JPH11167553A - Personal confirmation system for on-line system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a personal confirmation system in an on-line system where the identity of a qualified person who can really enjoy the service can be confirmed with high security and the loss of the individual property, etc., due to its wrong use done by an outsider can be prevented. SOLUTION: A host computer 2 is connected to a terminal device 3 having an input means via a communication circuit 4. A password is stored in response to the personal information stored in the computer 2. A 2nd computer 1 which stores the personal identification information in relation to the said password is connected to the computer 2. When the device 3 accesses the computer 1, the password and the personal identification information are inputted via the input means of the device 3. Then the inputted personal identification information is collated with the personal identification information stored in the computer 1. The rate of coincidence of the said collation is sent to the computer 2 from the computer 1.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION The present invention relates to a method for confirming the identity of a qualifying person when a certain qualification such as membership is required when using a service such as the use of a credit card or electronic money. The present invention relates to an identity verification system in an online system that can effectively cut off unauthorized use by a user.

[0002]

2. Description of the Related Art Conventionally, a credit card user has been able to make purchases and receive loans within a certain limit by presenting his / her card to a member store or the like and signing it. .

[0003]

However, if the card is genuine, there is a problem that the card can be used even if it is not the person himself, and there is a problem that members who use the card without permission due to loss or theft may be damaged. Further, if the card is forged and the card checker is cleared, there is a problem that the use of an illegal person is allowed as it is, and there is also a problem that a credit card company or the like is damaged by a fictitious name card.

As a preventive measure, there is a proposal to put a photograph of the person's face on the card at the time of joining, updating, etc. However, there is a feeling of resistance to taking a picture or always attaching a photograph of oneself to the card. There are concerns that the number of people is small and that the owner of the photo can quickly identify who the owner is and to promote abuse aimed at that person.

It has also been proposed that, apart from a credit card, fingerprint information is digitized and recorded on a personal identification LSI card, and this LSI card is compared with a personal finger when using a service. However, if the card is always 2
Forgery in that it is complicated to operate with carrying a single card, and even if the credit card and the LSI card are integrated into one, the personal information is always attached to the card that contacts the outside at the end of the user at all times. The concerns of the above cannot be dispelled, and the pretend play with the counterfeiters is inevitable, and there is a fatal drawback that security cannot be guaranteed.

[0006] A main object of the present invention is to provide an on-line system capable of confirming the identity of a person who can truly use a service under high security, and preventing loss of property due to unauthorized use by a third party. The point is to provide an identity verification system in the system.

[0007]

SUMMARY OF THE INVENTION In order to achieve the above object, according to the present invention, a password is stored in association with personal information stored in a host computer, and personal identification information is stored in association with the password. When the second computer is connected to the host computer and the terminal device accesses the host computer, the personal identification information together with the password is input from the input means, and the personal identification information stored in the second computer is input. The personal identification information is collated and the matching rate based on the collation is
It is characterized in that it is transmitted from a computer to a host computer.

Here, the personal identification information includes a retinal blood vessel pattern (retinal pattern), which is the innermost layer of the eyeball wall of the human eye,
This is a concept that includes eyeball information such as an iris pattern, as well as unique information such as fingerprints, voice prints, and handwritings that vary depending on the individual. Also,
Input by the input means includes presenting a credit card, reading a subsequent card, or manually inputting a password from a keyboard, filling in required items on an application document, reporting a member number, name, etc. It is a concept that includes actions.

The personal information is a concept including a wide range of information such as customer number, name, date of birth, gender, address, telephone number, occupation, property information, and the like. A password is a character or symbol registered in advance. Or, it is composed of a character string of several digits by a combination of numbers.

[0010]

According to the present invention, personal information is registered (stored) in the host computer in association with the password, and personal identification information of each person is stored in the second computer connected to the host computer so that information can be transmitted. It is registered (stored) in association with the password.

[0011] Next, when using the service at each member store or the like, personal identification information is input together with the password from the input means of the terminal device. The input signal information accesses the host computer via the communication line, and the personal information file is opened, and the password and the personal identification information are transmitted to the second computer. Then, the personal identification information input by the second computer is compared with the personal identification information registered in advance, and the matching rate between the registered personal identification information and the input personal identification information is transmitted to the host computer.

When there is no registered personal identification information, the matching rate is naturally 0. When another person's card or the like is used, the registered personal identification information corresponding to the input password exists but it takes time to input. Since it does not match the personal identification information, the matching rate also becomes 0 or an extremely low value in this case as well. On the other hand, when used by a legitimate cardholder, the registered personal identification information and the input personal identification information should basically completely match, but depending on the physical condition and the input method at that time, etc. Even in this case, a high matching rate is shown in this case.

Therefore, the match rate is sent to the host computer, and if the match rate is equal to or higher than the match rate determined on the host computer side, the identity of the user is confirmed. Therefore, when the defined matching rate is not reached, the host computer can issue a service refusal command, thereby excluding the use of an unauthorized person. And
Since the personal identification information is not released to the end, there is no fear of forgery and high security can be ensured.

[0014]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS In FIG. 1, reference numeral (1) denotes a second computer installed at an identity verification organization (hereinafter referred to as a verification organization H) such as an identity verification company which plays a central role in an identity verification system, and (2) denotes a second computer. A host computer installed at a service providing organization such as a credit card company (hereinafter referred to as a service organization S), and (3) accepts registration of a plurality of service using organizations (hereinafter referred to as a user organization R) such as member stores and card members. A terminal device installed at a plurality of registrars such as banks (hereinafter referred to as registrar B), and a host computer
(2) and the terminal device (3), and the host computer (2) and the second computer (1) are connected by communication lines (4) and (5), respectively.

