JP6529651B1 - Authentication system - Google Patents

Abstract

[PROBLEMS] To provide an authentication system which enables a customer who desires a transaction requiring identification to apply for the transaction in a deposit / withdrawal apparatus cooperating with a transaction server such as a financial institution executing the transaction. According to one embodiment, a deposit / withdrawal device transmits a provisional application inquiry request including a provisional application code to a transaction server, and an inquiry request transmission unit that receives an inquiry result as a response, a card reading unit that reads card information from a card, and a card The verification request unit sends an electronic certificate included in the information to the authentication server and receives a certificate confirmation result as a response, and if the inquiry result indicates that the inquiry is successful, the provisional application code and the certificate confirmation result And a main application transmitting unit that transmits the main application request including the main application request to the transaction server. [Selected figure] Figure 1

Description

  The present invention relates to an authentication system.

According to the Crime Revenue Transfer Prevention Act (hereinafter referred to as the "Crime of Penetration Act"), it is stipulated that financial institutions etc. have to carry out identity verification procedures at the time of specific transactions, such as opening an account.

In the criminal law, as one of the methods of non-face-to-face identification of the person, it receives sending of actual or copy of public certificate such as driver's license and various health insurance cards, etc. A method of sending a document such as a bank passbook or the like relating to the transaction by registered mail addressed to the address of the customer described is described or a method of using an electronic certificate.

A personal identification card (hereinafter referred to as "my number card") used for public personal identification service whose issuance has been started in October 2016 stores a signature electronic certificate that can be used for the electronic certificate. Private companies can use my number card as a digital signature by inquiring the public certification body about the validity of the digital certificate (
For example, Patent Document 1).

Patent 6219459 gazette

In the case of non-face-to-face identity verification, the customer is a financial institution, etc.
The burden of going to stores is eliminated, and financial institutions etc. are relieved of the burden of window services at stores. On the other hand, when sending a document relating to a transaction to the address described in the sent public certificate, the financial institution is required to send the document, and the customer is burdened to receive this document.

In the case of using an electronic certificate in non-face-to-face identity verification, a device for reading a my number card is required. For example, in the case of using an IC card reader as a reading device, the customer needs to make a purchase by themselves, so it lacks convenience. Furthermore, the security of the computer to which the IC card reader is connected depends on the administrator of the computer. , Security is not secured. When using a smartphone as a reading device, security is not secured because the security depends on the administrator of the smartphone as well. When using a multifunction device as a reading device, convenience is ensured by installing a multifunction device equipped with a reading function in a public place, but since consideration is given to peeping on input and output screens, etc., Security is not secured.

Therefore, the present invention provides an authentication system that enables a customer who desires a transaction requiring identification to apply for the transaction in a deposit / withdrawal apparatus that cooperates with a transaction server such as a financial institution that executes the transaction. The purpose is

A deposit and withdrawal apparatus according to an aspect of the present invention transmits a provisional application inquiry request including a provisional application code to a transaction server, and an inquiry request transmission unit that receives an inquiry result as a response, and a card reading unit that reads card information from a card And a verification request unit that transmits an electronic certificate included in the card information to the authentication server and receives a certificate confirmation result as a response, and a provisional application code and certificate when the inquiry result indicates that the inquiry is successful. And a main application transmission unit for transmitting a main application request including the confirmation result to the transaction server.

According to this aspect, the customer desiring a transaction requiring identification is required to complete the application for the transaction specified by the provisional application code by causing the deposit and withdrawal apparatus to read the card storing the electronic certificate. Can.

In the cash depositing / dispensing apparatus, the inquiry result may include applicant information, and the verification request unit may verify whether the applicant information matches the corresponding information of the card information. According to this aspect, it is possible to verify in the deposit and withdrawal apparatus whether or not the card of the customer who has made the temporary application has been read.

In the deposit and withdrawal apparatus, the verification request unit determines whether the person identified by the image information acquired by the imaging unit of the deposit and withdrawal device matches the person identified by the face photo information included in the card information. It may be verified. According to this aspect, the depositing and dispensing apparatus can verify that the person specified by the card is operating with the depositing and dispensing apparatus.

In the deposit and withdrawal apparatus, the application request may further include additional information indicating a result of verification by the verification request unit. According to this aspect, in the transaction server, the card of the customer who made the temporary application is read by the deposit and withdrawal device, and / or the person specified by the card is operating the deposit and withdrawal device It can be confirmed.

According to another aspect of the present invention, a computer implemented method comprises the steps of: transmitting a provisional application inquiry request including a provisional application code to a transaction server; receiving an inquiry result as a response; reading card information from a card; Sending an electronic certificate included in the card information to the authentication server and receiving a certificate confirmation result as a response, and if the inquiry result indicates that the inquiry is successful,
Sending the application request including the provisional application code and the certificate confirmation result to the transaction server.

A program according to another aspect of the present invention includes processing for transmitting a provisional application inquiry request including a provisional application code to a transaction server, receiving an inquiry result as a response, processing for reading card information from a card, and card information. Process of receiving the certificate confirmation result as a response, and when the inquiry result indicates that the inquiry is successful, the main application request including the provisional application code and the certificate confirmation result Execute processing to be sent to the transaction server.

The transaction server according to another aspect of the present invention generates a temporary application code in response to receiving the temporary application information, and registers the temporary application record based on the temporary application information and the temporary application code. A temporary application reception unit, which transmits a temporary application code to a customer contact address, receives a temporary application inquiry request including a temporary application code from the web temporary application reception unit, and the deposit and withdrawal apparatus, and the temporary application inquiry request A temporary application inquiry unit that determines whether or not there is a temporary application record specified by the temporary application code, and transmits the inquiry result to the depositing / dispensing apparatus, and includes the provisional application code and the certificate confirmation result from the depositing / dispensing apparatus An ATM main application reception unit that receives the main application request and links the certificate confirmation result to data of the provisional application record specified by the temporary application code, and the certificate confirmation result is a card in the deposit / withdrawal device Read from Indicating whether successful validation of electronic certificates in the taken card information, and a ATM present application receiving section.

According to this aspect, the customer who desires a transaction requiring identification confirms the provisional application of the transaction by transmitting the provisional application information, and the transaction specified by the provisional application code generated according to the provisional application The application can be completed by causing the deposit / withdrawal apparatus to read the card storing the electronic certificate.

The cash deposit and withdrawal apparatus according to another aspect of the present invention transmits a card reader that reads card information from a card, and an electronic certificate included in the card information to the authentication server, and receives a certificate confirmation result as a response. Based on the request unit, a temporary application transmission unit that transmits a temporary application request including a certificate confirmation result to the transaction server, and receives a temporary application code as a response, the temporary application code and the link information to the website of the transaction server And a two-dimensional code generator for generating a two-dimensional code.

According to this aspect, the customer who desires a transaction requiring identification is a transaction server for provisionally applying for the transaction by causing the depositing / dispensing device to read the card storing the electronic certificate, and completing the application. Link information to the website of can be obtained from the deposit and withdrawal device.

In the deposit and withdrawal apparatus, the verification request unit determines whether the person identified by the image information acquired by the imaging unit of the deposit and withdrawal device matches the person identified by the face photo information included in the card information. It may be verified. According to this aspect, the depositing and dispensing apparatus can verify that the person specified by the my number card is operating with the depositing and dispensing apparatus.

The transaction server according to another aspect of the present invention generates a temporary application code in response to receiving a temporary application request including a certificate confirmation result from the deposit and withdrawal apparatus, and the certificate confirmation result and the temporary application An ATM temporary application reception unit that registers a temporary application record based on a code, which transmits the temporary application code to the depositing / dispensing device, and responds to receiving the temporary application code and the temporary application code and the main application information And a web main application receiving unit that links the main application information to the certificate confirmation result of the temporary application record specified by the temporary application code.

According to this aspect, the customer who desires a transaction requiring identity verification makes a provisional application for the transaction by transmitting the certificate confirmation result from the deposit and withdrawal device, and the provisional application code generated according to the provisional application The application can be completed by transmitting the application information for the identified transaction.

