JP2010244273A - System, method and program of ic card personal identification - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an IC card personal identification method which performs personal identification using an IC card without using a personal computer. <P>SOLUTION: When service of a server is used, the IC card is loaded in a telephone terminal with an IC card reader to read personal identification information recorded in the IC card by the IC card reader (sequence Seq 2), and personal identification information needed to use the service is converted into speech information or IP packets, which are transmitted to the server (sequence Seq 5). Commands and responses based upon APDU protocol of the ISO7816-4 standard are used for information transfer during personal identification between the IC card and telephone terminal. Between the telephone terminal and server through a telephone network or IP network, a predetermined speech signal or IP packets indicating transmission of the commands and responses are transmitted first and then the commands and responses are converted into speech information or IP packets, which are transmitted (sequences Seq 7 to Seq 11). <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an IC card personal authentication system, an IC card personal authentication method, and an IC card personal authentication program.

  As described in Japanese Patent Application Laid-Open No. 2007-26188 “IC card system using HTTP”, etc., in Japanese Patent Application Laid-Open No. 2007-26188, an IC card personal authentication system generally includes personal identification information (ID, encryption key, etc.). ) Is stored in the IC card with the IC card reader connected to the IC card reader from a server located above the IC card. The personal identification information stored in the card can be acquired, the user of the IC card can be identified, and personal authentication can be performed.

  FIG. 4 is a system configuration diagram showing a system configuration of an IC card authentication system in the prior art as described in Patent Document 1. The IC card personal authentication system shown in FIG. 4 includes a server 40A in a state where a personal computer 30A with the IC card 10 mounted on the IC card reader 20 is connected to the server 40A via the Internet 50A that performs IP communication as an access terminal. When receiving a command for the IC card 10 from the Internet 50A, the personal computer 30A transfers the command to the IC card 10 via the IC card reader 20, and sends a response corresponding to the command from the IC card 10 to the IC card. -When it receives via the reader | leader 20, it is comprised so that it may return with respect to the server 40A.

  Therefore, the server 40A transmits a command required for personal authentication corresponding to the personal identification information stored in the IC card 10 to the IC card 10 via the personal computer 30A, thereby requesting the response result for the personal authentication. Can be returned from the IC card 10 via the personal computer 30A as a response to the command.

Japanese Patent Publication No. 2007-26188

  However, in the past, the provision of online services on the premise of personal authentication using an IC card is based on the use of a personal computer. As shown in the IC card personal authentication system of FIG. The user who intends to use it is indispensable to use the personal computer 30A with the IC card 10 mounted thereon, which is a problem in promoting the spread of online services with personal authentication using the IC card.

  That is, even if IC cards are widely used, it is difficult for people such as elderly people who are unfamiliar with the operation of personal computers to use various services based on authentication based on IC cards.

  The present invention has been made in view of the above problems, and the problems to be solved by the present invention include an IC card personal authentication system, an IC card personal authentication method, and an IC card personal authentication program that do not require the use of a personal computer. It is to provide.

  The present invention comprises the following technical means in order to solve the above-mentioned problems.

  When a user uses a service provided by a server, the first technical means uses the IC card in which personal identification information for authenticating the user himself / herself is recorded to the server. An IC card personal authentication system for performing personal authentication required for use of a service, wherein the IC card is mounted on a telephone terminal equipped with an IC card reader that reads the personal identification information recorded on the IC card, In addition, as the access terminal, the telephone terminal mediates the exchange of information between the IC card and the server, whereby the personal authentication is performed between the IC card and the server via the telephone network or the IP network. It is characterized by performing.

  According to a second technical means, in the IC card personal authentication system according to the first technical means, the telephone terminal transmits information to and from the IC card according to an APDU (Application Protocol) defined in the ISO 7816-4 standard. Data Unit) A telephone terminal that includes command / response processing means for transmitting and receiving using an APDU command and an APDU response, and mediates the exchange of information when performing identity authentication between the IC card and the server The command / response processing means converts the command from the server into the APDU command and transfers it to the IC card, converts the APDU response from the IC card into a response for the server, and It is transferred to a server.

