JP3889256B2 - Card anonymous ID output device and parking facility management device for various facilities - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a card anonymous ID output device and a parking facility management device for various facilities using the card anonymous ID output device, in particular, reading identification data such as a driver's license or a number of various credit cards, etc. Convert the identification data into new identification symbols, erase the original identification symbols, identify, verify, authenticate individuals based on the new identification symbols, enter / exit various facilities, use facilities, etc. This invention relates to a card anonymous ID output device that manages the above and a parking lot management device for various facilities using the output device.
[0002]
[Prior art]
For example, Japanese Patent Laid-Open No. 9-274673 “Parking lot management system” describes a management system that uses a license instead of a parking ticket and manages parking lot entry / exit. In this system, when entering the parking lot, the license data (registration number) is read, and the registration number of these licenses is used as an ID symbol. For each ID number, calculation of parking time, calculation of parking fee, It describes that parking management such as leaving permission is performed.
[0003]
[Problems to be solved by the invention]
However, according to what is described in the above document, a driver's license, a bank card, a credit card or the like is optically read, and the read registration number is used as an ID. Are unprotected and stored in the system, and there is a fear and possibility that the data may be misused by a third party.
[0004]
Therefore, managers who manage such facilities should take measures to prevent such important data from being misused, and provide education for employees responsible for operations so that personal data cannot be leaked. Since various measures had to be taken, it was bothersome and burdensome.
[0005]
Reading the registration number of a driver's license, cash card, etc., recording the registration number directly, and using it for verification, authentication, etc. is not necessary to issue a new parking ticket, etc. It can reduce the operation cost and can be said to be very economical and reasonable. However, this information is important personal information that can identify an individual, and involves a lot of risks such as leakage in terms of safety management and operation from the standpoint of personal information protection.
[0006]
Further, for example, it is psychologically resistant to record the registration number of these cards, which can identify an individual in order to use a parking lot, only to eat at a restaurant, on a device. On the other hand, it is sufficient for the parking lot management side to know when the vehicle enters and exits, but handling personal information by providing the personal information that can identify the individual is not leaked. As mentioned above, it was difficult to manage such as managing equipment and educating parking lot managers.
[0007]
The present invention has been made in view of the above-mentioned problems. The purpose of the present invention is to illegally steal these registration numbers even when a driver's license or a personal identification card such as a bank card or credit card is used. It is to provide a system that is not abused and has less administrative and operational burden on the administrator.
[0008]
[Means for Solving the Problems]
In order to achieve the above-mentioned object, the main constituent requirement of the card anonymous ID output device according to the present invention is the identification information consisting of numbers and symbols such as a driver's license and various credit cards as described in claim 1. A personal identification information output device that outputs personal information for newly identifying, collating and authenticating an individual based on the identification information, a card data reading means for reading the personal identification information, and the card data reading Card data storage means for storing the personal identification information read by the means, identification symbol generation means for generating new personal identification information based on the card data stored in the card data storage means, and the identification symbol generation An identification symbol storage means for storing a new identification symbol generated by the means, and a new identification symbol stored in the identification symbol storage means That the identification information output means and characterized in that it is constituted by the card data erasing means for erasing the card data read by said card reading means.
[0009]
In addition, the main constituent requirements of the parking facility management apparatus for various facilities according to the present invention are, as described in claim 4, a storage machine provided at the entrance of the parking lot, a register or accounting department of various facilities, In the parking lot of the facility provided with an exit machine provided at the exit of the car park, an exit gate controlled by the exit machine, and an overall management device for overall management of the entrance machine, the register and the exit machine, Each machine, register or accounting department and issuing machine is equipped with a card processing device for processing card information, and each of these card processing devices has an individual consisting of numbers and symbols such as a driver's license and various credit cards. Card data reading means for reading identification information, card data storage means for storing personal information read by the card data reading means, and card data storage means Based on the stored card data, identification symbol generation means for generating new personal identification information, identification symbol storage means for storing a new identification symbol generated by the identification symbol generation means, and the identification symbol storage means And a card anonymous ID output device comprising: an identification information output means for outputting a new identification symbol stored in the card; and a card data erasing means for erasing the card data read by the card reading means. To do.
