JP2008033805A - Personal information protection system, personal information protection method and personal information protection program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a personal information protection system, a personal information protection method and a personal information protection program, for performing personal identification using biological information. <P>SOLUTION: A terminal reads biological information of a user, confirms whether the biological information of the user is matched with biological information read from an IC card or not, and encrypts and transmits, when the biological information of the user is matched with the biological information read from the IC card, user information with an ID number to a user data server. The user data server stores the received ID number and the encrypted user information in association with each other. According to this, only user information associated with the ID number can be extracted from the user database, and since user information to be transmitted and received on a network and user information recorded in the user data server are encrypted, leak of the user information can be prevented. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a personal information protection system, a personal information protection method, and a personal information protection program, and more particularly to a personal information protection system, a personal information protection method, and a personal information protection program that authenticate an individual using biometric information.

  In recent years, due to the rapid development and spread of the Internet, electronic commerce in which goods, information, services, etc. are provided via the Internet has become full-scale. Accordingly, the necessity of protecting personal information is increasing year by year. However, a system that manages personal information in a server via a network has a plurality of vulnerabilities, and the possibility of leakage of personal information remains. Therefore, a method for preventing personal information from being leaked by personal authentication using biometric information or data encryption has been proposed.

  In Patent Document 1, a code is generated based on at least one of biometric information or character string data, and an encryption key or a decryption key is generated based on the code, thereby inputting biometric information. The key can be generated by inputting only the character string without the requirement of the key, and based on the code generated by the user's judgment, only the biometric information, only the character string, or the combination of the biometric information and the character string. There have been proposed an encryption key generation device, an encryption / decryption device, an encryption key generation method, and an encryption / decryption method capable of generating an encryption key or a decryption key.

  In Patent Document 2, after the biological information is read by the biological information reading means, the biological information is received via the first communication means and the second communication means, and this biological information and a specific person stored in advance are received. The biometric information is verified by the biometric information verification means to authenticate whether or not it is the specific person, and only the specific person can access the personal information storage means, so that a person other than the specific person can access the personal information storage means. An authentication system, an information recording method, and an information management method that can prevent access to personal information storage means have been proposed.

  In patent document 3, even if the user who uses a portable storage medium does not input personal identification information one by one, he / she automatically inputs personal identification information to the portable storage medium simply by presenting his / her biological information, A personal authentication system that eliminates the hassle of inputting personal identification information and can perform personal authentication with high security by receiving personal authentication using personal identification information by collation in this portable storage medium A personal authentication method and a personal authentication terminal device have been proposed.

In Patent Literature 4, the storage medium stores identification information including identity information, and the form communication terminal reads the identification information from the storage medium, the biometric information reading means, and the reading means. Means for transmitting identification information and biometric information read by the biometric information reading means to the management server, and means for displaying the authentication information received from the management server. A collation means for collating the biometric information and biometric information in the biometric information database based on the biometric information database registered in association with the information, the identification information and the biometric information received from the mobile communication terminal, and a collation result And a means for transmitting authentication information indicating that the identification information is authenticated to the mobile communication terminal when the two match, an identification system has been proposed. .
JP 2001-168855 A JP 2001-331454 A JP 2003-346098 A JP 2006-011681 A

  However, the above invention has the following problems.

  In a system that stores user information such as personal information from a terminal to a server via a network or a system that receives user information stored in a server from a terminal via a network, there is a high possibility that user information will be leaked. Further, in user authentication using a user ID and a password, when the user ID and password are known to another person, the other person can use the terminal. Other users can obtain user information stored in the server from the terminal. Further, the maintenance manager of the server can access the server, can obtain user information stored in the server, and the user information may be leaked from the maintenance manager. Further, the network includes a server that relays user information on the way, a line that wirelessly transmits user information, and the like, and the information leaks from the server and the line.