  According to a third technical means, in the IC card personal authentication system according to the second technical means, the server uses a predetermined voice as an identification signal indicating that the command is transmitted to the telephone terminal. After transmitting a signal or IP packet through the telephone network or IP network in advance, the command is converted into voice information or an IP packet and transmitted through the telephone network or IP network. The telephone terminal that mediates the exchange of information is preceded by a voice signal or IP packet determined in advance as an identification signal indicating that the response is transmitted to the server via the telephone network or the IP network. After the transmission, the response is converted into voice information or an IP packet and transmitted through the telephone network or the IP network. That.

  According to a fourth technical means, in the IC card personal authentication system according to any one of the first to third technical means, the telephone terminal is any one of a telephone, a FAX terminal, and a telephone with a FAX function. Features.

  When a user uses a service provided by a server, a fifth technical means uses the IC card on which personal identification information for authenticating the user is recorded, to and from the server. An IC card personal authentication method for performing personal authentication required for use of a service, wherein the IC card is attached to a telephone terminal equipped with an IC card reader for reading the personal identification information recorded on the IC card, In addition, as the access terminal, the telephone terminal mediates the exchange of information between the IC card and the server, whereby the personal authentication is performed between the IC card and the server via the telephone network or the IP network. It is characterized by performing.

  Sixth technical means, in the IC card personal authentication method according to the fifth technical means, the telephone terminal that mediates exchange of information when performing personal authentication between the IC card and the server, The command from the server is converted into an APDU command conforming to the APDU (Application Protocol Data Unit) protocol defined by the ISO 7816-4 standard, transferred to the IC card, and from the IC card according to the ISO 7816-4 standard. An APDU response conforming to a prescribed APDU protocol is converted into a response for the server and transferred to the server.

  According to a seventh technical means, in the IC card personal authentication method according to the sixth technical means, the server uses a predetermined voice as an identification signal indicating that the command is transmitted to the telephone terminal. After transmitting a signal or IP packet through the telephone network or IP network in advance, the command is converted into voice information or an IP packet and transmitted through the telephone network or IP network. The telephone terminal that mediates the exchange of information is preceded by a voice signal or IP packet determined in advance as an identification signal indicating that the response is transmitted to the server via the telephone network or the IP network. After the transmission, the response is converted into voice information or an IP packet and transmitted through the telephone network or the IP network.

  According to an eighth technical means, in the IC card personal authentication method according to any one of the fifth to seventh technical means, the telephone terminal is any one of a telephone, a FAX terminal, and a telephone with a FAX function. Features.

  The ninth technical means is characterized in that the IC card personal authentication method according to any one of the fifth to eighth technical means is an IC card personal authentication program implemented as a program executable by a computer. And

  According to the IC card authentication system, IC card authentication method, and IC card authentication program of the present invention, the following effects can be obtained.

  The user can authenticate himself / herself by using an IC card only by operating a telephone terminal (that is, a telephone, a FAX terminal or a telephone with a FAX function), and uses a desired service from various services provided by a server. be able to.

  In other words, even a person who can use a general telephone line that has been widely used and can not use the Internet or a personal computer can call a telephone terminal (that is, a telephone, a FAX terminal, or a telephone with a FAX function). Simply connect to the line, attach an IC card that records personal identification information issued for personal authentication to the telephone terminal, and enjoy the desired service simply by making a call to the server that provides the desired service. Therefore, the service usage range can be expanded even when identity authentication is performed using an IC card.

It is a system configuration figure showing an example of a system configuration of an IC card personal authentication system concerning the present invention. It is an internal block diagram which shows an example of the internal structure of the telephone terminal and server which are the components of the IC card personal authentication system shown in FIG. It is a sequence chart which shows an example of operation | movement of the IC card personal authentication system shown in FIG. 1, FIG. It is a system block diagram which shows the system configuration | structure of the IC card identification system in a prior art.