A deposit and withdrawal apparatus according to another aspect of the present invention transmits a card application inquiry request including a card reader, a card code read from a first card by the card reader, and a first PIN, and makes an inquiry as a response. A card inquiry request transmission unit that receives a result, and a verification request unit that transmits an electronic certificate included in card information read from a second card by a card reading unit to an authentication server and receives a certificate confirmation result as a response And an activation request transmitting unit that transmits an activation request including a card code, a second PIN, and a certificate confirmation result to the transaction server when the inquiry result indicates that the inquiry is successful, and receives the activation result as a response When the transaction server sends an activation result indicating that activation was successful, the second card is written to the first card And an over-de-writing part.

According to this aspect, the customer desiring a transaction requiring identification confirms the second card on which the electronic certificate is stored for the transaction specified by the card code of the first card and the first PIN. Complete the application by having it read by the device, the PIN of the first card
Can be updated to PIN.

In the cash depositing / dispensing apparatus, the inquiry result may include applicant information, and the verification request unit may verify whether the applicant information matches the corresponding information of the card information. According to this aspect, it is possible to verify in the deposit and withdrawal apparatus whether or not the card of the customer who has made the temporary application has been read.

In the deposit and withdrawal apparatus, the verification request unit determines whether the person identified by the image information acquired by the imaging unit of the deposit and withdrawal device matches the person identified by the face photo information included in the card information. It may be verified. According to this aspect, the depositing and dispensing apparatus can verify that the person specified by the my number card is operating with the depositing and dispensing apparatus.

A transaction server according to another aspect of the present invention generates a temporary PIN of a card to be issued in response to receiving card application information, and registers a card record based on the card application information and the temporary PIN. From the card application acceptance unit and the deposit and withdrawal device, the card code and the first P
A card application inquiry unit which receives a card application inquiry request including IN, determines whether or not the card record specified in the card application inquiry request exists, and transmits the inquiry result to the depositing / dispensing apparatus; The activation request including the card code, the second PIN, and the certificate confirmation result is received from the device, and data of the card record specified by the card code is transmitted to the second P
An activation request receiving unit that links the IN and certificate confirmation results, and the certificate confirmation result indicates whether the electronic certificate included in the card information read from the card in the deposit / withdrawal apparatus has succeeded in the validity check And an activation request receiving unit.

According to this aspect, the customer who desires a transaction requiring identification confirms the provisional application of the transaction by transmitting card application information, and the card code of the card issued in response to the provisional application and the provisional P
For the transaction identified by IN, the application can be completed by causing the deposit and withdrawal device to read the card storing the electronic certificate.

According to the present invention, there is provided an authentication system which enables a customer who desires a transaction requiring identity verification to apply for the transaction in a deposit / withdrawal apparatus cooperating with a transaction server such as a financial institution executing the transaction be able to.

It is a figure which shows the structural example of the authentication system which concerns on one Embodiment of this invention. It is a block diagram of the company server which concerns on 1st Embodiment of this invention. It is a block diagram of the customer terminal concerning a 1st embodiment of the present invention. It is a block diagram of ATM which concerns on 1st Embodiment of this invention. It is a figure which illustrates the contents of temporary application DB concerning one embodiment of the present invention. It is a flow chart which shows an example of attestation processing concerning a 1st embodiment of the present invention. It is a flow chart which shows an example of attestation processing concerning a 1st embodiment of the present invention. It is a block diagram of the company server which concerns on 2nd Embodiment of this invention. It is a block diagram of the customer terminal concerning a 2nd embodiment of the present invention. It is a block diagram of ATM which concerns on 2nd Embodiment of this invention. It is a flow chart which shows an example of attestation processing concerning a 2nd embodiment of the present invention. It is a flow chart which shows an example of attestation processing concerning a 2nd embodiment of the present invention. It is a block diagram of the company server which concerns on 3rd Embodiment of this invention. It is a block diagram of ATM which concerns on 3rd Embodiment of this invention. It is a flow chart which shows an example of attestation processing concerning a 3rd embodiment of the present invention. It is a flow chart which shows an example of attestation processing concerning a 3rd embodiment of the present invention.

Embodiments of the present invention will be described with reference to the accompanying drawings. In the following embodiments,
It is for the purpose of facilitating the understanding of the present invention, and is not for the purpose of limiting the present invention. Moreover, the present invention can be variously modified without departing from the scope of the invention. Further, those skilled in the art can adopt an embodiment in which each of the elements described below is replaced with an equivalent one, and such embodiments are also included in the scope of the present invention.

First Embodiment
(System configuration)
The details will be described later, but the outline is as follows. FIG. 1 shows a configuration example of an authentication system according to an embodiment of the present invention. The authentication system 1 includes one or more enterprise servers 10 (10a,
10b,... 10n), customer terminal 20, automatic teller machine (hereinafter referred to as ATM) 3
0 and the public personal identification server 40 are provided. One company may have one company server 10, or if one company is providing a plurality of transaction services, etc., even if one company has multiple company servers 10 Good. In cooperation with the ATM 30 and the public personal identification server 40, one or more companies that receive an application for a transaction from a customer who uses the customer terminal 20,
It has a company server 10. The enterprise server 10 is configured to communicate with the customer terminal 20 via the network N. In addition, the enterprise server 10 includes an ATM 30 and a dedicated line PN.
Are configured to communicate. In addition, the case where the customer terminal 20 is a shared use terminal which a company owns and temporarily grants the use to the customer is also included.

The customer can use the customer terminal 20 different from the ATM 30, for example, to access the transaction service site provided by the company server 10 to make a provisional application for a transaction. Here, the provisional application in the present specification is an application procedure for the transaction, which is performed together with part of the information necessary to complete the application for the transaction. Further, the main application is a procedure for completing the application for a transaction by supplementing information not included in the temporary application. By introducing a temporary application and a main application, the information related to identity verification and other information necessary to complete the application for a transaction requiring identity verification, each terminal corresponding to the characteristics of the information It can be used and sent to the enterprise server 10. Specifically, the ATM 30 which has an IC card reading function and secures security can be used for transmission of information related to the identification of the user. on the other hand,
For transmission of other information, it is possible to use a customer terminal 20 that is easier for the customer to operate and less susceptible to the waiting time that may occur in the ATM 30.

The company server 10 that has received the temporary application transmits temporary application inquiry data including the company code and the temporary application code to the customer terminal 20. The company code is information for uniquely identifying each company that manages each company server 10. The provisional application code is information used to uniquely identify a provisional application from a customer. The code in this specification is kanji, hiragana,
It is information consisting of one or more such as katakana, alphanumeric characters and symbols. The customer operates the ATM 30 to enter the company code and the provisional application code included in the provisional application inquiry data, read the my number card, and provide the electronic certificate for signature, thereby applying the temporary application for the provisionally applied transaction. Can be completed.

The enterprise server 10 provides a website for providing the transaction service on the network N. At the website, the customer can make a tentative offer for the transaction. When the company server 10 receives the temporary application from the customer terminal 20, the company server 10 generates a temporary application code, and registers it as temporary application data together with the information on the received temporary application. Further, as a response to the provisional application from the customer terminal 20, provisional application inquiry data including a company code and a provisional application code is transmitted to the customer terminal 20.

The customer who has received the provisional application inquiry data at the customer terminal 20 operates the ATM 30 to input a provisional application code, a company code, and the like. In response to the input, the ATM 30 transmits a provisional application inquiry request including the inputted provisional application code to the enterprise server 10 specified by the inputted enterprise code. When the inquiry result indicating that the application inquiry is successful is received from the enterprise server 10, the AT
M30 asks the customer to present my number card, and transmits the read signature electronic certificate to the public personal identification server 40. Upon receipt of a certificate confirmation result indicating that the electronic certificate for signature has been successfully verified from the public personal identification server 40, the ATM 30 receives a provisional application code,
Company server 1 this application request that includes the personal verification result including the certificate verification result and the my number
Send to 0.

The company server 10 that has received the main application request from the ATM 30 can complete the main application by associating the personal verification result and the my number with the temporary application data specified by the temporary application code. The customer can complete the application without visiting the window or receiving mail at home. In addition, when the company is obligated by law to collect my number, it is possible to complete number collection by tying my number at the same time.

