JP4229069B2 - Card authentication apparatus, card authentication method, and card authentication program - Google Patents

Description

  The present invention relates to a card authentication device, a card authentication method, and a card authentication program for authenticating a user using a card. The present invention also relates to a service providing system using a card authentication device. The present invention also relates to an authentication card used for card authentication and a card reader for reading data from the card. Furthermore, the present invention relates to an authentication device that authenticates a user using a three-dimensional object provided with information storage means.

  In a card authentication system (apparatus) that performs authentication using a card (for example, an IC card or a magnetic card), data for authentication is read from a card possessed by the user, and the user is authenticated based on the read data. However, generally, when performing card authentication using a card authentication system, it is not possible to protect the card, for example, by adding information known only to the user. Therefore, when a card is lost or stolen, the user may be damaged by an unauthorized use called “spoofing”. Also, the user may suffer damage due to unauthorized use due to card skimming.

  In order to prevent damage caused by unauthorized use such as “spoofing” and “skimming”, it is conceivable to perform authentication using a password together with data read from a card. For example, the card authentication system reads data for authentication from the card at the time of authentication by the card, and inputs a password (for example, a several-digit password) from an input device such as a numeric keypad in accordance with a user operation. Then, the card authentication system authenticates the user using the data read from the card and the input password.

  Patent Document 1 describes a card authentication method in which authentication is performed using a wireless tag in addition to a settlement card. In the card authentication method described in Patent Document 1, the user terminal device reads authentication data from the payment card and also reads the password from the wireless tag. Then, the user terminal device confirms the validity of the user using the data read from the payment card and the password read from the wireless tag.

JP 2001-338251 A (paragraphs 0020-0032, FIG. 1-2)

  When performing card authentication using a password input from an input device, the user must perform a password input operation from an input device such as a numeric keypad in addition to an operation of reading the card by inserting the card into a card reader. I must. For this reason, the operation burden on the user is large and time-consuming. In addition, when using the numeric keypad, there are only ten types of keys (number keys from “0” to “9”) that can be input with one input, so for example, there are types of passwords (passwords) that can be input with one input. There will be only 10 ways. For this reason, there are few types of passwords that can be entered, and even if a several-digit password is used as the password, there is a possibility that damage from “spoofing” and “skimming” cannot be prevented sufficiently.

  Further, if the card authentication method described in Patent Document 1 is used, the trouble of inputting a password can be reduced to some extent, and password leakage can be reduced to some extent. However, the user must possess a wireless tag with the card in order to perform card authentication, and must perform an operation of reading data of the wireless tag along with an operation of causing the card reader to read the card. In addition, when a personal identification number is used as a password, there are few types of passwords that can be entered, and even if a password is used, there is a possibility that damage of “spoofing” and “skimming” cannot be sufficiently prevented.

  Accordingly, the present invention provides a card authentication device, an authentication device, a service providing system, an authentication card, a card reading device, and a card authentication method capable of performing card authentication with a simple operation and ensuring the safety of card authentication. And a card authentication program.

A card authentication apparatus according to the present invention is a card authentication apparatus that authenticates a user using a card to which a plurality of information storage means (for example, realized by electronic tags T1 to Tq) are attached, and an input operation is performed by the user. When performed once, a data reading means for reading each data from a plurality of information storage means of the information storage means attached to the card (for example, implemented by the electronic tag reader 1), data in which the data reading means has read Authentication means (for example, realized by the data processing device 2) for authenticating a user based on the data reading means, the data reading means is provided with a plurality of reading areas in a reading section for reading data, and the authentication means When unit reads the data, serial data reading means for identifying each information storage unit that has read the respective data Means specifying means (e.g., as implemented by the reading means 21 of the data processing apparatus 2) and, among the plurality of read regions provided in the data reading means, area specifying means for specifying a read area read each data (e.g. , And each information storage means specified by the storage means specifying means and each reading area specified by the area specifying means for each of the information storage means and the data from the information storage means. By determining whether or not all pair data generated by the pair data generation unit matches a predetermined authentication condition, the pair data generation unit generates pair data in association with the reading area that has read And a user authentication unit (for example, realized by the determination unit 22 of the data processing device 2).

The card authentication device further includes authentication data storage means for storing authentication data for authenticating a user in advance, and the authentication data storage means includes an information storage means attached to the card and a reading area provided in the data reading means. the combination data including a plurality of combinations of a, previously stored as authentication data, a user authentication means, pairs for all pairs data data generating means has generated, combination data authentication data storing means matches in the combination data accumulated there it is determined whether or not present, the pair all pairs data data generating means has generated, if it is determined that matching the combination data is present, it may be one that is judged successfully authenticate the user. According to such a configuration, not only a password for performing an input operation by bringing the top of the card into contact with the reading area, but also a password for performing an input operation by bringing the side or surface of the card into contact can be registered in advance. The user can be authenticated according to

  The data reading means reads data from the information storage means attached to the card every time an input operation is performed by the user, and the user authentication means reads the specified information every time the data reading means reads the data. If the user is authenticated based on the storage means and the reading area and it is determined that the user has been authenticated for all the predetermined number of input operations by the user, it may be determined that the user has been successfully authenticated. According to such a configuration, by inputting a password by a plurality of reading operations, the number of password combinations that can be input is exponentially compared to the case where an input operation is performed using an input device such as a numeric keypad. Can be increased. Therefore, it is possible to increase the probability that an unauthorized authentication operation at the time of card authentication can be eliminated, and it is possible to improve security for authentication.

The card authentication device further includes authentication data storage means for storing authentication data for authenticating a user in advance, and the authentication data storage means includes an information storage means attached to the card and a reading area provided in the data reading means. DOO is a list in which a plurality correspondence combined data combining correspondence list (e.g., authentication pair data list) was previously stored as authentication data, a user authentication means, each data reading means reads the data, paired data for all pairs data generated by the generation section, it is determined whether the authentication data storage unit matches one of combination data included in the corresponding list for storing, for all combination data included in the corresponding list, if It may be determined that the user has been successfully authenticated on the condition that it has been determined. According to such a configuration, not only a password that is input by a single contact but also a password that is input by a plurality of contacts can be registered in advance, and a user can be authenticated according to the registered password.

  The data reading unit is preferably a unit that reads data from an electronic tag attached to a card as an information storage unit.

Authentication device according to the invention, three-dimensional object in which a plurality of information storage means attached (eg, mobile telephone 100b) An authentication apparatus that authenticates a user using, when the input operation by the user is performed once, stereoscopic A data reading means for reading data from each of a plurality of information storage means of the information storage means attached to the object, and an authentication means for authenticating the user based on the data read by the data reading means, the data reading means A plurality of reading areas are provided in the reading unit for reading the data, and the authentication means, when the data reading means reads the data, the storage means specifying means for specifying the information storage means from which the data reading means has read each data ; among a plurality of read regions provided in the data reading means, and area specifying means for specifying a read area read each data, serial Pair data for generating paired data in which each information storage means specified by the means specifying means and each reading area specified by the area specifying means is associated with the reading area in which data is read from the information storing means. It includes generation means and user authentication means for authenticating a user by determining whether or not all pair data generated by the pair data generation means matches a predetermined authentication condition .

