JP2008139918A - Personal authentication method in automatic transaction system using portable terminals - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To restrain, to some extent, the reception of services due to the stealing of information necessary for a piece of authentication included in multiple pieces of authentication, even if the information is stolen, when the multiple pieces of authentication are executed. <P>SOLUTION: On the assumption that multiple devices and apparatuses are connected and multiple authentication processes are performed, it is determined, in accordance with a state of connection, whether a prescribed authentication result is to be kept or deleted (or, validated or invalidated) among the multiple authentication processes. By this, the provision of services to third persons having no authority is prevented. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an authentication process for executing a service including information provision. In particular, the present invention relates to a technique for performing multi-stage authentication in which a plurality of authentications are performed according to service contents. Moreover, using a portable terminal device and an information processing device in cooperation with authentication as a device and performing biometric authentication as authentication are also included.

  Conventionally, there is Patent Document 1 that performs a plurality of authentication processes. Patent Document 1 discloses a technique related to authentication in a transaction using ATM or the like in a financial institution. Patent Document 1 describes using a plurality of authentication forms having different security levels, such as a first authentication form (process) using a password and a second authentication form (process) using a fingerprint or voice collation (0044). Section). Based on the transaction conditions set in advance by the customer, the trader sets one of a plurality of authentication forms with different security levels, and performs authentication related to the transaction offered by the customer according to the authentication form. . That is, it describes that authentication according to the type of transaction is performed.

  Patent Document 2 discloses performing transactions and biometric authentication for transactions in cooperation with portable terminals and ATMs. That is, it is disclosed that when performing biometric authentication, the mobile terminal receives an authentication program from the ATM, executes authentication in the mobile terminal, and returns only the authentication result to the ATM.

JP 2002-304522 A JP 2006-227766 A

  However, when performing multiple authentications, if a malicious third party steals information necessary for authentication or interrupts the operation after the initial authentication, the services provided by the authentication are unauthorized third parties. The problem that it is given to will occur. This becomes significant when multiple services are related to each other (including when they are provided in a multi-stage (continuous) manner). For example, the provision of information to be confirmed when enjoying the service requested by the user is presented when the first condition is satisfied, and the requested service itself is provided only when the second condition is satisfied. There is an example (for example, the service in the second authentication process is a withdrawal from ATM, and the service in the first authentication process is a balance inquiry for withdrawal).

  In said patent document 1, if a password is stolen, the transaction matched with this will be implement | achieved by the third party. In addition, when an operation is interrupted after authentication with a fingerprint or the like, a transaction associated with the operation is similarly performed by a third party.

  In Patent Document 2, it is not considered to perform a plurality of authentication processes. The customer selects the biometric authentication (processing) that suits him / herself, and from the customer's point of view, he / she performs only a single authentication process. For this reason, the above-mentioned problem still remains.

  The present invention is based on the premise that a plurality of devices / apparatuses are connected (regardless of contact / non-contact) and a plurality of authentication processes are performed (service levels differ depending on each result). Based on this premise, the present invention determines whether to hold or delete a predetermined authentication result (or enable or disable) among a plurality of authentication processes according to the connection status.

More specifically, the following aspects are also included in the present invention.
An IC card, a portable terminal device that is connectable to the IC card and accepts input of information used for the first authentication process, and is connectable to the portable terminal device and inputs information used for the first authentication process. A receiving information processing apparatus for realizing a first service for a user and a second service related to the first service according to a result of the first authentication process and the second authentication process; In a multi-stage authentication method using an information processing system that executes information processing, the IC card uses first template information used for the first authentication processing, second template information used for the second authentication processing, and Service information used for the service is stored, a connection between the IC card and the portable terminal device is established, and the portable terminal device is configured to receive the first authentication. The first authentication information necessary for processing is received, the input first authentication information is sent to the IC card, and the IC card receives the first authentication information and the first template information. When the first authentication process is executed by comparison and a positive authentication is made in the first authentication process, the IC card holds the first authentication result, so that the user Among the services required for the mobile terminal device, the control is performed on the service information so that the first service can be provided, and the IC card controls the mobile terminal device. 1 is sent, and the mobile terminal device monitors whether the connection between the mobile terminal device and the information processing device is established, and as a result of the monitoring,
(1) If established,
The portable terminal device and the information processing device execute mutual mutual authentication processing,
The information processing apparatus receives input of second authentication information necessary for the second authentication process from the user, and sends the second authentication information to the IC card;
The IC card performs control of the second authentication information by executing the second authentication process by comparing the second authentication information and the second template information, thereby enabling the provision of the second service,
(2) If not established,
The mobile terminal device sends unestablished information indicating that the connection is not established to the IC card,
The IC card erases the first authentication result based on the reception of the unestablished information.

