JP4583746B2 - Personal authentication method and personal authentication system - Google Patents

Description

  The present invention relates to a personal authentication method for electronically confirming that a person is a legitimate person capable of performing the act, for example, when a person intends to perform an act such as credit card settlement or logging on to a server. And the system.

  There is known a personal authentication system using an IC card or a secure card held by a person. There is also known a personal authentication system that uses an ID (for example, a telephone number) of a mobile phone possessed by a person. However, these systems use confirmation of the use of the device (tool) as a substitute for personal authentication, and do not perform identity verification. If someone else impersonates you and uses the device, you can trick the system.

  There is also known a personal authentication system that allows a person to input a set of a user ID and a password unique to the person into the system and perform authentication using the set of the user ID and password. However, there is a possibility that another person steals the user ID and password set by intercepting the communication between the person and the system and misuses it.

  In order to improve the reliability of authentication, a personal authentication system using a one-time ID that can be used temporarily or once is also known. For example, there are those described in Patent Documents 1, 2, and 3. However, in both systems, in order to issue a one-time ID, a mobile phone ID or a set of user ID and password is input to the system, as in the conventional system described above. Therefore, if another person impersonates the user and uses a mobile phone or steals the user ID and password set by intercepting communication, the other person can obtain a one-time ID as well. There is a risk that it will be able to be abused.

  Further, as a more reliable personal authentication system, a system using a biometrics device that has been popular in recent years is known. However, since it is necessary to purchase expensive biometrics equipment, it is not suitable for personal authentication for actions that many people perform on a daily basis, such as credit settlement and system logon.

JP 2000-10927 A JP 2001-175599 A JP 2002-7355 A

  As mentioned above, conventional personal authentication systems are not satisfactory in terms of reliability or cost.

  Accordingly, an object of the present invention is to provide a personal authentication mechanism capable of verifying the identity by a low-cost and highly reliable method.

The personal authentication method according to the first aspect of the present invention comprises:
(1) storing the first authentication key of the user's first and second authentication keys in a first storage unit;
(2) storing the second authentication key of the user's first and second authentication keys in a second storage unit;
(3) managing the first and second storage units such that one of the first and second authentication keys cannot be used to directly acquire the other;
(4) The first authentication unit receives an input of the first authentication key from the user, and the first authentication key input and the first storage stored in the first storage unit Performing a first stage personal authentication by collating with an authentication key;
(5) If the first stage personal authentication is successful, issuing a one-time ID from the first authentication unit to the user;
(6) storing the one-time ID issued to the user from the first authentication unit to the second authentication unit in the second storage unit;
(7) The second authentication unit receives the input of the second authentication key and the one-time ID from the user, and inputs the input second authentication key and the one-time ID to the second Performing a second stage of personal authentication by collating with the second authentication key and the one-time ID stored in the storage unit;
(8) using the result of the personal authentication in the second stage in order to control predetermined processing. Typically, this personal authentication method can be implemented, for example, by executing a computer program on a computer, but it is also possible to implement all or part of this method using dedicated hardware.

  In one embodiment, in the step of using the result of personal authentication in the second stage, the opening / closing or locking / unlocking of the entrance door to a specific building or facility is performed according to the result of the personal authentication in the second stage. The result of the personal authentication in the second stage is notified to the entrance device for controlling. In addition, the entrance device includes an input device for a user to input the second authentication key and the one-time ID, and in the step of performing the personal authentication in the second stage, from the input device, The second authentication key and the one-time ID input to the input device are received, and the received second authentication key and the one-time ID are stored in the second storage unit. The personal authentication in the second stage is performed by collating with the authentication key and the one-time ID.

  In one embodiment, in the step of storing the first authentication key, device identification information unique to a communication device carried by the user is also stored in the first storage unit together with the first authentication key. Remember. In the step of performing personal authentication in the first stage, the first authentication key input to the communication device and the device identification information of the communication device are received from the communication device. The first-stage personal authentication is performed by comparing the authentication key and the device identification information with the first authentication key and the device identification information stored in the first storage unit.

  In one embodiment, the first storage unit stores only the first authentication key of the first and second authentication keys, does not store the second authentication key, and The second storage unit stores only the second authentication key of the first and second authentication keys, and does not store the first authentication key. And the step which manages the said 1st and 2nd memory | storage part so that the other cannot be acquired directly using one of said 1st and 2nd authentication key is further provided.

An authentication system according to another aspect of the present invention comprises:
(1) a first storage unit that stores the first authentication key of the user's first and second authentication keys;
(2) A second storage unit that stores the second authentication key of the first and second authentication keys of the user. Here, between the first and second authentication keys respectively stored in the first and second storage units, it is possible to directly acquire the other using one of them. There is no such association. In addition, this authentication system
(3) By receiving the input of the first authentication key from the user and collating the input first authentication key with the first authentication key stored in the first storage unit. If the first stage of personal authentication is successful and the first stage of personal authentication is successful, a one-time ID is issued to the user, and the one-time ID issued to the user is A first authentication unit stored in the storage unit;
(4) The second authentication unit receives the input of the second authentication key and the one-time ID from the user, and receives the input second authentication key and the one-time ID as the second The result of the second stage personal authentication is performed in order to perform a second stage personal authentication by controlling the second authentication key and the one-time ID stored in the storage unit and to control a predetermined process. A second authenticator using
Is provided.

  One embodiment receives the result of the second stage personal authentication from the second authentication unit, and opens and closes an entrance door to a specific building or facility according to the result of the second stage personal authentication. Or the entrance apparatus which controls locking / unlocking is further provided. The entrance device includes an input device for the user to input the second authentication key and the one-time ID. The second authentication unit receives the second authentication key and the one-time ID input to the input device from the input device, and receives the received second authentication key and the one-time ID, The personal authentication in the second stage is performed by collating with the second authentication key and the one-time ID stored in the second storage unit.

  In one embodiment, the first storage unit stores device identification information unique to the communication device carried by the user, together with the first authentication key. The first authentication unit receives the first authentication key input to the communication device and the device identification information of the communication device from the communication device, and receives the received first authentication key and The first stage personal authentication is performed by comparing the device identification information with the first authentication key and the device identification information stored in the first storage unit.

  In one embodiment, the first storage unit stores only the first authentication key of the first and second authentication keys, does not store the second authentication key, and stores the first authentication key. The second storage unit stores only the second authentication key of the first and second authentication keys, and does not store the first authentication key. In addition, a data management unit that separately manages the first and second storage units is provided so that one of the first and second authentication keys cannot be used to directly acquire the other.

A computer program according to another aspect of the present invention provides:
(1) storing the first authentication key of the user's first and second authentication keys in a first storage unit;
(2) storing the second authentication key of the user's first and second authentication keys in a second storage unit;
(3) The first authentication unit receives an input of the first authentication key from the user, and the input first authentication key and the first storage stored in the first storage unit. Performing a first stage personal authentication by collating with an authentication key;
(4) If the first stage of personal authentication is successful, issuing a one-time ID from the first authentication unit to the user;
(5) storing the one-time ID issued to the user from the first authentication unit to the second authentication unit in the second storage unit;
(6) The second authentication unit receives the input of the second authentication key and the one-time ID from the user, and inputs the input second authentication key and the one-time ID to the second Performing a second stage of personal authentication by collating with the second authentication key and the one-time ID stored in the storage unit;
A command code group for causing a computer to execute the personal authentication method having the above.

  Other objects and features of the present invention will become apparent from the following description.

  According to the present invention, identity verification can be performed by a low-cost and highly reliable method.

  FIG. 1 shows the basic configuration and operation of an embodiment of a personal authentication method according to the present invention.

  As shown in the lower part of FIG. 1, when a certain user 1 uses a specific service provided by a specific organization Y (for example, when using a credit payment service of a specific credit company, or When logging on to a server of a specific system operating company, etc.), the specific organization Y performs personal authentication for the user 1 and is pre-registered with the qualification that the user 1 can receive the specific service. Confirm that you are a specific person. The organization Y having the necessity of performing personal authentication of the user 1 in this way is referred to as “authentication company” in this specification. The authentication company Y has a computer system (hereinafter referred to as an “authentication system”) 6 for performing personal authentication of the user 1 (in addition, the specific service may be processed). This authentication system 6 is a terminal 5 that is used directly or indirectly when the user 1 wants to receive the specific service (for example, when the user 1 is going to shop for credit payment at a certain store) POS terminal of the store or the personal computer when the user 1 is logging on to a certain server from his / her personal computer.

  Further, as shown in the upper part of FIG. 1, an organization X for supporting personal authentication processing by the authentication company Y is provided separately from the authentication company Y. This organization X for authentication support is referred to as an “authentication support company” in this specification. The authentication support company X has a computer system 3 (hereinafter referred to as “authentication support system”) 3 for performing authentication support processing. The authentication support system 3 can also communicate with the authentication system 6.

  A user 1 has a mobile communication terminal 2. In this embodiment, the mobile communication terminal 2 of the user 1 is a mobile phone (however, this is only an example, and other types of mobile communication terminals such as PDAs, laptop personal computers or cars) Navigation devices etc. may be used). The mobile phone 2 of the user 1 and the authentication support system 3 can communicate.

