JP5358967B2 - User authentication server, user authentication method, and user authentication system - Google Patents

Description

  The present invention relates to an authentication technique that accurately keeps a record of delivery, authenticates the person who should receive the delivery, and ensures delivery to the person.

Conventionally, when sending goods that are surely delivered to the person, such as a bank card or credit card, as registered in Non-Patent Document 1, registered mail recording the delivery progress of the deliverables, and safety provided by shipping companies, etc. A high delivery service was used. By using such a service, the delivery is not simply put into the mailbox, but is delivered by hand to the recipient at the address of the destination, and the delivery is received by obtaining a signature or seal of confirmation of receipt. It is possible to confirm that it has been passed to the recipient.
http://www.jp-network.japanpost.jp/services/post/registered/

However, in conventional registered mail and delivery services, only the methods such as form stamping and signature at the time of delivery are used as means for authenticating the recipient of the delivery, but the type of seal at that time and the authenticity of the signature are It doesn't matter. Therefore, for example, there is a problem that the delivered article is not reliably delivered to the person who should originally receive it without the recipient being properly authenticated, for example, when the third party receives the article as the recipient.
The present invention has been made in view of the above points, and in order to reliably deliver the delivery to the person who should receive the delivery, the person is surely authenticated at the time of delivery, and the delivery is when the person is authenticated. The purpose is to realize passing.

In order to achieve the above-described object, the present invention provides a personal authentication server connected to the terminal associated with the terminal owner so as to be able to transmit and receive data, and a program storage means for storing a personal authentication application program; When the authentication application program is downloaded from the program storage means to the terminal by the terminal, the terminal identification information is received from the terminal and the terminal identification information is used to obtain the issued data. A delivery identification information generating means for generating identification information of a delivery based on the card issuing data transmitted to the generation computer and generated by the issue data generation computer using the terminal identification information and the user's personal information ; The terminal identification information and the delivery identification information are associated with authentication data, Authentication data storage means for storing and receiving the identification information of the delivery and the terminal identification information of the terminal read by the terminal from the terminal, and the received identification information and terminal identification information of the delivery, The authentication data stored in the authentication data storage means is collated, and if they match, the authentication means for determining that the owner of the terminal has been authenticated, and the notification for notifying the terminal of the authentication result of the authentication means And means.

Further, the present invention provides the above-mentioned authentication server, if the authentication of the owner of the terminal is established by the authentication unit, information indicating that the owner of the terminal has received the deliveries from the terminal Delivery history storage means for receiving and storing is provided.

  Further, the present invention is the above-described identity authentication server, wherein the delivery identification information is a two-dimensional code attached to the delivery, and the two-dimensional code is the terminal identification information of the terminal or the terminal identification information. It includes random number information generated by using.

Further, the present invention is the above-described personal authentication server, wherein the authentication data storage means includes, as authentication data, recording medium identification information stored in a non-contact communication medium provided in the delivery item, The authentication means further compares the identification information read by the delivery terminal possessed by the terminal or the delivery person from the recording medium of the delivery and the recording medium identification information stored in the authentication data storage means. If they match, it is determined that authentication of the owner of the terminal has been established.

The present invention is also a personal authentication method in a personal authentication server connected to the terminal associated with the terminal owner so as to be able to transmit and receive data, wherein the terminal stores a personal authentication application program. The authentication application program is downloaded to the terminal, receives the terminal identification information from the terminal, and uses the terminal identification information, so that the terminal identification information is transmitted to the issued data creation computer and is issued by the issued data creation computer A delivery identification information generation process for generating delivery identification information based on card issuing data generated using the terminal identification information and user personal information, and the terminal identification information and the delivery identification Refer to authentication data storage means that associates information and stores it as authentication data Receiving the identification information of the delivery and the terminal identification information of the terminal received by the terminal from the terminal, the identification information of the delivery and the terminal identification information, and the authentication data stored in the authentication data storage means; And an authentication process for determining that authentication of the owner of the terminal has been established, and a notification process for notifying the terminal of an authentication result of the authentication process.

