JP4697583B2 - Personal authentication system that avoids leakage of personal information - Google Patents

Description

  The present invention relates to a personal authentication system for a trading partner in trading performed via a communication line such as the Internet, and more particularly to a personal authentication system that avoids leakage of personal information from a server that performs authentication.

For example, in an auction using the Internet, when trading is established, it is necessary to confirm that the trading partner is indeed the person. This confirmation is called personal authentication. When a transaction is performed without performing personal authentication, there may be a problem that the price may not be collected or the product may not be received even though the price has been paid.
However, when performing personal authentication, if personal information is held in plain text in the server, employees of the organization that authenticates the information may make operational mistakes or intentionally leak personal information, There is a possibility that personal information may be leaked, such as an outsider such as a hacker steals personal information.
The following proposals have been made regarding methods for avoiding leakage of personal information from a personal authentication server in the prior art.
Patent Document 1 encrypts personal information with an encryption method that can be decrypted using a password and information that only an administrator can know or information unique to a computer set when initializing a computer owned by an individual. When an encryption value is stored in a storage medium and information is required, the encryption value is based on the password and information that is known only to the individual or computer-specific information that is set when the computer owned by the individual is initialized. Describes a method for decrypting and obtaining necessary information.

In Patent Document 2, the information to be stored is divided into two or more plaintext data groups that do not make sense only by each separate data group, and after biometric information such as fingerprints is digitized, a hash function In the case of obtaining the stored information for each data group by adding the encrypted value encrypted with the above, the data group having the same encrypted part is read from each database, A method for obtaining necessary information by combining them is described.
The advantage of this method is that even if each data group is leaked, it does not make sense by itself, and as a result, leakage of personal information is avoided.
JP-A-8-171535 JP 2004-362123 A

The method for avoiding leakage of personal information from the personal authentication server according to the above-described prior art has the following problems.
First, the personal information is encrypted and stored in the storage device using an encryption method that can be decrypted using the password as a key, and when the information is needed, the encrypted information is decrypted using the password. If the password is discovered by guessing the password, the personal information is decrypted and leaked.
As described in Patent Document 1, there is a problem that even if information that only an administrator can know is added to a password, the possibility of information leakage is not lost logically as described above.

  As described in Patent Document 2, personal information is divided into plaintext data groups that do not make sense by themselves, and data obtained by digitizing fingerprints and the like is encrypted and added to the data groups. The method of storing each data in a separate database has a problem that if all the databases can be logically accessed, the divided data groups can be easily reconfigured.

  An object of the present invention is to eliminate the above-mentioned problems caused by the prior art, and to provide a system capable of preventing personal information from leaking from a server and capable of personal authentication.

In order to achieve the above object, the invention according to claim 1 is an authentication system that the seller and / or the purchaser is the person himself / herself, the terminal of the seller, the terminal of the buyer, the personal information An administrator server that performs encryption, a personal identification database that is connected to the administrator server and stores personal information, a service providing server that authenticates the person, and an encrypted individual that is connected to the service providing server An authentication database for storing information, and a communication line connecting the administrator server, the service providing server, and a terminal, and when the personal information is registered in the administrator server, the administrator server or the The service providing server encrypts the personal information with the one-way encryption means, registers the encrypted result in the authentication database, and Later, the administrator server or the service providing server and delete personal information in plain text by deleting the personal information of the plaintext from the personal identification database from within the system, sellers and or buyers from the other party of the transaction The seller and / or purchaser's terminal transmits the acquired personal information of the other party to the service providing server, and the administrator server or the service providing server transmits the personal information transmitted from the terminal to the administrator server. Alternatively, encryption is performed by the same means as the one-way encryption means used when the service providing server registers personal information, and this encryption result is the encryption result of the personal information registered in the authentication database. It is characterized by performing personal authentication by determining whether or not matches.

