JP2013134684A - Electronic transaction terminal, electronic transaction system, electronic transaction method, and electronic transaction program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an electronic transaction terminal for achieving an electronic transaction with high safety using biometric authentication for personal authentication without providing a server side with a database for biometric authentication.SOLUTION: When starting a penalty payment procedure of traffic violation, a terminal operator inserts a driving license 13 into a reading section 103. The reading section 103 reads a driving license number 1050 stored in an IC chip of the driving license 13 and scans a license face photograph 1051 printed on the surface of the driving license 13. A license record input section 105 stores the license number 1050 and the license face photograph 1051. A camera 104 photographs a camera face image 1060 of the terminal operator, and a camera image input section 106 stores the camera face image 1060. An authentication section 109 collates the license face photograph 1051 with the camera face image 1060 and, when a coincidence degree is a predetermined level or more, authenticates that the terminal operator is the identical person recorded in the driving license 103.

Description

  The present invention relates to an electronic transaction terminal, an electronic transaction system, an electronic transaction method, and an electronic transaction program that perform electronic transactions via a communication network after performing authentication, and particularly relates to those that utilize biometric authentication.

  With the recent development of communication network environment, electronic transactions are being conducted in various scenes of daily life. As an example, Patent Document 1 discloses a system for electronically performing a procedure for paying a fine due to a traffic violation from a terminal rather than at a window. In electronic transactions, it is essential to authenticate the person in order to prevent impersonation. Patent Document 2 discloses a system for performing a combination of fingerprint authentication, which is considered to be more secure, in addition to a method of performing this authentication process with an ID card or a password.

JP2009-265784 JP2005-222255

  In the technique described in Patent Document 1 described above, since the authentication process is performed with an ID card, another person who obtains the ID card can pretend to be the person himself and perform electronic transactions, which is problematic in terms of safety. Further, the technique described in Patent Document 2 has a problem that the management server must have a database storing personal biometric information for biometric authentication.

  An object of the present invention is to provide an electronic transaction terminal, an electronic transaction system, an electronic transaction method, and an electronic transaction program that solve these problems.

  An electronic transaction terminal according to an embodiment of the present invention includes a recording input unit that reads the identification information and the first biological information from a portable recording medium on which the identification information and the first biological information are recorded, via a reading unit. And the biometric information input means for reading the second biometric information from the biometric information sensor, and when the degree of coincidence between the first biometric information and the second biometric information is equal to or higher than a predetermined level, the identification information is transmitted to the server. And authentication means.

  An electronic transaction method according to an embodiment of the present invention reads the identification information and the first biological information from a portable recording medium on which the identification information and the first biological information are recorded, via a reading unit, and a biological information sensor The second biometric information is read from the first biometric information, and when the degree of coincidence between the first biometric information and the second biometric information is equal to or higher than a predetermined level, the identification information is transmitted to the server.

  An electronic transaction program according to an embodiment of the present invention includes a recording input process for reading the identification information and the first biological information from a portable recording medium on which the identification information and the first biological information are recorded, via a reading unit. When the biometric information input process for reading the second biometric information from the biometric information sensor and the degree of coincidence between the first biometric information and the second biometric information are equal to or higher than a predetermined level, the identification information is transmitted to the server. Causes the computer to execute authentication processing.

  The present invention achieves highly secure electronic transactions using biometric authentication for personal authentication without having a biometric authentication database on the server side.

It is a block diagram which shows the structure of the 1st Embodiment of this invention. It is a flowchart which shows operation | movement of the 1st Embodiment of this invention. It is a structure of the data stored in traffic violation information DB in 1st Embodiment of this invention. It is a block diagram which shows the structure of 2nd Embodiment of this invention. It is a flowchart which shows the operation | movement of 2nd Embodiment of this invention. It is a block diagram which shows the structure of the foul payment terminal of 3rd Embodiment of this invention. It is a flowchart which shows the operation | movement of the authentication process of 3rd Embodiment of this invention. It is a block diagram which shows the structure of 4th Embodiment of this invention.

  A first embodiment of the present invention will be described in detail with reference to the drawings.

