JP2001331646A - System and method for financial transaction using fingerprint matching - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a financial transaction system which enables a user to use various financial services from a user terminal through a network after being identified by an authentication office having authenticating right. SOLUTION: This system comprises the user terminal 10, a portal site 20 (property information providing means), a public authentication station (terminal) 30, a financial institution (terminal) 40, and a communication network 100, such as the Internet, connecting them to one another and the user after being identified by the public authentication station (terminal) 30 through the network sends an identification certificate to the portal site 20 through the network to access the financial institution (terminal) 40 through the network, so that the user can use various financial services.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a financial transaction system and method via a network, and more particularly to a financial transaction system and method using a certificate issued by a certification authority having a certification authority as means for confirming the identity of a trader. About.

[0002]

2. Description of the Related Art Conventionally, when opening an account at a bank, the seal imprint of the notification seal is registered with the bank. When a bank is used to withdraw a deposit using a passbook, a payout slip with a registered seal is submitted to the bank. On the bank side, it is visually determined whether or not the seal imprint of the registered notification stamp and the seal imprint of the notification stamp pressed on the payout slip are the same. That is, when a bank is used to withdraw a deposit from a bank, a notification stamp is required. In Japan, a seal is widely used not only for banks and other financial institutions but also for various transactions according to conventional customs and laws in order to clarify the responsibility.

[0003] However, since it is common for a user to make transactions with a plurality of banks, in the above-described method, when a separate seal is used for transactions with a plurality of banks, which seal is used for which bank. There was a problem that it became unknown whether or not the user registered.

[0004] Further, when a deposit is withdrawn, the bank checks the imprint of the notification seal visually, and when the forged imprint is sophisticated, it cannot be visually discriminated. was there.

On the other hand, Japanese Unexamined Patent Application Publication No. 11-33894
No. 7 discloses a system in which personal identification information based on personal authentication information such as fingerprints is added to the current system, and a service is provided that enables a user to make a transaction without forgetting his / her PIN or carrying a passbook or card. Have been.

On the other hand, as a prior art, Japanese Patent Application 2000-
No. 019028 proposes an asset management ledger system capable of centrally managing asset information of related financial institutions for individual customers.

[0007]

However, the conventional example disclosed in Japanese Patent Application Laid-Open No. H11-338947 has the following problems.

[0008] Retaining personal data such as fingerprints in a database of a private organization such as a financial institution has a problem that the user may have anxiety such as data leakage or unauthorized use, and fingerprint identification prevents “spoofing”. However, there is a problem that data tapping and tampering cannot be prevented. Furthermore, it is premised that an account is opened only at the counter.
There was a problem that it was not possible to open an account for four hours.

The above-mentioned Japanese Patent Application No. 2000-019028
In the prior art, the asset management ledger for centrally managing an individual's financial assets is based on the assumption that an account has already been opened, and when an individual customer opens a new account, You will need to go to the institution or stamp the account request form and mail it. In addition, since the user ID and password are used as a means for confirming the identity, user IDs and passwords are required as many as the number of open accounts, and management is complicated and malicious third parties are not allowed. May be used illegally. Therefore,
There is a problem that there is certainly a trading partner on a network such as the Internet, and a means for certifying by a third party that the trading partner is indeed necessary is required.

[0010] It is an object of the present invention to easily carry out from account opening to various financial transactions using a terminal such as a computer when a user uses various financial services via a network. Financial transaction system and financial transaction method, that is, a financial transaction in which a user can use a variety of financial services in a financial transaction after a user terminal has been authenticated from a user terminal through a network by a certificate authority having authentication authority. To provide a trading system and a financial trading method.

[0011]

In order to achieve the above-mentioned object, a financial transaction system according to the present invention comprises a user terminal used by a user, and an authentication device having authentication authority in which user authentication information data is registered. An authentication terminal of the bureau, asset information providing means for providing user asset information, a financial institution terminal of the financial institution, a user terminal, an authentication terminal,
Comprising an asset information providing means and a network connecting the financial institution terminal, in response to an authentication request from the user terminal,
The authentication terminal issues an identity certificate certifying that the user is the identity of the user, transmits the identity certificate to the user terminal via the network, and the asset information providing means includes the identity certificate. In response to access from the user terminal, the identity of the user is confirmed using the personal certificate, the terminal of the financial institution is searched, and asset information data on the user's asset is collected. It is characterized in that a list is created and this asset information list is transmitted to a user terminal via a network.