[0010]
DETAILED DESCRIPTION OF THE INVENTION
A card anonymous ID output device according to an embodiment of the present invention will be described below with reference to FIGS.
[0011]
FIG. 1 is a block diagram showing a basic configuration of a card anonymous ID (electronic fingerprint) output device according to an embodiment of the present invention. The card anonymous ID output device 1 of the present embodiment includes a card reading means A for reading the contents of a card CK / CT such as a driver's license, a normal credit card, and a bank card, and the card contents read by the card reading means A. Card data storage means B for storing data, card anonymous ID generation means C which is an identification symbol generation means for generating a new identification symbol or identification symbol based on the card data stored in the card data storage means B, and card anonymity Card anonymous ID storage means D which is an identification symbol storage means for storing new card anonymous ID (electronic fingerprint) data generated by the ID generation means C, and card anonymous ID data generated by the card anonymous ID generation means C Based on this, the card anonymous ID regenerating means which is an identification information reproducing means for regenerating a new identification symbol repeatedly And card anonymous ID output means which is identification information output means for outputting the data generated by the card anonymous ID generation means C or the data regenerated by the card anonymous ID regeneration output means E to an external host computer or the like F and card data erasure means G for erasing normal card data stored in the card data storage means B after an anonymous ID (electronic fingerprint) is generated by the card anonymous ID generation means C.
[0012]
FIG. 2 is a mechanism block diagram of the card anonymous ID output device 1. In FIG. 2, reference numeral 2 denotes a card transport passage. The card transport passage 2 has a card detection section 4, a card guide section 2K for guiding insertion and return transport of the card CK / CT, and a card guide section 2K. Are provided with card feeding mechanisms (feed rollers) 3 and 3 and a registration number reading unit 5 for reading the registration numbers of the cards CK and CT. Is configured.
[0013]
In FIG. 2, 6 is a control unit that performs various controls, 7 is a calculation unit that performs various calculations described later, and 8 is a RAM that stores a card number read by the card number reading unit 5. The RAM 8 stores the card data storage means B that stores the card data read by the registration number reading unit 5 and the card anonymous ID storage means D that stores the anonymous ID data generated by the card anonymous ID generation means C. It corresponds to. Reference numeral 9 denotes a ROM that stores various calculation reference data, and reference numeral 10 denotes a communication control unit that sends calculation results of the calculation unit 7 to an external device such as a host computer.
[0014]
FIG. 3 is a block diagram of a card anonymous ID (electronic fingerprint) output device, in which the same or corresponding parts as those in FIG. As shown in FIG. 3, the card detection unit 4, the registration number reading unit 5, the control unit 6, the calculation unit 7, the RAM 8, the ROM 9 and the communication control unit 10 are connected by a bus 11.
[0015]
The cards CK and CT sent by the card feeding mechanisms 3 and 3 are detected by the card detection unit 4. The registration number reading unit 5 includes an image scanner, and the image scanner is a device for reading image data of a driver's license. The registration number reading unit 5 reads the card registration number in response to the card detection signal detected by the card detection unit 4 and stores the read card registration number in the RAM 8. The calculation unit 7 calculates the card data read by the registration number reading unit 5 based on the reference calculation data in the ROM 9, converts it into a card anonymous ID symbol, and stores it in the RAM 8. Accordingly, the RAM 8 corresponds to the card data storage means B and the card anonymous ID storage means D described above. As the reference calculation data stored in the ROM 9, a one-way function, for example, a hash value is stored. The control unit 6 controls the calculation unit 7, the RAM 8, and the ROM 9. The communication control unit 10 causes the new card anonymous ID symbol stored in the RAM 8 to be output to the outside as a one-way function / card anonymous ID (electronic fingerprint) of character string information. Further, the control unit 6 controls the card anonymous ID output means F stored in the RAM 8 and causes the card data erasing means G to erase the original card data stored in the registration number reading unit 5.
[0016]
The hash function is a computer process having a feature that returns a one-way and variable-length input as a fixed-length character string called a hash value. The hash value is called a message digest. In the field of cryptography, it is used to obtain a small character string (digest) from large data. Since this process is faster than the calculation using the public key, it is mainly used to speed up the electronic signature process. Common examples include MD4, MD5, and SHA.