Further, the present invention is a personal authentication system that authenticates the owner with the recipient of the delivery using the terminal associated with the terminal owner, and is capable of transmitting and receiving data to and from the terminal. A personal authentication server connected to the computer, and a program storage means for storing a personal authentication application program; and when the authentication application program is downloaded from the program storage means to the terminal by the terminal, from the terminal receives the terminal identification information, generates the by using the terminal identification information, by using the personal information of the terminal identification information and the user by the terminal identification information is sent to the issuing data generation computer the issue data generation computer deliveries identification information generating hand for generating an identification information of the deliveries based on card issuance data Authentication data storage means for associating and storing the terminal identification information and the identification information of the delivery item as authentication data, and the identification information of the delivery item read by the terminal from the terminal and the terminal identification of the terminal Information is received, the received identification information of the delivery item and the terminal identification information are compared with the authentication data stored in the authentication data storage means, and if they match, the owner of the terminal is authenticated. And authentication means for notifying the terminal of the authentication result of the authentication means.

  According to the present invention, at the time of delivery of a delivery item, the identification information attached to the delivery item is read by a terminal such as a mobile phone, transmitted to a personal authentication server, and collated with authentication data stored in advance. It becomes possible to authenticate the person who is the recipient of the delivery and deliver the delivery. In addition, since the terminal identification information and the delivery identification information are transmitted from the terminal to the identity authentication server when the delivery is received, the identity authentication server stores the delivery record such as the type of delivery and the receipt time. Is also possible.

  Hereinafter, a preferred embodiment of a personal authentication system according to the present invention will be described in detail with reference to the accompanying drawings. In the following description and the accompanying drawings, the same reference numerals are given to components having substantially the same functional configuration, and redundant description is omitted.

  FIG. 1 is a block configuration diagram of the personal authentication system 1. The personal authentication system 1 includes a personal authentication server 3, a data processing server 11, a mobile phone 5, and an issuance data creation computer 61 that are connected via a network 2 so that data can be transmitted and received. The personal authentication server 3 and the data processing server 11 are installed in the service providing company 4, and the issued data creation computer 61 is installed in the delivery object management company 8. It is assumed that the user 6 owns the mobile phone 5 and is the person who should receive the delivery object 43 managed by the delivery object management company 8. For example, if the delivery object 43 is a card, the delivery object management company 8 is a card company, and the service providing company 4 is entrusted by the delivery object management company 8 to create a card and send it to a delivery company or the like. Request delivery of Here, a case where a mobile phone is applied as an example of a terminal will be described in this embodiment, but a PDA (personal digital assistant), a portable computer, or the like may be used.

  The personal authentication server 3 shown in FIG. 1 is a server computer and includes a control unit 21, a communication unit 23, and a storage unit 25. In accordance with the application program 31 stored in the storage unit 25, the control unit 21 performs transmission of a personal authentication program to the mobile phone 5 described later, personal authentication processing, control processing of each unit in the personal authentication server 3, and the like. The communication unit 23 performs data transmission / reception processing with the data processing server 11, the mobile phone 5, and the issued data creation computer 61.

  The storage unit 25 is a storage unit such as a memory or a hard disk, and stores an application program 31 and various data 32. The application program 31 is a personal authentication application program that the mobile phone 5 accesses and downloads to the personal authentication site rented from the delivery object management company 8 by the service provider 4 and a program that performs personal authentication processing described later. .

  The data 32 is authentication data, authentication record data, and the like. The authentication data is data for authenticating that the user 6 is the person who should receive the delivery 7, and is data including identification information 41 created in association with the terminal identification information 53 of the mobile phone 5. The authentication record data is data in which the time when the user 6 received the delivery 7 is recorded.

The data processing server 11 creates data necessary for generating the delivery object 43 based on the issuance data received from the issuance data creation computer 61 of the delivery object management company 8, and identification information attached to the delivery object 7 Data processing such as creating 41 is performed. The created data is stored in the storage unit 25 as authentication data of the data 32.
The personal authentication server 3 shown in FIG. 1 has the function of the data processing server 11 and may be a single server computer.

  A personal authentication application program 51 downloaded from the personal authentication server 3 is stored in the storage unit or the like of the mobile phone 5. According to the user authentication application program 51, user authentication processing and authentication result notification are performed. The mobile phone 5 has terminal identification information 53 unique to each mobile phone, such as a UTN (mobile terminal manufacturing number) and a serial number. Here, the mobile phone 5 is used, but instead of the mobile phone 5, it has terminal identification information 53, a function of reading the identification information 41, and a function of transmitting / receiving data to / from the personal authentication server 3 via the network 2. Any terminal that has For example, a typical example of a terminal other than a mobile phone is a mobile terminal. This is usually set with a serial number for identifying each terminal as UTN.

