JP2002063142A - Authentication system, authentication terminal, authentication server and authentication method - Google Patents

Abstract

(57) [Problem] To provide a highly secure authentication system, an authentication terminal, an authentication server, and an authentication method for identifying a user using a card. An authentication terminal (2) for reading data contained in a card and an authentication server (3) are connected to a network (4) to authenticate a user of the card (eg, credit card 5) (eg, a credit card authentication system). In 1), the card has an encrypted image 6 in which the identification information of the card user and the user information are encrypted and hidden by a code having a specific color (for example, two-dimensional barcodes 7 and 8). , The authentication terminal reads an encrypted image from the card, extracts an image having a specific color corresponding to the identification information to obtain a code, decodes the code to obtain identification information, When the identification information matches the input information entered by the user,
The data read from the card is transmitted to the authentication server, and the authentication server generates a user authentication result based on the received data, and transmits an authentication result signal based on the authentication result to the authentication terminal.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to an authentication system, an authentication terminal, an authentication server, and an authentication method for identifying a user using a card.

[0002]

2. Description of the Related Art Conventionally, a credit card is generally known as a personal information medium in which personal identification information is encrypted and distributed on a card. As the encryption part, for example,
Black and white barcode, two-dimensional barcode, magnetic tape, I
C chip and the like. And when paying with a credit card, the dedicated device reads the encrypted part of the card,
The information was sent to the credit card company for verification, and the card holder signed the slip to verify the identity.

[0003]

However, conventional barcodes, magnetic tapes, and IC chips, although encrypted, lack the confidentiality of information because the information itself is exposed to the outside, although it is encrypted. There was a risk of decryption. In addition, there was a problem of information leakage due to modification of dedicated equipment and interruption of the line. In addition, since magnetic tapes and IC chips are easy to rewrite, cards are easily forged,
Damage due to unauthorized use of counterfeit cards was increasing. Furthermore, since the cardholder's signature is directly written on the card and anyone can easily forge it, the damage caused by unauthorized use of the stolen card has increased.

The present invention has been made in view of the above circumstances, and has as its object to provide a highly secure authentication system, an authentication terminal, an authentication server, and an authentication method for identifying a user using a card. .

[0005]

To solve the above-mentioned problems, for example, as shown in FIGS. 1 to 5, the invention according to claim 1 is an authentication terminal for reading data contained in a card.
And an authentication server 3 connected to the network 4 to authenticate a user of the card (for example, the credit card 5) in the authentication system (for example, the credit card authentication system 1). And the user information have an encrypted image 6 that is encrypted and hidden by a code (for example, two-dimensional barcodes 7 and 8) having a specific color, and the authentication terminal reads the encrypted image from the card and Extracting an image having a specific color corresponding to the identification information to obtain a code, decoding the code to obtain identification information, and the obtained identification information matches the input information input by the user. Sometimes the data read from the card is transmitted to the authentication server, the authentication server generates a user authentication result based on the received data, The authentication result signal based on the testimony result is characterized by transmitting to the authentication terminal.

According to the first aspect of the present invention, an authentication terminal reads an encrypted image from a card, extracts an image having a specific color corresponding to the identification information, acquires a code, and decodes the code. Acquires the identification information and sends the data read from the card to the authentication server when the acquired identification information matches the input information input by the user, so that, for example, whether the input information input by the user is correct Can be determined, and the user can be authenticated. The identification information is typically a password, but may be a user's signature. The user's signature may be included in the user information. In this case, since the signature is not directly displayed on the card, it is difficult to forge the signature, and it is possible to prevent unauthorized use of the card.

Here, the network is typically a public telephone line, but is not limited to this, and may be a dedicated network including a corporate network or an Internet communication network. The card may be any card for identifying a card user, such as a credit card, a bank card, a card in an intelligent building, and the like. The code is, for example, a one-dimensional barcode, a two-dimensional barcode, a holograph, or the like, but may be any other encrypted code. The specific color is determined by, for example, the ratio of cyan, magenta, yellow, black, and the like, and may be arbitrarily set.
The encryption image may be any image in which a code having a specific color is hidden in an arbitrary image.
It may be based on images taken from landscape photos,
An image based on an artificially created image (for example, a mosaic image) may be used.

According to a second aspect of the present invention, in the authentication system according to the first aspect, the data transmitted by the authentication terminal to the authentication server includes data of an encrypted image read from a card and identification information, and the authentication server Extracting an image having a specific color corresponding to the user information from the encrypted image data based on the received identification information to obtain a code,
It is characterized in that it decodes this code to obtain user information and generates a user authentication result.

