hand is placed over the reader to authenticate with the characteristics of a living body that only a person can have. The combined use of an IC card and biometric authentication is expected to have a significant effect on preventing unauthorized use by anyone other than the user.

The technique of the following patent document 1 is known for fingerprint authentication, and the technique of the following patent document 2 is known for vein authentication. Patent Documents 3, 4 and 5 relate to a fingerprint collation technique, and Patent Documents 6 and 7 relate to a technique for photographing a fingerprint attached to an object.
Japanese Patent No. 2695238 Japanese Patent No. 3558025 Japanese Patent No. 3248163 Japanese Patent No. 3418818 Japanese Patent No. 3515492 Japanese Patent No. 2931286 Japanese Patent Publication No. 6-40870

However, there is a problem that the security by the IC card cannot be dealt with. This is so-called “spoofing”. Although it is originally a password that cannot be known by anyone other than the person, if it is known in some way, it is assumed that a stolen card or the like will be used illegally. For example, a wallet or the like is lost or stolen.
There are many cases where you have a cash card or credit card of IC card and personal information such as a driver's license in your wallet. Under such circumstances, it is assumed that the wallet was stolen, the date of birth was specified by a driver's license, and the date of birth was set as a personal identification number. In such a case, it becomes possible for others impersonating the person to illegally use the IC card.

  Although strong security authentication can be performed by combining an IC card and biometric authentication, the biometric authentication mechanism may be one aspect that makes general users feel “inconvenient”. This is because “an act of holding the hand over the reading device” which is not in the conventional IC card is added as a new act. Due to the additional actions, there may be disadvantages such as enlightenment about the use and trouble of the actions themselves.

  It is an object of the present invention to provide a card unauthorized use prevention support system that can prevent unauthorized use of a card related to a financial transaction such as a cash card while removing the “inconvenience” in biometric authentication as described above. To do.

In order to solve the above problem, the card unauthorized use prevention support system of the present invention is a card unauthorized use prevention system that determines whether or not a card can be used using a fingerprint attached to the card,
A card information database storing a cardholder's fingerprint image and a fingerprint image file received from the client terminal, and extracting each fingerprint from the card user database stored in the card information database. An authentication server having an authentication means for determining whether a fingerprint other than the available user is included in the fingerprint image file by collating with a fingerprint image, and transmitting the determination result to the client terminal;
Fingerprint photographing means for photographing a fingerprint on the card surface and generating the fingerprint image file, communication means for transmitting the fingerprint image file together with other card information necessary for authentication, and a determination result received from the authentication server Based on the authentication information processing means for determining whether or not the card can be used and presenting information indicating that the card may have been used illegally if the card contains a fingerprint other than the cardholder It comprises the client terminal which has.

  ADVANTAGE OF THE INVENTION According to this invention, the subject with respect to the security which the conventional card | curd has can be coped with. Further, the present invention can be used in the same way as a conventional card with respect to the user load when using an IC card or a card using biometric authentication, and the user load can be suppressed to be equal to the current situation. Furthermore, since there is no change in its use, there is almost no education or enlightenment in operations, and the effect is brought to both the end user and the system operator.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 is a system configuration diagram showing an embodiment of the present invention.
As shown in FIG. 1, the system in the present embodiment is such that a client terminal 120 for authenticating a money transaction card such as a credit card or an ATM card and an authentication server 110 are connected by a network 130.
The client terminal 120 includes a communication unit 121 for performing various communications, a fingerprint photographing unit 122 for photographing a fingerprint attached to the card and creating a fingerprint image file, and a card information reading unit for reading information recorded in the card 123, an authentication information processing unit 124 for performing various processes on authentication information returned from the authentication server 110, an input / output device 125 for outputting a password, a processing result, authentication result information, and the like It consists of
The fingerprint photographing unit 122 is configured by photographing hardware using the technique of Patent Document 6 or Patent Document 7 and a program for creating an image file.
The authentication server 110 includes a communication unit 111 that performs various types of communication, an authentication unit 112 that performs various types of authentication using a personal identification number and fingerprint image file transmitted from the client terminal 120, and the address and name of the user for each card ID. And a card information database 114 for storing and managing e-mail addresses, telephone numbers, fingerprint information, and the like.

