JP2001325436A - System and method for integrating authentication - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system and a method for integrating authentication, by which all financial institutions can be utilized by using one card, frequency to forget a password ID is lowered and the frequency of a card loss can be lowered. SOLUTION: A user is authenticated by an integrated card authenticating part 10 from a password number received from an ATM 14 and an integrated card password number (A) registered in an integrated information DB 18 and on the basis of card information (C) registered in the integrated information DB 18, a connection with the ATM 14 is instructed to the computer of a financial institution 1 registered in the integrated information DB 18 by a financial institution access part 11.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to an authentication integration system and an authentication integration method for authenticating a user, and more particularly to an authentication integration system and an authentication integration method for authenticating a user to a plurality of cards issued by a financial institution. .

[0002]

2. Description of the Related Art Conventionally, cash cards and credit cards used in financial institutions such as banks and credit companies have been provided to users for each financial institution, and users have many cash cards and credit cards. are doing.

[0003] Further, when a financial institution or the like accesses an online site established on the Internet by using the Internet, each of the online sites is connected to perform authentication processing of a user such as an online ID. Had to do.

[0004]

However, in the prior art, the user needs to manage a large number of cash cards and credit card-specific passwords, so that forgetting the password makes the cash card and credit card unusable. There is a problem that the frequency of occurrence of the cases increases and the frequency of loss of the cash card and the credit card increases because of possession of many cash cards and credit cards.

[0005] Further, in the prior art, since the user needs to manage the online ID for each online site, there is a problem that the frequency of cases in which access to the online site becomes impossible due to forgetting the online ID increases. there were.

[0006] The present invention has been made in view of such a problem, and an object of the present invention is to use each financial institution by using one card and one online ID assigned to the card. It is an object of the present invention to provide an authentication integration system and an authentication integration method that can access each online site, reduce the frequency of forgetting passwords and online IDs, and reduce the frequency of card loss. .

[0007]

Means for Solving the Problems In order to solve the above problems, the present invention has the following constitution. The gist of the invention according to claim 1 is an authentication integrated system for authenticating a user, comprising: an integrated card storing integrated card recognition information;
An integrated information database in which an integrated card PIN and card information of a plurality of cards issued by a financial institution are registered in association with the integrated card recognition information stored in the integrated card; User authentication means for authenticating the user by comparing the integrated card password registered in association with the integrated card recognition information input to the terminal and the password input by the user to the operation terminal, And a financial institution access means for instructing the computer of the financial institution of the card information of the card information registered in the integrated information database to connect to the operation terminal when the user authentication is performed by the user authentication means. An authentication integration system is provided. The gist of the invention described in claim 2 is that the integrated information database indicates, as the card information, the financial institution, a password, and whether or not the password has been input for each of a plurality of cards issued by the financial institution. 2. The authentication integration system according to claim 1, wherein the input presence information is registered. The gist of the invention described in claim 3 is that, when the input presence / absence information indicating that the password has been entered is registered, the computer of the financial institution authenticates the user. An authentication integration system according to claim 1 or 2. The gist of the invention described in claim 4 is that the integrated information database is associated with the integrated card identification information stored in the integrated card and the integrated card password and the card information.
Internet user authentication means for registering D, comparing the input online ID input by the user received via the Internet with the online ID registered in the integrated information database, and authenticating the user; When the user is authenticated by the Internet user authentication means, the computer of the financial institution of the card information of the card information registered in the integrated information database is used to access the online site of the financial institution from the user. An authentication integrated system according to any one of claims 1 to 3, further comprising an online site access means for instructing permission. According to a fifth aspect of the present invention, there is provided an authentication integration method for authenticating a user, wherein an integrated card password and a financial institution are associated with integrated card identification information stored in the integrated card issued to the user. Register the card information of a plurality of cards issued by the user, the integrated card password registered in association with the integrated card recognition information input to the operation terminal and the password input by the user to the operation terminal and The authentication of the user is performed by comparing, and when the authentication of the user is performed, the computer of the financial institution of the registered card information is instructed to connect to the operation terminal. The authentication integration method. The gist of the invention described in claim 6 is that, as the card information, the financial institution, a password, and input presence / absence information indicating presence / absence of the password are registered for each of a plurality of cards issued by the financial institution. The authentication integration method according to claim 5, wherein The gist of the invention described in claim 7 is that, when the input presence / absence information indicating the presence of the password has been registered, the user of the financial institution is authenticated by a computer of the financial institution. Item 5 or 6 relates to the authentication integration method. The gist of the invention according to claim 8 is that an online ID is registered together with the integrated card password and the card information in association with the integrated card recognition information stored in the integrated card and received via the Internet. The input online ID input by the user is compared with the registered online ID to authenticate the user, and when the user is authenticated by the authentication, the registered card The authentication integration method according to any one of claims 5 to 7, wherein the computer of the financial institution of the information is instructed to permit the user to access the online site of the financial institution.

