JP2012256264A - Identification method, personal information management device, and name identification device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To perform a pairing between different IDs, prevent a recovery of original data even if some of the data is leaked during sending the data, and further make a transmission source and destination of the data hidden from each other.SOLUTION: A name identification device 12 divides a common ID into a plurality of IDs and conceals each of them to be received through repeating devices 13 and 14, different from each other, to generate the common ID from the plurality of IDs. On the basis of the common ID, a hashed identification information received from a first repeating device 14 together with the common ID, and identification information of an identification information recording unit 203 and an identification information update history recording unit 204, the identification information is verified to generate a verification result and the verification result is concealed to be sent to the name identification device 12.

Description

  The present invention relates to an identity verification method, a personal information management device, and a name identification device.

  In recent years, IDs that can be used across various services (hereinafter referred to as common IDs) have appeared. As an example, there is a resident card code assigned to each citizen, and application of a passport by using information such as address, name and date of birth (hereinafter referred to as identity verification information) linked to the resident card code And procedures for moving in and out were simplified. In the future, the range of use of this common ID will be expanded, and it is expected to be used by private companies such as banks.

  As an example of the use of the above common ID, for example, identity verification information managed by a common ID issuing organization by pairing a common ID with an ID that has been assigned to each user in a private company (hereinafter referred to as a local ID). It is assumed that the change information is reflected in information such as the address, name, date of birth, etc. (hereinafter, attribute information) of the user having the local ID paired with the common ID. In addition, data regarding the common ID and identification information is exchanged between the common ID issuing organization and the company. At that time, a method for securely exchanging data between the two parties is required. As a related technology, the data transmission source divides the common key used when encrypting data into multiple parts, and provides the data transmission destination to the data transmission destination via electronically and physically different paths. A technique for safely exchanging data is known (for example, see Patent Document 1). As a result, even if a part of the divided common key is leaked, the common key cannot be restored.

  If the pairing between the common ID and the local ID is established, it becomes obvious that the same person information is stored on the common ID issuing organization side which is the data transmission destination and the company side which is the data transmission source. End up. As a technology related to this, a communication control device between a data transmission source and a data transmission destination is known to conceal the data transmission source from the transmission destination by changing the IP address of the data transmission source. (See, for example, Patent Document 2).

JP 2007-274388 A Japanese Patent No. 3875051

  However, the above assumptions and conventional techniques have the following problems. First, when pairing a common ID and a local ID is performed by collating the identity verification information held by the common ID issuing organization with the identity verification information held by the company, the identity verification information held by the company, for example, by moving, etc. When is no longer up-to-date, the common ID and local ID cannot be paired.

  Further, when the common key is divided and one is sent by a physical method and the other is sent by an electronic method, there is a possibility that a temporal overhead and a transportation cost may occur with respect to physical transportation. Furthermore, since the data itself is transmitted electronically without being divided, the encryption may be broken.

  In the concealment of the transmission source and the transmission destination, as long as the transmission source designates the transmission destination, it is obvious from the transmission source whether there is a person who matches the content inquired to the transmission destination.

  The present invention has been made in view of such circumstances, and even when the latest identity verification information held by the company is different from the latest identity verification information held by the ID issuing organization, the ID pair A technology that can perform ringing, prevents original data from being restored even if some data leaks during data transmission, and conceals each other from both the data transmission source and the data transmission destination It is an issue to provide.

  One means for solving the above problem will be described. That is, the present invention is a personal identification method in a personal information management device connected to a name identification device and a plurality of relay devices via a network. In the personal information management device, a personal identification information storage unit that stores a common ID and personal identification information in association with each other, and personal identification information that stores the common ID and the history of personal identification information in association with each other. And an update history storage unit. Then, a plurality of IDs obtained by dividing the common ID by the name identification device and concealing each of the IDs are received via the different relay devices, and the common ID is generated from the received plurality of IDs, and the generation Based on the common ID, the hashed identity verification information received together with the ID from the first relay device, the identity verification information storage unit, and the identity verification information update history storage unit. The verification result is generated, and the verification result is concealed and transmitted to the name identification device.

