WO2005107148A1

WO2005107148A1 - Authentication system

Info

Publication number: WO2005107148A1
Application number: PCT/JP2005/008247
Authority: WO
Inventors: Shinichi Yamada; Yoshihiro Masuyama
Original assignee: Hitachi, Ltd.
Priority date: 2004-04-28
Filing date: 2005-04-28
Publication date: 2005-11-10
Also published as: WO2005107147A1

Abstract

An authentication system has an authentication acquiring device (digital camera (40)) and an authentication device (authentication server (30)). The an authentication acquiring device (digital camera (40)) imports current position data and time data of an object of which position is to be defined received from electronic position defining means and produces data in which these imported data and an authentication encryption key received from the authentication device (authentication server (30)) are combined when an authentication request is issued. The authentication device (authentication server (30)) acquires the combined data from the authentication acquiring device (digital camera (40)) and authenticates the position data and the time data by using authentication encryption key.

Description

Specification

Word Ninja system

Technical field

The present invention relates to an authentication system, an authentication acquisition device, and an authentication method for authenticating position data and time data obtained by electronic position measurement means such as GPS and delivering the data to various applications.

Background art

[0002] A technology for acquiring the current position of an object or the like whose position is to be confirmed via electronic position positioning means such as a GPS (Global Positioning System) and publicly authenticating the data is known. And many have been proposed and filed.

[0003] For example, regarding portable electronic devices such as digital cameras and personal computers, position data and time data are obtained using GPS satellites, transmitted to the center, and the center requests the location and time data where the copy guard was performed. Technology to transmit to electronic devices that had problems (Japanese Patent Laid-Open Publication No. 2001-33537), position data and time data specifying the input point are generated, added to the input data as authentication data, and transmitted to a certificate authority. (Japanese Patent Application Laid-Open No. 2001-100632) is known.

[0004] In any case, by ensuring the objectivity of data, it can be widely applied to on-site inspections of police, fire departments, etc., including insurance claims in the event of traffic accidents, etc., and improve the proof power as evidence As a result, a great effect can be obtained. However, the central processing of the certificate authority and the like is the center, and the load on the center is large, so it took time to confirm the location at the site. In addition, digital images captured by digital cameras were easily tampered with, and the evidential ability remained questionable depending on the way they were stored, and their objectivity was still poor.

[0005] Accordingly, a first object of the present invention is to provide an authentication system and an authentication acquisition device that facilitates location confirmation at the site by appropriately distributing the load between the authentication device at the center and the authentication acquisition terminal at the site. And to provide an authentication method. Further, a second object of the present invention is to maintain the authenticity of an image taken by a digital camera or the like, and record the image from photographing. An object of the present invention is to provide an authentication system, an authentication acquisition device, and an authentication method that realize security that is consistent up to now.

Disclosure of the invention

[0006] In order to solve the above-described problems, in the authentication system of the present invention, the authentication acquisition device receives a radio wave emitted from an electronic position positioning means such as a GPS and receives the current position of the positioning target. It determines the positioning and time, and generates data in which position data (positioning data) and time data are integrated with the authentication encryption key received by the authentication device at the time of issuing the authentication request. The integrated data is transmitted to an authentication device connected via a network, and the authentication device authenticates the position data and the time data using the authentication encryption key. Reply to the authentication acquisition device.

[0007] This makes it possible to provide an authentication system in which the load is distributed between the authentication server at the center and the authentication acquisition device at the site, and the location confirmation at the site is facilitated.

[0008] Further, an authentication acquisition device including an imaging device generates a drive timing signal of the image sensor synchronized with the current time, and adds the authentication encryption key data transmitted from the authentication device and the position positioning means to the drive timing signal. A security marking signal (security marking data) is generated by superimposing position data indicating the current position of the positioning target that has been positioned by receiving force radio waves. Then, the image data (video data) output from the image pickup apparatus is recorded on the write-once recording medium as encrypted data including the security marking data.

[0009] Thus, it is possible to maintain the trueness of an image photographed by a digital camera or the like and realize consistent security up to recording of photographing power.

Brief Description of Drawings

FIG. 1 is a diagram cited for explaining a location authentication method of the present invention and a user who uses the method.

FIG. 2 is an operation sequence diagram cited for explaining the overall operation of the authentication system of the present invention.

FIG. 3 is a flowchart showing the operation of the authentication acquisition device of the present invention.

FIG. 4 is a diagram conceptually showing an application example of the authentication acquisition device of the present invention.

