JP2900869B2 - Database search system and database protection method - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a security system, and more particularly to a security system for protecting confidentiality of data on a communication line.

[0002]

2. Description of the Related Art Conventionally, when a data user accesses a database, a user identification code and a password, which are personal registration information, are input to a terminal device as a means for confirming the validity of the user. Was pressed and input, and the database management system on the opposite device side collated with the password registered in advance.

As an example of the prior art, Japanese Patent Application Laid-Open No. 64-26
There is an invention of a personal collation system using encrypted personal characteristic information described in Japanese Patent Publication No. 985 (hereinafter, referred to as Publication 1). The invention described in Japanese Unexamined Patent Publication (Kokai) No. 1 (1999) -2000 discloses a flexible system that does not impair the security of the storage contents of a storage medium, improves a matching method such as a feature extraction algorithm, and does not limit the configuration of a matching device. As an object, it is determined whether or not the user is a legitimate user by encrypting a feature such as a fingerprint, which is personal feature information, without performing a process such as feature extraction and performing personal verification.

Further, there is an invention of a storage card system described in Japanese Patent Application Laid-Open No. 64-15891 (hereinafter referred to as Japanese Patent Publication No. 2). The invention described in Japanese Patent Publication No.
For the purpose of obtaining a storage card system such that a storage card such as a C card cannot be illegally used by others, an audio voiceprint, which is personal characteristic information, is stored as encryption of the storage card, and the voiceprint is stored in the storage card. The collation with the voice voiceprint input to the output unit is performed using the storage card system, and it is determined whether or not the reception is acceptable. Only when the codes match, the information is transferred to the host system.

FIG. 3 is a diagram showing a block configuration of a conventional database search system, showing a case where user verification is performed using voiceprint data.

[0006] A user of the database inputs a password according to the purpose of use to the input / output device 2 in order to confirm the validity of the user for the user terminal device 1. Also, the user inserts the IC card 3 into the user terminal device 1 and
The voice print data 6a and the personal registration information 5a, which are the personal characteristic information of the user, registered in the card 3 in advance are read. These pieces of personal information are encrypted by the encryption unit 9a using the general encryption key 14a, transferred to the database management device 4, and decrypted by the decryption unit 19d. The decrypted data is collated by the collating unit 8b with personal information registered in the voice template password 11 in advance. As a result of the collation, when it is determined that the user is a valid user, it is possible to shift to the next data search operation. However, if it is determined that the user is not a valid user as a result of the comparison, access to the database 13 is denied.

When a user instructs data retrieval, data retrieved from the database 13 by the information retrieval control unit 12 is extracted, encrypted by the general encryption key 14b in the encryption unit 19a, and transmitted to the user terminal device. 1
Is forwarded to The transferred data is output from the input / output device 2 after being decoded by the decoding unit 9d.

[0008]

The first problem is that these conventional authentication techniques are designed to prevent unauthorized use or access when user authentication is performed by voiceprint or the like. It requires voice input devices and advanced technology.

The reason is that many of the currently used database search systems rely on only user identification codes and passwords, which are personal registration information, for user authentication. This is because, when personal characteristic information such as a fingerprint and a voiceprint is to be taken into the user authentication system, an input device and an identification circuit are always required, which makes the system complicated and expensive.

[0010] The second problem is that the protection of the information handled by the user itself is insufficient, such as when remote access is made to a shared database using a communication line, or when important information relating to personal interests and privacy is protected. It is vulnerable to defense.

[0011] That is, by providing a plagiarizing device or the like with malicious intent, it becomes possible to easily intercept information from a communication line through which a large amount of information is exchanged, and the information is leaked to the outside. It is that there is.

The reason is that almost no information can be encrypted or scrambled except when accessing the database from a specific terminal. Further, even when encryption is performed, information can be stolen from a communication line by stealing information of an encryption key of the terminal. Furthermore, there was little recognition of the importance of information privacy and added value.

In view of the above, it is an object of the present invention to prevent transfer information from being stolen from a communication line and to protect highly confidential information.