A service providing system (for example, a security system or a financial system) according to the present invention is a service providing system that provides a service according to an authentication result, and authenticates a user by using a card to which a plurality of information storage means are attached. And a control device for controlling a service device (for example, a door lock or a flapper gate) for providing a predetermined service. The card authentication device is attached to a card when an input operation is performed once by a user. each data reading means for reading data from a plurality of information storage means of the information storage means is includes an authentication unit for authenticating the user based on the data that the data reading unit has read, the data reading means, data The reading unit is provided with a plurality of reading areas, and the authentication means When stage reads the data, a storage unit specifying unit data reader identifies each information storage unit that has read the respective data, among the plurality of read regions provided in the data reading unit, reading read each data area The information storage means and the reading area in which data is read from the information storage means are associated with each of the information storage means specified by the storage means specifying means and each reading area specified by the area specifying means. Paired data generating means for generating the paired data, and user authentication means for authenticating the user by determining whether or not all paired data generated by the paired data generating means meets a predetermined authentication condition. And the control device controls the service device based on the authentication result of the card authentication device.

  Further, in the service providing system, when the authentication unit determines that the authentication unit has succeeded in authenticating the user, the card authenticating device generates permission instruction information (for example, authorization transmission information) for instructing the user to provide the permitted service. The control device may control the service device based on the permission instruction information generated by the instruction information generation unit. According to such a configuration, various services can be provided to the user on the condition that the user authentication is successful.

  Further, in the service providing system, the card authentication device is a permission information storage unit (for example, an authorization information storage unit) that stores in advance permission information (for example, authorization information) indicating service contents permitted to the user in association with the user. The instruction information generation unit may generate the permission instruction information based on the permission information stored in the permission information storage unit. According to such a configuration, it is possible to easily determine and provide a service permitted to the user based on the permission instruction information.

In the authentication card according to the present invention, when an input operation is performed once by the user, the data reading means for reading data from a plurality of information storage means among the information storage means attached to the card, and the data reading means Authentication means for authenticating the user based on the data, the data reading means is provided with a plurality of reading areas in the reading section for reading the data, and when the authentication means reads the data, the data reading means Storage means specifying means for specifying information storage means for reading each data, area specifying means for specifying a reading area for reading each data among a plurality of reading areas provided in the data reading means, and storage means For each information storage means specified by the specifying means and each reading area specified by the area specifying means, the information storage means and the information A paired data generation unit that generates paired data in association with a reading area in which data is read from the storage unit, and determines whether all paired data generated by the paired data generation unit meets a predetermined authentication condition. Thus, an authentication card (for example, card 100) used in a card authentication apparatus including a user authentication unit for authenticating a user, including a plurality of information storage units, and the information storage unit has a polygonal shape. It is attached to each vertex of the card | curd for authentication which has.

The card reading device according to the present invention includes a data reading unit that reads data from a plurality of information storage units among the information storage units attached to the card and a data reading unit when an input operation is performed once by a plurality of users. An authentication unit that authenticates a user based on the read data. The data reading unit includes a plurality of reading areas in a reading unit that reads data, and the data reading unit reads the data when the data reading unit reads the data. Storage means specifying means for specifying each information storage means for reading each data; area specifying means for specifying a reading area for reading each data among a plurality of reading areas provided in the data reading means; For each information storage means specified by the means specifying means and each reading area specified by the area specifying means, A paired data generation unit that generates paired data in association with a reading area in which data is read from the information storage unit, and whether or not all paired data generated by the paired data generation unit meets a predetermined authentication condition A card reader (e.g., electronic tag reader 1) that reads data from an information storage unit attached to a card, provided in a card authentication device that includes a user authentication unit that authenticates a user. A plurality of reading areas are provided in the unit, and when data is read from the information storage means attached to the card, an area ID for identifying the reading area from which the data has been read out of the plurality of reading areas is output. And

The card authentication method according to the present invention is a card authentication method for authenticating a user using a card with a plurality of information storage means attached, and when the user performs an input operation once, the information storage attached to the card is stored. A step of reading data from each of a plurality of information storage means, a step of identifying each information storage means that has read each data, and a plurality of reading areas provided in a reading unit for reading the data Among these, the step of specifying the reading area where each data is read is associated with the information storing means and the reading area where the data is read from the information storing means for each specified information storing means and each specified reading area. Generating the pair data, and determining whether all the generated pair data matches a predetermined authentication condition. By, characterized in that it comprises the step of authenticating the user.

Further, the card authentication method includes a step of pre-accumulating combination data obtained by combining information storage means attached to a card and a reading area provided in the reading unit as authentication data, and accumulating all generated paired data. and determining whether the combination data matching in the combination data exists to, for all pairs data generated, if it is determined that matching the combination data exists, and determining that it has successfully authenticated the user It may be included. According to such a configuration, the combination of the information storage means provided on the card and the reading area can be registered as a password. Further, according to the registered password, the input operation of the password can be easily performed by bringing the apex, side, and surface of the card into contact with the reading area of the data reading means.

A card authentication program according to the present invention is a card authentication program (for example, an authentication authorization program 8) for authenticating a user using a card to which a plurality of information storage means are attached, and is input to the computer by the user. Is performed once, the process of inputting each read data from a plurality of information storage means of the information storage means attached to the card, and when the data is input, the information storage means that has read each data is specified. Information storage process, a process for specifying a read area for reading each data among a plurality of read areas provided in a reading unit for reading data, and information storage for each specified information storage means and each specified read area Processing for generating paired data in which the data is read from the information storage means , All pairs data generated is by determining whether they meet the predetermined authentication condition, characterized in that to execute a process of authenticating the user.

  According to the present invention, the user can perform the password input operation only by performing the operation of bringing the card into contact with the data reading means. Therefore, authentication with a card can be performed with a simple operation as compared with a case where a password input operation is performed from an input device such as a numeric keypad. In addition, the number of password combinations can be increased as compared with a case where an input operation is performed using an input device such as a numeric keypad. Therefore, authentication by a card can be performed with a simple operation, and safety of card authentication can be ensured.

Embodiment 1 FIG.
Hereinafter, a first embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing an example of the configuration of a service providing system using a card authentication apparatus according to the present invention. In the present embodiment, the card authentication device reads data from the card 100 possessed by the user and authenticates the user based on the read data. As shown in FIG. 1, the service providing system includes an electronic tag reader 1, a data processing device 2 that operates according to program control, a storage device 3, a display output device 4, a control device 6, and a service device 7. In the present embodiment, the card authentication device is realized by the electronic tag reader 1, the data processing device 2, the storage device 3, and the display output device 4.

