JP2008108090A - Authentication system, authentication method and control program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication system capable of easily registering a face image while surely preventing illicit use of a portable terminal, and an authentication method and a control program therefor. <P>SOLUTION: Using a digital camera part and an RFID part of the portable terminal 20, image data of an owner's face taken by the digital camera part is registered in an IC chip or a storage part of the RFID part, and the image data is transmitted to a register 40 through an RFID reader 30 to display the face image on a display part 44. Otherwise, the face image is displayed on a display part of the portable terminal 20 to make a clerk determine whether the use of the portable terminal 20 is valid, or whether the user of the portable terminal 20 is matched with the owner or not. According to this structure, a register which does not have a display part capable of displaying the face image can be used only by adding means for performing the registration of the image data and the display of the face, and a versatile authentication system 10 can be provided. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an authentication system, an authentication method, and a control program, and more particularly, an authentication system that performs electronic payment using a mobile terminal having an RFID (Radio Frequency Identification) function, an authentication method in the system, and the mobile terminal. It relates to the control program.

  In recent years, credit cards and cash cards have been widely used for transactions such as purchase of goods and services. These cards are roughly classified into magnetic cards that store information in magnetic stripes and IC cards that store information in IC chips. IC cards are connected to external readers via electrical contacts for data communication. It is classified into a contact type for performing data communication and a non-contact type for performing data communication using electromagnetic induction or electromagnetic coupling using an antenna.

  When transactions using the above cash card or credit card (hereinafter simply referred to as “card”) are normally only for signature verification, and for small transactions it is often unnecessary to sign, so the card is stolen. If the card is used illegally, the cardholder may be seriously damaged.

  As a method of preventing such unauthorized use of the card, there is a method of printing the card owner's face image on the surface of the card, but many users feel resistance to printing their face image on the card. Therefore, instead of printing the cardholder's face image on the card, a method has been proposed in which the face image data is stored in the card storage (magnetic stripe in the case of a magnetic card, IC chip in the case of an IC card). ing.

  For example, the following Patent Document 1 discloses a credit card on which digital data representing a photographic image of a legitimate cardholder is recorded, and a first confirmation means for confirming the authenticity of the card user. A first authentication means including means for displaying a photographic image of a legitimate owner corresponding to the data to a collator of the sales floor; and a second confirmation means for confirming the authenticity of the credit card, A second authentication means including means for comparing a pre-authorization code generated by encoding a portion of the digital data at the point of sale with a pre-authorization of the card generated at a remote card management company; , A credit card verification system is disclosed.

Japanese Patent Laid-Open No. 7-117383

  By storing the image data of the face of the cardholder in the credit card in this way, it is possible to determine whether the use of the card is valid (that is, whether the card user matches the cardholder). The operation of registering image data in the card is performed by a card management company such as a credit card company, so the work of the card management company is required, and the system user himself / herself has the format, color, Since the image data of the size must be created and the created image data must be provided to the card manager, the system user side is also required, and there is a problem that face images cannot be registered easily. .

  Also, since the face image changes with age and the impression changes greatly depending on the hairstyle and the presence or absence of glasses, it is preferable to always register the latest face image data, but the registration operation is performed by the card manager. As a result, the image data cannot be easily updated, and as a result, the accuracy of determination using a face image is lowered, and there is a problem that unauthorized use cannot be reliably prevented.

  In addition, in order to display a face image based on the image data stored in the card on a terminal (register) installed at the sales floor, the register needs a screen of a certain size. The screen is often small because it is not assumed to be displayed, and even if image data is stored on the card, authentication using a face image cannot be performed with a conventional register, and unauthorized use is ensured. There was also a problem that could not be prevented.

  SUMMARY OF THE INVENTION The present invention has been made in view of the above problems, and a first object of the present invention is to perform authentication for easily registering a face image in a system that performs electronic payment using a portable terminal having an RFID function. A system, an authentication method, and a control program are provided.

  A second object of the present invention is to provide an authentication system, an authentication method, and a control program that can surely prevent unauthorized use of a portable terminal.

  In order to achieve the above object, the present invention provides an antenna and an IC chip, and includes a portable terminal including at least an RFID unit that performs data communication using electromagnetic induction or electromagnetic coupling, and is installed in a store to execute electronic payment. An authentication system comprising at least a payment terminal and an RFID reader connected to the payment terminal, wherein the portable terminal transmits image data of a face of the owner of the portable terminal to the IC chip of the RFID unit or At least image data registration means for registering in the storage unit of the portable terminal that can be referred to by the RFID unit, and the settlement terminal displays a face image based on the image data acquired from the portable terminal via the RFID reader At least a control unit to be displayed on the unit.