[0014]

A database search system according to the present invention has an IC card as a portable storage medium, a user terminal device for receiving the IC card, and a database management device having a database. The first personal registration information and the first personal characteristic information of the first user who is a valid user of the database;
A first matching unit that matches the first personal registration information with second personal registration information input to the user terminal device by a second user using the IC card; A first encryption key unique to the first user created using the characteristic information, and wherein the user terminal device communicates the second personal registration information with the second user. An input / output device for inputting and outputting secret information and a first encryption unit for encrypting the first personal registration information and the first personal characteristic information using a first general encryption key; A second encryption unit for encrypting the confidential information using the first general encryption key and the first encryption key, and the first personal registration information and the second encryption unit using the first general encryption key; A first decryption unit that decrypts the first personal characteristic information, and decrypts the confidential information using the first general encryption key and the first encryption key And a first data conversion unit including a second decryption unit that performs the first personal registration information transferred from the user terminal device; Personal characteristic information and the confidential information;
A first encryption key unique to the second user created using the first personal characteristic information transferred from the user terminal device and a first encryption key using the second general encryption key. A third decryption unit that decrypts the personal registration information and the first personal characteristic information, and a fourth decryption unit that decrypts confidential information using the second general encryption key and the second encryption key. And a third encrypting unit for encrypting the first personal registration information and the first personal characteristic information using the decrypting unit and the second general encrypting key, and the second general encrypting key and A second data conversion unit including a fourth encryption unit that encrypts confidential information using the second encryption key, and the third decryption unit transferred from the user terminal device An information extraction unit for extracting the first personal registration information and the first personal characteristic information decrypted in A voiceprint template / password storage unit for storing third personal registration information and third personal characteristic information that are the same as the first personal registration information and the first personal characteristic information, respectively; Collating the first personal registration information with the third personal registration information,
A second matching unit that matches the first personal characteristic information extracted by the information extracting unit with the third personal characteristic information, and performs data search and data storage of the database using the confidential information An information search control unit.

In the database search system according to the present invention, the first to third personal registration information includes a user identification code and a password, respectively, and the first and third personal characteristic information each include voiceprint data. Wherein the confidential information comprises one of search data extracted by a data search of the database and stored data stored in the database by the second user, wherein the first general encryption key and the The second general encryption key is the same, and the content of the first encryption key and the content of the second encryption key are the same.

In the database protection method of the present invention using the database search system of the present invention, the first personal registration information and the first personal characteristic information of the first user are registered in the IC card in advance. And the first
Registering the third personal registration information and the third personal characteristic information, which are the same as the personal registration information and the first personal characteristic information, respectively, in the voiceprint template / password storage unit; User of the IC
When the second personal registration information and the confidential information are input to the user terminal device via the input / output device using a card, the first collation unit sets the first personal registration information and When the second user is compared with the second personal registration information to authenticate whether the second user is the same as the first user, and the matching result in the first matching unit does not match. Prohibits the second user from accessing the user terminal device, terminates the process, and, if the collation results in the first collation unit match, returns the first personal characteristic information. Creating the first encryption key unique to the first user using
The first encrypting unit encrypts the first personal registration information and the first personal characteristic information using the first general encryption key, and the second encrypting unit encrypts the first personal registration information and the first personal characteristic information. Encrypts the confidential information using the general encryption key and the first encryption key, and stores the encrypted first personal registration information, the first personal characteristic information, and the confidential information in the database. The first personal registration information and the first personal characteristic information transferred from the user terminal device using the second general encryption key. Decryption, the information extraction unit extracts the first personal registration information and the first personal characteristic information decrypted by the third decryption unit, and the second collation unit The first personal registration information extracted by the information extraction unit and stored in the voiceprint template / password storage unit The first personal characteristic information extracted by the information extracting unit and the voice print template / password storage unit are compared with the third personal registration information that corresponds to the first personal registration information. Is compared with the third personal characteristic information stored in the first user.
Authentication is performed as to whether the user is the same as the user, and if the collation results in the second collation unit do not match, the second user is prohibited from accessing the database, and the process ends. If the matching result in the second matching unit matches, the second encryption key unique to the second user is created using the first personal characteristic information, and the fourth encryption key is created. Decrypts the confidential information transferred from the user terminal device using the second general encryption key and the second encryption key, and the information retrieval control unit The third encryption unit performs one of the data search and the data storage of the database using the information, and the third encryption unit uses the second general encryption key to store the first personal registration information and the first personal registration information. The personal characteristic information is encrypted, and the fourth encryption unit performs the second general encryption key and The confidential information, which is search data extracted from the database, is encrypted using a second encryption key, and the encrypted first personal registration information, the first personal characteristic information, and the confidential information are encrypted. To the user terminal device, the first decryption unit decrypts the first personal registration information and the first personal characteristic information using the first general encryption key, A second decryption unit that decrypts the confidential information using the first general encryption key and the first encryption key, and decrypts the decrypted first personal registration information;
The personal characteristic information and the confidential information are output from the user terminal device via the input / output device.

[0017]

Next, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is a diagram showing a block configuration of a database search system according to the present invention, and shows a database search system to which a database protection method according to the present invention is applied. FIG. 2 is a diagram showing a data transfer format on the communication line in FIG.

