WO2005103973A1

WO2005103973A1 - Electronic application method and electronic application system

Info

Publication number: WO2005103973A1
Application number: PCT/JP2005/007082
Authority: WO
Inventors: Takeshi Hakii; Nobu Nakane; Setsuo Itoh
Original assignee: Konica Minolta Photo Imaging, Inc.
Priority date: 2004-04-23
Filing date: 2005-04-12
Publication date: 2005-11-03

Abstract

A management server (3) includes: biometric information database (30) containing biometric information on each applicant correlated to personal information on each applicant; biometric information acquisition means used when personal information on the applicant is received from a communication terminal (1), for acquiring biometric information corresponding to the personal information on the applicant, from the biometric information database (30); and biometric information transmission means for transmitting the acquired biometric information to the communication terminal via a communication network N. The communication terminal (1) includes: first transmission means for transmitting the personal information on the applicant to the management server via the communication network N; and second transmission means for transmitting the biometric information received from the management server and an electronic application form to a certificate issuing device (2) via the communication network. The certificate issuing device (2) issues a certificate according to the biometric information and the electronic application form received from the communication terminal.

Description

Specification

Electronic application method and electronic application system

Technical field

The present invention relates to an electronic application method and an electronic application system for applying for various certificates.

Background art

[0002] Conventionally, in order to apply for a public certificate such as a passport, driver's license, or national certificate, the applicant fills out the application form with necessary information, pastes a photo of the face, and sends it to the organization that issues the application form. The method was adopted. In recent years, with the progress of IT (Information Technology) technology, an infrastructure for transmitting various data online has been improved, and a technology for applying for a certificate online has been proposed (for example, see Patent Document 1). ) Patent Document 1: JP-A-2002-312540

Disclosure of the invention

Problems to be solved by the invention

[0003] However, at present, the method of applying for a certificate containing biometric information such as a face image online is to search for the biometric information corresponding to the applicant's personal information at the organization that issues the application. However, it is difficult to determine whether the biological information is correct or not.

Therefore, if any alteration is made to the biometric information stored in the institution, a public certificate may be issued without confirming the authenticity.

For example, the above-mentioned Patent Document 1 discloses that the burden on the applicant is reduced by the fact that the applicant performs a predetermined procedure and the electronic procedures for a plurality of institutions are performed collectively. The advantage is described. After the applicant has performed the prescribed procedures while working hard, there is no opportunity for the applicant to confirm the authenticity of the information transmitted and received in the system, and therefore the information transmitted and received in the system has been tampered with. Even if you can not confirm. [0004] In other words, the method and system by which the applicant applies for the issuance of a public certificate online has not been established due to problems such as secondary use and falsification of biometric information and security during data communication. There was a problem with 運用 and ヽぅ!

[0005] Here, the biometric information is information that electrically indicates a physical characteristic inherent to each applicant. For example, the biological information includes face, iris, fingerprint, and facial image data, iris data, fingerprint data, vein data, which are electrical signals obtained by electrically photographing arteries, which are physical characteristics of the applicant. Alternatively, it may include audio data of the voice that indicates the characteristics of the applicant's vocal cords. Further, the face image data, the iris data, the artery data, the voice data, and the like, which indicate the characteristics of the face, iris, and artery obtained by analyzing the facial data, the iris data, and the artery data, are included. The biometric information obtained as a “feature amount” obtained by extracting features in this way can easily and quickly perform personal authentication, which is relatively small in information amount and preferable in terms of data transmission speed and storage capacity. , Preferred on doing.

[0006] An object of the present invention is to provide a method for online applying for a certificate including biometric information.

Means for solving the problem

[0007] The present invention provides a communication terminal used by a certificate applicant, a management server for managing biometric information of the applicant, and a certificate application device using a certificate issuing device for issuing a certificate. An electronic application method for performing a continuation, wherein a personal information transmitting step of transmitting personal information of the applicant as a biometric information acquisition request from the communication terminal to the management server, wherein a biometric information database in the management server is used. A biometric information acquiring step of acquiring biometric information corresponding to the transmitted personal information; and a biometric information transmitting step of transmitting the acquired biometric information from the management server to the communication terminal via a communication network. An electronic application process of transmitting the biological information and the electronic application form received from the management server from the communication terminal to the certificate issuing device via a communication network;

It is characterized by having.

[0008] Further, the present invention is an electronic application system including a communication terminal used by a certificate applicant, a management server for managing biometric information of the applicant, and a certificate issuing device for issuing a certificate. The management server includes: a biometric information database that stores the biometric information of each applicant and the personal information of each applicant in association with each other; and, when the personal information of the applicant is received from the communication terminal, the biometric information database. A biometric information acquisition unit for acquiring biometric information corresponding to the applicant's personal information; and a biometric information transmission unit for transmitting the acquired biometric information to the communication terminal via a communication network.

The communication terminal includes: a first transmission unit that transmits the personal information of the applicant to the management server via a communication network as a biometric information acquisition request; the biometric information received from the management server; Transmitting means for transmitting a certificate to the certificate issuing device via a communication network,

The certificate issuing device issues a certificate based on the biological information and the electronic application received from the communication terminal.

The invention's effect

[0009] According to the present invention, a certificate including biometric information such as a face image of an applicant can be applied through an applicant terminal communication network, which is convenient for applying for a certificate. Performance can be improved.

