JPS62177664A - Individual certification system - Google Patents

Abstract

PURPOSE:To prevent the illegal use of a personal identification symbol even though the symbol is visually stolen by an outside when the symbol is supplied in an operation mode, by securing such a system where the identification symbol is invalidated after it is used and only other symbols are valid. CONSTITUTION:When a user supplies a personal identification number 2 for operation confirming the identify of himself/herself, the coincident registered identification number is obtained in identification number collating processing 32 with reference to recorded information 1. In this case, the coincidence of the identification number is never decided unless the valid indication information is valid (O: valid, X: invalid) even though a coincident registered identification number is detected. When coincidence is obtained between the input number and the registered one, a locked part for a transaction process 33 is released. Thus the transaction processing is possible. When the processing 33 is through, the control is shifted to a valid indication information change processing 34 through the total control 31. Then the valid indication information 21 is invalidat ed (X) for the input number in the processing 34. While the valid indication information 22 that is already invalidated is validated (O).

Description

[Detailed Description of the Invention] [Field of Application of the Invention] The present invention relates to an identity verification system, and in particular, a personal authentication device for identifying an individual is exposed to the public view of an unspecified number of users, and there is a risk of PIN code theft. The present invention relates to a personal authentication method suitable for cases where a password code corresponding to multiple tasks is provided.

[Background of the invention]

Conventional systems, as described in Japanese Patent Application Laid-Open No. 59-128667, have centered on inventions relating to a method of verifying a personal identification number manually entered by a user. However, no consideration was given to the possibility that the user would be seen entering the PIN number and that the PIN number would be known to others. Furthermore, it was not known that multiple password codes could be used for the same individual.

[Purpose of the invention]

An object of the present invention is to provide a personal authentication system using a personal identification code such as a personal identification number, which can be used safely even if the personal identification number entered during an identity verification operation is seen or known by another person, and which can be used for multiple tasks. The purpose of the present invention is to provide a personal authentication method that can apply symbols.

[Summary of the invention]

The present invention is characterized in that a plurality of PIN codes such as PIN numbers and validity indication information for each PIN code are provided, and the PIN code used at the time of a transaction is invalidated when the transaction is completed. Further, a PIN code that has been invalidated as necessary cannot be used in a subsequent transaction, but after another PIN code is used, it can be made valid at a predetermined timing. Furthermore, in the present invention, it is also possible to change other passwords using a valid password.

Furthermore, by classifying the type of business to be traded using the validity instruction information, it is also possible to use different passwords for each applicable transaction business.

[Embodiments of the invention]

Hereinafter, one embodiment of the present invention will be described in detail using the drawings.

FIG. 1 shows the structure of registration information. This registration information may be held in a portable storage medium such as an IC card or a magnetic card, or may be held in a distributed transaction processing device, a central processing unit, or a storage medium connected thereto. Further, the registration information may be processed such as encryption processing. g. No information 1 is 1. Business partner classification identification information such as account number and customer code 10, PIN number 11, Valid instruction information 2
Consists of 1.

Figure 2 is a block diagram of the configuration of one individual authentication process, and in this embodiment, there are three registered PIN numbers (1i, 1 in Figure 2).
2.1a).

Now, when the user inputs the PIN number 2 as an identity verification operation, the PIN verification process 32 refers to the recorded information 1 to find a matching registered PIN number.

In this case, even if there is a registered password that matches, the passwords will not be considered to match unless the validity instruction information is valid (in this embodiment, O indicates valid and X indicates invalid). In this embodiment, if the input password 2 is r1234J, it is a match, and if it is r5678J, it is a mismatch. If the password entered by the user matches.

The transaction processing lock section is released to enable transaction processing 33.

When the transaction processing 33 is completed, the overall control 31
Control is transferred to valid instruction information change processing 34.

The valid instruction information change process 34 invalidates (x in this example) the valid instruction information 21 corresponding to the password (r1234J in this example) input in the transaction process. Furthermore, the validity instruction information 22 that has already been invalidated according to the prior rules is made valid (O in this example). In this embodiment, all valid instruction information that is already invalid is enabled, but
The number of times of use, date of use, day of the week, etc. may be stored for each piece of validation instruction information, and the timing of validation may be determined based on such information.