The invention described in claim 2 is an authentication system that the seller and / or the purchaser is the person himself / herself, and the terminal of the seller, the terminal of the buyer, the encryption of personal information and the authentication of the person. A service providing server to perform, an identity verification database connected to the service providing server for storing personal information, an authentication database connected to the service providing server for storing encrypted personal information, and the service providing server When the personal information is registered with the service providing server, the service providing server encrypts the personal information with a one-way encryption means when the personal information is registered with the service providing server. was subjected to registration in the authentication database, then deleted, the service providing server is the personal information of the plaintext from the personal identification database The personal information in plain text is deleted from the system, and the seller and / or purchaser's terminal sends the personal information of the other party obtained by the seller and / or purchaser from the other party to the service providing server. The service providing server encrypts the personal information transmitted from the terminal by the same means as the one-way encryption means used when the service providing server registers the personal information. The personal authentication is performed by determining whether or not the authentication result matches the encryption result of the personal information registered in the authentication database.

  The invention described in claim 3 is the authentication system according to claim 1 or 2, wherein a transaction information database storing a transaction number uniquely given to a transaction and membership numbers of both a seller and a buyer is stored. The service providing server receives the transaction number and member number, searches the transaction information database based on the received transaction number, and the transaction number does not exist or the seller and purchaser corresponding to the transaction number If any of the member numbers does not match the received member number, personal information is not authenticated.

  According to the first aspect of the present invention, since the plaintext personal information is quickly deleted from the system after the personal information encrypted by the one-way encryption means is registered in the authentication DB 18, the plaintext personal information is leaked. There is no possibility of doing so, and the authentication of itself or the other party can be performed with high accuracy.

  In addition to the effects of the invention described in claim 1, the invention described in claim 2 is configured so that only the trading parties stored in the transaction information database can authenticate the personal information. There is no risk of the three parties performing personal authentication.

Hereinafter, an embodiment of a personal authentication system that avoids leakage of personal information from a server according to the present invention will be described in detail with reference to the drawings.
<Explanation of drawings>
FIG. 1 is a diagram schematically showing the entire configuration of the system of the present invention.
FIG. 2 is a flowchart of the member registration program.
FIG. 3 is a flowchart of the personal information encryption program.
FIG. 4 is a flowchart of the transaction information storage program.
FIG. 5 is a flowchart of the trading partner authentication program.
FIG. 6 shows an example of the data configuration and data of the identity verification DB 17.
FIG. 7 shows an example of the data structure and data of the authentication DB 18.
FIG. 8 shows an example of the data structure and data of the transaction information DB 19.
FIG. 9 shows an example of the data structure and data of the member information DB 20.

<Description of Embodiment>
<Description of configuration>
A basic configuration of a personal authentication system that avoids leakage of personal information from a server according to an embodiment of the present invention includes, for example, an administrator server 11 that encrypts member registration and member personal information, as shown in FIG. A personal identification database (hereinafter abbreviated as DB) that connects to the administrator server and temporarily stores personal information, a service providing server 12 that performs personal authentication, and between the administrator server 11 and the service providing server 12 Connected to the service providing server 12, an authentication DB 18 for storing encrypted personal information, and connected to the service providing server 12, and the membership number of the party to be bought and sold and each transaction is unique. Transaction DB 19 for storing a unique transaction number, and membership information for storing a member number, password, and e-mail And DB 20, a terminal 14, 15, 16 each member is available, consisting of the public line 13 which connects the terminal of the service providing server 12 and members.
The server may be a computer that functions as a server, and may be a personal computer, a server dedicated machine, or a large computer.
Personal information includes personal confidential information.
The public communication network 13 may be a dedicated telephone line or a normal telephone line, and the form of communication may be a private network or the Internet.

<Description of data structure>
The data structure of each database embodiment will be described below.
As shown in FIG. 6, the identity verification DB 17 includes, for example, a member-specific “member number”, a member's “Mr.” and “name”, and a member's name “Furigana”. The phonetic name includes the phonetic name, the member's address, the postal code, the member's address, and the member's phone number. , “Membership number” is “12983”, “Mr.” is “Yamada”, “Name” is “Taro”, “Mr.” is “Yamada”, “Name” is “Taro”, “Mail” The “number” is “35991122”, the “address” is “1-1 Kotobukicho, Tokorozawa-shi, Saitama”, and the “telephone number” is “0429220123”.

  As shown in FIG. 7, the authentication DB 18 includes, for example, each item of “member number” unique to a member and “hash value” as a result of encrypting personal information with, for example, a hash function. For example, the “membership number” is “12983” and the “hash value” is “4635488793312554800132”.