FIG. 5 is a block diagram showing an internal configuration of an image intrinsic processing unit shown in FIG. 4. 6 is a flowchart showing an operation of the image intrinsic processing unit shown in FIG.

FIG. 7 is a block diagram showing a portion related to a color correction process extracted from the image intrinsic processing unit shown in FIG. 5; BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is a diagram cited for explaining the location authentication method of the present invention and its use subject.

In FIG. 1, reference numeral 1 denotes a GPS satellite, and a distance to each GPS satellite 1 is obtained when the certification acquisition terminal 20 receives radio waves emitted from three or more (preferably four or more) GPS satellites 1. Electronic positioning means for measuring the current position such as latitude, longitude, altitude and standard time (time) by triangulation based on the measured distance to each GPS satellite 1 Used as In addition, as the electronic positioning means, a method using FM (Frequency Modulation) radio waves can be used instead. Further, the position data obtained as a result of the positioning may be obtained as electronic positioning means power. Incidentally, reference numeral 2 denotes an authentication requester, and reference numeral 3 denotes a location authentication service provider, which respectively owns and manages an authentication acquisition terminal 20 as an authentication acquisition device and an authentication server 30 as an authentication device. The authentication acquisition terminal 20 and the authentication server 30 are connected via a network (not shown)! Puru.

With reference to the system configuration described above, the general operation flow will be described as follows.

That is, the authentication acquisition terminal 20 receives GPS data (radio waves for positioning and measuring (determining) the latitude, longitude, altitude, and time) from the built-in GPS receiver, and determines the current position and determines the time ( Measurement) and issues an authentication encryption key acquisition request to the authentication server 30 to authenticate the measured position data and the determined time data. Upon receiving this, the authentication server 30 issues authentication encryption key data to the requested authentication acquisition terminal 20, and the authentication acquisition terminal 20 integrates the position data, the time data, and the authentication encryption key data. It generates bundle data and issues an authentication request to the authentication server 30. The authentication server 30 transmits the result of the authentication to the authentication acquisition terminal 20, and the authentication acquisition terminal 20 receiving the result transfers the authentication data to the application. In this way, an appropriate load distribution can be performed between the authentication acquisition terminal 20 and the authentication server 30, so that the authentication requester 2 can obtain a quick response result at the site, and 30 burden reduction Peel off. The details will be described below.

FIG. 2 is an operation sequence diagram cited for explaining the overall operation of the authentication system of the present invention. Here, the operation sequence between the GPS satellite 1, the authentication terminal 20, and the authentication server 30 is shown. First, the authentication acquisition terminal 20 receives a radio wave transmitted by the GPS satellite 1 and performs a positioning process (S21). The radio wave (GPS data) transmitted by the GPS satellite 1 is also delivered to the authentication server 30, and the authentication server 30 performs the same processing as necessary (S22). Next, the authentication acquisition terminal 20 issues a time stamp request to the authentication server 30 (S23), and the authentication server 30 that has received the time stamp transmits a time stamp for synchronization (S24). Before and after receiving the time stamp, the authentication acquisition terminal 20 issues an authentication encryption key acquisition request to the authentication server 30 (S25), and bundles the position data, the time stamp, and the received authentication encryption key data. Issue a certification request (S26, S27). Subsequently, an authentication result is transmitted from the authentication server 30, and the authentication acquisition terminal 20 passes the authentication data to the application. Here, the bundled data is `` a. Location data at the time of positioning, b. C. The authenticated encryption key data obtained from the server. " That is, a time stamp obtained from the server 30 may be used in place of the time data at the time of positioning!

[0015]. In the following, according to the authentication system of the present invention, there are two methods, a method of causing the authentication acquisition terminal 20 to bear the processing load and a method of causing the authentication server 30 to bear the processing load. First, the former power is explained. FIG. 3 is a flowchart showing the flow of the operation of the authentication acquisition terminal 20 in that case.

(First Embodiment)

In FIG. 3, the authentication acquiring terminal 20 first acquires radio waves (GPS data) of the GPS satellite 1 (S31), executes a positioning process (S32), and obtains the latitude, longitude, and altitude of the authentication acquiring terminal 20. Obtain position data indicating the current position. Then, a time stamp for synchronization is received from the authentication server 30, and a request for issuing an authentication encryption key is transmitted (S33, S34). Then, it waits for the issuance of the authentication encryption key from the authentication server 30 (S35), generates bundle data of the received authentication encryption key data, position data, and time stamp (time data), and transmits the bundle data to the authentication server 30. (S36). Next, the authentication data from the authentication server 30 When the authentication result is received (S37 → Yes), the authentication result is delivered to the application (S38).