[0008]

Embodiments of the present invention will be described below in detail with reference to the drawings.

FIG. 1 is a block diagram showing a configuration of an embodiment of an authentication integration system according to the present invention, and FIG. 2 is a diagram showing contents stored in an integration information DB shown in FIG.

The integrated system 8 according to the present embodiment has a D
B registration update unit 9, integrated card authentication unit 10, financial institution access unit 11, online site access unit 12
, An Internet authentication unit 13, and an integrated information DB 18, which is a database for managing card information. The integrated card authentication unit 10 is connected to an ATM 14, which is an operation terminal of the user, via a communication line. 9 and the financial institution access unit 11 are connected to the bank 2, the credit company 3 and the other company 4 of the financial institution 1 via a communication line, respectively.
The user is connected to a terminal 16 and a mobile phone 17 owned by the user via the Internet 15, and the online site access unit 12 is connected to online sites 5 to 7 of the financial institution 1 via communication lines.

The DB registration / updating unit 9 registers and updates the integrated information DB 18, and receives the integrated card password (A) received from the financial institution 1 and the online ID (B).
And the card information (C) of a plurality of cash cards and credit cards owned by the user into integrated information D
Register in B18.

The integrated card authentication unit 10 compares the personal identification number received from the ATM 14 with the integrated card personal identification number (A) registered in the integrated information DB 18 and authenticates the user when both are the same. I do.

The financial institution access unit 11 performs integration based on the card information (C) registered in the integrated information DB 18 based on the notification from the integrated card authentication unit 10 indicating that the user has been authenticated. The computer of the financial institution 1 registered in the information DB 18 is instructed to connect to the ATM 14.

Based on the notification from the Internet authentication unit 13 indicating that the user has been authenticated, the online site access unit 12 creates the integrated information based on the card information (C) registered in the integrated information DB 18. The computer of the financial institution 1 registered in the DB 18 is instructed to connect to the terminal 16 or the mobile phone 17.

The Internet authentication unit 13 receives the input online ID received from the terminal 16 or the mobile phone 17.
And the online ID registered in the integrated information DB 18
A comparison is made with (B), and if they are the same, the user is authenticated.

The integrated information DB 18 stores, for each integrated card issued to the user, an integrated card password (A), an online ID (B), and card information (a plurality of cash cards and credit cards owned by the user). C) is a database for registering, as card information (C), a plurality of cash institutions and credit card financial institutions owned by the user, a password, and information indicating whether or not to enter a password. The presence or absence of a certain input (D) is registered.

Next, the operation of the embodiment will be described in detail with reference to FIG. FIG. 3 is an explanatory diagram for explaining the operation of the embodiment of the authentication integration system according to the present invention.

First, the integration of user authentication by the integrated card will be described. The user requests the financial institution 1
The financial institution 1 requests the issuance of the integrated card by designating the integrated card PIN (A), and the financial institution 1 receiving the request issues the integrated card PIN (A) and a plurality of cash cards and credit cards owned by the user. DB registration update unit 9 together with the recognition information of the integrated card that issues the card information (C)
(301), and the DB registration / update section 9 registers the received integrated card password (A) and card information (C) in the integrated information DB 18 in association with the integrated card recognition information (302).

The card information (C) registered in the integrated information DB 18 may be based on information known by the financial institution 1 that has received a request for issuing an integrated card from a user.
It may be provided by the user at the time of requesting issuance of the integrated card. Further, in the card information (C) registered in the integrated information DB 18, a password and input presence / absence (D) indicating whether or not to input the password are registered for each financial institution 1 to be registered. The password for each institution 1 and the presence / absence of input (D) are provided by the user at the time of requesting issuance of the integrated card.