  User 1 has two authentication keys unique to him, namely, a first key and a second key. In the following description, the first key is called a “member ID” and the second key is called a “password”. However, this is merely a name for making it easy to distinguish between the two keys. I do not care. Now, the user 1 manages his / her unique member ID and password secretly with respect to others (for example, stores only in his / her head).

  The member ID is stored not only in the user's 1 head but also in the database 4 of the authentication support system 3. That is, the user 1 and the authentication support system 3 (authentication support company X) share the member ID. The person who knows the member ID is only the authentication support system 3 (authentication support company X) other than the user 1.

  The password is stored not only in the head of the user 1 but also in the database 7 of the authentication system 6. That is, the user 1 and the authentication system 6 (authentication company Y) share the password. The person who knows the password is only the authentication system 6 (authentication support company Y) except for one user.

  Accordingly, the authentication support system 3 (authentication support company X) knows the member ID of the user 1 but does not know the password. On the other hand, the authentication system 6 (authentication company Y) knows the password but does not know the member ID. As described above, only one user knows both of the two authentication keys unique to the user 1. Member IDs and passwords are separated from each other by a separate system (organization) called authentication support system 3 (authentication support company X) and authentication support system 3 (authentication support company Y), except for one user. It is managed. The authentication support system 3 (authentication support company X) and the authentication system 6 (authentication company Y) separately manage the member ID and password separately, and one system (organization) is the other system (organization). I never tell you the key.

  As described above, since the two authentication keys unique to the user 1 are separated and managed individually and secretly, as will be described in detail later, the reliability, that is, the security of the personal authentication of the user 1 is improved. Then, the third key is used to associate the two authentication keys managed separately as described above. This third key is a key that can be used temporarily or once, and is called a “one-time ID” in this specification, and is issued from the authentication support system 3 at the request of the user 1. ing.

  Although only one company is shown in FIG. 1 as the authentication company Y, there are usually multiple companies in practice. Even in such a case, there may be only one authentication support company X (of course, there may be a plurality of companies, but this specification focuses only on personal authentication performed with the support of one authentication support company X). To explain)

  The procedure for personal authentication using the member ID, password and one-time ID will be described below. This procedure is roughly divided into two phases.

  The first phase is shown in the upper part of FIG. 1, and here, the identification number of the mobile phone of user 1 (here, the mobile phone number is used, but this is an example, and other types of mobile phone identifications) The authentication support system 3 performs preliminary first-stage personal authentication for the user 1 using the member ID and the member ID). If this preliminary authentication is successful, the authentication support system 3 issues a one-time ID. This one-time ID is notified to both the user 1 and the authentication system 6.

  That is, in the first phase, first, the user 1 makes a call from the mobile phone 2 to the authentication support system 3. The authentication support system 3 automatically responds to the incoming call, and collates the calling number (phone number of the mobile phone 2) with the telephone number list of the member (user who has the right to use the system) registered in the database 4. . As a result of the collation, if the calling number matches a registered member's telephone number, the authentication support system 3 displays the service menu (for example, voice guidance) prepared for the member as the mobile phone of the user 1. Send to 2. The user 1 first selects a desired service of a desired authentication company Y (for example, a credit settlement service of a desired credit company) using the numeric keypad (or voice recognition function) of the mobile phone 2 according to the service menu. Subsequently, the member ID is input and the member ID is sent to the authentication support system 3. The authentication support system 3 collates the received member ID with the member ID of the matched member registered in the database 4, and determines that the user 1 is the member if they match. If so, the authentication support system 3 issues a one-time ID, notifies the mobile phone 2 of the user 1 of this one-time ID, and the desired authentication company selected by the user 1 in the service menu. The Y authentication system 6 is also notified. Here, the one-time ID is a unique code that can be distinguished from any other one-time ID handled (or possibly handled) by the authentication support system 3 and the authentication system 6.

  The database 4 of the authentication support system 3 includes, as the data of each member, in addition to the mobile phone number and member ID described above, an ID (uniquely assigned to the member by the authentication system 6 to identify the member) Hereinafter, when the authentication support system 3 notifies the authentication system 6 of the one-time ID issued to the user 1, the user 1 (that is, the first step authentication) is registered. The management master ID of the matched member) is also notified to the authentication system 6 together. Accordingly, the authentication system 6 recognizes to which member the notified one-time ID is issued. The authentication system 6 stores the notified one-time ID in the database 7 as the one-time ID of the member who received the issued one-time ID. In the database 7 of the authentication system 6, a management master ID and a password are registered in advance for each of all members who can use the authentication system 6, and a one-time ID is issued as described above. Each time this is done, the one-time ID is also registered.

  The next second phase is shown in the lower part of FIG. 1, where the authentication system 6 uses the one-time ID issued to the user 1 and the password unique to the user 1. A second-stage personal authentication is performed on

  That is, in the second phase, first, the user 1 uses the appropriate terminal 5 to receive the above-mentioned desired service, and the user 1 receives the one-time ID and password of the user 1 from the terminal 5 as an authentication system of the authentication company Y. Send to 6. Here, the appropriate terminal 5 is, for example, a POS terminal of a retail store when the user 1 uses a credit payment service when shopping at a retail store, or the user 1 When logging on to a certain server from his / her personal computer, it may be that personal computer. The person who directly operates the terminal 5 does not necessarily have to be the user 1 itself, and may be another person such as a store clerk. Note that when the one-time ID and password of the user 1 are sent to the authentication system 6, usually, for example, to improve the reliability of the personal authentication process, such as the store ID of the retail store, or following the authentication process. Ancillary information necessary for performing service processing may be sent to the authentication system 6 together.

  Upon receiving the one-time ID and password of the user 1, the authentication system 6 converts the one-time ID and password of various members already stored in the database 7 into the received one-time ID and password set. Find a match. As a result, if the set matches the one-time ID and password of a certain member, the authentication system 6 determines that the user 1 is the member, and the result of the personal authentication is “success”. If the authentication result is successful, the desired service is subsequently provided to the user 1 (for example, credit settlement is performed or logon to the server is permitted).

  On the other hand, if the received one-time ID and password set does not match the one-time ID and password set of any member in the database 7 in the above process of the authentication system 6, the authentication result is “failure”. Thus, the desired service is not provided to the user 1.

  When the authentication result is “success”, the authentication system 6 gives a status meaning “used” to the one-time ID in the database 7 used in the authentication, and the one-time ID is “used”. To the authentication support system 3. Once used, the one-time ID is never used for personal authentication. If the authentication result is “failure”, the authentication system 6 does not give a “used” status to any one-time ID in the database 7 in principle. Further, when the one-time ID has an expiration date, even if the one-time ID is not used for personal authentication, the authentication system 6 will use the one in the database 7 when the expiration date has passed. A status meaning “expired” is assigned to the time ID, and the fact that the one-time ID has become “expired” is reported to the authentication support system 3. One-time IDs that have been “used” and one-time IDs that have become “expired” are not used again for personal authentication until the predetermined period has passed (for example, one or three years) In addition, even if the same one-time ID is used, it can be used after a period in which an illegal double-use problem does not substantially occur with the previous use. Therefore, basically, the one-time ID used for personal authentication is only the one-time ID that is “unused” and not “expired”. However, the one-time ID that has been “used” and the one-time ID that has become “expired” are used for the purpose of detecting unauthorized double use of the one-time ID.

  FIG. 2 shows an example of a procedure for the user 1 to register his / her authentication key and the like in the authentication support system and the authentication system.

  As shown in FIG. 2, first, in step (1), the user 1 uses his / her mobile phone 2 to call the authentication system 6 of the desired authentication company Y (or to send a written document, WWW service, etc.). Communicate in another appropriate way) and apply for membership. At the time of this application, the user 1 authenticates his / her telephone call number (phone number of the mobile phone 2) and password in addition to his / her normal membership registration items such as his / her address, name, date of birth and service he / she wants to use. 6 (in addition, if a call is made from the cellular phone 2, the calling number is usually automatically notified to the authentication system 6). The authentication system 6 assigns a unique management master ID to the user 1 in order to register the user 1 as a member if the application contents of the user 1 satisfy the necessary conditions for becoming a member. The telephone call number, password, and normal member registration items are registered in the database 7 as member data unique to the user 1.

  Subsequently, in step (2), the authentication system 6 includes only the registered management master ID and transmission number of the user 1 and the minimum information necessary for authentication support, for example, the name (that is, only the name) In addition, personal information other than the name, such as an address and a contact address, is not included for keeping confidential personal information), and the authentication support system 3 of the authentication support company X is notified. Here, the password of the user 1 is kept secret in the authentication system 6 and is not notified to the authentication support system 3.