FIG. 2 is a diagram showing the configuration of the fingerprint information 200 of the user who is associated with the card ID stored in the card information database 113.
The fingerprint information 200 includes a card ID 210 as a main key, a user name 220, and a fingerprint image 230 of each finger of both hands.

Next, processing of the system according to the present invention will be described with reference to FIGS.
FIG. 3 is a flowchart showing processing on the client terminal 120 side.
A card user inserts a card into a card insertion section of a client terminal (not shown). At this time, if necessary, a password or the like is also input from the input device 125 (step 300).
Next, the card information reading unit 123 reads card information such as a card ID (step 310).
Next, the fingerprint photographing unit 122 photographs the fingerprints on both sides of the card and creates a fingerprint image file (step 320).
Next, the card information read in step 310, the fingerprint image file created in step 320, and the password if necessary are transmitted from the communication unit 121 to the authentication server 110.

Here, the processing in the authentication server 110 will be described with reference to FIG.
Since the validity check of the card information and the password is a public technology, only fingerprint authentication will be described here.
When the communication unit 111 receives card information and a fingerprint image file from the client terminal 120 (step 400), each fingerprint on the image is cut out from the fingerprint image file by pattern matching. The process here is to binarize the fingerprint image file and apply the existing technology to cut out each image part that is elliptical and has contour stripes inside while making the fingerprint clearer step by step by expansion and contraction processing etc. The above processing may be performed (step 410).
Next, it is determined whether or not there is a fingerprint on the received fingerprint image (step 420). If there is no fingerprint, information indicating that the fingerprint cannot be verified because there is no fingerprint is added to the authentication result message (step 421). In step 490, an authentication result message is transmitted from the communication unit 111 to the client terminal 120.

If there is a fingerprint, the card of this card registered in each fingerprint image cut out in step 410 and the fingerprint information 200 of the user using the existing technology such as Patent Document 3 or Patent Document 4 described above. Collation with the fingerprint image of the user associated with the ID is performed.
For example, matching is performed by changing the size and angle of the image. If the matching rate is equal to or higher than a predetermined matching rate, it is regarded as matching (step 430).
Next, it is determined whether the fingerprint of the user is found (step 440). If no fingerprint is found, only a fingerprint other than the user is available (the current user is likely to be an unauthorized user). Is added to the authentication result message (step 441), and the authentication result message is transmitted from the communication unit 111 to the client terminal 120 in step 490.

Next, if there is a fingerprint of the user, it is determined whether all of the fingerprints of the user are available (step 450). Information indicating that there is an event is added to the authentication result message (step 451), and the authentication result message is transmitted from the communication unit 111 to the client terminal 120 in step 490.
If a fingerprint other than those registered as available users is found, information indicating the possibility of unauthorized use is added to the authentication result message. Further, fingerprint images other than those who can be used are stored in the card information database 113 as evidence in association with the card ID (step 460).

  Next, it is determined whether the clearest fingerprint belongs to the user. The determination method here is a method in which the one with the highest matching rate in the collation in step 430 is regarded as clear, the one with the clearest line (the image is sharpened stepwise by expansion and contraction, and the fingerprint is It is preferable to use a method such that the first one found in the process of step 410 in which presence / absence is determined is regarded as the clearest fingerprint. Moreover, you may determine by those combination (step 470). The sharpest fingerprint can be assumed to be the one most recently used (ie the current user).