  In addition, the present invention includes an antenna and an IC chip, a portable terminal including at least an RFID unit that performs data communication using electromagnetic induction or electromagnetic coupling, a payment terminal that is installed in a store and performs electronic payment, An authentication system comprising at least an RFID reader connected to a payment terminal, wherein the portable terminal refers to image data of the face of the owner of the portable terminal by the IC chip of the RFID unit or the RFID unit Image data registration means for registering in the storage unit of the portable terminal, and face image display control for displaying a face image based on the image data on the display unit of the portable terminal at the time of electronic payment using the RFID unit And at least means.

  In the present invention, the image data registration means may have a function of converting the image data into image data having a predetermined format, size, or color.

  In the present invention, the mobile terminal may include a digital camera unit, and the image data may be acquired by the digital camera unit.

  In addition, the present invention includes an antenna and an IC chip, a portable terminal including at least an RFID unit that performs data communication using electromagnetic induction or electromagnetic coupling, a payment terminal that is installed in a store and performs electronic payment, An authentication method in a system including at least an RFID reader connected to a payment terminal, wherein the image data is acquired by first imaging the face of the owner of the mobile terminal and acquiring the image data, Second step of registering in the IC chip of the RFID unit or the storage unit of the portable terminal that can be referred to by the RFID unit, and registration in the portable terminal during electronic payment using the RFID unit of the portable terminal A third step of transmitting the image data to the payment terminal via the RFID reader, and the image data on the display unit of the payment terminal. A mobile terminal that compares the face image displayed on the display unit of the payment terminal with the face of the user of the mobile terminal by a fourth step of displaying a face image based on the face image displayed on the display unit of the payment terminal And at least a fifth step of determining whether the use of is valid.

  In addition, the present invention includes an antenna and an IC chip, a portable terminal including at least an RFID unit that performs data communication using electromagnetic induction or electromagnetic coupling, a payment terminal that is installed in a store and performs electronic payment, An authentication method in a system including at least an RFID reader connected to a payment terminal, wherein the image data is acquired by first imaging the face of the owner of the mobile terminal and acquiring the image data, Second step of registering in the IC chip of the RFID unit or the storage unit of the portable terminal that can be referred to by the RFID unit, and display of the portable terminal during electronic payment using the RFID unit of the portable terminal A third step of displaying a face image based on the image data on the part, a store clerk of the store displaying the face image displayed on the display unit of the portable terminal, By comparing the face of the user band terminal, a fourth step of determining whether the use of the mobile terminal is valid and has at least.

  In the present invention, in the second step, the image data may be converted into image data having a predetermined format, size, or color.

  In the present invention, the mobile terminal may be provided with a digital camera unit, and in the first step, the image data may be acquired using the digital camera unit.

  The present invention also provides a control program that operates on a portable terminal that includes an antenna and an IC chip, and that includes at least an RFID unit that performs data communication using electromagnetic induction or electromagnetic coupling, and the computer is owned by the portable terminal. Image data registration means for registering image data of a person's face in the IC chip of the RFID unit or the storage unit of the portable terminal that can be referred to by the RFID unit.

  The present invention also provides a control program that operates on a portable terminal that includes an antenna and an IC chip, and that includes at least an RFID unit that performs data communication using electromagnetic induction or electromagnetic coupling. Face image display control means for causing the display unit to display a face image based on image data stored in advance in the storage unit of the portable terminal that can be referred to by the IC chip of the RFID unit or the RFID unit during electronic payment , Function as

  As described above, in the present invention, when a digital camera unit of a portable terminal captures its own face, the image data is subjected to predetermined processing on the image data as necessary, and then the image data is stored in the RFID unit or the storage unit of the portable terminal. Since it is automatically registered, a face image can be easily registered.

  In addition, when electronic payment is performed, if the portable terminal is held over an RFID reader, the image data registered in the RFID unit or storage unit of the portable terminal is transmitted to the register via the RFID reader, and the image data is displayed on the display unit of the register. Therefore, the store clerk can reliably prevent unauthorized use of the mobile terminal by comparing the face image displayed on the display unit of the register with the face of the user of the mobile terminal. .

  In addition, when using a register that does not include a display unit capable of displaying a face image, the face image based on the image data registered in the RFID unit or the storage unit is displayed on the display unit of the portable terminal when performing electronic payment. Therefore, the store clerk can reliably prevent unauthorized use of the mobile terminal by comparing the face image displayed on the display unit of the mobile terminal with the face of the user of the mobile terminal.