[0010] In particular, according to the present invention, information including biometric information is not transmitted directly from the management server to the certificate issuing device between the management server and the certificate issuing device. In other words, the information including the biological information acquired by the management server is transmitted to the certificate issuing device via the communication terminal.

[0011] With this configuration, at the communication terminal, before the certificate is issued, the applicant can check whether the biometric information has been tampered with.

[0012] Further, when the biometric information of the applicant is encrypted, the security at the time of applying for a certificate can be further improved.

[0013] Furthermore, a plurality of images having different resolutions are generated from the acquired biological information, and the relatively high-resolution images are encrypted and transmitted to the communication terminal. Use can be prevented. In addition, by transmitting an image with a relatively low resolution to the communication terminal without encryption, the applicant can view the unencrypted V and biometric information. [0014] Furthermore, by photographing the biological information of the applicant using a biological information photographing apparatus, high-quality biological information photographed in a state where the surrounding environment such as lighting and background is always kept constant. Can be obtained.

Brief Description of Drawings

FIG. 1 is a block diagram showing a configuration of an electronic application system to which an electronic application method of the present invention has been applied.

FIG. 2 is a block diagram showing an internal configuration of the ID photo system 4 (photographing device) in FIG. 1.

FIG. 3 is a flowchart showing a biometric information registration process (registration step) executed in the ID photo system and the management server.

FIG. 4 is a flowchart showing an electronic application process executed by the electronic application system according to the embodiment.

FIG. 5 is a flowchart showing an electronic application process executed by the electronic application system of the present embodiment!

Explanation of symbols

[0016] 1 Applicant terminal

11 PC

12 R / W

2 Certificate issuing device

21 Personal Information DB

3 Management server

30 Biological information DB

31 face DB

32 Fingerprint DB

33 Iris DB

4 ID photo system

4a Shooting method

40 Control unit

41 Display monitor 42 Operation section

43 Billing device

44 Fingerprint sensor

45 Face shooting device

46 Iris imaging device

47 Communication unit

100 Electronic application system

N communication network

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

First, the configuration in the present embodiment will be described.

FIG. 1 is a block diagram showing a configuration of an electronic application system to which the electronic application method of the present invention is applied. As shown in FIG. 1, the electronic application system 100 includes an applicant terminal 1 functioning as a communication terminal, a certificate issuing device 2, and a management server 3, and these devices are mutually connected via a communication network N. Connected to.

[0019] In addition, when an applicant is photographed and biometric information is acquired, as shown in FIG.

(Functions as a shooting device) can also be connected to the communication network N if necessary

[0020] The communication network N includes the Internet, a telephone line network, an Integrated Services Digital Network (ISDN), an Asymmetric Digital Subscriber Line (ADsL) line network, a mobile communication network, a communication satellite line, a CATV line, and an optical network. This includes communication lines, wireless communication lines, etc. The number of applicant terminals 1 connected to one management server 3 and one certificate issuing device 2 via the communication network N is not particularly limited.

The applicant terminal 1 includes a PC (Personal Computer) 11, which is a communication terminal used by a certificate applicant, and an RZW (reader / writer) 12, which reads and writes an IC memory. The PC 11 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), an operation unit, a display monitor, and the like.

When applying for a certificate, the applicant terminal 1 sends an electronic application form (application An operation unit is provided for the applicant to obtain the format for creating the certificate data and to input the necessary information in the obtained format. Then, the applicant terminal 1 sends an acquisition request of the applicant's biometric information by transmitting the applicant's personal information to the management server 3. When the encrypted biometric information of the applicant is obtained from the management server 3, the applicant terminal 1 encrypts the electronic application form and the biometric information by a predetermined encryption process, and performs the encrypted electronic application. By sending the certificate and the biometric information to the certificate issuing device 2, a request is issued to issue a certificate.

[0023] The certificate issuing device 2 is installed in a public organization (a government related organization) that issues public certificates, and stores a personal information DB (Data Base) 21 that stores personal information of each applicant. I have it. The personal information DB 21 stores, as personal information of each applicant, information identifying the applicant, such as a name, an address, an ID number, and a PIN number.

The certificate issuing device 2 transmits a format for creating an electronic application form (application form data) to the applicant terminal 1 in response to a request to obtain an application form from the applicant terminal 1. Further, the certificate issuing device 2 receives the encrypted electronic application form and the biological information from the applicant terminal 1, and decrypts the received encrypted information.

[0025] Then, certificate issuing device 2 checks the personal information included in the decrypted electronic application with the personal information stored in personal information DB 21 to determine whether the electronic application is accepted. Is determined, and if it is determined that the electronic application can be accepted, a public certificate is issued based on the decrypted electronic application and biometric information.

[0026] In addition, when the usage count information is added to the decrypted biometric information, the certificate issuing device 2 checks the usage count information and the standard correspondence information, and determines a usage method of the biometric information. Here, the usage frequency information is information on the number of times the relevant biometric information has been used, and the standard-compliant information is information that the relevant biometric information conforms to a standard specified by a public organization (an organization related to the government). This is information indicating that appropriate processing has been performed. The certificate issuing device 2 determines that the biometric information can be used for issuing a certificate when the number of times the biometric information is used is within the limit number of times and the standard-compliant information is added to the biometric information, Issue a public certificate based on the decrypted electronic application form and biometric information.