  Thereafter, in step (3), the user 1 makes a call to the authentication support system 3 using his / her mobile phone 2 (or a call that has been made from the authentication support system 3 to the mobile phone 2 of the user 1). In response to this, the authentication company Y and the above normal member registration items are confirmed, and the caller ID (phone number of the mobile phone 2) and member ID are notified to the authentication support system 3 through the mobile phone 2 (note that When the user 1 makes a call from the mobile phone 2 to the authentication support system 3, the calling number is usually automatically notified to the authentication support system 3, while the authentication support system 3 calls the mobile phone 2. If you can confirm that the person who responded to the call is a single user, the caller ID will also be confirmed.) If the authentication support system 3 can confirm that the normal member registration items and the calling number are correct by telephone communication with the user 1, the authentication supporting system 3 sets the calling number and the member ID of the user 1 to register the user 1 as a member. The management master ID and the normal member registration items are registered in the database 4 as member data unique to the user 1. Here, the member ID of the user 1 is kept secret in the authentication support system 3 and is not notified to the authentication system 6.

  Below, some examples of application of this embodiment to specific uses will be described.

  FIG. 3 shows an application example for personal authentication of credit settlement as a first application example.

  Here, as shown in FIG. 3, the authentication company Y is a credit company used by the user 1, and the authentication system 6 is a computer system of the credit company.

  When the user 1 wants to pay by credit settlement when shopping at a certain retail store Z, the user 1 first calls the authentication support system 3 from his mobile phone 2 in step (1). Then, the authentication support system 3 recognizes which member is the member from the calling number of the mobile phone 2 and returns a service menu (voice guidance) for the member to the mobile phone 2. The user 1 operates the cellular phone 2 in accordance with the service menu to notify the authentication support system 3 of his member ID and selection of a service to be used (for example, selection of a credit settlement service of a desired credit company Y). The authentication support system 3 compares the member ID notified from the user 1 with the member ID of the member ascertained from the transmission number, and if the result matches, the user 1 is recognized as the member. If so, the authentication support system 3 issues a unique one-time ID to the member in step (2), and authenticates the mobile phone 2 of the user 1 and the credit company Y selected by the user 1. It transmits to the system (in the example shown in the figure, one authentication system 6-1 selected by the user 1 among the three authentication systems 6-1 to 6-3 using the same authentication support company X). At this time, the authentication support system 3 transmits the management master ID assigned to the member by the authentication system 6-1 to the authentication system 6-1 along with the one-time time ID. The authentication system 6-1 stores the received one-time ID in the database 7-1 as the one-time ID of the member corresponding to the received management master ID.

  After the user 1 receives the issued one-time ID to his / her mobile phone 2, in step (3), the user 1 inputs the one-time ID into the POS terminal 5 that processes the credit settlement of the retail store Z, for example, manually. And enter your password. The input one-time ID and password are transmitted from the POS terminal 5 to the authentication system 6-1 of the credit company Y designated by the user 1 in step (4).

  The authentication system 6-1 that has received the one-time ID and password, in step (5), sets the received one-time ID and password as a set of various member one-time IDs and passwords in the database 7-1. To match. As a result, if a match between a certain member's one-time ID and a set of passwords is obtained, the authentication system 6-1 identifies the user 1 as the member (authentication “success”). On the other hand, if a match between the one-time ID of any member and the set of passwords is not obtained, the authentication system 6-1 determines that the user 1 is not a member (authentication “failure”). When the authentication result is “success”, the authentication system 6-1 executes the credit settlement service process using the credit card information of the user 1 sent from the POS terminal 5. When the authentication result is “failure”, the authentication system 6-1 rejects the credit settlement service.

  In step (6), the authentication system 6-1 returns the authentication result (or the subsequent credit settlement service processing result) to the POS terminal 5. The authentication system 6-1 assigns a status of “used” to the one-time ID of the user 1 used here at the stage of performing the above-described personal authentication in the second stage, and the predetermined period has passed thereafter. Don't use it again for personal authentication until you do.

  FIG. 4 shows an application example to personal authentication for logging on to a certain server as a second application example of this embodiment.

  Here, as shown in FIG. 4, the authentication company Y is a system operating company that operates a server used by the user 1, and the authentication system 6 is the server.

  In FIG. 4, the procedure until the one-time ID is issued in steps (1) to (2) is basically the same as the procedure already described with reference to FIG. The difference is that the use service specified by the user 1 in the service menu is logon to the desired server 6, and the destination of the one-time ID is that server 6.

  When the one-time ID is issued, in step (3), the user 1 enters the one-time ID into the terminal 5 (for example, a personal computer owned by the user 1) for logging on to the server 6 by manual input, for example. And enter your password. The input one-time ID and password are transmitted to the server 6.

  Thereafter, the authentication process using the one-time ID and password in steps (4) to (5) performed in the server 6 is basically the same as the authentication process in steps (5) to (6) already described with reference to FIG. It is. The difference is that if the authentication result is successful, the credit card is not settled but the logon to the server 6 is permitted.

  FIG. 5 shows an application example to personal authentication when submitting certificates issued by a local government or the like as a third application example of this embodiment.

  Here, as shown in FIG. 5, the authentication company Y is a local government that issues certificates to the user 1, and the authentication system 6 is a document distribution system of the local government. Here, special measures are taken so that the user 1 does not have to disclose his / her member ID or password to the other party when submitting the certificate.

  In FIG. 5, the procedure until the one-time ID is issued in steps (1) to (2) is basically the same as the procedure already described with reference to FIG. The difference is that the use service specified by the user 1 in the service menu is a document delivery service of the desired local government, etc., and the one-time ID destination is the local government etc. Y document delivery system specified by the user 1 (Authentication system) 6.

  When the one-time ID is issued, in step (3), the user 1 inputs the one-time ID and his / her password into the document delivery system (authentication system) 6 of the local government, etc. Do.

  The document delivery system 6 performs personal authentication of the user 1 using the one-time ID and password from the user 1 in step (4). This authentication process is performed by the credit company authentication in step (5) of FIG. This is basically the same as the authentication processing by the system.

  If the result of the personal authentication is successful, in step (5), the document delivery system 6 prints out the requested certificate. At this time, the document delivery system 6 issues a document one-time ID, prints the document one-time ID on the certificate, and outputs it. The issued document one-time ID is unique to the certificate, is unique so that it can be distinguished from any other document one-time ID, and can be used temporarily or once. Certificates printed with this document one-time ID are handed to the user 1. The document delivery system 6 stores the issued document one-time ID in the database 7 as the document one-time ID of the user 1. In addition, the document delivery system 6 gives the status of “document one time ID issued” to the user 1 one time ID at the stage of issuing the document one time ID, but still gives the status of “used”. do not do. The one-time ID with the “Document One-Time ID Issued” status will not be used again for personal authentication for the document delivery in step (4), but if the “Used” status is not yet attached, It is used only once in the third stage of personal authentication in step (8) described later.

  Thereafter, in step (6), the user 1 sends the certificate to the appropriate user company Z (for example, if the certificate is to be submitted to the contracting company to conclude a contract, the contracting company Is user company Z). When submitting this document, the user 1 uses the terminal 5 of the user company Z in step (7) to give his / her one-time ID and the document one-time ID printed on the certificates, etc. Send to Y's document delivery system 6.

  Then, in step (8), the document delivery system 6 uses the set of the one-time ID and document one-time ID of the user 1 received from the terminal 5 as the one-time ID and document one-time ID of various members in the database 7. Match against a set of As a result, if a match between a one-time ID of a certain member and a set of document one-time ID is obtained, the document delivery system 6 determines that the authentication is “successful”, and if no match is obtained, the authentication “ It is determined as “failure”. Also, if the authentication result is “successful”, the document delivery system 6 assigns a “used” status to the set of the one-time ID and document one-time ID of the user 1 used there, and then again. Avoid using sets for personal authentication.

  In step (9), the document delivery system 6 returns the authentication result to the terminal 5 of the user company X. If the returned authentication result is “success”, it means that the local government Y has confirmed that the user 1 is indeed the person and that the certificates have been issued to the person. This means that the user company Z can receive the certificates from the user 1 with peace of mind.

  Further, the user 1 is safe because his secret member ID and password are not known to the user company Z.

  FIG. 6 shows an application example to personal authentication for performing credit settlement in shopping at a network shop (website) on the Internet as a fourth application example of this embodiment.

  Here, as shown in FIG. 6, the authentication company Y is a credit company used by the user 1, and the authentication system 6 is an authentication system of the credit company. Further, here, special measures are taken to prevent the user 1 from disclosing his / her credit card information to the network shop.

  In FIG. 6, the procedure until the one-time ID is issued in steps (1) to (2) is basically the same as the procedure already described with reference to FIG.

  When the one-time ID is issued, the user 1 uses his / her mobile phone 2 to call the authentication system 6-1 of the credit company Y designated by the user 1 in step (3). 6-1 sends his one-time ID and password, and the store number (shop ID) of the net shop 9 to be used.

  In step (4), the authentication system 6-1 uses the one-time ID and password from the user 1 to perform personal authentication of the user 1 in the same procedure as described in step (5) in FIG. If the result of the personal authentication is successful, the authentication system 6-1 issues a credit card one-time ID and transmits the credit card one-time ID to the mobile phone 2 of the user 1 in step (5). . The issued credit card one-time ID is unique to the specific credit card used by the user 1, is unique so that it can be distinguished from any other credit card one-time ID, and can be used temporarily or once. is there. The authentication system 6-1 uses the issued credit card one-time ID and the store number (shop ID) from the user 1 as the credit card one-time ID and store number (shop ID) corresponding to the user 1 in the database 7-1. To store. Further, the authentication system 6-1 gives the status of “credit card one-time ID issued” to the one-time ID of the user 1 at the stage of issuing the credit card one-time ID, but the status of “used”. Does not grant yet. A one-time ID with a "credit card one-time ID issued" status will never be used for personal authentication to issue a credit card one-time ID in step (4), but the "used" status is still If not, it is used only once in the third stage of personal authentication in step (8) described later.