  According to the authentication system, authentication method, and control program of the present invention, the following effects can be obtained.

  The first effect of the present invention is that a face image can be easily registered. The reason is that when the digital camera unit provided in the portable terminal captures his / her face, the image data registration means performs a predetermined process such as changing the format, color and size of the image data, and then the image is registered. Since the process of registering data in the RFID unit or storage unit of the mobile terminal is performed, the user of the authentication system does not need to process the image data or register the image data, and uses a card. This is because there is no need to perform complicated operations such as requesting the card management company to register image data as in the case.

  In addition, the second effect of the present invention is that unauthorized use of a mobile terminal can be reliably prevented in a system that performs electronic payment using a mobile terminal having an RFID function. The reason is that when the portable terminal is held over the RFID reader, the image data registered in the RFID section or storage section of the portable terminal is transmitted to the register through the RFID reader, and the control section of the register displays the image data on the display section. In order to display the face image based on the mobile phone, the store clerk compares the face image displayed on the display unit of the register with the face of the user of the mobile terminal to determine whether the owner of the mobile terminal matches the user. This is because it can be determined. In addition, when using a register that does not include a display unit capable of displaying a face image, the face image display control means is registered in the display unit of the portable terminal in the RFID unit or the storage unit when performing electronic payment. In order to control the display of the face image based on the image data, the store clerk compares the face image displayed on the display unit of the mobile device with the face of the user of the mobile device, and uses it with the owner of the mobile device. This is because it can be determined whether or not the person matches. Furthermore, in the present invention, since the image data is registered using the image data registration means of the portable terminal, the image data can be easily re-registered when the impression changes, such as changing the hairstyle or using glasses. This is because the determination using the face image can be performed with high accuracy.

  Further, the image data registration means and the face image display control means need only be configured as hardware or software on a normal portable terminal having a digital camera function and an RFID function, and a display unit capable of displaying a face image Since a normal register that does not include the above can be used, a highly versatile authentication system and authentication method can be provided. Moreover, since there is no worry that the face image is seen by others as in the case where the face image is printed on the card, the use of the authentication system and the authentication method of the present invention can be promoted.

  As shown in the prior art, electronic payments using credit cards or cash cards are widely used to purchase products and services, and in order to prevent unauthorized use (spoofing) of cards, images of faces on cards are used. There has also been proposed a system for confirming the identity by storing data.

  However, in order to register the image data on the card, the operations of both the card manager and the system user are required, and there is a problem that the face image cannot be easily registered. In addition, in order for the store clerk to check the face image based on the image data stored in the card, it is necessary to provide a screen capable of displaying the face image on a store-side device such as a register, and there is no such screen. There was a problem that the device could not be applied to the system and unauthorized use of the mobile terminal could not be prevented.

  On the other hand, recent mobile terminals such as mobile phones are provided with a digital camera function as a standard, and further, a function for performing electronic payment using an RFID system (hereinafter referred to as an RFID function) is also provided as standard. is there.

  Therefore, in the present invention, using the digital camera function and the RFID function provided in the mobile terminal, the image data of the face of the owner photographed using the digital camera function is converted into the IC chip of the RFID function or the mobile terminal. Register in the storage unit, send this image data to the register and display the face image on the display unit of the register, or display the face image on the display unit of the mobile terminal, and it is legal to use the mobile terminal for the store clerk That is, it is determined whether the user and owner of the mobile terminal match.

  Thereby, it is possible to easily register a face image and reliably prevent unauthorized use of the mobile terminal. In addition, for a portable terminal having a digital camera function and an RFID function, it is only necessary to add hardware for performing registration of the image data or display of a face image or to install software. It is possible to authenticate the person by displaying the face image on the screen and showing it to the store clerk. Therefore, it is possible to use a register without a display unit capable of displaying the face image, and to provide a highly versatile authentication system. Can do.

  In order to describe the above-described embodiment of the present invention in further detail, an authentication system, an authentication method, and a control program according to a first example of the present invention will be described with reference to FIGS. FIG. 1 is a diagram schematically illustrating a configuration of an authentication system according to the present embodiment. FIG. 2 is a block diagram showing the configuration of the portable terminal of this embodiment, and FIG. 3 is a block diagram showing the configuration of the register of this embodiment. FIG. 4 is a flowchart showing a procedure for registering facial image data in a portable terminal, and FIG. 5 is a flowchart showing a procedure for performing electronic payment using the portable terminal of this embodiment. FIG. 6 is a diagram illustrating a configuration example of a screen displayed on the display unit of the register according to the present embodiment.