  Hereinafter, preferred embodiments of an IC card personal authentication system, an IC card personal authentication method, and an IC card personal authentication program according to the present invention will be described in detail with reference to the drawings. In the following description, an IC card personal authentication system and an IC card personal authentication method according to the present invention will be described. However, the IC card personal authentication method is implemented as an IC card personal authentication program executable by a computer. Of course, the IC card personal authentication program may be recorded on a computer-readable recording medium.

(Features of the present invention)
Conventionally, the provision of an online service based on identity authentication using an IC card is based on the assumption that a user uses a personal computer. However, there are still many people who are unfamiliar with the operation of personal computers, including the elderly. On the other hand, even a person unfamiliar with the operation of a personal computer is often accustomed to the operation of a telephone terminal (telephone, FAX terminal, telephone with FAX function).

  Therefore, the IC card authentication system according to the present invention uses a telephone terminal (telephone, FAX terminal, telephone with FAX function) instead of a personal computer as an IC card access terminal. Provides a mechanism that allows easy use of online services based on identification and authentication by the Internet, and expands the scope of provision of such services even for services that require identity authentication using IC cards It is characterized by becoming possible.

(System configuration example)
Next, an example of the system configuration of the IC card authentication system according to the present invention will be described with reference to FIG. FIG. 1 is a system configuration diagram showing an example of a system configuration of an IC card personal authentication system according to the present invention.

  The IC card authentication system shown in FIG. 1 is different from the prior art shown in FIG. 4 in that the IC card reader 20 is connected to a telephone terminal 30 instead of a personal computer. The network connecting the two is not the Internet but a telephone network (PSTN / ISDN: Public Switched Telephone Network / Integrated Services Digital Network) 50, and the telephone terminal 30 and the server 40 are connected by the telephone network 50. Has been.

  Here, the telephone terminal 30 may be a telephone that inputs and outputs voice information, may be a FAX terminal that inputs and outputs FAX information, or is a telephone with a FAX function that has both functions. It doesn't matter.

  As shown in FIG. 1, the telephone terminal 30 is connected to the server 40 via a telephone network 50 that performs voice / fax communication, and the IC card 10 is inserted into the IC card reader 20 connected to the telephone terminal 30. When a command for the IC card 10 is received from the server 40 via the telephone network 50 in the mounted state, the telephone terminal 30 transfers the command to the IC card 10 via the IC card reader 20, and the IC card 10 A response corresponding to the command is returned to the telephone terminal 30.

  Therefore, the server 40 transmits a command for instructing the personal authentication using the personal identification information stored in the IC card 10 to the IC card 10 via the telephone terminal 30, whereby the instructed information on the personal authentication is transmitted to the IC card 10. The card 10 can be returned via the telephone terminal 30 as a response to the command.

  Here, an example of the internal configuration of the telephone terminal 30 and the server 40 shown in FIG. 1 will be described with reference to FIG. FIG. 2 is an internal configuration diagram showing an example of an internal configuration of the telephone terminal 30 and the server 40 which are components of the IC card personal authentication system shown in FIG.

  As shown in FIG. 1, the IC card personal authentication system shown in FIG. 2 can be equipped with an IC card 10 in which personal identification information for personal recognition is recorded, and the IC card 10. Connects the telephone terminal 30 that receives a service request, the server 40 that performs personal authentication based on the personal identification information of the IC card 10, and provides a service to the user when the personal authentication is obtained, and the telephone terminal 30 and the server 40. The telephone terminal 30 displays various information in the IC card reader 20 that reads the contents of the attached IC card 10 and the telephone terminal 30, and displays various information on the telephone terminal 30. The display / operation unit 25 is provided.

  The telephone terminal 30 includes an information control unit 31 that controls and processes various types of information. The information control unit 31 receives, for example, a service request from a user and sends a requested service to the server 40. Various information such as service provision information from the server 40 is displayed on the display / operation unit 25, printed on FAX paper, and read information from the IC card 10 is edited, processed, and stored. Or the entire operation of the telephone terminal 30 is controlled. The telephone terminal 30 includes at least an information storage unit 32, a command / response processing unit 33, a voice / data conversion unit 34, a network communication unit 35, and an IC card communication unit 36 under the control of the information control unit 31. Yes. One or more of these components may be implemented by firmware (software) that operates on a CPU built in the terminal.