(Company server configuration)
FIG. 2 shows the configuration of the enterprise server 10 according to the first embodiment of the present invention. In addition, in FIG.
Although a single enterprise server 10 is assumed and only the necessary functional configuration is shown, the enterprise server 10 can be configured as part of a multi-functional distributed system of multiple computer systems.

The company server 10 is a server device having a function of communicating with the customer terminal 20 via the network N and communicating with the ATM 30 via the dedicated line PN. As shown in FIG. 2, the company server 10 includes an input unit 11, a control unit 12, a storage unit 13, and a communication unit 14.

  The input unit 11 receives various inputs to the enterprise server 10.

The control unit 12 includes an arithmetic processing unit 121 such as a CPU and an MPU, and a memory 122 such as a RAM. The arithmetic processing unit 121 operates various functional units by executing a program stored in the storage unit 13 based on various inputs. This program is CD-
It may be stored in a recording medium such as a ROM, or may be distributed via a network N and installed in a computer. The memory 122 is for temporarily storing various data necessary for operations and the like during execution of processing in the program for company server.

The storage unit 13 is configured by a storage device such as a hard disk, and records various programs necessary for executing the processing in the control unit 12 and data required for executing the various programs. In the present embodiment, the storage unit 13 is a temporary application database (DB) 131,
It is desirable to have customer DB132 and account DB133.

The temporary application DB 131 stores information on temporary applications for transactions. In one embodiment, as shown in FIG. 5, in the temporary application DB 131, temporary application code, application content, name, date of birth, gender, address, identification result, personal identification number, customer contact address, registration date, etc. Is preferably registered.

The provisional application code is information used to uniquely identify a provisional application from a customer. In one embodiment, in response to the acceptance of the provisional application from the customer terminal 20, the company server 10 generates a provisional application code.

The application content is information on a transaction for which a temporary application is to be made, and corresponding information included in the temporary application information transmitted from the customer terminal 20 is stored. For example, when the customer makes a temporary application for account opening, the application content includes the branch number where the account opening is desired, the account type, and the like.

The name, the date of birth, the gender, the address, and the customer contact information are information on the customer who makes a provisional application, and corresponding information included in the provisional application information transmitted from the customer terminal 20 is stored. The customer contact address may be a temporary application inquiry data such as an e-mail address or a mobile terminal telephone number.
It is information used to transmit to 0.

The identity verification result is information on identity verification verified using a my number card.
In the present embodiment, the personal identification result includes at least a certificate confirmation result obtained by the ATM 30 from the public personal identification server 40 that is a verifier of the signature electronic certificate. In one embodiment,
The personal identification result may further include additional information indicating whether the information read from the my number card matches the information specifying the applicant. For example, in one embodiment, the additional information may be information indicating whether the date of birth read from the my number card matches the date of birth included in the temporary application information. In another embodiment, the additional information is information indicating whether or not the person specified by the face picture information read from the my number card matches the person specified by the image information acquired by the ATM 30. It is also good.

The registration date is set as the date when the record is registered, and can be used to manage the expiration date of the provisional application.

The customer DB 132 stores information on the customer. In one embodiment, the customer DB
In 132, it is desirable that a customer code, a name, a date of birth, a gender, an address, a my number, a customer contact address and the like are registered. The customer code is information used to uniquely identify the customer. In the present embodiment, when the main application of the transaction provisionally applied by the customer is completed, the provisional application DB 13 is
The customer record is registered in the customer DB 132 based on one temporary application record.

The account DB 133 stores information on the customer's account. In one embodiment, it is desirable that a branch number, an account number, an account type, a customer code, a PIN and the like are registered in the account DB 133. In one embodiment, when the main application of the transaction provisionally applied by the customer is completed, an account record is registered in the account DB 133 based on the provisional application record of the provisional application DB 131. The PIN is information used to authenticate the customer, and is, for example, information consisting of four digits.

The communication unit 14 has a communication interface for connecting the enterprise server 10 to the dedicated line PN and the network N. For example, the communication unit 14 may be a LAN card, an analog modem, or I.
An SDN modem or the like, and an interface for connecting these with a processing unit via a transmission line such as a system bus can be realized.

Furthermore, as shown in FIG. 2, the arithmetic processing unit 121 includes, as functional units, a website providing unit 123, a web provisional application accepting unit 124, a provisional application querying unit 125, and an ATM main application accepting unit 126.
Is equipped.

The website providing unit 123 provides a website for providing a service on the network N. On the website, the customer can make a temporary application or a full application for a transaction. The website providing unit 123 is HTML (HyperText Markup).
Language page etc. is transmitted to the customer terminal 20 used by the customer, and user input etc. is received from the customer terminal 20.

The website providing unit 123 creates a corresponding web page and transmits it to the customer terminal 20 in response to an input from the customer. Specifically, for example, the web site providing unit 123 can use various web pages relating to a temporary application screen for a transaction, a main application screen for a transaction for which a temporary application has been made, etc.
Send to 0 browser.

In response to the website providing unit 123 receiving temporary application information from the customer terminal 20, the web temporary application receiving unit 124 generates a temporary application code and registers a temporary application record in the temporary application DB 131. In one embodiment, temporary application information includes application content, name, date of birth, gender, address, customer contact information, and the like. The web temporary application reception unit 124 registers a temporary application record based on the temporary application information and the generated temporary application code. As the registration date and time, the date and time when the provisional application record was registered is stored.

The web provisional application acceptance unit 124 transmits provisional application inquiry data including the company code and the provisional application code to the customer contact address of the customer. The company code is information for uniquely identifying each company that manages each company server 10. In one embodiment, the web provisional application acceptance unit 124 transmits the company code and the generated provisional application code to the customer contact address included in the provisional application information. In one embodiment, the web provisional application acceptance unit 124 may include the expiration date of the provisional application record in the provisional application inquiry data. The expiration date may be calculated based on the registration date and time of the temporary application record.

The provisional application inquiry unit 125 receives the provisional application inquiry request from the ATM 30, and makes an inquiry of the provisional application. In one embodiment, the temporary application inquiry request includes a temporary application code. Temporary application inquiry part 12
5 determines whether or not the provisional application record specified in the provisional application inquiry request exists in the provisional application DB 131, and transmits the inquiry result to the ATM 30. The query result includes information (success, failure) indicating whether the query is successful.

In one embodiment, the provisional application inquiry unit 125 determines, among the information on the provisional application record, the inquiry result.
At least one of basic 4 information (name, date of birth, gender, address) readable from the my number card may be included. By including the information from the temporary application record in the inquiry result, as described later, it is possible to verify in the ATM 30 whether or not the customer's number card for the temporary application has been read.

The main ATM application reception unit 126 receives the main application request including the temporary application code and the result of the personal identification from the ATM 30, and links the result of the personal identification to the data of the temporary application record specified by the temporary application code. In one embodiment, if the identity verification result indicates that identity verification was successful, then A
The TM application receiving unit 126 uses the customer application DB 132 and the account DB 1 based on the temporary application record.
Register each record in 33.

Finally, the main ATM application reception unit 126 displays the main application result indicating whether or not the main application is successful.
Send to TM30. For example, when the customer has made a temporary application for account opening, the branch application number of the opened account, the account number, the account type, etc. may be included in the main application result, or the branch number of the opened account separately. The account number, the account type, etc. may be transmitted to the customer terminal 20. In addition, the main application result may include a display text or the like to be displayed on the ATM 30.

(Customer terminal configuration)
FIG. 3 shows the configuration of the customer terminal 20 according to an embodiment of the present invention. The customer terminal 20 is an information processing terminal having a function of communicating with the company server 10 via the network N. Specifically, a mobile phone, a smartphone, a PC, a PDA, a tablet, and the like can be mentioned, but it is not limited thereto. As shown in FIG. 3, the customer terminal 20 includes an input unit 21 such as a touch panel that receives an operation from a user, a display unit 22 such as a display, and a control unit 2 including a CPU and a memory.
3, a storage unit 24, a communication unit 25 for connecting to the network N, and the like. Control unit 2
The function 3 functions as a temporary application inquiry data receiving unit 231 when the program stored in the storage unit 24 is read out to the RAM and executed by the CPU.