  As shown in FIG. 1, an authentication system 10 according to the present embodiment includes a mobile terminal 20 such as a mobile phone owned by a user who performs electronic payment, and a payment terminal (hereinafter referred to as a register 40) that is installed in a store and executes electronic payment. And the RFID reader or RFID reader / writer (hereinafter referred to as RFID reader 30) connected to the register 40 and communicating with the portable terminal 20, and managed by a credit company or the like, A server 50 for authenticating the terminal 20 is a main component, and the register 40 and the server 50 are connected to each other via a communication network 60 such as a LAN (Local Area Network) or a WAN (Wide Area Network). .

  As shown in FIG. 2, the portable terminal 20 includes a wireless communication unit 22 that performs wireless communication for calling and sending / receiving e-mails, and a RAM (Random Access Memory), a ROM (Read Only Memory), and the like. Storage unit 23, a digital camera unit 24 for taking still images and moving images, a display unit 25 including a liquid crystal display device, an organic EL (electroluminescence) display device, and the like, numeric keys, special keys, and a cross An operation unit 26 composed of a key and the like, and an antenna and an IC chip (chips including a CPU, a memory, a coprocessor, an I / O port, etc. are collectively referred to as an IC chip), and electromagnetic induction or electromagnetic coupling The RFID unit 27 is configured to perform data communication with the RFID reader 30 and execute electronic payment, and the control unit 21 that controls these operations. The image data obtained by the camera unit 24 is subjected to predetermined processing such as format, size, and color conversion as necessary, and the processed image data is processed by the IC chip of the RFID unit 27 or the RFID unit 27. Image data registration means 21 a for registering in the referable storage unit 23 is provided.

  Note that FIG. 2 is an example of the mobile terminal 20, and other means (not shown) may be added, and when using image data acquired by a photographing means other than the digital camera unit 24 as described later, The camera unit 24 can be omitted. The image data registration unit 21a may be configured as hardware by the control unit 21, or may be configured as a control program that causes the computer to function as the image data registration unit 21a. The control program is executed on the control unit 21. It may be configured to operate.

  As shown in FIG. 3, the register 40 of this embodiment includes a communication unit 42 for communicating with the server 50 via the communication network 60, a storage unit 43 including a ROM, a RAM, and the like, and a liquid crystal display In order to communicate with the RFID reader 30, a display unit 44 that is configured by a device, an organic EL display device, and the like and can display at least a face image based on image data in an identifiable manner, an operation unit 45 that performs an electronic payment operation or an authentication operation RFID reader communication unit 46, and a control unit 41 for controlling these components.

  Note that FIG. 3 is an example of the register 40, and it is only necessary to include a display unit 44 that can perform electronic payment and can identify a face image. The resolution of the display unit 44 is not particularly limited. For example, if there is a resolution of about 640 pixels × 480 pixels in length × width, a face image can be sufficiently identified.

  Next, a procedure for registering the image data of the owner's face in the portable terminal 20 using the authentication system 10 having the above configuration will be described with reference to the flowchart of FIG.

  First, in step S <b> 101, the owner of the mobile terminal 20 uses the digital camera unit 24 to photograph his / her face to obtain face image data. Note that the size of the image data to be acquired is not particularly limited, but, for example, about 130 pixels × 100 pixels in length × width is sufficient. The face image of the owner of the mobile terminal 20 is preferably taken using the digital camera unit 24 provided in the mobile terminal 20, but the face image is taken using another mobile terminal or a digital camera. The image data may be transferred to the portable terminal 20, or a face image is taken using a film camera, the negative film or photo print is scanned to obtain the image data, and the image data is transferred to the portable terminal 20. May be.

  Next, when the owner operates the operation unit 26 to operate the image data registration unit 21a (or control program) in step S102, the image data registration unit 21a (or control program) displays the file name of the image data. In addition to acquiring the format, information such as size and color is acquired from header information and the like, and it is determined whether the image data is image data suitable for the authentication method of the present invention. Specifically, whether the image data is in a predetermined format (for example, JIF, JPEG, etc.), or the image data is smaller than the size (for example, about 5 kBytes) that can be stored in the IC chip of the RFID unit 27, It is determined whether the image data has a predetermined color (for example, black and white).

  If the image data is not suitable for the authentication method of the present invention, in step S103, the image data registration unit 21a performs predetermined processing so that the image data is suitable for the authentication method of the present invention. Specifically, if the image data is not in a predetermined format, the file format is converted, and if the size is large, the resolution is reduced by thinning out pixels, the face area is identified, and the part other than the face is trimmed. If the color is not a predetermined color, the color is converted by changing the color to black and white or reducing the color.

