JPH117506A - Electronic authentication card system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To surely confirm identity and to improve the security of transmission data by converting visible information for identifying an individual to information different from video information, converting it into the identification video information of fewer data as needed and transmitting it to an authentication device side along with a data conversion parameter. SOLUTION: The authentication device 4 receives the identification code of a card, the data conversion parameter and the identification video information as a message through a channel 5 and stores them in a memory 42. A comparison information storage table 42a is referred to based on the identification code, the digital data of the video information corresponding to a photograph 2 are read, they and the received data conversion parameter are sent to an identification video information generator 44 and an MPU 41 receives the generated identification video information and compares it as comparison reference information with the received identification video information. In the case of matching with prescribed accuracy by the judgement, the message that the identity is confirmed is sent out to an IC card reader-writer 3.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic authentication card system. When visible information is read as video data (image data) from a card) and the data is transmitted and authenticated on the authentication device side, the identity can be more reliably confirmed and the security of the transmitted data can be improved. It relates to an electronic authentication card system.

[0002]

2. Description of the Related Art Conventionally, as one of authentication cards, for example, an IC card or the like, encrypted data, a password, and encryption key information are transmitted to an authentication device as a data transmission method for personal authentication. There is a method of transmitting and authenticating. In order to improve the security of transmission data in this case, there is known a method in which key information is generated by a random number or the like and is changed each time. In addition, in order to improve security, IC cards and the like store fingerprint data unique to the individual or data obtained by digitizing the signature as digital signature data instead of the recite number, and transmit this for use in personal authentication. doing. On the other hand, in the case of a credit card, an embossed card on which a photo is affixed in the same manner as an identification card or the like is used for identity verification, thereby improving security.

[0003]

In the latter case of a credit card or the like with a photo attached thereto, the condition of the photo is determined by the fact that each individual brings the photo attached card and confirms the identity of the person who brought the photo with the attached photo. Not only is the status of the principal, and the person who confirms it, sure that the identity of the principal can be confirmed is not only uncertain, but also if the authentication device side confirms the electronic transaction, the video data itself must be transmitted Rather, there is a high risk of it being stolen. On the other hand, the former IC
In the card system, even if digital signature data is used, it is still fixed digital data, so there is a danger that this will be stolen during transmission to the authentication device side, and even if it is encrypted There is a very high possibility that they will be decrypted. Therefore, its security has its limits. SUMMARY OF THE INVENTION An object of the present invention is to solve such a problem of the prior art, and to provide an electronic authentication card system capable of more surely confirming the identity and improving the security of transmission data. .

[0004]

The features of the electronic authentication card system of the present invention for achieving the above object are as follows.
An authentication card having on its surface visible information for identifying the individual, such as a sign character, a photograph, and a real seal, for identifying the individual; a reading device for reading the visible information from the authentication card as video information; and a reading device obtained from the reading device. Identification video information generating means for generating predetermined video conversion information (data for converting data) on the video information to generate identification video information of less data than the video information; Transmission means for transmitting the identification information of the authentication card, the data conversion data, and the identification video information to the authentication device, and means for changing the data conversion data to a different one from the previous reading at the time of reading. Information from the data conversion data and the identification video information received by the authentication device, and reproduces the information corresponding to the video information at the time of the reading device. Corresponding to the card identification information and performs personal authentication of the by comparing the pre-stored comparison information serving.

[0005]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Data conversion data is applied to visible information for identifying an individual, such as a sign character, a photograph, and a real seal, for identifying the individual, which is affixed or engraved on the authentication card. Then, the video information is converted into information different from the video information, and if necessary, is converted into identification video information of less data, and this is transmitted to the authentication device together with the data conversion data. As a result, it is difficult to determine the content of the transmission because it is not the actual video information. Moreover, since the data conversion data is changed each time it is read, it is difficult to steal it. Also, even if the information is stolen, it cannot be used as authentication information. As a result, transmission data security is improved. In addition, a small amount of transmission is required for identification video information with a small amount of data. On the other hand, the authentication device side can reproduce substantially the same video information as at the time of reading in accordance with the received data conversion data, thereby referring to the information of the comparison reference from the identification information of the confirmation card. You can authenticate yourself. Alternatively, the authentication device generates the information corresponding to the identification video information by applying the received data conversion data to the information to be compared and stored in advance corresponding to the identification information of the authentication card, and receives the information. The personal authentication can be performed by comparing the identified identification image information with the identification image information. As a result, identification can be performed more reliably than in the case using a recitation code or the like.

