WO2005107147A1

WO2005107147A1 - Authentication system, authentication acquisition device, and authentication method

Info

Publication number: WO2005107147A1
Application number: PCT/JP2004/006222
Authority: WO
Inventors: Shinichi Yamada; Yoshihiro Masuyama
Original assignee: Hitachi, Ltd.
Priority date: 2004-04-28
Filing date: 2004-04-28
Publication date: 2005-11-10
Also published as: WO2005107148A1

Abstract

An authentication system includes: an authentication acquisition device (digital camera (40)) for acquiring the current position data on the object-to-be-positioned received from electronic positioning means and the time data and generating unified data made from these data and an authentication encryption key received from an authentication device (authentication server (30)) when an authentication request is issued; and the authentication device (authentication server (30)) for acquiring the unified data from the authentication acquisition device (digital camera (40)) and performing authentication of the position information and the time information by using the authentication encryption key.

Description

Specification

Authentication system and certification acquisition device

The present invention relates to an authentication system, an authentication acquisition device, and an authentication method for authenticating position information and time information obtained by electronic position measurement means such as GPS and delivering the information to various applications. Background art

There have been many proposals for technologies to acquire the current position of an object or the like whose location is to be confirmed via electronic positioning means such as GPS (Global Positioning System) and to publicly authenticate the data. , Has been filed.

For example, for portable electronic devices such as digital cameras and personal computers, position and time information is obtained from GPS, and these are transmitted to the center, and the location and time data at which the center is copy-guarded are transmitted to the electronic device that requested it. Technology (Japanese Patent Laid-Open No. 2001-335357), generates position information and time information for specifying the input point, adds it to the input data as authentication information, and transmits it to the certificate authority. (Japanese Patent Laid-Open Publication No. 2001-106632) is known.

In each case, by ensuring the objectivity of the data, it can be widely applied to insurance claims in the event of a traffic accident, as well as on-site inspections of police and fire departments, etc., and is a great means for improving the proof power as evidence. The effect is obtained. However, in each case, the central processing of a certification authority or the like is the center, so the load on the center is large, and it takes time to confirm the location on site. In addition, digital images captured by digital cameras were easily tampered with, and the evidential ability remained questionable depending on how they were stored, and remained poorly objective.

Therefore, the first problem of the present invention is that the authentication between the center authentication device and the on-site authentication acquisition terminal is suitable. An object of the present invention is to provide an authentication system, an authentication acquisition device, and an authentication method that facilitate location confirmation on site by distributing the load. Further, a second object of the present invention is to provide an authentication system and an authentication acquisition device that maintain the authenticity of an image captured by a digital camera or the like and realize consistent security from shooting to recording. Is to provide. Disclosure of the invention

In order to solve the above-mentioned problems, an authentication system according to the present invention includes: an authentication acquisition device, comprising: a current position data of a positioning target received from electronic position positioning means such as a GPS; At times, it generates data integrating the authentication encryption key received from the authentication device. The integrated data is transmitted to an authentication device connected via a network, and the authentication device authenticates the location information and the time information using the authentication encryption key, and the authentication acquisition device that has issued the authentication request. Reply to

This makes it possible to provide an authentication system in which the load is distributed between the authentication server at the center and the authentication acquisition device at the site, and the location at the site can be easily confirmed.

Also, the authentication acquisition device including the imaging device generates a drive timing signal of the image sensor synchronized with the current time, and the drive timing signal includes the authentication encryption key information transmitted from the authentication device, and the position measurement means. The security marking signal is generated by superimposing the acquired current position information of the positioning target. Then, the image information output from the imaging device is recorded on the write-once recording medium as encrypted information including security marking information. This makes it possible to maintain the authenticity of images captured by digital cameras, etc., and realize consistent security from photography to recording. Brief Description of Drawings

FIG. 1 is a diagram cited for explaining the location authentication method of the present invention and its use subject. It is.