  Since the present invention aims to determine whether the use of the mobile terminal 20 is valid (that is, whether the user of the mobile terminal 20 and the owner match), the face image identifies the owner. It does not have to be a photographed image itself as long as it is possible. For example, as long as the owner can be identified, the image may be an image obtained by extracting only the outline of the face image, or may be an image obtained by extracting only characteristic parts (for example, eyes, nose, mouth, etc.) in the face. . In the above flow, the image data registration unit 21a performs predetermined processing on the image data. For example, the digital camera unit 24 is provided with a mode for acquiring the image data for authentication of the present invention. The image data of a predetermined format, size, and color can be automatically acquired when shooting in that mode. In that case, the image data registration means 21a performs predetermined processing on the image data. There is no need.

  Next, in step S104, the image data registration unit 21a (or control program) stores the acquired image data or the processed image data in the IC chip of the RFID unit 27 (specifically, in the memory in the IC chip). And stored in a storage area read by the RFID reader 30 during electronic payment. At that time, in order to prevent image data from being illegally registered in the IC chip, the image data is registered when a password registered in advance in the mobile terminal 20 (such as a password registered when the mobile terminal 20 is purchased) is input. May be. The image data is preferably stored in the IC chip of the RFID unit 27, but when the RFID unit 27 performs data communication with the RFID reader 30, the data stored in the storage unit 23 can be referred to. The image data can also be stored in the storage unit 23. At this time, the image data may be registered when a pre-registered password is input in the same manner as described above, or may be written in a one-time memory so that the image data is not rewritten.

  Although the above description is a procedure for registering image data for the first time, as described above, the face image changes with age, and the impression changes depending on the hairstyle and glasses. You may make it update data suitably. In this case, the owner sets the password for re-registration of the image data or requests the input of a password registered in advance to the portable terminal 20 so that a person other than the owner of the portable terminal 20 cannot register the image data. It is preferable to perform processing such as requesting input of a password or limiting the timing and number of re-registration of image data.

  As described above, in this embodiment, the image data registration unit 21a configured as hardware in the control unit 21 of the portable terminal 20 or the control program installed in the portable terminal 20 converts the image data of the owner's face into the RFID unit 27. Since it is registered in the IC chip and the storage unit 23, it is possible to easily execute processing for registering a face image. In addition, since a portable terminal having an RFID function (or a digital camera function and an RFID function) can be used in the authentication system of this embodiment by adding hardware or installing software, it is versatile. A high authentication system 10 can be realized.

  Next, a procedure for performing electronic payment using the portable terminal 20 in which the image data of the owner's face is registered will be described with reference to the flowchart of FIG.

  First, in step S <b> 201, the user of the mobile terminal 20 purchases a product or service at a store where electronic payment is possible using the mobile terminal 20.

  Next, in step S202, the store clerk inputs the amount of goods or services purchased by the user into the register 40 using the operation unit 45, and instructs the user to perform electronic settlement processing.

  Next, in step S <b> 203, the user holds the antenna of the RFID unit 27 of the portable terminal 20 over the RFID reader 30 connected to the register 40.

  Next, in step S <b> 204, the RFID reader 30 performs data communication with the RFID unit 27 of the mobile terminal 20, information unique to the RFID unit 27 such as identification information stored in advance in the IC chip of the RFID unit 27, and the RFID unit. The image data stored in the 27 IC chips or the storage unit 23 is read, and the read identification information and image data are transmitted to the register 40.

  Next, in step S205, the control unit 41 of the register 40 uses the communication unit 42 to transmit the identification information received by the RFIF reader communication unit 46 to the server 50, and the server 50 registers the received identification information in advance. Authentication of the portable terminal 20 is performed based on whether or not it is performed, and an authentication result is returned to the register 40. The authentication using the identification information can be realized using a known method, and the specific method is not particularly limited.

  Next, in step S206, the control unit 41 of the register 40 determines an authentication result (that is, whether it is a legitimate mobile terminal 20). If the authentication result is NG, the process is terminated, and if the authentication result is OK. In step S207, the control unit 41 of the register 40 causes the display unit 44 to display a face image based on the image data received from the RFID reader 30, as shown in FIG. Then, the store clerk compares the owner's face image displayed on the display unit 44 of the register 40 with the face of the user who is performing the electronic payment process using the mobile terminal 20 to authenticate the user. I do.