  The information storage unit 32 is a so-called memory that stores and stores various kinds of information in the telephone terminal 30, for example, stores personal identification information read from the IC card 10 or stores a service menu provided to the user. Or temporarily storing commands and responses exchanged with the server 40.

  The command / response processing unit 33 is a part that mediates the exchange of commands and responses between the IC card 10 and the server 40. The command / response processing unit 33 converts the command from the server 40 into a command that can be understood by the IC card 10. For example, the response from the IC card 10 is converted into a response understandable by the server 40 and transferred to the server.

  Here, for the command / response with the IC card 10, for example, an APDU command / APDU response conforming to an APDU (Application Protocol Data Unit) protocol defined in the ISO 7816-4 standard is used. The command / response processing unit 33 converts a command from the server 40 as a host system and a command defined by the command / response processing unit 33 itself into an APDU command for the IC card 10 and transmits the converted APDU command to the IC card 10. When the IC card 10 receives an APDU command transmitted from the command / response processing unit 33 of the telephone terminal 30, the IC card 10 performs necessary processing instructed by the APDU command, and uses the result as an APDU response as a telephone call. Returned to the command / response processing unit 33 of the terminal 30.

  When an APDU response is returned from the IC card 10, the command / response processing unit 33 processes the returned APDU response by the command / response processing unit 33 itself, and displays the processing result on the display / operation unit 25. It is displayed and notified to the user, or converted into a response for the server 40 which is a host system and transferred to the server 40. By repeating such a command / response exchange, for example, a command / response sequence necessary for identifying and authenticating the user of the IC card 10 is performed.

  The information control unit 31 of the telephone terminal 30 is a function that identifies the user himself / herself and authenticates whether the operation of the telephone terminal 30 is permitted when the user tries to operate the telephone terminal 30. You may make it provide.

  The voice / data converter 34 converts the personal identification information and response from the IC card, the data processed inside the telephone terminal 30 into voice information that can be transmitted to the server 40 via the telephone network (PSTN / ISDN) 50. Data for conversion or, conversely, voice information transmitted from the server 40 via the telephone network (PSTN / ISDN) 50 is processed inside the telephone terminal 30 or transferred to the IC card 10 side. It is a part to convert to.

  Prior to the transmission of the personal identification information or response to the server 40, a predetermined audio signal is transmitted as an identification signal indicating that the audio information to be transmitted next is the personal identification information or the response. Yes. Conversely, when receiving voice information related to command or service information from the server 40, prior to the reception of the voice information, it is determined in advance as an identification signal indicating that the next received voice information is command or service information. Audio signals are received.

  The network communication unit 35 is a communication unit that transmits and receives various signals to and from the telephone network (PSTN / ISDN) 50 and transmits and receives audio signals to and from the server 40 that is a communication partner. The unit 36 is a part having a driver function of the IC card reader, and reads the recorded contents of the mounted IC card 10 and transmits / receives commands / responses to / from the IC card 10.

  Next, the server 40 is a host system that provides a client / server type service using the telephone terminal 30 as a client terminal, and exchanges information with the telephone terminal 30 via the telephone network (PSTN / ISDN) 50. A server (ie, a voice / fax communication compatible IC card platform server) that has a function to support voice / fax communication and provides a user authentication process using the IC card 10 necessary for providing services. is there.

  The server 40 includes at least a service processing unit 41, an authentication unit 42, a command / response processing unit 43, a voice / data conversion unit 44, and a network communication unit 45. One or more of these components are built in the server. You may make it implement by the software which operate | moves with this CPU.

  The service processing unit 41 is a part that provides various client / server type services in response to requests from the telephone terminal 30 that is a client terminal. The authentication unit 42 receives a service request when the service processing unit 41 receives a service request. This is a part that uses the personal identification information recorded in the user's IC card 10 to perform user authentication processing of the user of the requesting telephone terminal 30.

