JP5166330B2 - Authentication apparatus, authentication method, and authentication program - Google Patents

Description

  The present invention relates to an authentication apparatus, an authentication method, and an authentication program for authenticating a contract procedure person.

  In general, there are many situations in which the contractor's family must act on behalf of the contractor's family in order to change the contract contents in the insurance industry. In this case, the person in charge of the insurance company has a procedure such as having the procedure person present an identification card such as a driver's license and visually confirming its surname or address, or copying and storing it. .

  On the other hand, there is a method of acquiring each data such as a name and an address printed on an identification card as text data (see, for example, Patent Document 1). In the method described in Patent Document 1, a plurality of ruled lines of a license, characteristic characters, and the like are detected. Furthermore, in the method described in Patent Document 1, the enlargement rate, direction, etc. of the license image are obtained and corrected in comparison with the preset reference positions of the ruled lines and characteristic characters, and the name, address, etc. Obtain image data with data printed.

JP 2007-102265 A

  In the procedures for changing the contents of these contracts, when the contractor's family performs the procedure as an agent, the person in charge of the window confirms the identification card visually. At this time, doubts arise with certainty due to human intervention and judgment. Recently, crimes caused by counterfeits such as licenses are frequent, and insurance companies need to take measures to deal with them.

  A copy or the like may be stored as a record of the procedure, but it is also considered to store it as electronic data along with the trend of digitization. However, storing a copy of the ID card may involve a risk from the viewpoint of protecting personal information.

  SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to provide an authentication apparatus, an authentication method, and an authentication program that support authentication of a proxy in a procedure by the contractor's proxy.

  In order to solve the above-described problem, a first feature of the present invention relates to an authentication apparatus for authenticating a procedural person in order for the family of the contractor to proceed as a procedural instead of the contractor. An authentication apparatus according to a first feature of the present invention includes a contract data storage unit that stores contract data including a contractor's surname, and image data of an identification card on which the surname of the procedure is printed. The identification data acquisition means that acquires the last name as text data and stores it as identification data, and if the contractor's last name is extracted from the contract data and matches the last name in the identification data, the procedure person is the contractor Family authentication means for outputting an authentication result indicating that the family is a family member.

  Here, the identification card may include the address of the procedure person, and the contract data may further be associated with the address of the contract person. In this case, the identification data acquisition means further acquires the address of the procedure person as text data from the image data and stores it as identification data, and the family authentication means extracts the last name and address of the contractor from the contract data, If it matches the last name and address of the identification data, an authentication result indicating that the procedure member is the family of the contractor is output.

  Further, the identification card may include an identifier of the procedure certificate, and the identifier may include a check digit for checking the identifier using a predetermined arithmetic expression. In this case, the identification data acquisition means acquires the identifier of the identification card from the image data as text data and stores it as identification data, and the family authentication means further determines the identification data from the check digit of the identification data and the arithmetic expression. The validity of the certificate is inspected, and if the identity certificate is not valid, an authentication result indicating that the procedure is not possible is output.

  In addition, when the procedure result is output when the procedure member is a family member and the procedure is performed by the procedure member, the contract processing means stores the procedure information and the identification data of the procedure member in association with each other and stores them as log data. Is preferably further provided.

  The second feature of the present invention relates to an authentication method used in an authentication apparatus for authenticating a family in order that a contractor's family performs a procedure as a procedure person in place of the contractor. The authentication method according to the second aspect of the present invention includes a step of storing contract data including the contractor's last name, and text data of the procedure's surname from the image data of the identification card printed with the surname of the procedure The step of acquiring the data and storing it as identification data, and extracting the contractor's last name from the contract data, and if it matches the last name of the identification data, authenticating that the procedure member is the family of the contractor Outputting a result.

  The third feature of the present invention relates to an authentication program for authenticating a procedural person in order for the family of the contractor to proceed as a procedural substitute for the contractor. That is, the authentication program according to the third feature of the present invention obtains the surname of the procedure person as text data from the image data of the identification card on which the surname of the procedure person is printed, and stores it as identification data. And the step of extracting the last name of the contractor from the contract data and outputting the authentication result that the procedure member is the family of the contractor when the contractor matches the last name of the identification data.

