JP2013025571A - Card issue system and card issue method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a card issue system for issuing a card in a short time by automating procedures ranging from user's card application through principal confirmation to card issue to achieve efficiency.SOLUTION: Disclosed is the card issue system including: an input terminal for inputting application data; a principal confirmation system having authenticity determination means for determining authenticity on whether or not principal confirmation data are authentic; a management system for, when it is determined that the principal confirmation data are authentic from the authenticity determination result received from the principal confirmation system, generating issue data by converting the application data into recording format data of a recording format having a card standard; and a card issue terminal for writing issue data.

Description

  The present invention relates to a card issuing system and a card issuing method that can be used for a card issuing operation. In particular, the present invention relates to a card issuing system that automates a series of operations such as application form creation, applicant identification, and card issuance.

  Conventionally, for example, a credit card, a cash card, and the like are generally issued by a large-scale card issuing system because high security is required.

  The card issuer performs admission screening (credit screening if necessary) based on the application form (application form) for credit cards and cash cards entered by users who have been verified, and the screening results are acceptable. If there is, the process proceeds to the following card issuing process.

  First, the card issuing company creates user personal data (input data to be recorded on the card) and provides it to the card issuing system. The card issuing system is generally managed by a printing company other than the card issuing company, and includes a large card issuing machine that can issue a large number of cards at a time. The card issuing system edits signature data (card unique data) for card authentication and personal data provided by a card issuing company, and issues a card written on a magnetic tape or IC chip. The issued card is generally distributed by registered mail for each user in order to identify each user individually.

  Specifically, as an example, the card is issued in the configuration shown in FIG. 2 as in the flow shown in FIG. That is, a user submits a card application form for opening an account together with identification information to the counter at a store counter such as a financial institution. The application form is a copy slip of 4 to 5 sheets for the person, bank copy, passbook creation, card creation, etc. The information on the first sheet may not be successfully copied until the fifth sheet.

A driver's license or the like is included as identification information. After confirming the identity of the user and the items on the application form, the application data is input to the terminal at the window and sent to the management system. The management system creates card data, issues a card at the card issuing terminal, and mails it to the user by mail. The card issuing system often performs the data creation for the card, the card issuance, and the card sending to the user.
Note that personal information input from a store input terminal may be examined by a card issuer's management server such as a financial institution before transmitting the data to a management server that creates card data.

  Such a conventional card issuing method is a large facility and is not suitable for issuing a small number of cards. In addition, it takes a considerable amount of time until an actually issued card is delivered to each user. From a business point of view, it is desirable that a single card can be automatically and immediately issued in response to a request from the user at the time of payment at a store or the like. However, the card issuance is difficult to realize simply by installing a small card issuing machine in a store or the like because it requires identity verification or issuance with a high security function. In addition, when issuing a card to be used as a credit card, a credit examination procedure is also required.

Among such demands, a series of credit screening necessary for issuing an IC card and conversion of predetermined input data into recording format data in the IC card standard recording format in accordance with a user's application and recording on the IC card There has been proposed an IC card issuing device that can execute the above procedure while ensuring a high level of security and can immediately issue an IC card of one sheet (Patent Document 1).

However, this is related to the card issuance after the application is received, and the person in charge at the store tells the account opening request form (application form) and identification document in the form of a copy slip that the user wrote and submitted by hand. Based on the above, there is a problem that it takes time until issuance because identity verification and account opening information have been created.
In addition, there is a possibility that problems such as input mistakes and insufficient copying of the copy slip may result in unclear printing.

JP 2003-203207 A

  It is an object of the present invention to provide a card issuing system that can issue a card in a short time by automating and improving efficiency from user card application to identity verification and card issuance.

  As means for solving the above-mentioned problems, the present invention provides a card issuing system having at least an input terminal, a management system, an identity verification system, and a card issuing terminal, and the input terminal is necessary for issuing a card. Application data input means for inputting data; identity verification data input means; application data transmission means for transmitting application data to the management system; and identity verification data transmission means for transmitting identity verification data to the identity verification system. The confirmation system is a system for managing identity verification data received by the identity verification data receiving means for receiving the identity confirmation data from the input terminal, an authenticity judging means for judging whether the identity confirmation data is authentic, and an authentication result determined by the authenticity judging means. Application for receiving the application data from the input terminal. Receiving means, authenticity determination result receiving means for receiving the authentication result from the identity verification system, and converting the application data into recording format data in the card standard recording format when the authentication result is determined to be authentic. Issuance data generating means for generating issuance data, issuance data transmitting means for transmitting the issuance data to the card issuance terminal, and issuance data receiving means for receiving the issuance data from the management system. An issuance data writing means for writing issuance data to a target card is provided.