  The command / response processing unit 43 performs authentication with the IC card 10 attached to the telephone terminal 30 and provides services to the telephone terminal 30 with the IC card 10. Alternatively, it is a part that processes a command / response exchanged with the telephone terminal 30, generates a command to be transmitted from the server 40, and sends a response returned from the telephone terminal 30 according to the transmitted command. Analyze the contents.

  The voice / data converter 44 converts the data processed in the server 40 into voice information that can be transmitted to the telephone terminal 30 via the telephone network (PSTN / ISDN) 50, or conversely, the telephone network ( The voice information transmitted from the telephone terminal 30 via the PSTN / ISDN) 50 is converted into data for processing in the server 40.

  Prior to the transmission of command or service information to the telephone terminal 30 side, a predetermined voice signal is transmitted as an identification signal indicating that the next voice information to be transmitted is command or service information. . Conversely, when receiving voice information related to personal identification information or a response from the telephone terminal 30 side, prior to the reception of the voice information, an identification indicating that the next received voice information is personal identification information or a response. A predetermined audio signal is received as the signal.

  The network communication unit 45 is a communication unit that transmits and receives various signals to and from the telephone network (PSTN / ISDN) 50 and transmits and receives audio signals to and from the telephone terminal 30 that is a communication partner.

(Operation example of IC card authentication system)
Next, an example of the operation of the IC card authentication system shown in FIGS. 1 and 2 as an example of the IC card authentication system according to the present invention will be described with reference to the sequence chart of FIG. FIG. 3 is a sequence chart showing an example of the operation of the IC card personal authentication system shown in FIGS. 1 and 2, and the operation in the case of performing personal authentication by the IC card 10 using the telephone terminal 30 with the IC card reader. An example of the sequence is shown. In the sequence chart of FIG. 3, a broken line arrow indicates an operation by the user, and a solid line arrow indicates a sequence automatically executed in each component of the IC card authentication system.

  Here, the communication method between the IC card 10 and the telephone terminal 30 is the same as the conventional IC card communication technology, and the communication method between the telephone terminal 30 and the server 40 is also used. Assume that the same communication method as that of the conventional voice / fax communication technology is used.

  In the sequence chart of FIG. 3, first, a user who intends to use the service of the server 40 records the personal identification information of the user himself / herself in order to perform personal authentication performed prior to the provision of the service. The card 10 is mounted at a predetermined position (position where the IC card reader 20 can read the IC card 10) of the telephone terminal 30 (sequence Seq1). When the IC card reader 20 detects the attached IC card 10 and notifies it to the information control unit 31, the IC card communication unit 36 is activated by an instruction from the information control unit 31, and the attached IC card 10. Is read by the IC card reader 20 and temporarily stored in the information storage unit 32.

  When the personal identification information of the IC card 10 is stored in the information storage unit 32, the information control unit 31 identifies the IC card 10 and the user himself / herself, and allows subsequent user operations and command access. (Sequence Seq2). Thereafter, usage guidance for the service that can be used by the user specified by the personal identification information is displayed on the display / operation unit 25 together with the personal identification information (sequence Seq3).

The user selects the service to be used from the service usage guide displayed on the screen of the display / operation unit 25, and presses the service number of the selected service with the push button of the display / operation unit 25. (Sequence Seq4)
The information control unit 31 that has received the service number selected by pressing the push button takes out the telephone number of the server 40 that provides the service corresponding to the service number, and transmits the dial information of the extracted telephone number to the network communication unit 35. Is transmitted to the telephone network 50 and is received by the server 40 to which the dial information is received. The server 40 is a voice / fax communication compatible IC card platform server that performs authentication using a voice / fax communication compatible IC card.

  When the destination server 40 responds, the information control unit 31 of the telephone terminal 30 continues to drive the voice / data conversion unit 34 as an identification signal for recognizing receipt of personal identification information in the server 40 in advance. After the predetermined voice signal is transmitted from the network communication unit 35 to the server 40 in advance, the personal identification information temporarily stored in the information storage unit 32 is subsequently telephoned by the voice / data conversion unit 34. It is converted into voice information that can be transmitted on the network 50 and transmitted from the network communication unit 35 to the server 40 (sequence Seq5).