  According to the present invention, even when the identity verification information that is not up-to-date held by the company is different from the latest identity verification information held by the ID issuing organization, ID pairing can be performed and data transmission is in progress. Thus, even if some data is leaked, the original data cannot be restored, and can be concealed from both the data transmission source and the data transmission destination.

The figure which shows the network system in the Example of this invention. The figure which shows the hardware structural example of the personal information management apparatus 11 in the Example of this invention. The figure which shows the hardware structural example of the name collation apparatus 12 in the Example of this invention. The figure which shows the hardware structural example of the relay apparatuses 13 and 14 in the Example of this invention. The figure which shows an example of the process regarding the identity verification in the Example of this invention. The figure which shows the example of the content of the identification information table 601 in the identification information storage part 203 in the Example of this invention. The figure which shows the example of the content of the address update log | history table 701 in the identity verification information update log | history memory | storage part 204 in the Example of this invention. The figure which shows the example of the content of the name update log | history table 801 in the identification information update log | history memory | storage part 204 in the Example of this invention. The figure which shows the example of the content of the sex update log | history table 901 in the identity verification information update log | history memory | storage part 204 in the Example of this invention. The figure which shows the example of the content of the birth date update log | history table 1001 of the identification information update log | history memory | storage part 204 in the Example of this invention. The figure which shows the example of the content of the attribute information table 1101 in the attribute information storage part 310 in the Example of this invention. The figure which shows the example of the content of the common ID and local ID pair table 1201 in the common ID and local ID pair memory | storage part 311 in the Example of this invention. Sequence diagram regarding identity verification processing in an embodiment of the present invention

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a diagram showing an example of the overall configuration of a network system 1 to which the present invention is applied. The network system 1 is a system including a plurality of personal information management devices 11, a plurality of relay devices, and a plurality of name identification devices 12 connected to a network 15 such as the Internet. The present embodiment will be described by distinguishing the plurality of relay apparatuses from the relay apparatuses 13 and 14 by taking two as shown in FIG. The personal information management device 11 may be a device that is owned by a common ID issuing organization and has a common ID issuing function, or is owned by an organization that manages a common ID and identification information different from the common ID issuing organization, It is good also as a device which does not have a common ID issue function. In this embodiment, the personal information management apparatus 11 does not have a common ID issuing function. The name identification device 12 may belong to a private company such as a bank, or may belong to a public organization such as a police station or a tax office.

  FIG. 2 is a diagram illustrating a hardware configuration example of the personal information management apparatus 11. The personal information management apparatus 11 can be realized by a general computer, and includes a control unit 201, a network interface unit 202, an identification information storage unit 203, an identification information update history storage unit 204, a common ID restoration unit 205, an identification information collation. Unit 206 and identity verification information collation result concealment unit 207. Each unit is connected by a BUS 208 or the like.

  The network interface unit 202 transmits the IP packet transferred by the control unit 201 to the relay devices 13 and 14 via the network 15, and controls the IP packet received from the relay devices 13 and 14 via the network 15. It is transferred to 201, and is composed of a LAN (Local Area Network) card or the like. The personal identification information storage unit 203 stores a common ID and personal identification information. The identity verification information update history storage unit 204 stores an update history of identity verification information.

  The common ID restoration unit 205 is a program having a function of restoring a concealed common ID. The identity verification information matching unit 206 receives the identity verification information stored in the identity verification information storage unit 203 and the identity verification information change history stored in the identity verification information update history storage unit 204 and the relay devices 13 and 14. It is a program having a function of verifying the identity by collating with the identity verification information. The identity verification information verification result concealment unit 207 is a program having a function of concealing the result of the identity verification information verification unit 206. As used herein, concealment may be performed by hashing the verification result or dividing it into a plurality. The control unit 201 is composed of a CPU and the like, and executes each of the above programs. The control unit 201 stores the common ID and identification information in the identification information storage unit 203. The control unit 201 stores the update history of the identity verification information in the identity verification information update history storage unit 204. The control unit 201 restores the concealed common ID. The control unit 201 stores the identity confirmation information received by the network interface unit 202 from the name identification device 12 via the arbitrary relay device and the network 15, and the identity confirmation information storage unit 203 and the identity confirmation information update history storage unit 204. The identity verification information is collated using the identity verification information and its update history. The control unit 201 conceals the verification result of the personal identification information. The control unit 201 transmits the concealed personal identification information collation result to the relay apparatuses 13 and 14 via the network 15 using the network interface unit 202. At that time, the concealed collation result may be transmitted to one relay device, or when the collation result is divided, it may be transmitted to a plurality of relay devices. The function of each program may be realized by hardware such as LSI.

