JPS603231B2 - Certificate identity verification method - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION The present invention relates to an identification verification method in, for example, automatic teller machines, automatic deposit machines, etc. of banks, and more specifically, to ensure that a person using a magnetic card, etc. is the true card holder. This invention relates to a method for verifying the identity of certificates that determines the identity of the certificate and reliably prevents unauthorized use.

2. Description of the Related Art Transaction systems that use identity verification certificates (hereinafter simply referred to as certificates), such as product sales transactions using credit cards, have become widespread.

Furthermore, in order to rationalize the administrative processing associated with transactions, systems are rapidly developing in which machines process data recorded on identity verification certificates, verify identities, and then process transactions. A typical example of such a system can be seen in a grinding system. However, in order to smoothly develop these automatic verification systems, the following problems still need to be solved.

In other words, [1' It is possible to eliminate the use of forged certificates so that fraudulent transactions are not carried out using forged certificates.

■ Even if a certificate has been legitimately issued, it can be prevented from being used by an unauthorized user who obtained it illegally.

'3' Even if a certificate has been legitimately issued, the physical characteristics of the certificate may deteriorate due to the passage of years of use, and there is a concern that the certificate may not be processed stably by machines, or the system may be changed. When it becomes necessary to suspend the handling of already issued certificates due to certain circumstances, the certificates can be invalidated at will.

The following requirements must be met.

Therefore, if I were to comment on the above '1' and '2',
11. It goes without saying that the above-mentioned automated trading system cannot be expected to operate smoothly unless the above requirements are fully implemented and legitimate users are protected from unauthorized users. There is nothing that completely satisfies.

For example, conventionally, as shown in FIG. The user inputs the PIN code into the input device 3 to output the floor code signal, inputs this PIN code signal into the register B5, and registers A and B4,
If the signal from each of 5 is input to the comparison/judgment device 6 and the authenticity of the certificate holder is detected based on the judgment result of the comparison/judgment device, the certificate is one that has the ability to decipher the data recorded on the certificate. It is impossible to prevent unauthorized use by decoding the PIN code recorded on the PIN code.

Also, regarding the above leg, when renewing a certificate,
Until the old certificates before renewal are completely collected, there is a risk that two types of certificates, old and new, will be duplicated in circulation, so the two types of certificates should be clearly distinguished, and certificates that have already expired will be treated effectively. Accidents must be completely prevented from occurring.
However, when using a method that detects the authenticity of the certificate holder based on the PIN code recorded on the certificate, it is difficult to reliably distinguish between the old and new types of certificates that are equally in circulation. At present, there is no system for arbitrarily revoking certificates that effectively enforces the revocation effect and completely prevents the occurrence of an accident in which an already revoked certificate is treated as valid. Therefore, the present inventor completed the present invention as a result of research to solve the above-mentioned difficulties in the conventional system.

That is, the gist of the present invention is as follows: ``A certificate in which the representative code of the certificate and the declaration PIN code declared by the user are recorded is passed through a persuasion device to output the representative code and the declaration PIN code; An operation that generates a basic code according to a calculation and extraction method arbitrarily determined by the issuer of the certificate using the numerical value and the numerical value of the declared PIN code, and then divides the code to generate an additional PIN code and validity determination code. Input the signal of the representative code and the signal of the declared PIN code to the extraction device to output the signal of the additional PIN code and the validity determination code, while keying in the additional PIN code to the input device. outputting an additional PIN code signal, determining whether or not the additional PIN code signal from the input device and the additional PIN code signal generated by the arithmetic extraction device match; A first comparison/determination device that outputs a match/mismatch signal is input to output a match/mismatch signal, and when the match signal is output, the signal of the representative code and the signal of the valid gender code are controlled. inputting the signal into the device and sending the signal of the representative code from the control device to the mass storage device;
A validity determination code corresponding to the representative code is extracted from the large-capacity storage, and the validity determination code thus extracted is fed back to the control device to determine the validity generated by the arithmetic extraction unit. Validity determination between the code signal and the code signal taken out from the above-mentioned mass storage device: a second comparison and determination device that determines whether or not the code signals match and outputs a match/mismatch signal based on the result of the determination. This is a certificate identification verification method in which the authenticity of the certificate holder is detected by inputting a signal to output a match/mismatch signal and detecting the authenticity of the certificate holder based on the match/mismatch signal.

The identity verification method according to the present invention can be applied to an online system using a mass storage device.

Additionally, by changing the logic for calculating the basic number, erasing the validity determination code recorded on the certificate, and writing a new validity determination code, it is possible to easily update the certificate without having to renew it. . Furthermore, since the additional PIN code is not recorded on the certificate, even if an attempt is made to use it fraudulently, it cannot be used. . Hereinafter, the present invention will be explained in detail with reference to the drawings.

FIG. 2 shows an example of a certificate used in the method of the present invention.

In the figure, 7 is a magnetic stripe, 8 is a floating letter, and 9 is a magnetic stripe.
10 is a user display field, 10 is an expiration date display field, and 11 is a user signature field. On the magnetic stripe 7, a representative code such as an account number and a declared password declared by the user are recorded. FIG. 3 shows a certificate identification verification method according to the present invention.

The certificate 1 is applied to the discount device 2 to output the representative code signal and the declared personal identification code signal, and then these signals are input to the register AI6 and stored there.