  The server 40 that has received the voice signal for recognizing the personal identification information at the network communication unit 45 subsequently sends the voice information (personal identification information) transmitted from the telephone terminal 30 to the voice / data conversion unit 44. Then, the data is converted into a data format that can be handled internally, and the personal identification information obtained by the conversion is transferred to the authentication unit 42.

  The authentication unit 42 uses the voice / data conversion unit 44 to confirm confirmation information predetermined as information for notifying that the preceding voice signal and the voice information of the personal identification information have been received as a recognition signal from the telephone terminal 30. The voice information is converted into voice information that can be transmitted on the telephone network 50, returned from the network communication unit 45 to the telephone terminal 30 as a transmission source, and requested to the telephone terminal 30 to wait (sequence Seq6).

  The subsequent sequences Seq7 to Seq11 are sequences necessary for personal authentication based on the personal identification information recorded on the IC card 10, and are repeatedly performed as many times as required for personal authentication according to the authentication sequence to be used.

  First, the authentication unit 42 of the server 40 drives the command / response processing unit 43 to generate command data for personal authentication necessary for service use, and in advance as an identification signal indicating the transmission of the command data. After the predetermined prescribed voice signal is transmitted from the network communication unit 45 to the telephone terminal 30 that is the service requester, the command data for personal authentication necessary for using the service of the server 40 is continuously sent to the voice / data. The conversion unit 44 converts the information into voice information that can be transmitted on the telephone network 50, and transmits it from the network communication unit 45 to the telephone terminal 30 that is the service request source (sequence Seq7).

  The telephone terminal 30 having received the voice information related to the command data following the voice signal for identifying the command data from the server 40 by the network communication unit 35, the voice / data conversion unit 34 converts the voice information related to the command data to the internal processing. Is converted into command data that can be stored in the information storage unit 32 and temporarily stored (sequence Seq8).

  Thereafter, the command / response processing unit 33 reads the command data temporarily stored in the information storage unit 32, converts the command data into APDU command data compliant with the APDU standard, and the IC card via the IC card communication unit 36. 10 to send. The IC card 10 analyzes the received APDU command data, performs processing according to the analysis result, generates APDU response data, and transmits the generated APDU response data to the transmission source via the IC card communication unit 36. Is returned to the command / response processing unit 33 (sequence Seq9).

  The command / response processing unit 33 converts the APDU response data returned from the IC card 10 into response data that can be internally processed on the server 40 side, and temporarily stores it in the information storage unit 32 (sequence Seq10). .

  After that, a predetermined audio signal that is predetermined as an identification signal indicating that response data is to be transmitted is transmitted in advance from the network communication unit 35 to the server 40 that is the command transmission source, and then continuously transmitted to the information storage unit 32. The response data stored temporarily is converted into voice information that can be transmitted on the telephone network 50 by the voice / data converter 34, and returned from the network communication unit 35 to the server 40 that is the command data transmission source (sequence). Seq11).

  The server 40 that has received the voice information related to the response data following the voice signal for identifying the response data from the telephone terminal 30 at the network communication unit 45 performs the internal processing of the voice information about the response data at the voice / data conversion unit 44. The response data is converted into response data that can be transferred to the authentication unit 42, and the authentication unit 42 analyzes the response result on the IC card 10 side with respect to the command data transmitted earlier.

  Thereafter, as described above, the sequence Seq7 to the sequence Seq11 are repeated as many times as required for the personal authentication in accordance with the authentication sequence to be used.

  When the user authentication by the IC card 10 is completed in the authentication unit 42 of the server 40, the authentication unit 42 notifies the service processing unit 41 to that effect, and the service processing unit 41 notifies the user of the telephone terminal 30. In the case of providing service information, a predetermined voice signal as an identification signal for providing service information is transmitted in advance from the network communication unit 45 to the telephone terminal 30 of the service requester, and then used continuously. The service information requested by the user is converted into voice information that can be transmitted on the telephone network 50 by the voice / data conversion unit 44 and transmitted from the network communication unit 45 to the telephone terminal 30 that is the service request source. (Sequence Seq12).