  After that, in step (6), the user 1 connects to the network shop 9 on the Internet using the terminal 5 (for example, the personal computer possessed by the user 1) having the Internet connection function (of course, more From the previous stage, the connection with the network shop 9 may be established), and the terminal 5 sends its one-time ID and credit card one-time ID to the network shop 9 by manual input, for example. To do. In step (7), the network shop 9 sends the one-time ID and credit card one-time ID from the user 1 and the shop number (shop ID) of the shop to the authentication system 6-1.

  In step (8), the authentication system 6-1 uses the set of the user 1 one-time ID, the credit card one-time ID, and the store number (shop ID) received from the network shop 9 as one of various members in the database 7. Check against a set of time ID, credit card one-time ID, and store number (shop ID). As a result, if a match between a certain member's one-time ID, document one-time ID, and store number (shop ID) set is obtained, the authentication system 6-1 determines that the authentication is “successful”. If is not obtained, it is determined that the authentication is “failure”. When the authentication result is “success”, the authentication system 6-1 uses the credit card information of the user 1 (member matched by the above collation) registered in the database 7-1 in advance to process the credit settlement service. Execute. When the authentication result is “failure”, the authentication system 6-1 rejects the credit settlement service. Further, when the authentication result is “successful”, the authentication system 6-1 gives a status of “used” to the set of the one-time ID and document one-time ID of the user 1 used there, and thereafter Never use the set for personal authentication again.

  In step (9), the authentication system 6-1 returns the authentication result (or the result of the credit settlement service process) to the network shop 9.

  In this application example, the user 1 does not need to put out his secret member ID, password, and credit card information on the Internet, and the network shop 9 does not know such information. it can.

  FIG. 7 shows, as a fifth application example of this embodiment, a modification in which an encryption process is added to the application example to log on to the server shown in FIG. In FIG. 7, the underlined data is encrypted data.

  Regarding the modified example of FIG. 7, differences from the applied example of FIG. 4 will be mainly described.

  The mobile phone 2 of the user 1 has an encryption / decryption function. In step (2), the authentication support system 3 encrypts the one-time ID using the member ID (first key) from the user 1 and sends it to the mobile phone 2 of the user 1. When the user 1 receives the encrypted one-time ID to the mobile phone 2, the user 1 inputs his / her member ID (first key) into the mobile phone 2 and uses the decryption function of the mobile phone 2 to use the one-time ID. Is decrypted with the member ID. Next, in step (3), the user 1 inputs his / her password (second key) to the mobile phone 2 and uses the encryption function of the mobile phone 2 to enter the one-time ID with the password (second key). Encrypt.

  In step (4), the user 1 inputs the encrypted one-time ID into the terminal 5 by manual input, for example, and sends it to the server 6. In step (5), the server 6 decrypts the encrypted one-time ID from the user 1 using the passwords of various members in the database 7, respectively, and the decrypted one-time ID, Check against the one-time ID of the member corresponding to each password. As a result, if it matches the one-time ID of a certain member, the server 6 determines that the authentication is “successful” and allows the logon, and if it does not match any one-time ID of any member, determines that the authentication is “failed”. And refuse to log on.

  In this way, at each stage of the authentication process, the one-time ID is encrypted / decrypted using the member ID and password, respectively, thereby further improving the security against theft of the one-time ID due to communication interception. . From the viewpoint of safety, the user 1 may enter the member ID, password, and one-time ID manually (that is, the user 1 stores it in the head and inputs it to the system). desirable.

  The modification to which the encryption / decryption process as shown in FIG. 7 is added can be applied not only to the application example of FIG. 4 but also to the application examples of FIG. 3, FIG. 5 and FIG.

  FIG. 8 shows, as a sixth application example of this embodiment, a modification in which a photo composition process is added to the application example to the credit settlement shown in FIG.

  With respect to the modified example of FIG. 8, differences from the applied example of FIG. 3 will be mainly described.

  In the database 4 of the authentication support system 3, face photo image data of each member is registered in advance. In step (2), the authentication support system 3 sets the image one-time ID (for example, the one-time ID to the user 1's face photo image as shown in the figure). Image data in which a character string image of ID is superimposed, or image data embedded in a face photograph image so that the one-time ID cannot be seen by a method such as a digital watermark), and this image one-time ID is issued to the user 1 To the mobile phone 2 and the authentication system 6-1 of the credit company Y designated by the user. The mobile phone 2 can display the received image one-time ID on the display panel, and the user 1 can confirm his / her face photograph and the one-time ID by viewing it. Even if the mobile phone 2 separates and extracts the face photo image and the one-time ID of the user 1 from the image one-time ID, the face-photo image and the one-time ID are separately displayed on the display. Good.

  In step (3), the user 1 displays the image one-time ID (or only the face photo image) on the display panel of the mobile phone 2 and presents it to the store clerk of the retail store, and also the POS terminal 5 of the store. In addition, the user's one-time ID and password are input manually, for example, and the one-time ID and password are sent to the credit company Y authentication system 6-1. The subsequent authentication processing by the authentication system 6-1 is the same as in the application example of FIG.

  In this modification, since the face photograph image of the user 1 issued by the authentication support company X can also be used for personal authentication, the reliability is further improved. Since the facial photograph image and the one-time ID are synthesized by the authentication support company X every time the one-time ID is issued, it is difficult to forge it.

  The use of such a face photograph image is possible not only in the application example of FIG. 3 but also in the application examples of FIGS. Further, the use of such a face photograph image and the encryption / decryption as shown in FIG. 7 can be used in combination.

  In the following, the high reliability of this embodiment will be verified by giving several cases.

  FIG. 9 shows a case where a third party obtains a user's mobile phone and impersonates the user.

  As shown in FIG. 9, it is assumed that the third party 11 has picked up the mobile phone 2 and connected it to the authentication support system 3 in step (1) using this. At this time, since the third party 11 cannot input the member ID of the owner of the mobile phone 2, the first stage authentication in the authentication support system 3 fails and the one-time ID cannot be issued. . Even if the third party 11 knows the member ID in some way and is issued a one-time ID, the third party 11 inputs the owner's password of the mobile phone 2 in step (3). Therefore, the authentication in the authentication system 6-1 fails in the second stage authentication.

  Therefore, in such a case of impersonation, authentication cannot succeed unless the third party 11 knows both the member ID and the password of the principal. Since the member ID and password are managed separately by the authentication support company X and the credit company (authentication company) Y, it is possible for a third party to steal them to know that one organization and the member ID as before. It is much more difficult than managing a set of passwords. Therefore, the reliability of authentication is high.

  FIG. 10 shows a case where the store illegally charges the credit company using the user's password.

  As shown in FIG. 10, the store clerk reused the password that the user 1 has entered in the POS terminal 5 in the past, and requested payment to the authentication system 6-1 of the credit company Y in step (4). And However, since the store clerk cannot input the one-time ID issued to the user 1, the authentication in the second stage by the authentication system 6-1 in step (5) fails and the payment is rejected. Further, even if the store clerk reuses the one-time ID that the user 1 has input the POS terminal 5 in the past, the authentication system 6-1 uses the reuse one-time ID and the database 7-1. By collating with the “used” one-time ID, double-use of the one-time ID will be detected immediately (or the user can confirm the use from the “used” one-time ID. Is possible). Therefore, fraudulent charges do not succeed.

  FIG. 11 shows an authentication key stealing case by a third party's communication interception.

  As shown in FIG. 11, the third party 12 intercepts the communication between the user 1 and the authentication support system 3 in steps (1) to (2) and steals the one-time ID of the user 1 (or (The one-time ID was obtained in some way after stealing the member ID). However, even if the third party 12 uses the one-time ID prior to the user 1, the third-stage authentication in step (5) fails because the password of the user 1 is not known.

  FIG. 12 shows another case of communication interception by a third party.

  As shown in FIG. 12, it is assumed that the third party 12 intercepts the communication between the POS terminal 5 and the authentication system 6 in step (4) and steals the user 1 one-time ID and password. However, even if the third party 12 uses the one-time ID and password, since the one-time ID is used by the user 1 before that, the same one-time ID is used twice. The second step authentication of 5) fails.

  The above is a general description of this embodiment. Next, details of this embodiment will be described.

  FIG. 13 shows the configuration of the database 4 included in the authentication support system 3 of the authentication support company X. FIG. 14 shows the configuration of the database 7 included in the authentication system 6 of the authentication company Y.

  As shown in FIG. 13, the database 4 of the authentication support system 3 has a management master table 21, in which each member has a management ID (ID of each member used in the authentication support system 3), mobile phone A telephone number (calling number), first key (member ID), and emergency first key (emergency member ID) are registered. Here, the emergency first key (emergency member ID) means that, as will be described later with reference to FIG. 23, the member discloses his / her member ID (first key) by a criminal act such as intimidation. This is a dummy member ID prepared for disclosure to others when forced.