[0017] According to the above-described embodiment, terminal processing in the authentication acquisition terminal 20 is mainly performed, so that location confirmation at the site is facilitated. As applications, in addition to the above-mentioned insurance claims for accidents, on-site verification of police, firefighting, etc., RFID (Radio Frequency

Identification) can be used to track the distribution of dangerous goods and valuables by combining with tags.

[0018] Specifically, public supervision and management of manufacturing, storage, use, and transportation of dangerous substances, poisons, combustibles, radioactive materials, explosives, swords, guns, fire, explosives, contaminants, etc. are currently subject to several laws. The data format is different, the data storage format is different, and there is no centralized management. In addition, many of the methods for determining whereabouts are currently based on reports and reports, are not digitized, and their locations are not known in real time. For this reason, for example, by incorporating a non-removable ID tag into these dangerous goods or their containers, and combining with the above-mentioned positioning and authentication management, the location data is acquired, stored, and authenticated as required. Can be provided as data. Similarly, for dangerous goods stored in a physical protection building, it is possible to cooperate with an RFID tag and manage the movement, including transport by performing positioning control indoors and outdoors. As a result, it is possible to automatically and accurately grasp the location of hazardous materials at the time of a large-scale disaster, as well as reports on the location and location, in addition to normal times.

[0019] The positioning equation for positioning the radio wave position obtained from the GPS satellite 1 is represented by the following equation.

[Positioning equation]

(X -X) ² + (Y -Y) ² + (Z -Z) ² = (R -C) ²

Where i (i = l, 2, 3, 4): satellite used for positioning, X, Y, Ζ: known satellite position, X, 、, Ζ: unknown receiver position,: known pseudorange ( Includes the actual distance between satellite GPS receivers calculated from the received signal, clock error, propagation delay, and receiver noise. Of these, satellite clock error and propagation delay are corrected before solving), C

Bu: Receiver clock error.

(Second Embodiment) FIG. 4 shows an operation conceptual diagram when the authentication system of the present invention is applied to an imaging device (for example, a digital camera).

Here, the digital camera 40 operates as the authentication acquisition terminal 20 of the present invention. The digital camera 40 is connected to the authentication server 30 of the location authentication service provider 3 via the communication module 49. Here, in addition to the above-mentioned “location authentication”, image data storage and time authentication are also performed.

The digital camera 40 includes, in addition to a camera body (not shown), a GPS satellite 1 to a GPS receiver 41 (including map information data in FIG. 4), an azimuth gyro 42, a geomagnetic sensor 43, temperature, pressure, and humidity. It has an ambient environment sensor 44 for measuring data, etc., an operator ID confirmation unit 45 by inputting biometric data such as fingerprints, and a tag reader unit 46 as input devices. In FIG. 4, the large double circle below the operator ID confirmation unit 45 is a cradle for the operator ID confirmation unit 45 such as a fingerprint sensor. These input data are provided to a CPU 47 (here, an image intrinsic processing unit) serving as a control center and processed.

Here, from the GPS receiver 41, input of positioning radio waves (including differential input by FM radio waves) from the GPS satellite 1 is obtained (corresponding to “input of positioning means power”), and the azimuth gyro is used. Direction input can be obtained from 42 and geomagnetic sensor 43, ambient environment data such as temperature, pressure, and humidity can be input from environment sensor 44, and biometric data such as fingerprints can be input from operator ID confirmation unit 45. As a result, data of an IC tag such as an RFID tag can be input from the tag reader section 46.

[0024] The captured video data is encrypted in association with the input data, and is recorded on a write-once recording medium 48 (hereinafter referred to as "encryption recording medium") built in the digital camera 40. . Also, it is similarly recorded on the write-once recording medium 36 (authentication archive) of the authentication server 30. Incidentally, the positioning result (current position data of the positioning target) measured based on the input of the radio wave from the GPS satellite 1 (position positioning means) is associated with the video data and encrypted.

[0025] By the way, photographing for recording the situation at the site is widely carried out before and after the construction, in the case of a traffic accident, etc., as well as in the field inspection of police and fire departments, etc. Here, in these video recordings, the shooting date and time, the shooting direction, Locations are simultaneously recorded and stored as intrinsic video data. Also. It provides a consistent system from reproducing intrinsic video data to providing it on demand.

