JP2002007698A - System and method for personal identification, and managing device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system and a method for personal identification, with which time required for identification can be shortened. SOLUTION: A shopping customer to pay the price of commodities by credit payment calls a managing device 3 from his/her own portable telephone set 1 before paying the price of commodities, inputs a password code and transmits it to the managing device 3. When a right password code is transmitted, a receiving completion signal is sent from the managing device 3 to the portable telephone set 1. Afterwards, when the portable telephone set 1 is connected to store terminal equipment 2 by the shopping customer later, a portable telephone number is read from a memory built in the portable telephone set 1 to the store terminal equipment 2 and the portable telephone number is transmitted from the store terminal equipment 2 to the managing device 3. The managing device 3 confirms whether the credit payment is applied from the portable telephone set 1 corresponding to the portable telephone number received from the store terminal equipment 2 or not and when it is applied, a signal permitting the credit payment is transmitted to the store terminal equipment 2.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to a personal authentication system for performing personal authentication using a portable communication device, a personal authentication method, and a management device for the personal authentication system.

[0002]

2. Description of the Related Art For example, when paying for a commodity by a credit card or when withdrawing cash using a cash dispenser (CD) machine installed in a bank or the like, authentication of a user of the credit card or the cash dispenser machine (individual personal information) is performed. Authentication) is performed. This personal authentication is generally performed based on information recorded on a credit card or cash card, but recently,
For example, there has been proposed a method of performing personal authentication using a mobile phone, such as a system disclosed in Japanese Patent Application Laid-Open No. 11-45366.

In the system disclosed in the above publication, a shopper connects his or her mobile phone to a terminal installed in a shop when paying for a product purchased in the shop. When the mobile phone and the terminal are connected, the call number (mobile phone number) of the mobile phone is read out to the terminal, and the read out call number is transmitted to the computer that controls and manages the system. You. Thereafter, the computer calls the shopper's mobile phone based on the call number sent to the computer. When the shopper answers the call, the computer prompts the user to input a security code. When the shopper inputs the security code to the mobile phone according to the guidance, the security code is transmitted to the computer. In the computer, the calling number of the mobile phone and the personal identification code assigned to the owner are registered in association with each other, and when the personal identification code is transmitted from the mobile telephone, the transmitted personal identification code and the personal identification code are registered. The registered personal identification code is collated, and if these personal identification codes match, the person who has input the personal identification code to the mobile phone is authenticated as the owner of the mobile telephone. When the authentication is performed in this manner, the product price is later deducted from the bank account of the owner of the mobile phone.

[0004]

As described above, in the system disclosed in the above publication, after the portable telephone is connected to the terminal, the user waits until the computer calls the portable telephone, and the portable telephone is called. When a password is input in response to the request, the input password is transmitted to the computer and authentication is performed. Therefore, it takes a long time from when the mobile phone is connected to the terminal to when the authentication is completed, which may irritate the shopper. In addition, if authentication takes a long time, particularly when the store is crowded, other shoppers may be made to wait, and these other shoppers and clerks may be frustrated.

SUMMARY OF THE INVENTION It is an object of the present invention to provide a personal authentication system, a personal authentication method, and a management device for a personal authentication system that can solve the above-mentioned technical problems and can shorten the time required for authentication.

[0006]

Means for Solving the Problems and Effects of the Invention The invention according to claim 1 for achieving the above object is provided in a place where authentication is to be performed, and is provided from a portable communication device owned by an individual. A terminal capable of detecting the identification information of the communication device, connected to the terminal via a communication line,
A personal authentication system including a management device having storage means in which identification information and a personal identification code of a portable communication device necessary for authenticating an individual are stored in association with each other. Detecting information and transmitting the detected identification information to the management device;
The management device, when receiving the identification information and the security code from the portable communication device, determines whether the received security code matches the security code stored in the storage unit in association with the identification information of the portable communication device. It is stored whether the individual who has the portable communication device has applied for authentication when it matches, and when the identification information is received from the terminal device thereafter, Check whether the mobile communication device specified by the received identification information has previously applied for authentication, and if it is confirmed that the application for authentication has been made, reply to the above terminal with an authentication OK. Is transmitted to the personal authentication system.