FIG. 2 is an operation sequence diagram cited for explaining the overall operation of the authentication system of the present invention.

FIG. 3 is a flowchart showing the operation of the authentication acquisition device of the present invention.

FIG. 4 is a flowchart showing the operation of the authentication system of the present invention.

FIG. 5 is a block diagram showing the internal configuration of the authentication acquisition device of the present invention in a functionally developed manner.

FIG. 6 is a block diagram showing the internal configuration of the authentication system of the present invention by developing its functions.

FIG. 7 is a diagram conceptually showing an application example of the authentication obtaining apparatus of the present invention.

FIG. 8 is a block diagram showing an internal configuration of the image intrinsic processing unit shown in FIG. FIG. 9 is a flowchart showing the operation of the image intrinsic processing section shown in FIG. FIG. 10 is a block diagram in which a part related to the color correction processing is extracted and shown in the image intrinsic processing section shown in FIG.

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is a diagram cited for explaining a location authentication method of the present invention and its use subject. In Fig. 1, reference numeral 1 denotes a GPS satellite, which measures the distance based on the principle of triangulation by receiving radio waves emitted from three or more GPS satellites 1, and obtains current position information including latitude, longitude, and altitude as well as a standard. Used as an electronic positioning means to measure time. In addition, as the electronic positioning means, other methods such as those using FM (Frequency Modulation) radio waves can be used. Reference numeral 2 denotes an authentication requester, and reference numeral 3 denotes a location authentication service provider, which owns and manages an authentication acquisition terminal 20 as an authentication acquisition device and an authentication server 30 as an authentication device, respectively. Authentication 4 The acquiring terminal 20 and the authentication server 30 are connected via a network (not shown).

The general operation flow of the above system configuration will be described below. That is, the authentication acquiring terminal 20 receives the GPS data (latitude, longitude, altitude, time) by the built-in GPS receiver and issues a request for acquiring the authentication encryption key of the received GPS data to the authentication server 30. I do. Upon receiving this, the authentication server 30 issues authentication encryption key information to the requested authentication acquisition terminal 20. The authentication acquisition terminal 20 integrates the GPS data and the authentication encryption key information. It generates pandle data and issues an authentication request to the authentication server 30. The authentication server 30 transmits the result of the authentication to the authentication acquiring terminal 20. Upon receiving the result, the authentication acquiring terminal 20 delivers the authentication data to the application. In this way, an appropriate load distribution can be performed between the authentication acquisition terminal 20 and the authentication server 30. Therefore, the authentication requester 2 can obtain a quick response result at the site, and The load on server 30 is reduced. The details will be described below.

FIG. 2 is an operation sequence diagram cited for explaining the overall operation of the authentication system of the present invention. Here, an operation sequence between the GPS satellite 1, the authentication acquisition terminal 20 and the authentication server 30 is shown. First, the certified terminal 20 receives a radio wave from the GPS satellite 1 and performs a positioning process (S21: correct the arrow in FIG. 2). The radio wave from the GPS satellite 1 is also delivered to the authentication server 30, and the same processing is performed in the authentication server 30 (S22). Subsequently, the authentication acquisition terminal 20 issues a timestamp request to the authentication server 30 (S23), and the authentication server 30 receiving the request sends a timestamp for synchronization (S2). Four ) . Before and after receiving the time stamp, the authentication acquisition terminal 20 issues an authentication encryption key acquisition request to the authentication server 30 (S25), and determines the positioning data, the time stamp, and the received authentication key. Issue the certification request by panning the information (S26, S27). Subsequently, the authentication result is transmitted from the authentication server 30 and the terminal 20 obtains the authentication data. Data to the application.

Specific embodiments will be described below. According to the authentication system of the present invention, there are two methods, a method of causing the authentication acquisition terminal 20 to bear the processing load and a method of causing the authentication server 30 to bear the processing load. First, the former will be explained. FIG. 3 is a flowchart showing the flow of the operation in the authentication acquisition terminal 20 in that case.