At this time, it is essential that the captured video data be tamper-proof after the optical-Z electrical conversion of an image sensor (hereinafter, referred to as an image sensor). Together with the input data, it is stored simultaneously in a plurality of write-once recording media such as the digital camera 40 and the authentication archive 36 (the authentication archive 36 of the authentication server 30). The connected communication lines shall have high security. In addition, the certification archive 36 on the center side shall have necessary access control and shall have a falsification prevention function and a physical protection function.

FIG. 5 shows an example of the configuration of an image authenticity processing unit that is essential for securing the authenticity of the video and storing the authenticable video. FIG. 6 is a flowchart showing the processing procedure. .

In FIG. 5, reference numeral 472 denotes an image sensor unit configured by a CCD (Charge Coupled Device) or the like, and is driven by a drive timing signal (S91) generated by the image sensor drive timing unit 471. . Further, the security marking generation unit 483 includes the authentication encryption key data generated by the authentication server 30 which is taken in through the authentication encryption key reception unit 476, the external signal reception unit 473, the synchronization time reception unit 474, and the position authentication processing unit. The security masking data is generated by superimposing the time data and the position data obtained via the 475 and supplied to the security marking processing unit 485 (S92). The security marking processing unit 485 is also supplied with the above-described drive timing signal and an image sensor output signal (photographed video data) input via the AZD processing unit 482. The data is combined with the data, and supplied to the camera signal processing unit 489 via the output buffer 484 as video generation basic data (S93).

[0029] The camera signal processing unit 489 performs processing using the video generation basic data as a camera input signal, and generates and outputs video encryption data including security marking data. The video encrypted data is transmitted and recorded in real time to the authentication archive (write-once recording medium 36) of the authentication server 30 via the secure line 487. At this time, if necessary, the synchronization time stamp (synchronization time receiving unit 474), the measured position data (position authentication processing unit 475), the ambient environment sensor data (various sensors 441 and 442), the operator ID (operation Person ID The receiving unit 477) may be linked and recorded. The above-mentioned data (signals), synchronization time stamp data (synchronization time reception unit 474), measured position data (position authentication processing unit 475), ambient environment sensor data (various sensors 441 and 442), operator ID The data (operator ID receiving unit 477) is stored (recorded) in the encryption recording medium 48 together with the video signal when all the data is received (S94).

[0030] As described above, by simultaneously recording the authentication data in different formats on different recording media, it is possible for a third party having the purpose to perform the same operation unless the video data in different formats is simultaneously falsified across a plurality of recording media. Intentional tampering becomes impossible.

[0031] In order to reproduce the video encrypted data (S95), the demodulation algorithm driven by the security marking data is used to extract the true video data having the data power including the additional data other than the video (security). Demodulation by marking data, S96).

According to the above-described embodiment of the present invention, the processing for making the optical Z electrical signal conversion timing after the image sensor impossible to falsify has been described. The timing of starting mechanical or electrical shutters that limit the optical input at the stage must be considered as well. For example, even in a digital camera, there is a mechanical or electronic shutter for restricting an optical input (exposure adjustment) in front of an image sensor unit 472 such as a CCD (optical Z-electric conversion element). There is something. The reason for this is that mechanical or electronic shutters are lower in cost than electronic shutters that use ON / OFF switching of the optical Z-electric conversion element when shooting fast-moving subjects, and the complexity of electronic circuits is eliminated. It is said that conventional photographic technical operations (aperture X shutter speed X focus) are possible. As described above, the present invention can be applied to a shutter using ON / OFF of the optical Z-electric conversion element and a mechanical or electronic shutter, and the timing can be appropriately set. The time can be set in consideration of the shutter speed (moving speed of the slit or the like).

[0033] Further, for a higher security application capability, it is conceivable that the optical input is processed by a dual system such as a non-mirror and the like, and individually registered in the encryption media 48 simultaneously. . Further, for color leveling, a mutual error difference correction process capable of reproducing a corrected color based on the same criterion can be performed on the transmitting and receiving sides (S97). Hereinafter, the above-described mutual error difference correction processing will be described. FIG. 7 is a diagram cited for the purpose of explaining the mutual error difference correction processing in a general manner, and illustrates a photographing-side subsystem 100 and a display-side subsystem 200 as transmission / reception sides.

The main configuration of the digital camera 40 described above is shown in the photographing-side subsystem 100.

In FIG. 7, blocks denoted by the same reference numerals as those in FIG. 5 are the same as those shown in FIG.