  As shown in FIG. 8, the transaction information DB 19 includes, for example, a “transaction number” unique to each transaction, a “seller member number” that is a member number of the person who performs the sales, and a member number of the person who performs the purchase. Each item of “Purchaser Member Number” has specific data contents, for example, “Transaction Number” is “A08-1244138”, “Seller Member Number” is “12983”, “Purchaser Member” The “number” is “13001”.

  As shown in FIG. 9, the member information DB 20 has, for example, a member-specific “member number”, a “password” that is a password for logging in to the system of the present invention, and a “mail address” that is a member's email address. The specific data contents of each item are, for example, “Member No.” “12983”, “Password” “YggPass”, and “Mail Address” “yggdoore@ninsyo.com”.

<Description of operation>
First, a program that operates in the system of the present invention will be described.
<Membership registration program>
This program is a member registration performed first by a person who intends to become a member when using the system of the present invention, and is executed by the service providing server 12. Hereinafter, a description will be given with reference to FIG.
The service providing server 12 receives a “password” and “email address” for registration in the member information DB 20 from the terminal connected to the communication line 13 through the communication line 13, and the service providing server 12 receives a member number unique to the member. Generation, and storing the “member number”, “password”, and “mail address” in the member information DB 20 [step 21], and the service providing server 12 sets the “member number” and “password” for the registered mail address. [Step 22] are sequentially executed.

<Personal information encryption program>
This program encrypts the member's personal information and registers it in the authentication DB 18 and is executed by the administrator server 11. Hereinafter, a description will be given with reference to FIG.
The administrator server 11 receives the member number and password from the member through the communication line 13 and the service providing server 12 [Step 31], searches for the member number and password from the member information DB 20, and reads them out [Step 32]. And [Step 33] for determining whether or not the membership number is registered. This determination method determines that the member is not registered if the member number acquisition fails in [Step 31], or if the password registered in the member information DB 20 is different from the transmitted password, The process ends. If the member number can be acquired in [Step 31] and the password registered in the member information DB 20 is the same as the transmitted password, this program determines that the member is registered and proceeds with the process. Next, the administrator server 11 receives the personal information from the member through the communication line 13 and stores it in the personal identification DB 17 [Step 34], acquires the personal information stored in the personal identification DB 17, and obtains the one-way encryption means. For example, encrypting with a one-way hash function [Step 35], adding a membership number to the encrypted personal information, and storing it in the authentication DB 18 connected to the service providing server [Step 36], The plaintext personal information stored in the confirmation DB 17 is deleted [Step 37] sequentially.
Here, plain text means data before encryption.

<Transaction information storage program>
This program stores, in the transaction information DB 19, the transaction number uniquely determined for the transaction, the seller and the purchaser's membership number for the transaction, and is executed by the service providing server 12 when the negotiation is established. Hereinafter, a description will be given with reference to FIG.
This program obtains the membership numbers of the seller and the buyer who have been negotiated from a program (not shown) for conducting the negotiation [Step 41], and generates a transaction number uniquely determined for the deal that has been established [ Step 42] and [Step 43] for sequentially storing the transaction number, the seller's membership number and the purchaser's membership number in the transaction information DB 19 are executed.

<Business Partner Authentication Program>
This program is for authenticating whether the partner of the established transaction is a registered person, and is executed by the service providing server 12. Hereinafter, a description will be given with reference to FIG.
In this program, the service providing server 12 receives the transaction number and member number to be authenticated from the seller terminal 14 or the buyer terminal 16 through the communication line 13 [Step 51], and based on the received transaction number. The transaction information DB 19 is searched and the transaction number and the membership numbers of both the seller and the buyer are read [step 52]. If the received transaction number does not exist in the transaction information DB 19, and the received transaction number is stored in the transaction information DB 19. If the received membership number does not match either the seller membership number or the purchaser membership number, the process ends, the received transaction number exists in the transaction information DB 19, and the received membership number is the transaction number. If it matches the seller member number or purchaser member number corresponding to the number, the following processing is performed [step 53] and the service When the providing server 12 receives the personal information through the communication line 13 [Step 54], the one-way encryption means used for registering the received personal information in the authentication DB 18 at the time of member registration, for example, one-way Encryption using the same means as the hash function [Step 55], searching the authentication DB 18 based on the membership number, and reading the encrypted personal information [Step 56], and encrypting the received personal information When it is determined that the data does not match the encrypted data stored in the authentication DB 18 [step 57], the process is terminated if they do not match. (Step 58) of notifying the success of authentication in sequence.

