JP4181572B2 - IDENTIFICATION SYSTEM, IDENTIFICATION METHOD, IDENTIFICATION DEVICE, AND IDENTIFICATION PROGRAM - Google Patents

Description

  The present invention relates to an identification system, an identification method, and an identification program. In particular, by creating an ID card and registering the contents with a center such as an ASP (Application Service Provider), anyone from anywhere can access the center via a network such as the Internet. More particularly, the present invention relates to a system, method, and program for providing a service (identification service) whose contents can be confirmed.

  Until now, ID cards such as student ID cards, driver's licenses, and employee ID cards have been used as identification cards. However, most of the cards that can be easily counterfeited such as business cards during company visits. Recently, identification cards with IC (integrated circuit) cards have also been used, but even this method has the risk of spoofing (due to card theft etc.).

In order to prove the time, a method of issuing an authentication code by combining time information indicating the time and unique data that can be obtained only at the time is known (for example, see Patent Document 1). As a service using this method, for example, there is a COCO-DATES (registered trademark) service (website URL <http://www.mitsubishielectric.co.jp/coco-dates/>).
JP 2001-297062 A

  In recent years, with the enforcement of the Personal Information Protection Law and the introduction of ISMS (Information Security Management System) / BS (British Standard) 7799, corporate security awareness of confidential information has increased. Among them, inspection of copiers and floor cleaning in corporate offices are outsourced, and humans other than employees frequently enter and leave the office, so many risks are latent. Similarly, in the life of ordinary citizens, the necessary identification is not thoroughly enforced for visits such as life insurance and courier services. Under such circumstances, there has been a problem that conventional identification cannot prevent spoofing due to forgery or theft of identification. In addition, there is a problem that it takes a lot of cost to introduce an identification card system such as an IC card.

The present invention is, for example, aims to spoofing by counterfeit or stolen to issue a difficult identification card.

The identification system according to the present invention is:
In an identification system that proves the identity of a user using an identification card,
An input unit for inputting identification information about the user;
Providing an authentication service for issuing an authentication code for certifying the time by combining time information indicating the time and unique data that can be obtained only at the time, and contractor information on a contractor of the authentication service An authentication code acquisition unit for acquiring an authentication code for proving a predetermined time from an authentication device stored in advance in a database;
An identification card generating unit for generating an output image of an identification card for displaying the identification information input by the input unit and the authentication code acquired by the authentication code acquiring unit;
An identification card issuing device having an identification information registration unit that requests to register the identification information input by the input unit and the authentication code acquired by the authentication code acquisition unit in association with each other;
A verification unit that verifies whether the identity information input by the input unit of the identification card issuing device matches the contractor information stored in the database;
When the verification by the verification unit is successful, the identification information input by the input unit of the identification card issuing device and the authentication of the identification card issuing device according to the request by the identification information registration unit of the identification card issuing device An identification device having an identification information management unit for storing the authentication code acquired by the code acquisition unit in association with each other;
The identification card issuing device further includes:
And an output unit that outputs an identification card based on the output image generated by the identification card generation unit when the registration request by the identification information registration unit is successful.

The identification card issuing device further includes:
A photographing unit for photographing the user;
The authentication code acquisition unit of the identification card issuing device acquires, as the predetermined time, an authentication code for proving the time when the photograph was taken by the photographing unit,
The identification card issuing device further includes:
A photo registration unit for registering the photograph taken by the photographing unit and the authentication code acquired by the authentication code acquisition unit in association with the database;
The identification card generating unit of the identification card issuing device is configured to display identification information input by the input unit, a photograph taken by the photographing unit, and an authentication code acquired by the authentication code acquiring unit. Generate an output image of the card,
The verification unit of the identification card further includes a photo corresponding to the authentication code acquired by the authentication code acquisition unit of the identification card issuing device registered in the database by the photo registration unit of the identification card issuing device. It is characterized by verifying whether it exists.

The input unit of the identification card issuing device inputs identification update information for updating the identification information and an authentication code corresponding to the identification information to be updated,
The identification card issuing device further includes:
An identification information update unit that requests to update the identification information corresponding to the authentication code input by the input unit to the identification update information input by the input unit;
The identification information management unit of the identification card issuing device identifies the identification information corresponding to the authentication code input by the input unit of the identification card card issuing device according to the request from the identification information update unit of the identification card issuing device. The update is performed to the identity update information input by the input unit of the card issuing device.

The identification system further includes:
An input unit for inputting the authentication code displayed on the identification card output by the output unit of the identification code issuing device;
An identification card confirmation device having an identification card inquiry unit for inquiring identification information corresponding to the authentication code input by the input unit;
The identification device further includes:
In accordance with the inquiry by the identification card inquiry unit of the identification card confirmation device, the time information indicating the time proved by the authentication code input by the input unit of the identification card confirmation device is acquired from the authentication device, and the authentication code A reference information generating unit that acquires a photo corresponding to the ID from the database, acquires identification information corresponding to the authentication code from the identification information management unit, and generates the acquired time information, photo, and identification information as reference information; Have
The identification card confirmation device further includes:
It has an output part which outputs the inquiry information produced | generated by the inquiry information production | generation part of the said identification apparatus.

The authentication device provides an authentication service for issuing an authentication code for certifying the time and position by combining time information indicating the time, unique data obtained only at the time, and position information indicating the position. And
The authentication code acquisition unit of the identification card issuing device acquires an authentication code for proving the time and position at which the photograph was taken by the photographing unit from the authentication device.

The identification card issuing device further includes:
A photographed photo processing unit that generates a photograph with an authentication code by combining the photograph taken by the photographing unit and the authentication code obtained by the authentication code obtaining unit;
The photo registration unit of the identification card issuing device registers, as the photo, a photo with an authentication code generated by the photographed photo processing unit in the database,
The identification card displays a photograph with an authentication code generated by the photographed photograph processing unit as the photograph.

The identification card displays the authentication code as a two-dimensional barcode,
The identification card confirmation device further includes:
A reading unit that reads the authentication code from the two-dimensional barcode displayed on the identification card;
The identification card inquiring unit of the identification card confirming apparatus inquires identification information corresponding to the authentication code read by the reading unit.

The identification information includes expiration date information indicating an expiration date of the identification card,
The inquiry information generating unit of the identification device compares the current time with the expiration date of the identification card based on the expiration date information included in the acquired identification information, and determines whether the identification card is valid. The valid / invalid information shown is included in the inquiry information.

The identity information includes action schedule information indicating whether the user is scheduled to visit a predetermined place at a predetermined time,
The input unit of the identification card confirmation device specifies a time for inquiring the user's action schedule,
The inquiry information generating unit of the identification device indicates a place where the user is scheduled to visit at the time designated by the input unit of the identification card confirmation device, based on the action schedule information included in the acquired identification information. The location information is included in the inquiry information.

In addition, the identification method according to the present invention is:
In an identification method that proves the identity of a user using an identification card,
A first input step in which an input unit of the identification card issuing device inputs identification information about the user;
The authentication code acquisition unit of the identification card issuing device provides an authentication service for issuing an authentication code for certifying the time by synthesizing time information indicating the time and unique data obtained only at the time And an authentication code acquisition step of acquiring an authentication code for proving a predetermined time from an authentication device that stores in advance a contractor information about the contractor of the authentication service in a database;
The identification card generating unit of the identification card issuing device generates an output image of the identification card that displays the identification information input by the input unit and the authentication code acquired by the authentication code acquiring unit. A card generation step;
An identification information registration step of requesting that the identification information registration unit of the identification card issuing device associates and registers the identification information input by the input unit and the authentication code acquired by the authentication code acquisition unit; ,
A verification step of verifying whether the verification unit of the identification device matches the identification information input by the input unit of the identification card issuing device and the contractor information stored in the database;
When the verification by the verification unit succeeds, the identification information management unit of the identification device is input by the input unit of the identification card issuing device according to the request by the identification information registration unit of the identification card issuing device A first identification information management step for storing the identification information and the authentication code acquired by the authentication code acquisition unit of the identification card issuing device in association with each other;
The output unit of the identification card issuing device outputs a first identification card based on the output image generated by the identification card generation unit when the registration request by the identification information registration unit is successful. And an output step.

The identification method further includes:
The photographing unit of the identification card issuing device comprises a photographing step of photographing the user,
In the authentication code acquisition step, the authentication code acquisition unit of the identification card issuing device acquires an authentication code for proving the time when the photograph was taken by the photographing unit as the predetermined time,
The identification method further includes:
The photo registration unit of the identification card issuing device includes a photo registration step of associating the photo taken by the photographing unit with the authentication code acquired by the authentication code acquiring unit in the database.
In the identification card generation step, the identification card generation unit of the identification card issuing device is acquired by the identification information input by the input unit, the photograph taken by the photographing unit, and the authentication code acquiring unit. Generate an output image of the ID card that displays the authorization code,
In the verification step, the verification unit of the identification card issuing device further includes a photo corresponding to the authentication code acquired by the authentication code acquisition unit of the identification card issuing device by the photo registration unit of the identification card issuing device. It is characterized by verifying whether it is registered in the database.

The identification method further includes:
A second input step in which the input unit of the identification card issuing device inputs identification update information for updating the identification information and an authentication code corresponding to the identification information to be updated;
An identification information updating step for requesting that the identification information update unit of the identification card issuing device update the identification information corresponding to the authentication code input by the input unit to the identification update information input by the input unit; ,
The identity information management unit of the identification device issues the identification information corresponding to the authentication code input by the input unit of the identification card issuing device according to the request from the identification information update unit of the identification card issuing device. And a second identity information management step for updating to the identity update information input by the input unit of the card issuing device.