  According to the present invention, it is possible to provide an authentication device, an authentication method, and an authentication program that support authentication of a proxy in a procedure by the contractor's proxy.

FIG. 1 is a diagram for explaining functional blocks of an authentication apparatus according to the preferred embodiment of the present invention. FIG. 2 is a diagram for explaining the hardware configuration of the authentication apparatus according to the preferred embodiment of the present invention. FIG. 3 is a flowchart for explaining the authentication processing by the authentication apparatus according to the preferred embodiment of the present invention. FIG. 4 is a diagram for explaining an example of the data structure and data of contract data of the authentication apparatus according to the preferred embodiment of the present invention. FIG. 5 is a diagram for explaining an example of the data structure and data of log data of the authentication device according to the preferred embodiment of the present invention. FIG. 6 is a flowchart for explaining the family authentication process by the authentication apparatus according to the preferred embodiment of the present invention. FIG. 7 is a system configuration diagram illustrating an authentication system according to a modification of the present invention.

  Next, an embodiment of the present invention will be described with reference to the drawings. In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals.

(Best Embodiment)
First, referring to FIG. 1, an authentication apparatus 1 according to the best embodiment of the present invention will be described. The authentication device 1 according to the preferred embodiment of the present invention authenticates a procedural person so that the contractor's family performs the procedure as a procedural person instead of the contractor. In the authentication apparatus 1 according to the preferred embodiment of the present invention, when a procedure person is a proxy procedure person or a contractor's family registered in advance in the contract data, this procedure person is authenticated.

  In the best mode of the present invention, a procedural who carries out insurance procedures on behalf of the policyholder presents his / her identification card to the person in charge during the procedure. The person in charge takes the ID card with the camera 151 or reads the ID card with the scanner 152, whereby the image data of the ID card is stored in the authentication device 1.

  The authentication device 1 acquires data necessary for procedure authentication from the image data of the identification card in a text format, and authenticates whether the procedure member is the family of the policyholder based on this information. The result is displayed on the display device 105. The person in charge determines whether or not to process the procedure by the procedure person with reference to the display device 105.

  In the best mode of the present invention, a case of a license as an identification card will be described. However, any identification card can be used as long as it can prove the relationship between a procedure person and a contractor.

  As shown in FIG. 2, the authentication device 1 according to the preferred embodiment of the present invention includes a central processing control device 101, a ROM (Read Only Memory) 102, a RAM (Random Access Memory) 103, and an input / output interface 109. They are connected via a bus 110. An input device 104, a display device 105, a communication control device 106, a storage device 107, and a removable disk 108 are connected to the input / output interface 109.

  The central processing control device 101 reads out and executes a boot program for starting the authentication device 1 from the ROM 102 based on an input signal from the input device 104, and further reads an operating system stored in the storage device 107. Further, the central processing control device 101 controls various devices based on input signals from the input device 104, the communication control device 106, etc., and reads programs and data stored in the RAM 103, the storage device 107, etc. into the RAM 103. A processing device that loads and implements a series of processing described later, such as data calculation or processing, based on a program command read from the RAM 103.

  The input device 104 includes input devices such as a keyboard and a mouse through which an operator inputs various operations. The input device 104 generates an input signal based on the operation of the operator, and inputs via the input / output interface 109 and the bus 110. It is transmitted to the central processing control apparatus 101. The display device 105 is a CRT (Cathode Ray Tube) display, a liquid crystal display, or the like, and receives an output signal to be displayed on the display device 105 from the central processing control device 101 via the bus 110 and the input / output interface 109. It is a device that displays the processing result of the control device 101 and the like. The communication control device 106 is a device such as a LAN card or a modem, and is a device that connects the authentication device 1 to a communication network such as the Internet or a LAN. Data transmitted / received to / from the communication network via the communication control device 106 is transmitted / received to / from the central processing control device 101 via the input / output interface 109 and the bus 110 as an input signal or an output signal.

  The storage device 107 is a semiconductor storage device or a magnetic disk device, and stores programs and data executed by the central processing control device 101. The removable disk 108 is an optical disk or a flexible disk, and signals read / written by the disk drive are transmitted / received to / from the central processing control apparatus 101 via the input / output interface 109 and the bus 110.