[0017]
MD5 outputs a numerical value of 128 bits (32 lines in hexadecimal) for every input. For example, a character string “password” is converted into a new function using a hash function md5. The result derived through this new function is irreversible, and it is impossible to derive the original character string “password” from this converted character string.
[0018]
FIG. 4 is a basic flowchart of the card anonymous ID (electronic fingerprint) output device according to the embodiment of the present invention. As shown in FIG. 4, in step S1, the control unit 6 determines whether or not the card detection unit 4 has detected a card. When a card is detected, the process proceeds to step S2, and the control unit 6 causes the card feeding mechanism 3 to start card conveyance. Next, at step S3, the card registration number reading unit 5 reads the card number. In the next step S4, the card registration number data is stored in the RAM 8. In step S5, the calculation unit 7 calculates a card anonymous ID of a one-way function (for example, a hash value) of character string information, generates a card anonymous ID (electronic fingerprint), and stores the card anonymous ID in the RAM 8 To store. Thereafter, in step S6, the data of the card registration number stored in the RAM 8 is erased. Next, in step S7, the calculated card anonymous ID is output to the communication control unit 10. In step S8, the card feeding mechanism 3 performs card return conveyance. In step S9, it is determined whether or not the card detection unit 3 has detected a card. If a card is detected, the process proceeds to step S10 and conveyance is stopped. If not detected, the process returns to step S8.
[0019]
The card anonymous ID (electronic fingerprint) output device of the present invention reads registration number information of cards such as a driver's license, a cash card or a credit card optically or with a communication technology such as an IC card, and the registration thus read. Instead of outputting the number information itself, a one-way function (for example, a hash value), which is character string information called electronic fingerprint, is calculated from the read registration number information, and the original read registration number information itself is erased. Resulting in. The resulting electronic fingerprint information is recorded and used as an identification ID for verification and authentication purposes.
[0020]
From the electronic fingerprint information which is the calculation result, the original registration number cannot be restored, and it is a meaningless character string converted to an anonymous ID that cannot be reached by personal information. Therefore, even if this electronic fingerprint information is used, provided to a third party, or leaked, there will be no damage to the user of the parking lot or the like.
[0021]
Further, according to the card anonymous ID (electronic fingerprint) output device, the calculation of the one-way function (for example, hash value) that is an electronic fingerprint can arbitrarily set the number of repetitions of the calculation. Even with the same driver's license, registration number information of cards such as cash cards and credits, the electronic fingerprint information results in different character string data as long as the number of repeated computations is changed.
[0022]
As a result, by changing this setting count for each system of entry / exit and making it non-public, even if the electronic fingerprint information is held in another similar system, the electronic fingerprint information has no meaning Therefore, it is almost impossible to reverse detect the driver's license number by any means.
[0023]
As described above, by converting the registration number information of cards such as driver's licenses, cash cards and credits into anonymous ID (electronic fingerprint information), it is possible to construct a system with less burden on the management (duty) of personal information. . This frees you from annoying management and operation work related to personal information.
[0024]
FIG. 5 is a block diagram showing an embodiment of a parking facility management device for various facilities using the card anonymous ID output device according to the present invention. The various facility parking lot management apparatus shown in FIG. 5 is a roadside restaurant.
[0025]
In FIG. 5, 20 is a warehousing machine installed at a parking lot entrance, and this warehousing machine 20 incorporates the card anonymous ID output device of the present invention. 21 is an entry gate controlled to be opened and closed by the entry machine 20, and 22 is an exit machine at the exit of the parking lot. The exit machine 22 also incorporates the card anonymous ID output device of the present invention. 23 is a delivery gate controlled to be opened and closed by the delivery machine 22, and 30 is a host computer as a parking lot management computer disposed in the parking lot management room 30X. Reference numeral 31 denotes a register provided in a checkout office of a restaurant in the facility, and the card anonymous ID output device 1 according to the present invention is disposed in the checkout office. The warehousing machine 20 is connected to the host computer 30 by the communication line F1, the restaurant card anonymous ID output device 1 and the host computer 30 are connected by the communication line F2, and the warehousing machine 23 and the host computer 30 are connected by the communication line F3. It is connected.