  When using compressed image data such as JPEG, decompression means may be provided in the register 40 and the face image may be displayed on the display unit 44 after decompressing the image data. When the contour of the owner's face image is registered by the image data registration unit 21a of the portable terminal 20, the contour image as shown in FIG. 6B is displayed on the display unit 44, and the owner's face is displayed. 6 is registered, an image of a specific part of the face (here, eyes) is displayed on the display unit 44 as shown in FIG.

  If it cannot be determined that the user is a valid user in step S208 (that is, if the registered owner's face and the user's face of the mobile terminal 20 do not match), the process ends, and the valid user is obtained. (That is, when the registered owner's face coincides with the user's face of the mobile terminal 20), the store clerk is provided in advance in the operation unit 45 of the register 40 in step S209. The authentication button is pressed, and in step S210, the control unit 41 of the register 40 executes electronic payment.

  This electronic payment can also be realized using a known method. For example, the control unit 41 of the register 40 notifies the purchase amount to the server 50 using the communication unit 42, and the server 50 stores the pre-registered bank. Withdraw the purchase amount from the account. The control unit 41 of the register 40 notifies the RFID reader 30 of the purchase price using the RFID reader communication unit 46, and the RFID reader 30 notifies the RFID unit 27 of the portable terminal 20 of the purchase price. Stores the purchase history in the IC chip.

  In the above description, the mobile terminal 20 is authenticated with the identification information, and then the user is authenticated with the face image. However, the authentication using the face image may be performed first, or the identification information is stored in the server 50. The face image may be displayed on the display unit 44 simultaneously with the transmission. In the above description, the RFID reader 30 reads the identification information and the image data from the portable terminal 20 at the same time. However, the identification information is first read and the server 50 authenticates the identification information and then reads the image data. It is good.

  In this way, since the face image data of the owner is transmitted from the mobile terminal 20 and displayed on the display unit 44 of the register 40 during electronic payment using the mobile terminal 20, the face image displayed by the store clerk is displayed. And unauthorized use of the portable terminal 20 can be reliably prevented by comparing the face of the user of the portable terminal 20 with the face of the user.

  Next, an authentication system, authentication method, and control program according to a second embodiment of the present invention will be described with reference to FIGS. FIG. 7 is a diagram schematically illustrating the configuration of the authentication system according to the present embodiment, and FIG. 8 is a block diagram illustrating the configuration of the mobile terminal according to the present embodiment. FIG. 9 is a flowchart showing a procedure for performing electronic payment using the mobile terminal of this embodiment, and FIG. 10 is a diagram showing an example of a screen configuration displayed on the display unit of the mobile terminal of this embodiment. It is.

  In the first embodiment described above, the face image is displayed on the display unit 44 of the register 40 for authentication, but in this method, the display unit 44 capable of displaying the face image on the register 40 is required. The register 40 provided with only a small display unit 44 for displaying the amount of money or the like cannot be used in the authentication system 10 of the present invention. Therefore, in this embodiment, the face image is displayed on the display unit 25 of the portable terminal 20 so that the conventional register 40 provided with only the small display unit 44 can be used in the authentication system 10 of the present invention. Make it visible.

  In that case, the authentication system 10 of the present embodiment is as shown in FIG. 7, and is installed in a store and a mobile terminal 20 such as a mobile phone that displays a face image on a display unit and performs electronic payment, and performs electronic payment. A register 40 having a general configuration to be executed, an RFID reader 30 that is connected to the register 40 and communicates with the mobile terminal 20, and a server 50 that authenticates the mobile terminal 20 at the time of electronic payment are main components. 40 and the server 50 are connected to each other via a communication network 60.

  As shown in FIG. 8, the portable terminal 20 includes a wireless communication unit 22, a storage unit 23, a digital camera unit 24, a display unit 25, and an operation unit 26, as in the first embodiment. The RFID unit 27 includes an antenna and an IC chip, and the control unit 21 that controls these operations. The control unit 21 includes a format for image data obtained by photographing with the digital camera unit 24. In addition to the image data registration means 21a that performs processing such as conversion of size, size, and color and writes the processed image data to the IC chip of the RFID unit 27 or the storage unit 23, the electronic data is based on the image data at the time of electronic payment. Face image display control means 21b for displaying a face image on the display unit 25 is provided.

  The image data registration unit 21a and the face image display control unit 21b may be configured as hardware in the control unit 21, or a control program that causes the computer to function as the image data registration unit 21a and the face image display control unit 21b. The control program may be operated on the control unit 21.

  Next, a procedure for performing electronic payment using the authentication system 10 having the above-described configuration will be described with reference to a flowchart of FIG.