  Therefore, the present invention includes an IC card that stores an ID number and biometric information, a terminal that can read the IC card, and a user data server that stores the ID number and encrypted user information in association with each other. In the personal information protection system, the personal information protection method, and the personal information protection program, the terminal reads the user's biometric information and confirms whether the user's biometric information matches the biometric information read from the IC card. When the biometric information of the user matches the biometric information read from the IC card, the user information is encrypted and transmitted to the user data server together with the ID number. The user data server is encrypted with the received ID number. By associating and storing user information, extraction from the user database can be performed using user information associated with an ID number. In addition, the user information is encrypted at the terminal, the encrypted user information is recorded on the user data server, and the encrypted user information is transmitted from the user data server to the terminal. Information transmitted and received and user information recorded in the user data server are encrypted and cannot be decrypted even if the user information is leaked, its personal information protection method, and its personal information The purpose is to propose a protection program.

  The invention according to claim 1 is a user data server for storing an IC card for storing an ID number and biometric information, a terminal capable of reading the IC card, and the ID number and encrypted user information in association with each other. In the personal information protection system, the terminal reads the biometric information of the user, checks whether the biometric information of the user matches the biometric information read from the IC card, and the biometric information of the user And the biometric information read from the IC card are encrypted, the user information is encrypted and transmitted to the user data server together with the ID number, and the user data server is encrypted with the received ID number. The user information is stored in association with each other.

  According to a second aspect of the present invention, in the personal information protection system according to the first aspect, the user information is information that easily identifies an individual in the public.

  The invention according to claim 3 is the personal information protection system according to claim 1 or 2, wherein the terminal encrypts the user information using the biometric information read from the IC card as a secret key. And

  The invention according to claim 4 is the personal information protection system according to claim 1 or 2, wherein the terminal encrypts the user information using the ID number read from the IC card as a secret key. And

  Invention of Claim 5 has an authentication server which memorize | stores the said ID number of all the users who use the said personal information protection system in the personal information protection system of any one of Claim 1 to 4, The terminal transmits the ID number read from the IC card to the authentication server, and reads the user's biometric information when receiving a signal from the authentication server that permits the user to read the biometric information. The authentication server checks whether or not the ID number received from the terminal is stored in the authentication server, and stores the ID number received from the terminal. A signal permitting reading of the message is transmitted to the terminal.

  The invention according to claim 6 is an IC card that stores an ID number and biometric information, a terminal that can read the IC card, and a user data server that stores the ID number and encrypted user information in association with each other. In the personal information protection system, the terminal reads the biometric information of the user, checks whether the biometric information of the user matches the biometric information read from the IC card, and the biometric information of the user And the biometric information read from the IC card, the ID number is transmitted to the user data server, the encrypted user information received from the user data server is decrypted, and the user data server Extracting the encrypted user information stored in association with the received ID number, and extracting the encrypted And transmitting the over The information to the terminal.

  According to a seventh aspect of the present invention, in the personal information protection system according to the sixth aspect, the user information is information that easily identifies an individual in the public.

  The invention described in claim 8 is the personal information protection system according to claim 6 or 7, wherein the terminal decrypts the encrypted user information using the biometric information read from the IC card as a secret key. It is characterized by that.

  The invention described in claim 9 is the personal information protection system according to claim 6 or 7, wherein the terminal decrypts the encrypted user information using the ID number read from the IC card as a secret key. It is characterized by that.

  Invention of Claim 10 has the authentication server which memorize | stores the said ID number of all the users who use the said personal information protection system in the personal information protection system of any one of Claim 6 to 9, The terminal transmits the ID number read from the IC card to the authentication server, and reads the user's biometric information when receiving a signal from the authentication server that permits the user to read the biometric information. The authentication server checks whether or not the ID number received from the terminal is stored in the authentication server, and stores the ID number received from the terminal. A signal permitting reading of the message is transmitted to the terminal.

  The invention according to claim 11 is a user data server for storing an IC card for storing an ID number and biometric information, a terminal capable of reading the IC card, and the ID number and encrypted user information in association with each other. In the personal information protection method of the personal information protection system, the terminal reads the user's biometric information and confirms whether the user's biometric information matches the biometric information read from the IC card. And when the biometric information of the user matches the biometric information read from the IC card, the step of encrypting the user information and transmitting it to the user data server together with the ID number, and the user data server And storing the received ID number and the encrypted user information in association with each other.