The provisional application inquiry data receiving unit 231 receives provisional application inquiry data from the company server 10, and
Various information included in the provisional application inquiry data is displayed on the display unit 22. In the present embodiment, the provisional application inquiry data includes a company code and a provisional application code.

(ATM configuration)
FIG. 4 shows the configuration of the ATM 30 according to the first embodiment of the present invention. The ATM 30 is an information processing apparatus provided with a function of communicating with the company server 10 and the public personal identification server 40 via the dedicated line PN. The ATM 30 includes an input unit 31 such as a touch panel that receives an input from a user, a display unit 32 such as a display, a control unit 33 including a CPU and a memory, a storage unit 34,
Communication unit 35 for connection to dedicated line PN, IC card reader / writer 36, and imaging unit 3
It has seven.

The control unit 33 reads the program stored in the storage unit 34 into the RAM,
Functions as a flow control unit 331, an inquiry request transmission unit 332, a card reading unit 333, a verification request unit 334, and a main application transmission unit 335.

The flow control unit 331 controls the flow of the transaction application, and the display unit 32 displays a screen according to the flow.
Display on The flow control unit 331 generates the main application start screen for acquiring the company code and the temporary application code in response to receiving the main application start instruction from the user via the input unit 31 and causes the display unit 32 to generate the main application start screen. indicate.

Upon receipt of the inquiry result indicating that the inquiry is successful as a response to the temporary application inquiry request from the inquiry request transmission unit 332 described later, the flow control unit 331 urges the IC card reader / writer 36 to present the my number card, A personal identification number screen for acquiring the personal identification number of the electronic certificate for signature of the my number card is generated and displayed on the display unit 32.

Furthermore, when a main application result indicating that the main application is successful is received as a response to the transmission of the main application request from the main application transmission unit 335 described later, the flow control unit 331 displays an application result screen based on the main application result. Are generated and displayed on the display unit 32.

The inquiry request transmission unit 332 transmits a provisional application inquiry request to the company server 10, and receives an inquiry result as a response. In one embodiment, as described above, the provisional application inquiry request includes a provisional application code. The provisional application inquiry request transmission unit 332 generates a provisional application inquiry request including the provisional application code based on the input received from the user via the input unit 41, and transmits the temporary application inquiry request to the company server 10 specified by the company code. .

In one embodiment, as described above, the query result includes information (success, failure) indicating whether the query is successful. In one embodiment, the inquiry result further includes applicant information including at least one of name, date of birth, gender, and address among the information of the provisional application record specified in the provisional application inquiry request. In addition, if the additional verification of whether the information for specifying the applicant included in the temporary application information and the information included in the my number card information read by the card reading unit 333 match in the ATM 30 is not performed, the applicant information is It is not always necessary.

The card reading unit 333 reads my number card information from the my number card using the password of the electronic certificate for signature of the my number card received from the user via the input unit 41. In one embodiment, the my number card information includes one or more of a signature electronic certificate, and a name, a date of birth, a gender, an address, a face photograph, and a my number.

The verification request unit 334 transmits the read signature electronic certificate to the public personal identification server 40, and receives a certificate confirmation result as a response. In one embodiment, the certificate verification result indicates whether the signature electronic certificate has been validated successfully. In addition, prior to the validity check of the electronic certificate for signature to the public personal identification server 40, the verification request unit 334 captures the applicant information and / or the image of the ATM 30 included in the inquiry result received by the inquiry request transmission unit 332. The addition verification may be performed using the image information acquired by the unit 37 and the information corresponding to the my number card information read by the card reading unit 333.

For example, in one embodiment, the verification request unit 334 may verify whether the date of birth read from the my number card matches the date of birth included in the temporary application information. Also,
In addition to additional verification using temporary application information, or instead of additional verification using temporary application information,
The verification request unit 334 may verify whether or not the person specified by the face picture information read from the my number card matches the person specified by the image information acquired by the imaging unit 37 of the ATM 30. Here, the verification request unit 334 can use the image information acquired at an arbitrary timing before verification.

By performing additional verification using the provisional application information, it is possible to verify at the ATM 30 whether or not the customer's number card for the provisional application has been read. Also, the imaging unit 37
By performing additional verification using the image information acquired in step (c), it can be verified that the person specified by the my number card has made a main application.

The main application transmission unit 335 transmits a main application request including a provisional application code, an identification result, and the like to the company server 10, and receives the main application result as a response. As described above, in the present embodiment,
The personal identification result includes at least a certificate confirmation result obtained by the ATM 30 from the public personal identification server 40 that is a verifier of the signature electronic certificate. In one embodiment, the personal identification result may further include additional information indicating whether the information read from the my number card matches the information specifying the applicant included in the temporary application information. For example, the identification result may include additional information indicating whether the date of birth read from the my number card matches the date of birth included in the temporary application information. Also, the main application transmission unit 335 may include the my number in the main application request.

(Public personal identification server configuration)
The public personal identification server 40 is a server device having a function of communicating with the ATM 30 through the dedicated line PN, and is managed by a verifier such as an administrative organization or a certified private enterprise. The public personal identification server 40 receives the signature electronic certificate from the ATM 30, and verifies the validity of the received signature electronic certificate. After the validity confirmation, the public personal identification server 40 transmits a certificate confirmation result to the ATM 30 as a response. In one embodiment, the certificate verification result indicates whether the signature electronic certificate has been validated successfully.

(Flow of processing)
6 and 7 show an example of the authentication process according to the first embodiment of the present invention. In the first embodiment, an example will be described in which the customer A accesses the website of the company server 10 of the bank 1 from the customer terminal 20 and makes a temporary application, and then makes a main application at the ATM 30. First, with reference to FIG. 6, a process performed by the authentication system 1 when a customer makes a provisional application using the customer terminal 20 will be described. Next, with reference to FIG. 7, the process executed by the authentication system 1 when the customer makes the main application at the ATM 30 will be described.

(Provisional application using customer terminal 20)
When the customer A accesses the transaction service site provided by the company server 10 using the browser of the customer terminal 20 (S601, S602), the website providing unit 12 of the company server 10
3 transmits a web page according to the accessed URL to the customer terminal 20 (S6
03). The customer terminal 20 having received the web page displays the web page (S604)
.

The temporary application information input on the temporary application screen is displayed on the customer terminal 20 in accordance with the operation of the customer on the browser.
(S605), the temporary web application acceptance unit 124 of the company server 10 generates a temporary application code (S606), and registers a temporary application record in the temporary application DB 131 (S607).
). In the present embodiment, the provisional application information includes application content, name, date of birth, gender, address, customer contact information, and the like. On the basis of the temporary application information transmitted in S605 and the temporary application code "111" generated in S606, the web temporary application reception unit 124 registers the temporary application record shown in FIG. 5A in S607. I assume.

Subsequently, the web provisional application acceptance unit 124 transmits, to the customer terminal 20, provisional application inquiry data required for the main application of the transaction (S608). In the present embodiment, the web temporary application receiving unit 124 transmits temporary application inquiry data including the company code “001” of the bank 1 and the temporary application code “111” to the customer contact address of the customer A. The provisional application inquiry data receiving unit 231 of the customer terminal 20 that has received the provisional application inquiry data displays various information included in the provisional application inquiry data on the display unit 22 (S
609).

(This application at ATM 30)
FIG. 7 is a flowchart showing an example of processing of the authentication system 1 according to the first embodiment of the present invention. In the present embodiment, the customer A who received the provisional application inquiry data at the customer terminal 20 is an AT.
It is assumed that the main application of the transaction has been started by operating M30.

When the ATM 30 receives the main application start instruction from the user, the flow control unit 33 of the ATM 30
1 generates a main application start screen for acquiring a company code and a provisional application code, and displays 3
2 is displayed (S701). When the customer A inputs the company code and the provisional application code along the screen, the inquiry request transmission unit 332 of the ATM 30 transmits a provisional application inquiry request to the company server 10 (S702). In the present embodiment, the inquiry request transmission unit 332 is a temporary application code “111”.
It is assumed that a provisional application query request including the above is transmitted to the enterprise server 10 of the bank 1 identified by the enterprise code “001”.

