JPS601668B2 - Certificate identification method - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION The present invention relates to an identity verification system in, for example, bank automatic teller machines, automatic deposit machines, etc. This invention relates to a method for verifying the identity of certificates that determines the identity of the certificate and reliably prevents unauthorized use.

2. Description of the Related Art Transaction systems that use identity verification certificates (hereinafter simply referred to as certificates) for product sales transactions using credit cards are becoming more and more widespread.

Furthermore, in order to rationalize the administrative processing associated with transactions, systems in which machines automatically read the data recorded on identity verification documents and process transactions are rapidly developing, and magnetic cards and automatic cash dispensers are rapidly developing. A typical example of such a system can be seen in an automatic deposit withdrawal system using . However, in order to smoothly develop these automatic verification systems, the following problems still need to be solved.

In other words, {1} It is possible to eliminate the use of forged certificates to prevent fraudulent transactions from occurring.

[2] Even if a certificate is legitimately issued, it can be prevented from being used by a fraudulent user who obtained it illegally.

{3' Even if a certificate has been legitimately issued, the physical characteristics of the certificate have deteriorated over the years, and there is a risk that the certificate cannot be stably processed mechanically, or if the system has been changed. If it becomes necessary to suspend the handling of already issued certificates due to the above, the certificates can be made voluntarily effective.

The following requirements must be met.

Therefore, if we write about the above {1', [2), then {1
), {2) are fully implemented and legitimate users are not thereby protected from unauthorized users, it goes without saying that the automatic verification system cannot be expected to operate smoothly. There is no one that completely satisfies the requirements.

For example, conventionally, as shown in FIG. inputs the pin code into the input calendar 3 to output the pin code signal, inputs this pin code signal into the register B5, and inputs the pin code signal into the register A and B4.
, 5 is input to the comparison/judgment device 6, and the authenticity of the certificate holder is detected based on the judgment result of the comparison/judgment device, the data recorded on the certificate can be decoded. It is impossible to prevent someone with the ability to decipher the recorded pin code and use it illegally. Also, regarding the above-mentioned glue, in the current situation where the transaction operations of banks, etc. are forced to rely not only on online systems but also offline systems, it is important to note that transactions conducted in online systems that are connected to computer systems with large-capacity storage devices. This effect must be effectively achieved even in offline situations where the revocation process is performed without relying on the above-mentioned computer system to verify identity, and unauthorized use must be completely prevented.

For example, as shown in the second illustration, certificate 1 of magnetic card etc.
The series of codes recorded on the certificate 1 is read by the reading device 2, and the signals of the read series of codes are sent to the mass storage device 8 via the control comparison and judgment unit 7, and the series of codes are read from the mass storage device. The corresponding pin code is extracted and sent to the control comparison and judgment unit 7, while
The input device 3 inputs the pin code signal to the control comparison and determination unit 7, and the control comparison and determination unit 7 inputs the PIN code signal to the control comparison and determination unit 7.
In the case of a method that detects the authenticity of the certificate holder based on the results of comparing two pin code signals, the magnetic card associated with this detection method can be used offline when identity verification is performed by a computer system that does not have a large-capacity storage device. There are some difficult points. In addition, when renewing certificates, there is a risk that two types of certificates, old and new, will be duplicated in circulation until the old certificates before renewal are completely collected. It is necessary to completely prevent the occurrence of accidents in which certificates that have been issued are treated as valid. However, there is no system for arbitrarily revoking certificates that can effectively effect revocation in both online and offline systems and that can completely prevent accidents in which certificates that have already been revoked are treated as valid. do not have.

Therefore, the present inventor completed the present invention as a result of research to solve the above-mentioned difficulties in the conventional system.

That is, the first invention is based on the declared PIN code declared by the user of the representative code of the certificate, and the calculation and extraction method arbitrarily determined by the issuer of the certificate using the numerical value of this representative code and the numerical value of the declared PIN code. The certificate in which the validity determination code consisting of a part of the obtained basic code is recorded is placed on a reading device and the signal of the representative code mentioned above, the signal of the declared pin code mentioned above,
And the signal of the above-mentioned validity determination code is outputted, and the signal of the above-mentioned representative number and the signal of the above-mentioned declaration PIN code are input to the arithmetic extraction device which calculates the above-mentioned basic code according to the above-mentioned calculation and extraction method, and the signal of the above-mentioned basic code is inputted. output,
On the other hand, an additional PIN code consisting of another part of the basic code is keyed into the input device to output an additional PIN code signal, and the additional PIN code signal, basic code signal, and Determine whether the value obtained by combining the validity determination code signal with the above additional PIN code and the validity determination code matches the above-mentioned basic code, and output a match/mismatch signal based on the result of the determination. This is a certificate identification verification method in which the authenticity of the certificate holder is detected by inputting the information into a comparison/judgment device that outputs a match/mismatch signal, and detecting the authenticity of the certificate holder based on the match/mismatch signal.