  The invention according to claim 12 is the personal information protection method according to claim 11, wherein the personal information protection system includes an authentication server that stores the ID numbers of all users who use the personal information protection system. When the terminal receives the ID number read from the IC card to the authentication server and a signal permitting reading of the biometric information of the user from the authentication server, the terminal reads the biometric information of the user. A step of confirming whether the ID number received from the terminal is stored in the authentication server and the ID number received from the terminal; And a step of transmitting a signal permitting reading of the biological information to the terminal.

  A thirteenth aspect of the present invention provides an IC card that stores an ID number and biometric information, a terminal that can read the IC card, and a user data server that stores the ID number and encrypted user information in association with each other. In the personal information protection method of the personal information protection system, the terminal reads the user's biometric information and confirms whether the user's biometric information matches the biometric information read from the IC card. And when the biometric information of the user matches the biometric information read from the IC card, the step of transmitting the ID number to the user data server and the encrypted data received from the user data server Decrypting user information; and the encryption stored by the user data server in association with the received ID number And having a step of extracting the user information, and sending the extracted user information the encrypted was to the terminal.

  The invention described in claim 14 is the personal information protection method according to claim 13, wherein the personal information protection system includes an authentication server that stores the ID numbers of all users who use the personal information protection system. When the terminal receives the ID number read from the IC card to the authentication server and a signal permitting reading of the biometric information of the user from the authentication server, the terminal reads the biometric information of the user. A step of confirming whether the ID number received from the terminal is stored in the authentication server and the ID number received from the terminal; And a step of transmitting a signal permitting reading of the biological information to the terminal.

  The invention according to claim 15 is an IC card for storing an ID number and biometric information, a terminal capable of reading the IC card, and a user data server for storing the ID number and encrypted user information in association with each other. In the personal information protection program of the personal information protection system, the terminal confirms whether the process of reading the user's biometric information matches the biometric information of the user and the biometric information read from the IC card. When the user biometric information matches the biometric information read from the IC card, the user information is encrypted and transmitted to the user data server together with the ID number, and the user data server And storing the received ID number and the encrypted user information in association with each other. .

  The invention described in claim 16 is the personal information protection program according to claim 15, wherein the personal information protection system includes an authentication server that stores the ID numbers of all users who use the personal information protection system. When the terminal receives from the authentication server a process for transmitting the ID number read from the IC card to the authentication server and a signal for allowing the user to read the biometric information, the terminal reads the biometric information of the user. When the authentication server stores the ID number received from the terminal and the process for confirming whether the ID number received from the terminal is stored in the authentication server; And processing for transmitting a signal permitting reading of the biological information to the terminal.

  The invention according to claim 17 is an IC card for storing an ID number and biometric information, a terminal capable of reading the IC card, and a user data server for storing the ID number and encrypted user information in association with each other. In the personal information protection program of the personal information protection system, the terminal confirms whether the process of reading the user's biometric information matches the biometric information of the user and the biometric information read from the IC card. And when the biometric information of the user matches the biometric information read from the IC card, the process of transmitting the ID number to the user data server, and the encrypted data received from the user data server The process of decrypting user information and the user data server stored in association with the received ID number And having a process for extracting Goka the user information has been, and the extracted user information the encrypted was a process of transmitting to the terminal.

  The invention described in claim 18 is the personal information protection program according to claim 17, wherein the personal information protection system includes an authentication server that stores the ID numbers of all users who use the personal information protection system. When the terminal receives from the authentication server a process for transmitting the ID number read from the IC card to the authentication server and a signal for allowing the user to read the biometric information, the terminal reads the biometric information of the user. When the authentication server stores the ID number received from the terminal and the process for confirming whether the ID number received from the terminal is stored in the authentication server; And processing for transmitting a signal permitting reading of the biological information to the terminal.

  In the present invention, the terminal reads the biometric information of the user, checks whether or not the biometric information of the user matches the biometric information read from the IC card, and the biometric information of the user and the biometric information read from the IC card When the IDs match, the user information is encrypted and transmitted to the user data server together with the ID number, and the user data server stores the received ID number and the encrypted user information in association with each other, thereby storing the user information from the user database. Extraction enables only user information associated with an ID number, and also encrypts user information in the terminal, records the encrypted user information in the user data server, and encrypts it from the user data server to the terminal User information and user data server transmitted and received on the network by transmitting user information User information recorded is encrypted, it is possible to prevent the leakage of user information.

