JP2021081948A - Authentication system - Google Patents

Abstract

To provide an authentication system having excellent security performance.SOLUTION: An authentication system comprises a database 22 and an authentication server 21 in which a web server 24 functions. The database 22 comprises an authentication table 23 in which face photo files for collation are registered. A client terminal 12 utilizing the authentication system uses a dedicated application program 27 for performing processing to montage a face photo file for collation and transmitting thereof to the authentication server 21. The authentication server 21 performs processing to montage the face photo file of the authentication table 23, and collates whether or not both files are identical.SELECTED DRAWING: Figure 1

Description

The present invention relates to an authentication system using a face photo file.

There are various methods in the authentication system.

There is also a personal authentication system (using a photo) that collates and authenticates face images (Patent Document 1).

Japanese Unexamined Patent Publication No. 2004-318409

The above-mentioned personal authentication system is a technology for performing face matching using a personal face image captured and transmitted via a communication network and a card face image transmitted via a communication network. It is not intended to be used as an authentication system between client terminals.

Therefore, it was an issue to provide an authentication system using a face photo file that can be used for authentication between a server and a client terminal in an Internet environment and has excellent security performance.

The present invention is an authentication system including an authentication server that authenticates via the Internet in order to solve the above-mentioned problems, and a database and a Web server can function on the authentication server, and the database. Above, an authentication system including an authentication table of a database including a column in which a face photo file is registered is provided.

The present invention provides an authentication system that requires a dedicated application program to be installed on a client terminal in order to send a face photo file to the authentication server at the time of authentication in order to solve the above-mentioned problems.

In order to solve the above-mentioned problems, the present invention adds a function of montage processing a face photo file to be transmitted to the authentication server to the dedicated application program, and also adds a face photo file registered in the authentication table of the database. Provides an authentication system with a column that stores a predetermined logic for performing the montage process of.

In order to solve the above-mentioned problems, the present invention further provides an authentication system characterized in that the result of verification of the authentication server is processed by an indeterminate parameter.

In the present invention, a database and a Web server can function on the authentication server, and the database includes an authentication table of a database including a column in which the face photo file is registered. Therefore, the face photo file can be used for authentication. It is available and more secure than password authentication.

The present invention further enhances security because it requires a dedicated application program to be installed on the client terminal in order to transmit the face photo file to the authentication server at the time of authentication.

The present invention adds a function for montage processing a face photo file to be transmitted to the authentication server to the dedicated application program, and a predetermined invention for performing montage processing of the face photo file registered in the authentication table of the database. Since a column for storing logic is added, the risk of eavesdropping or theft of electronic files flowing in the network can be reduced, and a more secure authentication system can be realized.

Further, in the present invention, since the verification result of the authentication server is processed by an indeterminate parameter, the risk of eavesdropping or theft can be reduced, and a more secure authentication system can be realized.

FIG. 1 is a diagram showing a configuration of an authentication system. FIG. 2 is a diagram showing a part of the authentication table of the database. FIG. 3 is a diagram showing the flow of environment setting of the authentication system (sending of a dedicated application). FIG. 4 is a diagram showing a flow of environment setting of the authentication system (installation of a dedicated application). FIG. 5 is a diagram showing a flow of environment setting of the authentication system (sending of a face photo file). FIG. 6 is a diagram showing a flow of environment setting of the authentication system (registration of a face photo file). FIG. 7 is a diagram showing an authentication / verification operation (clicking the authentication button) of the authentication system. FIG. 8 is a diagram showing an authentication / verification operation (sending of a face photo file) of the authentication system. FIG. 9 is a diagram showing an authentication / verification operation (verification) of the authentication system. FIG. 10 is a diagram showing an authentication / verification operation (verification success) of the authentication system.

It is implemented as an authentication system used for authentication between the server and client terminal in the Internet environment.

First, the configuration of the authentication system will be described with reference to FIGS. 1 and 2.

The authentication system includes at least an authentication server (21) that can be accessed via the Internet (30) and operates a predetermined database (22) and a predetermined Web server (24), and the Internet can be accessed from the client terminal (12). The operation is performed via the dedicated application program (27) (Fig. 1).

The client terminal (12) may be any terminal that can access the authentication server (21) and the Web server that wants to browse via the Internet (30). In this embodiment, a personal computer on which a general-purpose OS is installed is assumed (Fig. 1).

By making the person (20) who operates the authentication server (21) different from the person who uses the authentication server (10), the introduction and operation costs can be suppressed (FIG. 1).

To operate the authentication server (21) is not only to install or own the server in an organization by itself, but also to provide the service by using a server installed or owned in another organization. Is also included.