  There are one or more authentication company tables 22 and 23 in which information related to the authentication company with which the member is registered is associated with the data of each member in the management master table 21. In the illustrated example, one registered company table 22 stores data relating to one or more system operating companies used by the member, and the other registered company table 22 uses 1 registered by the member. Alternatively, data relating to two or more credit companies is registered, but this is merely an example. In each authentication company table 22, 23, for each authentication company, an identification code of the authentication company and a management master ID assigned to the member by the authentication company are registered. Further, there are code tables 24 and 25 that record the bibliographic items such as the identification code of the authentication company and the company name and address in association with the data of each authentication company in each authentication company table 22 and 23.

  Further, there is a log table 26 for each member associated with each member's data in the management master table 21. The log table 26 of each member includes the management ID of the member and an access log to the authentication support system 3 (for example, access start time, input first key (member ID), input required time, authentication company, management master ID , Issued one-time ID, issuance time, issuance time to the certification company, status at the end of access, etc.) are recorded.

  As shown in FIG. 14, the database 7 of the authentication system 6 has an authentication management master table 31, in which each member has its own unique management ID (that is uniquely used only within the authentication system). Member ID), management master ID, mobile phone number (calling number), second key (password), etc. are registered.

  There is a log table 32 for each member associated with each member's data in the authentication management master table 31. Each member's log table 32 includes the member's own management ID, management master ID, and access log to the authentication system 6 (for example, received one-time ID, reception time, received credit one-time ID, or document one-time ID). ID, access time, received second key (password), access end status, etc.) are recorded.

  Further, each member's data in the authentication management master table 31 is stored in the member's data 33 in another database held by the authentication company (for example, for providing a specific service such as credit payment to the member). Necessary address, name, contact information, settlement bank information, credit card number, etc.)

  FIG. 15 shows an example of a service menu provided from the authentication support system 3 to the mobile phone 2 of the user 1.

  This service menu has, for example, a hierarchical structure as shown in FIG. 15 and is provided by, for example, a voice guidance method. However, this is merely an example, and other methods (for example, the mobile phone 2) For example, a method of displaying on a display panel).

  As shown in FIG. 15, this service menu includes options for selecting various application examples already described with reference to FIGS. 3 to 6 (for example, a system operating company that performs logon authentication, and credit settlement authentication). There are options to choose a credit company, a document one-time ID issuance application, a credit one-time ID issuance application, etc.). In addition, the service menu includes options for selecting various useful functions as described later (for example, service stop request, my page function, log acquisition, authentication key related utilities, pick-up mobile phone owner contact, Etc.).

  16 and 17 show the flow of specific operations of each part in the application example to the credit settlement described with reference to FIG. 3, and FIG. 16 shows the flow of the first step authentication using the authentication support system 3. FIG. 17 shows the flow of the second stage authentication using the authentication system 6.

  16 and 17, the solid line blocks indicate the operation on the user 1 side, and the broken line blocks indicate the operation on the system side of the authentication support system 3 and the authentication system 6 (also in FIGS. 18 to 29). The same).

  As shown in FIG. 16, when the user 1 makes a call from the mobile phone 2 to the authentication support system 3 (step S1), the authentication support system 3 collates the transmission number with the registered member's transmission number (S2). If a match is obtained, a service menu prepared for the matched member is sent to the mobile phone 2 by voice guidance (S3). This voice guidance presents options for the service category (for example, “logon authentication”, “credit authentication”, “others”, etc.) at the highest level in the overall menu shown in FIG. The user 1 selects “credit authentication” from the options (S6). Then, the authentication support system 3 provides a credit company option, which is a second-tier menu of “credit authentication”, by voice guidance (S5), and the user 1 selects a desired credit company (S6).

  Next, the authentication support system 3 requests the user 1 to input a member ID (S7), and the user 1 inputs the member ID into the mobile phone 2 and sends it to the authentication support system 3. The authentication support system 3 collates the member ID input by the user 1 with the registered member ID of the matched member (S9), and if a match is obtained, issues a one-time ID to the user 1's mobile phone. 2 (S11), and the one-time ID and the management master ID of the user 1 (the matched member) are also sent to the authentication system 6 of the credit company selected by the user 1 in the service menu (S12). The issued one-time ID is displayed on the display panel of the mobile phone 2 of the user 1.

  If no match is obtained in step S2, the authentication support system 3 performs predetermined exception processing (for example, callback) (S14). If no match is obtained in step S9, the authentication support system 3 performs predetermined error processing (for example, re-matching by inputting the member ID again) (S15).

  As shown in FIG. 17, when a user who has issued a one-time ID pays for shopping at a store by credit settlement (S21), his / her one-time ID and password are given to the POS terminal 5 of the store. Then, the POS terminal 5 sends the input one-time ID and password to the credit company authentication system 6 together with the store ID (store number) of the store (S23). The authentication system 6 compares the set of the one-time ID and password of the user 1 received from the POS terminal 5 with the set of the registered one-time ID and password of the registered member (S24), and if a match is obtained, the authentication result “ “Success” is returned to the POS terminal 5 and the credit settlement process is started (or the credit settlement process is performed and the result is returned to the POS terminal 5) (S25).

  If no match is obtained in step S24, the authentication system 6 performs predetermined error processing (for example, prompting the user 1 to reacquire a one-time ID) (S27).

  18 and 19 show the flow of specific operation of each part in the application example to the server logon described with reference to FIG. 4, and FIG. 18 shows the flow of the first step authentication using the authentication support system 3. FIG. 19 shows the flow of the second stage authentication using the authentication system (server) 6.

  In the flow of FIGS. 18 and 19, parts different from the flow of FIGS. 16 and 17 described above are mainly described as follows.

  As shown in FIG. 18, the user 1 selects “logon authentication” as a service category and selects a desired system operating company using the service menu provided from the authentication support system 3 (S34). Receive issuance of one-time ID (S36-S38). The one-time ID and the management master ID of the user 1 are notified to the server 6 (S34).

  As shown in FIG. 19, when the user 1 inputs a one-time ID and password to the terminal (S52), the terminal 5 sends the one-time ID and password together with the terminal ID of the terminal 5 to the server 6, and the server 6 First, the terminal ID is checked against the registered terminal ID (S53), and if a match is obtained, the one-time ID and password set from the terminal 5 is checked against the registered member's one-time ID and password set. If a match is obtained (S54), the authentication result is determined to be “successful” and logon is permitted (S55).

  20 to 22 show the flow of specific operation of each part in the application example to the issuance of certificates from the local government etc. described with reference to FIG. 5. FIG. 20 shows the flow of the operation using the authentication support system 3. FIG. 21 shows the flow of the second step authentication using the document delivery system (authentication system) 6, and FIG. 22 shows the flow of the third step authentication using the document delivery system (authentication system) 6. Each is shown.

  In the flow of FIGS. 20 to 22, parts different from the flow of FIGS. 16 and 17 described above are mainly described as follows.

  As shown in FIG. 20, the user 1 uses the service menu provided by the authentication support system 3 to select “others” “issue local government documents” as the service category (S64, S66). Issuing a time ID (S67-S70). The one-time ID and the management master ID of the user 1 are notified to the document delivery system 6 such as a local government (S71).

  As shown in FIG. 21, the user 1 who has issued the one-time ID submits a document issuance application to the local government (S81). At that time, the local government is informed of his / her one-time ID and password (S82). Enter the one-time ID and password into the document delivery system 6 (S83) (or instead of S82 to S83, the user 1 himself / herself enters the one-time ID and password into the document delivery system 6) input). The document delivery system 6 compares the one-time ID and password with the registered member's one-time ID and password set (S84), and if a match is obtained, generates a document one-time ID (S85). The certificate printed with the one-time ID is printed out (S86). User 1 receives the certificate (S87).

  As shown in FIG. 22, the user 1 submits the certificates to a predetermined user company (S91, S92), and teaches his / her one-time ID to the user company (S93). The one-time ID of the user 1 and the document one-time ID printed on the submitted document are input to the terminal 5 of the company and transmitted to the local government or the like to the document delivery system 6 (S94). The document delivery system 6 collates the set of the one-time ID of the user 1 received from the terminal 5 and the document one-time ID of the submitted document with the set of the registered one-time ID of the registered member and the document one-time ID ( If a match is obtained, an authentication result “success” is returned to the terminal 5 of the user company (S96).

  FIG. 23 to FIG. 25 show the flow of specific operation of each part in the application example to the credit settlement in the network shop described with reference to FIG. 6. FIG. 23 shows the first flow using the authentication support system 3. FIG. 24 shows a flow of the second step authentication using the credit company authentication system 6, and FIG. 25 shows a flow of the third step authentication using the credit company authentication system 6.

  In the flow of FIG. 23 to FIG. 25, parts different from the flow of FIG. 16 and FIG. 17 described above are mainly described as follows.

  As shown in FIG. 23, the user 1 selects “electronic commerce” of “others” as the service category using the service menu provided from the authentication support system 3 (S104, S106), and the one-time ID. Is issued (S107 to S110).