  Hereinafter, the configuration and operation of a personal information protection system according to an embodiment of the present invention will be described.

  First, the configuration of the personal information protection system according to the present embodiment will be described with reference to FIGS.

  The personal information protection system according to the present embodiment includes a terminal (1, 11) having at least one of the encryption system 2 and the decryption system 12, an authentication server 21, and a database server 24.

  FIG. 1 is a diagram showing a configuration of a personal information protection system having a terminal 1 having an encryption system 2, an authentication server 21, and a database server 24.

  The encryption system 2 included in the terminal 1 includes an ID number composed of alphanumeric characters or numerals of an IC card used by a user, an IC card reader 4 that reads biometric information, a biometric information input unit 3 that reads biometric information of the user, and an IC card. A biometric authentication circuit 6 that compares the read biometric information with the biometric information read by the biometric information input unit 3, a control circuit 9 that controls the encryption system 2, and a display unit 7 such as a display that displays a request from the control circuit 9. , A keyboard for inputting user information (hereinafter referred to as user information), a data input unit 5 such as an optical disk, and an encryption circuit 8 for encrypting the user information.

  On the IC card used by the user, the user ID number and biometric information for identifying the user are recorded in advance. The biological information is information related to a part of the user's human body. For example, fingerprints, palm prints, finger vein shapes, irises, voice prints, and the like are information read and converted into data by the biometric information input unit 3 suitable for reading each.

  The user information is information such as personal information of the user, documents created by the user, music, and the like. The user's personal information is information that easily identifies the individual in the public. For example, the individual's postal code (〒 XXX-XXX), address (□□ capital ☆☆ ward △ ○ chome ○ number ○ No.), name (Taro Nihon), age (XX year old), gender (male or female), date of birth (XX year Y month ○ day), phone number (XX-XXXXXX) ○○○), employer (○○ Co., Ltd.), etc., and leaking, leaking, or being stolen may lead to privacy infringement and crime, and it must be strictly managed. is there. User information having a large amount of data is input to the encryption system 2 using the data input unit 5 using an optical disk or the like.

  The encryption system 2 of the terminal 1 is connected to the authentication server 21 and the database server 23 via the network 26 and communicates with the authentication server 21 and the database server 24.

  Although not shown, a terminal having an encryption system similar to the encryption system 2 included in the terminal 1 is connected to the network 26 and communicates with the authentication server 21 and the database server 24.

  The authentication server 21 checks whether the ID number transmitted from the encryption system 2 of the terminal 1 is registered in the database 23 and the database 23 in which the ID numbers of the users using the personal information protection system are registered for the number of persons. If it is registered, it has an authentication circuit 22 for issuing an ID number authentication signal.

  As shown in FIG. 5, the database server 24 includes a database 25 that records user information encrypted by the encryption system 2 of the terminal 1, a user ID number, and a type of user information in association with each other. Composed. Here, the type of user information is a type for classifying user information such as a zip code, address, name, age, gender, date of birth, telephone number, and office.

  When the database 25 is searched by the user ID number, the user information recorded in association with the user ID number is extracted. Further, when the database 25 is searched for the user ID number and the type of user information (for example, address), user information corresponding to the type of user information is extracted from the user information recorded in association with the user ID number. The

  FIG. 2 is a diagram illustrating a configuration of a personal information protection system including the terminal 11 having the decryption system 12, the authentication server 21, and the database server 24.

  The decryption system 12 included in the terminal 11 includes an ID number of an IC card used by a user, an IC card reader 4 that reads biometric information, a biometric information input unit 3 that reads biometric information of the user, and biometric information read from the IC card. The biometric authentication circuit 6 that compares the biometric information read by the biometric information input unit 3, the control circuit 9 that controls the decryption system 12, the display unit 7 that displays a request from the control circuit 9, and the type of user information A data input unit 5 such as a keyboard, a data output unit 10 such as a printer that outputs user information, and a decryption circuit 8 that decrypts the encrypted user information.

  The decryption system 12 of the terminal 11 is connected to the same authentication server 21 and database server 24 used by the encryption system 2 via the network 26, and communicates with the authentication server 21 and the database server 24.