  In the present embodiment, the service providing system provides various services to the user according to the authentication result. For example, a service providing system is a security system that performs employee authentication and entrance / exit management in a company. Further, for example, the service providing system is a financial system of a financial institution that performs customer authentication and cash deposit processing.

  The electronic tag reader 1 has a function of reading data from the card 100. In the present embodiment, a plurality of electronic tags are attached to the card 100, and the electronic tag reader 1 reads data from each electronic tag of the card 100.

  FIG. 2 is an explanatory diagram showing an example of a card used for card authentication. In the present embodiment, a case where the card 100 is a security card possessed by a company employee will be described. The card 100 includes a plurality of electronic tags T1 to Tq. For example, the card 100 includes a plurality of RFID tags, IC tags, and wireless tags as electronic tags. In the present embodiment, as shown in FIG. 2, the case where the card 100 includes four electronic tags T1, T2, T3, and T4 will be described. Further, as shown in FIG. 2, the electronic tags T <b> 1, T <b> 2, T <b> 3, T <b> 4 are provided at each vertex (corner) portion of the card 100. Each electronic tag T1, T2, T3, T4 stores in advance an ID for identifying the electronic tag (hereinafter referred to as an electronic tag ID). In the present embodiment, the electronic tag reader 1 reads the electronic tag ID from each of the electronic tags T1, T2, T3, T4 of the card 100.

  The electronic tag reader 1 includes a reading unit that reads data from the card 100, and the reading unit is divided into a plurality of areas. FIG. 3 is an explanatory diagram illustrating an example of a reading unit of the electronic tag reader 1. The reading unit of the electronic tag reader 1 includes a plurality of reading regions R1 to Rp. In the present embodiment, as shown in FIG. 3, a case will be described in which the reading unit of the electronic tag reader 1 includes eight reading regions R1, R2, R3, R4, R5, R6, R7, and R8.

  The electronic tag reader 1 has a function of outputting data read from the card 100 to the data processing device 2. In the present embodiment, the electronic tag reader 1 outputs the electronic tag ID read from each of the electronic tags T <b> 1 to Tq of the card 100 to the data processing device 2. In addition, the electronic tag reader 1 outputs to the data processing device 2 information indicating which reading area R1 to Rp has read the electronic tag ID together with the electronic tag ID. In the present embodiment, the electronic tag reader 1 stores IDs (hereinafter referred to as region IDs) for identifying the reading regions R1 to Rp in a storage unit or the like in advance, and the electronic tag ID together with the electronic tag ID. Is output to the data processing device 2.

  In the present embodiment, the user makes the electronic tag reader 1 read the information of each of the electronic tags T1 to Tq of the card 100 by bringing the card 100 into contact with the reading unit of the electronic tag reader 1 (hereinafter, simply referred to as a reading operation). Say). The user can also perform a password input operation by performing a reading operation. In this embodiment, the user can register the password in advance by registering the combination of the electronic tag and the reading area in advance. For example, when the combination of the electronic tag T1 and the reading area R2 is registered, the user brings the corner portion including the electronic tag T1 of the card 100 shown in FIG. 2 into contact with the reading area R2 shown in FIG. Password input operation can be performed.

  Further, instead of bringing any corner of the card 100 into contact with the reading unit of the electronic tag reader 1, the password input operation may be performed by bringing any side of the card 100 into contact with the reading unit. In this case, the user can register the password in advance by registering two combinations of the electronic tag and the reading area. For example, when the combination of the electronic tag T1 and the reading area R2 and the combination of the electronic tag T4 and the reading area R3 are registered, the user moves the side 101 of the card 100 shown in FIG. 2 to the reading area R2, shown in FIG. By touching R3, a password input operation can be performed. In this case, the user brings the card 100 into contact with the electronic tag reader 1 so that the electronic tag T1 is in contact with the reading region R2 and the electronic tag T4 is in contact with the reading region R3.

  The password may be registered so that the side of the card 100 does not contact the two reading areas of the electronic tag reader 1 but contacts one of the reading areas of the electronic tag reader 1. For example, when the combination of the electronic tag T1 and the reading area R2 and the combination of the electronic tag T4 and the reading area R2 are registered, the user places the side 101 of the card 100 shown in FIG. 2 in the reading area R3 shown in FIG. It is possible to perform a password input operation by touching.

  Further, instead of bringing the card 100 into contact with the reading unit of the electronic tag reader 1 only once, the password input operation may be performed by bringing the corner or side of the card 100 into contact with the reading unit a plurality of times. In this case, by registering a list of combinations of the electronic tag and the reading area in advance, the user can register a password for a plurality of operations in advance.

  In FIG. 1, one electronic tag reader 1 is shown, but the card authentication device may include a plurality of electronic tag readers 1. For example, when the card authentication device is used in a security system, the electronic tag reader 1 may be installed at each door lock or flapper gate. Each electronic tag reader 1 may be connected to the data processing device 2 via a network such as a LAN. In this case, each electronic tag reader 1 transmits data read from the card 100 to the data processing device 2 via the network.

  Specifically, the storage device 3 is a magnetic disk device, an optical disk device, or the like. As shown in FIG. 1, the storage device 3 includes an anti-authentication storage unit 31 and an authorization information storage unit 32.

  The authentication storage unit 31 stores authentication data (password) for authenticating the user in advance. The authentication authentication storage unit 31 stores authentication data in which electronic tags T1 to Tq provided on the card 100 are associated with reading regions R1 to Rp of the electronic tag reader 1. In the present embodiment, the card authentication device uses authentication pair data in which an electronic tag ID is associated with a region ID as authentication data. The pair authentication storage unit 31 stores in advance authentication pair data including one or two pairs (combinations) of an electronic tag ID and a region ID.

  For example, in the case of a password that is operated by bringing any corner of the card 100 into contact with the electronic tag reader 1, the pair authentication storage unit 31 stores authentication pair data including one pair of electronic tag ID and area ID. To do. Further, in the case of a password that is input by bringing any side of the card 100 into contact with the electronic tag reader 1, the pair authentication storage unit 31 stores authentication pair data including two pairs of electronic tag IDs and area IDs. .

  Further, in the case of a password that is input and operated by bringing the corner or side of the card 100 into contact with the reading unit a plurality of times, the card authentication device uses a list (hereinafter referred to as an authentication pair) in which a plurality of authentication pair data is serially associated as authentication data. Data list). In this case, the authentication pair storage unit 31 stores an authentication pair data list including a plurality of authentication pair data.

  In addition, the authentication storage unit 31 stores predetermined index information for identifying each authentication data. In the present embodiment, the pair authentication storage unit 31 stores authentication pair data and an authentication pair data list in advance in association with index information.