  The storage device 107 of the authentication device 1 according to the preferred embodiment of the present invention stores an authentication program and includes an identification data storage unit 21, a contract data storage unit 22, and a log data storage unit 23. Further, the authentication program is read and executed by the central processing control device 101 of the authentication device 1, whereby the identification data acquisition means 11, procedure information acquisition means 12, family authentication means 13, result display means 14 and contract processing means 15. Is implemented in the authentication device 1.

  With reference to FIG. 3, the authentication method by the authentication apparatus 1 which concerns on the best embodiment of this invention is demonstrated.

  First, in step S <b> 101, the authentication apparatus 1 acquires image data of the procedure person's identification from the camera 151, the scanner 152, etc., and stores the image data in the RAM 103 of the authentication apparatus 1. In step S102, the identification data acquisition unit 11 extracts the identification data 21a from the identification image data acquired in step S101. Specifically, the identification data acquisition means 11 acquires the name, address, date of birth, identification number, etc. of the procedure person from the identification image data as text data, and stores it as identification data 21a. Store it in 107.

  Next, in step S103, the procedure information acquisition means 12 acquires information on a contract to be processed by the procedure person. At this time, when the procedure person or the person in charge inputs the contract information to the input device 104, the procedure information acquisition unit 12 acquires the information. The procedure information acquisition unit 12 acquires information such as a contract identifier, a contract name, and procedure details from the input device 104 or the like. Further, in step S104, family authentication processing by the family authentication means 13 is performed. This process will be described in detail later. As a result of the family authentication process by the family authentication means 13, the result display means 14 receives an authentication result such as whether or not to allow authentication by the procedure person and whether or not the procedure person has been authenticated as the contractor's family. In step S105, the result is displayed on the display device 105.

  In step S106, according to the result displayed based on step S105, when the contract procedure is not performed, the process is ended as it is. For example, in step S105, when the identification card presented by the procedure person is forged, or when it is displayed that it is not authenticated as the contractor's family, the person in charge who sees this screen rejects the procedure by this procedure person. However, we will not proceed with this procedure.

  On the other hand, if the person in charge approves the procedure by this procedure person, the person in charge performs the procedure by the procedure person. The contract processing means 15 receives information on the procedure by the procedure person and stores the information in the log data storage unit 23 as log data 23a.

  Next, each component of the authentication device 1 according to the preferred embodiment of the present invention will be described with reference to FIG.

  The identification data storage unit 21 is a storage area in which identification data 21a is stored. In the identification data 21a, the name, address, date of birth, identification number of the identification card, etc. are described in encoded data for text data such as JIS code. The authentication device 1 converts these text data into character fonts and displays them on the display device 105, whereby the person in charge or the like can confirm the name of the procedure person.

  The identification number of the identification card is, for example, a license number. This license number may include a bit called a check digit. By checking the identifier of this bit with a predetermined arithmetic expression, it is possible to check whether the license number is correct.

  The contract data storage unit 22 is a storage area in which the contract data 22a is stored. As shown in FIG. 4, the contract data 22a is data in which the contract identifier for identifying the insurance contract is associated with the contractor's last name, address, contract content, and the like. The contract data 22a may further be associated with a proxy name, a proxy life date, a proxy address, etc. as proxy procedure information designated by the contractor. Information about a plurality of agents may be associated with one contract identifier. In the example shown in FIG. 4, the information of up to two agents is associated with one contract identifier.

  The log data storage unit 23 is a storage area in which log data 23a is stored. The log data 23a is log data of a procedure performed by a procedure person authenticated by the authentication device 1 according to the best embodiment of the present invention. As shown in FIG. 5, the log data 23a is associated with occurrence date / time, contract identifier, contractor name, agent name, agent life date, agent address, evidence data, and procedure contents. Here, the contract identifier corresponds to the contract identifier of the contract data in FIG. The agent name of each record is a procedure person authenticated by the authentication apparatus 1 according to the preferred embodiment of the present invention, and is associated with the address, date of birth, etc. used to authenticate the agent. It is remembered. The evidence data is, for example, image data of a license and is stored as necessary. At this time, data unnecessary for the authentication apparatus 1 according to the best embodiment of the present invention, such as a permanent address, is processed by masking with black paint or the like so that it cannot be read, and then the image data of the identification card is stored. preferable.