When it is determined that the clearest fingerprint does not belong to the user, information indicating that the current user may be an unauthorized user is added to the authentication result message (step 471), and step 490 is performed. Then, an authentication result message is transmitted from the communication unit 111 to the client terminal 120.
If it is determined that the clearest fingerprint belongs to the user, the information indicating that the current user is likely to be a legitimate user is added to the authentication result message (step 480). .
Finally, the authentication result message created in the process so far is transmitted from the communication unit 111 to the client terminal 120.

Returning to FIG. 3, the processing at the client terminal after receiving the authentication result message from the authentication server 110 will be described.
When the communication unit 121 receives the authentication result message from the authentication server 111 (step 340), the communication unit 121 displays the authentication result message on the input / output device 125 (step 350).
Next, it is determined whether or not a fingerprint of only the user is found (step 360). When there is a fingerprint other than the user and when no fingerprint is found, information to that effect is received from the authentication server 110. If it is in the authentication result message, it is determined whether the preset number of times of authentication has been reached (step 361). If the specified number of times has not been reached, the card is reattached with a fingerprint attached. A message prompting the insertion is displayed or output to the input / output device 125 (step 361), and the process returns to step 300 to wait for the card to be inserted again.
If the designated authentication count has been reached, the process proceeds to step 380.

If the fingerprint is found only by the user, the card is permitted to be used (step 370).
Finally, the authentication result information is printed from the input / output device 125 or transmitted from the communication unit 121 to a mail address stored in card user information (not shown) in the card information database 113. At this time, if fingerprints other than those who can be used are found, there is a possibility that they have been used illegally, so a message prompting confirmation in the usage details is also added (step 380).

After receiving the authentication result information, the card user confirms the usage details. If there is no problem, the card user uses a web system (not shown) as a fingerprint other than the user who is stored in the card information database. Images can be deleted.
In addition, in the flowchart of FIG. 3, when a fingerprint other than the available user is found, the card use is not permitted. However, when using the card in a store or the like, the clearest fingerprint of the available user is used. When a message indicating that the message is correct is returned, operation may be permitted to permit use at the discretion of the store employee. Also in this case, since the possibility of unauthorized use is transmitted to the actual user in step 380, the user can be confirmed.

In addition, even when the client terminal is an unattended ATM or the like, if the user transmits a response indicating that the use is permitted by e-mail or the like to the authentication result information transmitted in step 380, the client terminal permits the use. It shall be implemented.
By configuring such a system, it is possible to support prevention of unauthorized use of a card using high security of biometric authentication while removing the “inconvenience” in biometric authentication as described above.

1 is a system configuration diagram showing an embodiment of the present invention. It is a figure which shows the data structure of the fingerprint information database for actualizing this invention. It is a flowchart explaining the process by the side of a client terminal. It is a flowchart explaining the process by the side of an authentication server.

Explanation of symbols

DESCRIPTION OF SYMBOLS 110 ... Authentication server, 111 ... Communication part, 112 ... Authentication part, 113 ... Card information database, 120 ... Client terminal, 121 ... Communication part, 122 ... Fingerprint imaging part, 123 ... Card information reading part, 124 ... Authentication information processing part 125 ... Input / output device, 2000 ... Fingerprint information, 210 ... Card ID, 220 ... User information, 230 ... User fingerprint image.

Claims (1)

A card unauthorized use prevention system that determines whether or not a card can be used using a fingerprint attached to the card,
A card information database storing fingerprint images of card users,
Individual fingerprints are cut out from the fingerprint image file received from the client terminal, and the individual fingerprints are compared with the fingerprint images of the card users stored in the card information database. An authentication server having an authentication means for determining whether it is included in the file and transmitting the determination result to the client terminal;
Fingerprint photographing means for photographing the fingerprint on the card surface and generating the fingerprint image file;
Communication means for transmitting the fingerprint image file to an authentication server together with other card information necessary for authentication;
Based on the determination result received from the authentication server, it is determined whether or not the card can be used, and if the card contains a fingerprint other than the user, the user may have been used illegally. A client terminal having authentication information processing means for presenting information;
A card unauthorized use prevention support system characterized by comprising:

Images