(First Embodiment)

In FIG. 3, the authentication terminal 20 first captures the radio wave of the GPS satellite 1 (S31), executes positioning processing, and obtains the current position information of the authentication terminal 20 consisting of latitude, longitude, and altitude. Get (S32). Then, it receives a time stamp for synchronization from the authentication server 30 and transmits a request for issuing an authentication encryption key (S33, S34). Subsequently, the system waits for the issuance of the authentication encryption key from the authentication server 30 (S35), generates the received authentication encryption key, and the pandora data of the positioning data and the time stamp, and transmits it to the authentication server 30 ( S36). Then, it waits for the authentication server 30 to send authentication data, and passes the result to the application (S37, S38).

According to the above-described present embodiment, terminal processing in the authentication acquisition terminal 20 is mainly performed, so that location confirmation on the site is facilitated. As applications, in addition to the aforementioned insurance claims for accidents, police inspections, firefighting and other on-site inspections, logistics tracking of dangerous goods and valuables by combining with RFID (Radio Frequency Identification) tags can be considered.

Specifically, public supervision and management of manufacturing, storage, use, and transport of dangerous goods, poisons, combustibles, radioactive materials, explosives, swords, guns, fire, explosives, and contaminants are currently covered by several laws and regulations. It covers government offices, has different formats, has different data storage formats, and is not centrally managed. In addition, many of the methods for determining whereabouts are currently based on reports and reports, are not digitized, and their locations are not known in real time. So, for example, these dangerous goods are 6 Incorporate a non-removable ID tag into the container and combine it with the above-mentioned positioning authentication management to acquire and store these location data, and provide it as authentication data when requested. be able to. Similarly, with regard to dangerous goods stored in the physical protection building, it is possible to cooperate with the RF ID tag and to perform mobility management including transport by positioning management indoors and outdoors. This makes it possible to automatically and accurately grasp the location of dangerous goods and report on the location of the hazardous material in the event of a large-scale disaster, as well as during normal times.

(Second embodiment)

FIG. 4 is a flowchart showing the flow of operation when the processing load is shared mainly by the authentication server.

In FIG. 4, the authentication server 30 first receives an authentication encryption key acquisition request from the authentication acquisition terminal 20 (S41). As a result, the authentication server 30 generates continuous encryption matrix data (authentication encryption key information) for authentication synchronized with the time stamp, and transmits it to the requested authentication acquisition terminal 20 (S42).

Then, it captures the certification acquisition terminal request time data and the simplified positioning result data from the certification acquisition terminal 20 (S43, S44), and performs positioning calculation based on the signal obtained from the GPS satellite 1 by itself. The simple positioning result is confirmed by comparing it with the data (S45). The confirmation is performed by adding authentication password information generated by a specific function to the positioning data obtained by calculating the following arithmetic expression (positioning equation), and encrypting based on the authentication and authentication encryption key information. This is performed by comparing the calculated positioning data with the positioning calculation result obtained by decoding (back calculation) using the shared function.

[Positioning equation]

(Xi-X _u ) ² + (Y `` Y _U ) ² + (Z _; -Z _u ) ² = (Ri-C _Bu ) ²

However, i (i = l, 2 , 3, 4): satellites used for positioning, Xi, satellite position of Y have Z already _{_{known, X u, Y u, Z}} u: unknown receiver position, Ri: Known Pseudo distance (real distance between satellite and GPS receiver calculated from received signal, clock error, propagation delay, Includes transmitter noise. Among them, satellite clock error and propagation delay are corrected before solving), C _Bu : receiver clock error.

Subsequently, the same authentication processing as described above is executed (S46), and the result is recorded in an authentication archive 36 composed of a write-once recording medium (S47), and at the same time, the authentication acquisition terminal 2 which has been requested. The result is transmitted to 0 (S48).