  The identification data acquisition unit 11 is a unit that acquires information necessary for authentication of the procedure person from the image data of the identification card photographed by the camera 151 and the image data of the identification card acquired by the scanner 152. . The identification data acquisition means 11 identifies, for example, a location where the name of the agent, the date of agent's life, the address of the agent, etc. are described from the image data, and the location is encoded with OCR (Optical Character Recognition) software or the like. Convert to converted data. The encoded data is character data that can be edited by a computer and is so-called text data. Further, the identification data acquisition means 11 converts an identifier for identifying the identification card such as an identification number attached to the license into text data and stores it as identification data 21a.

  The ID data acquisition means 11 creates ID data 21a in which the converted agent name, proxy life date, agent address, etc. are associated with each item, and is stored in the ID data storage unit 21. Remember. At this time, the identification data acquisition unit 11 may also store identification image data acquired from the camera 151, the scanner 152, or the like in the identification data 21. At this time, the identification data acquisition means 11 stores the image data of the identification card after processing the data unnecessary for the authentication device 1 by masking with black or the like so that it cannot be read.

  The procedure information acquisition unit 12 is a unit that acquires, from the input device 104 or the like, contract contents to be processed by the procedure person on behalf of the contractor. Here, the contract contents are a contract identifier, a contractor name, a procedure content, and the like of a contract that the procedure person performs on behalf of the contractor.

  The family authentication means 13 extracts the contractor information from the contract data 22a and compares it with the information in the identification data 21a, and outputs an authentication result indicating whether or not the procedure person is the contractor's family. Whether it is a family is determined based on, for example, whether the last name of the contractor in the contract data 22a matches the surname of the procedure person or the address.

  Furthermore, when the identification data 21a includes the identification number of the identification card and the identification number includes a check digit, the family authentication means 13 determines the identification card from the check digit and the arithmetic expression of the identification data 21a. If the ID is not valid, the procedure person outputs an authentication result indicating that the procedure cannot be performed. It is possible to determine whether or not the license is forged by checking the identifier with a predetermined arithmetic expression for this check digit. When it is determined that the license is forged, it is preferable that the family authentication means 13 outputs that the procedural person is not authenticated without comparing with the contract data 22a.

  The result display unit 14 displays the authentication result by the family authentication unit 13 on the display device 105. Based on the result displayed on the display device 105, the person in charge determines whether or not to proceed with the procedure by the procedure person. For example, if it is displayed on the display device 105 that the license has been forged or a message indicating that the driver is not a family member, the person in charge confirms the display screen and determines whether or not to proceed with the procedure by the procedure person. decide.

  The contract processing means 15 acquires a log of the procedure by the procedure person when the procedure person is authenticated, and stores it in the log data storage unit 23 as log data 23a as shown in FIG. At this time, the contract processing means 15 associates the procedure information with the procedure person's identification data and the image data of the identification card acquired by the identification data acquisition module 11. Here, the contract processing means 15 processes the image data of the identification card, such as a permanent address, which is unnecessary for the authentication apparatus 1 according to the best mode of the present invention by masking with black paint or the like so that it cannot be read. After that, it is preferable to store the image data of the identification card.

  Next, with reference to FIG. 6, the family authentication process by the family authentication means 13 according to the preferred embodiment of the present invention will be described. The family authentication means 13 reads the identification data 21a and the contract data 22a from the storage device 107 prior to processing.

  First, in step S201, the family authentication means 13 calculates a check digit included in the license number of the identification data 21a based on a predetermined calculation formula to determine whether or not the license is valid, specifically, a license. Inspect the number for forgery. If the license number is forged, a message indicating that the procedure is not possible is output in step S208. On the other hand, if it is considered that the license number is not forged, the process proceeds to step S202.

  In step S <b> 202, the family authentication unit 13 determines whether or not an agent is registered in the contract that the procedural person intends to proceed with. Specifically, the family authentication unit 13 searches the contract data 22a to determine whether or not the agent is registered in the contract identifier of the contract that the procedure person wishes to perform. If the agent is not registered, the process proceeds to step S205.