  FIG. 1 shows the configuration of a foul payment system comprising n foul payment terminals 10-1 to 10-n, a traffic violation management server 11, and a communication network 12. The penalty payment terminals 10-1 to 10-n and the management server 11 are connected to each other by a communication network 12. The foul payment terminals 10-1 to 10-n are installed in convenience stores and the traffic violation management server 11 is installed in the data center. The communication network 12 is generally the Internet, but when a high security level is required, a case where a dedicated line is opened is also conceivable.

  The penalty payment terminals 10-1 to 10-n have the same configuration, and the penalty payment terminal 10-1 will be described below. The penalty payment terminal 10-1 includes a control unit 100, an information input unit 101, an information display unit 102, a reading unit 103, a camera 104, a license record input unit 105, a camera image input unit 106, A cash insertion unit 107, a communication unit 108, and an authentication unit 109 are provided.

  The control unit 100 issues an operation instruction to each of the above-described components in the penalty payment terminal 10-1, or controls information exchanged between the components, thereby performing the entire operation of the penalty payment terminal 10-1. To control.

  The information input unit 101 is a keyboard or a touch panel and receives information input from a terminal operator. The information display unit 102 is a monitor screen, and displays a request screen for inputting information to the terminal operator and displays a processing result.

  The reading unit 103 reads the license number 1050 recorded on the IC chip of the driver's license 13 inserted by the terminal operator, and further reads the license face photo 1051 printed on the driver's license 13. The camera 104 captures a camera face image 1060 of the terminal operator. The license record input unit 105 stores a license number 1050 and a license face photo 1051. The camera image input unit 106 stores a camera face image 1060.

  The cash insertion unit 107 stores the cash paid by the terminal operator as a fine money inside the fine money payment terminal 10-1. The communication unit 108 controls communication with the traffic violation management server 11 via the communication network 12. The authentication unit 109 compares the license face photograph 1051 with the camera face image 1060 and authenticates whether or not the terminal operator is the person recorded in the driver's license 13.

  The traffic violation management server 11 includes a control unit 110, a communication unit 111, a payment processing unit 112, and a traffic violation information DB 113.

  The control unit 110 controls the overall operation of the traffic violation management server 11 by issuing operation instructions to the above-described components in the traffic violation management server 11 and controlling information exchanged between the components. The communication unit 111 controls communication with the penalty payment terminal 10-1 through the communication network 12.

  The payment processing unit 112 receives the transaction content input by the terminal operator from the fine payment terminal 10-1, and executes the fine payment process. The traffic violation information DB 113 shows the traffic violation information and the penalty payment status corresponding to the license number, as shown in FIG. 3, the management number, the license number, the traffic violation date, the traffic violation content, the penalty amount, the payment deadline, It is stored in a data format consisting of payment status items.

  Next, the operation of this embodiment will be described in detail with reference to the flowchart of FIG.

  The terminal operator inserts the driver's license 13 into the reading unit 103 when starting the foul payment procedure for traffic violation (S101).

  The reading unit 103 reads the license number 1050 stored in the IC chip of the driver's license 13 and scans the driver's license photo 1051 printed on the surface of the driver's license 13. The license record input unit 105 stores the license number 1050 and the license face photo 1051 (S102).

  The camera 104 captures the camera face image 1060 of the terminal operator (S103), and the camera image input unit 106 stores the camera face image 1060 (S104).

  The authentication unit 109 checks the license face photo 1051 and the camera face image 1060 (S105), and if the degree of coincidence is 95% or more, the terminal operator is the person recorded in the driver's license 103. Is authenticated (Yes in S106). The numerical value of the degree of coincidence is set by the administrator of the fine payment terminal 10-1, and is stored in the fine payment terminal. When the degree of coincidence is 95% or more, the false recognition rate is statistically 0.01% or less, and the safety equivalent to or higher than the authentication by the 4-digit password with the false recognition rate is 0.01% is ensured. . Note that the setting value of 95% is an example, and is not limited to this value. The communication unit 108 transmits the license number 1050 to the traffic violation management server 11 via the network 12 (S107).

  In the traffic violation management server 11, the traffic violation information corresponding to the license number 1050 received by the payment processing unit 112 is read from the traffic violation information DB 113. The communication unit 111 transmits the read traffic violation information to the penalty payment terminal 10-1, and the information display unit 102 displays the traffic violation information (S108). When the traffic violation information shown in FIG. 3 is stored in the traffic violation information DB 113 and the license number 1051 is “12345567890”, the data of the management number 1 that is unpaid data related to “12345567890” is read. Then, the information display unit 102 displays the contents.