  FIG. 3 is a diagram illustrating a hardware configuration example of the name identification device 12. The name identification device 12 can be realized by a general computer, and includes a control unit 301, a network interface unit 302, an input unit 303, an output unit 304, a common ID concealment unit 305, an identity verification information hashing unit 306, and a routing information storage unit 307. , An identity verification information matching result restoring unit 308, an identity verification information matching result processing unit 309, an attribute information storage unit 310, and a common ID / local ID pair storage unit 311. Each unit is connected by a BUS 312 or the like.

  The network interface unit 302 transfers the IP packet transferred by the control unit 301 to the relay devices 13 and 14 via the network 15, and is configured by a LAN card or the like. The input unit 303 transmits external input to the control unit 301, and includes a keyboard, a mouse, and the like. The output unit 304 outputs information from the control unit 301 to the outside, and includes a display, a printer, or the like. The common ID concealment unit 305 is a program having a function of dividing a common ID into a plurality of common IDs and concealing each. The personal identification information hashing unit 306 is a program having a function of hashing personal identification information. The routing information storage unit 307 stores the IP addresses of the relay devices 13 and 14. The identity verification information verification result restoration unit 308 is a program having a function of restoring the verification result of the identity verification information. The identity verification information matching result processing unit 309 is a common ID / local ID pair storage unit when the identity verification is correctly performed based on the verification result of the identity verification information restored by the identity verification information matching result restoring unit 308. Reference numeral 311 denotes a program having a function of storing a pair of local ID and attribute information. The attribute information storage unit 310 stores a local ID and attribute information. The common ID / local ID pair storage unit 311 stores a common ID and a local ID pair. The control unit 301 is composed of a CPU and the like, and executes each of the above programs. The control unit 301 receives input information from the input unit 303. The function of each program may be realized by hardware such as LSI.

  The control unit 301 performs output to the output unit 304. The control unit 301 divides the common ID into a plurality of common IDs and conceals them. The control unit 301 hashes the personal identification information. The control unit 301 stores the IP addresses of the relay devices 13 and 14 in the routing information storage unit 307. The control unit 301 restores the verification result of the personal identification information received by the network interface unit 202. The control unit 301 stores the pair of the local ID and the attribute information in the common ID / local ID pair storage unit 311 when the personal identification is correctly performed based on the collation result of the personal identification information. The control unit 301 stores attribute information in the attribute information storage unit 310. The control unit 301 transmits a plurality of concealed common IDs and hashed personal identification information to the relay apparatuses 13 and 14 via the network 15 using the network interface unit 302. FIG. 4 is a diagram illustrating a hardware configuration example of the relay apparatuses 13 and 14. The relay devices 13 and 14 can be realized by a general computer and include a control unit 401, a network interface unit 402, a routing information storage unit 403, and a personal information management device information storage unit 405. Each unit is connected by a BUS 404 or the like. The relay apparatuses 13 and 14 may each include a routing information storage unit 403, or may include only one of them.

  The relay devices 13 and 14 may be installed in an organization or an organization that manages the name identification device 12 and the personal information management device 11, or are independent from the organization or organization that manages the name identification device 12 and the personal information management device 11. It may be installed in a tripartite organization or institution.