  The telephone terminal 30 that has received the voice information related to the service information following the voice signal for identification from the server 40 in the network communication unit 35 internally receives the voice information related to the service information in the voice / data conversion unit 34. The service information is converted into a processable data format, and the converted service information is temporarily stored in the information storage unit 32.

  Thereafter, the information control unit 31 reads the service information temporarily stored in the information storage unit 32, converts it into a display format that can be displayed on the screen by the display / operation unit 25, and displays the screen on the display / operation unit 25. By presenting it to the user.

  When the user wants to print the service information on the FAX paper after confirming the service information of the information inquiry result displayed on the screen on the display / operation unit 25, the user instructs printing of the screen display information on the display / operation unit 25. By pressing down a push button prepared in the display / operation unit 25 as a button for printing, it is possible to print on FAX paper and acquire hard copy paper (sequence Seq13).

  As described above in detail, in the present embodiment, the IC card personal authentication system for performing the personal authentication by the IC card 10 does not need to use a personal computer as in the conventional IC card personal authentication system. By using a telephone terminal 30 (that is, a telephone, a FAX terminal, or a telephone with a FAX function) that is used by many people, and using a unique authentication procedure that is completely different from a personal computer, While ensuring simple operability, it is possible to reliably authenticate the user with the IC card 10 and easily enjoy the service desired by the user.

(Other embodiments)
In the above-described embodiment, the case where the telephone network (PSDN / ISDN) 50 is used as the network connecting the telephone terminal 30 and the server 40 has been described. However, the present invention is not limited to such a case. Alternatively, a connection may be made using an IP network in which voice signals and voice information are converted into IP (Internet Protocol) packets and transferred based on the IP protocol.

  When the connection between the telephone terminal 30 and the server 40 via the IP network is also an object, the voice / data conversion unit 34 and the voice / data conversion unit 44 provided in the telephone terminal 30 and the server 40, respectively. May be configured as a voice / IP packet / data converter having an IP packet editing / decomposing function, and the following processing may be performed.

  That is, in the voice / IP packet / data converter of the telephone terminal 30, personal identification information and response from the IC card, data processed inside the telephone terminal 30, etc. are transferred to the telephone network (PSTN / ISDN) 50 or IP network. Voice information or IP packets that can be transmitted to the server 40 via the network, or conversely, voice information or IP packets transmitted from the server 40 via the telephone network (PSTN / ISDN) 50 or the IP network, What is necessary is just to comprise so that it may convert into the data for processing inside the telephone terminal 30, or transferring to the IC card 10 side.

  The voice / IP packet / data converter of the server 40 can transmit the data processed inside the server 40 to the telephone terminal 30 side via the telephone network (PSTN / ISDN) 50 or the IP network. Alternatively, the voice information or IP packet transmitted from the telephone terminal 30 via the telephone network (PSTN / ISDN) 50 or the IP network is converted into data for processing in the server 40. What is necessary is just to comprise so that it may convert.

  As described above, when the IP network is also used, the telephone terminal 30 determines whether the voice information or IP packet to be transmitted next is personally identified before transmitting the personal identification information or response to the server 40. It is configured to transmit a predetermined voice signal or IP packet as an identification signal indicating information or response, and conversely also when receiving voice information or IP packet related to command or service information from the server 40 side. Prior to the reception of the voice information or IP packet, a voice signal or IP packet determined in advance as an identification signal indicating that the voice information or IP packet to be received next is command or service information is received. The

  On the other hand, the server 40 is the same as the case of the telephone terminal 30. When the IP network is used, the voice information to be transmitted next before the command or service information is transmitted to the telephone terminal 30 side. Alternatively, it is configured to transmit a predetermined voice signal or IP packet as an identification signal indicating that the IP packet is command or service information, and conversely, voice information or IP related to personal identification information or response from the telephone terminal 30 side. When receiving a packet, prior to receiving the voice information or IP packet, a voice signal or IP predetermined as an identification signal indicating that the next voice information or IP packet to be received is personal identification information or a response. Configured to receive packets.