  The terminal operator confirms the unpaid traffic violation information displayed on the information display unit 102, and inserts the paid amount of 8000 yen into the cash insertion unit 107 (S109). The communication unit 108 transmits a cash receipt confirmation signal to the traffic violation management server 11 (S110).

  The payment processing unit 112 receives the cash receipt confirmation signal and updates the item of payment status of the management number 1 in the traffic violation information data of the traffic violation information DB 113 from “not yet” to “completed”. The communication unit 108 receives an update completion signal of the traffic violation information DB 113 from the traffic violation management server 11 (S111). The information display unit 102 displays completion of payment procedure (S112), and the reading unit 103 returns the driver's license 13 to the terminal operator (S114).

  When the degree of coincidence is less than 95% (No in S106), the information display unit 102 displays that authentication is not possible (S113), and the reading unit 103 returns the driver's license 13 to the terminal operator (S114).

  This embodiment has an effect that the traffic violation management server 11 does not have to have a biometric authentication database. This is because the authentication unit 109 performs the authentication process using the license face photograph 1051 and the camera face image 1060, and thus the authentication process is completed in the penalty payment terminal 10-1.

Since the traffic violation management server 11 does not have a biometric authentication database, communication between the traffic violation management server 11 and the penalty payment terminal 10-1 does not occur during biometric authentication, and it can be expected that the authentication process is accelerated. . Further, the management man-hours of the biometric authentication database do not occur, and it is possible to eliminate security risks such as personal biometric information being stolen from the biometric authentication database.
<Second Embodiment>
Next, a second embodiment of the present invention will be described in detail with reference to the drawings.

  FIG. 4 shows a configuration of an online banking system including n bank ATMs 20-1 to 20-n, a bank server 21, and a communication network 22.

  The bank ATMs 20-1 to 20-n have the same configuration, and the bank ATM 20-1 will be described below. The bank ATM 20-1 includes a control unit 200, an information input unit 201, an information display unit 202, a reading unit 203, a fingerprint sensor 204, a cash card recording input unit 205, a fingerprint input unit 206, and a cash input / output unit. 207, a communication unit 208, and an authentication unit 209. Among these, the control part 200, the information input part 201, the information display part 202, and the communication part 208 are respectively functionally equivalent to the corresponding part of 1st embodiment.

  The reading unit 203 reads the account number 2050 and the registered fingerprint 2051 recorded on the IC chip of the cash card 23 inserted by the terminal operator. The fingerprint sensor 204 reads the collected fingerprint 2060 of the terminal operator. The cash card record input unit 205 stores an account number 2050 and a registered fingerprint 2051. The fingerprint input unit 206 stores the collected fingerprint 2060.

  The cash deposit / withdrawal unit 207 stores the cash that the terminal operator deposits / withdraws into / from the bank account inside the bank ATM 20-1. The authentication unit 209 compares the registered fingerprint 2051 with the collected fingerprint 2060 and authenticates whether the terminal operator is the person recorded in the cash card 23.

  The bank server 21 includes a control unit 210, a communication unit 211, a deposit / withdrawal processing unit 212, and a bank account DB 213. The traffic violation in the first embodiment is that the data to be handled is bank account information. Although different from the management server 11, it is functionally equivalent.

  Next, the operation of this embodiment will be described in detail with reference to the flowchart of FIG.

  The terminal operator inserts the cash card 23 into the reading unit 203 when starting the bank account deposit / withdrawal procedure (S201).

  The reading unit 203 reads the account number 2050 and the registered fingerprint 2051 stored in the IC chip of the cash card 23. The cash card record input unit 205 stores the account number 2050 and the registered fingerprint 2051 (S202).

  The fingerprint sensor 204 reads the collected fingerprint 2060 of the terminal operator (S203). The fingerprint input unit 206 stores the collected fingerprint 2060 (S204). The authentication unit 209 checks the registered fingerprint 2051 and the collected fingerprint 2060 (S205).

  The operations after S206 are the same as the operations after S106 in the first embodiment.

  This embodiment has an effect that the bank server 21 does not need to have a biometric authentication database in the online banking system. This is because the authentication unit 209 performs the authentication process using the registered fingerprint 2051 and the collected fingerprint 2060, and thus the authentication process is completed in the bank ATM 20-1.