[0027] In the case where the expiration date information of the biometric information is added to the biometric information, a certificate is issued. The device 2 determines whether the electronic application can be accepted by determining whether the current time is within the usage period.

[0028] The management server 3 is provided by an organization other than the public organization in which the certificate issuance device 2 is installed, for example, a biometric information storage and provision company, It is a server that manages information, and has a biological information DB30 that stores the biological information of each applicant and personal information in association with each other. The biometric information DB 30 includes a face DB 31 storing face image data of each applicant, a fingerprint DB 32 storing fingerprint data of each applicant, and an iris DB 33 storing iris data of each applicant. In the biometric information DB 30, the biometric information obtained by each applicant by himself / herself is registered. For example, the face image of the applicant stored in the face DB 31 may be a face image captured by a digital camera owned by the applicant. The biometric information DB 30 may store other biometric information such as vein data in addition to the face, fingerprint, and iris.

[0029] If the biometric information stored in the biometric information DB 30 is captured by the ID photo system 4, the management server 3 processes the biometric information in accordance with the standard defined by a public organization (government-related organization). Is given! /, Is preferred! / ,.

[0030] The processing conforming to the standard is, for example, when the biological information is a face image,

To adjust the position and size of the face image so that it conforms to the standard of the certificate, such as the overhead space.

Further, the number of times the biometric information is used and the standard-compliant information may be added to the biometric information stored in the biometric information DB 30. Note that, instead of the number of times of use of the biometric information, the expiration date information of the biometric information may be added.

The biological information stored in the biological information DB 30 is preferably a “feature amount”. For example, in the case of a fingerprint, the feature amount is data indicating the positions and numbers of fingerprint vertices in which the difference between fingerprint images is relatively clear, and has a data capacity smaller than that of image data representing the entire biometric information. small. By using the feature data as biometric information, personal authentication can be performed easily and quickly.

[0032] When the management server 3 receives the applicant's personal information from the applicant terminal 1 as a request to acquire the applicant's biometric information, based on the applicant's personal information, the management server 3 Raw The body information is acquired from the biological information DB 30, and the acquired biological information is transmitted to the applicant terminal 1 that has requested the acquisition of the biological information. In addition, the management server 3 can encrypt the acquired biometric information by a predetermined encryption process, perform encryption, and generate a thumbnail image of the biometric information. In this case, the management server 3 transmits the encrypted biometric information and its thumbnail image to the applicant terminal 1 that has requested the biometric information acquisition.

[0033] In addition, when the usage count information is added to the acquired biometric information, the management server 3 determines whether or not the usage count is greater than a preset limit count. If it is determined that the number of times of use is within the limit number of times, the biometric information to which the number of times of use information and the standard-compliant information are added is encrypted, and a request for obtaining the encrypted information is obtained. Send to applicant terminal 1.

[0034] The management server 3 may limit the use period of the biometric information, and transmit the biometric information to the applicant terminal 1 only when the use period is within a preset period. In other words, when the expiration date information is added to the acquired biometric information, the management server 3 determines whether or not the use period of the biometric information has passed a preset period. Then, when it is determined that the use period of the corresponding biometric information is within a preset period, the biometric information to which the use period information and the standard correspondence information are added is encrypted, and the encrypted information is encrypted. Is transmitted to the applicant terminal 1 that has requested the acquisition of the biological information.

FIG. 2 is a block diagram showing the internal configuration of the ID photo system 4 (photographing device) of FIG.

The ID photo system 4 is provided with an imaging room having a housing capacity that allows a user (applicant) to enter the room, and is installed in various places where the user can easily use, such as a street or a station yard.

As shown in FIG. 2, the ID photo system 4 includes a control unit 40, a display monitor 41, an operation unit 42, a billing device 43, and a photographing unit 4a (fingerprint sensor 44, face photographing device 45, iris photographing device 46). And a communication unit 47. That is, in the present invention, the ID photo system 4 functions as a photographing device.

[0038] The control unit 40 includes a CPU (Central Processing Unit), a RAM (Random Access Unit).

Memory), ROM (Read Only Memory) and the like. CPU is an operation unit 4 In accordance with the various instructions input by the operation 2, the respective sections of the ID photo system 4 are controlled in cooperation with the control program stored in the ROM. Hereinafter, the control operation of the control unit 40 will be described.

The control unit 40 encrypts the applicant's personal information of the certificate input by operating the operation unit 42 and the applicant's biological information (face, fingerprint, iris, etc.) obtained from the photographing means 4a. Then, the communication section 47 transmits the encrypted information to the management server 3.

The display monitor 41 includes a display such as an LCD (Liquid Crystal Display) and performs necessary display processing according to a control signal input from the control unit 40.

The operation unit 42 includes various function keys such as a numeric key, a character key, and a shooting key for instructing shooting, and outputs an operation signal by a key operation to the control unit 40. Further, the operation unit 42 has a touch panel provided so as to cover the LCD of the display monitor, and detects and instructs the touch-instructed coordinates by a coordinate reading principle such as an electromagnetic induction type, a magnetostriction type, and a pressure-sensitive type. The coordinates are output to the control unit 40 as a position signal.

The billing device 43 is a toll settlement machine provided with a money input port, a change refund port, and the like, and also outputs the data of the amount of money paid in to the control unit 40 and is instructed by the control unit 40. The coin or bill of the amount is discharged to the change refund port.