Further, the second invention is a method of calculation and extraction arbitrarily determined by the issuer of the certificate using the representative number of the certificate, the declared PIN code declared by the user, and the numerical value of this representative code and the numerical value of the declared PIN code. A certificate in which a validity determination code consisting of a part of the basic code obtained according to the above is recorded is passed through a check-in device to output a signal of the representative code, a signal of the declaration PIN code, and a signal of the validity determination code, and The signal of the representative code and the signal of the declaration PIN code are inputted to an arithmetic extraction device that calculates the basic code according to the calculation and extraction method, and the signal of the basic number is outputted. Also, key in an additional PIN code consisting of another part of the above basic code to output a declared PIN code signal and an additional PIN code signal,
The signal of the declaration PIN code outputted from the input device obtained as above and the declaration PIN code signal read from the above-mentioned certificate match/disagree, and the additional PIN code and validity determination code are combined. Compare and judge whether the numerical value matches or does not match the basic code, and based on the result of the judgment, match or do not match.
This is a certificate identification verification method in which the information is input to a comparison/judgment device that outputs a mismatch signal, outputs a match/mismatch signal, and the authenticity of the certificate holder is detected based on the match/mismatch signal.

Since the identity verification method according to the present invention does not require a large-capacity storage device, it can be applied to both online and offline systems.

In addition, by changing the logic for calculating the above basic code, erasing the validity determination code recorded in the certificate, and writing a new validity determination code, it is possible to easily update the certificate without having to renew it. .

Furthermore, since the additional PIN code is not recorded on the certificate, it cannot be used fraudulently even if an attempt is made to use it fraudulently.

Hereinafter, the present invention will be explained in detail with reference to the drawings.

FIG. 3 shows an example of a certificate used in the method of the first invention.

In the figure, 9 is a magnetic stripe, 10 is a floating letter, and 1 is a magnetic stripe.
1 is a user name display field, 12 is an expiration date display field, and 13 is a user signature field. The magnetic stripe 9 contains, for example, a representative code of the certificate such as an account number, a declared PIN code declared by the user, and a predetermined digit of a numerical value calculated according to a certain calculation method using the numerical value of this representative code and the numerical value of the declared PIN code. A validity determination code is recorded, which is a part of a basic code obtained by extracting the number of , and then arranging the extracted numbers in a predetermined order.

Now, using the basic code as account number x and declaration PIN code y, extract some digits from each digit of the value Z obtained by the calculation formula Z = dakuxy, skipping 3 digits from the upper digit. , shall be obtained by arranging the numbers extracted from the upper digits of Z above to be located at the upper digits.

That is, if x=1234567 and y=1356, then Z ni (1234567) 2 ten (1234567) 1356 = 1525829750341, and if some digits are extracted and arranged as described above, it becomes 1851.

Now, the last two digits of 1851 obtained as above are 5.
Let 1 be the validity determination code.

FIG. 4 shows a certificate identification verification method according to the first invention.

The certificate 1 is applied to the reading device 2 to output the representative code signal, the declared PIN code signal, and the validity determination code signal, and then these signals are input to the register A and stored there.

In the figure, 18 is register A, 14 is account number,
Reference numeral 15 is a storage area for the declaration password, 16 is a storage area for the validity determination code, and 17 is a storage area for calculation extraction data (basic code) obtained as described later. Furthermore, the representative code signal and the declared PIN code signal are taken out from the register AI8 through lines 19 and 20, and inputted to the arithmetic extraction device 21 which calculates the basic code according to the calculation and extraction method described above, where the basic code is calculated. Then, the signal of the obtained basic code is output from the arithmetic extraction device 21, and the signal is returned to the register AI8 through the line 22. On the other hand, an additional password (numerical value 18 in this example) consisting of another part of the basic number is keyed into the input device 3 to output a signal of the additional password.