Since the bank server 21 does not have a biometric authentication database, as in the first embodiment, high-speed authentication processing can be realized, and the management man-hours and security risks of the biometric authentication database can be eliminated. It becomes.
<Third embodiment>
Next, a third embodiment of the present invention will be described in detail with reference to the drawings.

  FIG. 6 is a block diagram showing the configuration of the foul payment terminal 30-1 of the present embodiment. As in the first embodiment, this embodiment is also connected to a traffic violation management server through a communication network, and the communication network and the traffic violation management server are the same as those in the first embodiment. Since it is functionally equivalent, only the foul payment terminal 30-1 is illustrated. The information input unit 301, the information display unit 302, the camera 304, the camera image input unit 306, the cash insertion unit 307, and the communication unit 308 in the foul payment terminal 30-1 are respectively functional and functional parts corresponding to those in the first embodiment. Is equivalent to

  In the IC chip of the driver's license 33, a registration password 3052 is recorded in addition to the license number 3050, and the reading unit 303 reads the registration password 3052 in addition to the license number 3050 and the license face photo 3051. I do. The license record input unit 305 stores a license number 3050, a license face photo 3051, and a registered password 3052. The password input unit 310 stores the input password 3100 input from the information input unit 301 by the terminal operator.

  The authentication unit 309 performs verification of the license face photo 3051 and the camera face image 3060 and verification of the registration password 3052 and the input password 3100 to determine whether the terminal operator is the person recorded in the driver's license 13 or not. Authenticate.

  Next, the operation of this embodiment will be described in detail with reference to the flowchart of FIG.

  The operations from S101 to S105 and the operations after S107 when the degree of coincidence is 95% or more in S106 (Yes in S106) are the same as those in the first embodiment.

  When the degree of coincidence is less than 95% (No in S106), the terminal operator inputs a password from the information input unit 301 (S301), and the authentication unit 309 collates the registered password 3052 and the input password 3100 (S302). If they match (Yes in S303), the processing after S107 is performed. If they do not match (No in S303), the information display unit 302 displays that authentication is not possible (S113), and the reading unit 303 returns the driver's license 33 to the terminal operator (S114).

In this embodiment, in addition to the effects of the first embodiment, it is possible to perform authentication even in cases where face authentication does not work well due to a large change in appearance from the photograph of the driver's license It becomes. This is because, when face authentication does not function well, the authentication unit performs authentication processing using the password entered by the terminal operator from the information input unit and the registered password 3052.
<Fourth embodiment>
Next, a fourth embodiment of the present invention will be described in detail with reference to the drawings.

  FIG. 8 is a block diagram showing the configuration of the foul payment terminal 40-1 of the present embodiment. The reading unit 403 reads the identification information 4050 and the first biological information 4051 from the portable recording medium 43. The biological information sensor 404 reads the second biological information 4060 from the terminal operator. The recording input unit 405 stores identification information 4050 and first biological information 4051. The biological information input unit 406 stores second biological information 4060. The authentication unit 409 collates the first biological information 4051 and the second biological information 4060 to authenticate whether the terminal operator is the person recorded in the portable recording medium 43.

  The overall operation flow is the same as in the first embodiment.

  As in the first and second embodiments, this embodiment has an effect that it is not necessary to provide a database for biometric authentication on the server side. This is because the authentication process is completed in the electronic transaction terminal 40-1 because the authentication unit 409 performs the authentication process using the first biological information 4051 and the second biological information 4060.

  While the present invention has been described with reference to the embodiments, the present invention is not limited to the above embodiments. Various changes that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention.

  The present invention can be used for an electronic transaction terminal utilizing biometric authentication.