FIG. 3 is a flowchart showing an overview of the above processing. A part or all of the processing blocks shown in FIG. 3 may be performed by a microprocessor constituting the IC card. Further, whichever of the process of comparing the registered password and the key manual password (step 301) and the checking of the validity instruction information (step 302) shown in the figure may be executed first.

Further, in this example, the system automatically invalidates the validity instruction information corresponding to the uniquely used PIN number at the time of transaction completion, but it is also possible to invalidate it by some instruction from the user. It is also possible to inquire of the user whether or not to invalidate the PIN number from the system and/or change the PIN number at the end of the transaction. Further, in this embodiment, a plurality of PIN number registration cards are shown, but a single PIN number 51? , it may be a record.

In addition, it is also possible to change the valid instruction information using the valid instruction information change process 34 at home, at a specific location, or by using a normal transaction device using a communication means or a predetermined device. , it is also possible to change or add an already registered password using the password registration process 35. However, in order to perform these processes, unlocking using a valid password may be required.

In the above embodiment, the validity instruction information indicates whether the corresponding registered PIN is valid or not, but by holding the type data of the transaction target business for which the PIN is valid in the validity instruction information, It is possible to limit the applications for which each PIN number is valid, and it becomes possible to manage and use PIN numbers for each transaction business. In this case, the information regarding the trading operation may be held uniquely in the transaction device or may be inputted by the user. 6.
It is shown in Figure 4. In this embodiment, the type data of the transaction target business is included in the valid instruction information, but the type data is held in the customer category identification information in the registered information in Figure 1, and a plurality of customer category identification information is provided. It may be.

According to this embodiment, even if the password is known and misused by another person when the password is input, the password is invalid, so there is an effect that it will not be used illegally. Additionally, it is possible to add and change the PIN number, which has the effect of increasing the ability to prevent unauthorized use.

In addition, by identifying applicable transaction target transactions using the validity instruction information, it becomes possible to manage and use valid passwords for each transaction transaction.

In addition, in the above embodiment, a case where a password is used as a password has been explained, but a password other than the password is two characters 9.
It goes without saying that the present invention can also be applied to passwords such as figures and, if necessary, sounds.

〔Effect of the invention〕

According to the present invention, after a PIN code is used, it is possible to invalidate the PIN code and make only PIN codes other than the PIN code valid. However, it has the effect of preventing unauthorized use. Furthermore, the present invention allows the registration and addition of a plurality of password codes, which has the effect of increasing the ability to exclude unauthorized use. In addition, in the present invention, the invalidated PIN code is
Since the password can be activated cyclically at a predetermined timing, the user's burden on storing passwords can be reduced even though a plurality of passwords are used.

Further, according to the present invention, it is possible to register one or more passwords that are effective for dealing with transactions, and it is applicable to a plurality of transactions.

[Brief explanation of drawings]

FIG. 1 is a configuration diagram of registered information regarding the PIN code of the present invention;
FIG. 2 is a block diagram of the configuration of personal authentication processing according to the present invention, FIG. 3 is a flowchart of personal authentication processing according to the present invention, and FIG. 4 is a flowchart showing personal authentication processing according to transaction target business according to the present invention.

Claims (1)

[Claims] 1. An individual authentication system for verifying the identity of an operator using a PIN code, characterized in that a plurality of PIN codes and validity indication information for each PIN code are provided for one individual. Authentication method. 2. In a personal authentication system that uses a PIN code to verify the identity of an operator, when a transaction using a PIN code is completed, the PIN code used is invalidated until predetermined instruction information is received. Personal authentication method. 3. The personal authentication method according to item 1 or 2, characterized in that among a plurality of PIN codes, a valid PIN code is used to change other PIN codes. 4. Among multiple PIN codes, select the invalid PIN code.
2. The personal authentication method according to item 1, wherein the personal identification code is made valid at a predetermined timing related to the progress of use.