JPS62233883A - Individual identification system - Google Patents

Abstract

PURPOSE:To ensure complete security against the robbery or misuse of a memory card by recording previously a cipher text on the memory card and using a cipher key as a cipher number to confirm the owner of said card. CONSTITUTION:An owner 108 of a memory card 107 puts the card 107 into a memory card reader/writer 101 and also pushes the keys on a keyboard 102 for input of a personal identification number. A personal computer 105 supplies the data stored in the card 107 received from the reader/writer 101 and the personal identification number of the owner 108 received from the keyboard 102 to perform calculation processing. Thus the propriety of both the card 107 and its owner can be decided.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] This patent relates to a personal identification system using a memory card in which information can be written and read.

[Conventional technology]

Publicly known examples closest to the invention include Nikkei, laser recording technology,
NIKKErCO, a high-capacity card made possible by new optical media
MPUTER, 1983, 3゜21, p, ρ, 1.29
-136. There is.

Optical cards use laser technology to store general cash cards.
This allows a card-sized card to have a maximum storage capacity of 5 megabytes (40 million pips). This high-capacity card is said to have an extremely wide range of uses, including personal computer software, bank cards, health insurance cards, and video games.

Optical cards can be used for businesses that require security, e.g.
When used in the financial industry, it is often necessary to ensure that the user of the Hikari Cart has the proper authorization.

Conventionally, for the 6J1ki card, identity verification was performed using a PIN matching method. In other words, one person must decide on a code number that is long enough to be unlikely to come true even when guessing, and write the code number on a magnetic card in advance.
The person himself/herself remembers the PIN number. As long as no one else knows the PIN, the person who shows the PIN that matches the PIN read by the magnetic card reader is the owner of the magnetic card.6 By the way, the conventional password matching method has the following problem.

(1) Since the PIN number was written directly on the magnetic cart, there was a risk that it would be misused if the magnetic card was left behind or fell into the hands of a malicious third party. In other words,
There was a risk that the PIN number in the magnetic card could be read and misused by a third party.

(2) The owner of a magnetic card could forget his or her personal identification number, in which case he or she would have to go through cumbersome administrative procedures to prove that he or she is the legal owner of the magnetic card.

If a PIN number matching method similar to that used for magnetic cards is applied to optical cards, problems similar to those described above will naturally occur. Optical cards are 1 due to their large memory capacity.
Although it potentially has various applicability, the above-mentioned security problem may become a bottleneck in realizing them.

On the other hand, since optical cards have a large soft memory and are difficult to rewrite, it is considered possible to use an identification method other than the above-mentioned PIN number matching method. However, until now, an identity verification method that effectively utilizes these characteristics has not been realized.

[Problems to be Solved by the Invention] The purpose of the present invention is to solve the problems in the conventional personal identification system using a memory card and to provide a new personal identification system that provides sufficient security against theft and misuse. The purpose is to donate money.

[Means for solving problems]

In order to solve the above problems, the present invention uses the following four means.

■ In advance, the first data and the first data are
The ciphertext of the first data obtained by encrypting it with the encryption key is recorded on a memory card.

When using the memory card, the encryption key is used as a password to confirm the owner of the memory card.

2. The memory card stores first data corresponding to a first encryption key and a set of ciphertext of the first data, as well as second data and second data corresponding to a second encryption key. ciphertext set, and further to the nth data generally corresponding to the nth encryption key and the ciphertext set of the nth data, n
A set of data and its ciphertext are recorded, and when the memory card is used, among the n encryption keys,
Some! Use it as a sound proof.

3. The memory card has the previous! The encryption key association information that can derive 2n encryption keys by association of the owner is written, and if the owner forgets the encryption key, the encryption key can be retrieved by looking at the association information. Allows you to remember.

4. Some of the encryption keys are derived from the owner's unique physical features such as voiceprint, facial features, fingerprints, and variations of the physical characteristics. To make it possible to confirm the owner even if the characteristics of the item change.

[Effect]

Using the technical measures described above, a first-order effect occurs.