  Also, the identity verification data input means of the input terminal includes an identity verification material reading unit that reads the identity verification material or a copy of the identity verification material, and an identity verification data generation unit that generates identity verification data from the read identity verification material. And authenticity determination means of the personal identification system includes an authenticity determination logic template data relating to the character and image layout of the personal verification material, and an image analysis unit that analyzes the personal verification data and obtains the layout of the character and image. It further comprises a determination processing unit that determines authenticity by comparing and collating the character / image layout of the personal identification material with the authenticity determination logic template data.

  Further, the authenticity determination logic template data corresponds to an issuer or issuer body of identity verification material, and the authenticity determination means has means for recognizing the issuer or issuer body from the identity verification data, It is characterized by collating the layout of the personal identification material and the authenticity determination logic template data using the authenticity determination logic template data stored corresponding to the issuing mother body.

  Further, the logic template data includes font data used for characters described in the identity verification material, the image analysis unit recognizes a font used for characters of the identity verification data, and the determination processing unit includes: It is characterized by collating and determining the font used for the character of the recognized identity verification data and the font data of logic template data.

  In addition, the logic template data includes a date condition of the identity verification material, the image analysis unit recognizes the date of the identity verification data, and the determination processing unit recognizes the date of the recognized identity verification data and a logic It is characterized by collating the date of template data.

  A card issuance method using at least an input terminal, a management system, an identity verification system, and a card issuance terminal, and an application data input step for inputting data necessary for card issuance to the input terminal; An identity verification data input step for inputting data, an application data transmission step for transmitting application data from the input terminal to the management system, an identity verification data transmission step for transmitting identity verification data to the identity verification system, and the identity verification system as an input terminal A personal identification data receiving step for receiving the personal identification data from the personal identification system, an authenticity determining step for determining whether the personal identification data is authentic in the personal identification system, and an authentication result determined by the authenticity determining means. Authentication result transmission step for transmitting to the management system, and management system The application data receiving step for receiving application data from the input terminal, the authentication system receiving step for receiving the authentication result from the identity verification system, and the application data when the authentication result is determined to be authentic. An issuance data generation step for generating issuance data by converting into record format data in a card standard recording format, an issuance data transmission step for transmitting issuance data to the card issuance terminal, and the card issuance terminal is transmitted from the management system. An issuance data receiving step for receiving issuance data, and an issuance data writing step for writing the issuance data to an issuance target card.

According to the card issuing system of the present invention, since the user card application, the identity verification and the card issuing can be automated, the card can be issued in a short time.
In addition, it is possible to solve problems such as application data input errors and insufficient copying of copy slips, resulting in unclear printing.

It is the flowchart which showed an example of the conventional card issuing system. It is the block diagram which showed an example of the conventional card issuing system. It is the flowchart which showed an example of the card issuing system of this invention. It is the block diagram which showed an example of the card issuing system of this invention. It is the sequence diagram which showed an example of the card issuing system of this invention. It is the block diagram which showed an example of the identity verification system used for this invention. It is the sequence diagram which showed an example of the authenticity determination means used for this invention. It is a figure which shows an example of the authenticity determination logic of the character arrangement used for this invention. It is a figure which shows an example of the authenticity determination logic template data of the character arrangement used for this invention. It is a figure which shows an example of the personal identification material used for this invention. It is a figure which shows an example of the authenticity determination logic template data used for this invention.

3 is a flowchart showing an example of the card issuing system of the present invention. FIG. 4 is a conceptual diagram showing an example of the card issuing system of the present invention. FIG. 5 shows an example of the card issuing system of the present invention. FIG.
Hereinafter, a description will be given with reference to FIGS. 3 and 4.

In a store such as a bank, an input terminal for installing application data for a card application by a user or the like is installed. This input terminal is equipped with a function of reading the personal identification material (or a copy thereof). The application data input unit and the identity verification reading unit may be installed separately.
The input terminal includes a storage unit, a calculation unit, a monitor, a keyboard, and communication means (such as an interface that can communicate with a network) that can exchange data with an external system.
Examples of the card include a magnetic card, a contact or non-contact IC card, a card equipped with magnetism and an IC, and a dual IC card capable of contact and non-contact communication. Card applications include cash cards, credit cards, bank cards, debit cards, point cards, gift cards, membership cards, and the like.

The application data may vary depending on the card, and examples include items such as “name, date of birth, gender, address, telephone number, and other questionnaires”.
As the application data input means, an input means can be used using a keyboard. Further, when a plurality of types of cards are supported, the card type can be designated and input here.
Further, as the application data input means, means for transmitting information previously input to a portable terminal owned by the user to the input terminal by communication means such as IC or infrared may be used.