[0006]

FIG. 1 is a block diagram showing one embodiment of an electronic authentication card system to which the present invention is applied, FIG. 2 is an explanatory diagram of a data conversion parameter table, and FIG. 3 is a block diagram of another embodiment. It is. In FIG. 1, reference numeral 1 denotes an IC card, and a photograph 2 is attached to a surface of the IC card.
The photograph 2 is a photograph of the person's face. The photograph 2 may be any visible information that identifies the individual who uses the card, and may be a sign character or an actual seal image for identifying the individual.
1a is a magnetic stripe, 1b is a built-in I
C and 1c are characters such as a user name. 3 is an IC card reader / writer, 4 is an authentication device, and I
The C card reader / writer 3 and the checking device 4 are mutually connected via a line 5. Reference numeral 6 denotes a printer provided in the IC card reader / writer 3.

The IC card reader / writer 3 is composed of a digital camera 31, a discrimination video information generation device 32, a data processing device 33, and the like, which are reading devices for reading the picture 2 attached to the IC card 1 as video information. The data processing device 33 includes an MPU 34, a memory 35, a transmission / reception circuit 36, and an IC card as a communication interface.
A card interface 37 is provided, and these are mutually connected by a bus 39. Further, the memory 35 is provided with a data conversion parameter table 38, a parameter selection program 35a, and the like. The data conversion parameter table 38 stores the data conversion data of the present invention as parameters in the form shown in FIG.
The digital camera 31 and the identification video information generation device 32
The digital camera 3 controlled by the data processing device 33
1 transmits video data (bitmap image data) of the photograph 2 to the identification video information generation device 32.
The identification video information generation device 32 performs a process of extracting only a necessary video data portion from the video data from the digital camera 31 based on the data conversion parameter received from the data processing device 33. The resulting data will not be able to reproduce the actual video. In particular, in this case, it is preferable to employ a data conversion parameter for extracting a characteristic portion of the video.

The data conversion parameter is, for example, a data parameter serving as filter data for extracting only data at a specific video position of video data for one frame of the digital camera 31. A flag "1" is set at a specific position in the bit string, and the data is passed as the bit "1" or becomes a block bit as shown in FIG. Alternatively, this is a threshold setting parameter for setting video data collected by the digital camera as a threshold above a specific luminance level. As a result, only a specific video data portion is generated as a characteristic portion. As a result, feature extraction from video data becomes possible. In addition, this provides two such thresholds as upper and lower limit values,
Data during that time may be used as feature extraction data. In addition, since the identification video information is printed on the printer 6, it is preferable that the number of print lines is one to several lines, and the data is not so large.

The data processing device 33 exchanges data with the IC card 1 via the IC card interface 37 and acquires an identification code from the mounted IC card 1. Needless to say, at this time, the identification code may be obtained from the IC card 1 by performing the matching detection using the recitation code and confirming the validity thereof, as in the related art. The transmission / reception circuit 36 encrypts three pieces of information including the received identification code, the data conversion parameter, and the identification image information received from the identification image information generating device 32, or without encrypting them.
To the authentication device 4 via the line 5. Further, at this time, the data processing device 33 prints the generated identification video information on a slip (paper) by the printer 6 in three copies. A part of the information is for use as a copy of the person, a part of the information is for a store or the like where the IC card reader / writer 3 is installed, and the last part is for mailing to the authentication device 4. Since it is not always necessary to print a copy of a store, etc., two copies may be made.

