WO2001075782A1

WO2001075782A1 - Individual body identifying method by two-dimensional code, hybrid individual person authenticating system, and off-line person identifying system

Info

Publication number: WO2001075782A1
Application number: PCT/JP2001/002612
Authority: WO
Inventors: Hitoshi Kokumai; Ryohei Masuno; Masayuki Kuriyama
Original assignee: Mnemonic Security Limited
Priority date: 2000-04-03
Filing date: 2001-03-29
Publication date: 2001-10-11
Also published as: JP2001283167A; AU2001242824A1

Abstract

An individual identifying method by encrypted two-dimensional codes, a hybrid individual person authenticating system, and an off-line person identifying system are disclosed. The content of two-dimensional codes representing encrypted individual body information is recorded as image information. Individual person specific information as an individual person recognizing means is composed of encrypted two-dimensional codes. The 'order of arrangement' of two-dimensional codes mixed in dummies is made off-line input independent of card read information and online input information. Singular data created by subjecting image data on, e.g., a signature to a digital processing is added to data created by encrypting the individual person specific information as an individual person authenticating means. The resultant data is transformed into two-dimensional codes, which is printed on a document such as a certificate. In such a way, when individual person specific information such as a certificate is reproduced, image data such as on a signature is detected and reproduced based on the singular data, and thereby the person can be identified without online checking.

Description

Description Individual identification method using two-dimensional code, hybrid personal identification system, and offline personal identification system

The present invention relates to an individual identification method using a ^ -coded two-dimensional code. Further, the present invention relates to a hybrid personal identification system and an offline personal identification system using an individual identification method using a two-dimensional code. Background art

As a means of specifying goods in goods sales management, a means of personal authentication for confirming the identity of a trader, and a means of identifying themselves, that is, as individual product information-personal identification information, use alphanumeric characters such as passwords and ID numbers. An identification code represented by a combination of alphanumeric strings is known.

An object of the present invention is to prevent leakage of personal identification information such as a password and an ID number and prevent unauthorized access in the above identification code. A further object of the first invention of the present application is to prevent personal information from being leaked, falsified, illegally used, and the like by using a two-dimensional code obtained by encrypting the individual product information. The second invention and the third invention of the present application, as personal authentication means and personal identification means, have problems such as prevention of leakage of ID cards, prepaid cards, credit cards, prevention of forgery and falsification, prevention of unauthorized use, prevention of unauthorized access, and the like. And Disclosure of the invention

The first invention of the present application provides an individual identification method using a two-dimensional code, characterized in that the contents of a two-dimensional code obtained by encrypting individual product information are recorded as image information in an existing image so as to be invisible.

According to the second invention of the present application, the personal identification information as the personal recognition means is composed of a plurality of encrypted two-dimensional codes, and the “arrangement order” of the plurality of two-dimensional codes is determined by the card reading information and online input information. Provides a hybrid personal identification system characterized by an independent offline input.

The third invention of the present application relates to a method for encrypting personal identification information as personal identification means (this is a two-dimensional code by adding unique data obtained by digitally processing image data such as a signature, and obtaining a certificate or the like). By printing on paper, when reproducing personally identifiable information such as certificates, by detecting image data such as signatures by reproducing unique data, it was possible to verify the identity without the need for online verification. An offline personal identification system is provided.

According to a preferred embodiment of the first invention of the present application, individual product information (for example, copyright information, product identification information, pharmaceutical prescription information) is composed of a two-dimensional code and encrypted, and the content is converted into image information. Record partly. For example, two-dimensional The content of the code is embedded in the first or last part of the image information.

According to a preferred embodiment of the second invention of the present application, a password including a long-digit encryption key indicating personal identification information is set, the password is divided into a plurality of passwords, and each of the plurality of divided password substrings is divided into two. Dimensionally coded to form a plurality of 2D coded subsequences. The order of the two-dimensional coded subsequences mixed in the dummy is determined. This arrangement order is characterized in that it is not recorded on a computer, a discriminator, or the like, that is, it is manually entered by a user.

According to a preferred embodiment of the third invention of the present application, a two-dimensional code is used for an identification card or the like on a display device. Encrypt personal identification information as personal identification means, add unique data obtained by digitally processing image data such as a signature, convert it into a two-dimensional code, and print it on a document such as a certificate. When reproducing personally identifiable information such as certificates, by detecting image data such as signatures by reproducing unique data, it is possible to verify the identity without the need for online verification. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is an explanatory diagram of “digital watermark” showing an embodiment of the first invention of the present application ₍ FIG. 2 is a flowchart of “transparency of encrypted data into image data”).

Fig. 3 is a flowchart of “Retrieving encrypted data from image data”.