According to the second aspect of the present invention, the user information is transmitted in the form of encrypted image data, and the authentication server analyzes the encrypted image data. Therefore, it is possible to prevent information leakage due to line interruption or unauthorized modification of the terminal. be able to. Therefore,
Authentication of a user with higher security can be performed.

According to a third aspect of the present invention, there is provided an authentication terminal 2 connected to an authentication server 3 via a network 4 for reading data contained in a card (for example, a credit card 5) and authenticating a user of the card. Image reading for reading an encrypted image of the card having an encrypted image 6 in which the identification information of the user of the card and the user information are encrypted by a code (for example, a two-dimensional bar code 7, 8) having a specific color and hidden. Means (for example, image reading unit 22)
Image analysis for extracting an image having a specific color corresponding to the identification information from the encrypted image data read by the image reading means to obtain a code, and decoding the obtained code to obtain the identification information Means (for example, the image analysis unit 23), and a transmitting means for transmitting the encrypted image data read by the image reading means to the authentication server when the acquired identification information matches the identification information inputted by the user ( For example, a transmitting unit 25) and a receiving unit (for example, the receiving unit 26) for receiving an authentication result based on the encrypted image data transmitted by the transmitting unit from the authentication server are provided. .

According to the third aspect of the present invention, the image analysis means extracts an image having a specific color corresponding to the identification information from the encrypted image data read by the image reading means to obtain a code, and obtains the code. Is decrypted to obtain the identification information, so that the identification information of the card user hidden in the encrypted image can be obtained. Further, when the acquired identification information matches the identification information input by the user, the encrypted image data is transmitted to the authentication server, and the authentication result based on the transmitted encrypted image data is received from the authentication server. In addition, leakage of user information due to interruption of a line can be prevented.

According to a fourth aspect of the present invention, in the authentication terminal according to the third aspect, when the received authentication result includes a permission signal for permitting reading of the user information,
The image analysis unit, based on the arrangement information of the code corresponding to the user information, determined from the encrypted image data, based on the code arrangement information corresponding to the user information, the image having the specific color of the code corresponding to the user information Extract and get the code,
It is characterized in that it decodes this code to obtain user information.

According to the fourth aspect of the present invention, when the received authentication result includes a permission signal for permitting the user information to be read, a code corresponding to the user information, which is defined corresponding to the identification information. Based on the arrangement information of the terminal, the image having the specific color of the code corresponding to the user information is extracted and the user information is obtained. Therefore, if the permission signal is not obtained, the user information cannot be obtained. Leakage can be prevented, and an authentication terminal with higher security can be provided.

Here, the arrangement information of the code corresponding to the user information may be determined based on, for example, a random number corresponding to the identification information, or may be obtained by a predetermined calculation formula from the identification information and the date of birth of the user. It may be determined based on a given value or may be arbitrarily determined.

According to a fifth aspect of the present invention, in the authentication terminal according to the third or fourth aspect, a signature input device (for example, a tablet-type character input device 27) and whether input information input to the signature input device is correct. And a determination means (for example, CPU 20) for determining whether or not the determination is made. According to the fifth aspect of the present invention, since the user inputs the signature directly with the signature input device and does not write the signature on paper or the like, the signature does not remain on the paper or the like, and it is difficult to forge the signature. Therefore, unauthorized use and forgery of the card can be prevented, and an authentication system with higher security can be provided. In addition, since there is provided a judging means for judging whether the input information inputted to the signature input device is correct, the authentication of the user can be automated.

According to a sixth aspect of the present invention, in the authentication terminal according to any one of the third to fifth aspects, the authentication terminal has an identification number unique to the terminal, and the transmitting means reads the identification number from the card. The transmitted encrypted image data is transmitted to the authentication server together with the encrypted image data. According to the invention as set forth in claim 6, since the identification number unique to the terminal is transmitted to the authentication server together with the encrypted image data read from the card, unauthorized use of the terminal can be prevented, and the authentication terminal with higher security Can be provided.

According to a seventh aspect of the present invention, in the authentication terminal according to any one of the fourth to sixth aspects, the authentication terminal includes a code arrangement information set corresponding to the identification information and corresponding to the user information. Storage means (for example, RO
M21a), wherein the storage means loses the stored contents when the power supply is stopped. Claim 7
According to the invention described in the above, the storage means loses the code arrangement information corresponding to the stored user information when the power supply is stopped. Therefore, when the storage means is removed from the terminal, the card data cannot be read, and the terminal is illegally used. Can prevent information leakage.

