JP3839110B2 - Card authentication system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a card authentication system for the holder of the card to authenticate whether a person.
[0002]
[Prior art]
At present, various cards are available, such as a credit card used for shopping, a driver's license, a passport, etc. used for identification.
For example, a photo is usually affixed together with various information on identification cards, etc., and the person who examines it verifies the identity by comparing it with the face of the person who held the card. ing.
Since these cards are printed matter, all necessary information is described, and it has a drawback that it is relatively easy to forge.
The problem is that the necessary information is printed in a form that is visible to everyone, and simple paper or plastic-based cards cannot solve this problem.
[0003]
Also, cash cards such as banks, credit cards and the like store information on the back by magnetism or the like, and authentication is performed by matching with a personal identification number registered at the time of making the card. In this case as well, it is easy to guess the code number and the storage capacity is small, so that it is relatively easy to forge.
This shortage of storage capacity is being alleviated because memory cards and IC cards have become widespread and it has become possible to have a capacity in megabytes.
[0004]
On the other hand, with recent developments in cryptography technology, technologies such as digital signatures and cryptography have been developed. Using this technology, the technology for authenticating identity issues and network tampering issues has improved. Have been doing.
For example, in the digital signature method, when sending information to the other party, a compressed ciphertext in which personal identification information is secretly woven after compressing the body information in addition to the body text is also sent to the other party. Since this compressed ciphertext is sent using the public key cryptosystem, the receiver obtains the compressed text using the sender's public key, decompresses it, and compares it with the text sent without compression. You can know what was done.
[0005]
[Problems to be solved by the invention]
Various measures have been taken to prevent forgery of current identification cards and cards. For example, the adoption of micro characters on banknotes, the adoption of hologram printing on a credit card or the like.
These are all grounds for preventing counterfeiting that printing technology is not common. However, with the development of technology, hologram printing, which was said to be difficult to counterfeit, has also been counterfeited, and the damage of counterfeit credit cards has ceased.
This is a result of relying on anti-counterfeiting only depending on whether or not a specific technology is retained, and even if the technology is known, a method that does not forge is desired.
[0006]
In view of the above problems, and an object thereof is to provide a card authentication system that can easily see that the person having the specified entitlement is possessed.
[0007]
[Means for Solving the Problems]
In order to solve this problem, the card authentication system according to the first aspect of the present invention includes an information input unit that inputs information stored in the storage unit of the card, and an information output that outputs the input information to the storage unit of the card. And an information display unit that causes any part of the input information to be deleted and displayed on the card surface, the information output unit from the information input unit stored in the storage unit of the card A card creation system that further includes a unique information creation unit that creates unique information according to a certain rule kept secret based on input information, and that registers the unique information created by the unique information creation unit in a database; The card reader that reads information stored in the storage unit of the card created by the card creation system and the secret based on the information read from the storage unit of the card. A unique information creation unit that creates unique information according to certain rules, a unique information query unit that queries the database for unique information of the card based on information obtained from the storage unit of the card, and the unique information creation unit The unique information obtained from the unique information obtained from the unique information inquiry unit, and when the matching result matches, the read is performed to prompt the identity of the card holder. And a card information display unit that displays information other than the information displayed on the card surface on a display device .
According to a second aspect of the present invention, there is provided a card authentication system for inputting information to be stored in a storage unit of a card, an information output unit for outputting the input information to a storage unit of the card, and the input. An information display unit that causes an arbitrary part of the information to be deleted and displayed on the card surface, and the information output unit receives information input from the information input unit stored in the storage unit of the card. A unique information creation unit that creates unique information according to certain rules kept secret, and a card creation system that registers the unique information created by the unique information creation unit in a database; A card inspection unit for inspecting whether or not the card, a card reading unit for reading information from the storage unit of the card, and passing the information read by the card reading unit to the information verification unit to obtain a verification result A collation result inquiry unit for displaying the result on a display device, a unique information creation unit for creating unique information based on information from the collation result inquiry unit according to a certain rule kept secret, and the collation Based on the information from the result query unit, the unique information query unit that queries the database for unique information, the unique information obtained from the unique information creation unit, and the unique information obtained from the unique information query unit are collated. , The unique information collation unit for returning the result to the collation result inquiry unit, and when the contents of the card are not falsified, the information of the read out to prompt the identity of the card holder And a card information display unit that displays information other than that displayed on the card surface on a display device .