  Although not shown, a plurality of terminals having a decryption system similar to the decryption system 12 included in the terminal 11 are connected to the same authentication server 21 and database server 24 used by the above-described encryption system via the network 26, Communication with the authentication server 21 and the database server 24 is possible.

  Next, with reference to FIG. 3, a description will be given of a process in which a user uses an IC card to input to the encryption system 2 of the terminal 1 and record the encrypted user information in the database server 24.

  First, the encryption system 2 waits for an operation for requesting recording of user information from the user (step S301). When the user requests recording of user information (step S301 / YES), the control circuit 9 displays on the display unit 7 a request to read the IC card and informs the user of the IC card by the IC card reader 4. Reading is prompted (step S302).

  The user causes the IC card reader 4 to read the ID number and biometric information recorded on the IC card (step S303). The ID number read by the IC card reader 4 is transmitted from the encryption system 2 to the authentication server 21 via the network 26 (step S304). Upon receiving the IC number from the encryption system 2, the authentication server 21 checks whether or not the ID number received by the authentication circuit 22 is registered in the database 23 (step S305). If the ID number received from the encryption system 2 is not registered in the database 23 (step S305 / NO), the ID number authentication signal is not issued, and it is determined that the access is unauthorized by the user, and the process is terminated. On the other hand, if the received ID number is registered in the database 23 (step S305 / YES), the ID number is authenticated and an ID number authentication signal is issued (step S306). The issued ID number authentication signal is transmitted to the encryption system 2 (step S307).

  When receiving the ID number authentication signal from the authentication server 21, the control circuit 9 displays a message requesting the user to input biometric information on the display unit 7 (step S308). When the user causes the biometric information input unit 3 to read biometric information (step S309), the biometric authentication circuit 6 matches the biometric information read by the biometric information input unit 3 with the biometric information read from the IC card in step S301. It is compared whether to do (step S310). If the biometric information read by the biometric information input unit 3 and the biometric information read from the IC card do not match (step S310 / NO), the user who requested the user information recording is identified by the IC card. It is determined that the user is not, and the process is terminated.

  On the other hand, when the biometric information read by the biometric information input unit 3 matches the biometric information recorded on the IC card (step S310 / YES), the biometric authentication circuit 6 issues a biometric authentication signal (step S311).

  When the control circuit 9 receives the ID number authentication signal issued from the authentication server 21 and the biometric authentication signal issued from the biometric authentication circuit 6, the control circuit 9 is a legitimate user identified by the IC card. The user is recognized as an authorized holder of the IC card, and the user information input by the user is encrypted and the transmission of the encrypted user information to the database server 24 is permitted (step S312). When the encryption of the user information and the transmission of the encrypted user information to the database server 24 are permitted, the control circuit 9 sends a message requesting the display unit 7 to input the user information and the user information type. It is displayed (step S313).

  When the user inputs the user information and the type of the user information from the data input unit 5 (step S314), the encryption circuit 8 encrypts the user information using the data string of the biometric information read from the IC card as a secret key. (Step S315). The encrypted user information is transmitted from the encryption system 2 to the database server 24 together with the ID number, the type of user information, and a biometric authentication signal (step S316).

  The database server 24 confirms whether or not the biometric authentication signal is received together with the ID number, the type of user information, and the encrypted user information (step S317). When the biometric authentication signal is not received together with the ID number, the type of user information, and the encrypted user information (step S317 / NO), the encrypted user information is from a person who is not a proper holder of the IC card. The process of recording user information in the database 25 is terminated. On the other hand, when the biometric authentication signal is received together with the ID number, the type of user information, and the encrypted user information (step S317 / YES), the encrypted user information is determined to be data from the authorized holder of the IC card. Then, recording of the encrypted user information in the database 25 is permitted (step S318). When recording of the encrypted user information in the database 24 is permitted, the encrypted user information is recorded in the database 25 in association with the ID number and the type of user information (step S319).

  Next, a process of reading encrypted user information recorded in the database server 24 using an IC card and decrypting the user information by the decryption system 12 of the terminal 11 will be described with reference to FIG.

