JP4286069B2 - Authentication card - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an authentication card. The authentication card is used, for example, to perform personal authentication such as operator confirmation when accessing a computer system, contractor confirmation during online processing at a financial institution, and passability confirmation when passing through an entrance door.
[0002]
[Prior art]
In an online banking system or the like, as a method of authenticating the user, the user is requested to input a contract number and a password when accessing the system. On the system side, if the entered contract number and password match the contract number and password stored in the system, the system authenticates that the person is accessing.
In such a system, a malicious person steals the user's input operation status, obtains a contract number and a personal identification number, and accesses illegally.
[0003]
As a method for preventing such a situation, it has been proposed to print a code table in which a plurality of authentication codes are arranged in a matrix on an authentication card (see Patent Document 1). In this method, at the time of personal authentication, the system side requests the user to specify the row number and column number of the code table and to input the authentication code at that position. The designation of the row number and the column number is different every time authentication is performed.
[0004]
The user reads and inputs the authentication code written at the designated position from the code table. On the system side, the input authentication code is collated with the authentication code at the position of the designated row number and column number in the stored code table. If it is determined that the authentication codes match, it is determined that the authorized user has the authentication card, and the personal authentication is completed.
[0005]
According to the system described above, even if a malicious person steals the operation status of the user and accesses the system using the contractor number, password, and authentication code used at that time, Will not be certified. That is, each time authentication is performed, an authentication code at a different position is designated. Therefore, even if the authentication code used once is misused for subsequent personal authentication, the probability of authenticating the user is low.
[0006]
By using the above code table, possession of an authentication card can be set as an authentication condition, and the accuracy of identity verification is improved.
[0007]
[Patent Document 1]
Japanese Patent Laid-Open No. 9-305541
[Problems to be solved by the invention]
The above code table is only printed on the authentication card. Therefore, a malicious person can acquire the contents of the code table by performing an action such as stealing the contents of the code table or taking a picture. In this case, even when the system side designates a different row number and column number each time during personal authentication, an unauthorized user is authenticated as a legitimate user.
[0009]
SUMMARY OF THE INVENTION An object of the present invention is to provide an authentication card that describes a code table composed of a plurality of authentication codes, and prevents malicious ones from easily stealing the contents of the code table.
[0010]
[Means for Solving the Problems]
The present invention has been made to solve the above problems. The authentication card of the present invention describes a code table in which a plurality of authentication codes for confirming whether or not an operator is a regular operator is arranged in a matrix. This authentication code is not visible at normal temperature, and is visible at about the human body temperature.
[0011]
Since the authentication code of the authentication card cannot be visually recognized in a normal state, it cannot be stolen by another person. On the other hand, when the user wants to check the authentication code, if the user raises it to about body temperature by touching it with a finger or the like, the authentication code for that portion becomes visible. According to this authentication card, the chance that the authentication code can be seen by others is reduced, so that the security can be improved.
[0012]
Further, if only the designated position of the code table is touched with the fingertip, only the necessary authentication code can be viewed, and the other authentication codes can remain invisible. Since different row numbers and column numbers are designated each time for personal authentication, if other authentication codes are hidden, the authentication code at the designated position cannot be returned. Therefore, security can be further improved.
[0013]
In a preferred aspect of the present invention, the authentication code is covered with the temperature indicating paint, so that it is not visible at normal temperature and can be visually recognized at a human body temperature.
In another preferred aspect, the authentication code is described by the temperature indicating paint, so that it is invisible at normal temperature and visible at a human body temperature.
Furthermore, in another suitable aspect, the matrix position of the code for authentication is shown, and an index and a guide line that are always visible are described. As a result, even if the number of authentication codes increases, the designated position can be easily specified, and usability is improved.
[0014]
DETAILED DESCRIPTION OF THE INVENTION
The authentication card of the present invention will be described with reference to the drawings.
FIG. 1 shows a configuration of a content service system in which an authentication card is used.
A content server 1 and a plurality of user terminals 2 are connected via the Internet 3.
[0015]
The content server 1 includes a user authentication module 4, a user DB (database) 5, and a content DB 6. The user authentication module 4 is a module that performs user authentication processing described below. The user DB 5 stores a contract code, a password, and a code table for each user. The content DB 6 stores content to be provided to users.
[0016]
An authentication card used in the system shown in FIG. 1 will be described with reference to FIG.
(A) shows the external appearance of the authentication card 7.
In the authentication card 7, the name of the contractor, the operation procedure, and the code table 8 are written on the left side in order from the top, and notes are written on the right side.
The operation procedure includes (1) accessing the displayed URL, (2) entering the displayed contract number, (3) entering the password (not displayed), and (4) the confirmation number in the table below. It is described that (authentication code) is input.
[0017]
In the code table 8, row numbers 1-4 and column number Ao are displayed. Although the authentication code is described at the position specified by the row number and the column number, the temperature indicating paint 9 is applied to make it invisible.
FIG. 2B shows a code table with the temperature indicating paint 9 removed.
Here, random number authentication codes 10 are arranged in a matrix. A row number and a column number are assigned as an index 11 for determining the position of the authentication code 10. A guide line 12 is printed as a guide for making it easy to see the relationship between the authentication code 10 and the index 11 and reliably specifying the authentication code at the specified position. The index 11 and the guide line 12 are always visible.
[0018]
Since the temperature indicating paint 9 is a known one, a detailed description thereof is omitted here. An example in which a temperature indicating paint is used for an information hiding label is described in Japanese Patent Application Laid-Open No. 11-73110. Please refer to this.