  If the agent is registered, it is determined in step S203 whether or not the registered agent matches the procedure information stored in the identification data 21a. The family authentication means 13 determines whether the name, address, date of birth, etc. of the procedure person matches the name, address, date of birth, etc. of the identification data 21a. If they match, in step S204, a message indicating that the procedure is accepted is output, and the process is terminated. On the other hand, if it is determined in step S203 that the agent data registered in the contract data 22a does not match the procedure data registered in the identification data 21a, the process proceeds to step S205.

  In step S205, the family authentication unit 13 determines whether the address and surname of the contractor data registered in the contract data 22a and the data of the procedure person registered in the identification data 21a match. If they match, in step S206, the family authentication means 13 outputs that the procedure person is the contractor's family, and ends the process. On the other hand, if the address and surname do not match in step S205, it is output in step S207 that this procedure person is not the contractor's family, and the process is terminated.

  As the condition indicating whether or not the family is in step S205, various conditions are conceivable, such as a case where it is determined that the family is found when the address and the last name match, and a case where the family is judged when the address or last name is matched. . The condition indicating whether or not a family member is preferably input in advance from the input device 104 by an administrator or the like.

  As described above, according to the authentication device 1 according to the preferred embodiment of the present invention, the procedure license is read, converted into text data, and compared with prestored contractor information. Person can be authenticated. Therefore, it is possible to authenticate the procedure person more reliably than the confirmation of the identification card by visual inspection.

  Further, according to the authentication device 1 according to the preferred embodiment of the present invention, forgery of an identification card can be ascertained on the spot from a check digit such as a license identification number. Therefore, in the past, when verifying the identification card by visual inspection, forgery was confirmed from the texture and printing of the identification card, but by checking the check digit during the procedure, the occurrence of an accident due to counterfeiting It can be prevented in advance.

  Further, according to the authentication device 1 according to the preferred embodiment of the present invention, the image data of the identification card can be converted into electronic data and stored as evidence data. Therefore, conventionally, a copy of the license has been saved. However, the saving of the data can be saved by saving the electronic data, and unnecessary data such as a permanent address can be saved and saved.

(Modification)
With reference to FIG. 7, the authentication system 200 which concerns on the modification of this invention is demonstrated. The authentication system 200 includes an authentication request terminal 400 and an authentication server 300.

  The authentication request terminal 400 is a terminal provided at, for example, a customer or a counter, obtains image data of a procedure proof, requests the authentication server 300 to authenticate the procedure, and receives the authentication result Display on the display device. The authentication server 300 is connected to the authentication request terminal 401 via the communication network 210, authenticates a procedure person in response to a request from the authentication request terminal 400, and transmits the result to the authentication request terminal 401.

  The authentication request terminal 400 includes a central processing control device 401, an input device 404, a display device 405, a communication control device 406, a storage device 407, a camera 451, and a scanner 452. The identification data storage unit 421 of the storage device 407 is the same as the identification data storage unit 21 of the storage device 107 of FIG. The identification data acquisition means 411, procedure information acquisition means 412 and result display means 414 of the central processing control device 401 are the identification data acquisition means 11, procedure information acquisition means 12, family authentication means of the central processing control device 401 of FIG. 13 and the result display means 14 respectively. The family authentication request unit 413 transmits the identification data 421a stored in the identification data storage unit 421 and the data acquired by the procedure information acquisition unit 412 to the authentication server 300, and the procedure person is the contractor from the authentication server 300. The authentication result as to whether or not he is a family member is received and input to the result display means 414.

  The authentication server 300 includes a central processing control device 301, a communication control device 306, and a storage device 307. The contract data storage unit 321 and the log data storage unit 322 of the storage device 307 respectively correspond to the contract data storage unit 21 and the log data storage unit 22 of the storage device 107 of FIG. Further, the family authentication unit 311 and the contract processing unit 312 of the central processing control device 301 correspond to the family authentication unit 13 and the contract processing unit 15 of the central processing control device 101 of FIG.