  First, the decryption system 12 waits for an operation for requesting reading of user information from the user (step S401). When the user requests recording of user information (step S401 / YES), the control circuit 9 displays on the display unit 7 that the IC card reader 4 is requested to read, and the IC card reader 4 detects the IC card. Reading is prompted (step S402).

  The user causes the IC card reader 4 of the decryption system 12 to read the IC card ID number and biometric information (step S403). The ID number read by the IC card reader 4 is transmitted from the decryption system 12 to the authentication server 21 via the network 26 (step S404). The authentication server 21 searches the authentication circuit 22 to see if the ID number received from the decryption system 12 is registered in the database 23 (step S405). If the ID number received from the decryption system 12 is not registered in the database 23 (step S405 / NO), the ID number authentication signal is not issued, and it is determined that the access is unauthorized by the user, and the process is terminated.

  On the other hand, if the ID number received from the decryption system 12 is registered in the database 23 (step S405 / YES), the ID number is authenticated and an ID number authentication signal is issued (step S406). The issued ID number authentication signal is transmitted to the decryption system 12 (step S407).

  When receiving the ID number authentication signal from the authentication server 21, the control circuit 9 displays a message requesting the user to input biometric information on the display unit 7 (step S408).

  When the user causes the biometric information input unit 3 to read biometric information (step S409), the biometric authentication circuit 6 determines whether the biometric information read by the biometric information input unit 3 matches the biometric information read from the IC card. These are compared (step S410). When the biometric information read by the biometric information input unit 3 and the biometric information read from the IC card do not match (step S410 / NO), the user who has requested reading of the user information is identified by the IC card. It is determined that the user is not, and the process is terminated. On the other hand, when the biometric information read by the biometric information input unit 3 matches the biometric information read from the IC card (step S410 / YES), the biometric authentication circuit 6 issues a biometric authentication signal (step S411). .

  When the control circuit 9 receives the ID number authentication signal issued from the authentication server 21 and the biometric authentication signal issued from the biometric authentication circuit 6, the control circuit 9 authenticates the user who uses the IC card by the ID number of the IC card. It is recognized that the user is an authorized IC card holder, receives the encrypted user information from the database server 24, and permits the decryption of the encrypted user information (step S412). At the same time, when only the user information classified by the type of user information is necessary, the control circuit 9 displays a message to the effect that the type of user information is input on the display unit 7 (step S413).

  The control circuit 9 waits for input of the type of user information from the data input unit 5 (step S414). If all user information is required regardless of the type of user information, it is not necessary to input the type of user information. When the type of user information is not input (step S414 / NO), the control circuit 9 transmits the ID number and the biometric authentication signal to the database server 24, and is encrypted user information registered in association with the ID number. Is sent to the database server 24 (step S415). On the other hand, when the type of user information is input (step S414 / YES), the control circuit 9 transmits the ID number, the type of user information, and the biometric authentication signal to the database server 24, and the ID number and the user information. The database server 24 is requested to transmit encrypted user information registered in association with the type (step S416).

  The database server 24 confirms whether or not the biometric authentication signal is received together with the ID number and the type of user information (step S417). When the biometric authentication signal is not received together with the ID number, the type of user information, and the encrypted user information (step S417 / NO), it is determined as a user information read request from a person who is not an authorized IC card holder. And the process which reads user information from the database 25 is complete | finished. On the other hand, when the biometric authentication signal is received together with the ID number and the type of user information (step S417 / YES), it is determined as a request for reading user information from an authorized holder of the IC card, and the encrypted user information database 25 is received. Reading from is permitted (step S418). When reading from the database 25 is permitted, the database server 24 stores the encrypted user information recorded in association with the type of user information and the ID number in the database 25 when the type of user information is received. (Step S419) and transmitted to the decoding system 12 (step S420). On the other hand, if the type of user information is not received, the encrypted user information recorded in association with the ID number is extracted from the database 25 (step S419) and transmitted to the decryption system 12 (step S420). .

  When receiving the encrypted user information from the database server 24, the decryption system 12 decrypts the encrypted user information using the data string of the biometric information read from the IC card as a secret key (step S421). ). The decrypted user information is displayed on the display unit 7 of the user terminal 11 or output from the data output unit 10.