The authentication device 4 includes an MPU 41 and a memory 42,
It comprises a transmission / reception circuit 43 and an identification video information generation device 44, which are interconnected via a bus 45. The memory 42 is provided with a comparison information storage table 42a. In the comparison information storage table 42a, necessary information is transferred from the external storage device 46 such as a normal disk storage device to the memory 42 and stored therein. The comparison information storage table 42a is a table that stores digital data of video information obtained by photographing the photograph 2 with a digital camera together with the identification code of the photo pasting card, and stores the digital data in a form that can be searched using the identification code as a key. This is registered in the form of a table in the external storage device 46 together with each identification code when the IC card 1 is issued. This registration is
The data may be directly transferred via the line 5 by the data processing device 33 and registered in correspondence with the IC card, or the same video data may be separately generated by the digital camera from the IC card mailed in the checking device 4 and the external storage device may be used. 46 may be registered. The identification video information generation device 44 is a device similar to the above identification video information generation device 32,
This is realized by a program executed by U41. Of course, the identification video information generation device 32 may be realized by a program executed by the MPU 34.

The authentication device 4 receives the identification code of the card, the data conversion parameter, and the identification video information as a message via the line 5. Then, they are stored in the memory 42. Then, first, the digital data of the video information corresponding to the photograph 2 is read out from the comparison information storage table 42a based on the identification code, and this data and the received data conversion parameter are identified by the identification video information generation device. Send to 44. The identification video information generation device 44 generates the same identification video information as described above. The generated identification video information is received by the MPU 41 and is used as comparison reference information to compare the received identification video information with the received identification video information by data matching processing to determine whether or not they match. If they match with a predetermined degree of accuracy, a message indicating that the user is confirmed, for example, OK is generated and a message is sent to the IC card reader / writer 3. If there is no match due to the data matching process, a message saying NG cannot be sent by a message of NG. When the data amount of the identification video information is small, direct match detection may be performed. By the way, when plagiarism or the like occurs, it is possible to confirm whether the transaction is a principal transaction or a plagiarism transaction by matching and matching the slip printed by the printer 6 and mailed to the authentication device 4 with the slip for the copy of the person. Further, double identification can be performed by printing the identification image information generated by the identification image information generation device 44 of the authentication device 4 and checking it with the mailed slip.

The data processing device 33 has a data conversion parameter table 38 as shown in FIG. When the IC card 1 is inserted, the MPU 34 executes the parameter selection program 35a, refers to the data conversion parameter table 38, reads out the data conversion parameters other than the data conversion parameters used in the previous transmission, and reads the data conversion parameters. 32. As a result, different data conversion parameters are used each time reading is performed. As a result, even if the transmitted data is stolen, it is less likely to be affected in the next transaction. For this purpose, the data conversion parameter table 38 stores an IC with the data conversion parameters used in the previous reading.
An identification code column 38a in which the identification code of the card is registered is provided. By executing the parameter selection program 35a of the MPU 34, an operation is performed so as to select a data conversion parameter whose identification code in this column 38a does not match. And when a new parameter is selected,
An identification code is registered in the corresponding identification code column 38a, and the original identification code is stored in the identification code column 38a.
Is deleted. In this case, the position of the parameter to be adopted next can be determined by a random number or the like.

Incidentally, the data conversion parameter may be a reversible parameter for returning the original video data from the identification video information. In such a case,
The authentication device 4 receives the identification code, the data conversion parameter, and the identification video information as a message via the line 5,
The original video data is reproduced using the received data conversion parameters and the identification video information, and the reproduced video data and the video data obtained from the comparison information storage table 42a are determined based on the received card identification code. Authentication processing may be performed by comparing.

FIG. 3 shows an embodiment in which an identification video information generating device 32a is provided in the IC card 1. The identification video information generation device 32a is realized by the MPU mounted on the IC card 1 executing a predetermined program. The IC card reader / writer 3 first obtains the identification code from the IC card 1, and the data processing device 33 transmits the data conversion parameter obtained according to the identification code and the video data obtained from the digital camera 31 via the IC card interface 37. Send to IC card 1. As for the data conversion parameter, a parameter that has not been used last time is selected by referring to the data conversion parameter table 38 in accordance with the identification code of the IC card 1 as described above. The IC card 1 that has received the received video data and the data conversion parameter sends them to the identification video information generating device 32 and sends them to the generated identification video information and the data processing device 33. . The data processing device 33
The identification image information received from the C card 1 and the identification code and the data conversion parameter from the IC card 1 are sent to the authentication device 4 via the line 5 to receive the authentication result.