  Here, the family authentication unit 311 performs the same processing as the family authentication unit 13 of FIG. 1 except that data is input / output via the communication control device 306. The family authentication means 311 receives the identification data and the data related to the procedure from the authentication request terminal 400 via the communication control device 306, and performs the family authentication process by performing the process shown in FIG. 6 based on these data. The result is transmitted to the authentication request terminal 400 via the communication control device 306.

  In the authentication system 200 according to the modification of the present invention, authentication requests from a plurality of authentication request terminals can be processed by one authentication server 300, so that leakage of contract data and the like can be prevented.

(Other embodiments)
As described above, the best mode for carrying out the invention and the modifications thereof have been described. However, it should not be understood that the description and drawings constituting a part of this disclosure limit the present invention. From this disclosure, various alternative embodiments, examples, and operational techniques will be apparent to those skilled in the art.

  For example, the authentication device described in the best mode of the present invention may be configured on one piece of hardware as shown in FIG. 1, or on a plurality of pieces of hardware according to the function and the number of processes. It may be configured. Moreover, you may implement | achieve on the existing authentication system.

  It goes without saying that the present invention includes various embodiments not described herein. Therefore, the technical scope of the present invention is defined only by the invention specifying matters according to the scope of claims reasonable from the above description.

11, 411 Identification data acquisition means 12, 412 Procedure information acquisition means 13, 311, 413 Family authentication means 14, 414 Result display means 15, 312 Contract processing means 21, 421 Identification data storage section 22, 321 Contract data storage section 23, 322 Log data storage unit 101, 301, 401 Central processing control device 102 ROM
103 RAM
104, 304 Input device 105, 405 Display device 106, 306, 406 Communication control device 107 Storage device 108 Removable disk 109 Input / output interface 110 Bus 151 Camera 152 Scanner

Claims (6)

An authentication device for authenticating the procedural member in order for a contractor's family to proceed as a procedural substitute for the contractor,
A contract data storage unit for storing contract data including a surname of the contractor;
Identification data acquisition means for acquiring the procedureer's last name as text data from the image data of the identification card printed with the procedureer's last name, and storing it as identification data;
When the contractor's last name is extracted from the contract data and matches the last name of the identification data, family authentication means for outputting an authentication result that the procedure member is the family of the contractor;
An authentication device comprising: The identification card includes the address of the procedure person,
The contract data is further associated with the contractor's address,
The identification data acquisition means further acquires the procedure person's address as text data from the image data and stores it as the identification data.
The family authentication means extracts the contractor's last name and address from the contract data, and if it matches the last name and address of the identification data, the authentication result that the procedure person is the family of the contractor is obtained. The authentication apparatus according to claim 1, wherein the authentication apparatus outputs the authentication information. The identification card includes an identifier of the procedure certificate, and the identifier includes a check digit for checking the identifier with a predetermined arithmetic expression.
The identification data acquisition means acquires the identifier of the identification card from the image data as text data and stores it as the identification data.
The family authentication means further checks the validity of the identification card from the check digit of the identification card data and the arithmetic expression, and if the identification card is not valid, the authentication result that the procedure person cannot perform the procedure The authentication apparatus according to claim 1, wherein: A contract processing means for outputting an authentication result that the procedural member is a family member and storing the log as log data in association with the procedural information and the identification data of the procedural member when the procedural member performs the procedure; The authentication apparatus according to any one of claims 1 to 3, further comprising: An authentication method used for an authentication device for authenticating the procedural person in order for a contractor's family to proceed as a procedural substitute for the contractor,
Storing contract data including the contractor's last name;
From the image data of the identification card on which the surname of the procedure person is printed, obtaining the surname of the procedure person as text data and storing it as identification data;
Extracting the last name of the contractor from the contract data, and if the first name of the contractor data matches the last name, outputting an authentication result that the procedure person is the family of the contractor;
An authentication method comprising: An authentication program for authenticating the procedural in order for the contractor's family to proceed as a procedural on behalf of the contractor,
On the computer,
From the image data of the identification card on which the surname of the procedure person is printed, obtaining the surname of the procedure person as text data and storing it as identification data;
Extracting the contractor's last name from the contract data and outputting the authentication result that the procedure member is the family of the contractor if the contractor matches the last name of the identification data;
An authentication program characterized by causing

Images