According to the embodiment of the present invention, since the authentication server 30 performs the positioning calculation, the burden on the authentication acquisition terminal 20 is reduced, and the authentication data is archived in the authentication server 30. Is difficult. The communication between the authentication acquisition terminal 20 and the authentication server 30 is performed using a secure communication platform using a time synchronization encryption key.

In the above-described embodiment of the present invention, in order to authenticate that true positioning data has been acquired at a true measurement position, one of the acquired data includes data that can be reversibly proved to be true. Must be included. However, the received normal GPS signal has not been proved to be the only true signal reversibly, and therefore, in the embodiment of the present invention, the true GPS signal is reversibly true from the authentication server 30. The authentication encryption key information that can be proved as a signal is passed to the authentication acquisition terminal 20. However, this alone does not prove that all the received GPS signals are receiving true signals, so that all signals received at the true position are decrypted and immediately transferred to the authentication server 30. It verifies rationality such as back calculation and check to ensure its authenticity. In addition, the authentication encryption key information, which is an authentication signal, is provided with an array (authentication encryption matrix data) that can determine the authenticity of the authentication in a time-series manner. Consideration must be given to providing a function to confirm the passage route that can be verified. Furthermore, the functions involved in the rationality verification are not fixed, and it is necessary to take into account that both the authentication server 30 and the authentication terminal 20 dynamically change in synchronization.

Fig. 5 shows the above-mentioned authentication acquisition terminal, and Fig. 6 shows the internal configuration of the authentication server. It is the block diagram opened and shown.

In FIG. 5, the authentication acquisition terminal 20 includes a GPS data acquisition unit 21, an authentication signal key reception unit 22, a bundle data generation unit 23, and a location authentication result reception unit 24. . The GPS data acquisition unit 21 acquires the current position data and time data of the positioning target from the GPS satellite 1 and supplies them to the pandle data generation unit 23. The bundle data generation unit 23 is supplied with the authentication encryption key information transmitted from the authentication server 30 via the authentication encryption key reception unit 22. Here, a bundle integrating these data is provided. Generates data (positioning data + time stamp + authentication encryption key information) and starts the position authentication result receiver 24.

On the other hand, the authentication server 30 obtains the above-mentioned pandle data from the authentication acquiring terminal 20 and authenticates the position information and the time information using the authentication encryption key information (continuous encryption matrix data for authentication) generated by itself. And sends it to the requested authentication terminal 20. The location authentication result receiving unit 24 receives the result of the location authentication from the authentication server 30 and delivers the result to the application.

In FIG. 6, the authentication server 30 includes a GPS data acquisition unit 31, an authentication request reception unit 32, a simple positioning result reception unit 33, an authentication encryption key generation transmission unit 34, and a positioning processing unit 3. 5, an authentication archive 36, and an authentication result transmitting unit 37.

The GPS data acquisition unit 31 acquires the current position data and time data of the positioning target from the GPS satellite 1 and supplies them to the positioning processing unit 35. In addition, the output from the simplified positioning result receiving unit 33 and the output from the authentication encryption key generation transmitting unit 34 are supplied to the positioning processing unit 35. The simple positioning result receiving unit 3 3 receives the result of the simple positioning calculation (based on GPS data, time data, and authentication encryption key information) generated by the authentication acquisition terminal 20, and generates the authentication encryption key generation transmission unit 3. 4 generates authentication encryption key information synchronized with the current time based on the time data received from the GPS satellite 1 when the authentication request is received from the authentication acquisition terminal 20 via the authentication request receiving unit 32. .

The positioning processing unit 35 performs the authentication issued simultaneously with the authentication request from the authentication acquisition terminal 20. JP2004 / 006222

9 Based on the encryption key acquisition request, the current position data of the positioning target captured via the GPS data capturing unit 31 is authenticated using the authentication encryption key information generated earlier, and transmitted from the authentication acquisition terminal 20. Check the result of simple positioning. Then, the result is recorded in the authentication archive 36 constituted by a write-once type recording medium, and is transmitted to the requesting authentication terminal 20 via the authentication result transmitting unit 37 to reply.