In addition, at the time of input of identity verification material, which will be described later, items that can be used for application data among the read identity verification information may be automatically input. Specifically, the input terminal may be provided with an OCR function, and text data may be automatically input from the read identity verification material, or data converted into text by the OCR function provided in the identity verification system described later may be transmitted. Depending on the situation, automatic input may be performed.
In this case, after the automatic input, it is possible to confirm and correct the content on the confirmation screen or to add additional items that are missing.

  Further, the input terminal is provided with identity verification data input means. The identity verification data input means includes, for example, an identity verification material reading unit that can read identification data such as a driver's license, insurance card, Juki card, passport, and other ID card or a copy thereof. A so-called scanner using an optical reading technique can be used for the identity verification material reading unit. The read identity verification material is converted into a format such as image data by an identity verification data generation unit, and identity verification data is generated.

The input application data and identity verification data are transmitted to the management system by the application data transmission means, and transmitted to the identity verification system by the identity verification data transmission means.
A wired or wireless communication line interface can be used as the application data transmission unit and the identity verification data transmission unit.

The management system is a system that generates card issuance data and manages card data, and the identification system is a system that determines the authenticity of the identification data. The management system and the identity verification system are installed outside the store, and are connected to the input terminal and card issuing terminal of each store via a network. The management system and the identity verification system have an interface capable of communicating with the network, and can transmit and receive data.
For example, the management system and the identity verification system may be installed in an external business operator such as a card issuer. The external system may be connected to a system such as a financial institution.
The identity verification system includes identity verification data receiving means for receiving identity verification data from an input terminal, authenticity determination means for determining whether the identity verification data is authentic, and authentication results determined by the authentication means. It has an authenticity determination result transmitting means for transmitting to the management system.
The authenticity determination means determines whether or not the received identity verification data is authentic. The determination may be performed, for example, by converting the personal identification data into text using the input terminal or the personal identification system and comparing it with the data of the applicant registered in advance, or using authenticity determination logic template data described later. .
The identity verification system may be integrated with the input terminal. In the case of integration, data can be transmitted and received by an internal circuit.

The card issuing terminal is installed in a store such as a bank like the input terminal, and when the user applies for the card, the card issued on the spot can be received after a certain period of time.
The card issuing terminal has an interface capable of communicating with the network, can receive issued data from the management system, and can write the received issued data to the card. Moreover, it has a data writing means and a printing means, a sealing (sealing sticking) means, an embossing means, and a protective film sticking means as needed.

FIG. 5 is a sequence diagram showing an example of a flow from application to issuance of a card according to the present invention. Hereinafter, a description will be given with reference to FIG.
Conventionally, the application form and identity verification data that the user has completed in advance or on the spot are applied to the counter, the identity of the store is verified, the application data is entered into the store terminal, and the card is issued by the card issuing company. However, by using the card issuance system of the present invention, there is no input error due to misreading of characters entered by the store staff, and the card can be issued on the spot. Become speedy. Further, when a copy slip is used, there is no input error due to misreading of characters due to the fact that the first piece of information cannot be copied successfully after the second piece.

In FIG. 5, first, a user or the like inputs application data and identification data using an input terminal in a store or the like. When the input of the predetermined items is completed, the application data and the personal identification data generated from the personal identification data are transmitted to the management system and the personal identification system, respectively.
In the management system, application data can be checked.
In the identity verification system, as will be described in detail later, authenticity determination is performed from the identity verification data.

In the management system, if the authentication result is received from the identity verification system as a result of the identity verification process, it is determined that the identity verification material 2 is correct, and no error occurs in the application data check. Is generated.
Depending on the type and use of the card, a credit check or a blacklist check may be performed. These checks may have check data and programs in the management system in advance, or may be performed by communicating with an external system.

Edit the issued data according to each ticket type in the data editing process. In addition, an issuance preparation instruction may be issued to an issuance terminal at a storefront or the like at this timing.
Next, issuance data is edited by data editing processing, and card issuance data is generated by data generation processing. Here, examples of the card include a magnetic card and an IC card. Data necessary for issuing each card is generated and added, and the card issuance data is edited. If the card is issued for a plurality of types and for a plurality of uses, the issuance data is edited and the issuance data is generated according to the designated card.

When the issuance data is generated, the issuance data is transmitted to the issuing terminal.
When the issuance data is received, the issuance data is written in a card set in the issuing terminal in advance. In addition, when there are a plurality of types of cards, a designated card can be automatically selected. For example, the designated card can be selected by determining whether it is a desired card from the magnetic data of the set card or the data recorded in the IC.
Also, if necessary, the issue data can be written after magnetic encoding and IC encoding. Further, after the issue data is written, printing / seal sticking can be performed as necessary.
This will be described in more detail with reference to an example of a card having magnetism and an IC. For example, an issuing terminal receives image data of card issuing data and selects a card from the card issuing data. Thereby, the remaining amount of unissued cards stocked in the light emitting terminal is confirmed to determine whether or not it can be issued. When it is determined that issuance is possible, magnetic encoding and IC encoding are sequentially performed and issuance data is written. After that, printing (print) / sticker printing prints the data acquired in the image data of the issued data. In printing, a protective layer can be formed at the same time. After printing, a sticker can be applied.