Details of the embodiment will be described with reference to FIG.
<Storage of personal information>
A user who wishes to trade using a communication line first accesses the service providing server 12 through the public line 13 and activates the <member registration program> in the service providing server 12 to perform member registration. Member registration is performed by transmitting a password and an e-mail address from the seller terminal 14 or the buyer terminal 16 to the service providing server 12. The <member registration program> generates a member number uniquely determined for each member, and stores the member number, password, and e-mail address in the member information DB 20. At this time, a nickname or the like may be received and stored at the same time. Further, the membership number and / or password may be transmitted to the registered e-mail address by e-mail for confirmation.

Next, the member who has become a member accesses the administrator server 11 through the public line 13 and the service providing server 12, and starts the <personal authentication encryption program> in the administrator server 11. The administrator server 11 receives the member number and the password, searches the member information DB 20 connected to the service providing server 12 by the member number, and determines whether the password corresponding to the member number and the received password match. If they match, the administrator server 11 subsequently receives personal information. This personal information includes a name, an address, and a telephone number, but in addition to these, a name pseudonym, a postal code, and other information for identifying an individual may be added.
The administrator server stores the received personal information in the personal identification DB 17 in plain text.

Although the administrator server 11 is connected to the service providing server 12, it is desirable to provide a firewall 10 between them so that a third party cannot access the identity verification DB 17.
With this configuration, the identity verification DB 17 is not directly exposed to a dangerous network such as the Internet, and a third party illegally processes plaintext between receiving personal information and deleting personal information described later. Since it becomes very difficult to access personal information, security can be improved.

Subsequently, the administrator server 11 reads the personal information from the personal identification DB 17 and encrypts the personal information using a one-way encryption unit.
The one-way encryption means means an encryption means in which the original data cannot be decrypted from the encrypted result or is very difficult. As an example of the one-way encryption means, there is a one-way hash function, and among these, it is desirable to use a hash function for message digest. Among them, MD5 and SHA-1 are preferable, but not limited to these. Absent.

The administrator server 11 adds a member number to the encrypted personal information and stores it in the authentication DB 18 connected to the service providing server 12. The administrator server 11 deletes personal information from the identity verification DB 17 immediately after storage.
With this configuration, there is no plaintext personal information in the system, and there is no possibility of personal information leaking from the server.

<Storing transaction information>
When trading through the communication line is established, the <transaction information storage program> is activated in the service providing server 12. This program generates a transaction number uniquely determined for each transaction, and stores this transaction number, the member number of the seller, and the member number of the purchaser in the transaction information DB 19.

<Authentication of personal information>
In the system of the present invention, the following procedure is performed in order for a party to buy and sell to confirm that the other party to buy and sell is indeed registered in the authentication DB 19.
The trading party activates <trading party authentication program> in the service providing server 12. The service providing server 12 receives the transaction number and the member number from the trading party. Next, the service providing server 12 searches the transaction information DB 19 by transaction number, reads both the seller and purchaser membership numbers, and if the received membership number does not match the seller membership number or the purchaser membership number. <Trade partner authentication program> ends.
By configuring in this way, it is possible to prevent a third party other than the trading party from performing personal authentication of the trading party from the third party terminal 15.

When the member number received by the service providing server 12 matches the seller member number or the purchaser member number, the service providing server 12 receives the personal information so that each member can register the personal information at the time of member registration. The received personal information is encrypted using the same one-way encryption means as the one-way encryption means used. Next, the service providing server 12 searches the authentication DB 18 based on the member number, and reads the encrypted value of the stored personal information. The encryption value of the received personal information and the encryption value of the stored personal information are encrypted using the same one-way encryption means, so if the personal information before encryption is the same, the encryption value Match. If the two encryption values match, the personal authentication is successful. In this case, the <marketing party authentication program> can display on the seller terminal 14 or the purchaser terminal 16 that personal authentication has been successful, or can notify a trading program such as an Internet auction.
Personal information of the trading partner is obtained directly from the trading partner by means of communication such as e-mail, FAX, or telephone.

In addition, when the member number received by the service providing server 12 matches the seller member number or the purchaser member number registered in the authentication DB 18, each member can be a partner of the transaction. In addition to being able to authenticate, it is possible to check whether the personal information registered by the user is correct.
With this configuration, since the server that performs authentication can perform personal authentication without holding the personal information in plain text, leakage of personal information from the server can be completely prevented.