The identification method further includes:
A second input step in which the input unit of the identification card confirmation device inputs the authentication code displayed on the identification card output by the output unit of the identification code issuing device;
An identification card inquiry step in which the identification card inquiry unit of the identification card confirmation device inquires identification information corresponding to the authentication code input by the input unit of the identification card confirmation device;
Time information indicating the time at which the authentication information input by the input unit of the identification card verification device is verified by the inquiry information generation unit of the identification card verification device according to the inquiry by the identification card inquiry unit of the identification card verification device Is acquired from the authentication device, a photo corresponding to the authentication code is acquired from the database, identification information corresponding to the authentication code is acquired from the identification information management unit, and the acquired time information, photo, and identification information Generating query information as query information;
The output part of the said identification card confirmation apparatus is provided with the 2nd output step which outputs the inquiry information produced | generated by the inquiry information production | generation part of the said identification card | curd apparatus, It is characterized by the above-mentioned.

In addition, the identification program according to the present invention is:
In an identification program that verifies a user's identity using an identity card,
A first input process in which an input unit of the identification card issuing device inputs identification information about the user;
The authentication code acquisition unit of the identification card issuing device provides an authentication service for issuing an authentication code for certifying the time by synthesizing time information indicating the time and unique data obtained only at the time And an authentication code acquisition process for acquiring an authentication code for proving a predetermined time from an authentication device that stores in advance a contractor information about the contractor of the authentication service in a database;
The identification card generating unit of the identification card issuing device generates an output image of the identification card that displays the identification information input by the input unit and the authentication code acquired by the authentication code acquiring unit. Card generation processing,
An identification information registration process for requesting that the identification information registration unit of the identification card issuing device associates and registers the identification information input by the input unit and the authentication code acquired by the authentication code acquisition unit; ,
A verification process for verifying whether the verification unit of the identification device matches the identification information input by the input unit of the identification card issuing device and the contractor information stored in the database;
When the verification by the verification unit succeeds, the identification information management unit of the identification device is input by the input unit of the identification card issuing device according to the request by the identification information registration unit of the identification card issuing device A first identification information management process for storing the identification information and the authentication code acquired by the authentication code acquisition unit of the identification card issuing device in association with each other;
The output unit of the identification card issuing device outputs a first identification card based on the output image generated by the identification card generation unit when the registration request by the identification information registration unit is successful. The output processing is executed by a computer.

The identification program further includes:
The photographing unit of the identification card issuing device causes the computer to execute a photographing process for photographing the user,
In the authentication code acquisition process, the authentication code acquisition unit of the identification card issuing device acquires an authentication code for proving the time when the photograph was taken by the photographing unit as the predetermined time,
The identification program further includes:
The photo registration unit of the identification card issuing device causes a computer to execute a photo registration process for registering the photograph taken by the photographing unit in association with the authentication code obtained by the authentication code obtaining unit in the database. ,
In the identification card generation process, the identification card generation unit of the identification card issuing device has been acquired by the identification information input by the input unit, the photograph taken by the imaging unit, and the authentication code acquisition unit. Generate an output image of the ID card that displays the authorization code,
In the verification process, the verification unit of the identification card issuing device further includes a photo corresponding to the authentication code acquired by the authentication code acquisition unit of the identification card issuing device by the photo registration unit of the identification card issuing device. It is characterized by verifying whether it is registered in the database.

The identification program further includes:
A second input process in which the input unit of the identification card issuing device inputs identification update information for updating the identification information and an authentication code corresponding to the identification information to be updated;
An identification information update process for requesting that the identification information update unit of the identification card issuing device update the identification information corresponding to the authentication code input by the input unit to the identification update information input by the input unit; ,
The identity information management unit of the identification device issues the identification information corresponding to the authentication code input by the input unit of the identification card issuing device according to the request from the identification information update unit of the identification card issuing device. A second identity information management process for updating to the identity update information input by the input unit of the card issuing device is executed by the computer.

The identification program further includes:
A second input process in which the input unit of the identification card confirmation device inputs the authentication code displayed on the identification card output by the output unit of the identification code issuing device;
An identification card inquiry process in which the identification card inquiry unit of the identification card confirmation device inquires identification information corresponding to the authentication code input by the input unit of the identification card confirmation device;
Time information indicating the time at which the authentication information input by the input unit of the identification card verification device is verified by the inquiry information generation unit of the identification card verification device according to the inquiry by the identification card inquiry unit of the identification card verification device Is acquired from the authentication device, a photo corresponding to the authentication code is acquired from the database, identification information corresponding to the authentication code is acquired from the identification information management unit, and the acquired time information, photo, and identification information A query information generation process for generating a query information as query information;
The output unit of the identification card confirmation device causes the computer to execute a second output process for outputting the inquiry information generated by the inquiry information generation unit of the identification device.

The authentication device provides an authentication service for issuing an authentication code for certifying the time and position by combining time information indicating the time, unique data obtained only at the time, and position information indicating the position. And
In the authentication code acquisition process, the authentication code acquisition unit of the identification card issuing device acquires an authentication code for proving the time and position at which the photograph was taken by the photographing unit from the authentication device. And

The identification program further includes:
The photographed photo processing unit of the identification card issuing device performs a photographed photo processing process of generating a photograph with an authentication code by combining the photograph taken by the photographing unit and the authentication code obtained by the authentication code obtaining unit. Let the computer run,
In the photo registration process, the photo registration unit of the identification card issuing device registers, as the photo, a photo with an authentication code generated by the photographed photo processing unit in the database,
The identification card displays a photograph with an authentication code generated by the photographed photograph processing unit as the photograph.

The identification card displays the authentication code as a two-dimensional barcode,
The identification program further includes:
The reading unit of the identification card confirmation device causes the computer to execute a reading process of reading the authentication code from the two-dimensional barcode displayed on the identification card,
In the identification card inquiry process, the identification card inquiry unit of the identification card confirmation device inquires identification information corresponding to the authentication code read by the reading unit.

The identification information includes expiration date information indicating an expiration date of the identification card,
In the inquiry information generation process, the inquiry information generation unit of the identification device compares the current time with the expiration date of the identification card based on the expiration date information included in the acquired identification information, and the identification card The query information includes valid / invalid information indicating whether or not is valid.

The identity information includes action schedule information indicating whether the user is scheduled to visit a predetermined place at a predetermined time,
The input process specifies a time at which the input unit of the identification card confirmation device inquires about the user's action schedule,
The inquiry information generation process is performed by the user at a time designated by the input unit of the identification card confirmation device based on the action schedule information included in the acquired identification information by the inquiry information generation unit of the identification device. Inquiry information includes place information indicating a place to be visited.

  In the present invention, in the identification system, the authentication code acquisition unit of the identification card issuing device combines the time information indicating the time and the unique data obtained only at the time to authenticate the time Obtaining an authentication code for proving a predetermined time from an authentication device that provides an authentication service for issuing a code and stores in advance a contractor information about a contractor of the authentication service in a database, and an identification card generation unit, An output image of the identification card that displays the identification information input by the input unit and the authentication code acquired by the authentication code acquisition unit is generated, and the verification unit of the identification card issuing device uses the input unit of the identification card issuing device. Verifies whether the entered identity information matches the contractor information stored in the database, and the identity information management unit If the verification by the identification card issuing device is successful, the identification information input by the input unit of the identification card issuing device and the authentication code acquisition unit of the identification card issuing device are acquired in accordance with the request from the identification information registration unit of the identification card issuing device. The identification code is stored in association with each other, and the output unit of the identification card issuing device, when the registration request by the identification information registration unit is successful, based on the output image generated by the identification card generation unit By outputting the proof card, an inexpensive proof service is provided by the proof device, making it difficult to forge the proof card or impersonate it by theft.

  Further, in the identification system, the authentication code acquisition unit of the identification card issuing device acquires an authentication code for proving the time when the photograph was taken by the photographing unit, and the photo registration unit was photographed by the photographing unit The photograph and the authentication code acquired by the authentication code acquisition unit are registered in the database in association with each other, and the identification card generation unit receives the identification information input by the input unit, the photograph taken by the imaging unit, and the authentication code acquisition unit Generate an output image of the ID card that displays the authentication code acquired by the ID card, and the verification unit of the ID card device shows a photo corresponding to the authentication code acquired by the ID code acquisition unit of the ID card issuing device By verifying whether it is registered in the database by the photo registration part of the certificate card issuing device, It is possible to make it more difficult to spoofing by flame.

  Further, in the identification system, the identification information update unit of the identification card issuing device requests that the identification information corresponding to the authentication code input by the input unit be updated to the identification update information input by the input unit, The identification information management unit of the identification card issuing device sends the identification information corresponding to the authentication code input by the input unit of the identification card issuing device according to the request from the identification information updating unit of the identification card issuing device. By updating to the identity update information input by the input unit, the identity card can be updated.

  In the identification system, the identification card inquiry unit of the identification card confirmation device inquires identification information corresponding to the authentication code input by the input unit, and the inquiry information generation unit of the identification card verification device According to the inquiry by the identification card inquiry unit of the confirmation device, time information indicating the time proved by the authentication code input by the input unit of the identification card confirmation device is acquired from the authentication device, and a photograph corresponding to the authentication code is stored in the database. ID information corresponding to the authentication code is acquired from the ID information management unit, the acquired time information, photo and ID information are generated as reference information, and the output unit of the ID card confirmation device By outputting the inquiry information generated by the inquiry information generation unit of the device, it is possible to easily identify the person using an identification card. It is possible.

  In the identification system, the authentication code acquisition unit of the identification card issuing device acquires an authentication code for certifying the time and position at which the photograph was taken by the imaging unit from the authentication device. It becomes possible to make spoofing or theft impersonation even more difficult.

  Further, in the identification system, the photographed photo processing unit of the identification card issuing device generates a photograph with an authentication code by combining the photograph taken by the photographing unit and the authentication code acquired by the authentication code acquiring unit, The photo registration unit of the ID card issuing device registers the photo with the authentication code generated by the photographed photo processing unit as a photo in the database, thereby associating the photo displayed on the ID card with the authentication code. It becomes possible to make it more reliable.

  Further, in the identification system, the reading unit of the identification card confirmation device reads the authentication code from the two-dimensional barcode displayed on the identification card, and the identification card inquiry unit of the identification card confirmation device is read by the reading unit. By referring to the identification information corresponding to the read authentication code, it is possible to save the trouble of manually inputting the authentication code.

