JPH0764911A - Individual authentication system - Google Patents

Abstract

PURPOSE:To perform high-grade authentication and to improve security by connecting only the input devices of required items and authenticating individuals by the appropriately registered individual authentication data and the appropriately selected and connected input devices. CONSTITUTION:In respective CAT terminals 2a, 2b..., an IC card read part 3 for inserting an IC card and reading the individual authentication data as the input device and a magnetic card read part 4 for reading the data of a magnetic card are provided at need and also a key pad 5 provided with keys for inputting a password, a tablet 6 for inputting a signature and a fingerprint reader 7 for inputting a fingerprint are connected at need. The individual authentication data for authenticating the individual and individual data such as an identification number or the like are stored respectively in the IC card and the magnetic card. The individual possesses either the IC card or the magnetic card at need and uses them appropriately in the view of a cost.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal authentication system for confirming the legitimacy of an individual and the identification of the individual. For example, personal authentication at the time of financial transactions such as credit processing, cashing processing, etc. It is used for personal authentication at the time of leaving check.

[0002]

2. Description of the Related Art The following methods and devices have been used for personal authentication in conventional financial transaction devices and entry / exit checking devices.

For example, in the case of personal authentication with a credit card, a service provider such as a store clerk visually confirms the signature of the credit card user, and the card user is printed on the transaction certificate in which the embossed characters on the card are imprinted. A service provider such as a clerk can visually confirm the handwriting by signing by.

Similarly, in the case of personal authentication using a credit card, a CAT terminal is used to input a password from a password input pin pad (usually a ten-key pad is used for inputting a personal identification number) and the password is collated. How to enter the password (password) and verify
It is also used for personal identification with bank cards at banks. This password can be verified by writing the password on the magnetic stripe of the card and having the terminal itself read the password for verification, or by the host remembering the password and sending and receiving it over the line to verify it on the host side. There are cases when

Also in personal authentication for entering and leaving a room in a company or the like, a device for reading data written in a magnetic stripe on a card, a device for collating a password input from a keyboard, and a fingerprint input unit are used. A device for collating fingerprints etc. is used to perform personal authentication.

[0006]

However, the above-mentioned conventional configuration has the following problems.

In the case of a method in which a service provider such as a store clerk visually verifies a signature, it is necessary to have skill in collating the signature, and the actual number of service providers is the number of persons skilled in the signature verification. Since it is not at all
If the signature is forged with a stolen card, etc., the check is almost through.

In the method of inputting a password from the pin pad to verify the password, the password may be stolen. That is, in recent years, it has become possible to read a password written magnetically, and when a password is written on the magnetic stripe of a card, it is relatively easy to steal it. In general, a personal identification number is often used as a password, but when a card user sets a personal identification number, he / she often sets a number that is easy for the card user to remember, such as the date of birth. Since it is relatively easy to steal data, the personal identification number may be stolen.

As described above, since the personal authentication system conventionally used for financial transactions has a relatively simple structure, fraud is likely to occur. If such fraud occurs when the amount of financial transactions is large, the damage will be enormous.

In order to prevent this, for example, Japanese Patent Laid-Open No.
As disclosed in Japanese Patent Laid-Open No. 9-43473 and Japanese Patent Laid-Open No. 3-265086, it is possible to construct a check system by combining a plurality of check items such as fingerprint collation and voice collation in addition to the collation of a personal identification number. In that case, it is necessary to provide each terminal with a plurality of input sections such as a personal identification number input section, a fingerprint input section, a voice input section, a collation section, etc., and the system becomes expensive. It is worth using an expensive system when the amount of financial transactions is large, but it is useless to have an expensive system even if only making a small transaction, and excessive checking is performed in the case of a small transaction. Not only does this give an unpleasant image to the customer, but it also increases the amount of time lost.

On the other hand, in the personal authentication system used for entering / leaving room check, etc. in a company as shown in the above, when any device such as a device for reading a magnetic stripe, a device for collating a password, a device for collating a fingerprint is used. However, there was a limit to improving the reliability of security as long as it was a single check system.

An object of the present invention is to provide a personal authentication system capable of performing necessary and sufficient checks by improving the reliability of the checks as necessary in each part of the system.

[0013]

According to the invention described in claim 1, personal data registration for registering an arbitrary number of personal authentication data among personal authentication data for identifying an individual such as a password, a handwriting, and a fingerprint. Means, input device selection means for selectively connecting an arbitrary number of input devices from the input device for inputting personal authentication data for each item, personal authentication data input from the input device, and the personal data registration Collating means for collating personal authentication data registered in the means,
It is characterized by having.