When the company server 10 receives the temporary application inquiry request (S703), the temporary application inquiry unit 125 of the company server 10 performs a temporary application inquiry. (S704). In the present embodiment, the provisional application inquiry unit 1
Reference numeral 25 refers to the provisional application DB 131 to determine whether a provisional application record specified by the provisional application code of the provisional application inquiry request exists. Next, the provisional application inquiry unit 125 AT
It transmits to M30 (S705). In the present embodiment, the query result includes information indicating whether the query is successful (success or failure) and the date of birth of the provisional application record, and in this case, the information indicating that the query is successful and Inquiry result including birth date "January 1, 1980" is ATM3
Suppose that it was sent to 0.

When the inquiry request transmission unit 332 receives the inquiry result (S706), the flow control unit 331
If the inquiry result indicates that the inquiry is successful, the IC card reader / writer 36 is prompted to present the my number card, and a PIN number screen for acquiring the PIN number of the electronic certificate for signature of the my number card is generated and displayed It is displayed on the part 32 (S 707). In the present embodiment, since the inquiry result indicates that the inquiry is successful, the above-mentioned personal identification number screen is displayed on the display unit 32, the customer A presents the my number card to the IC card reader / writer 36, and the input unit 41 is displayed. It is assumed that a password has been entered via

When the ATM 30 receives the personal identification number (S 708), the card reading unit 333 reads my number card information from the my number card, using the received personal identification number (S 709).
). In the present embodiment, the my number card information includes a signature electronic certificate, a name, a date of birth, a gender, an address, and a my number. In another embodiment, the my number card information further includes a face picture.

When applicant information is included in the inquiry result received by the inquiry request transmission unit 332 in S706, the verification request unit 334 corresponds to the applicant information included in the inquiry result received in S706 and the my number card information read in S709. It is verified whether or not the information to be matched (S71)
0). In this embodiment, since the inquiry result including the date of birth “January 1, 1980” is received in S706, the verification request unit 334 determines that the date of birth of the inquiry result is “January 1, 1980”. ,
It is verified whether or not the corresponding information in the my number card information matches, and it is verified that the two information matches.

The verification request unit 334 transmits the read signature electronic certificate to the public personal identification server 40 (S711, S712), and receives a certificate confirmation result as a response (S713, S714)
). In the present embodiment, it is assumed that a certificate confirmation result indicating that the validity check of the signature electronic certificate has succeeded is received.

Subsequently, the main application transmission unit 335 of the ATM 30 transmits a main application request including the temporary application code, the personal identification result, and the my number to the company server 10 (S715). In the present embodiment,
In addition to the certificate confirmation result obtained from the public personal identification server 40 in S714, the main application transmission unit 335 transmits the personal confirmation result including additional information indicating the information verified in S710. here,
The main application transmission unit 335 sends the main application request including the temporary application code “111”, the result of the identification verification “certification confirmation result: success, additional information: date of birth match” and my number “123456789012” to the company server 10 It shall be sent.

When the main ATM application reception unit 126 of the company server 10 receives the main application request (S716),
The identity verification result is linked to the data of the temporary application record specified by the temporary application code (S717
). In the present embodiment, when the personal verification result indicates that the personal verification is successful, the main ATM application receiving unit 126 registers the record in the customer DB 132 and the account DB 133 based on the temporary application record.

Here, since the result of identity verification indicates that identity verification has succeeded, the ATM main application acceptance unit 1
26 generates a customer record including a customer code “1234”, a name “customer A”, a my number “123456789012” and the like in the customer DB 132 based on the provisional application record, and a bank number “000” in the account DB 133 It is assumed that an account record including an account number “1234567”, an account type “normal”, a customer code “1234”, a PIN “XXXX” and the like is generated. The PIN may be generated by the company server 10 or may be input by the customer on the provisional application screen.

Finally, the main ATM application reception unit 126 displays the main application result indicating whether or not the main application is successful.
It transmits to TM30 (S718). In the present embodiment, the main ATM application reception section 126 includes the display text “The main application has been completed. The account number etc. of the opened account will be sent to the customer's contact information.” This application shows the success of the AT AT
It shall be sent to M30.

When the ATM 30 receives the main application result from the company server 10 (S719), the flow control unit 331 generates an application result screen based on the main application result and displays it on the display unit 32 (S72)
0). In the present embodiment, the flow control unit 331 generates an application result screen based on the display text included in the main application result and displays the screen on the display unit 32. Thereafter, the company server 10 transmits information on the main application to the customer terminal 20. Here, the company server 10 transmits the account number or the like of the account to the customer contact address of the customer A.

In the present embodiment, an example in which the ATM 30 transmits the my number to the company server 10 in response to a successful identification is described. However, in the alternative embodiment, the ATM 30 does not transmit the my number, and a temporary application is made. The application request including the code and the identification result may be transmitted to the company server 10.

As described above, according to the present embodiment, the customer who wants to open an account, which is a transaction requiring identity verification, makes a request based on the provisional application requested by using the customer terminal 20 to the company server 10 of the bank 1 managing the desired account. This application can be completed at the ATM 30 linked with the company server 10.

Second Embodiment
In the first embodiment, the customer A who has tentatively applied for a transaction using the customer terminal 20 is the ATM 30.
Explained an example of making this application. In the second embodiment, an example will be described in which a customer B who has made a temporary application for a transaction at the ATM 30 makes a main application using the customer terminal 20. In the second embodiment, the description of matters common to the first embodiment will be omitted, and only different points will be described.

(Company server configuration)
In the second embodiment, as shown in FIG. 8, the arithmetic processing unit 121 of the company server 10 includes, as functional units, a website providing unit 123, an ATM provisional application accepting unit 127, and a main web application accepting unit 128. . The website providing unit 123 is the same as in the first embodiment, and thus the description thereof is omitted here.

When receiving the temporary application request including the result of the personal identification from the ATM 30, the ATM temporary application reception unit 127 generates a temporary application code and registers a temporary application record in the temporary application DB 131. In one embodiment, the ATM provisional application reception unit 127 registers a provisional application record based on the received personal identification result and the like and the generated provisional application code. Further, the ATM provisional application acceptance unit 127 transmits the generated provisional application code to the ATM 30.

When the temporary application code and the main application information are transmitted from the customer terminal 20, the main application receiving section 128 links the main application information to the person verification result of the temporary application record specified by the temporary application code. In one embodiment, the main web application acceptance unit 128 registers records in the customer DB 132 and the account DB 133 based on the temporary application record and the main application information.

Next, the main web application receiving unit 128 delivers the main application result indicating whether the main application has succeeded to the website providing unit 123. In one embodiment, the main application receiving unit 128 is configured to provide the website application unit 123 with the main application result including the branch number, account number, account type, etc. of the opened account.
By passing the information to the client terminal 20, it is possible to present a web page according to the application result on the customer terminal 20.

(Customer terminal configuration)
In the second embodiment, as shown in FIG. 9, the control unit 23 of the customer terminal 20 reads a program stored in the storage unit 24 into the RAM and executes the program by the CPU to read a two-dimensional code. It functions as the unit 232. Moreover, the customer terminal 20 is provided with the imaging part 26 etc. which acquire the image of a two-dimensional code.

The two-dimensional code reading unit 232 reads two-dimensional code information from the image of the two-dimensional code acquired by the imaging unit 26. In one embodiment, two-dimensional code information includes name, date of birth, gender,
The address, the temporary application code, and the link information to the web site of the company server 10 are included, and the two-dimensional code reading unit 232 accesses the web site of the company server 10 based on the link information. At the time of access, the two-dimensional code reading unit 232 is a name included in two-dimensional code information
The date of birth, gender, address, and provisional application code are transmitted to the company server 10.

(ATM configuration)
In the second embodiment, as shown in FIG. 10, the control unit 33 of the ATM 30 functions as a functional unit,
A flow control unit 331, a card reading unit 333, a verification request unit 334, a provisional application transmission unit 336, and a two-dimensional code generation unit 337 are provided.

The flow control unit 331 controls the flow of the transaction application as in the first embodiment, and displays a screen according to the flow on the display unit 32. In the second embodiment, the flow control unit 331 generates a temporary application start screen for selecting a company of the application destination in response to receiving a temporary application start instruction from the user via the input unit 31. Displayed on the display unit 32.

