JP3583892B2 - Network security methods - Google Patents

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a network security method for ensuring security when making a decision or the like through a network.
[0002]
[Prior art]
A personal computer called a multimedia personal computer can handle voices, images, and the like, and is widely used for sending and receiving electronic mail and other various information. In addition, various services including commercial transactions are provided by connecting such terminals to a huge network represented by the Internet. When conducting a transaction through such a network, a predetermined decision is required to complete the transaction. However, when a password, code data of a cash card, and the like are transmitted over a network, there is a possibility that the data is stolen and misused by a so-called hacker or the like. Accordingly, in general, the decision is made by mailing an application form or by transferring money at a bank counter.
[0003]
[Problems to be solved by the invention]
However, the conventional method of making a decision is inconvenient for the user and lacks the convenience of the transaction using the network. To solve these problems, encryption technology has been widely studied. This does not always provide complete protection against hackers.
[0004]
On the other hand, for the purpose of, for example, managing visitors, a technique for confirming the identity of a person using feature data obtained from an eye image has been developed (Japanese Patent Publication No. 5-84166). Here, predetermined characteristic data obtained by processing iris data which is a part of an eye image is obtained, and it is determined whether or not the user is the same as a fingerprint or the like. It is preferable to use this type of technology to secure transactions in the network.
[0005]
[Means for Solving the Problems]
The present invention employs the following configuration to solve the above points.
<Configuration 1>
A client and a server for transmitting service information to the client are connected to each other via a network, and the client side has a feature data obtaining unit that obtains an image of a user's eye and generates feature data; A card input unit for reading the registered characteristic data and the registered identification code recorded on the card inserted by the user, and comparing the registered characteristic data read by the card input unit with the characteristic data output by the characteristic data acquisition unit to identify the user. In a network system comprising a collating unit for performing identification, and an identification code file storing a personal identification code for collating with a registered identification code on the server side, when the server receives an access request from the client, A collation request is issued to the client to activate the collation unit, and Network security method characterized by determining whether it has received a registration identification code.
[0006]
<Configuration 2>
A client and a server for transmitting service information to the client are connected to each other via a network, and the client side has a feature data acquisition unit that acquires a video of the user's eyes to generate feature data; A card input unit for reading a file search key and a registration identification code recorded on the inserted card, and reading the corresponding registered feature data from the registered feature data file using the file search key read by the card input unit; A matching unit that matches the registered feature data with the feature data output by the acquiring unit to perform identity identification; and the server includes an identification code file storing an identification code for matching with the registered identification code. In a network system, the server is configured to access from the client. When receiving the Seth requests against the request to the client to operate the matching unit, a network security method characterized by determining whether it has received the registration ID code from the client.
[0007]
<Configuration 3>
A client and a server for transmitting service information to the client are connected to each other via a network, and the client side has a feature data acquisition unit that acquires a video of the user's eyes to generate feature data; A card input unit for reading a file search key and a registration identification code recorded on the inserted card; and a corresponding registration from a registered feature data file connected via another network by the file search key read by the card input unit. A matching unit for reading the feature data and comparing the feature data output by the feature data obtaining unit with the registered feature data to perform identity identification, and a server-side personal identification code for matching with a registered identification code. A network system comprising an identification code file storing , And collation request to the client receives an access request from the client to operate the matching unit, a network security method characterized by determining whether it has received the registration ID code from the client.
[0008]
<Configuration 4>
In the network security method according to the first aspect, the second aspect, or the third aspect, the client receives the collation request, activates the feature data obtaining unit, and notifies the server of completion of preparation when the feature data is generated. At the same time, upon receiving a collation start instruction from the server, the operation of the collation unit is disclosed, and the server monitors an elapsed time from outputting the collation request to receiving the preparation completion notification, and When the time is small and large, the access is determined to be an unauthorized access, and when the preparation completion notification is received, the client is instructed to perform the collation start, and the elapsed time from outputting the collation start instruction to receiving the registration identification code is determined. Monitoring the network and determining that the elapsed time is short and long for unauthorized access. Utility method.