According to the present invention, since the personal identification code is transmitted from the portable communication device to the management device, and whether or not the personal identification code is correct is confirmed at this time, the management device transmits the identification information of the portable communication device from the terminal. Is received, it is not necessary to confirm the correspondence between the identification information and the personal identification code. Therefore, the management apparatus calls the portable communication apparatus identified by the identification information (such as the mobile phone number) of the portable communication apparatus received from the terminal, and after receiving the call, inputs the personal identification code and transmits it to the management apparatus. Compared with the technology, it is possible to reduce the time required from when the communication device identification information receiving means receives the communication device identification information to when the personal authentication is completed.

[0008] According to a second aspect of the present invention, the management device is configured such that the personal identification code received from the portable communication device corresponds to the personal identification code stored in the storage means in association with the identification information of the portable communication device. It is preferable to include means for transmitting a code completion reception signal to the portable communication device when it is stored that the individual who owns the portable communication device has applied for authentication. In this case, since the personal identification code reception completion signal is transmitted to the portable communication device, the individual who transmitted the personal identification code from the portable communication device to the management device can know whether or not the transmitted personal identification code was correct.

According to a third aspect of the present invention, there is provided a terminal which is provided at a place to be authenticated and which can detect identification information of the portable communication device from a portable communication device owned by an individual; A personal authentication system including a storage device connected to a communication line and identification information and a personal identification code of a portable communication device necessary for authenticating an individual, the storage device being provided with a storage unit. The terminal detects the identification information of the portable communication device, and transmits the detected identification information to the management device. The management device receives the identification information of the portable communication device from the terminal. Then, the portable communication device specified by the identification information is called, and thereafter, when the security code automatically transmitted from the portable communication device is received in response to the call, the received security code is received. Check whether the password matches the password stored in the storage means in association with the identification information of the portable communication device, and if it is determined that the password matches the password, authentication is performed for the terminal. This is a personal authentication system characterized by transmitting an OK reply.

According to the present invention, the password is input to the portable communication device prior to the transmission of the communication device identification information to the management device. The input personal identification code is automatically transmitted to the management device. Thus, the personal identification code is input to the mobile communication device after the management device calls the mobile communication device, and the time required for personal authentication is reduced as compared with the related art in which the input security code is transmitted to the management device. Can be shortened.

According to a fourth aspect of the present invention, there is provided a method for authenticating an individual using a portable communication device owned by the individual, wherein the identification information of the portable communication device is transmitted to the management apparatus by the portable communication device. And PIN code in advance,
The terminal provided at the place to be authenticated detects the identification information of the portable communication device, and the terminal which has detected the identification information of the portable communication device transmits the detected identification information to the terminal via the communication line. Send to the management device, when the management device receives the identification information and the password from the portable communication device,
It is checked whether or not the received personal identification code matches the personal identification code stored in the storage means in association with the identification information of the mobile communication device. It remembers that there has been an application for authentication from, and when the identification information is received from the terminal after that, it is determined whether or not there has been an application for authentication previously from the mobile communication device specified by the received identification information. The personal authentication method is characterized in that when it is confirmed that an application for authentication has been made, a reply of authentication OK is transmitted to the terminal.

According to this method, the same effect as the effect described in claim 1 can be obtained. The invention according to claim 5 is a method for authenticating an individual by using a portable communication device owned by an individual, in which a personal identification code is preliminarily input and stored in the portable communication device, and authentication is performed. The terminal provided in the place to detect the identification information of the portable communication device, the terminal device that has detected the identification information of the portable communication device sends the detected identification information to the management device via a communication line, When receiving the identification information of the mobile communication device from the terminal, the management device calls the mobile communication device specified by the identification information, and the mobile communication device that has received the call,
The management device that automatically transmits the pre-input and stored personal identification code to the management device and receives the personal identification code from the mobile communication device, associates the received personal identification code with the identification information of the mobile communication device. The personal identification code is checked to see if it matches the personal identification code stored in the storage means, and if it is determined that the password matches the personal identification code, an authentication OK reply is transmitted to the terminal. Authentication method.