When the selection of the company of the application destination in the temporary application start screen is received, the flow control unit 331
The C card reader / writer 36 is prompted to present the my number card, and a password number screen for acquiring the password number of the electronic certificate for signature of the my number card is generated and displayed on the display unit 32.

Furthermore, when the two-dimensional code generation unit 337 described later generates a two-dimensional code, the flow control unit 331 generates a main application transition screen including the generated two-dimensional code and displays the main application transition screen on the display unit 32.

The card reader 333 is the same as that of the first embodiment, and thus the description thereof is omitted here. The verification request unit 334 differs in that additional verification using information included in the inquiry result is not performed, but the other functions are the same as in the first embodiment. The additional verification using the image information acquired by the imaging unit 37 may or may not be performed by the verification request unit 334 as in the first embodiment.

The provisional application transmission unit 336 transmits a provisional application request including the result of identification of the person to the company server 10,
In response, a provisional application code is received. In the present embodiment, the result of identity verification is ATM 30.
Includes the certificate verification result obtained from the public personal identification server 40, which is a verifier of the signature electronic certificate. In addition, the temporary application transmission unit 336 may transmit the my number together with the result of the identification.

The two-dimensional code generation unit 337 generates a two-dimensional code including link information for completing the main application of the transaction provisionally applied at the ATM 30. In this embodiment, the two-dimensional code generation unit 337 is based on the basic 4 information (name, date of birth, gender, address) read from the my number card, the provisional application code, and the link information to the website of the company server 10. Generate two-dimensional code.

(Flow of processing)
11 and 12 show an example of an authentication process according to the second embodiment of the present invention. First, Figure 1
The process executed by the authentication system 1 when the customer makes a temporary application at the ATM 30 will be described with reference to FIG. Next, with reference to FIG. 12, a process performed by the authentication system 1 when the customer makes a main application using the customer terminal 20 will be described.

(Provisional application with ATM 30)
When the ATM 30 receives a temporary application start instruction from the user, the flow controller 33 of the ATM 30
1 generates a temporary application start screen for selecting a company of application destination and displays it on the display unit 32 (
S1101). When the customer B selects the application destination company on the temporary application start screen (S110
2) The flow control unit 331 urges the presentation of the my number card to the IC card reader / writer 36, and generates a personal identification number screen for acquiring the personal identification number of the electronic certificate for signature of the my number card It displays (S707). Here, customer B is the company code "
It is assumed that the bank 1 specified by "001" is selected as the application destination company. Then, customer B
It is assumed that the personal identification number card is presented to the IC card reader / writer 36 and the personal identification number is input through the input unit 41.

When the ATM 30 receives the personal identification number (S 708), the card reading unit 333 reads my number card information from the my number card, using the received personal identification number (S 709).
). In the present embodiment, the my number card information includes a signature electronic certificate, a name, a date of birth, a gender, an address, and a my number.

The verification request unit 334 transmits the read signature electronic certificate to the public personal identification server 40 (S711, S712), and receives a certificate confirmation result as a response (S713, S714)
). In the present embodiment, it is assumed that a certificate confirmation result indicating that the validity check of the signature electronic certificate has succeeded is received.

Subsequently, the provisional application transmission unit 336 of the ATM 30 transmits a provisional application request including the identification result and the my number to the company server 10 (S1103). Here, the provisional application transmission unit 336
But identity verification result "certificate confirmation result: success" and my number "22345678901
It is assumed that the provisional application request including “2” is transmitted to the company server 10 of the bank 1 selected in S1102.

When the company server 10 receives the temporary application request, the ATM temporary application acceptance unit 12 of the company server 10
7 generates a temporary application code (S1104), and registers a temporary application record in the temporary application DB 131 (S1105). Here, it is assumed that the ATM provisional application acceptance unit 127 has registered the provisional application record shown in FIG. 5 (B) based on the received personal identification result, the my number, and the generated provisional application code.

In addition, the ATM provisional application acceptance unit 127 transmits the generated provisional application code to the ATM 30 (
S1106). Here, the ATM provisional application acceptance unit 127 generates the provisional application code “222
Is sent to the ATM 30.

When the ATM 30 receives the provisional application code (S1107), the two-dimensional code generation unit 337 of the ATM 30 generates a two-dimensional code including link information for completing the main application of the provisionally applied transaction (S1108). In the present embodiment, the two-dimensional code generation unit 337 includes basic 4 information (name, date of birth, gender, address) read from the my number card, a provisional application code,
The two-dimensional code is generated based on the link information to the website of the enterprise server 10. Here, the two-dimensional code generation unit 337 has a name “customer B” and a date of birth “February 2, 1970”.
, Gender "male", address "Chuo Ward, Tokyo ...", provisional application code "222", company server 10
The two-dimensional code is generated based on the link information "http: // bank1 / ..." to the website of.

Finally, the flow control unit 331 generates a main application transition screen including a two-dimensional code and displays it on the display unit 32 (S1109).

(This application using customer terminal 20)
Next, with reference to FIG. 12, a process performed by the authentication system 1 when the customer B applies for a transaction by using the customer terminal 20 from the application transition screen displayed on the ATM 30 will be described.

When the imaging unit 26 acquires an image of a two-dimensional code by the customer B pointing the imaging unit 26 of the customer terminal 20 to the display unit 32 of the ATM 30, the two-dimensional code reading unit 232 of the customer terminal 20
Reads two-dimensional code information from the image of the two-dimensional code acquired by the imaging unit 26 (S12
01), based on the link information included in the two-dimensional code information, to access the website of the company server 10 (S1202).

In the present embodiment, as described above, the two-dimensional code information includes the name, date of birth, gender, address, temporary application code, and link information to the web site of the company server 10, The dimension code reading unit 232 transmits the name, the date of birth, the gender, the address, and the temporary application code included in the two-dimensional code information to the company server 10. Here, the two-dimensional code reading unit 23
2 accesses the website "http: // bank1 / ..." of the company server 10, the name "Customer B", the date of birth "February 2, 1970", the sex "male", the address " It is assumed that the Chuo-ku, Tokyo,... And the provisional application code “222” are transmitted to the company server 10.

When access from the customer terminal 20 to the main application site provided by the company server 10 is received (
S1203), the website providing unit 123 of the company server 10 receives the accessed URL
The web page corresponding to the above is transmitted to the customer terminal 20 (S1204). The received temporary application code is associated with the web page to be transmitted.

The website providing unit 123 may save the trouble of the customer's input by creating a web page using the received name, date of birth, gender, and address. In an alternative embodiment, the enterprise server 10 agrees with the information read from the my number card and the information included in the application information by asking the customer to input the information without including the received partial information in the web page. It may be verified whether or not to. The customer terminal 20 having received the web page displays the web page (S1205).

When the temporary application code associated with the web page and the main application information input on the main application screen are transmitted from the customer terminal 20 in response to the operation of the client by the browser (S1206, S12
07), the main application receiving section 128 of the company server 10 links the main application information to the result of identity verification of the temporary application record specified by the temporary application code (S1208). In the present embodiment, the main web application acceptance unit 128 uses the customer DB 132 based on the temporary application record and the main application information.
And each record is registered into account DB133.

Next, the main web application receiving unit 128 delivers the main application result indicating whether the main application has succeeded to the website providing unit 123. In the present embodiment, the main web application acceptance unit 128 uses the website application section 123 to submit the main application result including the branch number, account number, account type, etc. of the opened account.
The web site providing unit 123 passes the web page corresponding to the application result to the customer terminal 20.
To (S1209). The customer terminal 20 having received the web page displays the web page of the main application result (S1210).

In the present embodiment, an example in which the ATM 30 transmits the my number to the company server 10 in response to the success of the certificate confirmation has been described, but in the alternative embodiment, the ATM 30 is temporarily transmitted without transmitting the my number. A provisional application request including the application code and the identification result may be transmitted to the company server 10.

As described above, according to the present embodiment, the customer who wants to open an account, which is a transaction requiring identity verification, uses the temporary application requested from the ATM 30 to the company server 10 of the bank 1 that manages the desired account. This application can be completed using 20.