  First, the image data of the owner's face is registered in the IC chip or the storage unit 23 of the RFID unit 27 of the portable terminal 20 in the same procedure as in the first embodiment, and then in step S301, the portable terminal 20 A user purchases goods and services at a store where electronic payment is possible using the mobile terminal 20.

  Next, in step S302, the store clerk inputs the amount of goods or services purchased by the user into the register 40 using the operation unit 45, and instructs the user to perform electronic settlement processing.

  Next, in step S <b> 303, the user holds the antenna of the RFID unit 27 of the portable terminal 20 over the RFID reader 30 connected to the register 40.

  Next, in step S304, the RFID reader 30 performs data communication with the RFID unit 27 of the portable terminal 20, and reads and reads information unique to the RFID unit 27 such as identification information stored in the IC chip of the RFID unit 27. The identification information is transmitted to the register 40. On the other hand, the face image display control means 21b is activated in accordance with the operation of the RFID unit 27, reads the image data stored in the IC chip of the RFID unit 27 or the storage unit 23, and as shown in FIG. A face image based on the image data is displayed on the display unit 25.

  When the mobile terminal 20 includes a plurality of display units 25, the face image may be displayed on any display unit 25, and the main display unit inside the folding mobile terminal 20 as shown in FIG. Or may be displayed on the sub-display on the rear side as shown in FIG. 10B, or may be displayed on both. Further, the face image itself may be displayed on the display unit 25, or if the user can be authenticated, a contour image extracted from the face image may be displayed, or only a part of the face is displayed. May be.

  Next, in step S305, the control unit 41 of the register 40 uses the communication unit 42 to transmit the identification information received by the RFIF reader communication unit 46 to the server 50. The server 50 registers the received identification information in advance. Authentication is performed based on whether or not the authentication is performed, and an authentication result is returned to the register 40.

  Next, in step S306, the control unit 41 of the register 40 determines the authentication result (that is, whether it is a legitimate mobile terminal 20). If the authentication result is NG, the process ends, and if the authentication result is OK. In step S307, the store clerk compares the owner's face image displayed on the display unit 25 of the mobile terminal 20 with the face of the user who is performing electronic payment processing using the mobile terminal 20, and the user Authenticate.

  If it cannot be determined as a valid user in step S308 (that is, if the registered owner's face and the user's face of the mobile terminal 20 do not match), the process is terminated, and the valid user is obtained. (That is, when the registered owner's face coincides with the user's face of the mobile terminal 20), the store clerk is provided in advance in the operation unit 45 of the register 40 in step S309. The authentication button is pressed, and in step S310, the control unit 41 of the register 40 executes electronic payment.

  In this embodiment, the mobile terminal 20 is authenticated with the identification information and then the user is authenticated with the face image. However, authentication using the face image may be performed first.

  Thus, since the owner's face image is displayed on the display unit 25 of the mobile terminal 20 during electronic payment using the mobile terminal 20, the face image displayed by the store clerk and the user of the mobile terminal 20 are displayed. By comparing with the face, unauthorized use of the mobile terminal 20 can be surely prevented. In addition, since the register 40 that is not provided with the display unit 44 capable of displaying a face image can be used, a highly versatile authentication system can be realized.

  In the above embodiment, a case where a mobile phone is used as the mobile terminal 20 has been described as an example. However, the present invention is not limited to the above embodiment, and an RFID function (or a digital camera function and an RFID function) is provided. The present invention can be similarly applied to any portable device provided.

  The present invention can be used for an authentication system and an authentication method using a portable terminal.

It is a figure which shows typically the structure of the authentication system which concerns on 1st Example of this invention. It is a block diagram which shows the structure of the portable terminal which concerns on 1st Example of this invention. It is a block diagram which shows the structure of the register | resistor based on 1st Example of this invention. It is a flowchart figure which shows the registration procedure of the image data using the authentication system which concerns on 1st Example of this invention. It is a flowchart figure which shows the procedure of the electronic payment using the authentication system which concerns on 1st Example of this invention. It is a figure which shows the example of a screen structure of the display part of the register | resistor which concerns on 1st Example of this invention. It is a figure which shows typically the structure of the authentication system which concerns on 2nd Example of this invention. It is a block diagram which shows the structure of the portable terminal which concerns on 2nd Example of this invention. It is a flowchart figure which shows the procedure of the electronic payment using the authentication system which concerns on 2nd Example of this invention. It is a figure which shows the example of a screen structure of the display part of the portable terminal which concerns on 2nd Example of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Authentication system 20 Portable terminal 21 Control part 21a Image data registration means 21b Face image display control means 22 Wireless communication part 23 Storage part 24 Digital camera part 25 Display part 26 Operation part 27 RFID part 30 RFID reader 40 Register 41 Communication part 42 Storage Unit 43 display unit 44 operation unit 45 RFID reader communication unit 50 server 60 communication network