FIG. 4 is an explanatory diagram of the order of arrangement of the cards in the embodiment of the second invention of the present application.

FIG. 5 is an explanatory diagram of the information reading means similarly selecting a card. FIG. 6 is an explanatory diagram of the same card information reading system.

FIG. 7 is a flowchart at the time of issuing a certificate in the third embodiment of the present invention.

FIG. 8 is a flowchart for the same collation.

FIG. 9 is an explanatory view showing an example of image data such as a signature. FIG. 9A shows a digital signature, and FIG. 9B shows a handwriting signature. BEST MODE FOR CARRYING OUT THE INVENTION

The present invention will be described in more detail with reference to the accompanying drawings.

With reference to FIG. 1 to FIG. 3, the “electronic transparency” according to the first invention of the present application will be described.

Individual product information (for example, copyright information, product identification information, and pharmaceutical prescription information) is encrypted by encoding software and matrix-coded.

One cell is represented by one bit, and the contents of the code are stored as a series of numbers sequentially from top left to right and from top to bottom (code content recognition). Next, the number of cells (number of dots) in the X and Y directions of the code is stored as 1-byte data (code size recognition).

The cell number data in the X-axis direction and the cell number data in the Υ-axis direction are prepended to the above-mentioned series of numbers, and this series of numbers is used as watermark data.

The first byte of the target image information (digital) is extracted, and the least significant bit is replaced with the most significant bit of the watermark data.

The processed byte is returned to the original position of the image.

The next byte of the image information is taken out and its least significant bit is replaced by the previous right-hand bit of the watermark data.

The same processing as described above is repeated until all the cell numbers are completed.

Extraction of encrypted data (recovery of a two-dimensional code) performs the reverse process.

An example of the application of "electronic watermarking" is to confirm the copyright of images exchanged on a network.

By using a two-dimensional two-dimensional code, it becomes a digital watermarking technology that is invisible and has clear and objective evidence because it can be reproduced as an image.

More specifically, the content of the two-dimensional code is embedded at the beginning or at the end of the image information. The least significant bit is changed every one bit (8 bits). The effect on image quality is so small that it is not noticeable to the human eye. The advantage over other digital watermarking methods is that two-dimensional coding (corresponding to a kind of encryption) increases the security for one layer, and finally the watermark information is two-dimensional. It has objective evidential ability to be restored as code. Of course, combinations with other encryption methods are possible and desirable.

The second invention will be described with reference to FIGS. 4 to 6.

Of the 20 codes printed on card 1, 16 are dummy. The password is divided into four parts, counting from the left, in the second row at the top, the fifth row at the bottom, the sixth row at the bottom, and the ninth row at the top. The order is "" -9-1-2-F ".

A regular user who memorizes this order can use a hand-held or pen-type scanner 2 and refer to Fig. 4 ignoring other codes and ignoring other codes. Read in the order of ninth # 2, upper second # 3, lower sixth # 4. The accessed side receives the restored hundreds to thousands of digits of the password and identifies it as the authorized user.

Referring to FIGS. 5 and 6, 3 is a terminal device, 4 is a keyboard, 5 is a communication network such as the Internet, 6 is a computer for centralized management, 7 is data, and the second invention is an intrusion. Even if the user obtains the medium on which the two-dimensional coded password is described (recorded), unauthorized access is not easy (almost impossible) unless the authorized user verifies the "ordering" information. In the case of extremely sophisticated confidential information, the password is split between the person in charge and his / her boss in the first half and the second half, and the management system must be read if two people do not continue reading in the same operation. If the system is not authenticated, security will be further improved.

Although a method of using an IC card for personal authentication has been proposed, the present invention divides and allocates required data to a plurality of IC cards including a dummy and sequentially stores cards storing effective data in the order stored by the user. It offers the same effect as reading at a much lower cost.

Signature 'Signed authentication cannot be performed without the consent of the authorized user. In that sense, it competes with the present invention. However, while the pressure-sensitive pad for signature / signature is less versatile, the optical reader used by the present invention can also be used as an input device for many other purposes, and is far less versatile. Is excellent. Above all, a system can be constructed at low cost. It is of course possible and desirable for users who handle extremely important confidential information to use both in order to further increase the hurdle against intruders.

The feature of the second invention of the present application is that the high unauthorized access prevention effect by the password of several tens, several hundreds to several thousand digits online is stored in the "offline" of several digits in the "order" and manually input. It is to be realized by being in 'online' offline and auto-manual hybrid.

Hand-held or pen-type readers are required to manually read multiple two-dimensional codes in "arranged order", which can be easily manufactured at low cost.