The photographing means 4a includes a fingerprint sensor 44, a face photographing device 45, and an iris photographing device 46.

The fingerprint sensor 44 is constituted by an optical sensor such as a CCD (Charge Coupled Device) image sensor and a CMOS (Complementary Metal-Oxide Semiconductor) sensor, and photoelectrically converts a fingerprint image formed on a light receiving surface of the sensor. And acquire fingerprint image data.

[0045] The face photographing device 45 includes an optical lens, an optical sensor such as a CCD, an A / D converter, and the like. The face image input through the optical lens is photoelectrically converted by the optical sensor, and the A / D conversion is performed. The data is converted into digital data by a D converter and the face image data is obtained. The iris photographing device 46 detects the position of the eye (iris) with the iris recognition sensor, photographs the iris with a CCD camera or the like, and acquires the iris image data.

Note that the photographing means 4a may include a device for photographing biological information other than the face, fingerprint, and iris (for example, a device for photographing a vein). In the photographing means 4a, By analyzing and processing the images, the features are extracted and used as biological information.

[0047] The communication unit 47 controls communication between the ID photo system 4 and an external device connected to the communication network N.

Next, an operation in the present embodiment will be described.

FIG. 3 is a flowchart showing a biometric information registration process (registration step) executed by the ID photograph system and the management server. FIG. 4 shows an electronic application process executed by the electronic application system of the present embodiment. FIG. 5 is a flowchart showing an electronic application process executed in the electronic application system according to the present embodiment.

[0050] In the flowcharts of Figs. 3 to 5, the operation in the case of limiting the number of uses of the biometric information of the applicant will be described, but the processing procedure will be omitted as long as the effects of the present invention are achieved.

For example, in the flowchart described with reference to FIG. 3, the processing of the biometric information in accordance with the standard (Step C3) and the addition of the usage count information and the standard compliant information (Step C4) indicate that either! You can omit it!

When the above (Step C3) is omitted, the step of checking the standard corresponding information in Step B5 of the flowchart described with reference to FIG. 5 is omitted. When step C4 is omitted, the confirmation of the number of uses in step B5 is omitted, and it is determined whether the number of uses of the biometric information is larger than a preset limit number (step S5). C17), send an error message notifying that the biometric information is unusable to the applicant terminal 1 (step C18), and check whether other biometric information corresponding to the personal information is stored. (Step C 19) is omitted. Further, when both steps C3 and C4 are omitted, steps B7, B8, BIO and steps C17, C18, C19 are omitted.

First, with reference to the flowchart of FIG. 3, a description will be given of the biometric information registration process executed by the ID photo system 4 and the management server 3.

First, a menu screen is displayed on the display monitor 41 of the certificate photo system 4 (step Sl). On the menu screen, various buttons related to the photographing of the ID photo are displayed, and for example, there are a personal information input button and the like for instructing display of a personal information input screen. When the applicant selects the personal information input button on the menu screen (step S2; YES), the personal information input screen is displayed on the display monitor 41 (step S3), and the applicant is notified from the applicant's operation unit 42 Accepts input of personal information. In this case, step S4 is a personal information input step in the present invention. In this case, the personal information input button functions as a personal information input unit in the present invention.

When the reception of the personal information is completed (Step S4; YES), a payment menu screen is displayed on the display monitor 41 (Step S5). On the payment menu screen, there are displayed buttons for designating the imaging fee for biometric information and the method of payment for the imaging fee. When the payment method of the imaging fee is specified by the applicant on the menu screen (step S6; YES), the payment process of the imaging fee is performed according to the specified payment method (step S7).

[0055] After the payment processing of the imaging fee is completed, the biometric information to be used for the certificate is designated by operating the operation unit 42, and when there is an instruction to photograph the biometric information (step S8; YES), the application is made by the imaging means 4a. The biological information of the patient is photographed, and digital data of the biological information is obtained (step S9). In this case, step S8 is the photographing step in the present invention.

Next, the biological information and the applicant's personal information acquired in step S9 are encrypted by the encryption means (step S10). Next, the encrypted information is transmitted to the management server 3 by the communication unit 47 (step Sll). In this case, the communication unit 47 functions as the imaging information transmitting unit in the present invention.

In the management server 3, when the encrypted biometric information and personal information are received from the ID photo system 4 (step C1), the received encrypted information is decrypted by the decryption means (step C1). C2). Next, the biometric information decrypted in step C2 is processed so as to conform to the standards specified by public organizations (government-related organizations) (step C3).

[0058] Next, the management server (here, functioning as a usage count information adding unit, a usage period information adding unit, a biometric information processing unit, and a standard conformity information adding unit) determines the number of times the processed biometric information has been used. It is set to "0", and the usage count information and information (standard-compliant information) indicating that processing conforming to the standard has been performed are added to the biological information (step C4). Then, the biometric information to which the usage count information and the standard correspondence information are added and the decrypted personal information are registered in the biometric information DB 30 in association with each other (step C5), and the biometric information registration processing ends. In this case, step C5 is a registration step in the present invention.

Next, the certificate application processing executed in the electronic application system 100 will be described with reference to the flowcharts of FIGS.

First, the applicant terminal 1 and the certificate issuing device 2 are connected via the communication network N (steps Al and Bl). When there is a request to obtain an application form from the applicant terminal 1, the certificate issuance device 2 also sends the data of the electronic application form acquisition screen to the application form terminal 1 (step B2).

[0061] In the applicant terminal 1, on the electronic application form acquisition screen received from the certificate issuing device 2, information input for obtaining an electronic application form that the applicant can obtain is accepted (step A2). The application form obtaining information is transmitted to the certificate issuing device 2 (step A3).

[0062] When the certificate issuing device 2 receives the information for obtaining the electronic application form from the applicant terminal 1 (step B3), the certificate issuing device 2 determines whether or not the input items of the obtaining information have incompleteness such as omissions. Is determined, and if it is determined that there is no defect, an electronic application form (application form data) in a predetermined format is transmitted to the applicant terminal 1 (step B4). In this case, step B4 is the format acquisition step in the present invention. Further, the applicant terminal 1 also functions as a format acquisition unit in the present invention.

[0063] In the applicant terminal 1, when the electronic application form is received from the certificate issuing device 2 (step A4), the received electronic application form is displayed on the display unit, and is necessary for the applicant to issue the certificate. Accept input of various items (step A5). Here, the necessary items to be entered in the electronic application form include the personal information of the applicant. When the input of the necessary items to the electronic application form is completed, the applicant terminal 1 and the management server 3 are connected via the communication network N (step A6, CIO), and the applicant server 1 The data of the biological information acquisition screen for acquiring the biological information is transmitted (step C11).

[0064] In the applicant terminal 1, a biometric information acquisition screen is displayed on the display unit, and input of information required for identification of the applicant by the applicant is received (step A7), and the received identification information is transmitted (not shown). It is transmitted to the management server 3 by means (first transmission means) (Step A8). Here, in step A7, the personal identification information includes the personal information of the applicant. (Name, address, ID number, PIN number, etc.). In this case, step A8 is the personal information transmitting step in the present invention.

When the personal identification information is received from the applicant terminal 1 (step C12), the management server 3 determines whether or not personal identification is possible based on the personal information included in the personal identification information (step C12). Step C13). In Step C13, for example, by determining whether or not personal information and biological information are stored in the biological information DB 30, it is determined whether or not personal identification is possible.

[0066] If the identity cannot be confirmed in step C13 (step C13; NO), a message requesting re-input of the identity confirmation information is transmitted from the management server 3 to the applicant terminal 1 (step C14). After transmitting the re-entry request message of the identification information, the management server 3 waits for the reception of the identification information from the applicant terminal 1.

In step C13, if the identity can be confirmed (step C13; YES), the user is connected to the biological information DB30 (face DB31, fingerprint DB32, iris DB33) (step C15), Biological information corresponding to the personal information included in the confirmation information is obtained (step C16). In step C16, at least one of the applicant's face, fingerprint, iris, and vein is obtained as biological information. In this case, step C16 is the biological information acquisition step in the present invention.

When the biometric information of the applicant is obtained, the usage count information added to the biometric information is incremented by “1”, and the incremented usage count of the biometric information is greater than a preset limit count. It is determined whether or not (Step C17). If it is determined in step C17 that the number of times the biometric information is used is greater than the limit number 1 (step C17; YES), an error message notifying that the biometric information cannot be used is transmitted to the applicant terminal 1. (Step C18). Step C18 is a determination step in the present invention.

[0069] In step C17, when it is determined that the number of uses of the biometric information is equal to or less than the limit number (step C17; NO), the corresponding biometric information is encrypted by the encryption unit in the management server. (Step C20), a thumbnail image of the biometric information is created (Step 21), and the encrypted biometric information and the thumbnail image are transmitted to the applicant terminal 1 (Step 22). In this case, step C22 is the biological information transmitting step in the present invention. Further, the management server 3 functions as a biological information transmitting unit. [0070] In step C20, the usage count information and the standard correspondence information added to the biometric information are also encrypted. In step 22, the biometric information encrypted and the encrypted usage count information and the standard are added. The corresponding information may be sent to the applicant terminal 1.

When an error message is transmitted in step C18, it is determined whether or not other biometric information corresponding to the personal information included in the personal identification information is stored in biometric information DB 30 (step C19). . If it is determined in step C19 that other biometric information is not stored (step C19; NO), this certificate application processing ends. In step C19, when it is determined that other biological information is stored (step C19; YES), the process returns to step C16, and the corresponding biological information is acquired.

On the other hand, when the above (Step C3) and (Step C4) are omitted, Step C17 is also omitted. Therefore, when the biometric information of the applicant is obtained in step C16, the biometric information is encrypted by the encryption means in the management server (step C20), and the thumbnail image of the biometric information is obtained. Is generated (step C21), and the encrypted biometric information and the thumbnail image are transmitted to the applicant terminal 1 (step C22). In this case, step C22 is the biological information transmitting step in the present invention.

[0073] Thus, a thumbnail image is generated with a relatively low resolution, the image is encrypted with a relatively high resolution V, and the encrypted biometric information and the encrypted thumbnail are generated. By transmitting the image to the applicant terminal 1, the applicant cannot view the encrypted biometric information having a relatively high resolution, so that secondary use of the biometric information can be prevented. In addition, the thumbnail image of the biometric information can be used for viewing by the applicant.

[0074] In the present invention, the above (Step C3) and (Step C4) described above can be omitted, and further, Steps C17 to C21 can be omitted. That is, when the biometric information of the applicant is obtained in step C16, encryption of the biometric information and creation of a thumbnail image can be omitted. If omitted, the biometric information will not be encrypted and will be transmitted to the applicant terminal 1 without a thumbnail image attached.However, in the following description, steps C20 and C21 are performed. A description will be given of a process in the case of transmitting the encrypted biometric information (use count information and standard-compliant information may be added) and a thumbnail image to the applicant terminal 1 in this case. [0075] In the applicant terminal 1, the encrypted biometric information (the use count information and the standard compliance information may be attached) and the thumbnail image are obtained from the management server 3 (step A9), and the operation unit When there is an instruction to transmit an electronic application form and biometric information (step A10; YES), the electronic application form in which necessary items have been entered in step A5 is encrypted (step All).

Next, the encrypted information (encrypted biometric information and electronic application form) (and the additional information when the usage count information and the standard-compliant information are added to the biometric information) are transmitted by a transmitting means (not shown). It is transmitted from the application form terminal 1 to the certificate issuing device 2 by (second transmission means) (step A12). In this case, step A12 is the electronic application process in the present invention.

[0077] When the certificate issuing device 2 receives the encryption information from the applicant terminal 1 (step B5), the received encryption information (including the biometric information) is decrypted (step B6). In this case, step B6 is the decoding step in the present invention.

Next, from the decrypted biometric information and the electronic application form, it is determined whether the information received from the applicant terminal 1 is true or false (whether or not the electronic application form is acceptable) (step B7). . In step B7, for example, by comparing the personal information input in the electronic application form with the personal information stored in the personal information DB 21, it is determined whether or not the electronic application form is acceptable. That is, when the personal information is stored in the personal information DB 21, the electronic application can be accepted.

[0079] If it is determined in step B7 that the electronic application form cannot be accepted (step B7; NG), the electronic application form cannot be accepted from certificate issuing device 2 to applicant terminal 1. Is sent (step B10), and this certificate application process ends.

[0080] If it is determined in step B7 that the electronic application form can be accepted (step B7; OK), the electronic application form received from the applicant terminal 1 is accepted (step B9), and the present certificate is received. The document application process ends. Upon receipt of the electronic application, the certificate issuance device 2 issues a certificate based on the accepted electronic application and the biometric information of the applicant. [0081] Even if it is determined in step B7 that the electronic application form can be accepted (step B7; OK), the usage count information and the standard correspondence information are added to the biological information! In such a case, the number of times of use of the biological information and the standard-compliant information are checked (step B8). In step B8, it is determined whether or not the number of uses of the decrypted biometric information is greater than a preset limit number and whether or not the biometric information conforms to the standard. The method is determined.

[0082] In step B8, if the number of times of use of the biometric information is greater than the limit number or if the biometric information conforms to the standard, otherwise, it is determined that the electronic application cannot be accepted (step B8; NG). ), The certificate issuing device 2 sends an error message to the applicant terminal 1 notifying that the application form cannot be accepted (step B10), and this certificate application process ends. In step B8, if the number of times the biometric information is used is within the limited number of times and the biometric information conforms to the standard, it is determined that the electronic application can be accepted (step B8; OK), and the applicant terminal The electronic application form received from (1) is accepted (step # 9), and this certificate application processing ends. Upon receipt of the electronic application, the certificate issuance device 2 issues a certificate based on the received electronic application and the biometric information of the applicant.

[0083] The flowcharts of Figs. 3 to 5 show the case where the number of uses of the biometric information of the applicant is limited. However, even when the use period of the biometric information of the applicant is limited, Figs. The same operation as that in the illustrated flowchart can be applied.

In this case, the expiration date information (for example, information indicating that it can be used for a predetermined period from the imaging date) and the standard-compliant information are added to the biological information captured by the ID photo system 4, and the applicant Is registered in the biological information DB 30 in association with the personal information. Also, in step C17 of FIG. 5, based on the expiration date information added to the biometric information of the applicant and the current time information, it is determined whether the usage period of the biometric information has passed the preset period. Only when it is determined that the usage period is within the set period, the corresponding biometric information, the usage period information added thereto, and the standard compliance information are encrypted, and the encryption is performed. The sent information is sent to the applicant terminal 1. That is, step C17 is a determination step in the present invention.

Industrial applicability [0085] As described above, according to the present invention, a certificate including biometric information such as a face image of an applicant can be applied by the applicant terminal via the communication network. It is possible to improve the convenience when doing so.

In particular, according to the present invention, information including biometric information is not transmitted directly from the management server to the certificate issuing device between the management server and the certificate issuing device. In other words, the information including the biological information acquired by the management server is transmitted to the certificate issuing device via the communication terminal.

[0087] That is, in the communication terminal, before the certificate is issued, the applicant himself can confirm whether the biometric information has been tampered with, and thus security can be improved.

Further, when the biometric information of the applicant is encrypted, the security at the time of applying for a certificate can be further improved.

Further, a plurality of images having different resolutions are generated from the biometric information acquired from the biometric information database, and the relatively high-resolution images are encrypted and transmitted to the communication terminal. Use can be prevented. In addition, by transmitting an image with a relatively low resolution to the communication terminal without encryption, the applicant can view the unencrypted V and biometric information.

Further, by capturing the biological information of the applicant using a biological information capturing device, high-quality biological information captured while the surrounding environment such as lighting and background is always kept constant. Can be obtained.

Further, by limiting the number of uses or the expiration date of the applicant's biometric information (such as a face image), secondary use or falsification of the biometric information can be prevented. In addition, by encrypting the biometric information of the applicant, security when applying for a certificate can be ensured.

[0092] Further, by applying a processing process to the biometric information that conforms to a specific standard (certificate standard), biometric information suitable for a certificate can be obtained.

[0093] The description in the present embodiment can be changed as appropriate without departing from the spirit of the present invention.

[0094] For example, in the above-described embodiment, it is assumed that the certificate applicant himself / herself performs the application procedure using the applicant terminal 1, but a proxy application using a power of attorney may be used. this In such a case, the applicant creates the power of attorney with a digital signature and sends it to the agent.The agent attaches the power of attorney obtained by the applicant to the electronic application form using a PC or other communication terminal. Thus, it is possible to request the certificate issuing device 2 to issue a certificate.

In the above-described embodiment, the method of applying for a public certificate such as a nosport, a driver's license, and a national certificate has been described. The application method of the present embodiment can be applied.

Claims

The scope of the claims

[1] A communication terminal used by a certificate applicant, a management server that manages the biometric information of the applicant, and an electronic application that performs a certificate application procedure using a certificate issuing device that issues certificates The method,

A personal information transmitting step of transmitting the applicant's personal information from the communication terminal to the management server as a biometric information acquisition request;

A biometric information acquiring step of acquiring biometric information corresponding to the transmitted personal information from a biometric information database in the management server;

A biometric information transmitting step of transmitting the obtained biometric information from the management server to the communication terminal via a communication network;

An electronic application step of transmitting the biological information and the electronic application form received from the management server from the communication terminal to the certificate issuing device via a communication network,

Electronic application method characterized by having.

[2] The method includes a format acquisition step of acquiring a predetermined format from the certificate issuing device to the communication terminal, and creating the electronic application form by accepting necessary information in the acquired format. Do

The electronic application method according to claim 1, wherein

[3] a photographing step of photographing the applicant with a photographing device and acquiring biological information,

The method according to claim 1, further comprising a registration step of registering the obtained biological information of the applicant with the personal information of the applicant in the biological information database in the management server. The electronic application method described.

[4] a personal information input step of receiving input of the applicant's personal information,

Transmitting the acquired biometric information of the applicant and the accepted personal information of the applicant to the management server via a communication network,

In the registration step, the transmitted biometric information of the applicant and the personal information of the applicant are associated with each other and registered in the biometric information database in the management server.

4. The electronic application method according to claim 3, wherein:

[5] In the step of transmitting the obtained biological information of the applicant and the personal information of the applicant to the management server via a communication network, at least the biological information of the applicant and the individual of the applicant. 5. The electronic application method according to claim 4, wherein one of the information is encrypted and transmitted to the management server.

[6] In the step of transmitting the applicant's biometric information and the applicant's personal information to the management server via a communication network, the applicant's biometric information may be encrypted. The electronic application method according to claim 4, wherein the electronic application is transmitted to a management server.

[7] The certificate issuing device includes a decryption step of decrypting the applicant's biometric information transmitted from the communication terminal.

7. The electronic application method according to claim 6, wherein the electronic application method includes:

8. The biometric information transmitting step, wherein in the biometric information transmitting step, the biometric information of the applicant includes a plurality of pieces of image information having different resolutions, and the plurality of pieces of image information are transmitted to the communication terminal. Electronic application method described in.

[9] The electronic application method according to claim 8, wherein an image having a relatively high resolution among the plurality of images having different resolutions is encrypted.

[10] The electronic application method according to claim 1, wherein the biological information includes at least one of face image information, iris information, fingerprint information, and vein information of the applicant.

[11] In the registration step, at least one of the encrypted biometric information of the applicant and the encrypted personal information of the applicant is decrypted.

The electronic application method according to claim 5, wherein:

12. The biometric information according to claim 1, wherein the biometric information is feature amount data obtained by analyzing image data obtained by photographing the applicant and extracting features thereof. Electronic application method.

[13] The electronic application method according to claim 1, wherein the certificate is a public certificate.

[14] The electronic application method according to claim 1, wherein the certificate is an electronic certificate.

[15] There is a determining step of determining whether or not the number of uses of the biological information is larger than a predetermined number,

In the biological information transmitting step, when the number of uses of the biological information is determined to be equal to or less than the predetermined number in the determining step, the biological information is transmitted to the communication terminal via a communication network.

The electronic application method according to claim 1, wherein

[16] a term-of-use information addition step of adding term-of-use information of the biometric information to the applicant's biometric information;

It is determined whether the use period of the biometric information corresponding to the personal information transmitted in the personal information transmission step is within a predetermined use period, based on the use period information added to the acquired biometric information. Having a determination step,

In the biometric information transmitting step, when the usage period of the biometric information is determined to be within the predetermined usage term in the determining step, the biometric information is transmitted to the communication terminal via a communication network. Do

The electronic application method according to claim 1, wherein

[17] a biological information processing step of processing the applicant's biological information to conform to a specific standard;

A standard conformance information adding step of adding information indicating that the biometric information of the applicant conforms to the specific standard to the processed biological information;

A determining step of determining whether or not the biological information of the applicant can be used based on the information added to the processed biological information of the applicant;

2. The electronic application method according to claim 1, comprising:

[18] The electronic application method according to claim 1, wherein the photographing device is a photographing device for an ID photograph.

[19] The electronic application method according to claim 3, wherein in the image information acquiring step, before photographing the applicant with the photographing device, an identity verification is performed using a public certificate. .

[20] A communication terminal used by the certificate applicant and a management server that manages the biometric information of the applicant And an electronic application system including a certificate issuing device that issues a certificate, wherein the management server includes:

A biometric information database that stores the biometric information of each applicant and the personal information of each applicant in association with each other

When the personal information of the applicant is received from the communication terminal, biometric information acquiring means for acquiring biometric information corresponding to the personal information of the applicant from the biometric information database,

A biological information transmitting unit that transmits the acquired biological information to the communication terminal via a communication network,

Negative IJ self communication terminal,

First transmission means for transmitting, as a biometric information acquisition request, the applicant's personal information to the management server via a communication network;

A second transmission unit that transmits the biometric information and the electronic application form received from the management server to the certificate issuing device via a communication network,

The certificate issuing device,

Issue a certificate based on the biological information and the electronic application received from the communication terminal

An electronic application system, characterized in that:

[21] The communication terminal,

A format acquisition unit for acquiring a format necessary for creating the electronic application form from the certificate issuing device,

Creating the electronic application form by accepting the necessary information entered in the acquired format;

21. The electronic application system according to claim 20, wherein:

[22] a photographing means for photographing the applicant and acquiring biological information,

A photographing information transmitting unit that transmits the biological information acquired by the photographing unit to the management server;

Including a photographing device, 21. The management server according to claim 20, wherein the management server registers the biometric information of the applicant transmitted from the imaging device in the biometric information database in association with the personal information of the applicant. Electronic application system described in.

[23] The imaging device,

The personal information input means for receiving the input of the personal information of the applicant, the photographing information transmitting means,

Transmitting the acquired biological information of the applicant and the accepted personal information of the applicant to the management server via a communication network,

The management server registers the biometric information of the applicant transmitted from the imaging device and the received personal information of the applicant in the biometric information database in association with each other.

23. The electronic application system according to claim 22, wherein:

[24] The imaging device,

Having encryption means for encrypting at least one of the obtained biological information of the applicant and the personal information of the applicant input;

The photographing information transmitting means transmits at least one of the encrypted biometric information and the encrypted personal information to the management server.

24. The electronic application system according to claim 23, wherein:

[25] The encryption means includes:

Encrypting the obtained biometric information of the applicant,

The photographing information transmitting unit transmits the encrypted biometric information to the management server;

25. The electronic application system according to claim 24, wherein:

[26] The management server,

A decryption unit for decrypting the encrypted biometric information

26. The electronic application system according to claim 25, wherein:

[27] The biological information of the applicant includes a plurality of pieces of image information having different resolutions,

The biological information transmitting unit transmits the plurality of image information to the communication terminal 21. The electronic application system according to claim 20, wherein:

[28] The biological information of the applicant includes a plurality of pieces of image information having different resolutions,

The management server,

The encryption means encrypts an image having a relatively high resolution among the plurality of images having different resolutions,

The plurality of image information is transmitted to the communication terminal by the biological information transmitting unit.

21. The electronic application system according to claim 20, wherein:

29. The electronic application system according to claim 20, wherein said biological information includes at least one of an applicant's face image information, iris information, fingerprint information, and vein information.

[30] The management server has decryption means for decrypting at least one of the encrypted biometric information of the applicant and the encrypted personal information of the applicant.

25. The electronic application system according to claim 24, wherein:

[31] The biometric information according to claim 20, wherein the biometric information is feature amount data obtained by analyzing image data obtained by photographing the applicant and extracting features thereof. Electronic application system.

[32] The electronic application system according to claim 20, wherein the certificate is a public certificate.

[33] The electronic application system according to claim 20, wherein the certificate is an electronic certificate.

[34] The management server,

Based on the usage count information added to the acquired biometric information, whether or not the usage count of the biometric information corresponding to the personal information transmitted from the first transmitting unit is greater than a predetermined count Determining means for determining whether

The biometric information transmitting means may be configured such that the determination means determines the number of times the Transmitting the biometric information to the communication terminal via a communication network when it is determined that the number is equal to or less than a predetermined number of times;

21. The electronic application system according to claim 20, wherein:

[35] The management server,

Expiration date information adding means for adding expiration date information of the biometric information to the biometric information of the applicant;

Based on the use term information added to the acquired biometric information, it is determined whether or not the use term of the biometric information corresponding to the personal information transmitted from the first transmitting unit is within a predetermined use term. It has a determination means for determining,

The biometric information transmitting unit transmits the biometric information to the communication terminal via a communication network when the determining unit determines that the usage period of the biometric information is within the predetermined usage period.

21. The electronic application system according to claim 20, wherein:

[36] The management server,

Biological information processing means for processing the biological information of the applicant so as to conform to a specific standard,

A standard conforming information adding means for adding information indicating that the biological information of the applicant conforms to the specific standard to the processed biological information;

Determining means for determining whether or not the biological information of the applicant can be used based on the information added to the processed biological information of the applicant;

21. The electronic application system according to claim 20, comprising:

37. The electronic application system according to claim 22, wherein the photographing device is a photographing device for a certificate photograph.

38. The electronic application system according to claim 32, wherein before the applicant is photographed by the photographing device, an identity verification is performed using a public certificate.