According to this method, the same effect as the effect described in claim 3 can be obtained. According to a sixth aspect of the present invention, there is provided a management device for a personal authentication system for authenticating an individual using a portable communication device owned by the individual, the identification information of the portable communication device required for authenticating the individual. And a storage device in which a personal identification code is stored in association with the terminal. The terminal installed at the place to be authenticated is connected, can communicate with the mobile communication device, and can be identified from the mobile communication device. When receiving the information and the security code, confirming whether or not the received security code matches the security code stored in the storage means in association with the identification information of the portable communication device; And that the individual who owns the portable communication device has applied for authentication, and when the identification information is subsequently received from the terminal device, the identification information is specified by the received identification information. Check if there has been an application for authentication from the mobile communication device to be authenticated before, and if it is confirmed that the application for authentication has been made, send a reply of authentication OK to the above terminal A management device characterized by the following.

In the personal authentication system using the management device according to the present invention, the same effect as that described in the first aspect can be obtained.

[0015]

Embodiments of the present invention will be described below in detail with reference to the accompanying drawings. FIG. 1 is a block diagram showing the overall configuration of a personal authentication system according to one embodiment of the present invention. This personal authentication system is, for example, a method in which a shopper who has made a purchase at a store in the city pays the product price by credit (without paying the cash at the store, the product price is later deducted from the bank account at a later date). )), And uses the mobile phone 1 owned by each shopper.
The mobile phone 1 has a built-in memory (not shown). The memory stores a call number (mobile phone number) for calling the mobile phone 1 and a number input by operating the input key 11 by the owner. It can be stored.

Each store is provided with a store terminal 2 for performing personal authentication. The store terminal 2 is connected via a communication line to a management device 3 installed in a credit company or a bank (hereinafter, referred to as a “system operation company”) that supervises and manages this personal authentication system. The management device 3 can perform data communication with the mobile phone 1 via, for example, a telephone line network. The management device 3 includes a storage device 31 for storing individual files. The individual file is created, for example, when an individual enters into a contract for using the personal authentication system with the system operating company, and is stored in the storage device 3.
1, the mobile phone number of the mobile phone 1 of the individual (shopper), the personal identification code assigned to the individual,
Includes information such as your personal bank account to withdraw the product price. The personal identification code, for example, can be determined by an individual at the time of contract for using the personal authentication system, and is composed of a combination of a plurality of numbers and characters. That is, in the storage device 31 of the management device 3, information such as a mobile phone number, a personal identification code, and a bank account required for personal authentication are stored in association with each other for each individual.

For example, a shopper who wants to pay for a product by credit payment calls the management device 3 from his / her mobile phone 1 before paying for the product price.
By operating the input key 11 of the mobile phone 1, the personal identification code is transmitted to the management device 3. The call number of the management device 3 may be stored in the memory of the mobile phone 1 in advance, or may be input by operating the input key 11 each time the management device 3 is called. Further, the personal identification code may be stored in a memory built in the mobile phone 1 in advance, or may be input by operating the input key 11 each time the management device 3 is called. However, when the mobile phone 1 is stolen or the mobile phone 1 is lost, the password is read from the memory of the mobile phone 1 to prevent unauthorized use. It is preferable that the written personal identification code is automatically erased after a lapse of a predetermined time (for example, two minutes) from the writing.

The management device 3 having received the personal identification code from the mobile telephone 1 stores, for example, the correspondence between the personal identification code and the mobile telephone number of the mobile telephone 1 which is added to the personal identification code and transmitted to the storage device 31. Check based on personalized files. As a result, if the password is correct, the management device 3 stores that the shopper has applied for credit payment, and transmits a reception completion signal to the mobile phone 1. Note that the application for credit payment is canceled when a predetermined time (for example, 1 to 30 minutes) elapses after storing the application. In this case, the date and time when the application for credit payment was applied or the date and time when the application was canceled are recorded as a history.

The reception completion signal sent from the management device 3 to the mobile phone 1 includes data indicating whether or not to permit credit payment, data indicating the amount of credit that can be paid, and an application for credit payment. It contains a reception code indicating the fact. The mobile phone 1 that has received the reception completion signal causes the display 12 to display various data contents included in the reception completion signal. Therefore, the shopper can see the display 12
It is possible to check whether credit payment is possible before paying for the product price.