In the financial transaction method according to the present invention, the authentication information data of a user is registered in advance in an authentication terminal of a certificate authority having an authentication right, and a user connects a network from the user terminal to the authentication terminal. By sending an authentication request encrypted by public key cryptography, the authentication terminal issues a common certificate on the system, which proves that the trader is the trader himself . The user sends this certificate during financial transactions on the network, and the asset information providing means receives this certificate to confirm that the user is the user himself, It is characterized by providing financial services.

Further, in the financial transaction system according to the present invention, the user encrypts the user ID and the fingerprint data using his / her own user terminal and sends it to the asset information providing means.
The asset information providing means sends the received encrypted user ID and fingerprint data to the authentication terminal via the network. The authentication terminal decrypts the received user ID and fingerprint data, and searches the user authentication information database. If your search confirms that you are who you are,
The authentication terminal issues an identity certificate and sends the identity certificate to the user terminal via the network. The user terminal presents the received personal certificate to the asset information providing means, and notifies that the user is who he claims to be. The asset information providing means receives the presentation of the personal certificate, extracts the savings and investment information of the user from all financial institution terminals opened by the user, and presents it to the user terminal as a unified management asset ledger.

Further, the user terminal has a function of transmitting a new account opening request form, a user ID, and a personal certificate of an arbitrary financial institution to the asset information providing means. Asset information provision means,
The received new account opening request, user ID and identity certificate are transmitted to the relevant financial institution terminal via the network. The financial institution terminal searches its own customer database using the received new account opening request form, user ID and personal certificate, and opens a new account. The financial institution terminal notifies the asset information providing means via the network that the account has been opened, and is reflected on the unified management asset ledger, and then notified to the user terminal.

In the conventional Internet banking service, when using the service, it was necessary to go to the window of each financial institution and open a new account, but with the above configuration, the present invention provides the authentication authority By registering the personal authentication data in the certification institution having possession, various services including account opening can be received from the asset information providing means to any financial institution. Further, in personal authentication, strong security can be realized by using a public key encryption method and a fingerprint collation technique together.

[0016]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram showing a configuration of a financial transaction system according to an embodiment of the present invention. As shown in FIG. 1, the financial transaction system according to the embodiment of the present invention includes a user terminal 10, a portal site 20 (asset information providing means), a public certificate authority (terminal) 30, and a financial institution (terminal). ) 40 and a communication network 100 such as the Internet for interconnecting them.

The user terminal 10 is an information processing device such as a personal computer. The user terminal 10 inputs a user ID for identifying each user, collects fingerprints of the users to create fingerprint data, and
It has a function of encrypting D and fingerprint data using a public key and transmitting the encrypted data to the portal site 20. In addition, the user terminal 10 presents an identity certificate for illuminating that the user is the identity and the user ID, and then displays the portal site 20.
And has a function of accessing the unified management asset ledger of the user. Further, the user terminal 10 has a function of transmitting a request to newly open an account to an arbitrary financial institution to the portal site 20.

Here, it is assumed that the user ID and the fingerprint of the user have been registered in the public certification authority (terminal) 30 in advance. When applying for registration with the public certification authority (terminal)
30 is a user ID which is a unique identifier on this system
And the public certification authority (terminal) 30 may register the user ID and the fingerprint data, and may notify the user of the user ID.

The portal site 20 is an information processing device such as a server. The portal site 20 has a function of transmitting the encrypted user ID and fingerprint data received from the user terminal 10 to the public certificate authority (terminal) 30 via the network 100. Further, the portal site 20 confirms that the user is the user himself / herself based on the user ID and the personal certificate, and checks the financial institution (terminal).
40, a function of extracting the savings and investment information of the user and presenting it to the user terminal 10 as a unified management asset ledger. Further, the portal site 20 receives the new account opening request form, the user ID, and the personal certificate from the user terminal 10, confirms that the user is the user himself, and checks the requested financial institution ( (Terminal) 40. In addition, the portal site 20 has a function of updating the unified management asset ledger of the user based on the new account opening notification received from the financial institution (terminal) 40 and presenting it to the user terminal 10.

The public certificate authority (terminal) 30 is an information processing device such as a server. And a public certificate authority (terminal) 30
Has a user authentication information database 31, decrypts the encrypted user ID and fingerprint data, searches the user authentication information database 31, and checks whether the user is indeed the user himself or herself. It has a function to do. If the user is the principal, a personal certificate is issued and the user terminal 1
0 has a function of transmitting a certificate.