According to a second aspect of the invention, in the system according to the first aspect, there is provided collation item selection means for selecting and setting an item to be collated by the collation means.

According to a third aspect of the present invention, in the personal identification system according to the second aspect, when the selected item to be collated is in an unusable state, a means for substituting another item is provided. Characterize.

[0016]

In the invention described in claim 1, it is possible to construct a system by selecting only necessary items from a plurality of items for identifying an individual such as a password, a handwriting and a fingerprint. That is, if the input device selecting means connects only the input devices of the necessary items, there is no waste of connecting the unnecessary input devices, and the personal data registering means registers only the personal authentication data of the necessary items. Eliminate unnecessary waste of registration. Then, the personal authentication data appropriately registered and the input device appropriately selected and connected perform the personal authentication.

According to the second aspect of the present invention, even when a large number of personal authentication data are registered or a large number of input devices are connected, an arbitrary item is selected from among them and the data is selected. Is checked. Therefore, for example, even when the personal authentication data of three items of password, handwriting, and fingerprint are registered and the input device for these items is connected, any one of them, for example, only the password is selected. Can be collated.

In the invention described in claim 3, for example, when the selected input device is out of order or when it is out of the usable state for some reason, other items are used instead. Therefore, the operation of the system does not stop.

[0019]

1 is a diagram showing an example of the configuration of a personal authentication system according to an embodiment of the present invention.

A plurality of CAT terminals 2a, 2b ... Are connected to the host computer 1. Each CAT terminal 2
The personal authentication data is used as an input device for a, 2b ...
An IC card reading unit 3 for inserting and reading an IC card and a magnetic card reading unit 4 for reading data of a magnetic card are provided as necessary, and
Keypad (pin pad) with password input keys (usually a numeric keypad for entering a PIN)
5, a tablet 6 for signature input, and a fingerprint reading device 7 for fingerprint input are connected as necessary. The input device may be any device that can input data for authenticating an individual, and a voice input device or the like for checking a voiceprint can be connected.

IC card reader 3 and magnetic card reader 4
The IC card and the magnetic card inserted in the personal computer store personal authentication data for personal authentication and personal data such as an identification number. The IC card stores not only normal data such as an identification number, expiration date and password, but also high-level personal authentication data such as a signature (handwriting) and a fingerprint. Further, the magnetic card stores normal data, that is, simple identification data such as an identification number, an expiration date and a password. Therefore, in addition to the check by the identification number and the password for the individual who owns the IC card, the check by the signature or fingerprint collation can be performed, and the certainty of the individual recognition is improved.

However, the IC card is not only expensive by itself, but also requires an input device and a verification device for verifying signatures and fingerprints, resulting in high cost. On the other hand, since the identification number and password can be checked and the signature can be visually confirmed only for the individual who owns the magnetic card, the certainty of personal recognition is not so high, but the cost is low. Becomes

Individuals will own either an IC card or a magnetic card as needed, but in view of cost, if high security is required, the IC card will have a normal security level. If required, a magnetic card is used. For example, if the card is a financial transaction card such as a credit card, a customer who may make a large amount of transaction must have an IC card, and if the transaction is less than a predetermined amount, he / she must have a magnetic card. Can be considered. In addition, in the case of entering / leaving room check in a company, etc., those who enter / exit rooms with high importance have IC cards, and those who enter / exit normal rooms have magnetic cards. It is possible to do it.

In this embodiment, the personal authentication data is stored in the IC.
Although it is stored in the card or magnetic card, the CAT terminal 2
Or may be stored in the host computer 1. When the data is stored in the host computer 1, the CAT terminal 2 and the host computer 1 communicate with each other at the time of matching to perform the matching. That is, in the above example, the IC card or the magnetic card has the personal data registration means, but the CAT terminal 2 or the host computer may have the personal data registration means.

As described above, the CAT terminals 2a, 2b.
Each of the ... Has a data input unit such as an IC card reading unit 3, a magnetic card reading unit 4, a keypad 5, a tablet 6, and a fingerprint reading device 7 as required. 2 is CA
FIG. 3 is a diagram showing a configuration example of a T terminal, and FIG. 3 is a block diagram of a CAT terminal.