As described above, in the embodiment, the authentication device 4
The identity is detected by identifying the match with the identification video information.
As described above, when the data conversion parameter is a reversible data conversion parameter capable of reproducing the data of the original video information, the original video data is extracted from the identification video information received from the received data conversion parameter. By reproducing the data and matching the data with the data in the comparison information storage table 42a, the user can be identified. In the embodiment, an example of an IC card is given as the confirmation card.
The card is not limited to an IC card, and any card may be used as long as the identification code of the card is input by the input device. Further, in the case of collecting video data (bitmap image data) of a photograph or the like, a digital camera is taken as an example in the embodiment. However, the present invention is not limited to a digital camera and collects image data of an image scanner or the like. Any device that can be used may be used.

[0016]

As described above, according to the present invention, a visible character for identifying an individual, such as a sign character, a photograph, or a real seal, for identifying the individual attached to or engraved on the authentication card. The information is converted to information different from the video information by the data conversion parameter, and if necessary, is converted to identification video information of less data, and this is transmitted to the authentication device together with the data conversion parameter. However, it is difficult to determine the content of the transmission because it is not the actual video information. In addition, since the data conversion parameter is changed each time the data is read, it is difficult to steal the data. Also, even if the information is stolen, it cannot be used as authentication information. As a result, transmission data security is improved. In addition, a small amount of transmission is required for identification video information with a small amount of data.

[Brief description of the drawings]

FIG. 1 is a block diagram showing one embodiment of an electronic authentication card system to which the present invention is applied.

FIG. 2 is an explanatory diagram of the data conversion parameter table.

FIG. 3 is a block diagram of another embodiment to which the present invention is applied.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... IC card, 2 ... Photograph, 3 ... IC card reader / writer, 4 ... Authentication device, 5 ... Line, 31 ... Digital camera, 32, 44 ... Identification video information generation device, 33 ... Data processing device, 34, 41 ... MPU, 35, 42 ... Memory,
36, 43: transmission / reception circuit, 37: IC card interface, 38: data conversion parameter table. 42a ...
Comparison information storage table, 46... External storage device.

Claims (6)

[Claims] (1) Sign letters, photographs,
A card having on its surface visible information for identifying the individual such as a real seal, a reading device for reading the visible information from the card as video information, and a predetermined data conversion data for the video information obtained from the reading device. Identification video information generating means for generating identification video information by operating, transmission means for transmitting the identification information, the data conversion data, and the identification video information of the card separately input or read to the authentication device, Means for changing the data conversion data at the time of reading to data different from the data at the time of the previous reading, wherein the authentication device reads the image at the time of the reading device from the received data conversion data and identification image information. The information corresponding to the information is reproduced and compared with the information to be compared and stored in advance corresponding to the received identification information of the card. Electronic authentication card system that performs authentication of the individual by. 2. The authentication device according to claim 1, wherein the authentication device applies the received data conversion data to information to be compared and stored in advance in correspondence with the received identification information of the card, and corresponds to the identification video information. An electronic authentication card system for generating information and comparing the received identification image information with the received identification image information to authenticate the individual. 3. The electronic authentication according to claim 2, wherein the identification video information generating means extracts the identification video information which is less data than the video information and which is a characteristic part in the video information by applying the data conversion data. Card system. 4. The electronic authentication card system according to claim 3, wherein said identification video information is further printed on paper for identification use. 5. The electronic authentication card system according to claim 4, wherein a plurality of sheets of the paper are printed, and one of the sheets is sent to the authentication device. 6. The card is an IC card, and the identification video information generating means is provided in the IC card,
3. The electronic authentication card system according to claim 2, wherein the video information obtained from the reading device is transferred to the IC card, and the IC card generates identification information of the card, the data conversion data, and the identification video information.