As shown in FIG. 1, the user terminal device 1 comprises:
The configuration includes an input / output device 2 having a voice input device (not shown), a data conversion unit 9, and a general encryption key 14a, so that the IC card 3 can be accepted. The data conversion unit 9 includes two encryption units 9a and 9b,
It has two decoding units 9c and 9d.

The IC card 3 includes personal registration information 5a, voiceprint data 6a, an encryption key 7a, and a collating unit 8a.
It can be inserted into the user terminal device 1.

The database management device 4 includes personal registration information 5b, voiceprint data 6b, an encryption key 7b, and a collating unit 8b.
, An information extraction unit 10, a voiceprint template / password storage unit 11, an information search control unit 12, and a database 1
3, a general encryption key 14b, and a data conversion unit 19. The data conversion unit 19 includes two encryption units 19a and 19b and two decryption units 19c and 19c.
19d. The voiceprint template / password storage unit 11 includes personal registration information 5c (not shown) and voiceprint data 6c (not shown).

The encryption unit 9b of the user terminal device 1 is connected to the decryption unit 19d of the database management device 4 via a communication line, and the encryption unit 19a of the database management device 4 is connected to the user terminal via the communication line. It is connected to the decoding unit 9c of the device 1.

As shown in FIG. 2, the data transfer format S1 includes an overhead S2 and a user authentication information area S3.
And a confidential information area S4. The user authentication information area S3 includes personal registration information 5a and voice print data 6a registered in the IC card 3.
The confidential information area S4 includes search information and confidential data. The search information indicates whether the confidential data is search data or stored data. The confidential data is data transferred between the database management device 4 and the user terminal device 1, the search data is data extracted from the database 13, and the accumulated data is data input by the user to the database 13. is there.

A user of the database 13 uses a voice input device of a terminal device (not shown) for registering an IC card in advance to use a user identification code such as an ID code and an algorithm for creating a password and an encryption key 7a. And register it in the IC card 3. At this time, the user identification code and the password can be input from a keyboard instead of voice. Here, the user identification code and the password become the personal registration information 5a, and the registered arbitrary word becomes the voiceprint data 6a which is the personal characteristic information of the user.

Similarly, the same personal registration information 5c and voiceprint data 6c as those registered in the IC card 3 are registered in the voiceprint template / password storage unit 11 of the database management device 4 using a terminal device (not shown). I do.

When the user requests the database 13 to search or store data and transfer the data, the IC card 3 is mounted on the user terminal device 1 and the personal registration information 5a is transmitted from a keyboard, a microphone or the like. It is checked whether or not the entered IC card 3 has been used by a valid user. Specifically, the verification unit 8a in the IC card 3 authenticates the personal registration information 5a of the owner registered in the IC card 3 and the personal registration information of the actual user. If the input personal registration information matches the personal registration information 5a registered in the IC card 3, a user-specific encryption key 7a is created using the voiceprint data 6a.
Here, the voiceprint data 6a used for the algorithm for creating the encryption key 7a is a constant of a calculation formula for creating the encryption key.

If the input personal registration information does not match the personal registration information 5a registered in the IC card 3,
Access to the user terminal device 1 is rejected.

Next, the data conversion section 9 encrypts the transfer data. Specifically, in the encryption unit 9a,
Using the general encryption key 14a, the personal registration information 5a and the voice print data 6a (hereinafter referred to as user authentication information S3) in the user authentication information area S3 of the data transfer format S1 shown in FIG. 2 are encrypted. Do. Also, the encryption unit 9b
, The user-specific encryption key 7a and the general encryption key 1
4a, the search information and the confidential data (hereinafter referred to as confidential information S4) in the confidential information area S4 are encrypted. User authentication information S which is encrypted transfer data
3 and the confidential information S4 are added with an overhead S2, and are transferred to the decryption unit 19d of the database management device 4 via a communication line according to the data transfer format S1. Here, when storing data in the database 13, the data to be stored is input to the input / output device 2 in advance. This data becomes confidential data of the confidential information S4.

The database management device 4 authenticates the user of the transfer data by using a voiceprint template
A collation process with personal information registered in the password storage unit 11 is performed. Specifically, the decryption unit 19d decrypts the user authentication information S3 using the general encryption key 14b, and the information extraction unit 10 extracts the personal registration information 5b and the voice print data 6b. From among the user identification codes of the personal registration information 5c registered in advance in the voiceprint template / password storage unit 11, a user identification code that matches the user identification code of the extracted personal registration information 5b is searched. The password and voiceprint data 6c corresponding to the user identification code are extracted. The user authentication is performed by first checking the user authentication information S of the transfer data in the collating unit 8b.
The password extracted from the voice print template / password storage unit 11 is compared with the password extracted from the voice print template / password storage unit 11, and then the voice print data 6b extracted from the user authentication information S3 of the transfer data and the voice print template / password storage unit 11 are extracted. Collation with the voiceprint data 6c.