When these series of operations are completed, the card issuance is completed.
When the issuance is completed, the issuance result can be transmitted to the management system. Further, the issuance result can be transmitted to a card issuer system such as a financial institution.
The issued card is discharged from the card outlet of the issuing terminal and can be received by the user.
By doing in this way, even if it is a card | curd which requires identity verification, it can be performed in a very short time of about several minutes to about ten minutes from application to receipt of the issued card | curd. Even if a card is defective, it can be reissued immediately without the hassle and time of returning the card and re-sending a normal card as in the past. Furthermore, since the card can be issued after the user has applied for without going through a third party such as a person in charge or a delivery company, it is possible to prevent mistakes and fraud of the third party.

Next, authenticity determination means using the person confirmation system 3 will be described.
The authenticity determination means can use the authenticity determination logic template data registered in the identity verification system in advance and verify the authenticity by comparing with the analyzed identity verification data.
The authenticity determination logic template data includes data relating to the character and image layout of the identity verification material.
The identity confirmation material can obtain the layout of characters and images by the analysis means, and the character and image layout of the obtained identity confirmation material is verified by the verification means by verifying the authenticity determination logic template data. If they do not match, it is determined that they are not authentic.
Further, without using the authenticity determination logic template data, a name and a unique number may be registered in the person confirmation system in advance, and the name and unique number may be read from the person confirmation data and collated.

FIG. 6 is a schematic functional block configuration diagram centering on the identity verification system 3. This will be described in detail below with reference to FIG.
The input terminal 1 includes a reading unit 11 such as a scanning system. The identity verification system 3, the input terminal 1, the issuing terminal 6, and the management system 7 each have an interface capable of transmitting and receiving data, and are connected by a network 5. The network 5 is the Internet or a LAN (Local Area Network), regardless of whether it is wired or wireless.
The identification document 2 such as a driver's license is read by the reading unit 11 to capture information such as the layout of characters and images, name (kanji, phonetic kana, English characters), date of birth, address, postal code, etc. While being stored as confirmation data, it is transmitted to the person confirmation system 3 together with the application data via the network.

The identity verification system 3 has authenticity determination means. As the authenticity determination means, for example, an authenticity determination logic template editing unit 31, an authenticity determination logic template data storage unit 32, a comparison source font / image storage unit 33, an encryption processing unit 34, an HSM 35, a determination target scanning image cache unit 41, an image An analysis unit 42, an OCR engine 43, an acquired character information acquisition image recording unit 44, an authenticity determination processing unit 45, an authenticity determination result recording unit 46, and an authenticity determination tendency analysis learning AI 47 are provided. The identity verification system 3 may be a stand-alone system using a computer or the like, or may be provided as an ASP (Application Service Provider) or the like to a business operator or the like via the network 5.

The authenticity determination logic template editing unit 31 reads out the appearances (printed surfaces) of a plurality of identity verification materials 2 to generate logic for authenticity determination, and prints characters, images, seals, It analyzes the layout such as the arrangement of symbols and the like, the position, and the character font, and acquires authentication information regarding the layout. In addition, the administrator of the identity verification system 3 collects and acquires the known authentication information regarding the layout of the identity verification material 2, the logical conditions of the information described in the identity verification material 2, the mathematical expression calculation conditions, and the like. The information is input to the determination logic template editing unit 31, and the authentication determination logic template editing unit 31 can accept the authentication information as the layout determination information. The authenticity determination logic template editing unit 31 generates authenticity determination logic based on the acquired authenticity determination information, and uses XML (Extensible Markup Language) or the like to identify the type of the identity verification document 2, the issue mother body, the issue establishment, the issue generation, Template authentication logic for each minimum category such as issue date.

  The authenticity determination logic template storage unit 32 stores the authenticity determination logic template generated by the authenticity determination logic template editing unit 31. The comparison source font / image storage unit 33 stores information on the font and image of the identity verification material 2 that is the comparison source. For example, the comparison source font / image storage unit 33 stores information on the type, color, and size of the font described in the identity verification material 2, information on the color, contrast, and brightness of the image.

  The encryption processing unit 34 encrypts information stored in the authenticity determination logic template storage unit 32 and the comparison source font / image storage unit 33 using an HSM (Hardware Security Module) 35. The HSM 35 is a module that generates and manages secret information necessary for encryption such as a secret key. The HSM 35 may be a commercially available product, and for example, HSM 35 that satisfies the standards of FIPS (Federal Information Processing Standardization) 140-2 Level 3 or higher can be applied.