[0036] The color data transmitted and received via the network is expressed slightly differently due to the color expression error of each display device. Here, by exchanging data without color representation error with a certain standard, the color on the transmission / reception side man-machine interface at both ends of the system is minimized although the color is not a true color. It is intended for the distribution of data, including data.

Specifically, a standard color template (TP) is prepared, and each standard color component of the captured image generated by the standard template color data generation unit 501 is generated and output. The standard color difference processing unit 502 calculates the difference between the color components of the captured image and the respective standard color components, generates an input color data correction signal, and displays the image data (video data) together with the captured video signal (video data). Send to system 200. The display-side subsystem 200 performs an operation for excluding the received input color data correction signal (difference signal) as an error signal at the time of reproduction, and displays the result. Although this is not true color, it is possible to minimize the color error on the transmitting / receiving man-machine interface at both ends of the system.

As described above, according to the present invention, the authentication acquisition device receives the current position data and time data of the positioning target received by the electronic position measurement means such as GPS, and receives the authentication device power when the authentication request is issued. Generates data obtained by integrating the authenticated encryption key and the integrated data, transmits the integrated data to an authentication device connected via a network, and the authentication device uses the authentication encryption key to generate position data and time data. The authentication is then sent back to the authentication requesting device that requested the authentication.This distributes the load between the authentication server at the center and the authentication obtaining device at the site, making it easier to confirm the location at the site. Authentication system can be provided.

[0039] Further, the authentication acquisition device including the imaging device is configured to operate the imaging device in synchronization with the current time. A security marking data is generated by superimposing the authentication encryption key data transmitted from the authentication device and the current position data of the positioning target that also acquired the position positioning means power on the driving timing signal, and generating the security marking data. By recording video data output from the device as write-once recording media including security marking data on a write-once recording medium, an image captured by a digital camera or the like can maintain its authenticity. It is. In addition, the shooting power realizes consistent security up to recording. Further, for each standard color component of the captured image, the difference between each standard color component prepared in advance is calculated and transmitted to the display subsystem together with the captured video signal as an input color data correction signal, The display subsystem secures the trueness of color by performing processing to exclude the received input color data correction signal as an error signal during reproduction. As described above, it is possible to realize consistent security up to the recording of shooting power.

Claims

The scope of the claims

[1] An authentication device that performs position authentication of a positioning target, and the authentication device is an authentication system that includes an authentication acquisition device connected via a network,

Electronic position positioning means Receives the emitted radio wave, determines the position of the current position of the positioning target and determines the time, obtains the generated position data and time data, and obtains the data when the authentication request is issued. The authentication acquisition device for generating data in which the obtained position data and time data and the authentication encryption key received from the authentication device are integrated;

The authentication device that acquires the integrated data from the authentication acquisition device, and authenticates the position data and the time data using the authentication encryption key;

An authentication system comprising:

[2] An authentication device that performs authentication of a captured image including a positioning target is an authentication acquisition device including an imaging device connected via a network,

A drive timing signal of the image sensor synchronized with the current time is generated, and based on the drive timing signal, the authentication encryption key data transmitted from the authentication device and the input from the position positioning means or the input! Means for generating security marking data by superimposing the current position data of the positioning target measured by

Means for recording video data output from the imaging device as encrypted data including the security marking data on a write-once recording medium;

An authentication acquisition device comprising:

[3] The authentication acquisition device according to claim 2, wherein

Means for calculating a difference between each color component of the captured image and each standard color component, and excluding the difference as an error signal at the time of reproduction. .

[4] The authentication acquisition device according to claim 2, wherein

The light input is separated, and the security marking data and the current position data are superimposed on the captured image obtained from each of them to generate security marking data, and the security marking data is recorded on the write-once recording medium prepared for each. Characteristic certification acquisition device

[5] The authentication acquisition device according to claim 2, wherein

At least one of photographer data obtained by acquiring biometric data unique to the photographer, current position data including photographing azimuth data, and environmental data is recorded on the recordable recording medium in association with the security marking data. A certification acquisition device characterized by performing the following.

[6] An authentication method in which an authentication device connected to the authentication acquisition device via a network performs location authentication of a positioning target,

A step in which the authentication acquisition device receives a radio wave emitted from electronic position positioning means, performs positioning of the current position of the positioning target and determination of time, and obtains generated position data and time data. ,

Generating the data obtained by integrating the acquired position data and time data and the authentication encryption key received by the authentication device when issuing the authentication request, and transmitting the data to the authentication device;

An authentication device that receives the integrated data performs authentication of the position data and the time data using the authentication encryption key;

An authentication method, comprising: