JPH02236695A - Principal verifying system - Google Patents

Abstract

PURPOSE:To expand the usable range of a system, to improve security and to confirm a criminal fact by composing a card verified information storing part of readable/writable nonvolatile memory. CONSTITUTION:A verified information storing part 1 is connected to a CPU 2, and the CPU is connected to a verified information output part 3, and these parts 1 to 3 are housed in a package 4 at a business card size. A verification card is collated and utilized by a verified information collating device, and the verified information storing part 1 is composed of the readable/writable nonvolatile storage such as an EEPROM. Thus a backup power source is made unnecessary, and since a processing speed is increased, and capacity is increased, respective types of the information can be stored, and the usable range can be expanded.

Description

[Detailed description of the invention] [Purpose of the invention] (Industrial application field) The present invention relates to a personal identification system.

<Prior art> In conventional identity authentication systems such as keyless entry systems, authentication information is stored in a portable device such as a magnetic card, and the authentication information is read by an authentication information verification device via a contact terminal or wirelessly. This was used for authentication and identification.

(Problems to be Solved by the Invention) However, the conventional personal identification system described above has many problems as described below.

That is, firstly, the authentication information storage section in the card is R.A.
M (R amdoa + Access M em
ory ) and magnetic storage devices, it requires power backup, its storage capacity is too small and its range of applications is limited, and its reading speed is slow and takes a lot of time to process. be.

Second, there is no recourse if the authentication code is stolen. For example, if a wireless signal is intercepted in a vehicle's keyless entry system and a card is duplicated, the vehicle door is opened using the duplicated card.

Third, for example, if a plagiarist uses an authentication system,
Even if the authentication fails, that is all that matters, and the fact of the crime cannot be known.

In view of these problems, it is an object of the present invention to provide an identity authentication system that can expand the scope of system use, improve security, and enable the identification of crime facts.

[Configuration of Bonmei] (Means for solving the problem) The personal authentication system of the present invention that solves the above problem has the following features:
In a personal authentication system that verifies an authentication code stored in an authentication information storage section in a card using an authentication information collation device and grants various permissions, the authentication information storage section of the card is configured with a readable and writable non-volatile bamboo memory. It is characterized by

Second, in a personal authentication system that verifies an authentication code stored in an authentication information storage section in a card using an authentication information verification device and grants various permissions, the authentication information verification device includes:
A question creation section that creates questions for the true owner of the card that other people cannot know, such as family composition and age, and checks whether the card holder is the true owner based on the answers. The present invention is characterized in that it includes a verification control section that performs the following steps.

Thirdly, in a personal authentication system that verifies an authentication code stored in an authentication information storage section in a card using an authentication information verification device and grants various permissions, the authentication information verification device includes:
i of the said card! ! The present invention is characterized in that it includes a cryptographic information creation unit that rewrites the certificate information into a different cryptographic code for next use.

Fourthly, in the personal authentication system that verifies authentication information with an authentication information verification device and grants various permissions, the authentication information verification device is provided with a usage information storage unit that stores a history of usage status of the user. It is characterized by

(Function) In the first personal authentication system, the authentication information storage section in the card is configured with a highly readable and non-volatile storage device such as an EEPROM, so there is no need for power backup, the reading speed is fast, and security is concerned. Various types of information can be stored, and the scope of its use can be expanded.

In the second person authentication system, the authentication information verification device is provided with a copy creation section and a verification control section that verifies whether or not the card holder is the true card holder based on the answer.
Even if the authentication codes match, permission can be denied to those for whom the verification system t[lrA determines that the answer is negative, thereby increasing security.

In the third person authentication system, the authentication information matching device is equipped with a cryptographic information generation unit that rewrites the authentication code to a different rIa number for next use, so it is possible for the cryptographic information to be read and duplicated by eavesdropping on wireless signals, for example. Even so, it is possible to disable the next use of this duplicate card, which improves security.

The fourth personal authentication system is equipped with a usage information storage unit that stores the history of system usage, which is not only convenient for statistical processing of usage, but also allows you to learn about unauthorized usage. .

(Example" Examples of the present invention will be demonstrated below.

The embodiment shown in FIGS. 1 and 2 is an example in which the authentication information storage unit 1 in the authentication card (ID card) is configured with a readable/writable and nonvolatile storage device such as an EEPROM.