10-1 to 10-n Foul payment terminal 100 Control unit 101 Information input unit 102 Information display unit 103 Reading unit 104 Camera 105 License record input unit 1050 License number 1051 License face photo 106 Camera image input unit 1060 Camera face Image 107 Cash insertion unit 108 Communication unit 109 Authentication unit 11 Traffic violation management server 110 Control unit 111 Communication unit 112 Payment processing unit 113 Traffic violation information DB
12 Communication Network 13 Driver's License 20-1 to 20-n Bank ATM
200 Control Unit 201 Information Input Unit 202 Information Display Unit 203 Reading Unit 204 Fingerprint Sensor 205 Cash Card Record Input Unit 2050 Account Number 2051 Registered Fingerprint 206 Fingerprint Input Unit 2060 Collected Fingerprint 207 Cash I / O Unit 208 Communication Unit 209 Authentication Unit 21 Bank Server 210 Control unit 211 Communication unit 212 Deposit / withdrawal processing unit 213 Bank account DB
22 Communication Network 23 Cash Card 30-1 Foul Payment Terminal 301 Information Input Unit 302 Information Display Unit 303 Reading Unit 304 Camera 305 License Record Input Unit 3050 License Number 3051 License Face Photo 3052 Registration Password 306 Camera Image Input Unit 3060 Camera face image 307 Cash insertion unit 308 Communication unit 309 Authentication unit 310 Password input unit 3100 Input password 40-1 Electronic transaction terminal 403 Reading unit 404 Biometric sensor 405 Record input unit 4050 Identification information 4051 First biometric information 406 Biometric information input Part 4060 second biological information 409 authentication part

Claims (10)

Recording input means for reading the identification information and the first biological information from the portable recording medium in which the identification information and the first biological information are recorded, via a reading means;
Biometric information input means for reading second biometric information from the biometric information sensor;
An electronic transaction terminal comprising: authentication means for transmitting the identification information to a server when the degree of coincidence between the first biological information and the second biological information is equal to or higher than a predetermined level. The recording input means includes the identification information and the first biological information via the reading means from the portable recording medium on which the IC chip on which the identification information is recorded is mounted and the first face image is printed. Read the first face image as
The biometric information input means reads a second face image taken by a camera as the second biometric information,
The electronic transaction terminal according to claim 1, wherein the authentication unit transmits the identification information to the server when the degree of coincidence between the first face image and the second face image is equal to or higher than the predetermined level. The record input means reads the identification information and the first biological information from the portable recording medium equipped with an IC chip on which the identification information and the first biological information are recorded, via the reading means,
The biological information input means reads the second biological information from a biological information sensor,
The electronic transaction terminal according to claim 1, wherein the authentication unit transmits the identification information to the server when the degree of coincidence between the first biological information and the second biological information is equal to or higher than the predetermined level. The electronic transaction terminal further comprises password input means for inputting a first password,
The recording input means reads the second password via the reading means from the portable recording medium equipped with an IC chip on which the second password is recorded,
The electronic transaction terminal according to claim 2, wherein the authentication unit transmits the identification information to the server when the first password matches the second password. The authentication means includes the identification information when the degree of coincidence between the first biometric information and the second biometric information is less than the predetermined level, and the first password and the second password coincide with each other. The electronic transaction terminal according to claim 4, wherein the electronic transaction terminal is transmitted to the server.   An electronic transaction system including the electronic transaction terminal according to claim 1 and the server.   The identification information and the first biological information are read from the portable recording medium on which the identification information and the first biological information are recorded, via the reading means, and the second biological information is read from the biological information sensor, An electronic transaction method for transmitting the identification information to a server when the degree of coincidence between the biometric information and the second biometric information is equal to or higher than a predetermined level.   The identification information and the first face image are read from the portable recording medium on which the IC chip on which the identification information is recorded is mounted and the first face image as the first biological information is printed. The electronic device according to claim 7, wherein the identification information is transmitted to the server when the degree of coincidence between the one face image and the second face image as the second biological information captured by the camera is equal to or higher than the predetermined level. Transaction system. A recording input process for reading the identification information and the first biological information from the portable recording medium in which the identification information and the first biological information are recorded, via a reading unit;
A biological information input process for reading the second biological information from the biological information sensor;
An electronic transaction program that causes a computer to execute authentication processing for transmitting the identification information to a server when the degree of coincidence between the first biological information and the second biological information is equal to or higher than a predetermined level. The recording input for reading the identification information and the first face image from the portable recording medium on which the IC chip on which the identification information is recorded is mounted and the first face image as the first biological information is printed Processing,
The biometric information input process for reading the second face image as the second biometric information captured by the camera;
10. The electronic device according to claim 9, wherein when the degree of coincidence between the first face image and the second face image is equal to or higher than the predetermined level, the authentication process of transmitting the identification information to the server is executed by a computer. Trading program.

Images