  As shown in FIG. 24, the user 1 who has been issued a one-time ID accesses the credit company authentication system 6 from his / her mobile phone 2 (S121). The authentication system 6 compares the transmission number of the user 1 with the registered member's transmission number (S122), and if a match is obtained, the service menu prepared for the matched member is transmitted to the mobile phone 2 by voice guidance. Send (S123). This voice guidance presents options for the user to select the type of transaction that he / she wants to use for credit settlement (for example, to select electronic commerce or other various commercial transactions). The user 1 selects “electronic transaction” from the options (S124). Then, the authentication system 6 provides various network shop options that can be used for credit settlement by voice guidance (S125), and the user 1 selects a desired network shop (S126).

  Next, the authentication system 6 requests the user 1 to input a one-time ID and password (S127), and the user 1 authenticates by inputting the one-time ID, password, and network shop store number into the mobile phone 2. The data is sent to the system 6 (S128). The authentication system 6 compares the one-time ID and password set entered by the user 1 with the registered member's one-time ID and password set (S129), and if a match is obtained, the credit one-time ID is obtained. It is issued and sent to the mobile phone 2 of the user 1 (S130). The issued credit one-time ID is displayed on the display panel of the mobile phone 2 of the user 1.

  As shown in FIG. 25, when the user 1 proceeds to the online payment procedure after shopping on the network shop 9 (S141), his / her one-time ID and credit one-time ID are displayed on the online payment web page. Input (or send separately by e-mail) (S142). The network shop 9 receives the one-time ID and credit one-time ID (S143), and sends the one-time ID and credit one-time ID to the credit company authentication system 6 together with the shop number (shop ID) of the shop. Transmit (S94). The authentication system 6 collates the set of the one-time ID, the credit one-time ID, and the store number received from the network shop 9 with the set of the registered one-time ID, credit one-time ID, and store number (S95). If a match is obtained, the authentication result “success” is reported to the network shop 9 and the credit settlement process is started (or the processing result is reported to the network shop 9 after the credit settlement process is performed) (S146). ).

  FIG. 26 shows the flow of emergency contact and dummy authentication processing using the emergency member ID.

  This emergency contact and dummy authentication processing is effective as a countermeasure when the user 1 is forced to disclose an authentication key or to pay a credit card by criminal acts such as depression.

  In the flow of FIG. 26, the following description will be mainly made of differences from the flow of FIGS. 16 and 17 described above.

  As shown in FIG. 26, when the user 1 receives a request for input of a member ID from the authentication support system 3 (S157), the emergency member ID prepared in advance separately from the true member ID is stored in the mobile phone 2. The input is sent to the seal authentication support system 3 (S158). In the authentication support system 3, when the emergency member ID is received, the result of the member ID collation in step S159 does not match, so the processing proceeds to error processing in step S165. In this error processing, the authentication support system 3 collates the emergency member ID received from the user 1 with the emergency member ID of the registered member (S166). As well as issuing a one-time ID and proceeding to step S167, reporting the information of user 1 to the police, security company, etc. and requesting a response, and all credit companies available to user 1 Request credit stop processing. If no match is obtained in step S169, the authentication support system 3 disconnects the communication requested to the user 1 to perform communication again (S169).

  Since the user 1 can receive the one-time ID, the procedure for credit settlement is performed using the one-time ID in the same manner as described with reference to FIG. 17 (S171). At that time, the authentication system 6 of the credit company and the POS terminal of the store seem to behave as if credit payment is normally performed for outsiders such as the user 1, while the store clerk, police and security A report is sent to related parties such as companies so that appropriate crime prevention measures can be taken (S172).

  By using the emergency member ID in this way, the process for preventing crime is performed in the background while seemingly succeeding in the authentication process. Thus, while ensuring the safety of the user 1, Crime can be effectively stopped.

  FIG. 27 shows a flow of processing for stopping a service in response to a request from the user 1.

  In the flow of FIG. 27, the following description will be mainly made of differences from the flow of FIGS. 16 and 17 described above.

  As shown in FIG. 27, the user 1 selects “all service stop”, “logon service” as the stop type of “other service stop service” from the service menu (see FIG. 15) from the authentication support system 3. After selecting “stop only” or “stop credit service only” (S184, S186), the member ID is input (S188). The authentication support system 3 performs all service stop processing (S190 to S194) or only logon service stop processing (step S190 to S194) according to the stop type selected by the user 1 if a match is obtained as a result of the member ID collation in step S189. S195 to S198) or a credit service only stop process (S199 to S202). In any stop processing, a service stop request is sent to all authentication companies (system operating companies, credit companies, etc.) that provide services to be stopped together with the management master ID of user 1 in each company (S191, S197 or Then, a message to the effect that the service is stopped is entered for the stopped service in the service menu for user 1 (S201).

  FIG. 28 shows the process flow of the My Page function.

  The My Page function is a function that allows the user 1 to edit the order of arrangement of service menu options for the user 1.

  In the flow of FIG. 28, parts different from the flow of FIGS. 16 and 17 described above will be mainly described as follows.

  As shown in FIG. 28, the user 1 selects “My Page Function” of “Others” from the service menu (see FIG. 15) from the authentication support system 3 (S215, S217), and then the member ID Is input (S219). As a result of the member ID collation in step S220, if the authentication is obtained, the authentication support system 3 can perform more detailed editing functions of the My Page function, such as “change category order”, “change company name order”, “announcement”. "ON / OFF", "End", etc. are provided to the user 1 by voice guidance, and the user selects a desired editing function (S221). The authentication support system 3 performs processing of the editing function selected by the user, that is, processing of changing the arrangement order of service categories (S223 to S225), processing of changing the arrangement order of company names (S226 to S228), or Processing for switching ON / OFF of voice announcement (voice guidance) (S229 to S231) is executed. In any editing process, the user 1 can instruct change contents as desired (S224, S227 or S230). This change is reflected in the service menu provided at the next access.

  FIG. 29 shows a flow of processing for acquiring an access log to a website such as a network shop.

  In the flow of FIG. 29, the following description will be mainly given of portions different from the flow of FIGS. 16 and 17 described above.

  As shown in FIG. 29, the user 1 selects “log acquisition” of “other” from the service menu (see FIG. 15) from the authentication support system 3 (S244, S246), and then enters the member ID. Enter (S248). As a result of the member ID collation in step S249, the authentication support system 3 selects the type of log type to be acquired, such as “I-mode selection”, “Web selection”, “end”, etc., if a match is obtained. The information is provided to the user 1 by voice guidance, and the user selects a desired log type (S250). The authentication support system 3 acquires a log of the type selected by the user 1 and outputs it to the mobile phone of the user 1, that is, a process of acquiring and outputting an I-mode access log (S252 to S254), Alternatively, processing (S255 to S257) for obtaining and outputting an access log by a normal web browser is executed.

  FIG. 30 shows the flow of authentication key change processing.

  In the flow of FIG. 30, parts different from the flow of FIGS. 16 and 17 described above will be mainly described as follows.

  As shown in FIG. 30, the user 1 selects “key change application” of “other” from the service menu (see FIG. 15) from the authentication support system 3 (S264, S266), and then the member ID Is input (S268). The authentication support system 3 requests the user to input the changed member ID (first key) if a match is obtained as a result of the member ID verification in step S269 (S270, S272), and the user changes the changed ID. Enter the member ID (S271, S273). Then, the authentication support system 3 changes the registered content of the member ID of the user 1 in the database 4 to the changed member ID input by the user (S275). When the user 1 has applied for a password (second key) change, the authentication support system 3 notifies the authentication system 6 that the application has been made. Although not shown, the password changing process is performed by communication between the user 1 and the authentication system 6, and the authentication support system 3 is not involved there.

  FIG. 31 shows the flow of authentication key confirmation processing.

  In the flow of FIG. 31, parts different from the flow of FIGS. 16 and 17 described above will be mainly described as follows.

  As shown in FIG. 31, the user 1 selects “key confirmation application” of “others” from the service menu (see FIG. 15) from the authentication support system 3 (S284, S286). Then, since the authentication support company X does not know the address and contact information of the user 1, the member ID (first key) of the user 1 is used to notify the user of the authentication key from the authentication company Y such as a credit company that knows the address. ) Is printed, and the written document is put in a sealed letter and sent to the certification company Y (S287). The authentication company Y sets the sealed letter and a document on which the password of the user 1 is printed, and mails it to the user 1 (S288).

  FIG. 32 shows the flow of processing for confirming the owner of a picked-up mobile phone.

  In the flow of FIG. 32, the following will mainly describe the portions different from the flow of FIGS. 16 and 17 described above.

  As shown in FIG. 32, the person who has picked up the mobile phone 2 calls the authentication support system 3 from the mobile phone 2 (S301), and from the service menu (see FIG. 15) from the authentication support system 3, In “Others”, “Obtain the mobile phone owner” is selected (S304, S306). Since the authentication support system 3 does not know the address or contact information of the user 1, the authentication support system 3 such as a credit company that knows the user 1 informs that there has been an application for a mobile phone (S 307) The received authentication company Y performs processing of receiving from the finder of the mobile phone 2 and delivery to the user 1 (S308).

  FIG. 33 shows an application example to personal authentication for controlling the opening / closing or locking / unlocking of an entrance door to a specific building or facility as still another application example.