  According to the above configuration, user information encrypted by the terminal is transmitted to the database server, and the encrypted user information is received from the database server. Leakage can be prevented. Further, since only the authorized holder of the IC card can decrypt the encrypted user information received by the terminal, it is possible to pass the user information that identifies the individual.

  In the encryption circuit 8 of the encryption system 2 described above, the user information is encrypted using the data string of the biometric information read from the IC card as a secret key, but the data string of the ID number read from the IC card. May be used as a secret key to encrypt user information. In that case, the decryption circuit 14 of the decryption system 12 also decrypts the user information using the data string of the ID number read from the IC card as a secret key.

It is a block diagram which shows the structure of the personal information protection system which concerns on this embodiment. It is a block diagram which shows the structure of the personal information protection system which concerns on this embodiment. It is a sequence diagram of the operation | movement which encrypts user information and records on a database server. It is a sequence diagram of the operation | movement which extracts and decodes the user information recorded on the database server. It is a figure which shows the structure of a database server.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1, 11 Terminal 2 Encryption system 3 Biometric information input part 4 IC card reader 5 Data input part 6 Biometric authentication circuit 7 Display part 8 Encryption circuit 9 Control circuit 10 Data output part 12 Decryption system 21 Authentication server 22 Authentication circuit 23 , 25 database 24 database server 26 network

Claims (18)