The financial institution (terminal) 40 is an information processing device such as a server. The financial institution (terminal) 40 includes a customer database 41 that searches for savings and investment information of the user based on the user ID and the identity certificate received from the portal site 20. In addition, financial institution 4
0 has a function of opening a new account based on a new account opening request received from the portal site 20, a user ID, and a personal certificate, and transmitting an opening notice to the portal site 20. (Explanation of Operation of Embodiment) Next, the operation of the embodiment will be described in detail with reference to FIGS. here,
FIG. 2 is a diagram for explaining an operation of the financial transaction system according to the embodiment of the present invention. In the following description, it is assumed that the network 100 is the Internet.

Referring to FIG. 2, a user accesses a portal site 20 on the Internet 100 via his / her user terminal 10 and encrypts a user ID and fingerprint data by a public key encryption method. In, portal site 2
0 (step A1). Then, the portal site 20 transmits the encrypted user ID and fingerprint data to the public certificate authority (terminal) 30. The public certificate authority (terminal) 30 has a secret key, and in response, the user ID and fingerprint data transmitted from the portal site 20 to the public certificate authority (terminal) 30 are publicly available. Certificate Authority (terminal) 3
0 is decrypted (step A2). Next, the public certification authority (terminal) 30 searches the user authentication information database 31 using the decrypted user ID and fingerprint data to confirm the user (step A3). If the user is confirmed, the public certificate authority (terminal) 30 issues a personal certificate and transmits the personal certificate to the user terminal 10 (step A4). At this time, the portal site 20 which has received the personal certificate and the user ID via the user terminal 10 after encrypting the personal certificate with the public key, decrypts the personal certificate with the private key, and then uses it. The person himself / herself may be confirmed. The personal certificate may be transmitted to the user terminal 20 via the portal site 20.

After receiving the personal certificate, the user terminal 10 transmits the user ID and the personal certificate to the portal site 20 and requests asset information (step A5). Using the received user ID and certificate, the portal site 20 searches each financial institution (terminal) 40 for savings information and investment information of the user (step A).
6). The financial institution (terminal) 40 holds a customer database 41 from which the account information of the user can be searched by the user ID and the certificate, and transmits the account information in response to a request from the portal site 20 ( Step A7). The portal site 20 creates a unified asset management ledger for the user based on the account information collected from each financial institution (terminal) 40 and presents it to the user terminal 10 (step A).
8).

According to the financial transaction system having the above configuration, a public organization manages user authentication data in a centralized manner, authenticates each user via a network, and authenticates each user. The issued certificate can be used on the network.
By receiving a publicly-reliable certificate via the network, it is possible to confirm that the trader is the user, and furthermore, by using public key cryptography and fingerprint collation technology together, Users can verify their identity by using a public certificate authority from a user terminal via a network.
Various financial services can be used via a network using a user terminal.

Further, even when individual financial assets are present in individual financial institutions, individual financial assets can be centrally managed by the unified asset management ledger created by the portal site.

Next, another embodiment of the present invention will be described in detail with reference to the drawings. Here, FIG. 3 is a diagram for explaining the operation of the financial transaction system according to another embodiment of the present invention.

In a financial transaction system according to another embodiment of the present invention, a user transmits an encrypted user ID and fingerprint data using a user terminal 10 and a public certificate authority (terminal) 30. After the user's unified asset management ledger has been created using the personal certificate issued from (i.e., after the above embodiment), a request for opening a new account to any financial institution is made. , Differs from the previous embodiment.

As shown in FIG. 3, the user transmits a request for opening a new account to an arbitrary financial institution, a user ID, and a personal certificate from the user terminal 10 to the portal site 20 (step B1). After confirming the user himself / herself, the portal site 20 transmits the received new account opening request, the user ID and the identity certificate to the requested financial institution (terminal) 40 (step B2). . In the financial institution (terminal) 40, based on the received new account opening request form, user ID and identity certificate, the customer's
1 to open a new account for the user (step B3). The financial institution (terminal) 40 transmits an account opening notification to the portal site 20 immediately after opening the account (step B4). After receiving the account opening notice, the portal site 20 reflects the new account opening information in the user's unified asset management ledger and presents it to the user terminal 10 (step B5).

With the above configuration, in this embodiment, a user can open a new account at any financial institution using the user terminal 10 without going to the window of the financial institution. (Other Embodiments of the Present Invention) In the embodiments of the present invention, financial transactions have been described as targets.
As described above, the transaction system according to the present invention is also applicable to administrative services such as renewal of a vehicle license and renewal of a passport.