In the database (22), a column for specifying a user, a column for specifying an organization to which the user belongs, a transition source URL, a transition destination URL, and a parameter tag attribute (1 to infinity are columns). ), Parameter tag name (1 to infinity is a column), parameter tag value (1 to infinity is a column), a column for storing the face photo file (16) which is an electronic file, and a predetermined It has an authentication table (23) with a column for storing logic (FIG. 2).

The Web server (24) operates a Java (registered trademark) Server Page (hereinafter referred to as a JSP server) (25) (FIG. 1).

The dedicated application program (27) has a function of montage the face photo file (16) according to a predetermined logic.

Next, the flow of environment setting up to the use of the authentication service and the usage image thereof will be described with reference to FIGS. 3 to 6.

The corporation A (10) wishing to use the authentication service informs the corporation B (20) that operates the authentication server (21) to that effect, and the corporation B informs the corporation A of a dedicated application program (27) and the application. The medium (26) in which the program key or the download destination of the application program (hereinafter referred to as "dedicated application program or the like") is stored is sent to the corporation A (FIG. 3).

As for the medium (26), any medium is acceptable as long as it can store the dedicated application program or the like. In this embodiment, a CD-ROM medium or a DVD-ROM medium is assumed.

The medium (26) is sent by mail in consideration of safety, but if the safety level equal to or higher than that of the medium is ensured, it should be sent by e-mail instead of the medium. It is also permissible to adopt a method of sending the dedicated application program or the like or a method of sending the download destination of the application program by facsimile or the like.

The user (13) of the corporation A (10) inserts (connects) the sent medium (26) into the client terminal (12) and installs the dedicated application program (27) ( FIG. 4).

Further, the user (13) takes a face photograph with a digital camera (15), stores the electronic file or a copy file (16) of the electronic file in a predetermined medium (17), and the corporation B (20). (Fig. 5).

The corporation B (20) that has received the delivery registers the electronic file (16) of the facial photograph stored in the medium (17) in the authentication table (23) of the database (22) of the authentication server (21). (Fig. 6).

Next, the authentication / verification operation will be described with reference to FIGS. 7 to 10.

By accessing the Internet site with the Internet browsing software (14) of the client terminal (12) and clicking the "authentication button", the authentication screen with a face photo is displayed in a separate window (141) (FIG. 7).

The authentication screen (141) by the separate window is based on an instruction from the authentication server (21).

After that, the user (13) who operates the client terminal (12) starts the dedicated application program (27), and the face photograph file (142) taken in advance using the start window (142) of the application program ( 16) is transmitted to the Web server (24) of the authentication server (21) via the Internet (30) (FIG. 8).

By using the dedicated application program (27) installed on the client terminal for the transmission of the face photo file (16), a predetermined montage process is performed, so that the electronic file flowing on the network is eavesdropped or stolen. Risk can be reduced and a more secure authentication system can be realized.

On the JSP server (25) of the Web server (24) that has received the face photo file (16), a montage is performed based on a column that stores a predetermined logic acquired from the authentication table (23) of the database (22). After that, it is checked whether both files are the same (Fig. 9).

If both files are determined to be the same as a result of the verification (in the case of successful authentication / verification), the transition destination URL, parameter tag attribute +1 to infinity, parameter tag name +1 to infinity, and parameter tag value +1 to infinity Based on this, the JSP server (25) performs processing and transmits the processing to the Web server accessed by the Internet browsing software (14) (FIG. 10).

As described above, since the collation result is processed by irregular parameters, the risk of eavesdropping or plagiarism can be reduced, and a more secure authentication system is realized.

Further, the Internet browsing software (14) of the client terminal (12) can be continuously browsed by opening a separate window (143) (FIG. 10).

Since the authentication system of the present invention is an authentication system having excellent security performance, it has industrial applicability.

10 Corporation A (user)
11 Server 12 Client terminal 13 User 14 Display window by Internet browsing software 141 Another display window by clicking the "authentication button" 142 Display window by starting the dedicated application program 143 Another display by successful authentication / verification Window 15 Digital camera 16 Face photo file 17 Medium (USB memory)
20 Corporation B (operator)
21 Authentication server 22 Database 23 Authentication table 24 Web server 25 JSP server 26 Media (CD-ROM)
27 Dedicated application program 30 Internet

Claims (4)

An authentication system that includes an authentication server that authenticates via the Internet.
An authentication system in which a database and a Web server can function on the authentication server, and an authentication table of a database including a column in which a face photo file is registered is provided on the database. The authentication system according to claim 1, which further requires a dedicated application program to be installed on a client terminal in order to send a face photo file to the authentication server at the time of authentication. A function for montage processing the face photo file to be transmitted to the authentication server is added to the dedicated application program, and a predetermined logic for performing montage processing of the face photo file registered in the authentication table of the database is stored. The authentication system of claim 2 with columns added. The authentication system according to any one of claims 1 to 3, wherein the verification result of the authentication server is processed by an indeterminate parameter.

Images