Third Embodiment
In the first embodiment, an example in which the temporary application code is transmitted to the customer A who has made a temporary application for a transaction using the customer terminal 20, and then the main application for the transaction specified by the temporary application code is made from the ATM 30 . In the third embodiment, in place of the temporary application code, the IC card is sent to the customer C who has made a temporary application for a transaction using the customer terminal 20, and then the main application for the transaction specified by the IC card, ie, An example in which the IC card is activated from the ATM 30 will be described. In the third embodiment, the description of matters in common with the first embodiment is omitted, and only different points will be described.

(Company server configuration)
In the third embodiment, as shown in FIG. 13, the arithmetic processing unit 121 of the company server 10 includes, as functional units, the website providing unit 123, the card application accepting unit 1241, and the card application inquiry unit 1
251 and an activation request receiving unit 1261. Website Providing Unit 123
The second embodiment is the same as the first embodiment, so the description is omitted here. Further, in the third embodiment, it is desirable that the storage unit 13 have the card DB 134.

The card DB 134 stores information on the card. In one embodiment, it is desirable that a card code, a name, a date of birth, a gender, an address, a PIN, a status, and the like are registered in the card DB 134. The card code is information used to uniquely identify a card. The PIN is information used to authenticate the customer holding the card, and is, for example, information consisting of four digits. The status is information (before activation, after activation) indicating whether or not the card is activated.

The card application accepting unit 1241 generates a temporary PIN of the card to be issued in response to the website providing unit 123 receiving the card application information from the customer terminal 20, and the card DB 13
Register the card record in 4. In one embodiment, the card application information includes application content, name, date of birth, gender, address, and the like. The card application acceptance unit 1241 registers a card record based on the card application information and the generated temporary PIN. In the status of the card record, information indicating that it is before activation is stored.

The card application inquiry unit 1251 receives a card application inquiry request from the ATM 30, and performs card application inquiry. In one embodiment, the card application inquiry request includes a card code and a PIN
Is included. The card application inquiry unit 1251 determines whether or not the card record specified by the card application inquiry request exists in the card DB 134, and transmits the inquiry result to the ATM 30.
The query result includes information (success, failure) indicating whether the query is successful.

In one embodiment, the card application inquiry unit 1251 includes at least one of basic 4 information (name, date of birth, gender, address) readable from the my number card among the information of the card record in the inquiry result. It is also good. By including the information from the card record in the inquiry result, it is possible to verify in the ATM 30 whether or not the customer's number card of the customer who made the card application has been read.

The activation request receiving unit 1261 receives an activation request including a card code, a PIN, an identification result and the like from the ATM 30, and associates the identification result with data of a card record specified by the card code. In one embodiment, if the identity verification result indicates that the identity verification is successful, the activation request accepting unit 1261 determines whether the PIN of the card record is the PIN.
And update the status. Further, the activation request receiving unit 1261 transmits, to the ATM 30, an activation result indicating whether activation is successful.

(ATM configuration)
In the third embodiment, as shown in FIG. 14, the control unit 33 of the ATM 30 functions as a functional unit,
A flow control unit 331, a card inquiry request transmission unit 3321, a card reading unit 333, a verification request unit 334, an activation request transmission unit 3351, and a card writing unit 338 are provided.

The flow control unit 331 controls the flow of the transaction application as in the first embodiment, and displays a screen according to the flow on the display unit 32. In the third embodiment, in response to receiving an activation start instruction from the user via the input unit 31, the flow control unit 331 urges the IC card to be presented to the IC card reader / writer 36, and acquires a temporary PIN. The activation start screen for generating the image is generated and displayed on the display unit 32.

Upon receipt of the inquiry result indicating that the inquiry is successful as a response to the card application inquiry request from the card inquiry request transmission unit 3321 described later, the flow control unit 331 urges the IC card reader / writer 36 to present my number card. The personal identification number screen for acquiring the personal identification number of the electronic certificate for signature of my number card is generated and displayed on the display unit 32.

In addition, when the verification request unit 334 receives a certificate confirmation result indicating that the validity of the digital certificate for signature verification is successful, the flow control unit 331 generates a PIN screen for acquiring a new PIN to be written to the IC card. It is generated and displayed on the display unit 32.

Furthermore, when receiving an activation result indicating that activation has succeeded as a response to transmission of an activation request from the activation request transmitting unit 3351 described later,
The flow control unit 331 generates an activation result screen based on the activation result and displays it on the display unit 32.

The card inquiry request transmission unit 3321 transmits a card application inquiry request to the company server 10 specified by the company code, and receives the inquiry result as a response. In the present embodiment, as described above, the card application inquiry request includes the card code and the PIN. The card inquiry request transmission unit 3321 generates a card application inquiry request including a card code and a PIN based on the input received from the user via the input unit 41 and the IC card information read by the card reading unit 333 to generate an IC It transmits to the company server 10 identified by the company code included in the card information. Further, in the present embodiment, as described above, the query result includes information (success or failure) indicating whether the query is successful. In one embodiment, the inquiry result includes at least one of name, date of birth, gender, and address among the information of the card record identified in the card application inquiry request.
Further includes applicant information including

In the third embodiment, in addition to the reading of the my number card information from the my number card, the card reading unit 333 is the PI of the IC card received from the user via the input unit 41.
The IC card information is read from the IC card using N. In one embodiment, the IC card information includes a company code and a card code.

The verification request unit 334 is the same as that of the first embodiment, and thus the description thereof is omitted here.

The activation request transmission unit 3351 transmits an activation request including a card code, a PIN, an identification result, and the like to the company server 10, and receives the activation result as a response. As described above, in the present embodiment, at least the ATM 30 is used as the identification result.
Includes the certificate verification result obtained from the public personal identification server 40, which is a verifier of the signature electronic certificate.

In one embodiment, the personal identification result may further include additional information indicating whether the information read from the my number card matches the information included in the information specifying the applicant. For example, in one embodiment, the additional information may be information indicating whether the date of birth read from the my number card matches the date of birth included in the card application information.
In another embodiment, the additional information is information indicating whether or not the person specified by the face picture information read from the my number card matches the person specified by the image information acquired by the ATM 30. It is also good. Further, the activation request transmission unit 3351 may include the my number in the activation request.

The card writing unit 338 writes a PIN on the IC card when an activation result indicating that activation is successful is transmitted from the company server 10. In one embodiment, the card writing unit 338 sends the PIN sent by the activation request sending unit 3351 to the IC card.
Write

(Flow of processing)
FIG.15 and FIG.16 shows an example of the authentication process which concerns on 3rd Embodiment of this invention. First, Figure 1
A process performed by the authentication system 1 when a customer applies for a card using the customer terminal 20 will be described with reference to FIG. Next, referring to FIG.
A process performed by the authentication system 1 when activating a card will be described.

(Card application using customer terminal 20)
When the customer C accesses the transaction service site provided by the company server 10 of the card company 1 using the browser of the customer terminal 20 (S601, S602), the website providing unit 123 of the company server 10 receives the accessed URL. A corresponding web page is transmitted to the customer terminal 20 (S603). The customer terminal 20 having received the web page displays the web page (S604).

When the card application information input on the card application screen is transmitted from the customer terminal 20 in response to the operation of the customer by the browser (S1501), the card application acceptance unit 1241 of the company server 10
The temporary PIN of the card to be issued is generated (S1502), and the card record is registered in the card DB 134 (S1503). In the present embodiment, the card application information includes an application content, a name, a date of birth, a gender, an address, and the like. Here, it is assumed that the card application acceptance unit 1241 has registered the card record specified by the card code “12345” based on the card application information and the generated temporary PIN “YYYY”. In the status of the card record, it is assumed that information indicating that it is before activation is stored.

Thereafter, based on the card DB 134, the card company 1 issues the issued IC card and the provisional P
Send the document in which IN is described to the address of customer C.

(Activate at ATM 30)
FIG. 16 is a flowchart showing an example of processing of the authentication system 1 according to the third embodiment of the present invention. In the present embodiment, it is assumed that the customer C who receives the document in which the IC card and the temporary PIN are written operates the ATM 30 to start the activation of the IC card.