  Here, as shown in FIG. 33, the authentication system 6 is an entrance management server that performs personal authentication for entrance control. An entrance device 51 communicatively connected to the entrance management server 6 is coupled to an entrance door 55 to a specific building or facility. The entrance device 51 controls the opening / closing or locking / unlocking of the entrance door 55 according to the personal authentication result from the authentication system 6. The entrance device 51 includes an input device 53 used by the user 1 for inputting the second authentication key and the one-time ID, near the entrance door 55. The entrance device 51 normally keeps the entrance door 55 closed and locked.

  The user 1 obtains a one-time ID by successfully performing the first-stage authentication in the same manner as in some application examples already described. Then, the user 1 inputs the password (second authentication key) stored therein and the one-time ID into the input device 53 near the entrance door 55. The input method to the input device 53 may be a manual input method using a numeric keypad or the like that the input device 53 has, or in particular, a one-time ID is received from the authentication support system 3 and stored. An automatic input method of inputting from the mobile terminal 2 through a wired or wireless (for example, infrared communication) communication interface may be used. The password (second authentication key) and the one-time ID input to the input device 53 and the terminal ID unique to the entrance device 51 are sent to the entrance management server 6. The entrance management server 6 stores the set of the received password (second authentication key), one-time ID and terminal ID in the database 7 in advance (second authentication key), one-time ID and terminal ID. The second stage authentication is performed in the same manner as in some of the application examples already described, and the result of the second stage authentication is notified to the entrance device 51. The entrance device 51 opens or unlocks the entrance door 55 when the result of the second stage authentication is successful.

  In some of the embodiments described above, the user's member ID and password are stored separately in different systems operated by different organizations, that is, the authentication support system 3 and the authentication system 6. However, the member ID or password that I remember is kept secret from the other system. As described above, very high security can be obtained by this. However, using different systems operated by different organizations is not always advantageous in terms of cost and ease of operation. Therefore, instead of such a configuration, a configuration of an authentication server as illustrated in FIG. 34 or FIG. 35 may be employed.

  In the configuration of the authentication server illustrated in FIG. 34, the same one organization (for example, one company) 60 operates the authentication support system 3 and the authentication system 6. The authentication support system 3 and the authentication system 6 may be realized by different computer machines or may be realized on the same computer machine. However, the authentication support system 3 and the authentication system 6 manage the databases 4 and 7 separately and independently, respectively, in the same manner as in the embodiment described above. For example, the authentication support system 3 and the authentication system 6 do not share the same database management system (DBMS), but have separate independent DBMSs, thereby managing the databases 4 and 7. The authentication support system 3 cannot communicate with the DBMS of the authentication system 6, or communication for retrieving the user's password is rejected by the DBMS even though it can communicate with the DBMS. Therefore, the user's password cannot be grasped. Further, the authentication system 6 cannot communicate with the DBMS of the authentication support system 3, or communication for searching for the member ID of the user is rejected by the DBMS even though it can communicate with the DBMS. Therefore, the user's member ID cannot be grasped. The authentication support system 3 and the authentication system 6 keep the member ID or password in the respective databases 4 and 7 secret from the other system. In other words, the association between the databases 4 and 7 is such that a member ID of a certain user in the database 4 and a password of the same user in the database 7 can be directly searched or calculated from one of them. Does not exist. Therefore, it is practically difficult for a third party to access the authentication system 6 using the member ID in the authentication support system 3 and obtain the password therein, or vice versa. . Therefore, practically sufficiently high security is ensured.

  In the configuration of the authentication server illustrated in FIG. 35, a single integrated authentication system 71 having the functions of both the authentication support system 3 and the authentication system 6 described above has a database (for example, a table) 4 storing member IDs. And a database (for example, a table) 7 storing passwords. However, there is an association between the databases 4 and 7 that makes it possible to directly search for or determine one member's member ID in the database 4 and one of the passwords of the same user in the database 7. do not do. In short, the user's member ID and password are separately managed in the integrated authentication system 71 so that one cannot be directly searched or determined from the other. For example, as shown in the figure, separate independent DBMSs 75 and 79 manage the databases 4 and 7 separately, and the member IDs or passwords managed by the DBMSs 75 and 79 are notified from one DBMS to the other DBMS. There is no function to do. The first-stage authentication unit 73 that performs the first-stage authentication in the integrated authentication system 71 communicates with the DBMS 75, but cannot communicate with the DBMS 79, or can retrieve the user password even though it can communicate with the DBMS 79. Communication for this purpose is rejected by the DBMS 79, and thus the user's password cannot be grasped. Further, the second stage authentication unit 77 that performs the second stage authentication communicates with the DBMS 79, but cannot communicate with the DBMS 77, or communication for searching for the member ID of the user is possible even though the communication with the DBMS 77 is possible. It is rejected by the DBMS 77, so the user's member ID cannot be grasped. The first-stage authentication unit 73 notifies the second-stage authentication unit 77 of the user's one-time ID and management master ID as indicated by an arrow 76, but the user's member ID is secret from the second-stage authentication unit 77. To. The second stage authentication unit 77 keeps the user's password secret from the first stage authentication unit 73. Therefore, in this case as well, it is realistic that a third party uses the member ID in the database 4 to access the database 7 and obtain the password therein, or vice versa. It's not easy. Therefore, practically sufficiently high security is ensured.

  As another configuration example, although not shown, the user's member ID and password can be searched from one to the other in the company operating the authentication support system 3, the authentication system 6, or the integrated authentication system 71 described above. It is also possible to adopt a configuration managed in the database in a simple state. Within this company, strict information protection management is performed so that the user's member ID and password are not leaked to third parties. Even in such a configuration, in communication between the user or an external terminal device and the authentication support system 3, the authentication system 6, or the integrated authentication system 71, the member ID and the password are not communicated together. Instead, the member ID and password are separated from each other and communicated at different occasions. Therefore, it is practically very difficult for a third party to obtain both a member ID and a password by intercepting communications. Therefore, a sufficiently high security is practically ensured.

  In the description of some embodiments described above, it may be understood that both the authentication support system 3 and the authentication system 6 are computer machines installed in a fixed place. However, this is not necessarily the case, and at least one of the authentication support system 3 and the authentication system 6 is a mobile device (for example, an information processing card such as an IC card) that can be carried by the user or a mobile device that is attached to a mobile object. It may be a device (for example, an IC card, an ETC terminal, a car navigation device), or a combination of such a portable or movable device and a fixed device. FIG. 36 and FIG. 37 show a configuration example of an authentication system using such a portable device or mobile device. The example shown in FIG. 36 and FIG. 37 is an example in which the former one is configured using a device that can be carried or moved between the authentication support system 3 and the authentication system 6, but the latter one is carried. Alternatively, a movable device can be used.

  In the configuration example shown in FIG. 36, the user 1 carries an information processing card 81 that is permitted to be used only by the user 1, and the information processing card 81 is a mobile communication terminal (for example, a mobile phone, an ETS terminal, etc.) of the user 1. 2 can be communicably connected via a wired or wireless communication interface. The IC card 81 has a function of issuing a one-time ID by performing the first-stage authentication as in the authentication support system 3 described above. In other words, the information processing card 81 has a database 83, in which the member ID and management master ID of the user 1 and unique identification information of the mobile communication terminal 2 (for example, the calling number of the mobile phone, the MAC of the ETS terminal) Address or IP address) is stored. The member ID in the database 83 is stored in a highly secure storage location where it cannot be read out of the information processing card 81 or tampered with.

  User 1 inputs his member ID into portable communication terminal 2 (91). The mobile communication terminal 2 sends the input member ID and the unique identification information of the own device to the information processing card 81 (93). The information processing card 81 performs the first-stage authentication by the same method as the authentication support system 3 described above. If the authentication is successful, the information processing card 81 issues a one-time ID, and this one-time ID and the management master of the user 1 The ID is sent to the mobile communication terminal 2 (95). Now, the user 1 has acquired a one-time ID. At this time, the mobile communication terminal 2 connects to the authentication system 6 and sends the one-time ID and the management master ID of the user 1 to the authentication system 6 (97). That is, the one-time ID issued to the user 1 and the management master ID of the user 1 are notified to the authentication system 6 from the information processing card 81 through the mobile communication terminal 2. Of course, the information processing card 81 has a communication function, and the one-time ID issued to the user 1 from the information processing card 81 directly to the authentication system 6 without passing through the mobile communication terminal 2 and the user 1 The management master ID may be notified. The subsequent second-stage authentication procedure (99, 101, 103) by the authentication system 6 is the same as in the embodiment already described.

  In the configuration example shown in FIG. 37, the information processing card 81 that is permitted to be used only by the user 1 and that can be connected to the mobile communication terminal 2 of the user 1 is the first step by the authentication support system 3. Involved in the authentication process. In other words, the combination of the information processing card 81 and the authentication support system 3 performs the first stage authentication. The database 83 of the information processing card 81 stores the member ID of the user 1 and the unique identification information of the mobile communication terminal 2 of the user 1 (for example, the calling number of the mobile phone, the MAC address or IP address of the ETS terminal). Has been. The member ID in the database 83 is stored in a highly secure storage location where it cannot be read out of the information processing card 81 or tampered with. The database 4 in the authentication support system 3 includes unique identification information of the mobile communication terminal 2 of the user 1 and unique identification information (for example, a MAC address or an IP address) of the information processing card 81 of the user 1. The management master ID of user 1 is stored.