According to an eighth aspect of the present invention, there is provided an authentication server which is connected to an authentication terminal via a network and reads data contained in a card (for example, a credit card) to authenticate a user of the card. Receiving means (for example, receiving the encrypted image data and the user identification information, which are transmitted from the authentication terminal and are hidden by encrypting the user information into a code (for example, a two-dimensional barcode 8) having a specific color. A receiving unit 31), based on the identification information, extracts an image having the specific color from the encrypted image data to obtain a code, decodes the code, and obtains the user information. For example, the image analysis unit 33) and a generation unit (for example, the CPU 30) that generates a user authentication result based on the acquired user information.
And a transmission unit (for example, the transmission unit 35) for transmitting the authentication result generated by the generation unit to the authentication terminal.

According to the present invention, the authentication server extracts an image having a specific color from the received encrypted image data based on the identification information to obtain a code, decodes the code, and decodes the code. Because the information is obtained, it is possible to decrypt the code with a specific color hidden in the encrypted image,
By acquiring the user information of the card user, the user can be authenticated.

According to a ninth aspect of the present invention, in the authentication method for authenticating a user of the card, wherein an authentication terminal for reading data contained in the card and an authentication server are connected to a network, the card includes user identification information. And an encrypted image in which the user information is encrypted and hidden in a code having a specific color, and the authentication method reads the encrypted image of the card in the authentication terminal (for example,
Step S102) and a step of extracting an image having a specific color corresponding to the identification information from the read encrypted image data to obtain a code, decoding the code, and obtaining the identification information (for example, step S102). S103) and transmitting the read encrypted image data to the authentication server when the acquired identification information matches the input information input by the user (for example, step S107).
Receiving an authentication result based on the transmitted image data from the authentication server (for example, step S1).
10).

[0021]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An authentication system according to the present invention will be described below with reference to the drawings. FIG. 1 is a configuration diagram showing a credit card authentication system 1 according to one embodiment of the present invention. In the credit card authentication system 1, an authentication terminal 2 and an authentication server 3 are connected via a network 4. In the present system 1, a user of a credit card 5 as shown in FIG. 2 purchases a product at a credit card member store or the like in which the authentication terminal 2 is installed, receives a service, and uses the credit card 5 for payment.
Authentication of the card user is received from the authentication server 3 through the authentication terminal 2. The network 4 is, for example, a public telephone line.

The card 5 has user identification information, for example, a password, and user information, for example, name, face photograph,
An image 6 in which a date of birth, a sign, and the like are hidden by being converted into a two-dimensional bar code is displayed.
It is printed on. In the present embodiment, two two-dimensional barcodes 7 and 8 as shown in FIG. 3 including a two-dimensional barcode 7 in which a personal identification number is encrypted and a two-dimensional barcode 8 in which user information is encrypted are used. Included in Image 6. Hidden means that the two-dimensional barcodes 7 and 8 cannot be recognized just by looking at the image 6.

The two-dimensional barcode 8 corresponding to the user information is divided into four divided two-dimensional barcodes 8a to 8d, and one of the two-dimensional barcodes 8d is arranged on the image 6 in a reduced state. I have. Placement of each divided two-dimensional barcode 8a to 8d on the image of the card
(Positions and areas) 6a to 6d are determined by random numbers corresponding to the personal identification numbers. The arrangement location 6e of the two-dimensional barcode 7 of the personal identification number is arbitrary. In FIG. 2, the placement locations 6a to 6e are indicated by dotted lines.
For the purpose of explanation, the actual card 5 does not show the arrangement places 6a to 6e. Each of the two-dimensional barcodes 7 and 8 has a specific color in which a ratio of four colors of cyan, magenta, yellow, and black is specified in advance. The specific color may be changed for each of the divided two-dimensional barcodes 8a to 8d.

The authentication terminal 2 has a CPU (Central Processi
ng Unit) 20, storage unit 21, image reading unit 22, image analysis unit 23, input unit 24, transmission unit 25, reception unit 26, tablet-type character input device 27, display unit 28, printer 2.
9, etc. A modem (not shown) for connecting to the network 4 and communicating with the authentication server 3 is attached.