  The network interface unit 402 transfers the IP packet transferred by the control unit 401 to the personal information management device 11 and the name identification device 12 via the network 15, and is configured by a LAN card or the like. The routing information storage unit 403 stores the IP address of the personal information management device 11. The personal information management device information storage unit 405 stores information such as the speed of response from the personal information management device 11 and the number of personal identification information owned by the personal information management device 11. The control unit 401 is connected to the network interface unit 402 and the routing information storage unit 402, controls these components, and includes a CPU and the like. The control unit 401 stores the IP address of the personal information management apparatus 11 in the routing information storage unit 403. The control unit 401 transmits the concealed common ID and the hashed identification information to the personal information management apparatus 11 via the network 15 using the network interface unit 402. The control unit 401 uses the network interface unit 402 to transmit the concealed identity verification information collation result to the name identification device 12 via the network 15.

  FIG. 5 is a diagram illustrating an example of processing related to identity verification using the network system 1. The process relating to the personal identification starts from obtaining the common ID 501 and the personal identification information 502 from a person who already has the local ID 512. The common ID 501 and the personal identification information 502 may be acquired by the name collation apparatus 12 from a computer on the network 15 via the network 15, or the person himself / herself visits an organization that manages the name collation apparatus 12 and reports it. Based on the above, the administrator of the management organization may input via the input unit 303 of the name identification device 12 or the like.

  First, the common ID concealment unit 305 divides the common ID 501 into a plurality of common IDs, conceals them, and generates a common ID a 503 and a common ID b 506. Then, the person confirmation information hashing unit 306 hashes the person confirmation information 502 to generate person confirmation information [h] 507. These processes may be performed each time the common ID 501 and the personal identification information 502 are input, or may be processed in large quantities at once in a batch. Further, the common ID 501 may be divided into three or more. Next, based on the IP addresses of the relay apparatuses 13 and 14 stored in the routing information storage unit 307, the control unit 301 transmits the concealed ID a and ID b and the hashed personal identification information [h] 507. The relay devices 13 and 14 are determined, the relay device 13 has a common ID a 503, the message ID 513 for distinguishing the IP address of the relay device 14 and individual transmission information, and the relay device 14 has the common ID b and the identity verification information [h]. Message ID513 is transmitted. ID a may be transmitted to the relay device 14, ID b may be transmitted to the relay device 13, and the personal identification information [h] 507 may be transmitted to the relay device 13. Based on the IP address of the personal information management device 11 stored in the routing information storage unit 403, the transmission destination of the common ID a 503, the common ID b 506, and the identity verification information [h] 507 is determined. 14 transmits the IP address and message ID 513 of the personal information managing apparatus 11. When the intermediate device 13 determines the IP address of the personal information management device 11, one of the IP addresses of the personal information management device 11 stored in the routing information storage unit 403 may be selected at random, or the response You may preferentially select the fast identity verification information device 11 or the identity verification information management device 11 with a high number of identity verification information. The relay device 13 transmits the common ID a 503 and the message ID 513 to the personal information management device 11, and the relay device 14 also transmits the common ID b 506, the personal identification information [h] 507 and the message ID 513 to the personal information management device 11. The common ID restoration unit 205 restores the common ID 501 from the common ID a and the common ID b. For example, the original common ID 501 is “01234567”, and the divided common ID a 503 and common ID b 506 are “01132013”. Assuming “00102554”, the common ID restoring unit 205 restores the original common ID “01234567” by adding the common ID a503 “01132013” and the common ID b “00102554”. In this way, by dividing the common ID 501 and using different electronic paths, it is difficult for a third party to restore the original common ID 501 even if a part of the common ID 501 leaks during transmission. The common ID identity verification information matching unit 206 uses the common ID 501 restored by the common ID restoration unit 205 as a key, and the identity verification information 508 and the identity about the corresponding person from the identity verification information storage unit 203 and the identity verification information update history storage unit 204. A confirmation information update history 509 is obtained. Then, the person confirmation information collating unit 206 restores the person confirmation information [h] 507 to generate the original person confirmation information 502, and collates the generated person confirmation information 502 with the person confirmation information 508 and the person confirmation information update history 509. Then, a matching result 510 is generated. Specifically, the identity verification information matching unit 206 searches the identity verification information storage unit 203 using the common ID 501 as a key, and acquires the name 603, address 604, date of birth 605, and sex 606 from the corresponding record. In addition, the identity verification information matching unit 206 searches the identity verification information update history storage unit 204 using the common ID 501 as a key, acquires an address update history 703, a name update history 803, and a gender update history 903 from the corresponding records, and the name. 603, address 604, date of birth 605 are collated. As a result of the collation, if all match, the identity verification information verification unit 206 displays information indicating that the common ID 501 and the identity verification information 502 are correctly associated, the common ID 501, the name 603, the address 604, and the date of birth 605, A collation result 510 including is generated. On the other hand, if any of the information does not match, the identity verification information matching unit 206 generates a verification result 510 indicating that the common ID 501 and the identity verification information 502 are not correctly associated. The number of identification information used for verification may be added to the verification result 510. The identity verification information verification result concealment unit 204 receives the verification result 510 from the identity verification information verification unit 206, conceals the received verification result 510 to generate a confidential verification result 511, and generates the generated confidential verification result 511. And the message ID 513 are transmitted to the relay device 13 or 14. As an example of concealing the collation result 510, there is a method of hashing the common ID 501 when the collation is correctly performed and hashing the reverse of the ID of the common ID 501 when the collation is not correctly performed. It is done. Alternatively, the collation result 510 may be divided and transmitted to the relay apparatuses 13 and 14, and the collation result 510 may be reconstructed by the exclusive OR operation at the transmission destination. The relay device 13 or 14 receives the collation result 510 and stores the response time from the personal information management device 11 and the number of personal identification information used for collation in the personal identification information unit 206.