  FIG. 4 is an explanatory diagram illustrating an example of authentication data stored in the authentication authentication storage unit 31. As shown in FIG. 4, the authentication storage unit 31 stores each authentication data in association with index information “1” to “n”. In the example illustrated in FIG. 4, the pair authentication storage unit 31 stores authentication pair data as authentication data in association with the index information “2” and “n”. In the example illustrated in FIG. 4, the authentication storage unit 31 associates a plurality of authentication pair data as authentication data in association with the index information “1”, “3”, “4”. I remember the list.

  In the example shown in FIG. 4, the authentication pair data corresponding to the index information “2” includes only one pair (Ti21, Rx21) of the electronic tag ID and the area ID, and the corner of the card 100 is the electronic It can be seen that the authentication data is for the password that is input by operating the tag reader 1. The authentication pair data corresponding to the index information “n” includes two pairs ((Tin1, Rxn1) and (Tjn1, Ryn1)) of the electronic tag ID and the region ID, and the side of the card 100 is electronic. It can be seen that the data is for a bus word to be input by touching the tag reader 1.

  The authorization information storage unit 32 stores in advance authorization information indicating the contents of services permitted for the user in association with the index information. FIG. 5 is an explanatory diagram illustrating an example of information stored in the authorization information storage unit 32. In the present embodiment, an example of information stored in the authorization information storage unit 32 when the card authentication device is used in a security system will be described. As shown in FIG. 5, the authorization information storage unit 32 stores, as authorization information, a user ID for identifying a user, a user name, and a security level permitted for the user.

  For example, the authorization information storage unit 32 stores the security level in three stages “A” to “C”. In the example illustrated in FIG. 5, for example, it is understood that the security level permitted to the user with the user ID “U1” and the user name “Name-1” is “A”. Further, for example, it is understood that the security level permitted to the user with the user ID “U4” and the user name “Name-4” is “C”.

  Specifically, the data processing apparatus 2 is an information processing apparatus such as a workstation or a personal computer. As shown in FIG. 1, the data processing apparatus 2 includes a reading unit 21, a determination unit 22, and an authorization transmission unit 23.

  The reading unit 21 has a function of inputting data read from the card 100 by the electronic tag reader 1 from the electronic tag reader 1. In the present embodiment, the reading unit 21 inputs the electronic tag ID read from the card 100 by the electronic tag reader 1 from the electronic tag reader 1. Based on the electronic tag ID input from the electronic tag reader 1, the reading unit 21 specifies which electronic tag the data has been read from among a plurality of electronic tags provided on the card 100. The reading unit 21 may receive the electronic tag ID from the electronic tag reader 1 via a network.

  Further, the reading unit 21 has a function of specifying which reading region R1 to Rp of the reading unit of the electronic tag reader 1 is read from the input electronic tag ID. For example, the reading unit 21 inputs the area ID of the reading area from which the electronic tag ID is read together with the electronic tag ID from the electronic tag reader 1. Then, the reading unit 21 specifies which reading region R1 to Rq has read data from the card 100 based on the region ID input from the electronic tag reader 1.

  Further, the reading means 21 has a function of generating pair information combining the electronic tag ID and the area ID based on the input electronic tag ID and the specified reading area. The reading unit 21 has a function of outputting the generated one or two pieces of pair information to the determination unit 22.

  In the present embodiment, when the user performs an operation (reading operation) for bringing the card 100 into contact with the electronic tag reader 1 once, the reading unit 21 receives one or two electronic tag IDs and one or two electronic tag IDs from the electronic tag reader 1. Enter two region IDs. Then, the reading unit 21 generates one or two pieces of pair information based on the input electronic tag ID and region ID. For example, when the user performs an operation of bringing the corner of the card 100 into contact with the electronic tag reader 1, the reading unit 21 inputs one electronic tag ID and one region ID, and generates one pair information. For example, when the user performs an operation of bringing the side of the card 100 into contact with the electronic tag reader 1, the reading unit 21 inputs two electronic tag IDs and two area IDs, and generates two pieces of pair information.

  The determination unit 22 has a function of authenticating the user based on the electronic tag and the reading area specified by the reading unit 21. In the present embodiment, the determination unit 22 authenticates the user based on the pair information generated by the reading unit 21. In the present embodiment, the determination unit 22 determines whether there is data that matches the pair information generated by the reading unit 21 among the authentication pair data stored in the pair authentication storage unit 31. If it is determined that there is authentication pair data that matches the pair information, the determination unit 22 determines that the user authentication is successful. If it is determined that there is no authentication pair data that matches the pair information, the determination unit 22 determines that the user authentication was unsuccessful.

  Further, when authentication is performed using an authentication pair data list as authentication data, the determination unit 22 sequentially inputs pair information from the reading unit 21 every time the user performs a reading operation. Then, the determination unit 22 determines whether or not the input pair information group matches all the authentication pair data included in the authentication pair data list. If it is determined that all the authentication pair data matches, the determination unit 22 determines that the user authentication is successful. If it is determined that any of the authentication pair data included in the authentication pair data list does not match, the determination unit 22 determines that the user authentication is unsuccessful.

  Further, the determination unit 22 has a function of causing the display output device 4 to display success or failure of user authentication. For example, when the user authentication is successful, the determination unit 22 displays on the display output device 4 that the authentication is successful. For example, when the user authentication is unsuccessful, the determination unit 22 displays on the display output device 4 that the authentication is unsuccessful, and prompts the user to redo the reading operation.

  When the authorization transmission unit 23 determines that the authentication is successful, the authorization transmission unit 23 instructs the user to provide the permitted service based on the authorization information stored in the authorization information storage unit 32. The function to generate. In this embodiment, when the determination unit 22 determines that the authentication is successful, the determination unit 22 outputs index information corresponding to the authentication data used for the authentication to the authorization transmission unit 23. The authorization transmission unit 23 extracts authorization information corresponding to the input index information from the authorization information storage unit 32. Then, the authorization transmission unit 23 generates authorization transmission information including the user ID, the user name, and the security level included in the extracted authorization information, and outputs them to the control device 6.

  Specifically, the display output device 4 is a display device such as a display device. The display output device 4 has a function of displaying success / failure of the user authentication in accordance with an instruction from the determination unit 22. In FIG. 1, one display output device 4 is illustrated, but the card authentication device may include a plurality of display output devices 4. For example, when a card authentication device is used in a security system, a dedicated display device may be installed at each door lock or flapper gate. In this case, each dedicated display device may display the success / failure of the user authentication according to the instruction information from the determination unit 22 received via the network.

  The service device 7 is a terminal or device for providing various services. For example, when the card authentication device is used in a security system, the service device 7 is a device such as a door lock or a flapper gate. For example, when the card authentication device is used in a financial system, the service device 7 is a device such as a safe lock or an ATM (automated teller machine). The service device 7 may be a simple terminal such as a KIOSK terminal, for example.

  In FIG. 1, one service device 7 is shown, but the card authentication device includes a plurality of service devices 7. For example, when the card authentication device is used in a security system, a plurality of door locks and flapper gates may be installed in the company as the service device 7.