As an easy way to remember the "ordering", when printing a two-dimensional code, print a small number of kana characters, from small 'I' to 'n', in the margins around it. Can be easily managed and stored. To increase the level of difficulty by increasing the number of dummies, it is sufficient to use a- _Z alphabets, 0-9 numbers, and even kanji.

An embodiment of the third invention will be described with reference to FIGS. 7 and 8.

A. Certificate issuance (See Fig. 7)

Scan the signature on the application form with a scanner and save it as image data.

Compress and encrypt image data.

Combine image data with personal information such as address and name, ID number, etc. into one file.

The file is converted into a two-dimensional code by the encoding software.

Print a two-dimensional code on the front or back of the card.

Issue a card to the user.

B. During verification (see Fig. 8)

Scan the two-dimensional code part of the card with a scanner.

The decoding software converts the two-dimensional code into image data and character data. The signature data and character data are displayed on a display invisible to the user. Have the user sign.

Verifies character data and signature data. Confirmation of collation result "correct""invalid"

Next, an application example of the third invention will be described.

When applying for a passport, driver's license, ID card, credit card, etc., in addition to the data required conventionally, such as the name, address, telephone number, blood type and other special notes, a digital signature X and Write the signature for handwriting signature Y on the application form. The issuer reads the signature X for digital signature as image data and then digitally processes it as the unique data, together with the certificate number, the card number, the finite term, and the data obtained by encrypting all the above data. Dimensionally coded and printed on the surface of the certificate. Certificate's Card Purpose-Depending on the personality, use only this digital signature X and not the conventional visual analog handwriting signature Y. If it is desired to be able to continue the conventional use in places where there is no optical reader, use the conventional visual handwriting signature as well.

In addition to or instead of the above-mentioned signature hybridization, special notes include special data that can only be answered by the holder of the truth (knowledge items that can be identified only by the principal based on his / her experience) in the two-dimensional code. It can also be used as a means of identity verification. The above unique data is displayed on a display that is not visible to the owner, and if the owner cannot state its contents, it can be immediately judged as "not himself". For example, a mother's maiden name cannot be answered when asked unless she is a legitimate owner. If you cannot answer, you can immediately determine that it is 'illegal use'.

As described above, instead of displaying on the display unit and visually checking by the credit sales clerk, the image data indicated by the holder such as a card is automatically collated with the image data detected and reproduced by the card's unique data. This can eliminate the involvement of the clerk (the clerk cannot know the image data corresponding to the unique data recorded on the card).

In addition, depending on the purpose, ceramics and metal-based non-combustible materials can be used as paper and ink, which has the advantage of being difficult to burn out. Any combination is possible by printing and engraving a two-dimensional code on it using.

According to the first invention of the present application, the information amount of the individual item information can be expanded and encrypted by using the two-dimensional code obtained by encrypting the individual item information.

According to the second invention of the present application, as a countermeasure against unauthorized access such as password theft, a large amount of information can be stored in a card by applying a two-dimensional code that can be printed and engraved in a small space, and it can be stored in a low-cost optical device. Utilizing the fact that it can be easily read, it also has the effect of easily realizing a computer system that effectively prevents unauthorized access by adding further manual elements.

In the third invention of the present application, when reproducing personal identification information such as a certificate, on-line verification is required by detecting image data such as a signature by reproducing the unique data. This has the effect of making it possible to confirm the identity of the user without requiring it. Industrial applicability

INDUSTRIAL APPLICABILITY The present invention can be used as individual item specifying means and personal authentication means in electronic commerce using IT technology. It is particularly effective when used as a means to prevent leakage of personal identification information such as passwords and ID numbers, and to prevent unauthorized access.

Claims

Claims An individual identification method using a two-dimensional code, characterized in that the contents of a two-dimensional code obtained by encrypting individual product information are recorded as image information.

2.

Personal identification information as personal recognition means is composed of a plurality of encrypted two-dimensional codes, and the "order" of a plurality of two-dimensional codes mixed in dummy is independent of the card reading information 'online input information. A hybrid personal identification system characterized by offline input.

3.

By adding unique data obtained by digitally processing image data to data obtained by encrypting personal identification information as personal identification means, two-dimensionally encoding it and printing it on a document such as a certificate, When reproducing personal identification information. Offline personal identification system characterized by detecting and reproducing personal identification information by reproducing peculiar data, enabling identification without the need for online verification.

Four.

An off-line identity verification system in claim 3, wherein the unique data is digitally processed image data such as a signature.

Five.

An off-line identity verification system according to claim 3, wherein a digital signature and a handwriting signature are described in the application, and the unique data is digitally processed image data of the digital signature.

6. An off-line identity verification system according to claim 3, wherein the peculiar data is data of a possessor of knowledge items that can be identified only by the principal based on the principal's experience.