  The delivery item 7 includes identification information 41 and a delivery object 43. The delivery object 43 is an article or the like to be received by the user 6, for example, a card or the like. The identification information 41 is identification information created using the terminal identification information 53 of the mobile phone 5, and is, for example, a two-dimensional code printed on the delivery item 7. Further, the delivery object 43 may be a card to which an IC chip storing the identification information 41 is attached.

  Next, the operation of the personal authentication system 1 will be described. FIG. 2 is a sequence diagram showing the flow of the personal authentication process by the personal authentication system 1. Here, an example will be described in which the user 6 requests the delivery object management company 8 which is a card company to issue a card and receives the issued card. The user 6 enters personal information such as address, name, and age in the card membership application form and sends it to the card company to the delivery object management company 8 which is a card company. The user 6 accesses the URL of the personal authentication site described in the card membership application form from the mobile phone 5. This personal authentication site may be rented from the delivery object management company 8 by the service provider company 4 and managed and operated by the personal authentication server 3. Even when a card enrollment application is received from a personal computer or the like via the Internet, the URL of the personal authentication site is described on the card enrollment application Web page or the like, and the user 6 uses the mobile phone as the URL. 5 to access.

  The mobile phone 5 accesses the personal authentication site, that is, the personal authentication server 3, and downloads the personal authentication application program (step S101). At that time, the mobile phone 5 transmits terminal identification information 53 such as UTN to the personal authentication server 3 (step S102). The personal authentication server 3 stores the terminal identification information 53 as authentication data in the storage unit 25 (step S103) and transmits it to the issuance data creation computer 61.

  The delivery object management company 8 confirms the contents of the personal information described in the card membership application form, and conducts an entrance examination of the applicant. The issuance data creation computer 61 creates card issuance data based on the personal information of the user 6 and the terminal identification information of the mobile phone 5 (step S104). The card issuing data is various information of the credit card or the cash card to be issued, such as the address, name, personal identification number, telephone number, card number, etc. of the user 6 who is the card issuer. The issuance data creation computer 61 transmits the created card issuance data to the data processing server 11 (step S105).

  The data processing server 11 performs data processing such as generation of magnetic data to be recorded on the card and writing to the card based on the card issuance data (step S106), and the user is attached to the card mount sent when the card is delivered. The identification information 41 such as the address, name, and two-dimensional code 6 is printed (step S107). The data processing server 11 creates, as the identification information 41, for example, a two-dimensional code including the terminal identification information 53 as data, or a two-dimensional code including a random number generated based on the terminal identification information 53 as data. Print on card mount. The identification information 41 such as the two-dimensional code is sent to the personal authentication server 3, and the personal authentication server 3 stores the terminal identification information 53 of the user 6 stored in step S102, the card issuing data of the user 6, the identification information 41, and the like. Are stored in the storage unit 25 as authentication data of the user 6 (step S108).

The data processing server 11 issues a card for the user 6 (step S109). The issued card is printed together with the mount on which the identification information 41 such as the address, name, and two-dimensional code of the user 6 is printed. To be sent to. This delivery work can be outsourced to mail or a general delivery company.
FIG. 3 is a diagram illustrating an example of a delivery item. A delivery object 7-1 shown in FIG. 3 encloses a card that is the delivery object 43. The envelope of the delivery item 7-1 has a window 81 on which a transparent film is stretched. From the window 81, the address, name, and two-dimensional code 83 of the user 6 printed on the card mount by the data processing server 11 can be seen. It is done. As described above, the two-dimensional code 83 is identification information including the terminal identification information 53 as data, or identification information including a random number generated based on the terminal identification information 53 as data.

