JPH08335242A - Identity confirmation system for communication line transaction - Google Patents

Abstract

PURPOSE: To easily and securely execute identity confirmation by constituting an identify confirmation system wherein a terminal machine for identity confirmation answers its original answer series to a question series outputted by a host computer and a communication line transaction is performed according to whether the answer is correct or not. CONSTITUTION: The terminal machine 2 for identity confirmation is provided with an input inspecting means and outputs the answer series corresponding to the question series after confirming that the inputted question series matches one of question series held in itself, so that the answer series is displayed at a liquid crystal display part. The displayed answer series is transmitted as a voice to an operator 4 through telephone 11 and a decision means compares the inputted answer series with answer series held in itself. Then when the matching series is received, a signal for identity confirmation is outputted to perform a subsequent transaction, but when not, an accident mode is set.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention confirms the identity of a customer in place of a conventional seal or passbook when a financial institution and a customer make a financial transaction using a communication line, such as home banking. It relates to the confirmation system.

[0002]

2. Description of the Related Art As a conventional personal identification means of this kind,
First, for dealing with relatively small transactions,
There is a confirmation system using a magnetic card and a personal identification number. For example, when a magnetic card is inserted into an ATM (automatic teller machine), the personal information recorded, such as name and account number, is read, and the host computer recognizes the customer himself / herself. Is done.

When the personal identification number is input by the customer at the time when the identification of the customer is performed on the host computer side, the personal identification number is registered in advance and stored in the host computer. The host computer responds to transactions such as deposits, withdrawals, transfers, etc. by checking the numbers and confirming that they match the customer himself if they match.

Further, as a system for dealing with a relatively large-scale transaction, there is a confirmation system for lending a dedicated terminal device to a customer, and the dedicated terminal device is a host when a connection is made such as a digital line. It is supposed that the dedicated terminal, that is, the customer himself / herself can be confirmed by using a line through which the telephone number of the dedicated terminal can be confirmed from the computer side or by transmitting the ID number when the dedicated terminal is connected.

[0005]

However, in the above-mentioned conventional confirmation system, the magnetic card and the personal identification number make it relatively easy to read the recorded contents of the magnetic card, and the personal identification number Since there is a strong tendency for the customer to select a number sequence that is easy for the customer to remember, for example, his or her birthday, it has low confidentiality and is easily misused by others. At the same time, ATMs such as branches of financial institutions are installed. Transactions outside of the location are impossible, and this poses a problem of poor mobility.

In addition, since the result by the dedicated terminal device is to identify the dedicated terminal device, it is not possible to identify even the person operating the dedicated terminal device.
For example, when an operation is performed by an unauthorized person, the operation cannot be eliminated, and similarly to the case of the magnetic card or the personal identification number, there is a problem that misuse by another person is likely to occur.

In addition, by renting a dedicated terminal, the confirmation system itself becomes expensive, which causes a problem that the system operator side such as a financial institution has a heavy burden. For example, it must be fixedly installed in an office, home, etc., and it is subject to locational restrictions, which causes problems that impair mobility, and the solution of these points becomes an issue. .

[0008]

As a concrete means for solving the above-mentioned conventional problems, the present invention comprises a host computer and a portable personal identification terminal, wherein the host computer comprises: Two sets of arbitrary digits having no correlation with each other are set as one set with one as the number of questions and the other as the set of answers, and a plurality of sets are generated, and a prescribed number of sets are arbitrarily selected from the plurality of sets. A plurality of table storage means for storing a plurality of personal tables, and a personal table corresponding to a customer's access from the outside is selected from the plurality of table storage means, and the predetermined question number sequence is selected from the table. A question output unit for outputting the question number sequence, and a determination unit for determining the correctness by collating the answer number sequence from the personal identification terminal corresponding to the question number sequence with the specific personal table. The personal identification terminal is provided with table storage means for storing the personal table given to the personal identification terminal, and the number of questions from the host computer is input into the personal identification terminal by an appropriate operation. The question input means for answering, and the answer output means for selecting and outputting the answer number sequence combined with this question number sequence in the personal table from the question number sequence input by the question input means, the host computer is provided with the above In response to a customer's access, the question output unit outputs a question number sequence to the personal identification terminal, and the answer sequence from the personal identification terminal corresponding to this output is determined by the determination unit to be correct or incorrect. The problem is solved by providing an identity verification system in a communication line transaction characterized by performing identity verification.