Input devices such as an IC card reader 3, a magnetic card reader 4, a keypad 5, a tablet 6 and a fingerprint reader 7 are provided in the CAT terminal 2 as switches SW1 to SW, respectively.
It is connectable via W5 and connectors 25a to 25e. Therefore, connect only the necessary input device to connector 25.
a to 25e can be used for connection. For example, in the case of a financial transaction system, the connected input device is connected to the CAT.
It can be set according to the amount of money handled by the terminal. For example, in the case of a terminal that handles only a very small amount of money, only the magnetic card reading unit 4 may be provided to perform a simple check, or a keypad. 5 and the like may be additionally provided. Further, in the case of a terminal that may carry out a high-value transaction, in order to perform a more advanced check, the IC card reading unit 3, the tablet 6 for signature verification with high certainty of personal authentication, and the fingerprint verification The fingerprint reading device 7 may be added. The same applies to a system for checking entry / exit in a company or the like, and if a simple check is acceptable, use only the keypad 5 for password entry, only the magnetic card reader 4, or a combination of these. If high security is required, the IC card reading unit 3 and the tablet 6 or fingerprint reading device 7 for verifying a signature or fingerprint may be provided. However, when the tablet 6 for inputting a signature and the fingerprint reading device 7 for inputting a fingerprint are connected and the personal data of the signature or the fingerprint is stored in the IC card, the IC card reading unit 4 is indispensable.

Further, even in the input device connected by the connector, the connection state can be validated / invalidated by turning on / off the switches SW1 to SW5. The switches SW1 to SW5 are used, for example, to turn off the input device when any of the input devices fails, or to stop the collation by the input device when a fraud occurs due to the method using the input device. It is used when turning off. Connectors 25a to 25e, switches SW1 to SW5
Corresponds to the input device selecting means described in claim 1.

Since the data input section can be appropriately set for each CAT terminal as described above, for example, for a terminal that only makes a small transaction, an expensive IC card reading section 3, tablet 6, fingerprint reading device 7, etc. Since it is not necessary to provide a device, it is possible to prevent the system from becoming unnecessarily expensive. Also password, magnetic card, I
Since the personal check can be performed using any of the C cards, it is possible to issue a magnetic card to, for example, a customer who only makes a small transaction to avoid using an expensive IC card.

The CAT terminal 2 is a CAT terminal and the CA.
C for controlling the processing operation of each input device connected to the T terminal
PU21, ROM22 which memorize | stores a processing program, RAM23 which memorize | stores the selection conditions etc. of each input device, The selection condition input setting part 2 for inputting the selection conditions of each said input device.
4. It has a modem 26 for communicating with the host computer 1, a display 10, and a key panel 11 for inputting transaction amounts and the like. The selection condition input setting unit 24 and the selection condition storage unit of the RAM 23 correspond to the collation item selection unit according to claim 2.

The selection condition input setting unit 24 is a unit for inputting selection conditions of the input device, for example, when the terminal is installed or when necessary maintenance is performed. For example, in the financial transaction device, a personal authentication method is set and input for each input amount, or a personal authentication method is set and input according to the place where the CAT terminal is installed. Further, for example, in the case of entering / leaving room check, a personal authentication method is set according to the degree of importance. At the same time as this input, the selection condition input setting unit 24
From, the substitution order of each input device is also input. IC
A substitute authentication method is input such that the magnetic card reader is used when the card reader is in an unusable state. Then, the personal authentication process is executed according to the set selection condition.

The operation procedure of this system will be described. Figure 4
9 is a flowchart showing the processing procedure, and shows the state in the case where the selection condition input setting unit 24 inputs so as to select the individual authentication method according to the transaction amount high in the financial transaction.

First, when the power of the CAT terminal 2 is turned on, initialization processing is performed, and it is verified whether or not each input device connected thereto can be used (n51 → n).
52). Then, if there is no abnormality, the process proceeds to the input waiting state, but if there is a device that cannot be used, a warning operation such as displaying "○○ is unavailable" is performed, and an input indicating continuation is made. Wait for a predetermined time (n53 →
n54 → n55 → n56). If the input indicating the continuation is not input within the predetermined time, the error processing is performed as it is, but if the continuation is input, the input device of the corresponding portion is substituted and set (n57). For example, it is assumed that the condition input from the selection condition input setting unit 24 is that only password verification is performed in the case of a small amount transaction. However, if the password input device (keypad 5) cannot be used as the input device, the password input device is replaced with another device based on the data previously input from the selection condition input setting unit 24. For example, when the signature verification is set as a substitute, the signature verification is set instead of the password, and this condition is stored as a selection condition until the power of the CAT terminal 2 is turned off. The device thus set as a substitute is verified in the same manner as described above, and if there is no abnormality, the input waiting state is entered (n58 → n59 → n60).

Next, the procedure for transaction processing will be described.