The host computer of the service organization S (2)
Stores personal information such as customer number, name, date of birth, gender, address, telephone number, occupation, and property information in association with a password.

The registrar B has a retinal pattern reader (6) for reading a retinal pattern as personal identification information. The registration is activated when the subscriber operates the registration key (8) while looking into the finder (7) with one of the right and left eyes. Then, in the confirmation company H, the read digital information of the retinal pattern is stored in the management file of the second computer (1) by the personal information registration means comprising software resources linked to the retinal pattern reader (6). It is registered with the password as information. Therefore, in this case, the retinal pattern reader (6)
It constitutes a part of (3).

The retinal pattern reader (6) of the registrar B can perform not only registration but also collation with a registered pattern, and operates the collation key (9) while looking into the finder (7) with one eye. By doing so, the read digital information of the retinal pattern is transmitted to the second computer (1) of the confirmation organization H via the host computer (2). Therefore, the service from the service organization S can be received by operating the terminal device (3) of the registration organization B.

In the institution R, input means such as a card reader, a keyboard or a touch panel, and a retinal pattern reader (6) having no registration function are arranged. While collation key
By operating (9), the read digital information of the retinal pattern is transmitted to the second computer (1) of the confirmation organization H via the host computer (2). In this case, the input means and the retinal pattern reader
(6) constitutes the terminal device (3).

When accessing the service organization S from the use organization R or the registration organization B, cards such as a cash card and a credit card are used, and card information such as a card number is used in the cards. Has been recorded. The card information may be recorded as raw data, or may be encrypted data. Also, even if the information is recorded on a magnetic tape as a card,
An IC chip in which information is recorded may be embedded.

When the service organization S is accessed from the use organization R or the registration organization B, the data and password of the cards inserted into the input means are transmitted to the host computer (2) of the service organization S, and the host computer ( It is checked against the personal information file recorded in 2). Here, if the registered password corresponding to the data recorded on the cards and the input password do not match, it is determined that the person is unqualified, and the subsequent service provision is stopped.

On the other hand, when the recording password corresponding to the data recorded on the cards and the input password match, the personal identification information is stored in a terminal such as the institution R.
(Retina pattern) is input, the input retinal pattern is digitally processed, and the second computer (1) of the confirmation organization H
Via the host computer (2) of the service organization S. The digital information of the retinal pattern transmitted to the second computer (1) of the confirmation organization H is transmitted to the second computer (1).
The digital information of the retinal pattern registered in advance in (1) is collated, and the matching rate is calculated by the second computer (1). This collation operation is performed by using the password used when the service recipient accesses the host computer (2) as a key, and inputting the password into the host computer.
By transmitting the information from (2) to the second computer (1) and extracting the registered personal identification information corresponding to the password in advance in the second computer (1), the processing can be performed in a short time.

The matching rate calculated by the second computer (1) of the confirmation organization H is calculated by the host computer of the service organization S.
It is transmitted to (2). Here, since the matching rate changes each time the pattern is collated depending on the angle, posture, and the like of the eye to look into, the matching rate with the closest registered pattern is set as the calculated matching rate. From the second computer (1) to the host computer
If the match rate transmitted to (2) is equal to or higher than a reference value (for example, 70%) preset in the service organization S, the host computer (2) is determined to be the same person and service is provided. Like that.

Incidentally, how to determine the reference value of the match rate is as follows.
After all, it depends on how much the false positive rate is tolerated. 70%
If this is the case, the misrecognition rate falls within about 100,000 to 1,000,000 times, and there is no problem in practical use. Of course, a value higher or lower than this numerical value may be selected.

In the above-described embodiment, the confirmation organization H only confirms that the service user is a qualified person, and does not judge whether the service user is on a so-called blacklist. Eliminating bad members
The specifications are left to the service organization S. The unique service provided by the confirmation institution H is limited to only the identity verification, but there is an advantage that the management of the private data of the individual can be centrally held by the service institution S as it is.

Incidentally, the retinal pattern reader (6) may be installed at the service organization S and the service organization S itself may register as a member. Furthermore, retinal pattern reader (6)
May be installed in a particularly reliable user organization R. In this case, the reader at the time of registration and the time of use can be integrated into one.

In the above embodiment, the description has been given of the case where the retinal pattern is used as the personal identification information. However, the personal identification information includes personal characteristics such as an iris pattern, a fingerprint, and a voiceprint, and the pen pressure and the like. It is also possible to use one that utilizes a personal habit such as handwriting.

[0027]

According to the present invention, in addition to the card and password conventionally used in the online system, personal identification information such as physical characteristic information and habit information which are characteristics unique to each individual is used. Because it is done, it is possible to exclude the use of those who are not registered in advance,
High security can be maintained.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a first embodiment of an identity verification system according to the present invention.

[Explanation of symbols]

1 ... second computer, 2 ... host computer, 3 ...
Terminal device, 4, 5 ... communication line.

Claims (2)

[Claims] 1. A communication line between a host computer (2) storing personal information and a terminal device (3) having input means.
In the online system connected and connected in (4), a second computer storing a password in association with personal information stored in the host computer (2) and storing personal identification information in association with the password
(1) Connect the host computer (2) to the terminal device (3)
When the user accesses the host computer (1), the personal identification information is input together with the password from the input means of the terminal device (3), and the personal identification information stored in the second computer (1) and the input personal identification are input. An identity verification system in an online system in which information is collated and a matching rate by the collation is transmitted from the second computer (1) to the host computer (2). 2. The personal identification information includes eyeball information such as a retinal pattern and an iris pattern, personal physical characteristic information such as a fingerprint and a voiceprint,
An identity verification system in an online system that is at least one type selected from personally unique habit information such as handwriting and pen pressure.