[0009]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Next, the present invention will be described in detail based on the embodiments shown in the drawings. FIG. 1 shows the configuration of the identity verification system in the communication line transaction according to the present invention. Basically, the host computer 1 and the identity verification terminal 2 are the main constituents. When recognizing the customer 3, the host computer 1 and the personal identification terminal 2 are connected directly or indirectly by a communication line 10 such as a telephone line.

At this time, the host computer 1 has a structure similar to the conventional one having a function of performing deposit, withdrawal, transfer, etc., but according to the present invention, in addition to the function, the question number sequence QN and the answer number sequence are added. A plurality of table storage means for storing a plurality of personal tables IT including an AN are provided, and when a connection is made from the personal identification terminal 2, the individual assigned to the personal identification terminal 2 is connected. The usage table IT can be extracted and the processing described later can be performed.

FIG. 2 explains the personal table IT. In creating the personal table IT, the question number sequence QN, which is, for example, a 7-digit number sequence, is first described.
Is set like 000000-9999999.
At this time, it is not necessary to set the maximum value of the question number sequence QN obtained as a 7-digit number sequence, that is, 10 million, and it is considered that there are relatively few cryptographic elements such as 0000000 and 1111111. The sequence of numbers may be omitted, and this is the same as in the sequence of answers AN described below.

Next, with respect to the above-mentioned question number sequence QN, for example, a 7-digit number sequence similarly is set as the answer number sequence AN.
Therefore, the maximum is 0000 for one question sequence QN.
It is possible to combine 10 million answer numbers AN from 000 to 99999999, which allows the question number sequence QN to be combined.
When the maximum number is 10 million, a total of 1 trillion combinations of the question number sequence QN and the answer number sequence AN can be obtained.

Then, the above-mentioned question number sequence QN and answer number sequence A
For example, 1000 sets are extracted as one file by a random number generator or the like that randomly outputs 1 to 1 trillion out of the combination with N, and a plurality of files (theoretically, a maximum of 1 billion files of personal table IT A personal table IT (which can be created) is created.

At this time, in the above extraction, for example, one personal table IT may include a plurality of question number sequences QN having the same numerical value or a plurality of answer number sequences AN having the same numerical value. In that extreme case, either one of the question number sequence QN or the answer number sequence AN may have the same numerical value, so in such a case, the personal table IT is excluded because the cryptographic element is scarce. May be.

The personal table IT obtained as described above has no correlation between the question number sequence QN and the answer number sequence AN, and even if the question number sequence QN can be known, The only thing that can be judged from the question number sequence QN is that the answer number sequence AN is within the range of 000000 to 9999999, and it is completely impossible to decipher the answer number sequence AN by calculation or the like.

The personal table IT may be created by the host computer 1, but as described above, the personal table IT is created based on an extremely simple logic. Therefore, it can be easily obtained by installing a simple program in a personal computer, for example, and thus it can be formed off-line with the personal identification system.

When there are, for example, 10,000 customers in the host computer 1, one file is allocated to each customer and a personal table IT of 10,000 files in total is stored, and the personal identification terminal is used. The machine 2 stores a personal table IT of one file assigned to the customer, and the customer is provided with the personal table IT.

3 and 4 show the personal identification terminal 2 described above.
In this personal identification terminal 2, as shown in FIG. 3, 0-9 as a question input means, a keyboard portion 21 on which corrections, confirmations, etc. are displayed, and a number as an answer output means are shown. Alternatively, the liquid crystal display unit 2 for displaying characters
2 is provided, and it is supposed to be portable like the desktop electronic calculators that are called and sold in the market as card calculators.