  The control device 6 has a function of controlling the service device 7. In the present embodiment, the control device 6 performs control so that an authenticated user can use the service device 7 according to the authorization transmission information input from the authorization transmission unit 23. Moreover, the control apparatus 6 refuses use of the service apparatus 7 by the user who is not authenticated. For example, when a card authentication device is used in a security system, when the user is authenticated, the control device 6 opens a door lock or a flapper gate, which is the service device 7, and prompts the user to pass. Further, the control device 6 closes the door lock and the flapper gate and rejects the user who has failed the authentication.

  Next, the operation will be described. In the present embodiment, a case where the card authentication apparatus is used in a corporate security system will be described. In the present embodiment, each employee of the company possesses the card 100 shown in FIG. Then, when entering and leaving the company, each employee performs a reading operation and a password input operation by bringing the card 100 into contact with the electronic tag reader 1 installed in the door lock or the flapper gate.

  In the present embodiment, each employee selects a password for performing an authentication operation in advance and registers it as authentication data in the card authentication apparatus. The authentication authentication storage unit 31 of the storage device 3 stores each registered authentication data in advance. In the present embodiment, each employee selects a combination of an electronic tag and a reading area as a password and registers it in advance in the card authentication apparatus as authentication data.

  FIG. 6 is a flowchart illustrating an example of a card authentication process in which the card authentication apparatus reads data from the card 100 to authenticate the user. When the employee passes through the place where the door lock or the flapper gate is installed, the employee carries the reading operation and the password input operation by bringing the card 100 possessed into contact with the reading unit of the electronic tag reader 1. For example, when the combination of the electronic tag T1 and the reading area R2 is a password, the employee brings the electronic tag T1 of the card 100 shown in FIG. 2 into contact with the reading area R2 shown in FIG. Perform input operations. Further, for example, when the combination of the electronic tag T1 and the reading area R2 and the combination of the electronic tag T4 and the reading area R3 are passwords, the employee shows the side 101 of the card 100 shown in FIG. 2 in FIG. By making contact so as to straddle the reading regions R2 and R3, a reading operation and a password input operation are performed.

  The electronic tag reader 1 reads the electronic tag ID from one or a plurality of electronic tags T1 to T4 of the card 100 in accordance with the operation of the employee. Then, the electronic tag reader 1 outputs the read electronic tag ID to the data processing device 2. The electronic tag reader 1 outputs the area IDs of the reading areas R1 to R8 obtained by reading the electronic tag ID together with the electronic tag ID to the data processing device 2.

  The reading unit 21 of the data processing device 2 generates one or two pieces of pair information based on the electronic tag ID and the region ID input from the electronic tag reader 1 (step S101). Then, the reading unit 21 outputs the generated pair information to the determination unit 22.

  For example, it is assumed that the employee has brought the corner portion including the electronic tag Ti of the card 100 into contact with the reading region Rx of the electronic tag reader 1. In this case, the reading unit 21 generates pair information (Ti, Rx) based on the input electronic tag ID and region ID. Further, for example, it is assumed that the employee contacts the side including the electronic tags Ti and Tj of the card 100 so that the electronic tag Ti is in contact with the reading region Rx and the electronic tag Tj is in contact with the reading region Ry. In this case, the reading unit 21 generates two pieces of pair information (Ti, Rx) and (Tj, Ry) based on the input electronic tag ID and region ID.

  The determination unit 22 searches for authentication data stored in the pair authentication storage unit 31 of the storage device 3, and among the authentication data stored in the pair authentication storage unit 31, there is one that matches the pair information generated by the reading unit 21. It is determined whether or not to perform (steps S102 and S103).

  FIG. 7 is an explanatory diagram illustrating a specific example of authentication data stored in the authentication authentication storage unit 31. In the example illustrated in FIG. 7, the authentication storage unit 31 includes, as authentication data, one authentication pair data (data corresponding to the index information “2”) and three authentication pair data lists (index information “1”, “ 3 ”,“ data corresponding to “4”) will be described.

  For example, when the employee brings the electronic tag T1 of the card 100 into contact with the reading region R2 of the electronic tag reader 1, the reading unit 21 generates pair information (T1, R2). Further, the determination unit 22 uses the authentication pair data (T1, R2) corresponding to the index information “2” among the authentication data stored in the pair authentication storage unit 31 illustrated in FIG. Is determined to match.

  If it is determined that there is no matching authentication data, the determination unit 22 determines that the employee authentication is unsuccessful, and outputs an authentication unsuccessful display instruction to the display output device 4 as an authentication result (step S111). ). Then, the display output device 4 displays that the authentication is unsuccessful according to the instruction of the determination means 22 and prompts the employee to perform the reading operation again.

  If it is determined that there is matching authentication data, the determination unit 22 determines whether the matched authentication data is an authentication-to-data list (step S104). For example, if it is determined that the authentication data (T1, R2) corresponding to the index information “2” shown in FIG. 7 matches, there is no data serially associated with the data (T1, R2). 22 determines that the authentication data is not an authentication-to-data list (that is, authentication-to-data). Further, for example, when it is determined that the authentication data “(T1, R2) (T4, R3)” corresponding to the index information “1” illustrated in FIG. 7 matches, the data “(T1, R2) (T4, R3)”. Since there is data “(T1, R6) (T2, R7)” associated with the serial number, the determination unit 22 determines that the authentication data is an authentication data list.

  If it is determined that the authentication data is an authentication-to-data list, the determination unit 22 outputs an instruction to the employee to prompt the next reading operation to the display output device 4 and displays a message to prompt the next contact operation. 4 is displayed (step S105). Then, the employee brings the card 100 into contact with the electronic tag reader 1 in accordance with the display on the display output device 4.

  When the electronic tag reader 1 inputs the electronic tag ID and the area ID according to the employee's contact operation, the reading unit 21 generates pairing information based on the input electronic tag ID and the area ID (step S106). The determination unit 22 determines whether the pair information generated by the reading unit 21 matches the next authentication pair data included in the authentication pair data list (step S107).

  If it is determined that the data does not match the next authentication pair data, the determination unit 22 determines that the authentication of the employee is unsuccessful, and outputs an authentication unsuccessful display instruction to the display output device 4 as an authentication result (step S40). S111). Then, the display output device 4 displays that the authentication is unsuccessful according to the instruction of the determination means 22 and prompts the employee to perform the reading operation again.

  If it is determined that the data matches the next authentication pair data, the determination unit 22 determines whether or not all authentication pair data included in the authentication pair data list have been collated (authenticated) (step S108). If it is determined that the verification is not performed for all the authentication pair data, the determination unit 22 returns to the process of step S105 and continues from step S105 until the verification is completed for all the authentication pair data included in the authentication pair data list. The processing up to S108 is repeatedly executed.

  If it is determined in step S108 that all the authentication data has been collated, the determination unit 22 determines that the employee has been successfully authenticated, and the authorization transmission unit 23 and the display output device 4 indicate that the authentication has been successful. (Step S109). Then, the display output device 4 displays that the authentication is successful according to the instruction from the determination means 22.