The CPU 20 controls each section,
The password input by the user and the image analysis unit 23
It is determined whether the personal identification numbers obtained by the above are the same, and only when the personal identification numbers match, the image data read by the image reading unit 22 is transmitted together with the personal identification number, the use data of the user, and the individual number of the authentication terminal 2. An instruction is sent from the unit 25 to the authentication server 3 via the network 4. The storage unit 21 includes a ROM (read only memory) 21a and a RAM (r
andom access memory) 21b. In the ROM 21a, for example, 2 corresponding to the personal identification number is stored.
Arrangement information (center position by X and Y coordinates, barcode area (size) from the center position) of the two-dimensional barcode 7 in the image 6 of the card, a random number corresponding to a specific color and a password And placement locations 6a to 6d corresponding to divided two-dimensional barcodes 8a to 8d determined by random numbers
Arrangement information, specific color, reduction ratio of reduced two-dimensional barcode 8d, combination of divided two-dimensional barcodes 8a to 8d,
The identification number and the like of the authentication terminal 2 are stored. Also, CP
A program for controlling each unit by U20 is stored. The ROM 21a is volatile,
A weak current is always supplied to 1a from a power supply unit (not shown). When the supply of the current is stopped, the stored information and the program disappear. The RAM 21b is, for example,
It temporarily stores a password, image data read from a card described later, a two-dimensional barcode, user usage data, and the like. The image reading unit 22 includes an image sensor such as a CCD, reads the image 6 of the card 5, converts the image 6 into a digital signal of one pixel unit, and outputs the converted image data to the image analyzing unit 23.

The image analysis unit 23 extracts an image of a specific color corresponding to the password from the image data based on the arrangement information of the arrangement place 6e corresponding to the two-dimensional barcode 7 stored in the ROM 21a and the specific color. And a two-dimensional barcode 7 is obtained. Then, the two-dimensional bar code 7 is decoded to read the password. The receiving unit 26 described later encrypts the name, face photograph, date of birth, signature, and the like from the authentication server 3.
When receiving the operation permission signal for permitting the decoding of the two-dimensional bar code 8, the two-dimensional bar code 8 stored in the ROM 21a is received.
Then, an image of a specific color is extracted from the image data on the basis of the arrangement information of the arrangement places 6a to 6d and the specific color. And
A process of acquiring the two-dimensional barcode 8 from the obtained image based on the reduction ratio and the combination stored in the ROM 21a is performed. Then, the user information is read by decoding the two-dimensional barcode 8 and output to the display unit 28.

The input unit 24 is used by the user to input a personal identification number, and for the member store to input usage data such as a product purchased by the card user and the price thereof, a received service and its fee, and the like. The transmission unit 25 is connected to the network 4
The personal identification number, the image data, the individual number stored in the storage unit 21, and the usage data are transmitted to the authentication server 3 via the server. The receiving unit 26 confirms the operation permission signal from the authentication server 3 and the contents of use for approving the contents of use of the user, or sends, for example, a message indicating that the card cannot be used because the contents of use of the card exceed the payment limit. Receive through. The tablet-type character input device 27 is for the user to input a signature, and may be input to the tablet-type character input device 27, or may be input directly to the display unit 28 of the authentication terminal 2, for example. .

The display unit 28 displays the user's signature input by the tablet-type character input device 27.
In addition, a name, a face photograph, a date of birth, a signature, and the like read by the image analysis unit 23 are displayed, and it can be checked whether or not the signature matches the input signature. This confirmation may be performed by the CPU 20 or a member store member. In addition, the display unit 28 displays a message prompting the user to input the contents of use of the card, an error message when the personal identification numbers do not match, or when the receiving unit 26 receives an unusable message from the authentication server 3, Display unavailable message. The printer 29 prints a usage certificate including the usage details of the user confirmed by the authentication server 3.

Next, the configuration of the authentication server 3 will be described. The authentication server 3 includes a CPU 30, a receiving unit 31, a storage unit 32, an image analyzing unit 33, a database unit 34, and a transmitting unit 3.
5 and other computer devices such as personal computers and workstations. The CPU 30 controls each unit, refers to the database of the database unit 34 based on the user information read by the image analysis unit 33 described later, and receives the user's usage history, the available amount, etc. It is determined whether or not the used content can be authenticated. Then, CPU 30 instructs transmission unit 35 to transmit the authentication result to authentication terminal 2.