If the collation results of the user authentication match and it is authenticated that the data has been transferred by a valid user, the user-specific encryption key 7 is determined using the voiceprint data 6b.
b, the decryption unit 19c decrypts the confidential information S4 using the encryption key 7b and the general encryption key 14b. The information search control unit 12 accesses the database 13 to search for specified data or accumulate data decrypted from confidential data. Here, the encryption key 7b
Is the same as the encryption key 7a in the user terminal device 1.

As a result of the user authentication, if it is verified that the data has been transferred by an unauthorized user, the access to the database 13 is rejected.

When performing a data search, the encryption unit 19
a, the user authentication information S3 is encrypted using the general encryption key 14b, and the encryption key 7b is encrypted in the encryption unit 19b.
b and the general encryption key 14b, the database 13
Then, the confidential information S4, which is the search data extracted from, is encrypted and transferred to the decryption unit 9c of the user terminal device 1 via the communication line. The encryption performed by the encryption units 19a and 19b is performed by the encryption unit 9a of the user terminal device 1 described above.
And 9b.

When the user terminal device 1 receives the transfer data, the decoding unit 9d and the decoding unit 9c decode the transfer data in the same procedure as the above-described decoding units 19d and 19c. To be enjoyed by legitimate users.

In the present embodiment, the encryption key 7a is created each time the user accesses the database 13, but the encryption key 7a may be created simultaneously when the personal registration information 5a and the voice print data 6a are registered in the IC card 3. good. However, in this case, the strictness of the user authentication is lower than in the case of the present embodiment.

[0035]

As described above, the present invention has the following effects.

The first effect is that a legitimate user can easily access a database and obtain confidential information from a user terminal device without using a complicated and expensive device.

The reason is that, in advance, with the IC card,
This is because the personal encryption key can be carried by registering a combination of the user identification code and the password as the personal registration information of the user and the voiceprint data as the personal characteristic information. In addition, an advanced user authentication system that can authenticate users more strictly by encrypting and decrypting transfer information twice using a general encryption key and a user-specific encryption key. Because it has been realized. Furthermore, voiceprint data is input only when the IC card is registered and when the voiceprint data is registered in the voiceprint template / password storage unit of the database management device, and only personal registration information is input when accessing a normal database.

The second effect is that leakage of confidential information from the communication line can be prevented.

The reason is that both the user terminal device and the database management device have a user-specific encryption key and transfer only the encrypted information, so that it is assumed that the information is stolen. This is because the transferred information does not include the encryption key, and it is very difficult for a third party to perform decryption.

[0040] For this reason, it is possible to prevent a third party other than a legitimate user from stealing transfer information from a communication line, prevent unauthorized access to a database by unauthorized access by a third party, and prevent confidentiality. This has the effect of protecting information with high privacy and protecting the privacy of the user.

[Brief description of the drawings]

FIG. 1 is a diagram showing a block configuration of a database search system according to the present invention.

FIG. 2 is a diagram showing a data transfer format on a communication line in FIG. 1;

FIG. 3 is a diagram showing a block configuration of a database search system in a conventional example.

[Explanation of symbols]

 Reference Signs List 1 user terminal device 2 input / output device 3 IC card 4 database management device 5a, 5b personal registration information 6a, 6b voice print data 7a, 7b encryption key 8a, 8b collation unit 9, 19 data conversion unit 9a, 9b, 19a, 19b Encryption unit 9c, 9d, 19c, 19d Decryption unit 10 Information extraction unit 11 Voiceprint template / password storage unit 12 Information search control unit 13 Database 14a, 14b General encryption key S1 Data transfer format S2 overhead S3 User authentication information area S4 Confidential information area

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁶ Identification code FI G06K 17/00 G06K 17/00 V

Claims (3)