In this multi-step verification method,
The service information includes first service information and second service information,
The IC card can be used when the first service information is positively authenticated in the first authentication process, and the second service information can be used for the first authentication process. A multi-step authentication method is also included in the present invention, wherein the service information is subjected to control that can be used when positive authentication is performed in the second authentication process.

In this multi-step authentication method,
The IC card includes a multi-step authentication method in which lock information for inhibiting the use of the service information is recorded in advance on the service information. In this case, when the authentication result is positive, the lock information may be removed. Conversely, the lock information may not be recorded in advance, and if the authentication is positive, the lock information may be recorded in service information that can be used by another authentication.

In these multi-step authentication methods,
The multi-step authentication method is characterized in that the portable terminal device monitors whether a connection between itself and the information processing device is established within a predetermined time from the time when the result of the first authentication is sent. It is included in the present invention.

  Furthermore, in this multi-step authentication method, the present invention also includes a multi-step authentication method in which the portable terminal device performs the monitoring by polling the information processing device.

  Furthermore, in the present invention, as “control over the service information so as to enable provision of the first service”, information necessary for the first service is stored in a cache of at least one of the information processing apparatus and the mobile terminal device. This includes pre-reading. In this example, the first service is information presentation, and information that can be presented is prefetched into a cache.

  The present invention includes that the service that can be enjoyed by the first authentication process is a premise of the service that can be enjoyed by the second authentication process. This includes provision of information necessary for enjoying the service by the second authentication process (eg, the service in the second authentication process is withdrawal from the ATM, and the first authentication process Inquiry balance for withdrawals).

  For this reason, the present invention also includes that the information processing apparatus is a so-called ATM (automatic transaction apparatus). Here, the service information includes user account information.

  Furthermore, the connection between the devices may be either contact or non-contact, but the information processing device (ATM) and the mobile terminal device are non-contact, and the mobile terminal device and the IC card are contact connections. include.

  In addition to the above-described multi-step authentication method, the present invention includes each apparatus (device) that realizes this method, a combination thereof, or a computer program for executing this method.

  According to the present invention, when a plurality of authentications are executed, even if some of the necessary information included in the authentication is stolen, it is possible to suppress the service enjoyment to some extent.

Embodiments of the present invention will be described with reference to the drawings.
FIG. 1 shows a system configuration example of the present invention. The portal terminal 101 is connected to the network 102.

  A service provider 103 that provides a service is connected to the network 102. The mobile terminal 104 possessed by each user is connected to the portal terminal 101 by short-range wireless communication 105.

  The service provider 103 provides a service to the user via the network 102. Each of the mobile terminal 104 and the portal terminal 101 has a verification function for confirming the identity of the user, and performs a verification process according to the authentication requirements set for each service. A tamper resistant device 106 is connected to the portable terminal 104.

  The tamper resistant device 106 receives the collation results of the portable terminal 104 and the portal terminal 101 at the time of authentication, determines a single or a plurality of collation results in an integrated manner, and finally determines the person / others. Further, the tamper resistant device 106 stores secret information necessary for the service, and performs processing for sending the secret information when the service is provided from the service provider.

  FIG. 2 shows a functional configuration of the mobile terminal 104 possessed by the user. The mobile terminal 104 is connected to the portal terminal 101 by the short-range wireless communication unit 211, causes the user to input service information at the time of service request by the mobile terminal application 212, and transmits the service information to the portal terminal 101.

  The portable terminal 104 is connected to the tamper resistant device 106 by the tamper resistant device communication unit 213, acquires authentication information and service information from the tamper resistant device 106, and authentication information and service used by the verification unit of the portal terminal 101 among them. Information is transmitted to the portal terminal 101.

  The collation unit 214 collates information input by the user for verification with authentication information. The verification result transmission unit 215 transmits the verification result to the tamper device 106.

  An example of the verification unit 214 is biometric authentication. In this case, information input by the user for verification is biometric information, and authentication information is a biometric template. The collation result is a biometric collation value.

  Another example of the verification unit 214 is password authentication. In this case, information input by the user for verification is a password, and authentication information is a password registered in advance. The verification result is a determination result of password authentication.

FIG. 3 shows a functional configuration of the tamper resistant device 106.
The fusion determination unit 311 transmits authentication information and service information acquired from the IC card applications 317 to 319 to the mobile terminal by the contact interface communication unit 312 and the non-contact interface 313.

  Further, the fusion determination unit 311 receives a single or a plurality of matching results from the mobile terminal 104, stores them in the matching result storage unit 317, and determines the single or a plurality of matching results in a fusion manner. A true identity / others determination.

  Furthermore, the fusion determination unit 311 refers to the information in the access control table storage unit 316 and controls access to the IC card applications 317 to 319 according to the designated collation result.

FIG. 4 shows a functional configuration of the portal terminal 101.
The portal terminal 101 is connected to the portable terminal 104 by the short-range wireless communication unit 411 and is connected to the service provider 103 by the network communication unit 412 via the network 102.

The portal terminal application 413 refers to the authentication requirement table storage unit 414 and determines an authentication method. The collation unit 415 acquires information input by the user for collation, receives authentication information from the mobile terminal 104, and performs collation processing. The verification result transmission unit 416 transmits the verification result to the mobile terminal 104. The portal terminal application 413 transfers service information from the mobile terminal 104 to the service provider 103 and notifies a service provision request.
An example of the verification unit 415 is biometric authentication. In this case, information input by the user for verification is biometric information, and authentication information is a biometric template. The collation result is a collation value or biometric information.

  The verification unit 415 may use password authentication. In this case, information input by the user for verification is a password, and authentication information is a password registered in advance. The verification result is a determination result of password authentication. The portal terminal 101 may include a plurality of verification units 415, or a plurality of verification units may be selected by the authentication requirement table storage unit 414 and a plurality of verification processes may be performed.

FIG. 5 shows a functional configuration of the service provider 103.
The service provider 103 is connected to the network 102 by the network communication unit 511 and can communicate with the portal terminal 101. The service provider application 512 receives a service request from the portal terminal 101. The service information reference unit 513 searches the service information DB 514, reads the service status corresponding to the service request, and performs update processing if necessary. The service provider application 512 transmits the read service state and service provision availability to the portal terminal 101 to start service provision at the portal terminal 101.

FIG. 6 shows the contents of the access control table 315 used in the tamper resistant device 106.
This table has an IC card application ID 601 which is an identifier of the IC card application. In the access control information 602, an authentication method ID that is an authentication method identifier is arranged in the first column, and a personality threshold value of the matching result is arranged in the second column in order.

  FIG. 7 shows the contents of the authentication requirement table 414 used in the portal terminal 101. This table has a service ID 701 that is an identifier of a service type and an authentication method ID 802 that is an identifier of an authentication method.

FIG. 8 shows an outline of the authentication flow in the system of the present invention.
In step 801, the portable terminal 104 possessed by the user accepts a service request by an input from the user.

  In step 802, the mobile terminal 104 receives first authentication information input from the user by the matching unit 214. In step 803, the portable terminal 104 uses the collation unit 214 to collate the received first authentication information. In step 804, the mobile terminal 104 sends the first authentication result to the tamper resistant device.

  In step 805, the tamper resistant device 106 stores the first authentication result in the verification result storage unit 316.

  In step 806, the tamper resistant device 106 accesses the IC card application that the user is trying to select if it is accessible according to the access control table 315, acquires service information, and sends it to the mobile terminal 104. If the access control table 315 determines that access is not possible, the process ends. Here, the case where the IC card application can be accessed is a state in which the first authentication result exceeds a certain personal threshold value indicated in the access control table, and the first card required by each IC card application. This means that the stage of personal authentication has been completed.

  In step 807, the mobile terminal 104 receives service information from the tamper resistant device, and the time monitoring unit 216 stores the time in the first authentication time storage unit 217 as the first authentication time.

  In step 808, the portable terminal 104 enters a state of waiting for establishment of the short-range wireless communication 105 with the portal terminal 101, and performs polling monitoring on the tamper resistant device contact communication unit 213 as to whether or not the communication is disconnected. Note that the tamper resistant device includes the contact interface communication unit 312 and the non-contact interface communication unit 313, but both communication units do not operate simultaneously. As a result of the polling monitoring, when the communication of the contact communication unit 213 is not disconnected and the short-range wireless communication for connecting the tamper resistant device 106 and the portal terminal 101 is not established, the communication of the contact communication unit 213 is disconnected and close to step 818. When the distance wireless communication is established, the process proceeds to step 809.

  In step 809, the mobile terminal 104 sends service information to the portal terminal. In step 810, the portal terminal 101 receives service information, refers to the authentication requirement table 414, and determines an authentication method to be executed.

  In Step 811, when the authentication method determined in Step 810 is only the first authentication and the second authentication is not necessary, the process proceeds to Step 812, and if necessary, the process proceeds to Step 822.