Then, the numerical value (1851) obtained by combining the additional PIN code signal, the basic code signal, and the validity determination code signal obtained as described above with the additional PIN code 18 and the validity determination code 51 is the basic code. The input is input to the comparison/judgment device 27 which determines whether the numbers match or not and outputs a match/mismatch signal based on the result of the judgment, and outputs the match/mismatch signal. Detect authenticity.

Further, FIG. 5 shows a certificate identity verification system according to the second invention.

Key-in the declaration PIN code along with the additional PIN code into input device 3, and the declared PIN code that has been keyed in is transferred to register B.
23 and line 24' to the comparison/judgment device 27, where it is compared with the declared PIN code sent from the register AI8 through line 28. The structure of the invention is the same as that of the above invention.

As described in detail above, according to the present invention, a certificate cannot be used fraudulently unless the additional password code is known, so that fraudulent use can be completely prevented.

Furthermore, by changing the calculation extraction logic of the validity determination code and additional PIN code, it is possible to invalidate a certificate that has been valid up to that point.

Furthermore, an expired certificate can be easily updated by erasing the old validity determination code and writing a validity determination code based on new calculation extraction logic. Furthermore, since the identity verification method according to the present invention does not require a large capacity storage device, it can be applied to both offline and online systems.

[Brief explanation of the drawing]

Figures 1 and 2 are block diagrams showing a conventional certificate identity verification system, Figure 3 is a plan view of a certificate used in the present invention, and Figure 4 shows a certificate identity verification system according to the first invention. Block Diagram FIG. 5 is a block diagram showing a certificate identification verification method according to the second invention. Explanation of symbols representing the main parts of the diagram, 1...Certificate,
2...reading device, 3...input device, 14...
...Representative code storage area, 15...Declaration PIN code storage area, 16...Validity determination code storage area, 17...Calculation extracted data storage area, 18. ...Register A, 21...
Arithmetic extraction device, 23...Register B, 27...
... Comparison and judgment device. Figure 1 Figure 2 Figure 3 Figure 4 Figure 5

Claims (1)

[Scope of Claims] 1. According to the declared PIN code declared by the representative code user of the certificate, and the calculation and extraction method arbitrarily determined by the issuer of the certificate using the numerical value of this representative code and the numerical value of the declared PIN code. The certificate in which the validity determination code consisting of a part of the obtained basic code is recorded is placed on a reading device to output the signal of the representative code, the signal of the declaration PIN code, and the signal of the validity determination code, and perform the calculation and extraction as described above. The signal of the representative code and the signal of the declaration PIN code are inputted to the arithmetic extraction device that calculates the basic code according to the method, and the signal of the basic code is outputted. Key-in the additional PIN code consisting of the above to output the additional PIN code signal, and combine the additional PIN code signal, basic code signal, and validity determination code signal obtained as above with the above additional PIN code. The numerical value obtained by combining the above validity determination code is inputted to a comparison judgment device which judges whether or not it matches the above basic code and outputs a match/mismatch signal based on the judgment result, and outputs a match/mismatch signal. A certificate identification verification method that detects the authenticity of the certificate holder based on the match/mismatch signals. 2 The declared PIN code declared by the representative code user of the certificate, and one of the basic codes obtained using the numerical value of this representative code and the numerical value of the declared PIN code according to the calculation and extraction method arbitrarily determined by the issuer of the certificate. The certificate on which the validity determination code consisting of 3 parts is recorded is passed through a reading device to output the signal of the representative code, the signal of the declaration PIN code, and the signal of the validity determination code, and the basic code is extracted according to the calculation and extraction method described above. The signal of the representative code and the signal of the declared PIN code are inputted to the arithmetic extraction device which calculates the above-mentioned basic code, and the signal of the basic code is outputted. key-in the additional PIN code consisting of 3 parts to output the declaration PIN code signal and the additional PIN code signal, and the declaration PIN code signal output from the input device obtained as described above and the declaration PIN code signal read from the above certificate. The match/mismatch of the signals of the declared PIN code and the numerical value obtained by combining the additional PIN code and the validity determination code are compared to determine whether the basic number matches/mismatch, and a match/mismatch signal is output based on the result of the judgment. A certificate identity verification method in which the authenticity of the certificate holder is detected by inputting the data into a comparison/judgment device and outputting a match/mismatch signal.