As an internal configuration, as shown in FIG. 4, a storage element 23 such as an EPROM in which one file of the personal table IT is stored as table storage means and a question number sequence QN are input from the keyboard portion 21. Then, the answer number sequence AN corresponding to the question number sequence QN is composed of the microcomputer 24 which calls from the storage element 23 and displays the answer number sequence AN on the liquid crystal display unit 22. The name, account number, personal identification number, etc. of the customer 3 are recorded using the storage element 23 or the like.

Next, a procedure for operating the identity verification system of the present invention having the above-mentioned configuration will be described with an example of a transaction by telephone (voice). As shown in FIG. 1 and FIG. 5, the customer 3 requests a transaction by telephone 11 (step SU-0.
When 1) is performed, the operator 4 on the system operator side receives it by voice through the telephone 12 (step SS-01).
Then, the customer number GN or the like is input to the host computer 1 by the terminal 13 (step SS-02), and the personal table IT corresponding to the customer is extracted (step SS-).
03).

Here, in this embodiment, the personal identification terminal 2 is provided with a personal identification number confirmation means, and the customer 3 uses the personal identification number from the keyboard portion 21 before using the personal identification terminal 2. Enter MN (Step SU
-02) Then, the personal identification terminal 2 makes a comparison with the personal identification number MN stored in advance, and the personal identification terminal 2 determines whether the input personal identification number MN is correct. Is determined (step SU-03), and if it is correct, the question input waiting state (step SU-04) is set,
Allows subsequent operations.

The personal identification number M entered at this time
If N is incorrect, the personal identification terminal 2
Allows re-entry up to three times (SU-05), and if the correct personal identification number MN is not entered within these three times, for example, disables the personal identification terminal 2 and causes an accident mode. Is set (step SU-06). Therefore, when an outsider or the like who has picked up the personal identification terminal 2 requests a transaction, preliminary selection is performed at this point.

On the other hand, the terminal 1 on the host computer 1 side
3 is provided with an appropriate question output means such as a display,
One question sequence QN from the extracted personal table IT
Is output (step SS-04). At this time, the host computer 1 does not output the question number sequence QN output to the customer 3 in question in the past, but always outputs the new question number sequence QN in the file, so that the customer 3 asks the question. It is impossible to predict the sequence QN.

In this embodiment, the question number sequence QN is transmitted to the customer 3 by voice through the telephone 12 of the operator 4 who has read the question output means (step SS-05),
Customer 3 receives the question number sequence QN (step SU-07)
Is input to the personal identification terminal 2 using the keyboard unit 21 (step SU-08).

At this time, the personal identification terminal 2 is provided with input verification means, and the input question number sequence QN is entered.
After confirming that it matches one of the question number sequences QN held in itself (step SU-09), the answer number sequence AN corresponding to the question number sequence QN is output and displayed on the liquid crystal display unit 22 ( Step SU-10).

Here, the reason for confirming the question number sequence QN is, firstly, whether or not the personal identification terminal 2 is valid at the present time, but secondly, it is due to an illegal operation. For example, when a person other than the customer 3 makes a fictitious transaction, in order to know the combination of the question number sequence QN and the answer number sequence AN in the relevant personal identification terminal 2, the personal identification terminal is repeatedly used. It is necessary to operate the machine 2 to decrypt all the contents.

In this way, in preparation for a situation in which the question number sequence QN is repeatedly input without the customer 3 being involved and the contents are stolen, the question number sequence not registered in the relevant personal identification terminal 2 is obtained. For example, when QN is continuously input three times or more (step SU-11), an accident mode such as disabling the personal identification terminal 2 is set by the input verification means (step SU-12) and illegal use is made. Announce that there was.