[0008]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, the present invention will be described based on examples, but a driver's license will be described as an example of card creation and authentication. Here, it is assumed that the driver's license includes the name, date of birth, family register, address, promulgation date, license number, license date, type of license, and photograph of the person.
[0009]
FIG. 1 is a schematic configuration diagram showing an embodiment of a card making system.
The information input unit 2 causes the input device 1 to input character information such as name and date of birth and image information such as a photograph. In the input device 1, the character information may be input from a keyboard, a mark sheet, a touch pen, a scanner, or the like, and the image information may be input from a scanner or a digital camera. The information output unit 3 writes the input information to the storage unit of the card 5. The information display unit 4 causes the surface of the card 5 to be printed so as not to display a part of the information written to the storage unit. For example, FIG. 2 shows an example in which the date of birth is not displayed. The card 5 may be any of a card with a magnetic tape, a memory card, an IC card, an optical disk, and the like.
[0010]
FIG. 3 is a schematic configuration diagram showing an embodiment of the card authentication system.
The card reading unit 6 reads information from the storage unit of the card 5. When reading information from the storage unit of the card, the coupling method between the card and the card authentication system may be directly connected by a connector or non-contact coupling such as optical communication or radio.
[0011]
The card information display unit 7 displays the read information on the display device 8. FIG. 4 shows an execution image of this card authentication system. All information stored in the storage unit on the card is displayed on the display device, and the owner of the card is identified by the operator of the system by asking the card holder of information that is not printed on the card, such as the date of birth. It can be confirmed.
[0012]
In particular, the amount of memory can be saved by compressing and storing image information such as photographs. In addition, there is an effect of making it difficult to forge the card by making it difficult to analyze the compression format and the storage position on the memory.
[0013]
By encrypting the information when writing information in the storage unit of the card 5, further contents of the storage unit is difficult to analyze whether the mean what hardly spear counterfeit cards.
The encryption of the card making system is configured to be executed by the encryption unit 31 before writing the information read by the information output unit 3 of FIG. 1, and then output to the card.
Further, the decryption of the encryption of the card authentication system is performed by the decryption unit 61 by the decryption unit 61 using the information read from the card storage unit in the card reading unit 6 of FIG. Configure as follows.
[0014]
In the configuration of the invention described in another claim, the information output unit and the card reading unit of the card can be configured by adding the encryption unit 31 and the decryption unit 61, respectively.
[0015]
For encryption / decryption using an encryption method such as DES with a secret key for decrypting a cipher such as DES or an encryption method such as RAS using a public key and a secret key. The key can be configured as common to all cards.
In this case, a common key is stored in the card creation and card authentication system, information encrypted using this key is stored in the card, and a key for decryption may not be stored. So it becomes difficult to tamper with the data in the card.
Further, this key may be placed in a terminal for card creation or card authentication, or may be separated from the terminal.
[0016]
To difficult the falsification of card, may be made to further stored in the storage unit of the card to create a unique value for each card.
In the information output unit 3 of the card creation system of FIG. 1, a unique information creation unit 32 is provided, and a unique value is calculated using all or part of the information input from the input device 1 by the information input unit 2. To do. For example, a one-way hash function for calculating a cipher may be used for this calculation formula.
The unique information calculated in this way is stored as an electronic seal in the storage unit of the card 5 together with the input information. The example of FIG. 5 shows the contents of the storage unit of the card for the driver's license.
[0017]
The card authentication system relating to the card storing the unique information created in this way operates as follows.
The card reading unit 6 reads information about the person and unique information from the storage unit of the card 5. The unique information creation unit 62 creates unique information once again using the same calculation formula as when the unique information was created by the card creation system.