  The determination target scanning image cache unit 41 temporarily stores the identity verification data 21 that is transmitted from the scanning system 24 and is subject to authentication determination, and transmits it to the image analysis unit 42. Here, an example in which the identity verification data 21 scanned and imaged by the scanning system 24 as described above is transmitted to the identity verification system 3 and stored is described. However, the identity verification data 21 is scanned and stored in a storage medium such as a CD (Compact disk). The stored identity verification data 21 may be read by the identity verification system 3 and stored in the determination target scanning image cache unit 41.

The image analysis unit 42 analyzes the image data 5 stored in the determination target scanning image cache unit 41, and uses external features (layout) such as the arrangement and position of characters, images, seals, symbols, and the like as authenticity determination target information. It is detected and transmitted to the OCR engine 43 and the authenticity determination processing unit 45. The OCR engine 43 performs recognition processing of the character arrangement and image detected by the image analysis unit 42 and transmits the recognition result to the acquired character information acquisition image recording unit 44 and the authenticity determination processing unit 45. In this way, the identity verification data 21 imaged by the image analysis unit 42 and the OCR engine 43 is analyzed.

  The acquired character information acquired image recording unit 44 notifies the management system 7 of the recognition results regarding the characters and images recognized by the OCR engine 43 and stores them. The authenticity determination processing unit 45 recognizes the authenticity determination target information related to the layout such as the arrangement and position of characters, images, seals, symbols and the like analyzed by the image analysis unit 42 and the characters and images recognized by the OCR engine 43. Based on the result, the authenticity determination logic template to be applied to the authenticity determination of the target identity verification material 2 is read from the authenticity determination logic template storage unit 32, and the authenticity determination processing, that is, whether the scanned identity verification material 2 is authentic. It is determined whether it has been forged.

  Further, the authenticity determination processing unit 45 reads out the comparison source font or comparison source image of the subject identification document 2 from the comparison source font / image storage unit 33 and compares it with the recognition result read by the OCR engine 43. The authentication of the identity verification data 21 is determined, that is, whether the scanned identity verification data 2 is genuine or forged.

  The authenticity determination result recording unit 46 stores the determination result of the authenticity determination processing unit 45 in its own storage area. Further, the authentication determination result recording unit 46 notifies the determination result of the authentication determination processing unit 45 to the scanning system 24 (operator). Further, the authenticity determination result recording unit 46 notifies and stores the determination result of the authenticity determination processing unit 45 in the management system 7.

  The authenticity determination tendency analysis learning AI 47 performs a trend analysis of the authenticity determination target information based on the authenticity determination result of the authenticity determination processing unit 45. The authenticity determination tendency analysis learning AI 47 detects the authenticity determination logic having a high authenticity determination error frequency from the authenticity determination logic templates stored in the authenticity determination logic template storage unit 32, corrects the correction if necessary, and determines the authenticity. Re-store in the logic template storage unit 32.

  Next, the operation of the personal identification system 3 will be described. FIG. 7 is a diagram illustrating an example of the flow of registration processing and authentication processing of the authenticity determination logic template of the identity verification system 3. In FIG. 7, the provider of the identity verification service 2 for the identity verification material 2 collects various types of the identity verification logic of the identity verification material 2 and inputs them to the identity verification system 3 (ST101). The authenticity determination logic template editing unit 31 of the identity verification system 3 accepts the input of the authenticity determination logic, makes a template of the authenticity determination logic for each minimum category such as the issuing base and the issue time (ST102), and authenticates the determination logic template storage unit 32. (ST103). Here, the authenticity determination logic template is encrypted by the encryption processing unit 34 using the HSM 35 and stored in the authenticity determination logic template storage unit 32.

  In the collection of the authenticity determination logic in ST101, the authenticity determination service provider collects, analyzes and inputs various samples of the identity verification material 2. Further, it is possible to perform scanning processing including OCR of the sample of the identity verification material 2 collected by the authenticity determination service provider, to analyze and input it. An example of the authentication service provider is an external business operator such as a card issuer. In addition, depending on the type of the identity verification document 2, the issuing body of the identity verification document 2 may publish and provide the authenticity determination logic as the authenticity determination service provider. It is also possible to input to 32.

  FIG. 8 is a diagram illustrating an example of the authenticity determination logic. FIG. 9 is a diagram illustrating an example of authenticity determination logic template data obtained by making the authenticity determination logic illustrated in FIG. 8 into a template. The authenticity determination logic shown in FIG. 8 is, for example, authenticity determination logic for determining the character arrangement of the first and last names described in the full name entry column of the insurance card that is the personal identification material 2.