(57) [Claims] An IC card as a portable storage medium, a user terminal device for receiving the IC card, and a database management device having a database, wherein the IC card is a valid user of the database. First personal registration information and first personal characteristic information of a certain first user, the first personal registration information and a second user who uses the IC card input to the user terminal device. A first collating unit for collating with the second personal registration information; and a first encryption key unique to the first user created using the first personal characteristic information. An input / output device for inputting and outputting the second personal registration information and the confidential information with the second user, and the first personal registration using a first general encryption key A first encryption unit for encrypting information and the first personal characteristic information; A second encryption unit for encrypting the confidential information using the first general encryption key and the first encryption key, and the first personal registration information and the second encryption unit using the first general encryption key; A first decryption unit for decrypting the first personal characteristic information, and the second decryption unit for decrypting the confidential information using the first general encryption key and the first encryption key And a first data conversion unit comprising: a first data registration unit, the first personal registration information transferred from the user terminal device, the first personal characteristic information,
And the confidential information, a second encryption key unique to the second user created using the first personal characteristic information transferred from the user terminal device, and a second general encryption key And a third decryption unit for decrypting the first personal registration information and the first personal characteristic information using the second general encryption key and the second encryption key. A fourth decryption unit that performs decryption and a third decryption unit that encrypts the first personal registration information and the first personal characteristic information using the second general encryption key.
A second data conversion unit comprising: a second encryption key, a second encryption key, and a fourth encryption unit that encrypts confidential information using the second encryption key. An information extraction unit for extracting the first personal registration information and the first personal characteristic information transferred from the terminal device and decrypted by the third decryption unit; A voiceprint template / password storage unit for storing third personal registration information and third personal characteristic information that are the same as the first personal registration information and the first personal characteristic information, respectively; The first personal registration information is compared with the third personal registration information, and the first personal registration information extracted by the information extracting unit is compared with the first personal registration information.
A second collating unit for collating the personal characteristic information with the third personal characteristic information, and an information retrieval control unit for retrieving and storing data in the database using the confidential information. A database search system. 2. The first to third personal registration information,
The first and third personal characteristic information each include voiceprint data; the confidential information is search data extracted by a data search of the database; and the second user. Comprises one of data stored in the database, wherein the first general encryption key and the second general encryption key are the same, and the contents of the first encryption key and the second 2. The database search system according to claim 1, wherein the contents of the encryption key are the same. 3. The first personal registration information and the first personal characteristic information of the first user are registered in the IC card in advance, and the first personal registration information and the first individual are registered. The third personal registration information and the third personal characteristic information, which are the same as the respective characteristic information, are registered in advance in the voiceprint template / password storage unit, and the second user uses the IC card. When the second personal registration information and the confidential information are input to the user terminal device via the input / output device,
The collating unit collates the first personal registration information with the second personal registration information, and authenticates whether the second user is the same as the first user. If the collation results in the first collation unit do not match, the second user is prohibited from accessing the user terminal device and the process is terminated, and the collation result in the first collation unit is terminated. If matches,
The first encryption key unique to the first user is created using the first personal characteristic information, and the first encryption unit uses the first general encryption key to generate the first encryption key. Encrypts the personal registration information and the first personal characteristic information, and encrypts the confidential information using the first general encryption key and the first encryption key. And transferring the encrypted first personal registration information, the first personal characteristic information, and the confidential information to the database management device, wherein the third decryption unit performs the second general encryption The first personal registration information and the first personal characteristic information transferred from the user terminal device are decrypted using a key, and the information extraction unit is decrypted by the third decryption unit. Extracting the first personal registration information and the first personal characteristic information, wherein the second matching unit The extracted first
Of the third personal registration information stored in the voiceprint template / password storage unit and corresponding to the first personal registration information, and extracted by the information extraction unit. The first personal characteristic information is compared with the third personal characteristic information stored in the voiceprint template / password storage unit, and the second user is the same as the first user. If the second collating unit does not agree with the collation result, the second user is prohibited from accessing the database, and the process is terminated. If the collation results in the parts match,
The second encryption key unique to the second user is created using the first personal characteristic information, and the fourth decryption unit includes the second general encryption key and the second encryption key. Using the encryption key, the confidential information transferred from the user terminal device is decrypted, and the information retrieval control unit uses the confidential information to perform one of data retrieval and data storage of the database. The third encryption unit encrypts the first personal registration information and the first personal characteristic information using the second general encryption key, and the fourth encryption unit The confidential information, which is search data extracted from the database, is encrypted using a second general encryption key and the second encryption key, and the encrypted first personal registration information and the first Personal characteristic information,
And transferring the confidential information to the user terminal device, wherein the first decryption unit decrypts the first personal registration information and the first personal characteristic information using the first general encryption key. And the second decryption unit decrypts the confidential information using the first general encryption key and the first encryption key,
The decrypted first personal registration information, the first personal characteristic information, and the confidential information are output from the user terminal device via the input / output device. 2. A database protection method using the database search system described in 2.