  In the identification system, the inquiry information generation unit of the identification apparatus compares the current time with the expiration date of the identification card based on the expiration date information contained in the acquired identification information, and the identification card is valid. By including valid / invalid information indicating whether or not there is in the inquiry information, it is possible to prevent spoofing due to the use of an identification card whose validity period has expired.

  Further, in the identification system, the inquiry information generation unit of the identification device is scheduled to visit at the time designated by the input unit of the identification card confirmation device based on the action schedule information included in the acquired identification information. By including the location information indicating the location of the information in the inquiry information, it is possible to prevent unauthorized use of the identification card.

  Further, in the present invention, as an identification method, the authentication code acquisition unit of the identification card issuing device certifies the time by synthesizing time information indicating the time and unique data obtained only at the time. An authentication code for generating a predetermined time is obtained from an authentication device that provides an authentication service for issuing an authentication code and stores in advance a contractor information related to a contractor of the authentication service in a database, and an identification card generation unit Generates an output image of the identification card that displays the identification information input by the input unit and the authentication code acquired by the authentication code acquisition unit, and the verification unit of the identification device inputs the input of the identification card issuing device Verify whether the identity information entered by the department matches the contractor information stored in the database. If the verification by the identification card issuing device is successful, the identification information input by the input unit of the identification card issuing device and the authentication code acquisition unit of the identification card issuing device are acquired in accordance with the request from the identification information registration unit of the identification card issuing device. The identification code is stored in association with each other, and the output unit of the identification card issuing device, when the registration request by the identification information registration unit is successful, based on the output image generated by the identification card generation unit By outputting the proof card, an inexpensive proof service is provided by the proof device, making it difficult to forge the proof card or impersonate it by theft.

  Also, as an identification method, the authentication code acquisition unit of the identification card issuing device acquires an authentication code for proving the time when the photograph was taken by the photographing unit, and the photo registration unit was photographed by the photographing unit The photograph and the authentication code acquired by the authentication code acquisition unit are registered in the database in association with each other, and the identification card generation unit receives the identification information input by the input unit, the photograph taken by the imaging unit, and the authentication code acquisition unit Generate an output image of the ID card that displays the authentication code acquired by the ID card, and the verification unit of the ID card device shows a photo corresponding to the authentication code acquired by the ID code acquisition unit of the ID card issuing device Forgery or theft of identification card by verifying whether it is registered in the database by the photo registration unit of the certification card issuing device Runarisumashi it is possible to make it more difficult.

  Further, as an identification method, the identification information update unit of the identification card issuing device requests that the identification information corresponding to the authentication code input by the input unit is updated to the identification update information input by the input unit, The identification information management unit of the identification card issuing device sends the identification information corresponding to the authentication code input by the input unit of the identification card issuing device according to the request from the identification information updating unit of the identification card issuing device. By updating to the identity update information input by the input unit, the identity card can be updated.

  In addition, as an identification method, the identification card inquiry unit of the identification card confirmation device inquires identification information corresponding to the authentication code input by the input unit, and the inquiry information generation unit of the identification card verification device uses the identification card According to the inquiry by the identification card inquiry unit of the confirmation device, time information indicating the time proved by the authentication code input by the input unit of the identification card confirmation device is acquired from the authentication device, and a photograph corresponding to the authentication code is stored in the database. ID information corresponding to the authentication code is acquired from the ID information management unit, the acquired time information, photo and ID information are generated as reference information, and the output unit of the ID card confirmation device By outputting the inquiry information generated by the inquiry information generator of the device, it is possible to easily verify the identity using an identification card. To become.

  In the present invention, the authentication code acquisition unit of the identification card issuing device uses the identification program to authenticate the time by synthesizing the time information indicating the time and the unique data obtained only at the time. Obtaining an authentication code for proving a predetermined time from an authentication device that provides an authentication service for issuing a code and stores in advance a contractor information about a contractor of the authentication service in a database, and an identification card generation unit, An output image of the identification card that displays the identification information input by the input unit and the authentication code acquired by the authentication code acquisition unit is generated, and the verification unit of the identification card issuing device uses the input unit of the identification card issuing device. Verifies whether the entered identity information matches the contractor information stored in the database, and the identity information management unit If the verification by the identification card issuing device is successful, the identification information input by the input unit of the identification card issuing device and the authentication code acquisition unit of the identification card issuing device are acquired in accordance with the request from the identification information registration unit of the identification card issuing device. The identification code is stored in association with each other, and the output unit of the identification card issuing device, when the registration request by the identification information registration unit is successful, based on the output image generated by the identification card generation unit By outputting the proof card, an inexpensive proof service is provided by the proof device, making it difficult to forge the proof card or impersonate it by theft.

  In addition, the identification code acquisition unit of the identification card issuing device acquires an authentication code for certifying the time when the photograph was taken by the photographing unit, and the photo registration unit was photographed by the photographing unit. The photograph and the authentication code acquired by the authentication code acquisition unit are registered in the database in association with each other, and the identification card generation unit receives the identification information input by the input unit, the photograph taken by the imaging unit, and the authentication code acquisition unit Generate an output image of the ID card that displays the authentication code acquired by the ID card, and the verification unit of the ID card device shows a photo corresponding to the authentication code acquired by the ID code acquisition unit of the ID card issuing device By verifying whether it is registered in the database by the photo registration part of the certificate card issuing device, It is possible to make it more difficult to spoofing by flame.

  In addition, the identification information update unit of the identification card issuing device requests the identification information corresponding to the authentication code input by the input unit to be updated to the identification update information input by the input unit by the identification program, The identification information management unit of the identification card issuing device sends the identification information corresponding to the authentication code input by the input unit of the identification card issuing device according to the request from the identification information updating unit of the identification card issuing device. By updating to the identity update information input by the input unit, the identity card can be updated.

  In addition, the identification card inquiry unit of the identification card confirmation device inquires of the identification information corresponding to the authentication code input by the input unit, and the inquiry information generation unit of the identification device verifies the identification card by the identification program. According to the inquiry by the identification card inquiry unit of the confirmation device, time information indicating the time proved by the authentication code input by the input unit of the identification card confirmation device is acquired from the authentication device, and a photograph corresponding to the authentication code is stored in the database. ID information corresponding to the authentication code is acquired from the ID information management unit, the acquired time information, photo and ID information are generated as reference information, and the output unit of the ID card confirmation device By outputting the inquiry information generated by the inquiry information generation unit of the device, it is possible to easily identify the person using an identification card. It is possible.

  In addition, the identification code acquisition unit of the identification card issuing device acquires an authentication code for certifying the time and position at which the photograph was taken by the photographing unit from the authentication device by the identification certificate program. It becomes possible to make spoofing or theft impersonation even more difficult.

  In addition, by the identification program, the photographed photo processing unit of the identification card issuing device generates a photograph with an authentication code by combining the photograph taken by the photographing unit and the authentication code acquired by the authentication code acquiring unit, The photo registration unit of the ID card issuing device registers the photo with the authentication code generated by the photographed photo processing unit as a photo in the database, thereby associating the photo displayed on the ID card with the authentication code. It becomes possible to make it more reliable.

  Also, according to the identification program, the reading unit of the identification card confirmation device reads the authentication code from the two-dimensional barcode displayed on the identification card, and the identification card inquiry unit of the identification card confirmation device is read by the reading unit. By referring to the identification information corresponding to the read authentication code, it is possible to save the trouble of manually inputting the authentication code.

  In addition, the identification information program allows the inquiry information generation unit of the identification device to compare the current time with the expiration date of the identification card based on the expiration date information contained in the acquired identification information, and verify that the identification card is valid. By including valid / invalid information indicating whether or not there is in the inquiry information, it is possible to prevent spoofing due to the use of an identification card whose validity period has expired.

  Also, the identification information program causes the inquiry information generation unit of the identification device to visit based on the action schedule information included in the acquired identification information at the time specified by the input unit of the identification card confirmation device. By including the location information indicating the location of the information in the inquiry information, it is possible to prevent unauthorized use of the identification card.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

Embodiment 1 FIG.
FIG. 1 is a conceptual diagram showing an overview of an identification system according to the present embodiment.

  In the present embodiment, the identification system 100 includes an identification card issuing apparatus 200, an authentication center apparatus 301 (an example of an authentication apparatus), an identification center apparatus 401 (an example of an identification apparatus), and an identification card confirmation apparatus 500. Prepare.

  The ID card issuing device 200 issues an ID card 101 of a user (a person who checks a multifunction machine or a person dispatched as a floor cleaner) at a company that undertakes inspection of a copying machine or floor cleaning (printer). Etc.) In the identification card 101, identification information about the user (for example, the user's company name, department name, name, expiration date of the identification card 101, etc.), a user photograph 102 and a photograph 102 photographed by the camera are photographed. An authentication code (e.g., COCO-DATES (registered trademark) code) for certifying the location and time is displayed. The authentication code may be displayed as a two-dimensional barcode 103 (for example, QR code (registered trademark)). When issuing the identification card 101, the identification card issuing device 200 makes an inquiry to the authentication center device 301 installed in the authentication center 300 (for example, the COCO-DATES (registered trademark) center) and issues an authentication code. To get. Then, the identification card issuing device 200 registers the photo 102 in the photo storage database 303 (an example of a database) of the authentication center device 301 in association with the authentication code. At the same time, the identification card issuing device 200 sends an authentication code to the identification information management unit 404 (for example, database) of the identification center device 401 installed in the identification center 400 (for example, ASP). The user's identity is registered in association with. At this time, the identification center device 401 cooperates with the authentication center device 301 to register the identity of only those who have been confirmed as legitimate users.

  When visiting the company, the user brings the identification card 101 issued by the identification card issuing device 200. The identification card confirmation device 500 (for example, a PC (personal computer) or a mobile phone) makes an inquiry about the user's identity using the authentication code or the two-dimensional barcode 103 displayed on the identification card 101 at the company visited by the user. Do. When performing the identity inquiry, the identification card confirmation device 500 makes an inquiry to the identification center device 401 using the authentication code, and acquires the result of the identity inquiry. The identification card confirmation device 500 outputs, for example, the user's company name, department name, name, expiration date of the identification card 101, etc. as a result of the identification inquiry (at the same time, the photograph 102 proved by the authentication code is displayed). (You may output the shooting position and time). Thereby, the user's visited company can confirm the identity (identity) of the user.

  As described above, the authentication center 300 provides an authentication service, and the identification center 400 provides an identification service. The user, the company to which the user belongs, etc., make a contract with the authentication center 300 and the identification center 400 in advance in order to use these services. A user who becomes a contractor uses the above service by paying a monthly fee of 300 yen per contractor, for example. The contractor information database 302 (an example of a database) of the authentication center device 301 stores contractor information related to the contractor, and is used when the identification center device 401 registers the user's identity in the identity information management unit 404. The

  Further, as described above, in the identification system 100, an authentication code for certifying the position and time at which the photograph 102 was taken is used. The authentication code may prove only the time. As long as the time that the authentication code proves can be confirmed that the photograph 102 is legitimate (for example, it is sufficient if only the shooting date can be confirmed), even if there is a difference from the time when the photograph 102 was shot. Good. When the authentication code proves the position, for example, the address of the contractor (user) is registered in the contractor information database 302 as a part of the contractor information. When the identification center device 401 registers the user's identity, the authentication center device 301 confirms whether the location proved by the authentication code matches the contractor's address, and the confirmation result is used as the identification center. Notify the device 401. The identification center device 401 can determine whether or not the user who registers the identity is a valid user with reference to the confirmation result.

  Further, as described above, the authentication center device 301 issues an authentication code in response to an inquiry from the identification card issuing device 200 as an authentication service. At this time, the identification card issuing device 200 receives position information and time information from a GPS (Global Positioning System) satellite and transmits the received position information and time information to the authentication center device 301 (time information is It may be generated by an internal clock of the identification card issuing device 200). The authentication center device 301 receives position information and time information from the identification card issuing device 200 and, for example, a weather satellite image distributed by the Japan Meteorological Agency as unique data that can be obtained only at the time indicated by the received time information. Receive. Then, the received position information and time information and the weather satellite image are synthesized to generate an authentication code for proving the position and time.

  Further, as described above, the identification card issuing device 200 registers the user's identity in the identity information management unit 404 of the identification center device 401. Similarly, the identification card issuing device 200 updates the user's identity, deletes the identity, and the like.

  By using the identification system 100 described above, it is possible to provide an identification service similar to that described above for visits such as life insurance and courier services in the lives of ordinary citizens. In this case, for example, an intercom may be used as the identification card confirmation device 500. Specifically, by implementing a function of reading the two-dimensional barcode 103 into the intercom, a function of communicating with the identification center device 401 via the Internet, etc., a visitor can be placed on the intercom installed at the front door or the like. Just by holding the identification card 101, the visiting housekeeper can check the visitor's identity.

  In this way, a customer (company) can be given a sense of security by using a service provided by a third party to prove his / her identity. Furthermore, the company of the visiting user needs a simple facility for issuing the identification card 101, but the customer (company) side who is relieved needs almost no facility for confirming the identity of the user, Since there is no cost of capital investment, the cost-effectiveness when applying the above identification service is great.

  FIG. 2 is a block diagram showing a configuration of the entire identification system according to the present embodiment.

  The identification card issuing device 200, the authentication center device 301, the identification center device 401, and the identification card confirmation device 500 that constitute the identification system 100 communicate with each other via the Internet 150 (an example of a network). As described above, the identification card issuing device 200 acquires an authentication code from the authentication center device 301, registers the user's photograph 102 in association with the authentication code in the authentication center device 301, and authenticates the user's identification information. It is registered in the identification center device 401 in association with the code. Then, an identification card 101 is issued. The identification center device 401 verifies the validity of the user in cooperation with the authentication center device 301 when registering the user's identification information. The identification card checking device 500 reads the authentication code from the identification card 101 issued by the identification card issuing device 200, acquires the identification information corresponding to the authentication code from the identification center device 401, and stores the identification card 101. Confirm the identity of the user.

  FIG. 3 is a block diagram showing a detailed configuration of the identification system according to the present embodiment.

  In the present embodiment, the identification card issuing device 200 includes an input unit 201, a photographing unit 202, an authentication code acquisition unit 203, a photographed photo processing unit 204, a photo registration unit 205, an identification card generation unit 206, and an identification card registration. A unit 207 (an example of an identity information registration unit), a printing unit 208 (an example of an output unit), and an identification card information update unit 209 (an example of an identity information update unit). Further, the identification center device 401 includes an identification card registration reception unit 402, a verification unit 403, an identification information management unit 404, an identification card inquiry reception unit 405, an inquiry unit 406, and an inquiry information generation unit 407. Further, the identification card confirmation device 500 includes an input unit 501, a reading unit 502, an identification card inquiry unit 503, and an inquiry result display unit 504 (an example of an output unit). The operation of each device and each part will be described below.

  FIG. 4 shows the operation (identification method and identification) of the identification system 100 (particularly each part of the identification card issuing apparatus 200 and the identification center apparatus 401) when the identification card issuing apparatus 200 issues the identification card 101. It is a flowchart which shows an example of a certification program.

  In step S101 (first input step (process)), the input unit 201 (eg, keyboard, GUI (graphic user interface), etc.) of the identification card issuing device 200 detects the identification information in order to create the identification card 101. , Input ID card configuration information. The identification information includes the company name, department name, name, action schedule information, expiration date of the identification card 101, and the like of the user of the identification card 101. The action schedule information is information relating to the user's action schedule and action range, and indicates, for example, whether or not the user is scheduled to visit a predetermined place on a predetermined day. The expiration date of the identification card 101 is indicated by a date or time, for example. Further, the identification card configuration information includes information (design, logo, print items, etc.) that defines the layout of the identification card 101.

  In step S102 (photographing step (process)), the photographing unit 202 (for example, a digital camera, a USB (universal serial bus) camera, etc.) of the identification card issuing device 200 takes a photograph 102 for the identification card 101.

  In step S103 (authentication code acquisition step (process)), the authentication code acquisition unit 203 of the identification card issuing device 200 acquires position information and time information from a GPS satellite or the like, and uses the acquired position information and time information as an authentication center. To the device 301. The authentication center device 301 receives position information and time information from the authentication code acquisition unit 203 of the identification card issuing device 200. In addition, a weather satellite image is received from a weather information distribution apparatus installed in the Japan Meteorological Agency or the like (may be received directly from a weather satellite). Then, the received position information, time information, and weather satellite image are combined to generate an authentication code, which is transmitted to the authentication code acquisition unit 203 of the identification card issuing device 200. The authentication code acquisition unit 203 of the identification card issuing device 200 receives the authentication code from the authentication center device 301.

  In step S104 (photo registration step (process)), the photo registration unit 205 of the identification card issuing device 200 transmits the photo 102 (image data) taken by the photographing unit 202 to the photo storage database 303 of the authentication center device 301. .

  In step S105 (identification card generation step (process)), the identification card generation unit 206 of the identification card issuing device 200 receives the identification information input from the input unit 201, identification card configuration information, and an authentication code acquisition unit 203. A print image of the identification card 101 is generated from the authentication code obtained by the above and the photograph 102 photographed by the photographing unit 202.

  In step S106 (identification information registration step (process)), the identification card registration unit 207 of the identification card issuing device 200 transmits the authentication code and the identification information to the identification card registration receiving unit 402 of the identification center device 401. And request user identity registration. The identification card registration receiving unit 402 of the identification center device 401 receives the authentication code and the identification information from the identification card registration unit 207 of the identification card issuing device 200.

  In steps S107 and S108 (verification step (process)), the verification unit 403 of the identification center device 401 verifies the authentication code and the identification information received by the identification card registration reception unit 402 as follows.

  The verification unit 403 of the identification center device 401 first inquires of the authentication center device 301 about the authentication code. The authentication center device 301 receives the authentication code from the verification unit 403 of the identification center device 401, and verifies whether the received authentication code is issued by itself. Further, the contractor information of the user whose authentication code is issued (requested to issue it) is extracted from the contractor information database 302. Then, the extracted contractor information is included in the result of verifying the authentication code, and is transmitted to the verification unit 403 of the identification center device 401 as the authentication code verification result. The contractor information includes the company name and organization name of the user who is the contractor of the authentication service provided by the authentication center device 301 as described above, and is registered in advance in the contractor information database 302 for each user. The authentication center device 301 further verifies whether or not the photograph 102 corresponding to the received authentication code is registered in the photo storage database 303, and transmits the result as a photo verification result to the verification unit 403 of the identification center device 401. To do. The verification unit 403 of the identification center device 401 receives the authentication code / photo verification result from the authentication center device 301.

  Next, the verification unit 403 of the identification center device 401 (1) verifies whether the authentication code is valid based on the authentication code verification result received from the authentication center device 301. (2) Based on the photo verification result, it is verified whether the photo 102 corresponding to the authentication code exists. (3) The identification information received by the identification card registration receiving unit 402 is compared with the contractor information included in the verification result of the authentication code, and it is verified whether or not the contents are inconsistent.

  In steps S109 and S110 (first identification information management step (processing)), the verification unit 403 of the identification center device 401 confirms that the verification result is OK (the authentication code is valid and corresponds to the authentication code). The identification code and the identification information received by the identification card registration receiving unit 402 are registered in the identification information management unit 404. . The identification information management unit 404 may uniquely set key information for identifying the identification information, and store the key information and the authentication code in association with each other. In the identification information, the company name or the like may be associated with the authentication code. You may set as key information to attach.

  In step S111 (first output step (process)), the printing unit 208 (for example, a printer) of the identification card issuing device 200 uses the identification information management unit 404 of the identification center device 401 by the identification card registration unit 207. If the registration is successfully completed, the identification card 101 is printed based on the print image generated by the identification card generation unit 206.

  FIG. 5 shows the operation (identification) of the identification system 100 (particularly, each part of the identification card issuing apparatus 200 and the identification center apparatus 401) when the identification card issuing apparatus 200 updates the identity of the user of the identification card 101. It is a flowchart which shows a proof method and an example of an identification program.

  In step S201 (second input step (process)), the input unit 201 of the identification card issuing device 200 is updated in order to update the identification information registered in the identification information management unit 404 of the identification center device 401. ID information (hereinafter referred to as ID update information) and an authentication code to be updated (authentication code corresponding to the ID information to be updated) are input. However, when the identification information management unit 404 of the identification center device 401 sets the company name or the like as the key information associated with the authentication code in the identification information, the key information cannot be changed. The identity update information may include information (flag) for setting whether the identity card is valid or invalid.

  In step S202 (identification information update step (process)), the identification card information update unit 209 of the identification card issuing device 200 uses the identification update information input by the input unit 201 and the authentication code to be updated as the identification center. It transmits to the identification card registration receiving part 402 of the apparatus 401, and requests | requires a user's identification update. The identification card registration receiving unit 402 of the identification center device 401 receives the identification update information and the authentication code from the identification card information update unit 209 of the identification card issuing device 200.

  In step S203 (second identification information management step (processing)), the identification information management unit 404 of the identification center device 401 uses the identification code corresponding to the authentication code received by the identification card registration reception unit 402 as identification. The card registration receiving unit 402 performs update registration on the received status update information. However, if the key information (if the company name is key information) is different, an error will occur and the update will not be accepted.

  The operation of the ID system 100 when the ID card issuing device 200 deletes the user ID of the ID card 101 does not require input of ID update information, but is the same as described above.

  FIG. 6 shows an operation (identification) of the identification system 100 (particularly, each part of the identification center apparatus 401 and the identification card confirmation apparatus 500) when the identification card confirmation apparatus 500 confirms the identity of the user of the identification card 101. It is a flowchart which shows a proof method and an example of an identification program.

  In step S301 (second input step (process)), the input unit 501 (for example, a keyboard) of the identification card confirmation apparatus 500 inputs the authentication code written on the identification card 101. The input unit 501 may designate a time (hereinafter referred to as an inquiry time) in order to inquire about the action schedule of the user of the identification card 101 at an arbitrary time.

  In step S302 (identification card inquiry step (process)), the identification card inquiry unit 503 of the identification card confirmation device 500 inputs to the identification card inquiry reception unit 405 of the identification center device 401 through the input unit 501. The authentication code sent is transmitted, and the identity of the user of the identification card 101 is inquired. The identification card inquiry receiving unit 405 of the identification center device 401 receives the authentication code from the identification card inquiry unit 503 of the identification card confirmation apparatus 500.

  In steps S303 and S304 (inquiry information generation step (process)), the inquiry information generation unit 407 of the identification center device 401 receives the authentication code / photo verification result from the authentication center device 301 as follows.

  The inquiry unit 406 of the identification center device 401 inquires of the authentication center device 301 about the authentication code received by the identification card inquiry reception unit 405. The authentication center device 301 receives the authentication code from the inquiry unit 406 of the identification center device 401 and verifies whether or not the received authentication code is issued by itself. Further, the contractor information of the user whose authentication code is issued (requested to issue it) is extracted from the contractor information database 302. Then, the extracted contractor information is included in the result of verifying the authentication code (including time information indicating the time proved by the authentication code) and transmitted to the inquiry unit 406 of the identification center device 401 as the authentication code verification result. . The authentication center apparatus 301 further verifies whether or not the photograph 102 corresponding to the received authentication code is registered in the photograph storage database 303, and identifies the result (including the image data of the photograph 102) as a photograph verification result. The data is transmitted to the inquiry unit 406 of the center device 401. The inquiry unit 406 of the identification center device 401 receives the authentication code / photo verification result from the authentication center device 301. Then, the inquiry information generation unit 407 receives the authentication code / photo verification result from the inquiry unit 406.

  In step S305 (inquiry information generation step (process)), the inquiry information generation unit 407 of the identification center device 401 extracts the identification information from the identification information management unit 404 using the authentication code as a key.

  In step S306 (inquiry information generation step (process)), the inquiry information generation unit 407 of the identification center device 401 uses the identification information extracted from the identification information management unit 404 and the authentication code / photo verification result received from the inquiry unit 406. Inquiry information including identification information, time information, and a photograph 102 is generated.

  In steps S305 and S306 (inquiry information generation step (process)), the inquiry information generation unit 407 of the identification center device 401 may generate the following inquiry information.

  For example, the inquiry information generation unit 407 of the identification center device 401 determines whether or not the expiration date has expired according to (1) specific logic (for example, the expiration date of the identification card 101 included in the identification information is compared with the current time). Inquiry information including the confirmation result as incidental information is generated. (2) Using an authentication function for a confirmer who uses the identification card confirmation apparatus 500, only the authentication code / photo verification result is disclosed to the general (unauthenticated confirmer), and to the authenticated confirmer Also disclose identity information. (3) When the inquiry time is input by the input unit 501 of the identification card confirmation apparatus 500, the action schedule information at the inquiry time is extracted and displayed from the action schedule information registered in advance as a part of the identification information. Here, disclosure, disclosure, and display of information refer to generation of inquiry information including the information.

  In step S307 (second output step (process)), the inquiry result display unit 504 of the identification card confirmation device 500 displays the inquiry information generated by the inquiry information generation unit 407 of the identification center device 401. The confirmer compares the inquiry information displayed by the inquiry result display unit 504 with the contents of the identification card 101, and confirms whether the photograph matches the user name of the company name, department, identification card, and the action schedule. By doing so, the validity of the identification card is judged.

  In this embodiment, the photograph 102 is used for identification, but the use of the photograph 102 is not essential. Therefore, the above steps S102, S104, S304, etc. can be omitted.

  As described above, in the present embodiment, in the identification system, the authentication code acquisition unit of the identification card issuing device combines the time information indicating the time with the unique data that can be obtained only at the time. Obtaining an authentication code for proving a predetermined time from an authentication device that provides an authentication service for issuing an authentication code for certifying time and stores in advance a contractor information about a contractor of the authentication service in a database; The identification card generation unit generates an output image of the identification card that displays the identification information input by the input unit and the authentication code acquired by the authentication code acquisition unit, and the verification unit of the identification device verifies the identification. Verify whether the identity information entered by the card issuer's input unit matches the contractor information stored in the database. When the verification by the verification unit is successful, the information management unit, in accordance with the request from the identification information registration unit of the identification card issuing device, the identification information entered by the input unit of the identification card issuing device and the identification card issuing device The authentication code acquired by the authentication code acquisition unit is stored in association with each other, and the output unit of the identification card issuing device is generated by the identification card generation unit when the registration request by the identification information registration unit is successful. By outputting the identification card based on the output image, it is possible to provide an inexpensive identification service by the identification apparatus and to make it difficult to forge the identification card or impersonate theft.

  Further, in the identification system, the authentication code acquisition unit of the identification card issuing device acquires an authentication code for proving the time when the photograph was taken by the photographing unit, and the photo registration unit was photographed by the photographing unit The photograph and the authentication code acquired by the authentication code acquisition unit are registered in the database in association with each other, and the identification card generation unit receives the identification information input by the input unit, the photograph taken by the imaging unit, and the authentication code acquisition unit Generate an output image of the ID card that displays the authentication code acquired by the ID card, and the verification unit of the ID card device shows a photo corresponding to the authentication code acquired by the ID code acquisition unit of the ID card issuing device By verifying whether it is registered in the database by the photo registration part of the certificate card issuing device, It is possible to make it more difficult to spoofing by flame.

  Further, in the identification system, the identification information update unit of the identification card issuing device requests that the identification information corresponding to the authentication code input by the input unit be updated to the identification update information input by the input unit, The identification information management unit of the identification card issuing device sends the identification information corresponding to the authentication code input by the input unit of the identification card issuing device according to the request from the identification information updating unit of the identification card issuing device. By updating to the identity update information input by the input unit, the identity card can be updated.

  In the identification system, the identification card inquiry unit of the identification card confirmation device inquires identification information corresponding to the authentication code input by the input unit, and the inquiry information generation unit of the identification card verification device According to the inquiry by the identification card inquiry unit of the confirmation device, time information indicating the time proved by the authentication code input by the input unit of the identification card confirmation device is acquired from the authentication device, and a photograph corresponding to the authentication code is stored in the database. ID information corresponding to the authentication code is acquired from the ID information management unit, the acquired time information, photo and ID information are generated as reference information, and the output unit of the ID card confirmation device By outputting the inquiry information generated by the inquiry information generation unit of the device, it is possible to easily identify the person using an identification card. It is possible.

  In the identification system, the authentication code acquisition unit of the identification card issuing device acquires an authentication code for certifying the time and position at which the photograph was taken by the imaging unit from the authentication device. It becomes possible to make spoofing or theft impersonation even more difficult.

  In the identification system, the inquiry information generation unit of the identification apparatus compares the current time with the expiration date of the identification card based on the expiration date information contained in the acquired identification information, and the identification card is valid. By including valid / invalid information indicating whether or not there is in the inquiry information, it is possible to prevent spoofing due to the use of an identification card whose validity period has expired.

  Further, in the identification system, the inquiry information generation unit of the identification device is scheduled to visit at the time designated by the input unit of the identification card confirmation device based on the action schedule information included in the acquired identification information. By including the location information indicating the location of the information in the inquiry information, it is possible to prevent unauthorized use of the identification card.

  In the present embodiment, as an identification method, the authentication code acquisition unit of the identification card issuing device combines the time information indicating the time and unique data that can be obtained only at the time to prove the time. Providing an authentication service for issuing an authentication code for authentication, and acquiring an authentication code for certifying a predetermined time from an authentication device that stores in advance a contractor information related to a contractor of the authentication service in a database, The generating unit generates an output image of an identification card that displays the identification information input by the input unit and the authentication code acquired by the authentication code acquiring unit, and the verification unit of the identification device is the identification card issuing device Verify whether the identity information entered by the input part of the contractor information stored in the database matches the identity information management part, If the verification by the identification unit succeeds, the identification information input by the input unit of the identification card issuing device and the authentication code acquisition unit of the identification card issuing device according to the request by the identification information registration unit of the identification card issuing device Based on the output image generated by the identification card generating unit when the output unit of the identification card issuing device succeeds in the registration request by the identification information registering unit. By outputting the identification card, it is possible to provide an inexpensive identification service by the identification apparatus and to make it difficult to forge or steal the identification card.

  Also, as an identification method, the authentication code acquisition unit of the identification card issuing device acquires an authentication code for proving the time when the photograph was taken by the photographing unit, and the photo registration unit was photographed by the photographing unit The photograph and the authentication code acquired by the authentication code acquisition unit are registered in the database in association with each other, and the identification card generation unit receives the identification information input by the input unit, the photograph taken by the imaging unit, and the authentication code acquisition unit Generate an output image of the ID card that displays the authentication code acquired by the ID card, and the verification unit of the ID card device shows a photo corresponding to the authentication code acquired by the ID code acquisition unit of the ID card issuing device Forgery or theft of identification card by verifying whether it is registered in the database by the photo registration unit of the certification card issuing device Runarisumashi it is possible to make it more difficult.

  Further, as an identification method, the identification information update unit of the identification card issuing device requests that the identification information corresponding to the authentication code input by the input unit is updated to the identification update information input by the input unit, The identification information management unit of the identification card issuing device sends the identification information corresponding to the authentication code input by the input unit of the identification card issuing device according to the request from the identification information updating unit of the identification card issuing device. By updating to the identity update information input by the input unit, the identity card can be updated.

  In addition, as an identification method, the identification card inquiry unit of the identification card confirmation device inquires identification information corresponding to the authentication code input by the input unit, and the inquiry information generation unit of the identification card verification device uses the identification card According to the inquiry by the identification card inquiry unit of the confirmation device, time information indicating the time proved by the authentication code input by the input unit of the identification card confirmation device is acquired from the authentication device, and a photograph corresponding to the authentication code is stored in the database. ID information corresponding to the authentication code is acquired from the ID information management unit, the acquired time information, photo and ID information are generated as reference information, and the output unit of the ID card confirmation device By outputting the inquiry information generated by the inquiry information generator of the device, it is possible to easily verify the identity using an identification card. To become.

Embodiment 2. FIG.
In the present embodiment, in the identification system 100 similar to that in the first embodiment, the identification card issuing device 200 uses a photograph 102 with an authentication code as the user's photograph 102 (image data in which an authentication code is written on the photograph 102). ) Is issued.

  FIG. 7 shows the operations (identification method and identification) of the identification system 100 (particularly each part of the identification card issuing apparatus 200 and the identification center apparatus 401) when the identification card issuing apparatus 200 issues the identification card 101. It is a flowchart which shows an example of a certification program.

  Steps S401 to S403 are the same as steps S101 to S103 shown in FIG. 4 of the first embodiment.

  In step S404 (captured photo processing step (process)), the captured photo processing unit 204 of the identification card issuing device 200 receives the authentication code received by the authentication code acquisition unit 203 and the photograph 102 (image data) captured by the capturing unit 202. Are associated with each other, and a photograph 102 with an authentication code is generated.

  In step S405 (photo registration step (process)), the photo registration unit 205 of the identification card issuing device 200 transmits the photo 102 with the authentication code generated by the photographed photo processing unit 204 to the photo storage database 303 of the authentication center device 301. To do. The photo storage database 303 of the authentication center apparatus 301 receives the photo 102 with the authentication code from the photo registration unit 205 and registers the received photo 102 with the authentication code in association with the authentication code.

  In step S406 (identification card generation step (process)), the identification card generation unit 206 of the identification card issuing device 200 receives the identification information, identification card configuration information, and authentication code acquisition unit 203 input by the input unit 201. A print image of the identification card 101 is generated from the authentication code acquired by the above and the photograph 102 with the authentication code generated by the photographed photo processing unit 204.

  Steps S407 to S412 are the same as steps S106 to S111 shown in FIG. 4 of the first embodiment.

  As described above, in this embodiment, in the identification system, the photographed photo processing unit of the identification card issuing device combines the photograph taken by the photographing unit and the authentication code obtained by the authentication code obtaining unit. A photo with an authentication code is generated, and the photo registration unit of the identification card issuing device registers the photo with the authentication code generated by the photographed photo processing unit in the database as a photo, and is displayed on the identification card. It is possible to make the association between the photograph and the authentication code more reliable.

Embodiment 3 FIG.
In the present embodiment, in the identification system 100 similar to that in the first embodiment, the identification card issuing device 200 encodes data such as an authentication code and a URL (Uniform Resource Locator) of the identification center device 401. An identification card 101 that displays a three-dimensional barcode 103 is issued. That is, in step S105 (identification card generation step (process)) shown in FIG. 4 of the first embodiment, the print image of the identification card 101 generated by the identification card generation unit 206 of the identification card issuing device 200 is displayed. Includes a two-dimensional barcode 103 in addition to the photograph 102, the authentication code, and the identification information.

  FIG. 8 shows an operation (identification) of the identification system 100 (particularly, each part of the identification center apparatus 401 and the identification card confirmation apparatus 500) when the identification card confirmation apparatus 500 confirms the identity of the user of the identification card 101. It is a flowchart which shows a proof method and an example of an identification program.

  In step S501 (reading step (processing)), the reading unit 502 (using a device serving as a barcode reader (for example, a mobile phone or a dedicated reading device)) of the identification card confirmation device 500 uses the identification card 101. The two-dimensional barcode information (such as an authentication code) is read from the two-dimensional barcode 103 displayed in (1).

  In step S502 (identification card inquiry step (process)), the identification card inquiry unit 503 of the identification card confirmation device 500 reads the identification card inquiry reception unit 405 of the identification center device 401 by the reading unit 502. The authentication code is transmitted, and the identity of the user of the identification card 101 is inquired. The identification card inquiry receiving unit 405 of the identification center device 401 receives the authentication code from the identification card inquiry unit 503 of the identification card confirmation apparatus 500.

  Steps S503 to S507 are the same as steps S303 to S307 shown in FIG. 6 of the first embodiment.

  As described above, in the present embodiment, in the identification system, the reading unit of the identification card confirmation device reads the authentication code from the two-dimensional barcode displayed on the identification card, and the identification card identification device Since the certification card inquiry unit inquires the identification information corresponding to the authentication code read by the reading unit, it is possible to save the trouble of manually inputting the authentication code.

  FIG. 9 is a diagram showing an example of the appearance of each device constituting the identification system in the above embodiment.

  In FIG. 9, an identification card issuing device 200, an authentication center device 301, an identification center device 401, and an identification card confirmation device 500 are a system unit 910, a CRT (Cathode Ray Tube) display device 901, a keyboard (K / B). 902, a mouse 903, a compact disk device (CDD) 905, a printer device 906, and a scanner device 907, which are connected by a cable. Further, the identification card issuing device 200, the authentication center device 301, the identification center device 401, and the identification card checking device 500 are connected to the Internet 940 via a local area network (LAN) 942 and a gateway 941.

  FIG. 10 is a diagram illustrating an example of a hardware configuration of each device constituting the identification system in the above embodiment.

  In FIG. 10, an identification card issuing device 200, an authentication center device 301, an identification center device 401, and an identification card confirmation device 500 include a CPU (Central Processing Unit) 911 that executes a program. The CPU 911 includes a ROM 913, a RAM 914, a communication board 915, a CRT display device 901, a K / B 902, a mouse 903, an FDD (Flexible Disk Drive) 904, a magnetic disk device 920, a CDD 905, a printer device 906, and a scanner device 907 via a bus 912. Connected with.

  The RAM 914 is an example of a volatile memory. The ROM 913, the FDD 904, the CDD 905, and the magnetic disk device 920 are examples of nonvolatile memories. These are examples of a storage device or a storage unit.

  The communication board 915 is connected to the LAN 942 or the like. The communication board 915 is an example of “˜receiving unit”, input device, input unit, output device, or output unit.

  For example, the K / B 902, the scanner device 907, the FDD 904, and the like are examples of an input device or an input unit. For example, the CRT display device 901 is an example of an output device or an output unit.

  Here, the communication board 915 is not limited to the LAN 942 but may be directly connected to the Internet 940 or a WAN (Wide Area Network) such as ISDN (Integrated Services Digital Network). When directly connected to the Internet 940 or a WAN such as ISDN, the identification card issuing device 200, the authentication center device 301, the identification center device 401, and the identification card checking device 500 are connected to the Internet 940 or ISDN. Connected to the WAN, the gateway 941 becomes unnecessary.

  The magnetic disk device 920 stores an operating system (OS) 921, a window system 922, a program group 923, and a file group 924. The program group 923 is executed by the CPU 911, the OS 921, and the window system 922.

  The program group 923 stores a program for executing a function described as “˜unit” in the description of the above-described embodiment. The program is read and executed by the CPU 911.

  For example, the CPU 911 is an example of a processing device or a processing unit.

  In the file group 924, what is described as “˜data”, “˜information”, and “˜result” in the description of the above-described embodiment is stored as a file or a part thereof.

  In addition, the arrows in the flowchart described in the description of the above-described embodiment mainly indicate data input / output, and for the data input / output, data includes a magnetic disk device 920, an FD (Flexible Disk), an optical disk, It is recorded on other recording media such as CD (compact disc), MD (mini disc), DVD (Digital Versatile Disk). Alternatively, it is transmitted through a signal line or other transmission medium.

  In addition, what is described as “˜unit” in the description of the above-described embodiment may be realized by firmware stored in the ROM 913. Alternatively, it may be implemented by software alone, hardware alone, a combination of software and hardware, or a combination of firmware.