FIG. 4 is a diagram showing an embodiment as another application example of the present invention.
A portal site 20, a public certificate authority (terminal) 30, a financial institution (terminal) 40, an administrative institution (terminal) 50, and a communication network 100 such as the Internet for interconnecting these. The administrative institution (terminal) 50 has a database 51 which is a database of car license registrants or passport registrants, and the user follows a procedure similar to that of the above-described embodiment to execute the user ID. And the personal certificate are transmitted to the portal site 20. After the portal site 20 confirms the user identity, the portal site 20 transmits this to the administrative organization (terminal) 50. The administrative organization (terminal) 50 The database 51 is searched based on the user ID and the personal certificate, and registration information such as the vehicle license of the user is transmitted to the portal site 20. The portal site 20 creates a management ledger such as an automobile license and presents it to the user terminal. Further, the user terminal 10 has a function of transmitting a request for payment of a renewal fee such as an automobile license to the portal site 20. The user terminal 10 transmits the transfer request information, that is, the payment amount, the debit account information, and the transfer destination account information to the portal site 20, and the portal site 20 is described in the payment request received from the user terminal 10. The above-mentioned transfer request information is transmitted to the financial institution (terminal) 40 that has made the transfer. The financial institution (terminal) 40 performs renewal payment processing such as a vehicle license based on the received transfer request information, and issues a transfer notice to the administrative institution (terminal) 50 as a transfer destination,
A transfer processing completion notification is transmitted to the portal site 20. Upon receiving the transfer processing completion notification, the portal site 20 transmits the notification to the user terminal 10 immediately.

With the above configuration, in this embodiment, the user uses the user terminal 10 to update the vehicle license and pay the renewal fee without going to the window of the financial institution or the administrative institution. Processing (financial transactions) can be performed.

[0033]

As described above, according to the present invention,
As a first effect, by setting up a public certificate authority, the reliability of identity verification can be guaranteed, and anxiety of a user who fears leakage of personal data such as fingerprint data can be eliminated. As a second effect, by performing identity verification using a public key cryptosystem and fingerprint data, a strong security system that prevents unauthorized use such as "sniffing, falsification, and impersonation" can be realized. Further, as a third effect, by centrally managing the user authentication information data by the certificate authority, the user can eliminate the trouble of managing the user ID and password for each financial institution. As a fourth effect, the user can open an account of an arbitrary financial institution via the network without going to the window of each financial institution.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a financial transaction system according to an embodiment of the present invention.

FIG. 2 is a diagram for explaining an operation of the financial transaction system according to the embodiment of the present invention.

FIG. 3 is a diagram for explaining an operation of a financial transaction system according to another embodiment of the present invention.

FIG. 4 is a diagram showing an embodiment as another application example of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 User terminal 20 Portal site 30 Public certificate authority (terminal) 31 User authentication information database 40 Financial institution (terminal) 41 Customer database 50 Administrative institution (terminal) 51 Database 100 Internet

Claims (9)