The receiving unit 31 receives a password, image data, contents of use, and an individual number of the authentication terminal transmitted from the authentication terminal 2 via the network 4. The storage unit 32 stores R
It is composed of a memory such as the OM 32a and the RAM 32b.
In the ROM 32a, for example, the arrangement information of the arrangement location 6e corresponding to the two-dimensional barcode 7 corresponding to the personal identification number, a specific color, a random number corresponding to the personal identification number, and the divided two-dimensional barcodes 8a to 8d determined by the random numbers are stored. Corresponding location 6
The arrangement information of a to 6d and the specific color, reduction ratio, combination method, and the like are stored. Further, a program for controlling each unit by the CPU 30 is stored. The RAM 32b is
For example, a password, image data, user usage data, and the like transmitted from the authentication terminal 2 are temporarily stored.

The image analyzing section 33 converts the image data received by the receiving section 31 based on the specific color and the arrangement information of the arrangement places 6a to 6d determined by the random number corresponding to the password stored in the ROM 32a. Then, an image of a specific color is extracted.
The obtained images are combined based on the reduction ratio and combination method stored in the ROM 32a to form a two-dimensional barcode 8.
Perform the process of acquiring. Then, the obtained two-dimensional barcode 8 is decoded, and the user's name, face photograph, date of birth,
Read information such as signs.

The database section 34 includes a card user's password, name, address, telephone number, date of birth, signature,
The usage history, the available amount, and the like are stored. When the use content and the individual number of the authentication terminal newly transmitted from the authentication terminal 2 are received by the receiving unit 31, these data are added to the usage history. The transmitting unit 35 includes the CPU 30
When it is determined that authentication is possible, an operation permission signal and a use content confirmation are transmitted to the authentication terminal 2 via the network 4.
When the CPU 30 determines that the authentication is not possible,
A use unavailable message is transmitted to the authentication terminal 2.

Next, the operation will be described. FIG. 4 is a flowchart showing the operation of the authentication terminal 2, and FIG. 5 is a flowchart showing the operation of the authentication server 3. First,
The credit card 5 to be used is inserted into the authentication terminal 2 (step S101). When the card 5 is inserted, the authentication terminal 2 reads the image 6 of the card 5 by the image reading unit 22 (step S102), and encodes a two-dimensional code, which is coded with a personal identification number, hidden in the image of the predetermined arrangement place 6e. An image of a specific color corresponding to the barcode 7 is extracted to obtain a two-dimensional barcode 7. Then, the two-dimensional bar code 7 is decoded, and the password is read (step S103).

Then, the user of the card 5 inputs a password into the input section 24 (step S104). C
The PU 20 determines whether or not the input personal identification number matches the personal identification number read from the card 5 (Step S105). If they match, a message prompting the user to input the contents of use of the card 5 is displayed on the display unit 28, and the contents of use of the card 5 are input from the input unit 24 (step S106). Then, the personal identification number of the card 5, the image data, the contents of use, and the individual number of the authentication terminal 2 are transmitted from the transmission unit 25 to the authentication server 3 via the network 4 (step S107). If they do not match, a message indicating an error is displayed on the display unit 28 (step S108), and the process returns to the start state (step S1).
09). In this case, the card 5 may be inserted into the authentication terminal 2 again to request the input of the personal identification number, or the card 5 may be notified as an unusable card 5 to the management company that manages the authentication server 3.

The authentication server 3 is configured such that the receiving unit 31
When the data is received from (step S201), the received image data is analyzed by the image analysis unit 33 and the information of the user is read (step S202). That is, the image analysis unit 33 stores the storage unit 32 based on the received password.
A specific color image is extracted from the image data based on the arrangement information of the arrangement places 6a to 6d determined by the random number corresponding to the personal identification number and the specific color stored in the ROM 32a. Then, a process of acquiring the two-dimensional barcode 8 by combining the images obtained from all the arrangement locations 6a to 6d based on the reduction ratio and the combination method stored in the ROM 32a is performed. After that, the obtained two-dimensional barcode 8 is decoded to read information such as the user's name, face photograph, date of birth, and signature.

Next, the CPU 30 refers to the database of the database unit 34 based on the user information read by the image analysis unit 33, and uses the usage history received by the reception unit 31 based on the user's usage history and available money. It is determined whether the content can be authenticated (step S203). When it is determined that the authentication is possible, the operation permission signal for permitting the reading of the two-dimensional barcode 8 of the data that can be displayed on the authentication terminal 2 and the use content confirmation are used as the authentication result to the authentication terminal 2 via the network 4. Transmission from the transmission unit 35 (Step S2
04). On the other hand, when it is determined that the authentication is not possible, the authentication terminal 2
Is transmitted as an authentication result (step S204).