  User 1 inputs his member ID into portable communication terminal 2 (91). The mobile communication terminal 2 sends the input member ID and the unique identification information of the own device to the information processing card 81 (93). The information processing card 81 collates the member ID and the identification information of the cellular phone 2 received from the mobile communication terminal 2 with the member ID and the identification information stored in the database 83 (first-step authentication). For example, the information indicating that the first-stage authentication is successful and the identification information unique to the card are sent to the mobile communication terminal 2 (111). Upon receiving the information indicating that the first stage authentication has been successful, the mobile communication terminal 2 connects to the authentication support system 3, and the unique identification information of the own device and the information processing card 81 received from the information processing card 81. The mobile communication terminal 2 is sent to the authentication support system 3 (113). Of course, the information processing card 81 has a communication function, and the identification information and information processing of the mobile communication terminal 2 are directly transmitted from the information processing card 81 to the authentication support system 6 without going through the mobile communication terminal 2. The unique identification information of the card 81 may be transmitted.

  The authentication support system 3 stores in the database 4 the unique identification information of the portable communication terminal 2 and the unique identification information of the information processing card 81 received from the portable communication terminal 2 (or information processing card 81). The unique identification information of the mobile communication terminal 2 is collated with the unique identification information of the information processing card 81. If they match, the authentication support system 3 issues a one-time ID and sends this one-time ID to the mobile communication terminal 2 of the user 1 (115), and also to the authentication system 6 The one-time ID and the management master ID of the user 1 are notified (116). The subsequent second-stage authentication procedure (99, 101, 103) by the authentication system 6 is the same as in the embodiment already described.

  As a modification of the above-described processing procedure in the configuration example of FIG. 37, the following can also be adopted. That is, the member ID of the user 1 is not stored in the information processing card 81 but is managed in the database 4 of the authentication support system 3. When the first-stage authentication is to be performed, the mobile communication terminal 2 acquires unique identification information from the information processing card 81 connected thereto, and the identification information of the information processing card 81 and the user 1 The input member ID and identification information unique to the mobile communication terminal 2 are sent to the authentication support system 3. The authentication support system 3 stores the identification information of the information processing card 81 received from the mobile communication terminal 2, the member ID input from the user 1, and the unique identification information of the mobile communication terminal 2 in the database 4. The identification information of the information processing card 81 of the user 1 and the member ID are compared with the identification information of the mobile communication terminal 2 and only when they all match, a one-time ID is issued.

  In the configuration example of FIG. 37, regardless of which of the two procedures described above, the user 1 does not use both the correct mobile communication terminal 2 and the information processing card 81 registered in advance in the authentication support server 3. Cannot receive a one-time ID. Therefore, the security is higher than when only the mobile communication terminal 2 is used.

  As mentioned above, although embodiment of this invention was described, this is an illustration for description of this invention, and is not the meaning which limits the scope of the present invention only to this embodiment. Therefore, the present invention can be implemented in various other forms without departing from the gist thereof.

The block diagram which shows the fundamental structure and operation | movement of one Embodiment of the personal authentication method according to this invention. The block diagram which shows the registration method of the authentication key etc. which are used in this embodiment. The block diagram which shows the example of application to the personal authentication for credit settlement. The block diagram which shows the example of application to the personal authentication for the logon to a server. The block diagram which shows the example applied to personal authentication when submitting the certificates issued by the local government etc. The block diagram which shows the example of application to the personal authentication for performing credit payment by shopping in the network shop on the Internet web. The block diagram which shows the modification which added the encryption process to the example of application to the logon to the server shown in FIG. The block diagram which shows the modification which added the photo compositing process to the application example to the credit settlement shown in FIG. The block diagram which shows the case where the third party obtained the user's mobile phone and used it by impersonating the user. The block diagram which shows the case of the unauthorized charge from a store to a credit company. The block diagram which shows the case of data theft by the communication interception of the third party. The block diagram which shows another case of data theft by communication interception of a third party. The block diagram which shows the structure of the database 4 of the authentication assistance system 3. FIG. The block diagram which shows the structure of the database 7 of the authentication system 6. FIG. The figure which shows the example of the service menu provided from the authentication assistance system 3 to the mobile telephone 2 of the user 1. FIG. The flowchart which shows the flow of the 1st step | paragraph authentication using the authentication assistance system 3 in the example of application to the credit payment of FIG. The flowchart which shows the flow of the 2nd step | paragraph authentication using the authentication system 6 in the example of application to the credit payment of FIG. , The flowchart which shows the flow of the 1st step | level authentication using the authentication assistance system 3 in the example of application to the server logon of FIG. The flowchart which shows the flow of the 2nd step | level authentication using the authentication system (server) 6 in the example of application to the server logon of FIG. The flowchart which shows the flow of the 1st step | paragraph authentication using the authentication assistance system 3 in the example of application to the certificate grant from the local government etc. of FIG. The flowchart which shows the flow of the 2nd step | paragraph authentication using the document delivery system (authentication system) 6 in the example of application to the certificate delivery from the local government etc. of FIG. The flowchart which shows the flow of the 3rd step | paragraph authentication using the document delivery system (authentication system) 6 in the application example to the certificate delivery from the local government etc. of FIG. The flowchart which shows the flow of the 1st step | paragraph authentication using the authentication assistance system 3 in the example of application to the credit payment in the network shop of FIG. The flowchart which shows the flow of the 2nd step | paragraph authentication using the authentication system 6 of a credit company in the example of application to the credit payment in the network shop of FIG. The flowchart which shows the flow of the 3rd step | paragraph authentication using the authentication system 6 of a credit company in the example of application to the credit payment in the network shop of FIG. The flowchart which shows the flow of the process of emergency contact and emergency authentication using emergency member ID. The flowchart which shows the flow of the process for service stop. The flowchart which shows the flow of a process of my page function. The flowchart which shows the flow of a process of acquisition of a web connection log. The flowchart which shows the flow of a process of authentication key change. The flowchart which shows the flow of a process of authentication key confirmation. The flowchart which shows the flow of a process of owner confirmation of a picking-up mobile telephone. The block diagram which shows the example of application to the personal authentication for entrance control. The block diagram which shows the modification of the server which performs authentication. The block diagram which shows another modification of the server which performs authentication. The block diagram which shows another modification of the server which performs authentication. The block diagram which shows another modification of the server which performs authentication.

Explanation of symbols

1 user 2 mobile phone 3 authentication support system 4 database 5 terminal 6 authentication system 7 terminal 8 certificates 9 network shop 51 entrance device 53 input device 55 entrance door

Claims (5)

Among the first and second authentication keys unique to the user, the first authentication key is stored, but the second authentication key is not stored , and the management master ID of the user is stored. a first stage authentication means are, the second said although the stored authentication key first authentication key of the user is not stored, and the stores the management master ID of the user A personal authentication method performed by a two-step verification means,
The first stage authentication means receives the input of the first authentication key from the user, and collates the input first authentication key with the stored first authentication key. Performing one-step personal authentication;
If the first stage personal authentication is successful, the first stage authentication means issues a one-time ID to the user;
A step wherein the first stage authentication means, for notifying the one-time ID issued to the user, and a management master ID of the user who matched the first stage of the personal authentication to the second step verification means,
Storing the one-time ID notified from the first-step authentication means as the one-time ID of the user corresponding to the notified management master ID;
The second stage authentication means receives the input of the second authentication key and the one-time ID from the user, and the input second authentication key matches the stored second authentication key. And a step of performing personal authentication in a second stage by examining whether or not the input one-time ID matches the stored one-time ID of the user . Of the first and second authentication keys unique to the user, the first authentication key is stored, but the second authentication key is not stored , and the management master ID of the user is stored. A first stage authentication means,
Of the first and second authentication keys of the user, the second authentication key is stored, but the first authentication key is not stored , and the management master ID of the user is stored. A second stage authentication means,
The first stage authentication means receives an input of a first authentication key from the user, and collates the input first authentication key with the stored first authentication key, When the first stage of personal authentication is performed and the first stage of personal authentication is successful, a one-time ID is issued to the user, the one-time ID issued to the user, and the first stage The management master ID of the user matched by the personal authentication is notified to the second stage authentication means ,
The second stage authentication means stores the one-time ID notified from the first stage authentication means as the one-time ID of the user corresponding to the notified management master ID, and receives the second time ID from the user. The authentication key and the one-time ID are input, the input second authentication key matches the stored second authentication key, and the input one-time ID is stored. By checking whether the user matches the one-time ID, the second stage personal authentication is performed.
Personal authentication system. 3. The personal authentication system according to claim 2, wherein the first stage authentication means and the second stage authentication means are realized by different computer machines or the same computer machine. A computer program for causing a computer to function as the first stage authentication means of the personal authentication system according to claim 2. A computer program for causing a computer to function as the second stage authentication means of the personal authentication system according to claim 2.

Images