  For example, a case will be described where, in step S104, the determination unit 22 determines that the pair information matches the authentication pair data “(T1, R2) (T4, R3)” corresponding to the index information “1” illustrated in FIG. . In this case, the determination unit 22 determines that the authentication data is an authentication data list, and causes the display output device 4 to display a message prompting the next reading operation. When the reading unit 21 generates pair information (T1, R6) and (T2, R7) according to the employee's reading operation, the determination unit 22 generates the next authentication pair data “(T1) whose pair information is included in the authentication pair data list. , R6) (T2, R7) ". In addition, since there is no next authentication pair data serially associated with the authentication pair data “(T1, R6) (T2, R7)”, the determination unit 22 determines that all authentication pairs included in the authentication pair data are included. It is determined that the data has been verified, and it is determined that the employee has been successfully authenticated.

  If it is determined in step S104 that the authentication data is not an authentication-to-data list, the determination unit 22 determines that the employee has been successfully authenticated without executing the processing from step S105 to step S108. Then, the determination unit 22 outputs, to the authorization transmission unit 23 and the display output device 4, that the authentication is successful as an authentication result. For example, if it is determined in step S104 that the pair information matches the authentication data (T1, R2) corresponding to the index information “2” shown in FIG. 7, the determination unit 22 determines that the authentication data is authentication pair data. Then, it is determined that the employee has been successfully authenticated.

  If it is determined that the authentication is successful, the determination unit 22 extracts index information corresponding to the authentication data used for authentication from the anti-authentication storage unit 31. Then, the determination unit 22 outputs the extracted index information to the authorization transmission unit 23.

  The authorization transmission unit 23 generates authorization transmission information based on the index information from the determination unit 22. And the authorization transmission means 23 outputs the produced | generated authorization transmission information to the control apparatus 6 (step S110). In this case, the authorization transmission unit 23 extracts the authorization information corresponding to the index information from the determination unit 22 from the authorization information storage unit 32. In the present embodiment, the authorization transmission means 23 extracts the user ID, user name, and security level corresponding to the index information from the authorization information storage unit 32, and authorization transmission information including the extracted user ID, user name, and security level. Is generated.

  For example, in the example illustrated in FIG. 5, when authentication is performed using authentication data corresponding to the index information “1”, the authorization transmission unit 23 uses the user ID “U1” corresponding to the index information “1”, the user name “Name-1” and security level “A” are extracted. Then, the authorization transmission unit 23 generates authorization transmission information including the user ID “U1”, the user name “Name-1”, and the security level “A”.

  The control device 6 controls the service device 7 based on the authorization transmission information from the authorization transmission means 23. For example, the control device 6 opens the service device 7 such as a door lock or a flapper gate based on the authorization transmission information, and prompts the employee to pass.

  As described above, according to the present embodiment, a plurality of electronic tags are built in the card 100 possessed by the user, and a plurality of reading areas are provided in the electronic tag reader 1. Further, the card authentication device generates pair information of the electronic tag ID and the reading area ID according to the reading operation of the user. Then, the card authentication device authenticates the user by determining whether or not there is data that matches the generated pair information in the authentication data registered in the pair authentication storage unit 31 in advance.

  According to the present embodiment, the user can perform the password input operation only by performing an operation of bringing the card 100 into contact with the electronic tag reader 1. Therefore, authentication by the card 100 can be performed with a simple operation as compared with a case where a password input operation is performed from an input device such as a numeric keypad. In addition, the number of combinations of identification information (passwords) can be increased as compared with a case where an input operation is performed using an input device such as a numeric keypad. Therefore, authentication by a card can be performed with a simple operation, and safety of card authentication can be ensured.

  For example, it is possible to increase the number of password combinations that can be input by a single input operation, compared to a case where an input operation is performed using an input device such as a numeric keypad. For example, since the numeric keypad includes only ten numeric keys from “0” to “9”, there are only ten types of passwords (password numbers) that can be entered with a single input operation using the numeric keypad. . According to the present embodiment, for example, when authentication is performed using the card 100 including four electronic tags and the electronic tag reader 1 including eight reading areas, the types of passwords that can be input by one input operation are as follows. More than 200 ways.

Also, by inputting a password by a plurality of reading operations, the number of password combinations that can be input can be exponentially increased as compared with a case where an input operation is performed using an input device such as a numeric keypad. For example, the number of passwords (passwords) that can be input by n input operations using the numeric keypad is only 10 ⁿ . According to the present embodiment, for example, when authentication is performed using the card 100 including four electronic tags and the electronic tag reader 1 including eight reading areas, the types of passwords that can be input by n input operations are as follows. equal to or greater than the street 200 ^n. Therefore, it is possible to increase the probability that an unauthorized authentication operation at the time of card authentication can be eliminated, and it is possible to improve security for authentication.

  In the present embodiment, the case where the corner or side of the card 100 is brought into contact with the electronic tag reader 1 has been described. However, the entire surface of the card 100 is brought into contact with the reading unit of the electronic tag reader 1 to You may make it contact.

  For example, when the entire card 100 shown in FIG. 2 is brought into contact with the electronic tag reader 1, the electronic tag reader 1 reads the electronic tag ID from all four electronic tags T1 to T4 and outputs them to the data processing device 2. In this case, the reading unit 21 may generate four pieces of pair information based on the electronic tag ID and the region ID input from the electronic tag reader 1. Then, the determination unit 22 may perform authentication based on the four pairs of information generated by the reading unit 21. In this case, the pair authentication storage unit 31 stores in advance authentication pair data including four pairs (combinations) of the electronic tag ID and the region ID. Then, the determination unit 22 authenticates the user by determining whether or not the authentication pair data stored in the pair authentication storage unit 31 matches all four pieces of pair information generated by the reading unit 21. If it does in that way, compared with the case where the corner or side of card 100 is made to contact, the kind of password can be increased further and the security of card authentication can be improved more.

Embodiment 2. FIG.
Next, a second embodiment of the present invention will be described with reference to the drawings. In the present embodiment, the configuration of the service providing system using the card authentication device is the same as the configuration of the service providing system shown in the first embodiment. In the present embodiment, the functions of the electronic tag reader 1, the data processing device 2, the storage device 3, the display output device 4, the control device 6, and the service device 7 are the same as those in the first embodiment. is there. In the present embodiment, the shape of the card and the shape of each reading area of the electronic tag reader 1 are different from those of the card 100 and the electronic tag reader 1 shown in the first embodiment.

  FIG. 8 is an explanatory diagram showing another example of a card used for card authentication. In the present embodiment, as shown in FIG. 8, the card 100a has a hexagonal shape instead of a quadrangle. Note that the card 100a may have a polygonal shape other than a hexagon. The card 100a includes six electronic tags T1 to T6. In the present embodiment, as shown in FIG. 8, the card 100a is provided with electronic tags T1 to T6 at each vertex of a hexagon.