1. Since there is no PIN number written on the memory card, even if someone else obtains the memory card by some means, they will not be able to learn the PIN number from the contents written on the memory card. However, the encryption method used here is one in which it is extremely difficult to infer the encryption key from plaintext and ciphertext data when they are obtained.

2. By verifying the identity of the user using multiple PIN numbers, even if one PIN number is stolen, no one else can falsely impersonate the user and use the memory card fraudulently.

3. If the user forgets his/her password, he/she can easily remember it by referring to information for associating the password recorded on the memory card.

4. Voiceprint 1 There are some errors in the measured values of analog data that are the physical characteristics of the person, such as facial features and fingerprints. Therefore, errors usually exist in the encryption key obtained by converting the analog data into digital data. Even when an encryption key within an allowable error range is input, the identity of the person is verified, so it is possible to deal with constant errors in physical characteristics.

〔Example〕

The first fM+ is a system configuration diagram showing an embodiment of the present invention. In FIG. 1, an owner 108 of a memory card 107 such as a magnetic card or an optical memory card inputs the memory card 107 into the memory card reader/writer 101 and reads 1: Keyhole 1-' l
Enter the password by pressing the O2 key. The personal computer 1, 05 inputs the data in the memory card 107 sent from the memory card reader/writer 101 and the PIN number of the owner 107 sent from the keyboard 102, and performs calculation processing to be described later. By doing this, it is determined whether the memory cards 1, 07 and the owner 108 are legitimate. Depending on the situation, the personal computer 105 may check the authenticity using the above-mentioned PIN number, and may also check the facial data of the owner 108 using the camera 103 and the data stored in the memory card 107 during calculation processing to be described later. Confirmation using data or voiceprint data of the owner 108 using the microphone 104 and data in the memory card 107 is performed. Operation instructions to the owner 108 are given through the display screen of the personal computer 105 or the speaker 106.

FIG. 2 shows the contents of the memory card 107 of FIG. Data 1NA201 ~ Cheetah INE206
The memory card 200 is loaded with arbitrary data determined in advance.
This is what I wrote in. Data OUTΔ207 to data 0UTA212 are the following data written in the memory card 200 in advance.

(1) Data ○UTA207: Encrypted text obtained by using data INA201 as input data and using compressed encrypted text of the owner's 108 password as an encryption key.

(2) Data 0UTB208: A ciphertext obtained by using data 1NB2O2 as input data and compressed ciphertext of the physiognomic data of the owner 108 as an encryption key.

(3) Data UTC209: Encrypted text obtained by using data INC203 as input data and using a compressed encrypted text of a modified example of physiognomic data of the owner 108 as an encryption key.

(4) Data ○UTD210: Data IND20/1
is the input data, and the compressed ciphertext of the voiceprint data of the owner 108 is obtained as the encryption key.

(5) Data ○UTE211: A ciphertext obtained by using the data INE205 as input data and using a compressed ciphertext of a modified example of the voiceprint data of the owner 108 as an encryption key.

(6) Data 0UTF211: Data INF20
6 as input data, and the compressed ciphertext of the correct answer to the associative data 213 as the encryption key.

The association data 213 is "first love's birthday".

Although he can easily answer questions such as “the altitude of his favorite mountain,”
It contains questions that cannot be easily answered by anyone other than the person himself/herself.

Here, compressed ciphertext C(M) of data M is created as follows◇ Step 1: Initial value■ One (0) is determined and one block cipher machine is prepared. However, the length of the input data and output data of this block cipher machine is the same as the length of the initial value (0).

Step 2 Let k be the manager of the niblock cipher machine.

Divide data M into blocks of length k, and define each block as M
l, M2. ..., Mn. When the length of the last block Mn is less than n, data "0" is added to the remaining portions to set the length of Mn to n.

Step 3: Let r (i) be the input data I (i-1) encrypted with the key Mi.

r(i)=E(1(i-1), M+) This process is performed with i=1.2. ..., repeat for n.

Here, the encryption method E(.) indicates a block cipher.

Step 4 N (n) finally obtained in step 3 is the compressed ciphertext C(M).

C(M)=I (n) FIG. 3 is a flowchart showing the processing in the personal computer 105 of FIG. 1. The operation of the personal computer 105 will be described below according to the IF diagram in FIG.