[0026]
As shown in FIG. 1, the card anonymous ID output device 1 includes a card reading means, a card storage means, a card anonymous ID generation means, a card anonymous ID storage means, a card ID regeneration means, and a card anonymous ID output. And card data erasing means.
[0027]
Furthermore, the warehousing machine 20 and the unloading machine 22 are each provided with a vehicle detection sensor, an image scanner, a motor control circuit, a motor, a communication interface, an external storage device, an external storage interface, a memory, a control unit, and the like. The vehicle detection sensor is a sensor for detecting that the vehicle has reached before the entry gate 21 and the exit gate 23. The image scanner is a device for reading image data of a driver's license of an attendant and a participant.
[0028]
Reference numeral 30X denotes a parking lot management room, and the parking lot management room 30X includes a host computer which is a parking lot management computer as a general information processing apparatus that controls the area between the warehousing machine 20, the register 31, and the unloading machine 22. 30 is disposed. The host computer 30 includes a keyboard, a keyboard interface, a display device, a display device controller, a communication interface, an external storage device, an external storage interface, a memory, a control unit, and the like. The keyboard is an input device for an operator to input characters and the like. The keyboard interface is a device that transmits data such as characters input from a keyboard to a bus.
[0029]
In the facility parking lot management apparatus of the embodiment shown in FIG. 5, when the customer's vehicle reaches the parking gate 21 in the parking lot, the vehicle detection sensor provided in the warehouse 20 senses the vehicle and controls it. Notify the department. First, the control unit waits for a driver's license to be inserted into the image scanner. When the driver's license is inserted, the image data is read by an image scanner.
[0030]
Next, the control unit of the warehousing machine 20 performs OCR processing on the image data of the driver's license to obtain the driver's license data, and the driver's license data is also transmitted to the card anonymous ID output device 1 via the communication interface. Send to. The card anonymous ID output device 1 converts the driver's license data into a card anonymous ID symbol, and transmits it to the host computer 30 via the communication line F1 by the communication control unit 10.
[0031]
When the anonymous data is transmitted from the warehousing machine 20, the control unit of the host computer 30 detects that fact and receives the anonymous data from the warehousing machine 20 via the communication interface. Then, the control unit of the host computer records the anonymous ID data reception date and time in the warehouse database. When the above processing is completed, the control unit of the host computer 30 transmits to the apparatus 1 that anonymous data has been received.
[0032]
When receiving the notification that the anonymous data has been received from the host computer 30, the control unit of the waiting storage device 20 instructs the motor control circuit to operate the motor to open the storage gate 21, and from the vehicle detection sensor to the vehicle Waits for a notification that the vehicle has passed the warehousing gate 21. When the vehicle passes through the warehousing gate 21, the control unit of the warehousing machine 20 instructs the motor control circuit again to operate the motor and close the warehousing gate 21.
[0033]
When paying the fee, the restaurant customer finishes the meal, takes the receipt to the checkout counter, and the store clerk inputs from the input device of the register 31 that the checkout process should be started. The unit starts processing. The control unit also receives data such as a barcode from the barcode. When the input of the barcodes for all the products is completed, the control unit of the register 31 instructs the display device controller to display the total price of the products on the display device.
[0034]
When the clerk receives the total amount, the clerk inputs the fact that it has been settled into the card anonymous ID output device 1, and the card anonymous ID output device 1 converts the data of the driver's license into anonymous data, and this converted card The anonymous ID information and the leaving permission information are transmitted to the host computer 30 through the communication line F2. The host computer 30 collates and confirms the card anonymous ID information from the register 31 with the anonymous data from the warehousing machine 20, and transmits the card anonymous ID information and the shipping permission information to the warehousing machine 22 through the communication line F3.