Claims (12)

A portable terminal including an antenna and an IC chip and including at least an RFID unit that performs data communication using electromagnetic induction or electromagnetic coupling, a payment terminal that is installed in a store and executes electronic payment, and is connected to the payment terminal An authentication system comprising at least an RFID reader,
The portable terminal is
Image data registration means for registering the image data of the face of the owner of the portable terminal in the IC chip of the RFID unit or the storage unit of the portable terminal that can be referred to by the RFID unit,
The payment terminal is
An authentication system comprising at least a control unit that causes a display unit to display a face image based on the image data acquired from the portable terminal via the RFID reader. A portable terminal that includes an antenna and an IC chip and includes at least an RFID unit that performs data communication using electromagnetic induction or electromagnetic coupling, a payment terminal that is installed in a store and executes electronic payment, and is connected to the payment terminal An authentication system comprising at least an RFID reader,
The portable terminal is
Image data registration means for registering the image data of the face of the owner of the portable terminal in the IC chip of the RFID unit or the storage unit of the portable terminal that can be referred to by the RFID unit;
An authentication system comprising at least face image display control means for displaying a face image based on the image data on a display unit of the portable terminal during electronic payment using the RFID unit.   The authentication system according to claim 1, wherein the image data registration unit has a function of converting the image data into image data having a predetermined format, size, or color.   The authentication system according to claim 1, wherein the portable terminal includes a digital camera unit, and the image data is acquired by the digital camera unit. A portable terminal that includes an antenna and an IC chip and includes at least an RFID unit that performs data communication using electromagnetic induction or electromagnetic coupling, a payment terminal that is installed in a store and executes electronic payment, and is connected to the payment terminal An authentication method in a system including at least an RFID reader,
A first step of photographing the face of the owner of the mobile terminal to obtain image data;
A second step of registering the image data in the IC chip of the RFID unit or the storage unit of the portable terminal that can be referred to by the RFID unit;
A third step of transmitting the image data registered in the mobile terminal to the payment terminal via the RFID reader during electronic payment using the RFID unit of the mobile terminal;
A fourth step of displaying a face image based on the image data on the display unit of the payment terminal;
The store clerk of the store compares the face image displayed on the display unit of the payment terminal with the face of the user of the mobile terminal to determine whether the use of the mobile terminal is valid And an authentication method comprising at least the steps of: A portable terminal including an antenna and an IC chip and including at least an RFID unit that performs data communication using electromagnetic induction or electromagnetic coupling, a payment terminal that is installed in a store and executes electronic payment, and is connected to the payment terminal An authentication method in a system including at least an RFID reader,
A first step of photographing the face of the owner of the mobile terminal to obtain image data;
A second step of registering the image data in the IC chip of the RFID unit or the storage unit of the portable terminal that can be referred to by the RFID unit;
A third step of displaying a face image based on the image data on the display unit of the mobile terminal during electronic payment using the RFID unit of the mobile terminal;
The store clerk of the store compares the face image displayed on the display unit of the mobile terminal with the face of the user of the mobile terminal to determine whether the use of the mobile terminal is valid And an authentication method comprising at least steps.   The authentication method according to claim 5 or 6, wherein, in the second step, the image data is converted into image data having a predetermined format, size, or color.   The authentication method according to claim 5, wherein the portable terminal includes a digital camera unit, and the image data is acquired using the digital camera unit in the first step. A control program that operates on a portable terminal that includes an antenna and an IC chip and includes at least an RFID unit that performs data communication using electromagnetic induction or electromagnetic coupling,
Computer
Control functioning as image data registration means for registering image data of the face of the portable terminal owner in the IC chip of the RFID unit or the storage unit of the portable terminal that can be referred to by the RFID unit program.   The control program according to claim 9, wherein the image data registration unit has a function of converting the image data into image data having a predetermined format, size, or color.   The control program according to claim 9 or 10, wherein the portable terminal includes a digital camera unit, and the image data registration unit registers the image data acquired by the digital camera unit. A control program that operates on a portable terminal that includes an antenna and an IC chip and includes at least an RFID unit that performs data communication using electromagnetic induction or electromagnetic coupling,
Computer
In electronic payment using the RFID unit, a face image based on image data stored in advance in the IC chip of the RFID unit or the storage unit of the portable terminal that can be referred to by the RFID unit is displayed on the display unit A control program that functions as a face image display control means.

Images