  Here, the authentic logic shown in FIG. 8 is that the issuing body that issued this insurance card is “XX Health Insurance Association”, and in the name string, “last name” is “2 characters” and “name” is “ In the case of “2 characters”, the character arrangement of the first and last names is “space, character, two spaces, characters, three spaces, characters, two spaces, characters, spaces (in FIG. 9, a white circle indicates a space and a black circle indicates a character. ””, Indicating that the number of spaces between characters is “1, 2, 3, 2” from the left end. In addition, when “Last name” is “2 characters” and “First name” is “3 characters”, the character array of the last name is “Space, character, space, character, three spaces, character, space, character, space, character. , “Space”, indicating that the number of spaces between characters is “1, 1, 3, 1, 1” from the left end. If the character arrangement is determined by the issuing body of the identity verification document 2, authenticity determination logic is input corresponding to the issuing body as shown in FIG.

  The authenticity determination logic template data 8 shown in FIG. 9 is an authenticity determination logic template in which the authenticity determination logic related to the character arrangement shown in FIG. In the authenticity determination logic template 8, reference numeral 81 indicates that the insurance card issuance base is “XX health insurance association”, reference numeral 81 is a character string in the name entry column, “last name” is “2 characters”, When “name” is “2 characters”, it indicates that the character array is “× ○ ×× ○ ××× ○ ×××” (× indicates a space, ○ indicates a character), If the name is “2 characters” and the “name” is “3 characters” in the character string in the name entry field, it indicates that the character array is “× ○ × ○ ×××××××” .

  Next, the determination process of the personal identification material 2 by the personal identification system 3 will be described. In FIG. 7, the identity verification material 2 that is the object of authenticity determination is scanned by the reading unit 11 of the input terminal (ST 201), and the imaged identity verification data 21 is transmitted to the identity verification system 3. The determination target scanning image cache unit 41 of the personal identification system 3 captures the personal identification data 21 (ST202) and transmits it to the image analysis unit 42. The image analysis unit 42 analyzes the external feature (layout) of the personal identification data 21, and the OCR engine 43 identifies characters and images of the personal identification data 21 (ST203).

  In ST203, for example, the image analysis unit 42 detects the feature point of the image of the person confirmation data 21, detects the position and size of the image or character string in the person confirmation data 21 using the feature point as a base point, and performs OCR. The engine 43 refers to the position and size of the detected image or character string, recognizes character recognition of the character string, font typeface, color, size recognition, image color (used in the identification document 2). Etc.).

  The analysis result (authentication determination target information) of ST203 is notified to the authentication determination processing unit 45. The authenticity determination processing unit 45 uses the analysis result of the notified identity verification data 21 and the authenticity determination logic template data stored in the authenticity determination logic template storage unit 32 to verify the identity verification data 21, that is, the identity verification data 2. Authenticity is determined (ST204). As a determination method, there is a method of determining the authenticity by checking the matching of the authenticity determination logic template such as the character string, the position of the image, and the array and the analysis result thereof.

  Further, when the determination information is insufficient, the authentication determination processing unit 45 reads out the character information described in the personal identification material 2 obtained from the analysis result, and stores it when issuing the personal identification material 2 from the management system 7. It is also possible to read out the information of the owner of the identity verification material 2 that has been made and compare both of them for determination. The identity verification system 3 or the management system 7 stores past determination history and blacklist database information regarding the owner of the identity verification material 2, and the authentication processing unit 45 obtains the identity obtained from the analysis result. It is also possible to read the character information described in the confirmation material 2 and make the determination with reference to the past determination history and information of the black list database.

  Returning to FIG. 7, when the authenticity determination processing unit 45 determines that the personal identification data 21 is “true (genuine)” in ST204, the authenticity determination processing unit 25 notifies the management system 7 of the determination result. At this time, the management system can confirm the determination result (ST205). In the management system 7, when the personal identification material 2 is correct, the process enters the generation process of the issued data from the application data.

When the authenticity determination processing unit 45 determines that the personal identification data 21 is “authentic (i.e., a forged product)” in ST204, it is assumed that the management system does not generate issuance data. An error notification may be transmitted to the input terminal and the issuing terminal.
Further, the determination result may be stored in the identity verification system or the management system (ST207).

  The authenticity determination trend analysis learning AI 47 accepts input of information regarding an error in the determination result even after the determination result (ST206), and updates and stores the authenticity determination logic template data if necessary (ST207). The authenticity determination tendency analysis learning AI 47 may notify the administrator or the like of reviewing the authenticity determination logic when there are many errors in the authenticity determination of the same character string in the same type of identity verification material 2. In addition, if there are many judgment errors in the identity verification document 2 of the same issue mother body, the layout of the identity verification document 2 may be changed, so the identity verification system 3 notifies the administrator or the like to that effect. The administrator can confirm the authentication logic with the issuing body.