[0035]
Next, when the customer's car arrives in front of the parking gate 23 at the parking lot, the vehicle detection sensor provided in the shipping machine 22 senses the vehicle and notifies the control unit to that effect. Starts processing. When the driver's license is inserted, the image data is read by the image scanner. The unloading machine 22 converts the driver's license data into an anonymous ID symbol, checks the anonymous ID symbol against the anonymous ID information from the host computer 30 and the unloading permission information, and if it matches, the motor control circuit When instructed to open the exit gate 23 and the vehicle passes the exit gate 23, the controller of the exit machine 22 instructs the motor control circuit again, operates the motor to close the exit gate 23, and ends the process.
[0036]
The facility parking lot management insertion shown in FIG. 5 uses the number of the car driver's license CK that must be possessed by the parking lot user as an ID, but the data is never used as personal information, or to a third party. It is a system that cannot be provided, and is a system that reduces the burden of proper management (duty) of personal information.
[0037]
Further, since a parking ticket is not used, a mechanism for issuing a ticket is unnecessary, and since the permission for delivery includes settlement at the cash register 31 of the restaurant, a mechanism for handling coins and bills is also unnecessary. As a result, the main device becomes a simple system of a card anonymous ID (electronic fingerprint) output device and is inexpensive. In addition, since no parking ticket is used, no waste is generated and low-cost operation is realized.
[0038]
Therefore, according to the present invention, the number of the driver's license CK is read by the card anonymous ID (electronic fingerprint) output device 1 when entering the parking lot, and the gate 21 is opened to receive the goods (at this time, the electronic fingerprint) If the information and the entry time are stored in the storage device) and cannot be identified by the card anonymous ID output device, a numeric keypad capable of inputting the registration number of the cards is used. However, since the stored data is the electronic fingerprint information obtained as a result of the calculation, the personal information is managed appropriately. As an option, issue a sheet-type parking ticket (printing the time of receipt and electronic fingerprint information) and printing the journal.
[0039]
As for the permission to leave at the cash register 31, the person who dine is presented with a driver's license at the time of payment at the cash register 31, and the driver's license number is read by the card anonymous ID (electronic fingerprint) output device 1. A free shipping permission or a paid payment is given from the electronic fingerprint information stored in and the time of loading. For exiting from the parking lot, the driver's license number is read by the card anonymous ID (electronic fingerprint) output device 1 before the gate 23 at the time of exiting, checked against the exit permission information, the gate is opened, and the exit is made.
[0040]
FIG. 6 is a configuration diagram showing an example in which the various facility parking management apparatus according to the present invention is applied to a parking lot of a hospital 32. The facility parking lot management apparatus of FIG. 6 uses a driver's license CK or a medical examination ticket CT as a personal identification card, and the other parts are the same as those of the management apparatus of FIG.
[0041]
In the parking lot management device of FIG. 6 as well, the card, which is issued by the hospital, store, organization, etc. that provides the parking lot, such as paper, resin card, magnetic card, IC card, etc. The ticket CT can be used as it is, and personal information can be specified. For example, the parking lot is operated and managed without storing the examination ticket number in the storage device, and the data is never used as personal information. It is a system that can not be provided to the system, and has a small burden of proper management (duty) of personal information. In addition, it is possible to reduce the replenishment work of parking tickets and the running cost and to provide a low-priced simple device system.
[0042]
That is, according to the apparatus shown in FIG. 6, when entering the parking lot, the card anonymous ID (electronic fingerprint) output device 1 reads the examination ticket CT, or the person who does not have the examination ticket CT reads the number of the driver's license CK. , The gate 21 is opened and the customer enters the warehouse (at this time, the electronic fingerprint information and the entry time are stored in the storage device). If the card anonymous ID output device cannot identify, a numeric keypad is provided that can input the registration number of the cards. However, since the data is stored as electronic fingerprint information, the personal information is managed appropriately. . As an option, issue a sheet-type parking ticket (printing the time of receipt and electronic fingerprint information) and printing the journal.
[0043]
For the delivery permission at the accounting section 33 of the hospital 32, the consultation section CT presents the examination ticket CT or the driver's license CK at the return of the examination, visit, etc., and outputs it as a card anonymous ID (electronic fingerprint) output device 1, and is given free shipping permission or paying permission based on the electronic fingerprint information stored in the storage device and the storage time.