  The relay device 14 transmits the concealed verification result 511 and the message ID 513 to the name identification device 12. The identity verification information matching result restoring unit 308 restores the concealed matching result 511 and generates the original matching result 510. When the identity verification information matching result processing unit 309 receives the matching result 510 and confirms that the common ID 501 and the identity verification information 502 are correctly associated with each other, the name 603, the address 604, and the Using the date of birth 605 as a key, the local ID 512 of the corresponding person is acquired from the attribute information storage unit 310, and the acquired local ID is associated with the common ID included in the verification result 510 and the common ID / local ID pair storage unit 311. Register with. When the collation result 510 indicates that the common ID 501 and the personal identification information 502 are not correctly associated, the pair of the common ID 501 and the local ID 512 in the common ID / local ID pair storage unit 311 is not registered.

  FIG. 6 is a diagram illustrating an example of the content of the personal identification information table 601 in the personal identification information storage unit 203. In the identity verification information table 601, information indicating the common ID 602, name 603, address 604, date of birth 605, and gender 606 is stored in association with each other. Hereinafter, in the items of each table, the same reference numerals are used to indicate the same items.

  FIG. 7 is a diagram showing an example of the contents of the address update history information table 701 in the personal identification information update history storage unit 204. In the address update history information table 701, common ID 702, address update history 703, address application start date 704, and address application end date 705 are stored in association with each other.

  FIG. 8 is a diagram showing an example of the contents of the name update history information table 801 in the personal identification information update history storage unit 204. In the name update history information table 801, information indicating a common ID 802, a name update history 803, a name application start date 804, and a name application end date 805 is stored in association with each other.

  FIG. 9 is a diagram illustrating an example of the content of the gender update history information table 901 in the personal identification information update history storage unit 204. The gender update history information table 901 stores information indicating the common ID 902, gender update history 903, gender application start date 904, and application end date 905, respectively.

  FIG. 10 is a diagram illustrating a content example of the birth date update history information table 1001 in the personal identification information update history storage unit 204. The birth date update history information table 1001 is associated with information indicating a common ID 1002, a birth date update history 1003, an application start date 1004, and an application end date 1005. Remembered.

  FIG. 11 is a diagram showing an example of the contents of the attribute information table 1101 in the attribute information storage unit 310. In the attribute information table 1101, local ID 1102, name 1103, address 1104, date of birth 1105, and information indicating gender 1106 are stored in association with each other.