The authentication terminal 2 receives the authentication result from the authentication server 3 by the receiving unit 26 (step S110). Then, it is determined whether or not the authentication result includes the operation permission signal (step S111). When the authentication result does not include the operation permission signal, that is, when the use-disable message is received as the authentication result, the display unit displays the result. A message indicating that the use content cannot be authenticated is displayed (step S11).
2) Return to the start state (step S113). When the authentication result includes the operation permission signal, the image analysis unit 23
Thus, the two-dimensional barcode 8 for which reading permission has been received is extracted from the image data and analyzed (step S114). That is, based on the password input by the user, R
Based on the arrangement information of the arrangement places 6a to 6d determined by the random number corresponding to the personal identification number stored in the OM 21a and the specific color, an image of a specific color is extracted from the image data and divided two-dimensional barcodes 8a to 8d Get. And the image analysis unit 23
Converts the obtained divided two-dimensional barcodes 8a to 8d into RO
A process of acquiring the two-dimensional barcode 8 in combination based on the reduction ratio and the combination method stored in the M21a is performed. Then, the obtained two-dimensional barcode 8 is decoded,
It reads user information such as the user's name, face photo, date of birth, and signature. Then, a message urging the user of the card 5 to input a signature is displayed on the display unit 28.

When the card user inputs a signature into the tablet-type character input device 27 (step S115), the input signature and user information obtained by analyzing the two-dimensional barcode 8 are displayed on the display unit 28. (Step S1
16). Then, it is checked whether the signature entered by the card user and the registered signature, and the displayed face photograph match the card holder (step S11).
7) If they do not match, an error display is displayed on the display unit 28 (step S118), and the process returns to the start state (step S119). In S117, if they match, the printer 2
9, the usage certificate is printed (S120), and the authentication is terminated.

As described above, according to the credit card authentication system 1 according to one embodiment of the present invention, the authentication terminal 2 transmits the image data read from the card 5 to the authentication server 3.
And the authentication server 3 analyzes the image data and reads the information. Therefore, the information is transmitted in the state of the image data, which is encrypted into the two-dimensional barcodes 7 and 8 and hidden in the image 6. Since the authentication server 3 analyzes the image data, it is possible to prevent information leakage due to line interruption and unauthorized modification of the authentication terminal 2. Then, the authentication server 3 authenticates the user based on the read information, transmits an authentication result signal to the authentication terminal 2, and the authentication terminal 2 analyzes the two-dimensional barcode 8 permitted by the permission signal and converts the user information. Since it is acquired and displayed on the display unit 28, the data is not directly communicated,
If the permission signal cannot be obtained, the user information is sent to the authentication terminal 2
Is not displayed on the screen, it is possible to prevent unauthorized reading of information, and it is possible to further enhance security. The user's signature is also encrypted into the two-dimensional barcode 8 and hidden in the image 6 of the card 5 and is not displayed on the card 5. The signature is input by the tablet-type character input device 27 and displayed on the display unit 28. Since it is not written on paper or the like, the signature does not remain on the paper or the like, making it difficult to forge the signature. Therefore, forgery of the card 5 can be prevented, and the authentication system 1 with higher security can be provided. In addition, the arrangement information of the two-dimensional barcode 7 corresponding to the personal identification number, the specific color, the random number corresponding to the personal identification number, and the arrangement positions 6a to 6d of the two-dimensional barcode 8 corresponding to the user information determined by the random numbers Information and specific colors
The arrangement locations 6a to 6 are stored in the ROM 21a.
Since the user information is obtained by analyzing the image data based on d, the user information cannot be obtained unless the personal identification number is known, so that it becomes more difficult to decode the information and the security of the authentication system 1 is improved. The ROM 21a loses the stored arrangement information and the data of a specific color when the power supply is stopped. Therefore, when the ROM 21a is removed from the authentication terminal 2, the data of the card 5 cannot be read, thereby preventing information leakage due to unauthorized use of the terminal. it can. Further, the authentication terminal 2
Since the unique individual number is transmitted to the authentication server 3 together with the image data read from the card 5, unauthorized use of the authentication terminal 2 can be prevented, and security can be further enhanced.