In the figure, 12 is a storage area for the account number of the register AI6, 13 is a storage area for the declared pin code of the register AI6, 14' is a storage area for an additional pin code determined as described below, and 15 is a storage area for the declared pin code of the register AI6. This is a storage area for a validity determination code determined as described below.

Furthermore, take out the representative code signal and the declared PIN code signal from register AI6 through lines 17 and 18,
A basic code is generated using the numerical value of the representative code and the numerical value of the declared PIN code according to the counting and extraction method arbitrarily determined by the issuer of the certificate, and the code is divided to generate additional PIN codes and validity determination codes. calculation extraction device 19
is input to output the additional pin code signal and validity determination code, and these signals are returned to the register AI6 through lines 20 and 21. The above basic code is obtained according to the calculation and extraction method arbitrarily determined by the issuer of the certificate.Here, the basic number is calculated using the account number x and declaration PIN code y using the calculation formula z=x20. From each digit of the obtained value z, extract some digits from the upper digits by 3 digits, and arrange the numbers extracted from the upper digits of the above value z in the upper digits & calendar. shall be taken as a thing.

That is, if x=1234567, y=1356, z=
(1234567) 20 (1234567) 1356=
This becomes 1525829750341, and if some of the digits are extracted and arranged as described above, it becomes 1851.

Next, this number is divided into the upper two digits 18 and the lower two digits 51, and 18 is used as an additional password and 51 is used as a validity determination code. On the other hand, the input device 3 is keyed in with the additional PIN code to output the signal of the additional PIN code, and this signal is passed through the resistor B22 through the line 23 and is combined with the signal from the input device and the calculation extraction device. The signal is input to a first comparison/determination device 25 which determines whether or not the generated additional PIN code signals match and outputs a match/mismatch signal based on the result of the determination. At the same time, the signal of the additional password generated by the arithmetic extraction device 19 passes through the register AI6 through the line 24 and is inputted to the first comparison/judgment device 25.

When the above two signals are input to the comparison and determination device 25, it is determined whether they match or not, and based on the result of the determination, a match/mismatch signal is output to the comparison and determination device 25.
Output from 5.

If they do not match, the use is stopped, and if they match, the switch 28 interposed between the register AI6 and the control device 29 is turned on. When the switch is turned on, the signal of the representative code and the validity determination code are sent to the control device 29 through the switch 28 through the lines 26 and 27.
A representative code signal is then sent from the control device 29 to the mass storage device 30' through a line 31. When the signal of the representative code is input to the mass storage device 30, the validity determination code corresponding to the representative code is taken out, and the line 3
2 to the control device 29. Next, it is determined whether or not the validity determination code signal generated by the arithmetic extraction device and the signal output from the mass storage device match, and a match/mismatch signal is output based on the result of the judgment. The second comparison and determination device 34 is inputted through the line 33, where it is determined whether or not the two match, and a match/mismatch signal is output from the comparison and determination device 34 based on the result of the determination. It will be done.
When a match signal is issued, it can be used, but when a mismatch signal is issued, use is stopped. As described in detail above, according to the present invention, the certificate cannot be used fraudulently unless the additional password code is known, so that fraudulent use can be completely prevented.

Furthermore, by changing the calculation extraction logic of the additional PIN code, it is possible to easily revoke the certificate that has been valid up to that point.

[Brief explanation of drawings]

Figure 1 is a block diagram showing the conventional identification verification method for certificates.
FIG. 2 is a plan view of a certificate used in the present invention, and FIG. 3 is a block diagram showing a certificate identity verification system according to the present invention. Explanation of the symbols representing the main parts of the diagram: 1...Certificate, 2...Reader, 12...Representative code storage area, 13...Declaration password Code storage area, 14...Additional PIN code storage area, 15
...Validity determination code storage area, 16...
...Register A, 19... Arithmetic extraction device,
3...Input device, 22...Register B, 25...First comparison judgment, 28...
・Switch, 29... Control device, 30...
Mass storage device, 34... second comparison and determination device. Figure 1 Figure 2 Figure 3

Claims (1)

[Claims] 1. The certificate in which the declaration PIN code declared by the representative code user of the certificate is recorded is placed on a reading device to output the representative code and the declaration PIN code, and the certificate is read using the numerical value of the representative code and the declaration PIN code. A signal of the above-mentioned representative code is sent to an arithmetic extraction device that generates a basic code according to a calculation and extraction method arbitrarily determined by the issuer of Input the above declaration PIN code signal and output the above additional PIN code signal and the above validity determination code, while keying in the above additional PIN code into the input device to output the additional PIN code signal, input the above. A first unit that determines whether or not the additional PIN code signal from the device and the additional PIN code signal generated by the arithmetic extraction device match, and outputs a match/mismatch signal based on the result of the determination. When the matching signal is outputted, the signal of the representative code and the signal of the validity determination code are inputted to the control device, and from the control device the signal of the above-mentioned A representative code signal is sent to a mass storage device, a validity determination code corresponding to the representative code is extracted from the mass storage device, and the validity determination code thus extracted is fed back to the control device, and the above calculation is performed. It is determined whether or not the validity determination code signal generated by the extraction device and the validity determination code signal taken out from the mass storage device match, and the match or mismatch is determined based on the result of the determination. A certificate identification verification method in which the signal is input to a second comparison/judgment device that outputs a match/mismatch signal, and the authenticity of the certificate holder is detected based on the match/mismatch signal.