(Third embodiment)

FIG. 7 shows a conceptual diagram of an operation when the authentication system of the present invention is applied to an imaging device (for example, a digital camera).

Here, the digital camera 40 operates as the authentication acquisition terminal 20 of the present invention. The digital camera 40 is connected to the authentication server 30 of the location / location authentication service company 3 via the communication module 49. Here, in addition to the location / location authentication described above, video / data storage and time authentication are also performed.

In addition to the camera body (not shown), the digital camera 40 includes a positioning input (including a differential input by FM radio waves) obtained from the 0-3 satellite 1 via the 0S receiver 41, a azimuth gyro 4 2 , Input of direction by geomagnetic sensor 43, input of ambient environment data by environment sensor 44 such as temperature, barometric pressure and humidity, input of operator ID confirmation part 45 by input of biological information such as fingerprint, and input of tag reader part 46 It is provided as a device. In FIG. 7, a large double circle below the operator ID confirmation section 45 is a cradle for the operator ID confirmation section 45 such as a fingerprint sensor. (… Correct the position of reference numeral 45 in Fig. 7.) These input data are provided to the control center CPU 47 (here, the image intrinsic processing unit) and processed.

Note that the photographing data is encrypted in association with the input data and recorded on a write-once recording medium 48 (hereinafter referred to as an encrypted recording medium) built in the digital camera 40. Also, it is similarly recorded on the write-once recording medium 36 (authentication archive) of the authentication server 30.

By the way, photography for recording the situation at the site is done before or after PT / JP2004 / 006222

It is widely used for insurance claims in the case of 10 mag, as well as on-site inspections of police and fire departments. Here, in these video recordings, the shooting date and time, and the shooting direction and location are simultaneously recorded as intrinsic video data and stored. Also. It provides a consistent system from reproducing intrinsic video data to providing it on demand.

At this time, it is essential that the captured video data be tamper-proof after the optical-Z electrical conversion of the image sensor (hereinafter referred to as an image sensor). With digital camera 40 and authentication server 3

Stored in multiple write-once recording media such as 0 certification archives 36 at the same time. Also, the communication line to be connected shall have high security. In addition, the center's authentication archive 36 must have necessary access control and have a falsification prevention function and a physical protection function.

Fig. 8 shows an example of the configuration of the image authenticity processing unit that is essential to secure the authenticity of the video and store the authenticable video. Fig. 9 is a flowchart showing the processing procedure.

In FIG. 8, reference numeral 472 denotes an image sensor unit configured by a CCD (Charge Coupled Device) or the like, which is driven by a timing signal generated by the image sensor drive timing unit 471 ( S91). In addition, the security marking generation unit 483 includes the authentication code key information generated by the authentication server 30 fetched through the authentication encryption key reception unit 476, and the external signal reception unit 473, A security marking signal is generated by superimposing the time information and the current position information, which are obtained via the synchronization time receiving section 474 and the position authentication processing section 475, to the security marking processing section 485. Supply (S92). The security marking processing section 485 is also supplied with the above-described drive timing signal and the image sensor output signal input via the A / D processing section 482, where the security marking signal is supplied. And the output buffer 4 8 4 as video generation basic data The signal is supplied to the camera signal processing unit 489 via (S93).

The camera signal processing unit 489 processes the video generation basic data as a camera input signal, and generates and outputs video encrypted data including a security marking signal. The encrypted video data is transmitted in real time to the authentication archive (write-once recording medium 36) of the authentication server 30 via the secure line 487 and recorded. At this time, if necessary, the synchronization time stamp (synchronization time receiving unit 474), positioning position data (position authentication processing unit 475), ambient environment sensor data (various sensors 441, 442), operator ID (operator ID) The ID receiving unit 477) may be linked and recorded. The above-mentioned signals, the synchronization time stamp signal (synchronization time receiving section 474), the positioning position signal (position authentication processing section 475), the ambient environment sensor data (various sensors 441 and 442), the operator ID data (operation The user ID receiving section 477) is recorded on the encrypted recording medium 48 together with the video signal at the time of receiving all (S94).

In this way, by simultaneously recording authentication information in different formats on different recording media, intentional third parties with the purpose can intentionally modify the video data in different formats across multiple recording media at the same time. Tampering becomes impossible.

In addition, in order to reproduce the video encrypted data (S95), it is necessary to extract true video data from a signal including additional data other than video using a demodulation algorithm driven by a security marking signal ( S 96).

According to the above-described embodiment of the present invention, the processing for making it impossible to falsify after the light / electric signal conversion timing by the image sensor has been described. However, it is in a stage before the light / electric signal conversion such as exposure adjustment. The timing of starting mechanical or electrical shutters that limit optical input must be considered as well. For example, even in the case of a digital camera, there is a mechanical or electronic shutter for limiting an optical input (exposure adjustment) in front of an image sensor unit 472 such as a CCD (optical / electrical conversion element). There is something. This is because fast moving The mechanical or electronic shutter is lower in cost and the electronic circuitry is less complicated than the shutter by ON / OFF of the optical Z-electric conversion element when shooting a photo object. It is said that it is possible to perform a simple operation (aperture X shutter speed X focus). As described above, the present invention can be applied to a shutter using an ON / OFF conversion of an optical / electrical conversion element and a mechanical or electronic shutter, and the timing can be appropriately set. The time can be set in consideration of the shutter speed (moving speed of the slit, etc.).

In the case of advanced security applications, it is conceivable that the optical input is processed by a duplex system using a half mirror or the like, and individually registered in the encrypted recording media 48 (data storage archive) at the same time. . Further, for color leveling, a mutual error difference correction process capable of reproducing a corrected color based on the same criterion can be performed on the transmitting and receiving sides (S97).

Hereinafter, the above-described mutual error difference correction processing will be described. FIG. 10 is a diagram cited for the purpose of general description of the mutual error difference correction processing. As the transmitting and receiving sides, the photographing subsystem 100 and the display subsystem 200 are exemplified. I have.

The main part configuration of the digital camera 40 described above is shown in the photographing subsystem 100. In FIG. 10, blocks denoted by the same reference numerals as those in FIG. 8 are the same as those shown in FIG.

The color information transmitted and received via the network is expressed slightly differently due to the color expression error of each display device. Here, by exchanging data without color representation error with a certain standard, the color is included by minimizing the error on the transmitting and receiving man-machine interfaces at both ends of the system, although it is not true color. It is intended for data distribution.

Specifically, a standard color template (TP) is prepared, and each standard color component of the captured image generated by the standard template color data generation unit 501 is generated and output. The standard color difference processing unit 502 is used to determine the color components of the captured image and the respective The difference from the quasi-color component is calculated, an input color data correction signal is generated, and the input color data correction signal is transmitted to the display-side subsystem 200 together with the captured video signal. The display-side subsystem 200 performs calculations for excluding the received input color data correction signal (difference signal) as an error signal at the time of reproduction, and displays the result. Although this is not true color, it is possible to minimize the color error on the transmitting and receiving man-machine interfaces at both ends of the system. '

As described above, according to the present invention, the authentication acquisition device is configured such that the current position data and the time data of the positioning target received from the electronic position positioning device such as the GPS, and the authentication encryption code received from the authentication device when the authentication request is issued. Generates data that integrates a key and sends this integrated data to an authentication device connected via a network, and the authentication device authenticates location information and time information using an authentication encryption key. This is a response to the authentication acquisition device that issued the authentication request, which provides an authentication system that distributes the load between the authentication server at the center and the authentication acquisition device at the site, and facilitates location confirmation at the site. can do.