[Claims] 1. A user terminal used by a user, an authentication terminal of a certification authority having authentication authority in which user authentication information data is registered, and asset information providing means for providing user asset information. A financial institution terminal provided by the financial institution; a user terminal; the authentication terminal; the asset information providing means; and a network connecting the financial institution terminal; and in response to an authentication request from the user terminal. The authentication terminal issues an identity certificate that certifies that the user is the identity of the user, transmits the identity certificate to the user terminal via the network, and the asset information providing unit includes: In response to the access from the user terminal accompanied by the personal certificate, the identity of the user is confirmed using the personal certificate, and the terminal of the financial institution is searched and the property of the user is determined. Financial transaction system which collects asset information data, to create the asset information list from the asset information data, and transmits the asset information list via the network to the user terminal. 2. The asset information providing means further confirms the identity of the user using the personal certificate in response to an account opening request from the user terminal accompanied by the personal certificate, and The account opening request is transmitted to the financial institution terminal designated by the account opening request via the network, the account information regarding the account opened by the financial institution terminal is received via the network, and the asset is used by using the account information. The financial transaction system according to claim 1, wherein the information list is updated, and the updated asset information list is transmitted to the user terminal via the network. 3. A user terminal used by a user, an authentication terminal of a certification authority having authentication authority in which user authentication information data is registered, and an asset information providing means for providing asset information of the user. A financial institution terminal that the financial institution has; a user terminal; the authentication terminal; the asset information providing means; and a network connecting the financial institution terminal; and the user terminal is connected via the network. A function of transmitting an authentication request including authentication information data to the asset information providing means, and a function of receiving a personal certificate certifying that the user is a user from the authentication terminal via the network; A function of transmitting an asset information request or an account opening request accompanied by the personal certificate to the asset information providing means via the network, and the asset information providing means And a function of displaying a list of asset information transmitted through the network, wherein the authentication terminal receives the authentication request transmitted from the asset information providing unit through the network; and When the registered authentication information data and the authentication information data included in the authentication request match, the personal certificate is created, and the personal certificate is transmitted to the user terminal that transmitted the authentication request via the network. The asset information providing unit receives the authentication request from the user terminal, and transmits the authentication request to the authentication terminal; and the asset information request from the user terminal. And a function of confirming that the user who transmitted the asset information request is the user himself, using the personal certificate, and via the network A function of searching each financial institution terminal, collecting the asset information data that the user has in each financial institution, and creating an asset information list based on the collected asset information data, and transmitting the asset information request A function of transmitting the asset information list to the user terminal via the network, receiving the account opening request from the user terminal, and using the personal certificate, transmitting the account opening request to the user who has transmitted the account opening request. A function of confirming the identity of the user, a function of transmitting the account opening request to the financial institution terminal specified in the account opening request via the network, and a function of transmitting from the financial institution terminal via the network. Having the function of receiving the transmitted account information relating to the account opened by the financial institution terminal and updating the asset information list using the account information; The institution terminal transmits the asset information data of the user to the asset information providing unit in response to the search from the asset information providing unit, and transmits the account opening request transmitted from the asset information providing unit. A financial transaction system having a function of receiving and opening a new account, and a function of transmitting account information on the opened account to the asset information providing means. 4. The registered authentication information data is fingerprint data of a user, and the authentication request includes at least an identifier for identifying each user and fingerprint data of the user. The financial transaction system according to claim 1, wherein the financial transaction system is encrypted. 5. The financial transaction system according to claim 1, wherein said network is the Internet. 6. A user terminal used by a user, an authentication terminal of a certification authority having authentication authority in which user authentication information data is registered, and asset information providing means for providing user asset information. In a financial transaction system comprising a financial institution terminal of a financial institution, the user terminal, the authentication terminal, the asset information providing means, and a network connecting the financial institution terminal, the asset information providing means comprises: , Via the network,
Receiving an authentication request including authentication information data from the user terminal and transmitting the authentication request to the authentication terminal; andthe asset information providing unit determines that the user is the user himself / herself from the authentication terminal. Receiving an identity certificate to be proved via the network, and transmitting the identity certificate to the user terminal; wherein the asset information providing means sends an asset information request accompanied by the identity certificate from the user terminal. Receiving via the network; the asset information providing means confirming that the user who transmitted the asset information request is the user himself, using the personal certificate; Asset information providing means searches for each financial institution terminal via the network and collects asset information data possessed by the user at each financial institution. And the asset information providing unit creates an asset information list based on the collected asset information data, and transmits the asset information list to the user terminal that transmitted the asset information request via the network. And a financial transaction method comprising: 7. A user terminal used by a user, an authentication terminal of a certification authority having authentication authority in which authentication information data of the user is registered, and asset information providing means for providing asset information of the user. In a financial transaction system comprising a financial institution terminal of a financial institution, the user terminal, the authentication terminal, the asset information providing means, and a network connecting the financial institution terminal, the asset information providing means comprises: , Via the network,
Receiving an authentication request including authentication information data from the user terminal and transmitting the authentication request to the authentication terminal; andthe asset information providing unit determines that the user is the user himself / herself from the authentication terminal. Receiving a personal certificate to be proved via the network, and transmitting the personal certificate to the user terminal; wherein the asset information providing means transmits an account opening request accompanied by the personal certificate from the user terminal. Receiving via the network; the asset information providing means confirming that the user who transmitted the account opening request is the user himself, using the personal certificate; Transmitting, via the network, the account opening request to the financial institution terminal designated by the account opening request; Financial transaction method asset information providing means, said transmitted over the network from the financial institution terminal receives the account information about the account opened, and a step of reflecting the account information to the asset information list. 8. The authentication information data is a user's fingerprint data, and the authentication request includes at least an identifier for identifying each user and the user's fingerprint data, and is encrypted by a public key cryptosystem. The financial transaction method according to claim 6, wherein the financial transaction method is performed. 9. The financial transaction method according to claim 6, wherein said network is the Internet.