  FIG. 12 is a diagram showing an example of the contents of the common ID / local ID pair table 1201 in the common ID / local ID pair storage unit 311. The common ID / local ID pair table 1201 stores information indicating the common ID 1202 and the local ID 1203 in association with each other.

  FIG. 13 is a sequence diagram illustrating an example of processing related to identity verification using the network system 1. The name identification device 12 generates a common ID a and a common ID b from the common ID by the common ID concealment unit 305 (1301). The name collation apparatus 12 hashes the personal identification information (1302). The name identification device 12 determines the IP addresses of the relay devices 13 and 14 (1303). The name identification device 12 transmits the common ID a generated at 1301 and the IP address of the relay device 14 to the relay device 13 (1304), and the identification information and message ID hashed with the common ID b and 1302 generated at 1301 are received. The data is transmitted to the relay device 14 (1305). The relay device 13 determines the IP address of the personal information management device 11 (1306), and transmits the IP address and message ID of the personal information management device 11 determined in 1306 to the relay device 14 (1307). The relay device 13 transmits the common ID a and the message ID to the personal information management device 11 (1308). The relay device 14 transmits the common ID b, the hashed personal identification information, and the message ID to the personal information management device 11 (1309). The personal information management apparatus 11 restores the common ID from the common ID a and the common ID b (1310). The personal information management apparatus 11 collates the personal identification information from the hashed personal identification information from the relay apparatus 14, the personal identification information in the personal information management apparatus 11, and the update history of the personal identification information (1311). The personal information management device 11 conceals the personal identification information collation result (1312), and transmits the personal identification information collation result concealed in 1312 and the message ID to the relay device 14 (1313). The relay device 14 transmits the identification information collation result and message ID concealed in 1312 to the name identification device 12 (1314). The name identification device 12 restores the individual information collation result concealed in 1312 (1315), and performs processing according to the restoration result (1316). When the common ID and the personal identification information are correctly associated as the processing contents, the name identification device 12 registers the common ID / local ID pair in the common ID / local ID pair table 1201 (1317). As a result, when the common ID and the local ID are associated and registered in the common ID / local ID pair table 1201, the persons having the common ID and the local ID are the same person.

  The embodiment of the present invention has been described above. According to the above example, since past history information is also used for pairing of common ID and local ID, the latest identity verification information owned by the ID issuing organization and the latest identity verification information owned by the company are used. Even when the information is different, ID pairing can be performed. Further, since the common ID 501 is divided and different electronic paths are used, even if a part of the common ID 501 leaks during transmission, it is difficult for the third party to restore the original common ID 501. Furthermore, since a relay device is installed between the data transmission source and the data transmission destination and data is transmitted and received between the data transmission source and the data transmission destination via this relay device, the data transmission source and the data transmission destination You can hide each other from both sides.

  In the above-described embodiment, the common ID concealment unit 305 divides the common ID into a plurality of common IDs and conceals them. However, the common ID may be divided after concealing the common ID. In addition, this invention is not limited to the said Example, A various change is possible in the range which does not deviate from the summary.

DESCRIPTION OF SYMBOLS 11 ... Personal information management apparatus, 12 ... Name collation apparatus, 13, 14 ... Relay apparatus, 15 ... Network, 201, 301, 401 ... Control part, 202, 302, 402 ... Network interface unit 203... Identity verification information storage unit 204... Identity verification information update history storage unit 205... Common ID restoration unit 206. Confirmation information collation result concealment unit, 303 ... input unit, 304 ... output unit, 305 ... common ID concealment unit, 306 ... identity confirmation information hashing unit, 307, 403 ... routing Information storage unit, 308... Identity verification information matching result restoration unit, 309... Identity verification information matching result processing unit, 310... Attribute information storage unit, 311 .. common ID / local ID pair storage unit.