In a personal information protection system having an IC card for storing an ID number and biometric information, a terminal capable of reading the IC card, and a user data server for storing the ID number and encrypted user information in association with each other ,
The terminal reads the biometric information of the user, checks whether the biometric information of the user matches the biometric information read from the IC card, and reads the biometric information of the user and the biometric information read from the IC card. And the user information is encrypted and transmitted to the user data server together with the ID number,
The user data server stores the received ID number and the encrypted user information in association with each other.   The personal information protection system according to claim 1, wherein the user information is information that easily identifies an individual in the public.   The personal information protection system according to claim 1 or 2, wherein the terminal encrypts the user information using the biometric information read from the IC card as a secret key.   The personal information protection system according to claim 1 or 2, wherein the terminal encrypts the user information using the ID number read from the IC card as a secret key. An authentication server for storing the ID numbers of all users who use the personal information protection system;
The terminal transmits the ID number read from the IC card to the authentication server, and reads the biometric information of the user when receiving a signal permitting reading of the biometric information of the user from the authentication server. And
The authentication server confirms whether or not the ID number received from the terminal is stored in the authentication server, and reads the biometric information of the user when the ID number received from the terminal is stored. 5. The personal information protection system according to claim 1, wherein a signal permitting access to the terminal is transmitted to the terminal. In a personal information protection system having an IC card for storing an ID number and biometric information, a terminal capable of reading the IC card, and a user data server for storing the ID number and encrypted user information in association with each other ,
The terminal reads the biometric information of the user, checks whether the biometric information of the user matches the biometric information read from the IC card, and reads the biometric information of the user and the biometric information read from the IC card. And the ID number is transmitted to the user data server, the encrypted user information received from the user data server is decrypted,
The user data server extracts the encrypted user information stored in association with the received ID number, and transmits the extracted user information to the terminal. Information protection system.   The personal information protection system according to claim 6, wherein the user information is information that easily identifies an individual in the public.   The personal information protection system according to claim 6 or 7, wherein the terminal decrypts the encrypted user information using the biometric information read from the IC card as a secret key.   The personal information protection system according to claim 6 or 7, wherein the terminal decrypts the encrypted user information using the ID number read from the IC card as a secret key. An authentication server that stores the ID numbers of all users who use the personal information protection system;
The terminal transmits the ID number read from the IC card to the authentication server, and reads the user's biometric information when receiving a signal from the authentication server that permits the user to read the biometric information. And
The authentication server checks whether or not the ID number received from the terminal is stored in the authentication server, and reads the biometric information of the user when the ID number received from the terminal is stored. 10. The personal information protection system according to claim 6, wherein a signal for permitting the transmission is transmitted to the terminal. An personal information protection system comprising an IC card for storing an ID number and biometric information, a terminal capable of reading the IC card, and a user data server for storing the ID number and encrypted user information in association with each other In the personal information protection method,
The terminal reads the user's biometric information, confirms whether the user's biometric information matches the biometric information read from the IC card, the user's biometric information and the IC card When the read biometric information matches, the step of encrypting the user information and transmitting it to the user data server together with the ID number;
A method for protecting personal information, comprising: the user data server storing the received ID number and the encrypted user information in association with each other. The personal information protection system has an authentication server that stores the ID numbers of all users who use the personal information protection system;
When the terminal receives the ID number read from the IC card to the authentication server and a signal permitting reading of the biometric information of the user from the authentication server, the terminal reads the biometric information of the user. Process,
When the authentication server stores the ID number received from the terminal, and confirms whether the ID number received from the terminal is stored in the authentication server, the biometric information of the user The personal information protection method according to claim 11, further comprising a step of transmitting a signal permitting reading of the information to the terminal. An personal information protection system comprising an IC card for storing an ID number and biometric information, a terminal capable of reading the IC card, and a user data server for storing the ID number and encrypted user information in association with each other In the personal information protection method,
The terminal reads the user's biometric information, confirms whether the user's biometric information matches the biometric information read from the IC card, the user's biometric information and the IC card A step of transmitting the ID number to the user data server when the read biometric information matches, a step of decrypting the encrypted user information received from the user data server;
The user data server includes a step of extracting the encrypted user information stored in association with the received ID number, and a step of transmitting the extracted encrypted user information to the terminal. The personal information protection method characterized by this. The personal information protection system has an authentication server that stores the ID numbers of all users who use the personal information protection system;
When the terminal receives the ID number read from the IC card to the authentication server and a signal permitting reading of the biometric information of the user from the authentication server, the terminal reads the biometric information of the user. Process,
When the authentication server stores the ID number received from the terminal, and confirms whether the ID number received from the terminal is stored in the authentication server, the biometric information of the user 14. The personal information protection method according to claim 13, further comprising a step of transmitting a signal permitting reading of the information to the terminal. An personal information protection system comprising an IC card for storing an ID number and biometric information, a terminal capable of reading the IC card, and a user data server for storing the ID number and encrypted user information in association with each other In the personal information protection program,
From the process in which the terminal reads the biometric information of the user, the process of checking whether the biometric information of the user matches the biometric information read from the IC card, the biometric information of the user and the IC card A process of encrypting the user information and transmitting it together with the ID number to the user data server when the read biometric information matches,
A personal information protection program, comprising: a process in which the user data server stores the received ID number and the encrypted user information in association with each other. The personal information protection system has an authentication server that stores the ID numbers of all users who use the personal information protection system;
When the terminal receives from the authentication server a process for transmitting the ID number read from the IC card to the authentication server and a signal for allowing the user to read the biometric information, the terminal reads the biometric information of the user. Processing,
When the authentication server stores the process of confirming whether the ID number received from the terminal is stored in the authentication server and the ID number received from the terminal, the biometric information of the user The personal information protection program according to claim 15, further comprising: a process of transmitting a signal permitting reading of data to the terminal. An personal information protection system comprising an IC card for storing an ID number and biometric information, a terminal capable of reading the IC card, and a user data server for storing the ID number and encrypted user information in association with each other In the personal information protection program,
From the process in which the terminal reads the biometric information of the user, the process of checking whether the biometric information of the user matches the biometric information read from the IC card, the biometric information of the user and the IC card A process of transmitting the ID number to the user data server when the read biometric information matches, a process of decrypting the encrypted user information received from the user data server;
The user data server includes a process of extracting the encrypted user information stored in association with the received ID number, and a process of transmitting the extracted encrypted user information to the terminal A personal information protection program. The personal information protection system has an authentication server that stores the ID numbers of all users who use the personal information protection system;
When the terminal receives from the authentication server a process for transmitting the ID number read from the IC card to the authentication server and a signal for allowing the user to read the biometric information, the terminal reads the biometric information of the user. Processing,
When the authentication server stores the process of confirming whether the ID number received from the terminal is stored in the authentication server and the ID number received from the terminal, the biometric information of the user 18. The personal information protection program according to claim 17, further comprising: a process of transmitting a signal permitting reading of the information to the terminal.

Images