In the above embodiment, the credit card authentication system has been described. However, the present invention is not limited to this. Bank cards, employee ID cards, student ID cards, cards in intelligent buildings, healthcare / administrative cards, The present invention can be applied to an authentication system using a system access card, a data carrier card, or the like. Further, although the password is used as the identification information, the present invention is not limited to this, and a signature may be used as the identification information.

[0041]

According to the first aspect of the present invention, an authentication terminal reads an encrypted image from a card, extracts an image having a specific color corresponding to the identification information, obtains a code, and decodes the code. When the acquired identification information matches the input information input by the user, the data read from the card is transmitted to the authentication server. For example, the input information input by the user is correct. Can be determined, and the user can be authenticated.

According to the second aspect of the present invention, the user information is transmitted in the state of the encrypted image data, and the authentication server analyzes the encrypted image data. Therefore, it is possible to prevent information leakage due to line interruption and unauthorized modification of the terminal. be able to. Therefore,
Authentication of a user with higher security can be performed.

According to the third aspect of the present invention, the image analysis means extracts an image having a specific color corresponding to the identification information from the encrypted image data read by the image reading means to obtain a code, and obtains the code. Is decrypted to obtain the identification information, so that the identification information of the card user hidden in the encrypted image can be obtained. Further, when the acquired identification information matches the identification information input by the user, the encrypted image data is transmitted to the authentication server, and the authentication result based on the transmitted encrypted image data is received from the authentication server. In addition, leakage of user information due to interruption of a line can be prevented.

According to the fourth aspect of the present invention, when the received authentication result includes a permission signal for permitting the user information to be read, a code corresponding to the user information, which is defined corresponding to the identification information, Based on the arrangement information of the terminal, the image having the specific color of the code corresponding to the user information is extracted and the user information is obtained. Therefore, if the permission signal is not obtained, the user information cannot be obtained. Leakage can be prevented, and an authentication terminal with higher security can be provided.

According to the fifth aspect of the present invention, since the user inputs the signature directly with the signature input device and does not write the signature on paper or the like, the signature does not remain on the paper or the like, making it difficult to forge the signature. Therefore, unauthorized use and forgery of the card can be prevented, and an authentication system with higher security can be provided. In addition, since there is provided a judging means for judging whether the input information inputted to the signature input device is correct, the authentication of the user can be automated.

According to the sixth aspect of the present invention, since the identification number unique to the terminal is transmitted to the authentication server together with the encrypted image data read from the card, unauthorized use of the terminal can be prevented, and security can be further improved. A high authentication terminal can be provided.

According to the seventh aspect of the present invention, the storage means loses the code arrangement information corresponding to the stored user information when the supply of power is stopped, so that the card data can be read when the storage means is removed from the terminal. And information leakage due to unauthorized use of the terminal can be prevented.

According to the present invention, the authentication server extracts an image having a specific color from the received encrypted image data based on the identification information, acquires a code, decodes the code, and decodes the code. Because the information is obtained, it is possible to decrypt the code with a specific color hidden in the encrypted image,
By acquiring the user information of the card user, the user can be authenticated.

According to the ninth aspect of the present invention, an image having a specific color corresponding to the identification information is extracted from the read encrypted image data to obtain a code, and the code is decoded to obtain the identification information. Therefore, the identification information of the card user hidden in the encrypted image can be obtained. Further, when the acquired identification information matches the input information input by the user, the encrypted image data is transmitted to the authentication server, and the authentication result based on the transmitted encrypted image data is received from the authentication server. In addition, leakage of user information due to interruption of a line can be prevented.

[Brief description of the drawings]

FIG. 1 is a configuration diagram showing a credit card authentication system according to an embodiment of the present invention.

FIG. 2 is a front view showing a credit card used in the credit card authentication system of FIG. 1;

FIG. 3 is a diagram showing a two-dimensional barcode hidden in the credit card of FIG. 2;

FIG. 4 is a flowchart showing an operation of the authentication terminal according to the present invention.

FIG. 5 is a flowchart showing the operation of the authentication server according to the present invention.