  FIG. 9 is an explanatory diagram illustrating another example of the reading unit of the electronic tag reader 1. In the present embodiment, the reading unit of the electronic tag reader 1 is divided into 13 reading regions R1 to R13 as shown in FIG. The reading unit of the electronic tag reader 1 does not include a plurality of reading areas having the same shape, but includes reading areas having various shapes such as a triangle, a quadrangle, a circle, and a star as shown in FIG.

  Note that the operation of the card authentication device authenticating the user using the card is the same as the operation of the card authentication process shown in the first embodiment.

  As described above, according to the present embodiment, the card 100a includes the six electronic tags T1 to T6, and the reading unit of the electronic tag reader 1 is divided into reading regions having various shapes. Therefore, the number of combinations of passwords can be further increased as compared with the case where the card 100 having a square shape and the electronic tag reader 1 including the reading area divided into the same shape are used. Therefore, the security of card authentication can be further improved.

  In FIG. 8, a number may be written on each of the electronic tags T1 to T6 of the card 100a, or a color or a pattern may be added. In FIG. 9, a number may be written on each reading region R <b> 1 to R <b> 13 of the reading unit of the electronic tag reader 1, or a color or pattern may be added. In this way, the user can easily memorize and identify the password.

Embodiment 3 FIG.
Next, a third embodiment of the present invention will be described with reference to the drawings. In the present embodiment, a case where an authentication device that authenticates a user using a three-dimensional object provided with a plurality of electronic tags is applied to a service providing system, instead of a card authentication device that authenticates a user using a card. To do. In the present embodiment, the basic configuration of the service providing system is the same as the configuration of the service providing system shown in the first embodiment. In the present embodiment, the functions of the electronic tag reader 1, the data processing device 2, the storage device 3, the display output device 4, the control device 6, and the service device 7 are the same as those in the first embodiment. is there.

  FIG. 10 is an explanatory diagram illustrating an example of a three-dimensional object used for authentication. In the present embodiment, a case where the three-dimensional object is the mobile phone 100b will be described as an example. In the present embodiment, as shown in FIG. 10, the mobile phone 100 b is provided with electronic tags T <b> 1 to T <b> 12 at each vertex (corner) of the housing. In the present embodiment, the user performs a reading operation and a password input operation by bringing the corner, side, or surface of the mobile phone 100 b into contact with the electronic tag reader 1.

  The basic operation for authenticating the user by the authentication device using the mobile phone 100b is the same as the operation of the card authentication process shown in the first embodiment.

  As described above, according to the present embodiment, an electronic tag is provided at each vertex of a three-dimensional object such as the mobile phone 100b, and the user is authenticated by reading data from the electronic tag provided on the three-dimensional object. Since a three-dimensional object is used, the number of electronic tags to be attached can be increased and the number of password combinations that can be input can be further increased as compared with the case of using a card. Therefore, the security of authentication can be further improved.

Embodiment 4 FIG.
Next, a fourth embodiment of the present invention will be described with reference to the drawings. FIG. 11 is a block diagram showing another configuration example of the service providing system using the card authentication device. In the present embodiment, as shown in FIG. 11, the service providing system includes an electronic tag reader 1, a data processing device 9 that operates according to program control, a storage device 3, a display output device 4, a control device 6, and a service device 7. . In the present embodiment, the functions of the electronic tag reader 1, the storage device 3, the display output device 4, the control device 6, and the service device 7 are the same as those functions in the first embodiment.

  The data processing device 9 reads the authentication / authorization program 8 from a storage medium such as a CD-ROM, and executes various processes for performing authentication by the card 100 according to the read authentication / authorization program 8. For example, the data processing device 9 inputs the data read from the information storage means attached to the card to the computer from the storage medium and, when the data is inputted, out of a plurality of information storage means attached to the card A process for identifying which information storage means has read the data, and a process for identifying which read area has read the data among the plurality of read areas provided in the reading unit for reading the data An authentication authorization program 8 for executing a process for authenticating a user based on the information storage means and the reading area is read. Then, the data processing device 9 executes card authentication processing according to the read authentication authorization program 8.

  The present invention can be applied to the use of a card authentication device that authenticates a user using a card. Further, the present invention can be applied to the use of a service providing system that provides various services according to the authentication result of the card authentication device. For example, the present invention can be applied to the use of a security system that manages entry / exit according to the authentication result and a financial system that performs cash deposit processing according to the authentication result.

It is a block diagram which shows an example of a structure of the service provision system using the card | curd authentication apparatus by this invention. It is explanatory drawing which shows an example of the card | curd used for card | curd authentication. It is explanatory drawing which shows an example of the reading part of the electronic tag reader. It is explanatory drawing which shows the example of the authentication data which the anti-authentication memory | storage part 31 memorize | stores. It is explanatory drawing which shows the example of the information which the authorization information storage part 32 memorize | stores. 4 is a flowchart illustrating an example of a card authentication process in which a card authentication device reads data from a card 100 to authenticate a user. It is explanatory drawing which shows the specific example of the authentication data which the authentication memory | storage part 31 memorize | stores. It is explanatory drawing which shows the other example of the card | curd used for card | curd authentication. It is explanatory drawing which shows the other example of the reading part of the electronic tag reader. It is explanatory drawing which shows the example of the solid object used for authentication. It is a block diagram which shows the other structural example of the service provision system using a card | curd authentication apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Electronic tag reader 2 Data processing apparatus 3 Storage apparatus 4 Display output apparatus 6 Control apparatus 7 Service apparatus 21 Reading means 22 Determination means 23 Authorization transmission means 31 Anti-authentication storage part 32 Authorization information storage part 100 Card

Claims (14)