Step 301: Set C0UNT=1.

C0UNT PIN Number 1 Out of the checks based on facial data and voice print data, this shows how many checks have been passed at this point.

Step 302: Set FLAG=O.

FLAG indicates how many times the password has been re-entered at the current time.

Step 303: Instruct the owner 108 to enter the password using the screen of the personal computer 105 and the speaker 106.

Step 304: Use the entered PIN as the encryption key.
Encrypt the data INA 201. If the encrypted result matches the data 0UTA207, the process advances to step 308. If not, proceed to step 305.

Step 305: FLAG=FLAG+1. ! :do. In other words, this indicates that the password re-input circuit has increased once at the present time.

Step 30 [If E:FLAG≦2, step 303
Return to If FLAG=3, proceed to step 307. F
If LAG=4, proceed to step 309.

Step 307: Display the associative data 213 on the screen of the personal computer 105, and
The owner 108 uses 06 to key in the answer.
instruct.

Step 308: Set C0UNT=1. In other words,
At this moment, the number of passes is l.

Step 309: Input facial data from camera 103.

Step 310: Compress and encrypt the physiognomic data using a predetermined initial value.

Step 311: Using the compressed data of physiognomy data as the encryption key, whether the ciphertext obtained by encrypting the data lNB2O2 matches the data 0UT8208, or whether the ciphertext obtained by encrypting the data INc:203 is the data ○
Check whether it matches UTC209. If there is a match, the process advances to step 312. Otherwise, proceed to step 314.

Step 312: The value obtained by adding 1 to the value of C0UNT is set as the new value of C0UNT. That is, C0UNT=
COUNT+10 Step 313: Check whether COUNT=2. If C0UNT=2.

Proceed to step 318. Otherwise step 31, 4
Proceed to.

Step 314: Input voiceprint data from the microphone 104.

Step 315: Compress and encrypt the voiceprint data using a predetermined initial value.

Step 316 Using the compressed encrypted data of the two voiceprint data as the encryption key, the ciphertext obtained by encrypting the data IND204 matches the data 0UTD210, or the ciphertext obtained by encrypting the data INE205 matches the data 0UTE211. Find out. If there is a match, the process advances to step 318. Otherwise, proceed to step 317.

Step 317: The owner 108 determines that it is not legitimate;
The card 107 is confiscated inside the card reader/writer 101. end.

Step 318: The owner 101 is determined to be legitimate;
From now on, individual processing will begin after card verification. end.

[Modification 1 of the embodiment] In FIG. 2 of the embodiment, data 0UTA207 to
Data ○UTF212 may be changed as follows.

(1) Data 0UTA207: Compressed ciphertext obtained by compressing the owner's 108 password using data lNA201 as an initial value.

(2) Data ○UTB208: Data lNB2O2 is converted into j ([value is compressed ciphertext obtained by compressing the face image data of owner LO8.

(3) Data ○tJTc209: Compressed ciphertext obtained by compressing a modified example of the face image data of the owner 108 using the data INC203 as an initial value.

(4) Data UTD 210: Compressed ciphertext obtained by compressing the voiceprint data of the owner 108 using the data IND 204 as an initial value.

(5) Data ○UTE211: Compressed ciphertext obtained by compressing a modified example of the voiceprint detector of the owner 108 using the data INE205 as an initial value.

(6) Data 0UTF212: Compressed ciphertext obtained by compressing the correct answer to the associative data 213 using the data INF206 as an initial value.

However, according to Section 29, in Figure 3 of the above embodiment, 1
, PIN number, face data, and voice print data are checked using the same modification.

[Modification 2 of Embodiment] In FIG. 3 of the embodiment, data 1NA201 to data 1NF206 are all the same data, and 7+ and L"C,
Data [N[3202 to lNF206 are replaced with lNA201, and data l in FIG.
N8202 to lNF206 may be deleted.

[Variation 3 of the Embodiment] The personal computer 105 may be a business-use identification device such as a bank terminal 6 [Variation 4 of the Embodiment]
] In step 3 of the embodiment, a Japanese cipher may be used as the block cipher E(.).