  When the user 6 recognizes the two-dimensional code 83 using the camera function or the like of the mobile phone 5, the mobile phone 5 reads the two-dimensional code 83 and the read two-dimensional code 83 according to the personal authentication application program 51 stored in the mobile phone 5. The terminal identification information 53 of the mobile phone 5 is transmitted (step S110). The personal authentication server 3 receives the two-dimensional code 83 and the terminal identification information 53 from the mobile phone 5, and receives the received terminal identification information, the two-dimensional code 83, the terminal identification information 53 and the two-dimensional code stored in step 108. Are matched, the user 6 who is the owner of the mobile phone 5 is authenticated as the card recipient (step S111), and an authentication screen is transmitted to the mobile phone 5. The mobile phone 5 displays an authentication screen on the screen (step S112). For example, the user 6 presents the authentication screen to the delivery person who delivered the delivery 7-1 and receives the delivery 7-1. The mobile phone 5 notifies the user authentication server 3 that the user 6 has received the delivery 7-1 according to the user authentication application program 51 stored in the mobile phone 5 (step S113). Here, when the authentication is not established in step S111, the result of the authentication failure is transmitted from the personal authentication server 3 to the mobile phone 5. As a result, a screen indicating that authentication is not established is displayed on the screen of the mobile phone 5, and identity verification is not established, so delivery 7-1 is not delivered.

  The personal authentication server 3 stores in the storage unit 25, as authentication record data, that the delivery item 7-1 has been correctly delivered to the user 6 and the delivery time (step S114). The delivery object management company 8 can access the personal authentication server 3 from the issued data creation computer 61, refer to the authentication record data, and confirm the authentication result (step S115).

Since a personal identification document is required at the time of purchasing the mobile phone 5, it is possible to easily authenticate the person who is the recipient of the delivery by using the terminal identification information of the mobile phone 5 as in this embodiment. As a result, the reliability of the personal authentication is increased. It is also possible to keep a delivery record.
The two-dimensional code may be recognized by the mobile phone 5 without opening the delivery item 7-1 such as being printed on the envelope surface of the delivery item 7-1.

  In the above-described embodiment, the personal authentication process at the time of delivery has been described. For example, even when the person is not present at the time of delivery and the delivery is to be received later at a specific place such as a post office, the steps after step S110 are performed. User authentication processing can be used. Conventionally, when a delivery is received at a post office or a delivery company office, a certificate or seal that can confirm the identity of the user has been required. However, according to the present embodiment, the user 6 can obtain a certificate or seal. It is not necessary to bring personal information such as, and can be easily received using the mobile phone 5.

In the above-described embodiment, a two-dimensional code is used as the identification information 41. However, an IC chip may be used as the identification information 41.
FIG. 4 is a diagram illustrating an example of a delivery 7-2 including a card with an IC chip. The delivery 7-2 shown in FIG. 4 has a window 91 on which a transparent film is stretched, and the address, name, etc. of the user 6 printed on the card mount by the data processing server 11 are confirmed from the window 91. . Further, a card 93 that is a delivery object 43 is enclosed in the delivery item 7-2. The card 93 is attached with an IC chip on which the terminal identification information 53 transmitted when the mobile phone 5 downloads the personal authentication application program is recorded. The terminal identification information 53 and the identification information recorded on the IC chip 95 are stored in advance in the storage unit 25 as authentication data. This card 93 can be used exclusively for delivery confirmation, but if it is a card on which an IC card is mounted, such as a bank cash card, identification information is provided in a part of the storage area provided in the IC chip of this card. It is also possible to memorize it.

  When the delivery 7-2 is delivered, the IC chip reader / writer (R / W) carried by the delivery person carries data of the IC chip 95 in the delivery 7-2 (IC chip identification information and terminal identification information 53). ) Without contact and transmits it to the personal authentication server 3. On the other hand, the mobile phone 5 transmits its own terminal identification information 53 to the personal authentication server 3 in accordance with the personal authentication application program 51 stored in the mobile phone 5. The personal authentication server 3 collates information obtained by combining the data transmitted from the IC chip R / W and the terminal identification information transmitted from the mobile phone 5 with the authentication data stored in the storage unit 25. Then, when the collation results match and it is authenticated that the owner of the mobile phone 5 is the recipient of the card 93, the processing after step S112 shown in FIG. 2 is performed, and the delivery is completed. At this time, from the data transmitted from the IC chip R / W, the personal authentication server 3 can also store data indicating what type of card has been delivered as authentication record data.