The shopper (or a clerk requested by the shopper) who has confirmed that credit payment is possible next connects the mobile phone 1 to the shop terminal 2. The connection between the mobile phone 1 and the store terminal 2 is set, for example, in a dedicated holder 21 connected to the store terminal 2 and provided on the mobile phone 1 with a holder-side connection terminal provided in the dedicated holder 21. This is achieved by connecting the terminal to a telephone-side connection terminal.

When the mobile phone 1 and the store terminal 2 are connected, the mobile phone number of the mobile phone 1 is read out from the memory built in the mobile phone 1 to the store terminal 2. Then, the read mobile phone number is transmitted from the shop terminal 2 to the management device 3 via the communication line.
The management device 3 confirms whether or not there has been an application for credit payment from the mobile phone 1 corresponding to the mobile phone number received from the store terminal 2. If an application for credit payment is made prior to receiving the mobile phone number, the shopper who has connected the mobile phone 1 to the store terminal 2 (or the shopper who has requested the clerk to connect the mobile phone 1) It authenticates that it is the owner of the mobile phone 1 and sends a signal to the store terminal 2 to permit credit payment (authentication OK). On the other hand, if there is no application for credit payment prior to receiving the mobile phone number, a signal indicating that credit payment is not permitted is transmitted to the shop terminal 2.

When a signal indicating that credit payment is permitted is received by the store terminal 2, a message indicating that credit payment may be accepted is displayed on the display 22 of the store terminal 2, and the clerk who sees this display indicates Allow shoppers to pay for the goods by credit. Then, when the clerk inputs the amount of the product price and the like to the store terminal device 2,
The input data on the price of the commodity is sent to the management device 3, and the management device 3 writes the data on the individual file (storage device 31) of the shopper using the credit payment. The amount data written in the individual file is tabulated on the day or at a later date, and the amount corresponding to the tabulated amount data is deducted from the shopper's bank account on a predetermined settlement date.

As described above, according to this embodiment, the security code is transmitted from the mobile phone 1 to the management device 3 prior to the payment of the commodity price by credit, and at this time it is confirmed whether the security code is correct. Therefore, when the management device 3 receives the mobile phone number from the store terminal 2, it is not necessary to confirm the password, and it is not necessary to call the mobile phone 1 from the management device 3. Therefore, as compared with the prior art (for example, the system disclosed in Japanese Patent Application Laid-Open No. H11-45366), after the mobile phone 1 is connected to the shop terminal 2 until personal authentication is completed (credit payment is permitted). The time it takes).

According to this embodiment, the management device 3
Sends a reception completion signal to the mobile phone 1 and displays information related to credit payment such as whether or not credit payment is possible on the display 12 of the mobile phone 1. By looking at the display 12 on the display 12, the customer can check whether credit payment is possible or not before paying the commodity price.

FIG. 2 is a block diagram showing the overall configuration of a personal authentication system according to another embodiment of the present invention. The hardware configuration of the personal authentication system according to this embodiment is almost the same as that of the personal authentication system according to the embodiment of FIG. 1 described above, and the communication order between the mobile phone 1, the shop terminal 2, and the management device 3 Software configuration is different. Therefore, in FIG. 2, parts corresponding to the respective parts shown in FIG. 1 described above are denoted by the same reference numerals as in FIG. 1, and the following describes the hardware configuration of the personal authentication system according to this embodiment. Is omitted.

In this embodiment, a shopper who wishes to pay for a product by credit payment operates the input key 11 of his / her mobile phone 1 prior to payment of the product price by credit payment, for example. Is input, and the input password is stored in a memory built in the mobile phone 1. The security code stored in the memory prevents the security code from being read out from the memory of the mobile phone 1 and used illegally when the mobile phone 1 is stolen or the mobile phone 1 is lost. Therefore, it is preferable that the personal identification code written in the memory of the mobile phone 1 be automatically erased after a predetermined time (for example, two minutes) has elapsed from the writing.