[Variation 5 of Embodiment] In the embodiment described above, data 0UTA207 to data 0UTF2+2 are written into the memory card 2oo in advance.
You can do it as follows.

(1) Data 0UTA207: A compressed ciphertext obtained by using data 1NA201 as input data and using the owner's 108 password as an encryption key.

(2) Data 0UTB208: Compressed ciphertext obtained by using the data 1N13202 as input data and the physiognomic data of the owner 108 as the IQY encryption key.

(3) Data 0UTC 209: Compressed ciphertext obtained by using data 1NC 203 as input data and using a modified example of physiognomic data of owner 108 as an encryption key.

(4) Data 0UTD210: Compressed ciphertext obtained by using the data END204 as input data and using the voiceprint data of the owner 108 as an encryption key.

(5) Data UTE 211: Compressed ciphertext obtained by using data INE 205 as input data and using a modified example of the voiceprint data of the owner 108 as an encryption key.

(6) Data ○UTF212: Compressed ciphertext obtained by using data lNF206 as input data and using the correct answer to associative data 213 as an encryption key.

〔Effect of the invention〕

According to the present invention, the fifth-order effect can be obtained.

1. Since there is no PIN number written on the memory card, even if someone else obtains the memory card by some means, they will be able to determine the PIN number from the contents of the memory card. cannot know. However, the encryption method used here is
It is assumed that when plaintext and ciphertext are obtained, it is extremely difficult to estimate the encryption key from these data.

2. By verifying the identity of the person using multiple PIN numbers,
Even if one PIN number is stolen, someone else cannot falsely impersonate the user and use the memory card fraudulently.

3. Countermeasures for forgetting the PIN number If the user forgets the PIN number, it is possible to easily remember it by referring to the PIN association information recorded on the memory card. can.

4. Dealing with dl errors in physiognomy, voiceprints, etc.Physiology, voiceprints, etc.
There is usually some error in the measured values of analog data, such as fingerprints, which are physical characteristics of a person. Therefore, errors usually exist in the dark 7f key obtained by converting the analog data into digital data. Even when an encryption key within the allowable error range is entered, the identity of the person is verified, so physical characteristics are +1
1! I fixed 1e! Differences can also be addressed.

[Brief explanation of drawings]

Figure 1 is a system configuration diagram showing an embodiment of the present invention, Figure 2 is a system configuration diagram showing an embodiment of the present invention.
['J is a diagram showing the contents of the memory card 107 in FIG. 1, and FIG. 3 is a diagram showing the contents of the personal computer 105 in FIG.
3 is a flowchart showing the processing procedure in FIG.

Claims (5)

[Claims] 1. In a memory card on which information can be written and read, first data and a ciphertext of the first data obtained by encrypting the first data with a first encryption key are stored in advance in the memory card. A personal identification method characterized in that the encryption key is recorded on a card, and when the memory card is used, the encryption key is used as an encryption number to confirm the owner of the memory card. 2. The encryption is performed using a compression encryption method,
The personal identification method according to item 1, wherein a ciphertext can be created by knowing the plaintext and the encryption key, but it is not possible to know the plaintext just by knowing the ciphertext and the encryption key or decryption key. 3. In addition to first data corresponding to a first encryption key and a set of ciphertext of the first data, the memory card includes:
A set of second data and a ciphertext of the second data corresponding to a second encryption key, or generally a set of nth data and a ciphertext of the nth data corresponding to an nth encryption key,
Item 1, wherein n sets of data and their ciphertexts are recorded, and when the memory card is used, some of the n encryption keys are used as a PIN number. Personal identification method. 4. The memory card has written thereon encryption key association information that allows the n encryption keys to be derived by association with the owner, and when the owner forgets the encryption key,
2. The personal identification method according to item 1, wherein the encryption key is reminded by viewing the association information. 5. Some of the encryption keys are derived from the owner's physical characteristics such as voiceprint, physiognomy, fingerprints, etc., as well as some variations of the physical characteristics, and are The personal identification method according to item 1, characterized in that the owner can be identified even if the physical characteristics have changed.