Block diagram of the personal authentication system 1 Sequence diagram showing the flow of operations of the personal authentication system 1 Figure showing an example of a delivery Figure showing an example of a delivery

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ......... Person authentication system 2 ......... Network 3 ......... Person authentication server 5 ......... Mobile phone 7, 7-1, 7-2 ......... Delivery 11 ......... Data processing server 21 ......... Control unit 23 ......... Communication unit 25 ......... Storage unit 31 ......... Application program 41 ......... Identification information 43 ......... Delivery object 51 ......... Person authentication application program 53 ......... Terminal identification information 61 ... ...... Issued data creation computer

Claims (6)

A personal authentication server connected to the terminal corresponding to the terminal owner so that data can be transmitted and received,
Program storage means for storing a personal authentication application program;
When the authentication application program is downloaded from the program storage means to the terminal by the terminal, the terminal identification information is received from the terminal, and the terminal identification information is used to generate issued data. A delivery identification information generating means for generating identification information of a delivery based on the card issuing data generated by using the terminal identification information and the user's personal information transmitted to the computer by the issued data creation computer ;
An authentication data storage means for associating the terminal identification information with the identification information of the delivery to store as authentication data;
The delivery identification information read by the terminal and the terminal identification information of the terminal are received from the terminal, and the received delivery identification information and terminal identification information received are stored in the authentication data storage means. An authentication unit that verifies the authentication data and determines that the authentication of the owner of the terminal has been established if they match,
Notification means for notifying the terminal of the authentication result of the authentication means;
A personal authentication server comprising: A delivery history storage means for receiving and storing information indicating that the owner of the terminal has received the delivery when the authentication of the owner of the terminal is established by the authentication means; The personal authentication server according to claim 1, wherein:   The delivery identification information is a two-dimensional code attached to the delivery, and the two-dimensional code includes terminal identification information of the terminal or random number information generated using the terminal identification information. The personal authentication server according to claim 1 or 2. The authentication data storage means includes, as authentication data, recording medium identification information stored in a non-contact communication medium provided in the delivery item,
The authentication means further compares the identification information read by the delivery terminal possessed by the terminal or the delivery person from the recording medium of the delivery and the recording medium identification information stored in the authentication data storage means. The identity authentication server according to any one of claims 1 to 3, wherein, if they match, it is determined that the authentication of the owner of the terminal has been established. A personal authentication method in a personal authentication server connected so that data can be transmitted to and received from the terminal associated with the terminal owner,
By the terminal, the authentication application program is downloaded to the terminal from a program storage means for storing a personal authentication application program, receives the terminal identification information from the terminal, and uses the terminal identification information, thereby the terminal identification information Is sent to the issuance data creation computer, and the delivery identification information for generating the delivery identification information based on the card issuance data generated by the issuance data creation computer using the terminal identification information and the personal information of the user Generation process,
With reference to authentication data storage means that associates the terminal identification information with the identification information of the delivery item and stores it as authentication data, the identification information of the delivery item read by the terminal from the terminal, and the terminal identification information of the terminal Authentication for determining that the owner of the terminal has been authenticated if the identification information of the delivery that received the message, the terminal identification information, and the authentication data stored in the authentication data storage means are collated. Process,
A notification process for notifying the terminal of an authentication result of the authentication process;
A personal authentication method characterized by comprising: A personal authentication system for authenticating the owner as the recipient of the delivery using the terminal associated with the terminal owner,
The terminal;
A personal authentication server connected to the terminal so as to be able to transmit and receive data;
Comprising
Program storage means for storing a personal authentication application program;
When the authentication application program is downloaded from the program storage means to the terminal by the terminal, the terminal identification information is received from the terminal, and the terminal identification information is used to generate issued data. A delivery identification information generating means for generating identification information of a delivery based on the card issuing data generated by using the terminal identification information and the user's personal information transmitted to the computer by the issued data creation computer ;
An authentication data storage means for associating the terminal identification information with the identification information of the delivery to store as authentication data;
The delivery identification information read by the terminal and the terminal identification information of the terminal are received from the terminal, and the received delivery identification information and terminal identification information received are stored in the authentication data storage means. An authentication unit that verifies the authentication data and determines that the authentication of the owner of the terminal has been established if they match,
Notification means for notifying the terminal of the authentication result of the authentication means;
A personal authentication system comprising:

Images