A card authentication device for authenticating a user using a card to which a plurality of information storage means is attached,
When the input operation by the user is performed once, and the data reading means for reading each data from a plurality of information storage means of the information storage means attached to said card,
Authentication means for authenticating a user based on the data read by the data reading means,
The data reading means is provided with a plurality of reading areas in a reading unit for reading data,
The authentication means includes
When the data reading means reads data, storage means specifying means for specifying the information storage means from which the data reading means read each data ,
Of a plurality of reading areas provided in the data reading means, an area specifying means for specifying a reading area for reading each data ;
For each information storage means specified by the storage means specification means and each reading area specified by the area specification means, a pair of data is generated by associating the information storage means with the reading area read from the information storage means. A pair data generation means,
A card authentication apparatus comprising: user authentication means for authenticating a user by determining whether or not all pair data generated by the pair data generation means matches a predetermined authentication condition . An authentication data storage means for storing authentication data for authenticating the user in advance;
The authentication data storage means prestores combination data including a plurality of combinations of information storage means attached to a card and a reading area provided in the data reading means as authentication data,
User authentication means
For pairs all pairs data data generating means has generated, it is determined whether or not a combination data matching in the combination data to which the authentication data storage unit accumulates there,
Said pair for all pairs data data generating means has generated, if it is determined that matching the combination data exists, the card authentication apparatus judges claim 1 wherein the successfully authenticated user. The data reading means reads data from the information storage means attached to the card every time an input operation is performed by the user.
User authentication means
Each time the data reading means reads data, the user is authenticated based on the specified information storage means and reading area,
The card authentication device according to claim 1 , wherein when the user is authenticated for all the predetermined number of input operations by the user, the user authentication is determined to be successful. An authentication data storage means for storing authentication data for authenticating the user in advance;
The authentication data storage means stores in advance a correspondence list that is a list in which a plurality of combination data obtained by combining information storage means attached to a card and a reading area provided in the data reading means is associated as authentication data,
User authentication means
Each time the data reading means reads the data, it is determined whether or not all the paired data generated by the paired data generating means matches one of the combination data included in the correspondence list stored by the authentication data storing means. ,
Wherein for all combinations data included in the correspondence list, the condition that it is determined that the match case, the card authentication apparatus judges claim 3 wherein the successfully authenticated user. Data reading means, the information card authentication device according to any one of the storage means for reading data from an electronic tag attached to the card as claims 1 to 4. An authentication device for authenticating a user using a three-dimensional object to which a plurality of information storage means is attached,
When the input operation by the user is performed once, and the data reading means for reading each data from a plurality of information storage means of the information storage means attached to the three-dimensional object,
Authentication means for authenticating a user based on the data read by the data reading means,
The data reading means is provided with a plurality of reading areas in a reading unit for reading data,
The authentication means includes
When the data reading means reads data, storage means specifying means for specifying the information storage means from which the data reading means read each data ,
Of a plurality of reading areas provided in the data reading means, an area specifying means for specifying a reading area for reading each data ;
For each information storage means specified by the storage means specification means and each reading area specified by the area specification means, a pair of data is generated by associating the information storage means with the reading area read from the information storage means. A pair data generation means,
An authentication apparatus comprising: user authentication means for authenticating a user by determining whether or not all pair data generated by the pair data generation means matches a predetermined authentication condition . A service providing system for providing a service according to an authentication result,
A card authentication device for authenticating a user using a card to which a plurality of information storage means are attached;
A control device for controlling a service device for providing a predetermined service,
The card authentication device
When the input operation by the user is performed once, and the data reading means for reading each data from a plurality of information storage means of the information storage means attached to said card,
Authentication means for authenticating a user based on the data read by the data reading means,
The data reading means is provided with a plurality of reading areas in a reading unit for reading data,
The authentication means includes
When the data reading means reads data, storage means specifying means for specifying the information storage means from which the data reading means read each data ,
Of a plurality of reading areas provided in the data reading means, an area specifying means for specifying a reading area for reading each data ;
For each information storage means specified by the storage means specification means and each reading area specified by the area specification means, a pair of data is generated by associating the information storage means with the reading area read from the information storage means. A pair data generation means,
User authentication means for authenticating a user by determining whether or not all the pair data generated by the pair data generation means matches a predetermined authentication condition ;
The service providing system, wherein the control device controls the service device based on an authentication result of the card authentication device. The card authentication device includes instruction information generation means for generating permission instruction information for instructing the user to provide a service permitted when the authentication means determines that the user has been successfully authenticated.
The service providing system according to claim 7 , wherein the control device controls the service device based on the permission instruction information generated by the instruction information generating unit. The card authentication device includes permission information storage means for storing permission information indicating service content permitted for the user in advance in association with the user,
The service providing system according to claim 8 , wherein the instruction information generation unit generates the permission instruction information based on the permission information stored in the permission information storage unit. When an input operation is performed once by the user, the data reading means for reading data from a plurality of information storage means among the information storage means attached to the card, and the user based on the data read by the data reading means The data reading means is provided with a plurality of reading areas in a reading section for reading data. When the data reading means reads the data, the data reading means Storage means specifying means for specifying information storage means for reading data; area specifying means for specifying a reading area for reading each data among a plurality of reading areas provided in the data reading means; and the storage For each information storage means specified by the means specifying means and each reading area specified by the area specifying means, information recording is performed. A pair data generation unit that generates paired data in which data is read from the information storage unit, and whether all the pair data generated by the pair data generation unit meet a predetermined authentication condition. An authentication card used in a card authentication device including user authentication means for authenticating a user by determining whether or not ,
Including a plurality of information storage means;
The information storage means is attached to each vertex of the authentication card having a polygonal shape. When an input operation is performed once by the user, the data reading means for reading data from a plurality of information storage means among the information storage means attached to the card, and the user based on the data read by the data reading means The data reading means is provided with a plurality of reading areas in a reading section for reading data. When the data reading means reads the data, the data reading means Storage means specifying means for specifying information storage means for reading data; area specifying means for specifying a reading area for reading each data among a plurality of reading areas provided in the data reading means; and the storage For each information storage means specified by the means specifying means and each reading area specified by the area specifying means, information recording is performed. A pair data generation unit that generates paired data in which data is read from the information storage unit, and whether all the pair data generated by the pair data generation unit meet a predetermined authentication condition. A card reader for reading data from information storage means attached to the card, comprising a card authentication device including a user authentication means for authenticating a user by determining whether or not ,
A reading unit for reading data is provided with a plurality of reading areas,
When data is read from an information storage means attached to the card, an area ID for identifying a reading area from which the data has been read out of the plurality of reading areas is output. A card authentication method for authenticating a user using a card to which a plurality of information storage means is attached,
When an input operation is performed once by the user, each of reading data from a plurality of information storage means of the information storage means attached to the card;
When reading the data, identifying each information storage means that has read the data ,
Of the plurality of reading areas provided in the reading unit for reading data, the step of specifying the reading area that has read each data ,
For each of the specified information storage means and each of the specified reading areas, generating paired data in which the information storage means and a reading area that has read data from the information storage means are associated with each other;
And authenticating a user by determining whether or not all the generated paired data matches a predetermined authentication condition . Pre-accumulating combination data, which is a combination of information storage means attached to the card and a reading area provided in the reading unit, as authentication data;
For all pairs data generated, and determining whether the combination data matching in the combination data the storage is present,
The card authentication method according to claim 12 , further comprising the step of determining that the user authentication is successful when it is determined that matching combination data exists for all the generated paired data . A card authentication program for authenticating a user using a card to which a plurality of information storage means is attached,
On the computer,
When an input operation is performed once by the user, a process of inputting data read from each of a plurality of information storage means among the information storage means attached to the card;
When the data is input, a process of specifying each information storage means that has read the data ,
A process of specifying a reading area where each data is read out of a plurality of reading areas provided in a reading unit that reads data ;
For each of the specified information storage means and each of the specified reading areas, a process of generating paired data in which the information storage means and the reading area that has read data from the information storage means are associated with each other;
A card authentication program for executing a process of authenticating a user by determining whether or not all of the generated paired data matches a predetermined authentication condition .

Images