The unique information collation unit 64 collates the created unique information with the unique information read from the card storage unit.
If the results match, the information in the card has not been altered. For example, as shown in FIG. 4, “authentication” may be displayed on the display device to indicate that no falsification has occurred.
After that, you can confirm information that is not on the surface of the photo or card with the holder to confirm that you are the person.
[0018]
If unique information is stored in this way, for example, even if the name field is falsified, it is necessary to recalculate this unique information. By keeping the calculation method of unique information and the information used for that purpose secret, etc. Tampering becomes even more difficult.
[0019]
In the method of storing the unique information in the card as described above, there is a risk that the calculation formula is inferred by analyzing the unique information.
For this reason, in order to further prevent the card from being tampered with, this unique information may be stored in the card.
For this purpose, the card creation system shown in FIG. 6 adds a unique information creation unit 32 and a unique information output unit 33 to the information output unit 3.
The creation of the unique information by the unique information creation unit 32 is the same as the calculation method described in (3). The unique information output unit 33 registers the calculated unique information, information used for that purpose (part or all), and information used as a search key in the database 9 managed by the card creator.
[0020]
The card authentication system made in such a card making system has the configuration shown in FIG.
The card reading unit 6 reads information from the storage unit of the card 5. The unique information creation unit 62 creates unique information by the same calculation method as the same information as the unique information creation unit 32 of the card creation system described above.
Also, the unique information inquiry unit 63 takes out the unique information from the database 9 using the information read from the card as a key.
The unique information collating unit 64 collates the retrieved unique information with the previously calculated unique information, and if they match, it can be seen that the contents of the card have not been tampered with. The result may be displayed on the display device as “authentication” as shown in FIG.
Thereafter, the information read by the card reading unit 6 can be displayed on the card information display unit 7 and the owner can be inquired about the information that is not printed on the photograph or the card surface to confirm the identity.
[0021]
The database 9 may be directly connected to the card creation system. Further, it may be configured to be coupled to the card creation system and the card authentication system via a dedicated line, a wireless network communication line as shown in FIG.
[0022]
For the above mentioned system, to calculate a unique information is the inspection apparatus as a terminal for operating the respective card authentication system. If this inspection device is stolen, the calculation formula for calculating the unique information is analyzed and may be understood.
Therefore, the card inspection unit 10 and the information collation unit 20 as shown in FIG. The card inspection unit 10 operates each card authentication system for each terminal.
The information matching unit 20 may be operated on a database server connected to a network as shown in FIG. 8, or may be configured to be directly connected to a card creation system or a card authentication system.
[0023]
The card inspection unit 10 includes a card reading unit 11 and a card information display unit 7.
The card reading unit 11 reads information from the storage unit of the card 5 and passes the information to the verification result inquiry unit 12 and the card information display unit 7.
The verification result inquiry unit 12 delivers the read information to the information verification unit 20 as a key, inquires whether the information has been tampered with, and causes the display device 8 to display the result.
The card information display unit 7 displays information read from the storage unit of the card 5 by the card reading unit 11 on the display device 8. After that, if the collation result is not falsified, it is possible to confirm the identity by inquiring to the holder about information that is not printed on the surface of the photo or card.
[0024]
The information collation unit 20 creates unique information using the information from the collation result inquiry unit 12 (unique information creation unit 21), and simultaneously inquires the database 9 for unique information at the time of card creation as a key (unique information query). Part 22).
By comparing these two pieces of unique information, it can be seen that the contents of the card are not tampered with in the matched match. This result is returned to the collation result inquiry unit 12.
[0025]
With this method, the formula for calculating unique information can be freely changed on the card creation and authentication side (possible even for each card), making it more difficult to forge.
[0026]
When using an encryption scheme such as RAS using another configuration encryption public key and a private key a key as a method for its can to change the key for each card be constructed as follows.
[0027]
The card making system is configured as follows.
-When creating a card, a secret key and a public key are created for each card.
・ Encrypt information stored in the card with a public key.