Next, a description will be given of the determination by matching of the analysis result of the authenticity determination logic template data and the identity verification data 21 by the authenticity determination processing unit 45 in ST204 of FIG.
FIG. 10 is a diagram illustrating an example of the identity verification material 2 to be determined. An example of the identification document 2 shown in FIG. 10 is an employee card 9 with a photograph. The employee ID 9 is printed with an office name 91, a name 92, an employee number 93, a face image 94, an expiration date 95, and the like.

  When the employee ID card 9 is scanned by the reading unit 11 of the input terminal, the imaged identity verification data 21 is transmitted to the identity verification system 3, analyzed by the image analysis unit 42, and recognition of characters and images by the OCR engine 43. Is done. The analysis result and the recognition result are notified to the authenticity determination processing unit 45.

  The authenticity determination processing unit 45 reads, from the authentication result of the establishment name 91 by the OCR engine 43, the authenticity determination logic template whose issue base is the establishment name 91 from the authentication determination logic template storage unit 12. FIG. 11 is a diagram showing an example of an authenticity determination logic template for the personal identification material 2 shown in FIG. Reference numeral 101 in the authenticity determination logic template shown in FIG. This means that the authenticity determination logic template shown in FIG. 11 is an authenticity determination logic template for determining the authenticity of the employee card 9 of the employee belonging to the establishment name 91.

  The authenticity determination processing unit 45 matches the analysis recognition result of the personal identification data 21 of the employee card 9 with the authenticity determination logic template shown in FIG. The authenticity determination processing unit 45 checks whether or not the recognition result of the position of the name 92 and the character arrangement shown in FIG. 10 matches the code 102 of the authenticity determination logic template. Reference numeral 102 of the authenticity determination logic template is an authenticity determination logic template having a character arrangement similar to that described with reference to FIG.

Next, the authenticity determination processing unit 45 determines whether or not the recognition result of the personal identification data 21 of the employee number 93 shown in FIG. 10 matches the code 103 of the authenticity determination logic template shown in FIG. Reference numeral 103 of the authenticity determination logic template is a specific calculation logic of “AA establishment (establishment name 91)” regarding the employee number, and the authentication determination processing unit 45 indicates that the recognized employee number 93 conforms to the calculation logic. Check whether the number is correct. Further, reference numeral 94 of the authenticity determination logic template shown in FIG. 9 indicates a path of the comparison source font / image storage unit 33 in which a numeric font image is stored. The authenticity determination processing unit 45 uses the number font of the employee number 93 based on the recognition result of the personal identification data 21 of the employee number 93 shown in FIG. 10 and the font stored in the path described in the reference numeral 104 of the authenticity determination logic template. Determine whether they match.

  Reference numeral 105 of the authenticity determination logic template shown in FIG. 11 is authenticity determination logic indicating the position coordinates of the face image 94. For example, the face image when the feature point in the personal identification data 21 of the employee card 9 is used as a reference point. The lower left x coordinate and the lower left y coordinate are shown. The image analysis unit 42 extracts the feature points of the personal identification data 21, obtains the position coordinates of the face image 94 on the employee card 9, and notifies the authenticity determination processing unit 45. The authenticity determination processing unit 45 determines whether or not the position coordinates of the face image 94 obtained by the image analysis unit 42 match the code 105 of the authenticity determination logic template. Here, the position of the face image 94 has been described as an example, but it is possible to similarly determine the authenticity of the positions of other character strings and seals.

  Reference numeral 106 of the authenticity determination logic template shown in FIG. 11 indicates the authenticity determination logic related to the expiration date of the employee ID card. For example, the authenticity determination logic template 106 indicates a condition regarding a date that “the read expiration date must be after the current date”. Is. The authenticity determination processing unit 45 determines whether or not the expiration date 95 read from the recognition result of the personal identification data 21 of the employee card 9 satisfies the condition of reference numeral 106 of the authenticity determination logic template.

  As described above, the authenticity determination processing unit 45 matches the analysis result, the recognition result, and the authenticity determination logic template of the identity verification data 21 of the identity verification material 2 and is correct for all the authenticity determination logic templates. The determined identity verification material 2 is determined to be authentic. As another example of the authenticity determination logic by the authenticity determination processing unit 45, a check digit may be used. Further, information regarding color brightness may be used for authenticity determination. Further, in the present embodiment, the authentication process has been described by taking an employee ID as an example. However, as the identity verification document 2, the appearance of the insurance card, driver's license, membership card, copy of the identity verification document 2, etc. It is possible to extract the feature (layout) and match the authenticity determination logic template to determine the authenticity.

  In addition, authenticity determination logic template data is registered for each issuer or issuer, and the authenticity determination means first recognizes the issuer or issuer from the identity verification data, and corresponds to the issuer or issuer. The stored authenticity determination logic template data may be selected, and the layout of the identity verification material may be collated with the authenticity determination logic template data.