Claims (8)

A personal identification method in a personal information management device connected to a name collation device and a plurality of relay devices via a network,
In the personal information management device, a personal identification information storage unit that stores a common ID and personal identification information in association with each other, and personal identification information that stores the common ID and the history of personal identification information in association with each other. An update history storage unit,
A plurality of IDs obtained by dividing the common ID by the name identification device and concealing each of them are received via the different relay devices,
The common ID is generated from the received plurality of IDs,
Based on the generated common ID, the hashed identity verification information received together with the ID from the first relay device, the identity verification information storage unit, and the identity verification information update history storage unit, the identity verification information Match
Generate a match result,
Concealing the verification result and sending it to the name identification device;
An identity verification method characterized by that. The personal information management device searches the identity verification information storage unit and the identity verification information update history storage unit based on the common ID, acquires the identity verification information from each corresponding record, and obtains the identity verification information. If collation and match, information indicating that the common ID and the identity verification information are correctly associated, generating a verification result including the common ID and the identity verification information,
The identity verification method according to claim 1, wherein: Personal identification method in personal information management device, name identification device connected via a network with a plurality of relay devices,
The name identification device includes a routing information storage unit that stores an IP address of the relay device, and an attribute information storage unit that stores a local ID and identification information in association with each other,
Divide and conceal the common ID to generate the first ID and the second ID,
Hash identity verification information,
Obtain the IP addresses of the first relay device and the second relay device from the storage unit,
Based on the acquired IP address of the second relay device, the generated first ID and the IP address of the first relay device are transmitted to the second relay device,
Based on the IP address of the first relay device, the second ID and the hashed identity verification information are transmitted to the first relay device,
From the personal information management device, the information indicating that the common ID and the identity verification information are correctly associated, the concealed verification result including the common ID and the identity verification information is received,
Restore the matching result,
Obtain the local ID based on the identity verification information and the attribute information storage unit obtained from the restored verification result,
Register the common ID acquired from the restored collation result and the acquired local ID in the common ID / local ID pair storage unit in association with each other,
An identity verification method characterized by that. Name identification device, personal information management device connected via a network with a plurality of relay devices,
An identity verification information storage unit for storing the common ID and the identity verification information in association with each other;
An identity verification information update history storage unit that stores the common ID and the history of the identity verification information in association with each other;
A plurality of IDs obtained by dividing the common ID by the name identification device and concealing each of them are received via the different relay devices,
The common ID is generated from the received plurality of IDs,
Based on the generated common ID, the hashed identity verification information received together with the ID from the first relay device, the identity verification information storage unit, and the identity verification information update history storage unit, Match, generate match results,
A control unit that conceals the verification result and transmits the result to the name identification device,
A personal information management device characterized by that. The control unit searches the identity verification information storage unit and the identity verification information update history storage unit based on the common ID, acquires the identity verification information from each corresponding record, and collates the obtained identity verification information with each other. If they match, the information indicating that the common ID and the identity verification information are correctly associated, and generating a matching result including the common ID and the identity verification information.
The personal information management device according to claim 4. A personal information management device, a name identification device connected to a plurality of relay devices via a network,
A routing information storage unit for storing the IP address of the relay device;
An attribute information storage unit that stores a local ID and identification information in association with each other;
Divide and conceal the common ID to generate the first ID and the second ID,
Hash identity verification information,
Obtain the IP addresses of the first relay device and the second relay device from the storage unit,
Based on the acquired IP address of the second relay device, the generated first ID and the IP address of the first relay device are transmitted to the second relay device,
Based on the IP address of the first relay device, the second ID and the hashed identity verification information are transmitted to the first relay device,
From the personal information management device, the information indicating that the common ID and the identity verification information are correctly associated, the concealed verification result including the common ID and the identity verification information is received,
Restore the matching result,
Obtain the local ID based on the identity verification information and the attribute information storage unit obtained from the restored verification result,
A control unit that registers the common ID acquired from the restored collation result and the acquired local ID in the common ID / local ID pair storage unit in association with each other.
A name identification device characterized by that. Use two or more IDs instead of the first ID and the second ID,
The identity verification method according to claim 3, wherein: Use two or more IDs instead of the first ID and the second ID,
The name collation apparatus of Claim 6 characterized by the above-mentioned.

Images