As the temperature indicating paint covering the authentication code used in this example, a paint which is opaque at room temperature and becomes transparent at a human body temperature is used. Therefore, the authentication code cannot be visually recognized at room temperature, and can be visually recognized by warming at body temperature.
[0019]
The personal authentication process using the authentication card shown in FIG. 2 in the system shown in FIG. 1 will be described with reference to FIG.
In accordance with the procedure indicated by the authentication card 7 (see FIG. 2A), the user accesses the URL displayed on the card from the user terminal 2, connects to the content server 1, and requests login (S1).
[0020]
The content server 1 transmits data requesting a contract number and a password by the user authentication module 4 (S2).
The user terminal 2 displays a guide on the display unit based on the received data (S3).
[0021]
The user inputs the contract number and the password from the keyboard according to the guide displayed on the display unit of the user terminal 2. These are transmitted to the content server 1 (S4).
The content server 1 searches the user information DB 1 based on the received contract number, and extracts user information with the same contract number. Then, the received personal identification number is collated with the personal identification number of the extracted user information (S5).
[0022]
If the collation is NG, the request data in step S2 is transmitted again. If this NG is repeated a predetermined number of times, login is rejected and the process is terminated.
If the collation is YES, matrix information for selecting one row and one column of the code table is generated (S6). The code for authentication described in the selected row and column is extracted and stored from the code table of the user information extracted in step S4 (S7). Data including the selected row number and column number is transmitted to the user terminal 2 (S8).
[0023]
When receiving the data, the user terminal 2 displays a guide for inputting the authentication code on the display unit (S9). This guide is instructed to input the authentication code located at the designated row number and column number from the code table of the authentication card possessed by the user.
[0024]
In accordance with this instruction, the user reads the authentication code at the position indicated by the designated row number and column number. Since the temperature indicating paint 9 is opaque at normal temperature and the authentication code cannot be visually recognized, the temperature of the temperature indicating paint can be increased to about the body temperature by pressing the corresponding position with a finger or the like, so that the authentication code can be visually recognized. Like that. At this time, by making only the authentication code at the designated position visible, the authentication code at other positions can be left invisible.
[0025]
The user inputs the visually recognized authentication code from the keyboard. Thereby, the code for authentication is transmitted to the content server 1 (S10).
The content server 1 collates the received authentication code with the authentication code stored in step S5 (S11). If they do not match, the process returns to step S5 to request transmission of an authentication code. If this NG is repeated a predetermined number of times, login is rejected and the process is terminated.
[0026]
If the result after processing is YES, login is started and content service is started (S12).
According to the example described above, a plurality of authentication codes used for personal authentication are covered with the temperature indicating paint and cannot be visually recognized at room temperature. Accordingly, even if another person looks at the authentication card 7, the authentication code cannot be seen, so that the security can be improved.
[0027]
Further, when the user looks at the authentication code, it is possible to raise the temperature only at the designated position and visually recognize the authentication code. Thereby, the authentication code in other positions is not seen by others. Since different row numbers and column numbers are specified each time for personal authentication, the possibility of being authenticated by unauthorized access is reduced by preventing other parts of the authentication code from being seen. be able to.
[0028]
Although one embodiment of the present invention has been described above, the present invention can be variously modified as exemplified below.
(1) In the example of FIG. 2, the temperature indicating paint covers the entire portion where the authentication code is described, but the guide wire 12 is not covered but only the individual authentication code is covered. good. In this case, since the guide line 12 is always visible, the designated position can be easily confirmed.
[0029]
(2) The temperature indicating paint covering the authentication code may be omitted, and the authentication code may be described by the temperature indicating paint. By printing the authentication code with a temperature indicating paint that is transparent at room temperature and opaque at about body temperature, it can be made invisible at room temperature and visible at about body temperature.
Conversely, the background portion other than the authentication code can be printed with a temperature indicating paint that is transparent at room temperature and opaque at about body temperature. In this case, if the temperature indicating paint becomes opaque, the authentication code appears white.
(3) The index 11 and the guide line 12 can be omitted.
[0030]
【The invention's effect】
ADVANTAGE OF THE INVENTION According to this invention, in the authentication card | curd which described the code | symbol table | surface which consists of several code | symbols for authentication, the authentication card | curd which can prevent a malicious thing from seeing the content of a code | symbol table easily can be obtained.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of a content server system using an authentication card of the present invention.
FIG. 2 is a diagram showing an external appearance of an authentication card to which the present invention is applied.
FIG. 3 is a diagram showing a personal authentication process in the system of FIG. 1;
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Content server 2 ... User terminal 3 ... Internet 4 ... User authentication module 5 ... User DB
6 ... Content DB
7 ... Authentication card 8 ... Code table 9 ... Thermal paint 10 ... Authentication code 11 ... Indicator 12 ... Guide line

Claims (5)

An authentication card sign-table have been described,
Whether or not the code table has a plurality of authentication codes arranged in a matrix, and is a user who possesses the authentication card using the authentication code arranged at a specified position of the code table Can be confirmed,
An authentication card, wherein the authentication code is invisible at normal temperature and visible at a human body temperature.   The authentication card according to claim 1, wherein the authentication code is covered with a temperature indicating paint, so that the authentication code is invisible at normal temperature and visible at a human body temperature.   The authentication card according to claim 1, wherein the authentication code is described by a temperature indicating paint, so that the authentication card is invisible at normal temperature and visible at a human body temperature.   The authentication card according to any one of claims 1 to 3, wherein an index that indicates a matrix position of the authentication code and is always visible is described.   The authentication card according to any one of claims 1 to 3, wherein a guide line that indicates a matrix position of the authentication code and is visible at all times is described.

Images