When the ATM 30 receives an activation start instruction from the user, the flow control unit 331 of the ATM 30 urges the IC card reader / writer 36 to present the IC card, generates an activation start screen for acquiring a temporary PIN, and displays the display unit 32. (S1601).
When the customer C presents the IC card to the IC card reader / writer 36 along the screen and inputs a temporary PIN (S1602), the card reading unit 333 of the ATM 30 uses the received PIN to transmit IC card information to IC card information. Is read (S1603).

Subsequently, the card inquiry request transmission unit 3321 of the ATM 30 transmits a card application inquiry request to the company server 10 (S1604). Here, the card inquiry request transmission unit 3321 transmits the card application inquiry request including the card code “12345” and the PIN “YYYY” to the company server 10 of the card company 1 specified by the company code “002”. Do.

When the company server 10 receives the card application inquiry request (S1605), the card application inquiry unit 1251 of the company server 10 inquires for a card application. (S1606). In the present embodiment, the card application inquiry unit 1251 refers to the card DB 134 to determine whether there is a temporary application record specified in the card application inquiry request. Next, card application inquiry section 125
1 transmits the inquiry result to the ATM 30 (S1607). Here, card application inquiry part 1
It is assumed that the information 251 indicates that the inquiry has succeeded and the inquiry result including the date of birth "March 3, 1990".

When the card inquiry request transmission unit 3321 receives the inquiry result (S1608), the flow control unit 331 prompts the IC card reader / writer 36 to present the my number card when the inquiry result indicates that the inquiry is successful, and the my number card The personal identification number screen for acquiring the personal identification number of the signature electronic certificate is generated and displayed on the display unit 32 (S 707). Figure 1
Since S707 to S714 of 6 are the same as S707 to S714 in FIG. 7, the description will be omitted here. In S714, it is assumed that a certificate confirmation result indicating that the validity check of the signature electronic certificate has succeeded is received.

Subsequently, the flow control unit 331 executes PI to acquire a new PIN to be written to the IC card.
The N screen is generated and displayed on the display unit 32 (S1609). Customer C, new PI along the screen
When N is input (S1610), the activation request transmission unit 3351 of the ATM 30 transmits an activation request including the card code, the PIN, and the result of the person verification to the company server 10 (S1611). Here, the activation request transmission unit 3351 sets the card code “
It is assumed that an activation request including 12345 ", PIN" ZZ ZZ "and an identity verification result" certificate validation result: success, additional information: date of birth match "is sent to the enterprise server 10.

When the activation request receiving unit 1261 of the company server 10 receives the activation request (S1612), the identification result is associated with the data of the card record specified by the card code included in the activation request (S1613). In the present embodiment, when the personal identification result indicates that the personal identification is successful, the activation request receiving unit 1261 updates the PIN and the status of the card record with the received PIN and information indicating after activation. Finally, the activation request receiving unit 1261 transmits an activation result indicating whether the activation has succeeded to the ATM 30 (S1614).

When an activation result indicating that activation is successful is transmitted from the company server 10 (S1615), the card writing unit 338 of the ATM 30 writes a PIN in the IC card. Here, the card writing unit 338 is used to transmit the activation request transmission unit 33 to the IC card.
Write the PIN "ZZZZ" sent by 51. Thereafter, the flow control unit 331 generates an activation result screen based on the activation result and displays it on the display unit 32 (S1).
617).

In the present embodiment, an example in which the ATM 30 transmits an activation request not including the my number to the company server 10 in response to a successful identification is described. However, in the alternative embodiment, the ATM 30 includes the my number. The request may be sent to the enterprise server 10.

As described above, according to the present embodiment, a customer who desires card issuance, which is a transaction requiring identity verification, requests the company server 10 of the card company 1 that is the issuer of the desired card using the customer terminal 20. Based on the application, this application can be completed at the ATM 30 linked with the company server 10.

1 ... authentication system, 10 ... company server (transaction server), 11 ... input unit, 12 ... control unit, 1
21 Operation processing unit 123 Website provision unit 124 Web provisional application reception unit 124
1 ... card application acceptance unit, 125 ... temporary application inquiry unit, 1251 ... card application inquiry unit, 126 ...
ATM main application reception unit, 1261 ... activation request reception unit, 127 ... ATM temporary application reception unit, 128 ... Web main application reception unit, 122 ... memory, 13 ... storage unit, 131 ... temporary application DB
, 132: customer DB, 133: account DB, 134: card DB, 14: communication unit, 20: customer terminal, 21: input unit, 22: display unit, 23: control unit, 231: temporary application inquiry data reception unit, 232: two-dimensional code reading unit, 24: storage unit, 25: communication unit, 26: imaging unit, 30: A
TM (payment and payment apparatus), 31 ... input unit, 32 ... display unit, 33 ... control unit, 331 ... flow control unit, 332 ... inquiry request transmission unit, 3321 ... card inquiry request transmission unit, 333 ... card reading unit, 334 ... Verification request unit, 335 ... Main application transmission unit, 3351 ... Activation request transmission unit,
336 ... temporary application transmission unit, 337 ... two-dimensional code generation unit, 338 ... card writing unit, 34 ... storage unit, 35 ... communication unit, 36 ... IC card reader / writer, 37 ... imaging unit 40 ... public personal identification server , N ... network, PN ... dedicated line

Claims (6)

A card reader,
A card inquiry request transmission unit for transmitting a card application inquiry request including the card code read from the first card and the first PIN, and receiving an inquiry result as a response;
A verification request unit that transmits the electronic certificate included in the card information read from the second card to the authentication server, and receives a certificate confirmation result as a response;
If the inquiry result indicates that the inquiry is successful, the activation request transmitting unit transmits the activation request including the card code, the second PIN, and the certificate confirmation result to the transaction server, and receives the activation result as a response. When,
A card writing unit that writes the second PIN on the first card when an activation result indicating that activation is successful is transmitted from the transaction server. The inquiry result includes applicant information,
The deposit and withdrawal apparatus according to claim 1 , wherein the verification request unit verifies whether the applicant information and the corresponding information of the card information match. The verification request unit verifies whether the person specified by the image information acquired by the imaging unit of the deposit and withdrawal device matches the person specified by the face photo information included in the card information. The deposit and withdrawal apparatus according to item 1 or 2 .   A computer implemented method,
  Reading the card code from the first card;
  Sending a card application inquiry request including a card code read from the first card and a first PIN, and receiving an inquiry result as a response;
  Reading card information from the second card;
  Transmitting an electronic certificate included in the card information read from the second card to an authentication server, and receiving a certificate confirmation result as a response;
  Sending an activation request including the card code, the second PIN and the certificate confirmation result to the transaction server if the inquiry result indicates that the inquiry is successful, and receiving the activation result as a response;
  Writing the second PIN in the first card when an activation result indicating that activation is successful is transmitted from the transaction server;
  Method including.   On the computer
  Reading card code from the first card;
  Sending a card application inquiry request including the card code read from the first card and the first PIN, and receiving an inquiry result as a response;
  Reading card information from the second card;
  A process of transmitting an electronic certificate included in the card information read from the second card to an authentication server, and receiving a certificate confirmation result as a response;
  Sending an activation request including the card code, the second PIN, and the certificate confirmation result to the transaction server if the inquiry result indicates that the inquiry is successful, and receiving the activation result as a response;
  And a process of writing the second PIN in the first card when an activation result indicating that activation is successful is transmitted from the transaction server.
  A program that runs A card application accepting unit that generates a temporary PIN of a card to be issued in response to receiving card application information, and registers a card record based on the card application information and the temporary PIN;
The card application inquiry request including the card code and the first PIN is received from the depositing / dispensing apparatus, it is determined whether the card record specified in the card application inquiry request exists, and the inquiry result is said A card application inquiry section to send to a money device;
The activation request including the card code, the second PIN, and the certificate confirmation result is received from the deposit / withdrawal device, and the second PIN and the certificate are included in data of a card record specified by the card code. The activation request receiving unit is configured to associate a confirmation result, and the certificate confirmation result indicates whether the validity check of the electronic certificate included in the card information read from the card in the deposit and withdrawal apparatus has succeeded. And a transaction server comprising: an activation request receiving unit;

Images