The information (for example, this public key, card number, etc.) that associates the encrypted information and the secret key with this card is stored in the card.
-Store in the database information that links the encrypted information and the private key with this card.
[0028]
The card authentication system is configured as follows.
-Read information (public key, card number, etc.) linking this card and the private key from the card.
-Query the database based on this information to retrieve the private key.
・ Decrypt using this secret key.
-Display the decrypted information, inquire about the items that are not listed on the card surface, or compare the displayed photo, the photo of the card, and the person in question to see if it is the person.
[0029]
【The invention's effect】
As described above, the card authentication system according to the first and second aspects of the invention encrypts information stored in the card to reduce the possibility of deciphering the digitized content, and also prevents tampering and counterfeiting. It becomes easy to discover.
[Brief description of the drawings]
FIG. 1 is a schematic configuration diagram of a card making system showing an embodiment of the present invention.
FIG. 2 is an example of printing on the card surface.
FIG. 3 is a schematic configuration diagram of a card authentication system showing an embodiment of the present invention.
FIG. 4 is an execution example of a card authentication system showing an embodiment of the present invention.
FIG. 5 is an example for showing contents of a storage unit of a card.
FIG. 6 is a schematic configuration diagram of a card creation system having unique information as a DB.
FIG. 7 is a schematic configuration diagram of a card authentication system having unique information as a DB.
FIG. 8 is a schematic configuration diagram of a card creation / authentication system in which the present invention is network compatible.
FIG. 9 is a schematic configuration diagram of a card authentication system configured by separating a card inspection unit and an information verification unit for unique information.
[Explanation of symbols]
1 ...... Input device,
2 …… Information input section,
3 ... Information output section,
4 ... Information display section
5 …… Card,
6 …… Card reader,
7 ...... Card information display section,
8 …… Display device,
9 …… Database.

Claims (2)

An information input unit for inputting information to be stored in the storage unit of the card ;
An information output unit for outputting the information the input to the storage unit of the card,
An information display unit that displays an arbitrary part of the input information to be displayed on the card surface,
The information output unit further includes a unique information creation unit that creates a unique information in the card predetermined rule the information inputted from the information input unit stored in the storage unit is in the secret group,
A card creation system for registering the unique information created by the unique information creation unit in a database;
A card reading unit that reads information stored in a storage unit of a card created by the card creation system;
And unique information creating unit that creates a unique information at a constant rule information read from the storage unit is in the secret based on said card,
And unique information inquiring unit for inquiring the unique information of the said card to the database on the basis of the information obtained from the storage unit of the card,
A unique information collation unit that collates the unique information obtained from the unique information creation unit and the unique information obtained from the unique information inquiry unit;
A card information display unit for displaying on the display device information other than that displayed on the card surface among the read information in order to prompt the identity of the card holder when the collation results match. A card authentication system characterized by that. An information input unit for inputting information to be stored in the storage unit of the card ;
An information output unit for outputting the input information to a storage unit of the card;
An information display unit that displays an arbitrary part of the input information to be displayed on the card surface,
The information output unit further includes a unique information creation unit that creates a unique information in the card certain rule which is secret based on information inputted from the information input unit stored in the storage unit of,
A card creation system for registering the unique information created by the unique information creation unit in a database;
A card inspection unit that inspects whether the card belongs to the person,
A card reading unit for reading information from the storage unit of the card;
A verification result inquiry unit that passes the information read by the card reading unit to the information verification unit to obtain a verification result, and displays the result on the display device;
And unique information creating unit that creates a unique information in the collation result from the inquiry unit information of certain of said kept secret based on rules,
And unique information inquiring unit for inquiring the unique information to the verification result said based on information from the query part database,
A unique information collating unit that collates the unique information obtained from the unique information creating unit and the unique information obtained from the unique information query unit, and returns the result to the collation result query unit;
When that determination is made that there are no tampering with the contents of the card, the card information to display information other than that displayed on the card surface of the read information to facilitate identification of the holder of the card on the display device A card authentication system comprising: a display unit.

Images