After confirming the registration of the integrated card password (A) and the card information (C) in the integrated information DB 18, the financial institution 1 stores the recognition information of the integrated card in a magnetic stripe or the like for the user. Issue integrated cards.
Further, even when the number of cash cards or credit cards owned by the user increases, the card information (C) is additionally registered in the integrated information DB 18 by the same procedure.

The integrated card obtained by the user is transferred to the ATM 14
When used from the ATM, the ATM 14 transmits the integrated card identification information and the input personal identification number to the integrated card authentication part 10 (303), and the integrated card authentication part 10 integrates the received personal identification number with the integrated information DB 18 A comparison is made with an integrated card password (A) registered in association with the recognition information of the card, and when both are the same, the user is authenticated.

Integrated card authentication unit 10 that has authenticated the user
Notifies the financial institution access unit 11 that the user has been authenticated (304), and based on the notification, the financial institution access unit 11 uses the card information (C) registered in the integrated information DB 18 based on the card information (C). The computer of the financial institution 1 registered in the integrated information DB 18 is instructed to connect to the ATM 14 (305), and the computer of the financial institution 1 registered in the integrated information DB 18 is connected to the ATM 14 by the instruction. Thereby, if necessary, the user can access all the computers of the financial institution 1 registered in the integrated information DB 18 at one time (306).

When user authentication is performed by the integrated card authentication unit 10, the integrated card authentication unit 10
Can display the name of the financial institution 1 registered in the integrated information DB 18 and allow the user to select the financial institution 1 to be processed. In this case, the financial institution access unit 11 makes the selection by the user. The computer of the financial institution 1 is instructed to connect to the ATM 14 (30).
5).

In the card information (C) of the integrated information DB 18, the presence or absence of input (D), which is information indicating whether or not a password is input for each registered financial institution 1, is registered. When the user accesses the financial institution 1 in which the presence / absence (D) is “○”, the user needs to enter a password. In addition to the password for the integrated card (A), a password is input to perform double user authentication, thereby improving security. Conversely, when the user accesses the financial institution 1 whose input presence / absence (D) is "x", each financial institution does not need to enter a password and only inputs the integrated card password (A). 1
Can be accessed.

Next, integration of user authentication using an online ID will be described. The user requests the acquisition of the online ID (B) together with the issuance request of the integrated card, and the financial institution 1 having received the request transmits the online ID
(B) and the assigned online ID
(B) is transmitted to the DB registration updating unit 9 (301), and the DB registration updating unit 9 registers the received online ID (B) in the integrated information DB 18 together with the integrated card password (A) and the card information (C). (302).

After confirming the registration of the integrated card password (A), card information (C) and online ID (B) in the integrated information DB 18, the financial institution 1 issues an integrated card to the user and After receiving the online ID from the financial institution 1, the user connects the terminal 16 or the mobile phone 17 to the Internet 15 (307), and performs Internet authentication of the integrated system 8 via the Internet 15. Connect to the unit 13 (308).

When connecting the terminal 16 or the mobile phone 17 to the Internet authentication unit 13, the Internet authentication unit 13 stores the input online ID transmitted for user authentication and the integrated information DB 18 in order to prevent unauthorized access. A comparison is made with the registered online ID (B), and when both are the same, the user is authenticated.

Internet authentication unit 1 that has authenticated the user
3 notifies the online site access unit 12 that the user has been authenticated (309). Based on the notification, the online site access unit 12 uses the card information (C) registered in the integrated information DB 18 as a basis. , Integrated information DB1
8 to the computer of the financial institution 1 registered in the terminal 1.
6 or a command to connect to the mobile phone 17 (310),
The computer of the financial institution 1 registered in the integrated information DB 18 according to the instruction causes the online site 5 to correspond to the card information (C) registered in the integrated information DB 18.
7 and the terminal 16 or the mobile phone 17 can be connected via the Internet 15. If necessary, the user can access all of the online sites 5 to 7 corresponding to the card information (C) registered in the integrated information DB 18 at a time (311).

As described above, according to the present embodiment, by using one integrated card obtained by integrating many cash cards and credit cards and the online ID given to the integrated card, Since it is possible to use a financial institution and to access each online site, there is an effect that the frequency of forgetting the personal identification number and the online ID can be reduced, and the frequency of card loss can be reduced.

Further, according to the present embodiment, since information indicating whether or not to enter a password is registered for each financial institution, double user authentication can be performed depending on the usage. Therefore, there is an effect that security is improved.