First, as a transaction preprocessing, the type of transaction, the amount of money, etc. are input (n1). The type is, for example, “sales” in the case of credit, and “withdrawal” in the case of a bank card. Then, when a card (magnetic card or IC card) is inserted, the identification number, expiration date, etc. written on the card are read to check whether the CAT terminal can be used, expiration date check, negative check, Check the credit limit (n
2 → n3). Normally, simple checks such as availability check and expiration date check at the CAT terminal are performed by the CAT itself, but other complicated checks such as negative check and credit limit check are given to the host computer 1 by an identification number. It is transmitted and performed on the host computer 1 side. If the check result is normal, proceed to the verification item setting process, but if the check result is abnormal, for example, if the expiration date or the credit limit is exceeded, cancel the transaction. Perform (n4 → n6, n5). In the transaction canceling process, an error is displayed on the display 10 of the CAT terminal, and if the IC card 9 is taken in, the IC card is deactivated and discharged.

The collation item setting process is as shown in FIG.
The verification item is selected and set according to the transaction amount input in n1 (n21 → n22, n23, n24).

When the verification item is set in n6, the verification of each of the password, the signature, and the fingerprint is performed by CAT.
In a terminal, an IC card, or a host computer (n8 → n9, n10 → n11, n12 → n1
3).

For example, password verification is performed within the CAT terminal. As shown in FIG. 5, the collation of the password collates the password read from the magnetic card or the IC card with the password input from the keypad 5, and if they coincide with each other, the process returns to the main flow (n31 → n32 → n
33 → n34). On the other hand, if they do not match, retry is performed several times, but if they do not match, transaction cancellation processing is performed as error processing (n5). The number of retries is set appropriately in the CAT terminal. In addition,
Even if the password is not written on the magnetic card 8 or the IC card 9, an error is judged and the transaction is canceled (n
5). In this embodiment, the password is collated in the CAT terminal, but the password may be stored in the cost computer 1 in advance and collated in the host computer 1, or in the case of using an IC card. For I
You may collate in a C card.

The collation of signatures and fingerprints is performed in the IC card. For example, as shown in FIG.
When a signature is entered from the tablet 6 of the terminal, verification is performed in the IC card (n41 → n42 → n43 → n).
44, n45 → n46). Further, as shown in FIG. 7, the fingerprint is collated in the IC card when the fingerprint is input from the fingerprint reading device 7 of the CAT terminal.

When the individual is authenticated by the above collation processing, the transaction is permitted and the transaction permission processing is executed (n14). In other words, it processes data for transactions and sends the results to the host computer,
After writing to the IC card, the IC card is discharged.

As described above, the collation processing is performed by appropriately selecting the individual collation items as necessary. This makes it possible to perform only simple authentication when high-level authentication is not required, such as for small-value transactions, which reduces the running cost and the check time. It is possible to delete items such as checks that have a bad image for the customer, and prevent deterioration of serviceability to the customer.

[0041]

According to the inventions set forth in claims 1 and 2, the collation items can be set as necessary,
For example, simple authentication can be performed in places and situations that require only simple authentication to reduce the system cost or running cost. For example, in places and situations that require advanced authentication, advanced authentication can be used to ensure security. It is possible to improve the sex.

According to the third aspect of the invention, when one collation item cannot be used, another item is substituted for the collation, so that the system itself does not stop. .

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration example of a personal authentication system in a financial institution which is an embodiment of the present invention.

FIG. 2 is a diagram showing a configuration example of a CAT terminal of the same system.

FIG. 3 is a block diagram of a main part of the CAT terminal.

FIG. 4 is a flowchart showing a processing procedure when the operation of the CAT terminal is started.

FIG. 5 is a flowchart showing an example of a financial transaction procedure in the system.

FIG. 6 is a flowchart showing an example of a setting procedure of collation items in the system.

FIG. 7 is a flowchart showing a processing procedure of personal authentication in the system.

FIG. 8 is a flowchart showing a processing procedure of personal authentication in the system.

FIG. 9 is a flowchart showing a processing procedure of personal authentication in the system.

Claims (3)

[Claims] 1. A personal data registration means for registering an arbitrary number of personal authentication data among personal authentication data for identifying an individual such as a password, a handwriting, a fingerprint and the like, and inputting personal authentication data for each item. Input device selection means for selectively connecting an arbitrary number of input devices from the input device, and collation for collating personal authentication data input from the input device with personal authentication data registered in the personal data registration means A personal authentication system comprising: 2. The personal authentication system according to claim 1, further comprising collation item selection means for selecting and setting an item to be collated by the collation means. 3. The personal authentication system according to claim 2, wherein the selected item to be collated is in an unusable state,
An individual authentication system characterized by having means for substituting other items.