Next, the shopper (or a clerk requested by the shopper) connects the mobile phone 1 to the shop terminal 2. When the mobile phone 1 and the store terminal 2 are connected, the mobile phone 1
Is read out to the store terminal 2. Then, the read mobile phone number is transmitted from the shop terminal 2 to the management device 3 via the communication line. The management device 3 that has received the mobile phone number from the shop terminal 2 calls the mobile phone 1 of the received mobile phone number. When the shopper who notices the call of the mobile phone 1 answers the call (when the call button of the mobile phone 1 is pressed), the personal identification code stored in the memory incorporated in the mobile phone 1 is automatically read out, The read personal identification code is automatically transmitted to the management device 3.

When the management device 3 receives the personal identification code from the mobile phone 1, the correspondence between the received personal identification code and the mobile telephone number received from the store terminal 2 is stored in an individual file stored in the storage device 31. Check based on As a result, if the password is correct, the shopper who has connected the mobile phone 1 to the store terminal 2 (or the shopper who has requested the clerk to connect the mobile phone 1) is authenticated as the owner of the mobile phone 1. A signal is sent from the management device 3 to the store terminal 2 to permit credit payment (authentication OK). If the password is incorrect, the management device 3 sends a signal to the store terminal 2 to disallow credit payment. Is sent.

When the signal indicating that the credit payment is permitted is received by the store terminal 2, a message that the credit payment may be accepted is displayed on the display 22 of the store terminal 2, and the clerk who sees this display, Allow shoppers to pay for the goods by credit. Then, when the clerk inputs the amount of the product price and the like to the store terminal device 2,
The input data on the price of the commodity is sent to the management device 3, and the management device 3 writes the data on the individual file (storage device 31) of the shopper using the credit payment. The amount data written in the individual file is tabulated on the day or at a later date, and the amount corresponding to the tabulated amount data is deducted from the shopper's bank account on a predetermined settlement date.

According to this embodiment, the personal identification code is stored in advance in the memory built in the mobile telephone 1, and when the management device 3 responds to the call of the mobile telephone 1, the personal identification code stored in the memory is stored. Is automatically transmitted to the management device 3. Thereby, after the management device 3 calls the mobile phone 1, the input key 1 of the mobile phone 1
The time required for personal authentication can be reduced as compared with the prior art in which a password is input by operating 1 and the input password is transmitted to the management device 3.

Although the two embodiments of the present invention have been described above, the present invention can be embodied in other forms. For example, in each of the above-described embodiments, the mobile phone number is stored in the memory built in the mobile phone 1, and the mobile phone number is read out to the store terminal 2. Mobile phone 1
May be stored in advance, and the ID code may be read out to the store terminal 2 and transmitted to the management device 3. In this case, the storage device 3 of the management device 3
The personal files stored in the mobile phone 1
Is further written in the.

In the case of the first embodiment,
The reception code included in the reception completion signal transmitted from the management device 3 to the mobile phone 1 is stored in the memory of the mobile phone 1, and the reception code is read out to the store terminal 2 and transmitted to the management device 3. Is also good. In this case, when transmitting the reception code (reception completion signal) from the management device 3 to the mobile phone 1, it is preferable that the reception code be written to an individual file in the storage device 31 of the management device 3.

Further, in each of the above-described embodiments, the mobile phone 1 and the store terminal 2 are connected by wire by setting the mobile phone 1 in the dedicated holder 21. For example, the mobile phone 1 and the store Bl each to terminal 2
A wireless data communication interface such as uetooth may be provided, and data transmission / reception between the mobile phone 1 and the shop terminal 2 may be achieved by wireless communication. Further, in the above-described embodiment, the case where the personal authentication system is used when paying for the product price by credit has been described as an example. However, the personal authentication system according to the present invention is applicable to a cash system installed in a bank or the like. It may be used for personal authentication when withdrawing cash with a dispenser (CD) machine.

In addition, various design changes can be made within the scope of the matters described in the claims.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an overall configuration of a personal authentication system according to an embodiment of the present invention.