[0011]
<Configuration 5 >
A client and a server for transmitting service information to the client are interconnected via a network, and on the client side, a feature data acquisition unit for acquiring feature data from a video of a user's eye, and a user inserted A card input unit for reading the registered feature data and the registered identification code recorded on the card; and a collation unit for identifying the user based on the registered feature data read by the card input unit. When the client transmits the registration identification code in a network system including a registered characteristic data file storing the registered characteristic data in association with the registered characteristic data of the user, the server refers to the registered characteristic data file and Sending the registered feature data to the client, The collating unit mutually identifies the registered characteristic data of the principal received from the server, the registered characteristic data read by the card input unit, and the characteristic data acquired by the characteristic data acquiring unit, and identifies whether the user is the principal. A network security method comprising: when a user is identified as a user as a result of the collation processing, the client notifies the server to that effect, and the server starts a service based on the notification.
[0012]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described using specific examples.
<Specific example 1>
FIG. 1 is a block diagram illustrating a system according to the first embodiment.
A client 1 of this system is connected to a server 3 via a network 2, and a user operating the client 1 receives various services of the server 3. Both the client 1 and the server 3 are composed of, for example, a personal computer or a workstation. The client 1 is connected to a feature data acquisition unit 4, a card input unit 6, and a collation unit 7. The feature data acquisition unit 4 is a part that captures an image of the eye of the user 9 with a camera (not shown) or the like, and acquires iris data as described above or other feature data obtained by converting the features of other parts of the eye into data. The card input unit 6 is a device for reading data stored therein by mounting a card 5 such as a magnetic card or an IC card.
[0013]
The card 5 stores registered feature data 12 registered in advance by the user 9 and an identification code 13 used for the user 9's transaction. The matching unit 7 compares the acquired feature data 11 input from the feature data obtaining unit 4 with the registered feature data 12 input from the card input unit 6 to determine whether the user 9 uses the card 5 of the user. Is the part that determines The collation unit 7 outputs the identification code 13 received from the card input unit 6 to the client 1 when it is determined that the person is the person. The identification code 13 is sent to the server 3 via the network 2.
[0014]
The server 3 is a device that receives the identification code sent from the client 1, refers to the identification code file 8, and permits access processing or the like for providing a predetermined service. When access to the server 3 is permitted, the user 9 can execute predetermined transaction processing or receive various services to execute predetermined approval. When the server 3 receives the identification code, the server 3 reads the data stored in the identification code file 8, obtains information on the user 9, and performs various services based on the information. Further, the user information can be sent to the client 1 side as necessary, and the user 9 can perform a confirmation process or the like.
[0015]
FIG. 2 shows a system operation flowchart of the first embodiment.
The operation of the system of the specific example 1 shown in FIG. 1 will be described with reference to FIG. First, in step S1, when an access request is made from the client 1 to the server 3, the server 3 makes a request for collation of characteristic data.
[0016]
Next, in step S2, the client 1 operates the characteristic data obtaining unit 4 to obtain an image of the eyes of the user 9. Then, characteristic data is obtained by a predetermined process. Further, in step S3, the registered feature data 12 is read from the card 5. Next, in step S4, the matching unit 7 performs a matching process. In step S5, when it is confirmed that the card holder is the person, the process proceeds to step S6, and the identification code read from the card is transmitted to the server 3. The server 3 receives this, and in step S7, refers to the identification code file 8 and obtains information and attribute data for a predetermined user. Thus, the server 3 permits the client 1 to access and starts the service.
[0017]
If it is determined in step S5 that the user is not the user, the process proceeds to step S8, and the process is stopped. Here, the client 1 may be requested to input an eye image or insert a card again.
[0018]
<Effect of Specific Example 1>
According to this example, since the client uses the feature data of the eye image such as the iris data to perform the identity verification, the use of a third party is prevented, and the security is enhanced. In addition, since only the identification code 13 which is a request and a response from the server 3 flows on the network, personal information such as characteristic data and a personal identification number does not flow on the network. Therefore, it is possible to prevent abuse due to leakage of personal information. In addition, by using an identification code that the user cannot know, the risk of the identification code being stolen by another person is reduced, and the security of commercial transactions is improved.
[0019]
<Specific example 2>
FIG. 3 shows a system block diagram of the second embodiment.
This system is also configured such that the client 1 makes a predetermined access request to the server 3 via the network 2. The configuration of the feature data acquisition unit 4, card input unit 6, collation unit 7 and the like connected to the client 1 is the same as that of the first embodiment. In the specific example 2, the registered feature data file 15 is newly connected to the collation unit 7. The registered feature data file 15 stores a predetermined file search key 14 and registered feature data 12 in association with each other.