  Further, the program for implementing the above-described embodiment may be stored using a recording device using another recording medium such as the magnetic disk device 920, FD, optical disk, CD, MD, DVD, or the like.

It is a conceptual diagram which shows the outline | summary of the identification system which concerns on Embodiment 1. FIG. It is a block diagram which shows the structure of the whole identification system which concerns on Embodiment 1. FIG. It is a block diagram which shows the detailed structure of the identification system which concerns on Embodiment 1. FIG. It is a flowchart which shows operation | movement of the identification system which concerns on Embodiment 1. FIG. It is a flowchart which shows operation | movement of the identification system which concerns on Embodiment 1. FIG. It is a flowchart which shows operation | movement of the identification system which concerns on Embodiment 1. FIG. It is a flowchart which shows operation | movement of the identification system which concerns on Embodiment 2. FIG. 10 is a flowchart showing the operation of the identification system according to the third embodiment. It is a figure which shows an example of the external appearance of each apparatus which comprises the identification system in each embodiment. It is a figure which shows an example of the hardware constitutions of each apparatus which comprises the identification system in each embodiment.

Explanation of symbols

  100 Identification System, 101 Identification Card, 102 Photo, 103 Two-dimensional Bar Code, 150 Internet, 200 Identification Card Issuing Device, 201 Input Unit, 202 Shooting Unit, 203 Authentication Code Acquisition Unit, 204 Captured Photo Processing Unit, 205 Photo registration unit, 206 ID card generation unit, 207 ID card registration unit, 208 printing unit, 209 ID card information update unit, 300 authentication center, 301 authentication center device, 302 contractor information database, 303 photo storage database, 400 identification center, 401 identification center device, 402 identification card registration receiving unit, 403 verification unit, 404 identification information management unit, 405 identification card inquiry receiving unit, 406 inquiry unit, 407 inquiry information generation unit, 500 identification Clear card confirmation device, 501 input unit, 502 reading unit, 503 identification card inquiry unit, 504 inquiry result display unit, 901 CRT display device, 902 K / B, 903 mouse, 904 FDD, 905 CDD, 906 printer device, 907 Scanner device, 910 system unit, 911 CPU, 912 bus, 913 ROM, 914 RAM, 915 communication board, 920 magnetic disk device, 921 OS, 922 window system, 923 program group, 924 file group, 940 Internet, 941 gateway, 942 LAN.

Claims (22)