FIG. 2 is a block diagram showing an overall configuration of a personal authentication system according to another embodiment of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Mobile telephone (mobile communication device) 2 Store terminal (terminal) 3 Management device 11 Input key 12 Display 21 Dedicated holder 22 Display 31 Storage device

Claims (6)

[Claims] 1. A terminal provided at a place to be authenticated and capable of detecting identification information of the portable communication device from a portable communication device owned by an individual, and a terminal connected to the terminal via a communication line. A personal communication system, comprising: a storage device connected to the mobile communication device, the storage device storing identification information and a personal identification code required for authenticating an individual in association with each other; The identification information of the device is detected, and the detected identification information is transmitted to the management device. When the management device receives the identification information and the password from the portable communication device, the received identification information is transmitted to the management device. It is checked whether the personal identification code matches the personal identification code stored in the storage means in association with the identification information of the portable communication device, and when the personal identification code matches, the individual who owns the portable communication device is checked. It stores the fact that the application for authentication has been made, and when the identification information is subsequently received from the terminal, whether the mobile communication device identified by the received identification information has previously applied for authentication is stored. A personal authentication system characterized by transmitting a reply of authentication OK to the terminal when it is confirmed that an application for authentication has been made. 2. The management device according to claim 1, wherein the personal identification code received from the portable communication device matches the personal identification code stored in the storage means in association with the identification information of the portable communication device. 2. The personal authentication system according to claim 1, further comprising means for transmitting a code completion reception signal to the portable communication device when the fact that an individual has applied for authentication is stored. 3. A terminal provided at a place to be authenticated and capable of detecting identification information of the portable communication device from a portable communication device owned by an individual, and a terminal connected to the terminal via a communication line. A personal communication system, comprising: a storage device connected to the mobile communication device, the storage device storing identification information and a personal identification code required for authenticating an individual in association with each other; Detecting the identification information of the mobile device, and transmitting the detected identification information to the management device. When the management device receives the identification information of the portable communication device from the terminal device, the management device uses the identification information. Calls the specified portable communication device, and thereafter, when receiving the personal identification code automatically transmitted from the portable communication device in response to the call, the received personal identification code is Confirming whether or not the password matches the password stored in the storage means in association with the identification information, and transmitting a response of the authentication OK to the terminal when confirming the coincidence. A personal authentication system, characterized in that: 4. A method for authenticating an individual using a portable communication device owned by the individual, wherein the identification information and the personal identification code of the portable communication device are transmitted in advance to the management device by the portable communication device. In advance, the terminal provided at the place to be authenticated detects the identification information of the portable communication device, and the terminal detecting the identification information of the portable communication device transmits the detected identification information to the communication line. When the management device receives the identification information and the security code from the portable communication device, the management device stores the received security code in the storage unit in association with the identification information of the portable communication device. Confirm whether the password matches the password, and remember that when the password matches, the individual who owns the mobile communication device has applied for authentication, and then identifies from the terminal. When the information is received, it is checked whether or not the mobile communication device identified by the received identification information has previously applied for authentication. OK for the machine
A personal authentication method characterized by sending a reply of 5. A method for authenticating an individual using a portable communication device owned by the individual, wherein the personal identification code is input and stored in the portable communication device in advance, and a place to be authenticated. The terminal provided with the mobile communication device detects the identification information of the mobile communication device, and the terminal device that has detected the identification information of the mobile communication device sends the detected identification information to the management device via a communication line. Upon receiving the identification information of the mobile communication device from the terminal, the mobile communication device specified by the identification information is called, and the mobile communication device that receives the call automatically transmits the previously input and stored personal identification code. The management device, which has transmitted the password to the management device and received the password from the mobile communication device, transmits the received security code to the password stored in the storage unit in association with the identification information of the mobile communication device. Whether to confirm that, if it is confirmed that there is a match,
A personal authentication method, comprising transmitting a reply of authentication OK to the terminal. 6. A management device for a personal authentication system that authenticates an individual using a portable communication device owned by the individual, comprising identification information and a personal identification code of the portable communication device required for authenticating the individual. Is provided in association with a terminal installed at the place to be authenticated, and can communicate with the mobile communication device. Upon receiving the code, it is checked whether or not the received security code matches the security code stored in the storage means in association with the identification information of the portable communication device. The fact that the individual who has the communication device has applied for authentication is stored, and when the identification information is subsequently received from the terminal, the mobile device specified by the received identification information is stored. Check if the communication device has previously applied for authentication, and if it is confirmed that the application for authentication has been made, send a reply of authentication OK to the above terminal. Management device.