It should be noted that the present invention is not limited to the above embodiments, and it is clear that the embodiments can be appropriately modified within the scope of the technical idea of the present invention. Further, the number, position, shape, and the like of the constituent members are not limited to the above-described embodiment, but can be set to numbers, positions, shapes, and the like suitable for carrying out the present invention. In the drawings, the same components are denoted by the same reference numerals.

[0032]

According to the authentication integration system and the authentication integration method of the present invention, each of the integrated cards and the credit card is integrated by using one integrated card and the online ID given to the integrated card. Since it is possible to use a financial institution and to access each online site, it is possible to reduce the frequency of forgetting a personal identification number and an online ID and to reduce the frequency of card loss.

Further, in the authentication integration system and the authentication integration method of the present invention, information indicating whether or not to input a password is registered for each financial institution. Since it can be performed, the effect of improving security is achieved.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of an embodiment of an authentication integration system according to the present invention.

FIG. 2 is a diagram showing contents stored in an integrated information DB shown in FIG. 1;

FIG. 3 is an explanatory diagram for explaining an operation of the embodiment of the authentication integration system according to the present invention;

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Financial institution 2 Bank 3 Credit company 4 Other company 5-7 Online site 8 Integrated system 9 DB registration update part 10 Integrated card authentication part 11 Financial institution access part 12 Online site access part 13 Internet authentication part 14 ATM 15 Internet 16 Terminal 17 Mobile phone 18 Integrated information DB

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G06K 19/10 G06K 19/00 Q G07D 9/00 461 R

Claims (8)

[Claims] 1. An integrated authentication system for authenticating a user, comprising: an integrated card storing integrated card identification information; and an integrated card password associated with the integrated card identification information stored in the integrated card. An integrated information database in which a number and card information of a plurality of cards issued by the financial institution are registered; and the integrated card registered in the integrated information database in association with the integrated card recognition information input to the operation terminal. User authentication means for comparing the personal identification number and the personal identification number inputted by the user to the operation terminal to authenticate the user; and when the user is authenticated by the user authentication means, the integrated information database Financial institution access to instruct a computer of the financial institution of the card information registered in the financial institution to connect to the operation terminal. Authentication integrated system characterized by comprising a means. 2. The integrated information database includes, as the card information, the financial institution, a password, and input / non-input information indicating whether or not the password has been input for each of a plurality of cards issued by the financial institution. 2. The authentication integration system according to claim 1, wherein the authentication is integrated. 3. The system according to claim 1, wherein when the input presence / absence information indicating that the password has been entered is registered, the computer of the financial institution authenticates the user. Authentication integration system. 4. The integrated information database registers an online ID together with the integrated card password and the card information in association with the integrated card identification information stored in the integrated card, and receives the online ID via the Internet. Internet user authentication means for comparing the input online ID input by the user with the online ID registered in the integrated information database to authenticate the user, and the Internet user authentication means authenticates the user. Online site access means for instructing the computer of the financial institution of the card information registered in the integrated information database to permit the user to access the online site of the financial institution when performed. A contract characterized by Authentication integrated system according to any one of claim 1 to 3. 5. An authentication integration method for authenticating a user, wherein the integrated card password and a plurality of cards issued by a financial institution are associated with integrated card identification information stored in the integrated card issued to the user. The integrated card password registered in association with the integrated card recognition information input to the operation terminal is compared with the password input by the user to the operation terminal, and the user is registered. And when the user is authenticated, instructing a computer of the financial institution of the registered card information to connect to the operation terminal. 6. The card information, wherein the financial institution, a password, and input presence / absence information indicating whether or not the password has been entered are registered for each of a plurality of cards issued by the financial institution. Item 5. The authentication integration method according to Item 5. 7. The authentication method according to claim 5, wherein when the input presence / absence information indicating presence / absence of the input of the password is registered, the user of the user is authenticated by a computer of the financial institution. Authentication integration method. 8. Registering an online ID together with the integrated card password and the card information in association with the integrated card identification information stored in the integrated card, and inputting the information received by the user via the Internet The online ID and the registered online ID are compared to authenticate the user. If the user is authenticated by the authentication, the registered card information of the financial institution is The authentication integration method according to any one of claims 5 to 7, wherein the computer is instructed to permit the user to access the online site of the financial institution.