[0044]
For exiting from the parking lot, at the time of exiting, the examination ticket number or driver's license number is read with the card anonymous ID (electronic fingerprint) output device 1 in front of the gate 23, collated with the exit permission information, and the gate 23 is opened. Get out. Further, for example, by storing a specific electronic fingerprint such as a driver's license, an employee ID card, or a medical examination ticket in the exit device, it can be handled in the same way as a commuter pass.
[0045]
【The invention's effect】
As explained above, for example, when reading the registration number of a driver's license or the number of a credit card and using the data as a management number in parking lot use, such data is leaked and is However, according to the present invention, the read data such as the driver's license is immediately obtained from the original data. Since the original data is deleted and replaced with a new identification number that is different from the above number, an important registration number is not used by a third party. In addition, since the identification number is generated using a one-way function such as a hash value, it is not abused because it is not known what the original data is. Furthermore, since a new identification number is repeatedly generated based on the generated identification number, it is excellent that it is almost impossible to decipher the original driver's license number etc. Advantages can be demonstrated.
[Brief description of the drawings]
FIG. 1 is a block diagram of a card anonymous ID output device according to an embodiment of the present invention.
FIG. 2 is a mechanism block diagram of a card anonymous ID output device according to an embodiment of the present invention.
FIG. 3 is a block diagram of a card anonymous ID output device according to an embodiment of the present invention.
FIG. 4 is a basic flowchart of the card anonymous ID output device according to the embodiment of the present invention.
FIG. 5 is a configuration diagram of a parking facility management apparatus for various facilities according to an embodiment of the present invention.
FIG. 6 is a block diagram of a parking facility management apparatus for various facilities according to another embodiment of the present invention.
[Explanation of symbols]
1 Card anonymous ID output device
2 Card reading mechanism
3 Card feed mechanism
4 Card detector
5 Registration number reading section
6 Control unit
7 Calculation unit
8 RAM
9 ROM
10 Communication control unit
20 Warehousing machine
21 Warehouse gate
22 Unloading machine
23 Exit gate
30 Parking management computer
31 registers
32 Hospital
33 Accounting Department

Claims (6)

A personal identification information output device that reads identification information composed of numbers and symbols such as a driver's license and various credit cards, and outputs personal information based on the identification information to newly identify, verify, and authenticate an individual. ,
Card data reading means for reading the personal identification information;
Card data storage means for storing personal information read by the card data reading means;
Identification symbol generating means for generating new personal identification information based on the card data stored in the card data storage means;
Identification symbol storage means for storing a new identification symbol generated by the identification symbol generation means;
Identification information output means for outputting a new identification symbol stored in the identification symbol storage means; and
Card data erasing means for erasing card data read by the card reading means;
The card anonymous ID output device characterized by comprising. 2. The card anonymous ID output device according to claim 1, further comprising identification information regenerating means for repeatedly generating a new identification symbol based on the newly generated identification symbol. The card anonymous ID output device according to claim 1, wherein the newly generated identification symbol is a unidirectional character string. Warehousing machine provided at the entrance of the parking lot, register or accounting department of various facilities, warehousing machine provided at the exit of the parking garage, a warehousing gate controlled by the warehousing machine, In the parking lots of various facilities equipped with an overall management device that manages the accounting department and the issuing machine,
The warehousing machine, the register or the accounting department, and the warehousing machine each have a card processing device for processing card information,
Each of these card processing devices stores card data reading means for reading personal identification information consisting of numbers and symbols such as a driver's license and various credit cards, and personal identification information read by the card data reading means. Based on the card data storage means, card data stored in the card data storage means, identification symbol generation means for generating new personal identification information, and new identification symbols generated by the identification symbol generation means are stored. Identification symbol storage means, identification information output means for outputting a new identification symbol stored in the identification symbol storage means, and card data erasure means for erasing card data read by the card reading means Parking facility management device for various facilities, characterized by comprising a card anonymous ID output device 5. The card anonymous ID output device including an identification information regenerating unit for repeatedly generating a new identification symbol based on the newly generated identification symbol. Parking facility management device for various facilities described in 1. The parking facility management apparatus for various facilities according to claim 4 or 5, wherein the newly generated identification symbol has a card anonymous ID output device which is a unidirectional character string.

Images