  In the above embodiment, the system is constructed by using two servers of the administrator server 11 and the service providing server 12, but as a simpler embodiment, the identity verification DB 17 is connected to the service providing server 12, A configuration in which the administrator server 11 is not used may be employed. In this case, the service providing server 12 performs what the administrator server 11 did in the embodiment. To give a specific example, execution of the <personal information encryption program> performed by the administrator server 11, more specifically reception of personal information, registration of the personal information in the personal identification DB 17, encryption of personal information The service providing server 12 stores the encrypted personal information in the authentication DB 18 and deletes the personal information from the identity verification DB 17.

  In the above embodiment, the administrator server 11 stores and deletes plaintext personal information in the identity verification DB 17 and encrypts the personal information, and the service providing server 12 performs personal authentication. However, the service providing server 12 may be configured to store and delete plaintext personal information in the identity verification DB 17 and / or encrypt personal information, or the administrator server 11 may perform personal authentication. You may make it do.

It is the figure which represented typically the whole structure of the system of this invention. It is a flowchart of a member registration program. It is a flowchart of a personal information encryption program. It is a flowchart of a transaction information storage program. It is a flowchart of a trading partner authentication program. It is an example of a data structure and data of identity verification DB17. It is an example of a data structure and data of authentication DB18. It is an example of the data structure and data of transaction information DB19. It is an example of a data structure and data of member information DB20.

Explanation of symbols

10: Firewall, 11: Administrator server, 12: Service providing server, 13: Public line, 14: Seller terminal, 15: Third party terminal, 16: Purchaser terminal, 17: Identity verification DB, 18: Authentication DB, 19: Transaction information DB, 20: Member information DB.

Claims (3)

The authentication system confirms that the seller and / or the purchaser are the principal, and is connected to the terminal of the seller, the terminal of the purchaser, the administrator server for encrypting personal information, and the administrator server A personal identification database for storing personal information; a service providing server for authenticating the user; an authentication database connected to the service providing server for storing encrypted personal information; the administrator server; and the service A communication line connecting the providing server and the terminal, and when the personal information is registered in the administrator server, the administrator server or the service providing server encrypts the personal information with a one-way encryption means. The encryption result is registered in the authentication database, and then the administrator server or the service provider is registered. Server and delete personal information from the system in plain text by deleting the personal information of the plaintext from the personal identification database, seller seller and or the purchaser is the personal information of the other party, which was obtained from the counterparty and Alternatively, the purchaser terminal transmits to the service providing server, and the administrator server or the service providing server registers the personal information transmitted from the terminal, and the administrator server or the service providing server registers the personal information. Encryption is performed by the same means as the one-way encryption means used at the time, and it is determined whether this encryption result matches the encryption result of the personal information registered in the authentication database. Authentication system that performs personal authentication on the Internet. An authentication system for verifying that the seller and / or the purchaser is the person, the terminal of the seller, the terminal of the purchaser, the service providing server for encrypting personal information and authenticating the person, and the service A personal identification database connected to the providing server for storing personal information; an authentication database connected to the service providing server for storing encrypted personal information; and a communication line connecting the service providing server and the terminal. When the personal information is registered in the service providing server, the service providing server encrypts the personal information with a one-way encryption means, and registers the encrypted result in the authentication database. , individuals in the clear by then, the service providing server to delete the personal information of the plaintext from the personal identification database Information is deleted from the system, and the seller and / or purchaser sends the personal information of the other party obtained from the other party to the seller to the service providing server. The personal information transmitted from the terminal is encrypted by the same means as the one-way encryption means used when the service providing server registers the personal information, and the encryption result is stored in the authentication database. An authentication system that performs personal authentication by determining whether the encryption result of registered personal information matches. The authentication system according to claim 1 or 2, further comprising a transaction information database for storing a transaction number uniquely assigned to a transaction and a membership number of both a seller and a purchaser, and the service providing server has a transaction number. The member number is received, the transaction information database is searched based on the received transaction number, and the transaction number does not exist, or the member who has received both the seller and purchaser member numbers corresponding to the transaction number An authentication system characterized in that personal information is not authenticated if the numbers do not match.

Images