Also, the authentication acquisition device including the imaging device generates a drive timing signal of the image sensor synchronized with the current time, and the drive timing signal includes the authentication encryption key information transmitted from the authentication device and the position measurement means. A security marking signal is generated by superimposing the acquired current position information of the positioning target, and the image information output from the imaging device is recorded on a write-once recording medium as encrypted information including the security marking information. However, the true nature of images taken by digital cameras and the like is maintained. It provides consistent security from shooting to recording.

Further, for each standard color component of the photographed image, a difference from each standard color component prepared in advance is calculated, and transmitted to the display subsystem together with the captured image signal as an input color data correction signal, At the time of reproduction, the display side subsystem must perform processing to exclude the received input color data correction signal as an error signal. This guarantees the trueness of color. As described above, it is possible to realize a secure security from photographing to recording.

Claims

The scope of the claims

1. An authentication device for performing position authentication of a positioning target, and the authentication device is an authentication system including an authentication acquisition device connected via a network,

Captures the current position data and time data of the positioning target received from the electronic position positioning means, and generates data integrating these data with the authentication encryption key received from the authentication device when issuing an authentication request. Said certification acquisition device,

An authentication device that acquires the integrated data from the authentication acquisition device, and authenticates the position information and the time information using the authentication encryption key;

An authentication system comprising:

2. The authentication system according to claim 1, wherein the authentication device comprises:

Means for receiving an authentication request from the authentication acquisition device, generating and returning an authentication encryption key synchronized with the current time based on the time data received from the electronic position positioning means,

Based on an authentication encryption key acquisition request issued at the same time as the authentication request from the authentication acquisition device, the current position data of the positioning target fetched from the electronic position positioning means is authenticated using the generated authentication encryption key. And a means for confirming the result of the simple positioning transmitted from the authentication acquisition device.

3. The authentication system according to claim 1, wherein the authentication device comprises:

Means for generating an encrypted positioning data by adding an authentication password generated by a specific function to the positioning data obtained by calculating the positioning operation expression; and Means for obtaining the positioning operation result by decoding using a function.

4. An authentication device that performs authentication of a captured image including a positioning target is an authentication acquisition device including an imaging device connected via a network,

A drive timing signal for the image sensor synchronized with the current time is generated, and the drive timing Means for generating a security marking signal by superimposing authentication encryption key information transmitted from the authentication device, and current position information of a positioning target obtained from the position positioning means,

Means for recording image information output from the imaging device as encryption information including the security marking information on a write-once recording medium,

An authentication acquisition device comprising:

5. The authentication acquisition device according to claim 4, wherein

It is characterized in that it comprises means for calculating a difference between each color component of the photographed image and each standard color component, and excluding the difference as an error signal at the time of reproduction.

6. The certification acquisition device according to claim 4, wherein

It is assumed that the light input is spectrally separated, the security marking information is superimposed on the captured image obtained from each of them, and the current position information is superimposed to generate a security marking signal, and the security marking signal is recorded on the write-once recording medium prepared for each. Features.

7. The certification acquisition device according to claim 4, wherein

At least one of photographer information obtained by acquiring biometric information unique to a photographer, current position information including photographing direction information, and environmental information is recorded on the write-once recording medium in association with the security marking signal. It is characterized by the following.

8. An authentication method in which an authentication device connected to the authentication acquisition device via a network performs position authentication of a positioning target,

A step in which the authentication acquisition device acquires current position data and time data of the positioning target received from electronic position positioning means;

A step of generating data in which the acquired data and an authentication encryption key received from the authentication device at the time of issuing the authentication request are integrated, and transmitting the integrated data to the authentication device; and an authentication device receiving the integrated data. Performing authentication of the position information and the time information using the authentication encryption key, An authentication method, comprising: