JP2009020899A - Security linkage authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To attain support for specifying a fraudulent performer and the securement of safety in a victim by recording information of fraudulent acts and reporting it to a security service organization in a system for determining authentication information and providing a service. <P>SOLUTION: A security linkage authentication method and its device are provided. An authentication information determining means includes normal service permission authentication information and security linkage authentication information by each service provision unit. When an authentication information input means inputs the security linkage authentication information, an authentication information input time information recording means changes the combination of pieces of recording information at an authentication information input spot and improves information recording precision in response to the kinds of pieces of security linkage authentication information. The recorded information of the authentication information input time information recording means is reported to an authentication information input person and the security service organization, etc. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an authentication method for determining service contents from input authentication information. In a system that performs a service when the input authentication information matches the authentication information for service authorization, the intention of the person such as theft or depression of the authentication information recording medium is provided. The present invention relates to an authentication method and system that prevent the provision of services that are not based on security, and that can prevent re-offending by recording and reporting information at the time of crime execution.

In the conventional authentication system, according to Patent Document 1, the electronic cash storage means for storing the electronic cash, the password input means for inputting the password, and the electronic cash in response to the input of the predetermined password to the password input means. From a specific electronic cash storage means selected according to a predetermined password input, comprising a plurality of electronic cash storage means. As described, the fact that electronic cash is transferred to an external electronic cash accepting means makes it possible to minimize damage to money even if a personal identification number is given by means of depression.
Japanese Patent Laid-Open No. 10-228515

  However, if the victim is not acquainted with the fraudster, the fraudulent act is not taken into account for the recognition of the fraudulent person of the electronic cash holding device, the safety of the victim, and the safety when the electronic cash holding device is stolen. The possibility of re-offending remains because it is difficult to certify the person. If an unauthorized user learns that the victim has taken action to reduce the damage to the money, the victim's safety cannot be maintained. In addition, if the electronic cash holding device is stolen by a fraudulent person and the fraudulent person knows the relationship between the personal identification number and the processing, the damage cannot be reduced.

  An object of the present invention is to determine the authentication information and record the information on the fraud and report it to the security service mechanism in the system for providing the service, thereby aiming to support the fraudulent person's certification and ensure the safety of the victim. In addition, by recording only the security service-linked authentication information on the authentication information recording medium, even if the authentication information recording medium is stolen and the contents of the recording medium are decrypted, an illegal act is not missed.

  The above aims to reduce crime damage and prevent re-offending by realizing early recognition of fraudsters, ensuring the safety of victims, and theft safety.

  In order to achieve the above object, in claim 1, authentication information determination means that authentication information determination means is provided with normal service permission authentication information and security-linked authentication information, and security-linked authentication information is input by the authentication information input means. If the means determines, information such as the time and place when the authentication information is input and the biometric information of the input person is recorded according to the type of security-linked authentication information.

  Here, the service permission authentication information is information for determining whether or not the input information is information for permitting a service, and is assumed to be predetermined.

  Here, the service refers to the contents of services set in the system, such as in the case of a financial institution system, and in the case of a room management system, such as unlocking the room, etc. .

  Here, the information at the time of input of authentication information is information such as time, place, sound, image, biometric information at the time of input of authentication information.

  Here, the authentication information is biometric information such as a fingerprint of a specific finger or a retina of a specific eye, a personal identification number, a symbol, or the like, and may be input directly to an input unit or input from a medium.

  Here, the scope of service provision is not limited to individuals but is based on contracts between the authentication system operation side and the use side, such as workplace units.

  Here, the security-linked authentication information is key information for starting the authentication information input time information recording means, and need not be one. Security-linked authentication information is information that can be input in the same way as normal authentication information when there is only one input means. If the normal authentication information is a fingerprint of a specific finger, the fingerprint other than the specific finger or the direction of the specific finger is indicated. Something changed. If the normal authentication information is the retina of the right eye, the retina of the left eye or the right eye is changed. If the normal authentication information is a password or encryption, a different password or a different encryption method may be used. Further, the input time may be different from the normal authentication information input, or the number of times of input confirmation may be different. When there are a plurality of input means, the information may be input using a different input means.

  Here, in the authentication information determination, it is not necessary that the input information and the service permission authentication information completely match, and it is determined whether or not the input information matches the service permission authentication information with an error within an allowable range.

  According to the second aspect of the present invention, the combination of recorded information is changed and the recording accuracy of information is improved according to the type of security-linked authentication information.

  Here, the authentication information input time information recording means records time, place, sound, image, biometric information, etc. at the time of authentication information input, and does not need to have a plurality of authentication information input time information recording means. .

  Here, improving the recording accuracy means using an information recording means when inputting more authentication information than usual, recording a monitoring camera that normally records still images as a moving image, recording monochrome image information as color image information, etc. It is an improvement.

  According to a third aspect of the present invention, the information at the time when the service content is acquired at the service providing destination is recorded in the authentication information input information recording means according to the type of security-linked authentication information.

  Here, the service providing destination information recorded by the authentication information input information recording means may be unique information such as a personal computer ID, a mail address, a telephone number, and an address.

  Further, in claim 4, the record information is reported to the security service mechanism according to the type of the security-linked authentication information.

  Here, the information notified to the security service mechanism does not have to be all of the recorded information.

  Here, the security service may be a security service company employee, the police, an administrator, or a person outside the room.

  Further, in claim 5, the service provision content is changed according to the type of security-linked authentication information.

  Here, the change of the service provision content includes restrictions on presentation / output of money and information, information provision time delay, prohibition of room lock, and the like. There is no need to ban all services.

  According to a sixth aspect of the present invention, when normal service permission authentication information is input, the information recorded in the authentication information input information recording means is provided to the authentication information input person.

  Here, the information provided to the authentication information input person may be a part of the record information or a symbol, sound, light, etc. that abstracts the record information.

  Further, in claim 7, security service authentication information other than normal service permission authentication information is recorded on the authentication information recording medium.

  Here, the authentication information recording medium only needs to be able to record information such as a magnetic card, an IC card, and a floppy and to read the information with an input device.

  Here, the means of claims 2 to 7 may be a combination of means of each claim when the basic configuration of claim 1 is satisfied.

  According to the first aspect, the authentication information determination means is provided with normal service permission authentication information and security-linked authentication information for each service providing unit, and when security-linked authentication information is input by the authentication information input means, the security-linked According to the type of authentication information, the authentication information input time information recording means records the time and place at the time of authentication information input, the image of the input person, and biometric information. As a result, even if the cash is withdrawn regardless of the will of the person or the room is unlocked, the fraudulent person's record remains, so that the fraudulent person can be easily identified.

  According to claim 2, when the security-linked authentication information is input by the authentication information input means, depending on the type of the security-linked authentication information, the combination of record information in the authentication information input information recording means is changed. Since the information recording accuracy is improved, it is possible to construct a more effective and economical monitoring system such as effective use of a recording medium, and it is easy to identify an unauthorized person.

  According to the third aspect, when the security-linked authentication information is input by the security-linked authentication method and the apparatus authentication information input means, the information at the time when the service provider acquires the service contents is stored in the authentication information input time information recording means. Since it is recorded, since the behavior tracking record of the fraudulent person remains even after transferring the money information to the account designated by the fraudulent person, the fraudulent person can be easily identified.

  According to the fourth aspect, there is provided information notifying means for transmitting the recorded information of the information recording means at the time of authentication information input to the security service mechanism or the like, and when the security-linked authentication information is input by the authentication information input means, the information notifying means In this case, the recorded information is reported to the security service mechanism. Therefore, when the victim is seeking protection such as a depression, the damage of the victim can be minimized by the security service mechanism.

  According to the fifth aspect, when security-linked authentication information is input by the authentication information input unit, the service unit limits the service, so that damage can be reduced. .

  According to the sixth aspect of the present invention, when normal authentication information for service permission is input by the authentication information input unit after the service is provided by the service providing unit, the information recorded in the authentication information input time information recording unit Is provided to the authentication information input person, so that fraud can be detected at an early stage, and even if someone enters the room, the information can be known in advance. Safety can be secured.

  According to the seventh aspect, since security service authentication information other than the normal service permission authentication information is recorded on the authentication information recording medium, the theft obtains the medium authentication information before the person notices the theft. Even when the service is received, it is possible to leave a criminal record, prevent oversight of fraud, and allow early recognition of fraudsters.

  As a result, the present invention minimizes the damage of criminal acts caused by depression or theft, and can prevent re-crime by recording criminal acts.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a processing flow of an embodiment applied to FIG. 2 ATM of the present invention. FIG. 2 is an overall image diagram of a security-linked authentication method and system including a device configuration for realizing the present embodiment applied to ATM. FIG. 3 is an overall image diagram of a security-linked authentication method and system including an apparatus configuration for realizing the present embodiment applied to a room key releasing system using fingerprint information as authentication information. FIG. 4 shows an example of recorded contents of ID, authentication information, and processing contents in the authentication information determination means.

  First, the security-linked authentication method applied to the ATM shown in FIG. 2 and the overall image of the system will be described. The apparatus configuration of the security-linked authentication method and system 200 is obtained by connecting an ATM 201, a computer 202, a monitoring camera 203, and a security service mechanism 205 via an information network 204. The ATM 201 is a combination of a card input device for a bank card 2011, a password input device, a function selection information output device, and a cash input / output device.

  On the card of the bank card 2011, a security code number and personal and bank ID information are recorded. ATM 201 does not require a cash input / output device when it does not handle cash. The computer 202 stores a processing program and various data used in the program, and searches the ATM 201 and the monitoring camera 203 in accordance with the input information and the service authorization authentication information search process and the input security code. It controls processing control and information transfer processing to the security service 205. The information network 204 is an information infrastructure such as a public line, wireless, or LAN.

  Next, referring to FIG. 2, the processing operation in the present embodiment will be described according to the processing flow of FIG.

  When the bank card and PIN are entered and authorization is granted, select the function from the ATM 201 function selection information output device in the ATM service that presents the account information, transfers the account information, and inputs and outputs cash. The bank card 2011 storing the function selection security code is input to the card input device, and the password is input from the password input device (step 101). The selected function, the security code number in the bank card 2011, the ID information, and the input code number are transferred to the computer 202 through the information network 204.

  The computer 202 searches for a person to be authenticated using the security code number and the ID information as a key (step 102), and the code number entered in the authentication information for service permission of the authentication target person whose security code number and ID information match is obtained. It is determined whether it is included (step 103). If not, go through the step. If the personal identification number is included, it is determined whether the personal identification number is for normal processing or for security (step 104).

  In the case of a normal password, the function selection processing service is executed in (step 107). In the case of a security password, the recording density and image processing accuracy of the monitoring camera 203 are improved according to the password, and security The image around the ATM to which the personal identification number has been input, the input time, information such as the input branch, etc. are recorded, and the recorded information is reported to the security service mechanism 205 (step 105). Thereafter, a processing method such as service content restriction is determined in accordance with the contents of the security code number (step 106), and the service determined in step 106 by the ATM 201 is executed (step 107).

  Next, a security-linked authentication method applied to the room key release system shown in FIG. 3 and an overall image diagram of the system will be described.

  The living room key releasing system is configured by connecting an entrance door 301, a monitoring camera 303, and a security service 304 in a living room or shared management area having an authentication information input device 3011 and a door key 3012 through an information network 302.

  When the authentication information input device 3011 exists independently, it is not necessary to provide the authentication information input device 3011 in the entrance door 301. The authentication information determination means is provided in the entrance door 301 or the security service mechanism 304.

  Next, the processing operation applied to the room key release system by inputting authentication information will be described according to the processing flow of FIG. 1 with reference to FIG.

  In the entrance management system that releases the door lock when the authentication information is input and the authentication permission is obtained, the authentication information input device 3011 receives the authentication information from the authentication information input device 3011 in order to move in. (Step 102). The room number and fingerprint information are transferred to the security service mechanism 304 via the information network 302. The security service mechanism 304 retrieves authentication information corresponding to the room from the room number and fingerprint information (step 102), and determines whether or not the input fingerprint information is included in the service permission authentication information of the corresponding room. (Step 103).