  In step 812, the portal terminal 101 refers to the service information to the service provider 103 based on the service information. In step 813, the service provider 813 refers to the service information DB 514 and sends the result to the portal terminal 101.

  In step 814, the portal terminal 101 provides a service to the user when the service reference result sent from the service provider can provide the service. If the service cannot be provided, the process ends. In step 815, the portal terminal 101 sends a service providing process completion notification to the mobile terminal 104.

  In step 816, the mobile terminal 104 deletes the first authentication time from the first authentication time storage unit 217, and sends an authentication information deletion instruction to the tamper resistant device 106.

  In step 817, the tamper resistant device 106 deletes all the collation results stored in the collation result storage unit 316.

In step 818, the portable terminal 104 performs polling monitoring on the tamper resistant device contact communication unit 213 as to whether or not communication is disconnected. Although the tamper resistant device includes the contact interface communication unit 312 and the non-contact interface communication unit 313, the tamper resistant device may be controlled not to operate at the same time.
In step 819, the portable terminal 104 uses the time monitoring unit 216 to compare the time difference between the first authentication time and the current time with a predetermined time, and the tamper resistant device even after the predetermined time has elapsed. If communication with the contact communication unit has been established, the process proceeds to step 820. If not established, the process proceeds to step 809. Steps 820 to 821 perform the same processing as steps 816 to 817.

  In step 822, the portal terminal 101 receives input of second authentication information from the user through the collation unit 415. In step 823, the portal terminal 101 uses the verification unit 415 to verify the second authentication information. In step 824, the portal terminal 101 sends the verification result of the second authentication to the tamper resistant device.

  In step 825, the tamper resistant device 106 stores the second authentication result in the verification result storage unit, and performs identity determination by fusing the first authentication result and the second authentication result.

  In step 826, the tamper resistant device 106 sends the fusion identity determination result to the portal terminal 101. Steps 827 to 832 perform the same processing as steps 812 to 817.

It is a block diagram showing a system configuration using the present invention. It is a functional block diagram of a portable terminal. It is a functional block diagram of a tamper resistant device. It is a functional block diagram of a portal terminal. It is a functional block diagram of a service provider. It is a block diagram of an access control table. It is a block diagram of an authentication requirement table. It is an authentication flowchart of a system using the present invention. It is an authentication flowchart of a system using the present invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 101 ... Portal terminal, 102 ... Network network, 103 ... Service provider, 104 ... Portable terminal, 105 ... Near field communication, 106 ... Tamper resistant device

Claims (5)

An IC card, a portable terminal device that is connectable to the IC card and accepts input of information used for the first authentication process, and is connectable to the portable terminal device and inputs information used for the first authentication process. A receiving information processing apparatus for realizing a first service for a user and a second service related to the first service according to a result of the first authentication process and the second authentication process; In a multi-step authentication method using an information processing system that executes information processing,
The IC card stores first template information used for the first authentication process, second template information used for the second authentication process, and service information used for the service,
Establishing a connection between the IC card and the mobile terminal device;
The portable terminal device receives input of first authentication information necessary for the first authentication process, and sends the input first authentication information to the IC card,
The IC card performs the first authentication process by comparing the first authentication information and the first template information,
When positive authentication is performed in the first authentication process, the IC card holds the first authentication result, so that among the services requested from the user to the mobile terminal device Performing control on the service information so as to enable provision of the first service;
The IC card sends the first authentication result to the mobile terminal device;
The mobile terminal device monitors whether the connection between itself and the information processing device is established,
As a result of the monitoring,
(1) If established,
The information processing apparatus receives input of second authentication information necessary for the second authentication process from the user, and sends the second authentication information to the IC card;
The IC card controls the second authentication information to execute the second authentication process by comparing the second template information, thereby enabling the provision of the second service,
(2) If not established,
The mobile terminal device sends unestablished information indicating that the connection is not established to the IC card,
The IC card erases the first authentication result based on the reception of the non-established information. The multi-step authentication method according to claim 1,
The service information includes first service information and second service information,
The IC card can be used when the first service information is positively authenticated in the first authentication process, and the second service information can be used for the first authentication process. And a control for enabling the service information to be used when a positive authentication is made in the second authentication process. The multi-step authentication method according to claim 2,
The IC card records in advance lock information for inhibiting the use of the service information with respect to the service information. In the multi-step authentication method according to any one of claims 1 to 3,
The multi-stage authentication method, wherein the portable terminal device monitors whether or not a connection between itself and the information processing device is established within a predetermined time from the time when the result of the first authentication is sent. The multi-step authentication method according to claim 4,
The multi-stage authentication method, wherein the mobile terminal device performs the monitoring by polling the information processing device.

Images