Answer number sequence AN displayed by the above procedure
Is transmitted to the operator 4 by voice such as the telephone 11 (step S
U-10), and the operator 4 inputs this answer sequence AN into the host computer 1 at the terminal 13 (step SS-0).
6) Then, the host computer 1 compares the answer number sequence AN held in itself with the inputted answer number sequence AN by the judging means (step SS-07), and if they match, a signal for confirmation of identity is sent. Output (step SS-08)
Then, it is assumed that the subsequent transaction is to be performed, and when they do not match, the accident mode is set (step SS-09).

At this time, the answer sequence AN held in the host computer 1 may be displayed on the terminal 13 and the operator 4 may compare it with the answer sequence AN transmitted from the customer. In this case, there is a possibility that the operator 4 may make a mistake, and thus it is preferable to cause the host computer 1 to perform the comparison as described above in terms of accuracy and the like.

Although the above embodiment has been described on the assumption that all communication between the customer 3 and the operator 4 is performed by human voice, the personal identification terminal 2 is provided with a conversion circuit 25 such as a modem.
And a communication line 1 by connecting means 26 such as a connecting terminal.
The connection with 0 is possible (see FIGS. 1 and 3), and the customer number GN, the personal identification number MN, and the question sequence Q
N, all or part of the answer number sequence AN is the communication line 1
The host computer 1 may be connected via 0, and in this case, the host computer 1 side can confirm that the identity verification terminal 2 is actually present.

In consideration of the fact that the personal identification terminal 2 is used in a state where direct connection with the communication line 10 such as a place where the person is going out is not required, the conversion circuit 25 is set to a "0" level of a digital signal. For example, as an FM modulation circuit for converting a 600 Hz, "1" level into 900 Hz, for example, the connection means 26 is a speaker, and the speaker (26) is brought into proximity to the mouthpiece of the telephone 11 to acoustically connect. Is also good.

As described above, in the personal identification system of the present invention, the customer can be confirmed in the same manner as the conventional seal stamp only by possessing the personal identification terminal 2, and therefore the customer can By conducting the same degree of control as was used for the seals used in this type of transaction, it is possible to reliably prevent unauthorized transactions by others.

Further, since the personal identification terminal 2 is a tangible object, the customer can immediately recognize the loss or theft of the terminal 2 and immediately take action such as reporting an accident. Compared to a system that is intangible and difficult to recognize what is known to others, it is possible to reduce the possibility of an accident.

It should be noted that the number of questions Q stored in the personal identification terminal 2 has been successfully traded as described above.
When all combinations of N and answer sequence AN have been used, the system operator side confirms the identity verification terminal 2
Is collected, the storage element 23 is rewritten to a new personal table IT, and reissued. Further, when the above-mentioned loss is reported, the personal table IT in the host computer 1 is invalidated and a new personal table IT is set, and the personal identification terminal in which the personal table IT is registered. It suffices to pay 2 to the customer.

FIG. 6 shows another embodiment of the present invention, which in the previous embodiment is a question number sequence QN and an answer number sequence A.
While both N used the random number sequence, in this embodiment, the random number sequence is only the answer number sequence AN, and the question number sequence AN is the ordinal number.

Therefore, when creating the personal table IT, for example, from 0001 to 1 as shown in FIG.
1000-question sequence Q with 4-digit ordinal sequence up to 000
For each N, the answer sequence AN of a random number sequence with 7 digits, for example, AN
Should be assigned using a random number generator or the like.

At this time, the question number sequence QN is not limited to the above 0001 to 1000, and is, for example, 1
The customers 3 may be classified into appropriate groups such as the 000s and 2000s, or the above-mentioned classification may be performed with the first two digits as a 6-digit number sequence.

The operating procedure in this embodiment is no different from the operating procedure in the previous embodiment shown in FIG.
The operator 4 transmits the question number sequence QN which is an ordinal number sequence to the customer 3 in place of the question number sequence QN which is a random number sequence (step SS
-05), and the customer 3 inputs the question number sequence QN of the ordinal number sequence into the personal identification terminal 2 (step SU-
08).