That is, the authentication information storage section 1 is connected to the CPU 2, which is connected to the authentication information input/output section 3, and these components 1, 2, and 3 are housed in a business card-sized package 4.

The authentication card shown in this example is used for verification in an authentication information verification device described later.
Since it is configured with a readable/writable and non-volatile storage device such as OM, there is no need for a backup power supply, the processing speed is fast, and the capacity is large enough to store a variety of information, expanding the scope of its use. .

The authentication information verification device 5A shown in FIG. 3 includes a verification control section 6, a memory 7, a card information analysis section 8, a question creation section 9, an input section 10, an output section 11, and a card reading section 12. Become.

The authentication information verification device 125Δ is equipped with a keyboard 13, a microphone 14, an electronic bezel 15, a display 16, a speaker 17, and a power card insertion slot 18, as shown in FIG.

The input section 10 includes a microphone 14 and a keyboard 1.
3. An electronic pen 15 is used to input personal data when the user identifies himself/herself.

The output section 11 is for outputting a display 16, a screen 17, and the like.

The card reading unit 12 is an interface for communicating with the authentication card shown in the mI diagram and FIG.

FIG. 5 is a flowchart of question processing executed by the authentication verification device 5A shown in FIGS. 3 and 4.

That is, when a card is inserted in step 501, a format check is performed by the collation control unit 6 in step 502.

Then, when the character string is read in step 503, it is exchanged into a semantic string in step 504, and step 505
A question is created using the question pattern previously stored in the memory 7.

This question uses information such as the voice print, face photo, handwriting, address, name, retinal pattern, and fingerprints on the card, which is analyzed by the card information analysis section 8, and the question creation section 9 determines who the true owner of the card is. For example, information about the family structure, age, birthday, and other information that cannot be known to others is randomly created.

Therefore, in step 507, an appropriate question is output on the display 16 or subica 17, and in step 508, an answer is input using the electronic bezel 15, microphone 14, keyboard 13, etc., and then, in step 509, the answer is input, including, for example, handwriting recognition. It is determined whether the request is correct or not, and if it is not, permission is not granted, and if it is correct, the process returns to step 505 until it is confirmed in step 510 that the desired answer has been obtained.

If the inquiry is completed in step 510 and it is determined that the card holder is the true owner, in step 511,
For example, open the door and allow entry.

Therefore, with conventional ID cards, the identity of the person was determined by a PIN number, so the PIN number could be leaked in some way, or the owner could forget the PIN number. Not only can the identity of the person be reliably identified, but it also eliminates the need to remember the PIN number. Furthermore, if multiple members of the family wish to use the same card, the characteristics of each person can be registered on the card, and if any of the characteristics apply, the cardholder can be recognized as the cardholder.

FIG. 6 is a block diagram showing the configuration of a card used as an electronic key such as a card or an IM release for a door, and FIG. 7 is a block diagram showing the configuration of an authentication information verification device 5B that controls this electronic key.

That is, the electronic key of this example includes a cryptographic information storage section 20 and a cryptographic information input/output section 21 in the C P LJ 19, and the cryptographic information input/output section 21 receives the cryptographic information by inserting a card or by a wireless signal. In addition to being able to output
Encryption information can be rewritten by inputting information from the authentication information installation module 5B shown in FIG.

On the other hand, the authentication information verification device 5B shown in FIG.
4, a cryptographic information discriminating section 25, a UfB@information storage section 26, a cryptographic information creation section 27, and a thunder key writing section 28.

FIG. 8 is a flowchart showing the cipher changing process of the card authentication system shown in FIGS. 6 and 7.

When the card is inserted in step 801, step 80
2, the format is checked, then a character string is input in step 803, and the cryptographic information analysis unit 25 is processed in step 804.
analyzes the cipher based on the information obtained from the la@ information analysis section 24 and the cipher information storage section 26.

In step 805, based on the code verification result, if it is positive, the process proceeds to step 806, but if it is negative, the process is interrupted.

In step 806, the cipher information controller 27 creates, for example, a random number to change the cipher to be used next, and this is stored in the cipher information on the card side via the electronic key embedding unit 28. At the same time, in step 807, the cipher is stored in the cipher information storage section 26.

In step 808, the warehouse and doors are opened and the entire process is completed. The processes in steps 806 and 807 may be executed after locking the warehouse or the door.

Therefore, in the card ilJ system of this example, the code is changed the next time it is used, and even if the previous code is stolen, the card ilJ system is changed. ! Even if a second version is created, permission will not be granted based on the code.

The embodiment shown in FIG. 9 is an example of a security system installed at the entrance of a building, in which usage information is stored in the authentication information device 5C.

That is, the authentication information verification device 5C of this example connects the input/output section 30, the personal information verification section 31, and the statistical information management section 32 to the system control section 29, and connects the usage information storage section 35 to the statistical information management section 32. , a personal information storage unit 36 is connected to a personal information matching unit 31.

Both information storage units 35 and 36 are comprised of readable/writable and nonvolatile storage devices such as EEPROMs, and the personal information storage unit 36 stores data for identifying individuals, such as fingerprints, retinal patterns, and handwriting. In addition, usage information storage section 3
5 stores statistical information such as the user's usage start time, usage end time, and usage time.

FIG. 10 is a flowchart showing the usage information storage process of this system.

When card information or information such as fingerprints is input in step 1001, personal information storage unit 3 is inputted in step 1002.
Verification is performed by the personal information verification unit 31 using the information in 6.
If it is recognized that the person is the person, in step 1005,
If it is determined that the person is not the person in question, the contents are stored in step 1004.

The information stored in step 1004 includes, for example, what kind of fingerprint the person used and when. Also, step 100
The information stored in step 5 is information such as entrance/exit times.

In step 1004, all processing is completed and an alarm is output if necessary, but if the identity of the person is confirmed in step 1005, for example, a gate is opened in step 1006.

In this example, since the personal identification information is held in a storage device using an EEPROM, the personal identification information can be held in a rewritable state.

In addition, since the usage information for authorized users is stored in the usage information storage section 35, and that usage information for unauthorized users is also stored and provided to the statistical information management section 32, it can flexibly support various statistical processing. At the same time, it is possible to take measures against unauthorized users.

The present invention is not limited to the above embodiments, but can be implemented in various other forms by making appropriate design changes.

[Effects of the Invention] As described above, since the present invention is a personal authentication system as described in the claims, it is possible to expand the scope of use of the system, improve security, and learn the facts of a crime.

[Brief explanation of drawings]

FIG. 1 is a block diagram showing a card configuration in which the authentication information storage unit is made up of a readable/writable and non-volatile storage device;
Fig. 2 is an explanatory diagram showing its external appearance, Fig. 3 is a block diagram showing the configuration of the recognition information verification device, Fig. 4 is an explanatory diagram showing its external appearance, Fig. 5 is a flowchart of question processing, and Fig. 6 is FIG. 7 is a block diagram showing the configuration of a card used as an electronic key, FIG. 7 is a block diagram showing the configuration of the authentication information verification device that controls this electronic key, FIG. 8 is a flowchart of the encryption change process, and FIG. FIG. 10 is a block diagram showing the configuration of an authentication information verification device including a usage information storage unit, and FIG. 10 is a flowchart of usage information storage processing. 1...Authentication information storage unit (EEPROM) 2...CP
U 3...Authentication information input/output section 4...Package

Claims (4)

[Claims] (1) In an authentication system that verifies an authentication code stored in an authentication information storage section in a card using an authentication information verification device and grants various permissions, the authentication information storage section of the card is configured with a readable/writable nonvolatile memory. An identity authentication system characterized by: (2) In an authentication system that verifies the authentication code stored in the authentication information storage section of the card with an authentication information verification device and grants various permissions, the authentication information verification device has a verification code that is used to verify the identity of the true owner of the card. It is characterized by having a question creation section that creates questions that other people cannot know, such as composition, age, etc., and a verification control section that verifies whether the card holder is the true owner based on the answer content. An identity verification system. (3) In a personal authentication system that verifies the authentication code stored in the authentication information storage section in the card using an authentication information verification device and grants various permissions, the authentication information verification device uses the authentication information of the card for the next use. A personal authentication system characterized by comprising a cryptographic information creation unit that rewrites the code to another code. (4) In a person authentication system that verifies authentication information with an authentication information verification device and grants various permissions, the authentication information verification device is provided with a usage information storage unit that stores a history of usage status of the user. Characteristic identity authentication system.