[Explanation of symbols]

 Reference Signs List 1 credit card authentication system 2 authentication terminal 3 authentication server 4 network 5 credit card 6 image (encrypted image) 7,8 two-dimensional barcode 20 CPU 21a ROM 22 image reading unit 23 image analyzing unit 25 transmitting unit 26 receiving unit 27 tablet type Character input device (sign input device) 28 Display unit 30 CPU 31 Receiving unit 33 Image analyzing unit 34 Database unit 35 Transmitting unit

──────────────────────────────────────────────────続 き Continuation of the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) H04L 9/00 673E 675D (72) Inventor Tadahito Miwa 1-1-9 Otowa, Bunkyo-ku, Tokyo KT BL D. 5F FJ term in JGS Inc. (reference) 5B058 KA32 KA35 KA37 5B085 AE02 AE09 AE12 5J104 AA07 AA14 KA01 MA01 NA05 NA33 NA36 NA38 PA10

Claims (9)

[Claims] 1. An authentication system in which an authentication terminal for reading data contained in a card and an authentication server are connected to a network and authenticate a user of the card, wherein the card has identification information and user information of a user of the card. Has an encrypted image that is encrypted and hidden in a code having a specific color, the authentication terminal reads the encrypted image from the card, and extracts an image having a specific color corresponding to the identification information. Obtaining a code, decoding the code to obtain identification information, transmitting data read from the card to the authentication server when the obtained identification information matches input information input by the user, The server generates an authentication result of the user based on the received data, and transmits an authentication result signal based on the authentication result to the authentication terminal. An authentication system characterized by the following. 2. The data transmitted by the authentication terminal to an authentication server is data of an encrypted image read from a card and identification information, and the authentication server determines the user based on the received identification information from the encrypted image data. 2. The authentication system according to claim 1, wherein an image having a specific color corresponding to the information is extracted to obtain a code, the code is decoded to obtain user information, and a user authentication result is generated. 3. An authentication terminal connected to an authentication server via a network to read data included in the card and authenticate the user of the card, wherein the identification information of the user of the card and the user information have a specific color. Image reading means for reading an encrypted image of the card having an encrypted image which is encrypted and hidden, and an image having a specific color corresponding to the identification information is obtained from the encrypted image data read by the image reading means. An image analysis unit that extracts and acquires a code, decodes the acquired code to acquire the identification information, and, when the acquired identification information matches the input information input by the user, the image reading unit Transmitting means for transmitting the read encrypted image data to the authentication server; and transmitting the encrypted image data to the authentication server. Authentication terminal, wherein a Zui authentication result and a receiving means for receiving from the authentication server. 4. When the received authentication result includes a permission signal for permitting reading of the user information, the image analysis means determines from the encrypted image data a value corresponding to the identification information. Extracting an image having a specific color of the code corresponding to the user information based on the arrangement information of the code corresponding to the user information, obtaining the code, decoding the code, and obtaining the user information. The authentication terminal according to claim 3, wherein: 5. The authentication terminal according to claim 3, further comprising: a signature input device; and determination means for determining whether input information input to the signature input device is correct. 6. The authentication terminal according to claim 3, wherein the authentication terminal has an identification number unique to the terminal, and the transmitting unit transmits the identification number to the authentication server together with the encrypted image data read from the card. 6. The authentication terminal according to any one of claims 5 to 5. 7. The authentication terminal includes storage means for storing arrangement information of a code corresponding to user information, which is determined in correspondence with the identification information, and the storage means stores when power supply is stopped. The authentication terminal according to any one of claims 3 to 6, wherein the content is lost. 8. An authentication server which is connected to an authentication terminal via a network, reads data contained in the card, and authenticates a user of the card, wherein the user information transmitted from the authentication terminal has a specific color. Receiving means for receiving encrypted image data that is encrypted and hidden and user identification information; and extracting an image having the specific color from the encrypted image data based on the identification information to obtain a code. An image analysis unit that decodes the code to obtain the user information; a generation unit that generates a user authentication result based on the obtained user information; and an authentication terminal that generates the authentication result generated by the generation unit. An authentication server, comprising: transmission means for transmitting to an authentication server. 9. An authentication method for authenticating a user of the card, wherein an authentication terminal for reading data contained in the card and an authentication server are connected to a network, wherein the identification information and the user information of the card have a specific color. A cryptographic image that is encrypted and hidden by a code having the following. The authentication method, in the authentication terminal, reading an encrypted image of the card; and responding to the identification information from the read encrypted image data. Extracting an image having a specific color to obtain a code, decoding the code to obtain the identification information, and when the obtained identification information matches the input information input by the user, Transmitting the read encrypted image data to an authentication server; and receiving an authentication result based on the transmitted image data from the authentication server. Performing an authentication method.