Therefore, in the personal identification terminal 2,
Basically, it suffices to sequentially output the answer sequence AN stored internally, and even when the question sequence QN is tested and the answer sequence AN is output, the algorithm is simple because it is an ordinal sequence. As a result, the configuration of the personal identification terminal 2 can be simplified. Further, the system operator (operator 4) side can finally confirm the identity if the correct answer sequence AN is obtained. Therefore, by performing the above simplification, the accuracy of the identity confirmation can be directly confirmed. The degree is not spoiled.

FIG. 7 shows a further embodiment of the present invention. In any of the previous embodiments, the personal identification terminal 2 uses the answer sequence AN stored in advance, Although it is supposed that the answer sequence AN is encrypted, the answer sequence AN is encrypted and outputted in order to further improve the accuracy of the identification.

The above-mentioned encryption of the answer number sequence AN is performed by using the second number sequence SN, and the personal identification terminal 2 outputs the answer number sequence AN. Appropriate encryption processing is performed such that each digit is arranged and each digit of the second number sequence SN is arranged in an even digit.

Therefore, the host computer 1 side receiving this can recover the answer number sequence AN by sequentially reading only the odd digits, and the answer number sequence AN can be directly read even if eavesdropping is performed on the communication line 10. Prevent from being known. At this time, if the second number sequence SN is the same as the customer number GN, the customer 3 can be confirmed from the second number sequence SN by reading an even digit, and the accuracy of the person confirmation can be further improved.

Further, the second number sequence SN may be a character string digitized by a JIS code. For example, in the case of a deposit, a character string having a specific meaning such as customer ID number or transaction message is prepared. However, a message from the customer 3 may be transmitted. When combining the answer sequence AN and the second sequence SN, for example, the double sequence A
It is also possible to digitally process each digit of N and SN by binarizing and performing exclusive OR for each digit. The operations and effects other than the above are the same as those in the previous embodiment, and thus detailed description thereof will be omitted here.

[0044]

As described above, according to the present invention, a host computer and a personal identification terminal are provided, and the personal identification terminal responds to a question sequence output from the host computer with its own answer sequence. By using the identity verification system in communication line transactions that are performed based on whether this response is correct or not, the customer can set a question that is a combination of the customer's unique question number sequence and the answer number sequence, and the customer can use the above setting. The corresponding answer means will be given,
This has the outstanding effect that the person can be easily and surely verified.

At this time, since a different question number sequence is output each time a transaction is made, even if the communication content is intercepted by another person due to eavesdropping or the like, the question number sequence and the answer number sequence performed at that time are included. The combination of will not be used at all in subsequent transactions, and leakage of contents will not impair safety after the next time, and has an extremely excellent effect of improving reliability of identity verification.

Further, since the personal table is created by the random number generator function of a computer or the like, there is no correlation between the question number sequence and the answer number sequence, which is of course not necessary for the customer side, but the system operator It is impossible for the side to know by calculation. Therefore, there is little possibility that the contents will be leaked from both the customer side and the system operator side, and the excellent effect of improving the safety and reliability of the system can be obtained.

Further, the personal identification terminal having the above-mentioned configuration according to the present invention is small and lightweight and can be carried by the customer, and also functions as the simplest communication means such as communication by telephone (voice). In addition to the excellent effect of improving versatility, it is possible to manufacture the personal identification terminal device at an extremely low cost and reduce the burden on the system operator side. Further, by making the question number sequence an ordinal number sequence, it is possible to reduce the cost of the personal identification terminal and to further reduce the burden.

In addition, by replacing the conventional personal identification number and the like with a personal identification terminal and a tangible object, the customer can clearly recognize loss, theft, etc., and respond to an accident report. It is carried out promptly, and also in this respect, it is possible to exert an excellent effect in improving safety. Further, by encrypting the answer sequence using the second sequence on the side of the personal identification terminal, the accuracy of the personal identification can be further improved and the safety is improved.

[Brief description of drawings]

FIG. 1 is a schematic wiring diagram showing an embodiment of an identity verification system in a communication line transaction according to the present invention.