It is to be noted that a program for realizing the function of the processing unit in the present invention is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read into a computer system and executed to determine authenticity. May be. Here, the “computer system” includes an OS and hardware such as peripheral devices. The “computer system” includes a WWW system having a homepage providing environment (or display environment). The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk built in a computer system. Further, the “computer-readable recording medium” refers to a volatile memory (RAM) in a computer system that becomes a server or a client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line. In addition, those holding programs for a certain period of time are also included.
The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting a program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

1 ... input terminal 11 ··· reading unit 2 · identity verification material (copy of identity verification material)
21 .. Identity verification data 3... Identity verification system 31 .. Authentication determination logic template editing unit 32. Authentication authentication logic template storage unit 33. Comparison source font / image storage unit 34. Cryptographic processing unit 35. HSM
41 ··· Scanning image cache unit 42 · · Image analysis unit 43 · · OCR engine 44 · · Acquired character information acquisition image recording unit 45 · · authenticity determination processing unit 46 · · authenticity determination result recording unit 47 · · authenticity determination Trend analysis learning AI
6 ... Issuing terminal 7 ... Management system

Claims (6)

A card issuing system having at least an input terminal, a management system, an identity verification system, and a card issuing terminal,
Application data input means for inputting data necessary for card issuance, identity verification data input means, application data transmission means for transmitting the application data to the management system, and the principal who transmits the identity verification data to the identity verification system Having confirmation data transmission means,
The identity verification system includes identity verification data receiving means for receiving identity verification data from the input terminal, authentication determining means for determining the authenticity of whether the identity verification data is authentic, and the authentication result determined by the authentication determining means. Having authenticity determination result transmission means for transmitting to the management system;
When the management system has received application data reception means for receiving application data from the input terminal, authenticity determination result receiving means for receiving an authentication result from the identity verification system, and when the authentication result is determined to be authentic, Issuing data generating means for generating application data by converting application data into recording format data in the card standard recording format, and issuing data transmitting means for transmitting the issuing data to the card issuing terminal;
A card issuing system, wherein the card issuing terminal includes issuing data receiving means for receiving issued data from the management system and issued data writing means for writing issued data to a card to be issued. The identity verification data input means of the input terminal includes an identity verification material reading unit that reads the identity verification material or a copy of the identity verification material, and an identity verification data generation unit that generates identity verification data from the read identity verification material. ,
The authenticity determination means of the personal identification system includes authenticity determination logic template data relating to the character and image layout of the personal verification material, and
An image analysis unit that analyzes the identity verification data and obtains a layout of characters and images;
The card issuing system according to claim 1, further comprising a determination processing unit configured to determine authenticity by comparing and collating the character / image layout of the obtained personal identification material and the authenticity determination logic template data. The authenticity determination logic template data corresponds to the issuer or issuer of the identity verification material,
The authenticity determining means has means for recognizing the issuer or the issuing mother from the identity verification data;
3. The card issuance system according to claim 2, wherein the authenticity determination logic template data stored in correspondence with the issuer or the issuer is used to collate the layout of the identity verification material with the authentication logic template data. The logic template data includes font data used for characters described in the identity verification material,
The image analysis unit recognizes the font used for the characters of the identity verification data,
The card issuing system according to claim 2 or 3, wherein the determination processing unit compares and determines the font used for the character of the recognized personal identification data and the font data of the logic template data. The logic template data includes the date condition of the identity verification material,
The image analysis unit recognizes the date of the personal identification data,
The card issuing system according to any one of claims 2 to 4, wherein the determination processing unit collates the date of the recognized identity verification data with the date of the logic template data. A card issuing method using at least an input terminal, a management system, an identity verification system, and a card issuing terminal,
An application data input step for inputting data necessary for card issuance to the input terminal, an identity verification data input step for entering identity verification data,
An application data sending step for sending application data from the input terminal to the management system; an identity verification data sending step for sending identity verification data to the identity verification system;
An identity verification data receiving step in which the identity verification system receives the identity verification data from the input terminal;
An authentication step for determining the authenticity of the identity verification data in the identity verification system;
An authenticity determination result transmission step of transmitting the authenticity determination result determined by the authenticity determination means from the identity verification system to the management system;
An application data receiving step in which the management system receives application data from the input terminal;
An authentication result reception step in which the management system receives an authentication result from the identity verification system;
An issuance data generation step for generating issuance data by converting the application data into the recording format data of the card standard recording format when the authenticity determination result is determined to be authentic;
An issuance data sending step for sending issuance data to the card issuing terminal;
An issuance data receiving step in which the card issuing terminal receives issuance data from the management system;
An issuance data writing step for writing issuance data to a card to be issued;
A card issuing method characterized by comprising:

Images