  If the authentication information does not match, the process goes through the step. If the authentication is approved, it is determined whether the fingerprint information is for normal processing or for security (step 104). In the case of a normal fingerprint, in step 107, the previous entry information is provided and the door key 3012 is unlocked. In the case of a fingerprint for security authentication, the recording density and image processing accuracy of the monitoring camera 303 are improved, and information on the room and the surrounding image and sound in which the fingerprint for security authentication is input and the security service mechanism 304 are recorded. The recorded information is reported to (step 105).

  Corresponding to the contents of the fingerprint for security authentication, a service such as dispatching a security service from the security service mechanism 304 to the room while the unlocked state of the door key 3012 is maintained is determined (step 106). The determined service is executed (step 107).

  FIG. 4 is an example of the information record of the authentication information authenticating means. Unit information records 401n in which individual and bank IDs, authentication information, and corresponding processing contents are summarized for each service target are prepared for the service target, and the information record 401 is stored. Constitute. The unit information record 401n records personal and bank ID information, multiple authentication information, and information obtained by processing.

  4 will be used to describe details of steps 102 to 106 in FIG. In step 101, the ID number and the password are input by the input means, and the process proceeds to step 102. In step 102, a unit information record 401n having an ID number that matches the input or read ID number is searched from the information record 401. If there is a matching ID number, the process proceeds to step 103. In step 103, the authentication information of the input password is searched from the password of the unit information record 401n searched in step 102, and the process proceeds to step 104.

  In step 104, it is determined whether the personal identification number is a normal service or security-linked, and if it is a normal authentication number (1234), the process proceeds to step 107 and a normal service is provided. If it is any other security code, the process proceeds to step 105, the security device is activated, and the process proceeds to step. In step 106, a service for improving the accuracy of the security device when the password is (2341). In the case of (3412), the accuracy of the security device is improved and the withdrawal is restricted. In the case of (2143), the accuracy of the security device is improved, the withdrawal limit and the transfer limit. (4321) The accuracy improvement of the security device and the security service call are determined as service contents, and the process proceeds to Step 107. In step 107, the service determined in step 106 is executed.

It is a processing flow figure showing the 1st example of the present invention. 1 is an overall image diagram of a security-linked authentication method and system including a device configuration for realizing the present embodiment applied to ATM. FIG. 1 is an overall image diagram of a security-linked authentication method and system including a device configuration for realizing a system in which the present embodiment is applied to a room key releasing system. The figure which shows the information recording example of an authentication information authentication means.

Explanation of symbols

201 ... Input device 202 ... Authentication information determination device 203 ... Security device
204... Control device, 205... Service providing device.

Claims (7)

  Authentication information input means for inputting authentication information, authentication information determination means for determining whether or not the input information matches the authentication information for service permission, service providing means for implementing various services, and information when the authentication information is input In the authentication service device comprising the authentication information input information recording means for recording the authentication information, the authentication information determination means is provided with normal service permission authentication information and security-linked authentication information for starting the authentication information input information recording means, When the authentication information determination unit determines that the security-linked authentication information has been input by the authentication information input unit, the authentication information input information is stored in the authentication information input information recording unit according to the type of the security-linked authentication information. Security-linked authentication method characterized by recording.   2. The security-linked authentication method according to claim 1, wherein the information-recording means at the time of authentication information input changes the combination of recorded information and improves the recording accuracy of information according to the type of security-linked authentication information.   2. The security-linked authentication method according to claim 1, wherein the information recording means at the time of authentication information input records information at the time when the service provider acquires the service contents.   Claim 1 is provided with information notifying means for notifying the security service mechanism of the record information of the information recording means at the time of inputting the authentication information according to claim 1 according to the type of the security associated authentication information. Method.   2. The service-linked authentication method according to claim 1, wherein the service content is changed according to the type of security-linked authentication information.   5. The information reporting means according to claim 4, wherein when normal service permission authentication information is inputted, the information recorded in the information recording means at the time of authentication information input according to claim 1 is provided to the authentication information input person. Security-linked authentication method.   2. An authentication information input means according to claim 1, wherein the authentication information recording medium records personal information and authentication information and a method for inputting the authentication information, and security authentication information is recorded in the authentication information of the authentication information recording medium. Security-linked authentication method that features.

Images