FIG. 2 is an explanatory diagram showing a process of creating a personal table, which is a main part of the same embodiment.

FIG. 3 is a front view showing the external appearance of the personal identification terminal of the same embodiment.

FIG. 4 is a block diagram showing an internal configuration of the personal identification terminal.

FIG. 5 is a flow chart showing a confirmation procedure of the identity confirmation system in the communication line transaction according to the present invention.

FIG. 6 is an explanatory diagram showing a process of creating a personal table of another embodiment of the principal confirmation system in the communication line transaction according to the present invention.

FIG. 7 is an explanatory diagram showing a process of creating a response number sequence of still another embodiment of the principal confirmation system in the communication line transaction according to the present invention.

[Explanation of symbols]

 1 ... Host computer 2 ... Identification confirmation terminal 21 ... Keyboard section 22 ... Liquid crystal display section 23 ... Memory element 24 ... Microcomputer 25 ... Conversion circuit 26 ... Connecting means 3 ... Customer 4 ... … Operator 10 …… Communication line 11, 12 …… Telephone 13 …… Terminal IT… Personal table AN …… Answer sequence GN …… Customer number MN …… PIN number QN …… Question sequence SN …… Second Sequence

Claims (6)

[Claims] 1. A host computer and a portable personal identification terminal, wherein the host computer comprises:
Two sets of arbitrary digits having no correlation with each other are set as one set with one as the number of questions and the other as the set of answers, and a plurality of sets are generated, and a prescribed number of sets are arbitrarily selected from the plurality of sets. A plurality of table storage means for storing a plurality of personal tables, and a personal table corresponding to a customer's access from the outside is selected from the plurality of table storage means, and the predetermined question number sequence is selected from the table. A question output means for outputting the question number sequence, and a determination means for determining the correctness by collating the answer number sequence from the personal identification terminal corresponding to the question number sequence with the specific personal table, the personal identification terminal In the machine, table storage means for storing the personal table given to the terminal machine, and by a proper operation, the question number sequence from the host computer is displayed in the personal identification terminal. The host is provided with a question input means for inputting into the inside and an answer output means for selecting and outputting an answer number sequence combined with this question number sequence in the personal table from the question number sequence input by the question input means, The computer outputs the question number sequence to the personal identification terminal by the question output means for the access of the customer who carries the personal identification terminal, and the answer from the personal identification terminal corresponding to this output An identity verification system in a communication line transaction, wherein identity verification is performed by determining whether the number sequence is correct or not by the determination means. 2. The personal identification terminal is provided with a significant second number sequence, and by combining the second number sequence, the answer number sequence is further encrypted, and the host computer is configured to 2. The communication line according to claim 1, wherein the answer number sequence further encrypted is decrypted into the answer number sequence and the second number sequence, and the identity is confirmed from the match of the answer number sequence and the content of the second number sequence. Identification system for transactions. 3. The identity verification system in a communication line transaction according to claim 1, wherein the question number sequence is an ordinal number. 4. The personal identification terminal is provided with a personal identification number confirmation means for determining whether the personal identification numbers input by the question input means are correct or not, and after the personal identification number confirmation means determines the coincidence. 2. The operation of the question input means and the answer output means is enabled.
An identification system in the communication line transaction according to claim 2 or claim 3. 5. A communication line connecting means is provided between the host computer and the personal identification terminal, and at least one of the personal identification number, the question number sequence, and the answer number sequence is connected to the host computer and the personal identification terminal by a communication line. The personal identification system in the communication line transaction according to claim 1, claim 2, claim 3 or claim 4, which is transmitted and received between and. 6. The personal identification terminal is provided with input verification means, and when an illegal input of a prescribed number of times is detected in the personal identification number and the question number sequence input by the question input means, the personal identification terminal is used for the personal identification. The personal identification system in communication line transaction according to claim 1, claim 2, claim 3, claim 4 or claim 5, wherein the function of the terminal is stopped.