A first input unit for inputting the identification information about the User chromatography THE,
Providing an authentication service for issuing an authentication code for certifying the time by combining time information indicating the time and unique data that can be obtained only at the time, and contractor information on a contractor of the authentication service A predetermined issue issued by the authentication device to a user whose identification information is input by the first input unit from the authentication device stored in advance in the contractor information database for each user who is a contractor. An authentication code acquisition unit for acquiring an authentication code for proving the time of
An identification card generation unit that generates an output image of an identification card that displays the identification information input by the first input unit and the authentication code acquired by the authentication code acquisition unit;
An identity card issuing device having an identity information registration unit that transmits the identity information input by the first input unit and the authentication code acquired by the authentication code acquisition unit via a network ;
An identification card registration receiving unit that receives identification information and an authentication code from the identification card issuing device via a network ;
The authentication code received by the identification card registration receiving unit is transmitted to the authentication device via the network, and the authentication device uses the authentication device out of the contractor information stored in the contractor information database. The contractor information of the user to whom the authentication code is issued is returned, the contractor information is received from the authentication device via the network, and the received contractor information and the identity card registration receiving unit receive the identity A verification unit that verifies whether or not the content matches the information ;
If the contents of the subscriber information and the identification information in verification by the verification unit matches a ID information managing unit that registers in association with identification information and authentication code received by the identification card registration receiver An identification device having
The identification card issuing device further includes:
When the identification information and the authentication code transmitted by the identification information registration unit are registered in the identification information management unit of the identification device, the identification card based on the output image generated by the identification card generation unit identification system characterized by having a first output unit for outputting. The identification card issuing device further includes:
A shooting unit that takes a picture of the user whose identity information has been input by the first input unit ;
The authentication code acquisition unit of the identification card issuing device transmits time information indicating a photographing time when the photograph is taken by the photographing unit to the authentication device via the network, and sends the predetermined information to the authentication device. as time, to issue an authentication code to prove the shooting time, and obtains the authentication code via the network from the authentication device,
The identification card issuing device further includes:
A photograph taken by the photographing unit is transmitted to the authentication device via a network, and is issued to the authentication device by the authentication device to the photograph and a user whose photograph is taken by the photographing unit. A photo registration unit that associates the authentication code with the photo storage database and registers it .
The identification card generation unit of the identification card issuing device displays the identification information input by the first input unit, the photograph taken by the imaging unit, and the authentication code acquired by the authentication code acquisition unit. Generate an output image of the ID card
The verification unit of the identification device transmits the authentication code received by the identification card registration reception unit to the authentication device via a network, and further provides a photograph corresponding to the authentication code to the authentication device. There is verified whether it is registered before Symbol photo storage database, the verification result is returned to, through the network from the authentication device acquires the verification result, corresponding to the authentication code based on the acquired verification result Verify that the photos you want to exist exist,
The identity information management unit of the identity verification device, when the contents of the contractor information and the identity information match in the verification by the verification unit, and the photo corresponding to the authentication code exists, the identity card 2. The identification system according to claim 1, wherein the identification information received by the registration receiving unit and the authentication code are registered in association with each other . The authentication apparatus, an authentication service to issue an authentication code to and combining the position information indicating the unique data and the position obtained only in the time information and the time indicating the time to prove the time and the position Offer to,
Authentication code acquiring unit of the identification card issuing apparatus, and characterized by obtaining authentication code to prove time and location said by the imaging unit Riutsushi true was taken through the network from the authentication device The identification system according to claim 2. The identification card issuing device further includes:
A photographed photo processing unit that generates a photograph with an authentication code by combining the photograph taken by the photographing unit and the authentication code obtained by the authentication code obtaining unit;
The photo registration unit of the identification card issuing device transmits, as the photo, a photo with an authentication code generated by the photographed photo processing unit to the authentication device via a network ,
The identification card generation unit of the identification card issuing device generates an output image of an identification card that displays a photograph with an authentication code generated by the photographed photo processing unit as the photograph. identification system according to 2 or 3. The first input unit of the identification card issuing device inputs identification update information for updating the identification information and an authentication code corresponding to the identification information to be updated,
The identification card issuing device further includes:
An identity information update unit that transmits the identity update information and the authentication code input by the first input unit to the identity verification device via a network ;
The identification card registration receiving unit of the identification device receives the identification update information and the authentication code via the network from the identification card issuing device,
The identity information management unit identification device, characterized in that updating by the identification ID update information the identity information corresponding to the received authentication code by the card registration receiver received by the identification card registration receiver The identification system according to any one of claims 1 to 4 . The identification system further includes:
A second input unit for inputting the authentication code displayed on the identification card output by the first output unit of the identification code issuing device;
An identification card confirmation device having an identification card inquiry unit for transmitting the authentication code input by the second input unit to the identification device via a network ;
The identification device further includes:
And identification card inquiry receiving unit for receiving an authentication code via the network from the identification card verifier,
To acquire the status information corresponding to the authentication code received by the identification card inquiry receiving unit from the identification information management unit, acquired generates inquiry information including only partial information, the identification of the generated inquiry information and an inquiry information generating unit to be transmitted over the network to the card verification device,
The identification card confirmation device further includes:
Identification system according to any one of claims 1 to 5, characterized in that a second output unit from said identification device via the network receives the inquiry information, and outputs the received inquiry information. The identification device further includes:
An authentication code received by the identification card inquiry receiving unit is transmitted to the authentication device via a network, and the authentication device is caused to return time information indicating a time to be proved by the authentication code. Has an inquiry unit that obtains the time information via the network,
7. The identification system according to claim 6, wherein the inquiry information generation unit of the identification device includes the time information acquired by the inquiry unit in the inquiry information. The identification system further includes:
A second input unit for inputting the authentication code displayed on the identification card output by the first output unit of the identification code issuing device;
An identification card confirmation device having an identification card inquiry unit for transmitting the authentication code input by the second input unit to the identification device via a network ;
The identification device further includes:
An identification card inquiry receiver for receiving an authentication code from the identification card confirmation device via a network ;
The identification by sending an authentication code received by the card inquiry receiving unit via the network to the authentication device, to said authentication apparatus, corresponding to the authentication code of the photographs stored in the photographic storage database Photos And an inquiry unit that obtains the photo from the authentication device via the network ,
Generating inquiry information including said identification the identification information corresponding to the received authentication code by the card inquiry reception unit acquired from the identification information management unit, photographs acquired by the inquiry section and acquired only partial information and, and a query information generation unit for transmitting over the network the generated inquiry information to said identification card verification device,
The identification card confirmation device further includes:
Identification system according to any one of claims 2 to 4, characterized in that it comprises a second output unit from said identification device via the network receives the inquiry information, and outputs the received inquiry information. The identification card generating unit of the identification card issuing device generates an output image of the identification card that displays the authentication code as a two-dimensional barcode,
The identification card confirmation device further includes:
A reading unit that reads the authentication code from the two-dimensional bar code displayed on the identification card output by the first output unit of the identification code issuing device ;
Identification card inquiry unit of the identification card verification device, to one of the authentication code read by the reading unit from claim 6, characterized in that via the network to the identification device up to 8 The identification system described. The identification information includes expiration date information indicating an expiration date of the identification card,
The inquiry information generating unit of the identification device compares the current time with the expiration date of the identification card based on the expiration date information included in the acquired identification information, and determines whether the identification card is valid. 10. The identification system according to claim 6, wherein valid / invalid information to be indicated is included in the inquiry information. The identification information includes the action schedule information Yoo over The indicates whether there is a plan to visit a given location at a given time,
A second input of the identification card verification device, specify the time to query the action plans of Yu over The,
The identification card inquiry unit of the identification card confirmation device transmits the time designated by the second input unit as a reference time to the identification device via the network,
The identification card inquiry receiver of the identification device receives an inquiry time from the identification card confirmation device via a network,
Inquiry information generating unit of the identification device, shown on the basis of the action schedule information included in the obtained identification information, the location of the scheduled User chromatography The visits to the received query time by the identification card inquiry reception unit identification system according to any of claims 6 to 10, characterized in that include the location information to the inquiry information. Input of only partial identification card issuing apparatus, a first input step of inputting identification information on Yu over THE,
The authentication code acquisition unit of the identification card issuing device provides an authentication service for issuing an authentication code for certifying the time by synthesizing time information indicating the time and unique data obtained only at the time In addition, identification information is input from the authentication device that stores the contractor information related to the contractor of the authentication service in the contractor information database in advance for each user who is a contractor through the network by the first input unit. An authentication code acquisition step for acquiring an authentication code issued by the authentication device for a user to prove a predetermined time;
The identification card generating unit of the identification card issuing device generates an output image of the identification card that displays the identification information input by the input unit and the authentication code acquired by the authentication code acquiring unit. A card generation step;
An identity information registration step in which the identity information registration unit of the identification card issuing device transmits the identity information input by the input unit and the authentication code acquired by the authentication code acquisition unit via a network ;
An identification card registration receiving step of receiving an identification information and an authentication code from the identification card issuing device via the network, by the identification card registration receiving unit of the identification device;
Verification of the identification device transmits an authentication code received by the identification card registration receiver via the network to the authentication device, to the authentication device, stored in the subscriber information database Of the contractor information, the contractor information of the user whose authentication code is issued by the authentication device is returned, the contractor information is received from the authentication device via the network, and the received contractor information and the identification information are received. Received by the card registration receiver
And the verification step the contents of the identity information to verify whether the match was,
Identification information managing unit of the identification device, if the contents of the subscriber information and the identification information in verification by the verifying unit matches the identification information and authentication code received by the identification card registration receiver and only partial information management step to register in association with each other,
When the output unit of the identification card issuing device registers the identification information and the authentication code transmitted by the identification information registration unit in the identification information management unit of the identification device, the identification card generation unit And a first output step of outputting an identification card based on the generated output image. A identification card issuing apparatus for inputting identity information about the User chromatography The, issues an authentication code to prove the time by combining the time information obtained only in the subject time unique data indicating a time from the authentication device which stores in advance subscriber information database for each user is a subscriber of the subscriber information about subscribers of the authentication service as well as provide authentication services for, by the authentication device to a user who inputs the identification information issued, certified code for certifying a predetermined time, the identification card issuing apparatus that outputs identification card that displays the authentication code acquired and entered identity information, via the network, identification An identification card registration receiving unit for receiving information and an authentication code;
The authentication code received by the identification card registration receiving unit is transmitted to the authentication device via the network, and the authentication device uses the authentication device out of the contractor information stored in the contractor information database. The contractor information of the user to whom the authentication code is issued is returned, the contractor information is received from the authentication device via the network, and the received contractor information and the identity card registration receiving unit receive the identity A verification unit that verifies whether or not the content matches the information ;
If the contents of the subscriber information and the identification information in verification by the verification unit matches a ID information managing unit that registers in association with identification information and authentication code received by the identification card registration receiver identification device comprising a Turkey which have a. The identification card issuing device takes a picture of the user who has input the identification information , transmits time information indicating the shooting time when the photograph was taken to the authentication device, and sends the predetermined time to the authentication device. as, to issue an authentication code to prove the shooting time, the acquired from the authentication device the authentication code, to send pictures taken to the authentication device, to the authentication apparatus, the photographic and the authentication Associate the code with the photo storage database and output the ID card that displays the input identity information, the photograph taken, and the acquired authentication code,
Before dangerous card unit transmits the authentication code received by the identification card registration receiver via the network to the authentication device, to the authentication device, further photograph corresponding to the authentication code before Verify whether it is registered in the photograph storage database, send back the verification result, acquire the verification result from the authentication device via the network, and photograph corresponding to the authentication code based on the acquired verification result Verifies if exists,
If the contents of the contractor information and the identity information match in the verification by the verification unit, and the photo corresponding to the authentication code exists, the identification information management unit uses the identification card registration reception unit. 14. The identification device according to claim 13 , wherein the received identification information and an authentication code are registered in association with each other . The identification device further includes:
The identification card that receives the authentication code via the network from the identification card confirmation device that inputs the authentication code displayed on the identification card output by the identification code issuing device and transmits the input authentication code An inquiry receiver;
To acquire the status information corresponding to the authentication code received by the identification card inquiry receiving unit from the identification information management unit, acquired generates inquiry information including only partial information, the identification of the generated inquiry information and transmitted via the network to the card verification device, wherein the relative identification card verification device, identification of claim 13 or 14, characterized in Rukoto which have a and the outputting the inquiry information inquiry information generating unit Proof device . The identification device further includes:
An authentication code received by the identification card inquiry receiving unit is transmitted to the authentication device via a network, and the authentication device is caused to return time information indicating a time to be proved by the authentication code. Has an inquiry unit that obtains the time information via the network,
The identification apparatus according to claim 15, wherein the inquiry information generation unit includes the time information acquired by the inquiry unit in the inquiry information. The identification device further includes:
The identification card that receives the authentication code via the network from the identification card confirmation device that inputs the authentication code displayed on the identification card output by the identification code issuing device and transmits the input authentication code An inquiry receiver;
The authentication code received by the identification card inquiry receiver is transmitted to the authentication device via the network, and the photo corresponding to the authentication code among the photos stored in the photo storage database to the authentication device. It was returned, and the reference unit for obtaining the photograph via a network from the authentication device,
Generating inquiry information including said identification the identification information corresponding to the received authentication code by the card inquiry reception unit acquired from the identification information management unit, photographs acquired by the inquiry section and acquired only partial information and the generated inquiry information and transmitted via the network to the identification card verification device, to said identification card verification device, and wherein Rukoto to have a the inquiry information generating unit for outputting the inquiry information The identification device according to claim 14 . A identification card issuing apparatus for inputting identity information about the User chromatography The, issues an authentication code to prove the time by combining the time information obtained only in the subject time unique data indicating a time from the authentication device which stores in advance subscriber information database for each user is a subscriber of the subscriber information about subscribers of the authentication service as well as provide authentication services for, by the authentication device to a user who inputs the identification information issued, certified code for certifying a predetermined time, the identification card issuing apparatus that outputs identification card that displays the authentication code acquired and entered identity information, via the network, identification Identification card registration reception processing for receiving information and an authentication code;
The authentication code received by the identification card registration reception process is transmitted to the authentication device via a network, and the authentication device uses the authentication device out of the contractor information stored in the contractor information database. The contractor information of the user to whom the authentication code is issued is returned, the contractor information is received from the authentication device via the network, and the received contractor information and the identification card registration reception process are received. A verification process for verifying whether the content matches the information ,
If the contents of the subscriber information and the identification information in verification by the pre-Symbol verification process matches, registered in the identification information management unit associates the identification information and authentication code received by the identification card registration reception process identification program characterized by executing the only partial information management process you on your computer. Before SL identification card issuing apparatus, photographed users who enter identity information, time information indicating a photographing time taken the photos and transmitted to the authentication device, to the authentication apparatus, the predetermined As the time, an authentication code for certifying the shooting time is issued, the authentication code is obtained from the authentication device , the photographed photograph is transmitted to the authentication device, and the authentication device
Location with respect to, in association with the photograph and the authentication code is registered in the photo storage database, and outputs the identification card that displays the authentication code acquired and photographs taken with the entered identity information,
The verification process sends the authentication code received by the identification card registration receiving process via a network to the authentication device, to the authentication device, further pictures before Symbol photograph corresponding to the authentication code Verify whether it is registered in the storage database, send back the verification result, acquire the verification result from the authentication device via the network, and there is a photo corresponding to the authentication code based on the acquired verification result And verify whether
In the identification information management process, when the contents of the contractor information and the identification information match in the verification by the verification process and a photo corresponding to the authentication code exists, the identification card registration reception process 19. The identification program according to claim 18 , wherein the received identification information and an authentication code are associated with each other and registered in the identification information management unit . The identification program further includes:
The identification card that receives the authentication code via the network from the identification card confirmation device that inputs the authentication code displayed on the identification card output by the identification code issuing device and transmits the input authentication code Inquiry reception processing,
To acquire the status information corresponding to the authentication code received by the identification card inquiry reception processing from the identification information management unit, acquired generates inquiry information including only partial information, the identification of the generated inquiry information 20. The computer according to claim 18, further comprising: causing a computer to execute a query information generation process that is transmitted to a card verification device via a network and causes the identification card verification device to output the query information. Identification program. The identification program further includes:
Transmitting the authentication code received by the identification card inquiry reception process to the authentication device via a network, causing the authentication device to return time information indicating the time to be proved by the authentication code, and The computer to execute the inquiry process to obtain the time information from the network,
21. The identification program according to claim 20, wherein the inquiry information generation process includes the time information acquired by the inquiry process in the inquiry information. The identification program further includes:
The identification card that receives the authentication code via the network from the identification card confirmation device that inputs the authentication code displayed on the identification card output by the identification code issuing device and transmits the input authentication code Inquiry reception processing,
The authentication code received by the identification card inquiry reception process is transmitted to the authentication device via the network, and the photo corresponding to the authentication code among the photos stored in the photo storage database to the authentication device. And processing for obtaining the photograph from the authentication device via the network ,
Generating inquiry information including the said identification identity information corresponding to the received authorization code by the card inquiry reception processing acquired from the identification information management unit, photographs obtained acquired only partial information by the query processing And transmitting the generated inquiry information to the identification card confirmation apparatus via a network, and causing the identification card verification apparatus to execute an inquiry information generation process for outputting the inquiry information to the computer. The identification program according to claim 19 .

Images