DESCRIPTION OF SYMBOLS 10 ... IC card, 20 ... IC card reader, 25 ... Display / operation part, 30 ... Telephone terminal, 30A ... Personal computer, 31 ... Information control part, 32 ... Information storage part, 33 ... Command / response processing part, 34 ... Voice / data conversion unit, 35 ... Network communication unit, 36 ... IC card communication unit, 40, 40A ... Server, 41 ... Service processing unit, 42 ... Authentication unit, 43 ... Command / response processing unit, 44 ... Voice / data conversion 45, Network communication unit, 50 ... Telephone network (PSTN / ISDN), 50A ... Internet.

Claims (9)

  When a user uses a service provided by a server, the user needs to use the service with the server using an IC card in which personal identification information for authenticating the user is recorded. An IC card personal authentication system for performing personal authentication, wherein the IC card is attached to a telephone terminal equipped with an IC card reader that reads the personal identification information recorded on the IC card, and the telephone terminal As an access terminal, identity authentication is performed between the IC card and the server via a telephone network or an IP network by mediating exchange of information between the IC card and the server. IC card identity authentication system.   2. The IC card authentication system according to claim 1, wherein the telephone terminal transmits information between the IC card and an APDU command conforming to an APDU (Application Protocol Data Unit) protocol defined in the ISO7816-4 standard, Command / response processing means for transmitting / receiving using an APDU response, and the telephone terminal that mediates the exchange of information when performing personal authentication between the IC card and the server, by the command / response processing means, A command from the server is converted into the APDU command and transferred to the IC card, and the APDU response from the IC card is converted into a response for the server and transferred to the server. Card authentication system.   3. The IC card personal authentication system according to claim 2, wherein the server precedes the telephone terminal with a predetermined voice signal or IP packet as an identification signal indicating that the command is transmitted to the telephone terminal. After transmitting via the network or IP network, the telephone terminal that converts the command into voice information or IP packet and transmits it via the telephone network or IP network, and mediates the exchange of information with the IC card. , After transmitting a voice signal or IP packet determined in advance as an identification signal indicating the transmission of the response to the server via the telephone network or IP network, the response is transmitted as voice information or An IC card personal authentication system, characterized in that it is converted into an IP packet and transmitted via the telephone network or IP network. .   4. The IC card personal authentication system according to claim 1, wherein the telephone terminal is one of a telephone, a FAX terminal, and a telephone with a FAX function.   When a user uses a service provided by a server, the user needs to use the service with the server using an IC card in which personal identification information for authenticating the user is recorded. An IC card personal authentication method for performing personal authentication, wherein the IC card is attached to a telephone terminal equipped with an IC card reader that reads the personal identification information recorded on the IC card, and the telephone terminal As an access terminal, identity authentication is performed between the IC card and the server via a telephone network or an IP network by mediating exchange of information between the IC card and the server. IC card authentication method.   6. The IC card personal authentication method according to claim 5, wherein the telephone terminal that mediates exchange of information when performing personal authentication between the IC card and the server transmits a command from the server to the ISO7816-4 standard. APDU command conforming to the APDU (Application Protocol Data Unit) protocol defined in the above, transferred to the IC card, and APDU response conforming to the APDU protocol defined in the ISO 7816-4 standard from the IC card Is converted into a response for the server and transferred to the server.   7. The IC card personal authentication method according to claim 6, wherein the server precedes the telephone terminal with a predetermined voice signal or IP packet as an identification signal indicating that the command is transmitted to the telephone terminal. After transmitting via the network or IP network, the telephone terminal that converts the command into voice information or IP packet and transmits it via the telephone network or IP network, and mediates the exchange of information with the IC card. , After transmitting a voice signal or IP packet determined in advance as an identification signal indicating the transmission of the response to the server via the telephone network or IP network, the response is transmitted as voice information or An IC card personal authentication method, comprising: converting to an IP packet and transmitting the packet through the telephone network or the IP network.   8. The IC card personal authentication method according to claim 5, wherein the telephone terminal is any one of a telephone, a FAX terminal, and a telephone with a FAX function.   9. An IC card personal authentication program, wherein the IC card personal authentication method according to claim 5 is implemented as a program executable by a computer.

Images