[0020]
The card 5 stores the file search key 14 and the identification code 13. The collation unit 7 searches the registered feature data file 15 using the file search key 14 and reads out the corresponding registered feature data 12. The registered feature data 12 and the acquired feature data 11 input from the feature data acquisition unit 4 are configured to be compared. Other configurations are the same as those of the first embodiment.
[0021]
The operation of the specific example 2 will be described with reference to FIG.
FIG. 4 is a system operation flowchart of the second embodiment.
In step S1 of the drawing, the server makes a request for matching feature data in response to an access request from a client, as in the specific example 1, and in step S2, the client acquires an image of the user's eyes. Next, in step S3, the file search key 14 is read from the card 5 inserted by the user 9. In step S4, the collation unit 7 reads the registered feature data 12 corresponding to the file search key 14 with reference to the registered feature data file 15. Then, in step S5, a matching process is performed with the acquired feature data 11 input from the feature data acquisition unit 4. As a result of this collation, if it is determined that the user is the person, the process proceeds from step S6 to step S7, where the identification code 13 is transmitted to the server 3. The following processing is the same as in the first embodiment, and in step S8, the server starts a service using the identification code. If it is not determined that the person is the person, the process is stopped (step S9).
[0022]
<Effect of Specific Example 2>
Compared with the specific example 1, the card 5 does not store the registered feature data and stores the file search key, so that the amount of data to be stored on the card 5 can be reduced sufficiently. Therefore, the card can be realized with a simple magnetic card or the like, and the transaction cost can be reduced. Other effects are the same as those of the first embodiment.
[0023]
<Specific example 3>
FIG. 5 shows a system block diagram of the third embodiment.
As shown in this figure, in the specific example 3, the registered feature data file 15 is connected to the client 1 via the first network 2A. The first network 2A is a network such as a LAN (local area network), for example, in which the secrecy of data on the network is easily ensured. It is assumed that many other clients (not shown) are connected to the first network 2A. The registered feature data file 15 stores a file search key 14 and a registered feature data group 18.
[0024]
Comparing the system of the embodiment 2 shown in FIG. 3 with the system of the embodiment 3, the only difference is that the registered feature data file 15 is connected to the client 1 via the first network 2A. The registered feature data group 18 corresponding to the file search key 14 stored in the registered feature data file 15 is a set of registered feature data obtained by appropriately dividing the entire registered feature data.
[0025]
When performing the matching process, the matching unit 7 searches the registered feature data file 15 through the client and the first network 2A, and acquires the necessary registered feature data group 18. After that, a matching process is executed. Other operations are exactly the same as those shown in FIG. As shown in the specific example 2 shown in FIG. 3, the file search key and the registered feature data may be made to correspond one-to-one. Conversely, in the case of the specific example 2, the registered feature data group may be stored in association with the file search key 14. In this case, the matching unit 7 determines whether or not there is a registered feature data group that matches the acquired feature data 11. Similarly, in the third specific example, the matching unit 7 performs a matching process between the registered feature data group 18 and the acquired feature data 11 received through the first network 2A. The reason why a plurality of registered feature data is extracted with one file search key is that if file search keys corresponding to all registered feature data are prepared, the number of characters of the file search key increases significantly and management becomes difficult. Further, if the registered feature data is extracted to such an extent that the matching process can be performed relatively quickly, the matching process may be performed by the matching unit 7 thereafter.
[0026]
<Effect of Specific Example 3>
In addition to the effect of the specific example 2, since the registered feature data file 15 is connected to the first network 2A, other clients connected to the first network 2A can also freely refer to the registered feature data file 15. . Therefore, there is no need to store a large registered feature data file on the client side. Needless to say, the number of the registered feature data files 15 is not limited to one, and any number may be connected to the first network 2A. As a result, the system can be freely connected to a network as long as the client has a feature data collating unit, and the system can be expanded. In addition, since the registered feature data file 15 can be easily increased or decreased, the maintainability is improved and the maintenance cost can be reduced.
[0027]
<Example 4>
FIG. 6 shows a sequence chart of the specific example 4.
In this specific example 4, when the server receives an access request from the client, it monitors whether or not the client is actually executing the matching process of the feature data, and excludes an illegal process from the processing time.
The system to which this specific example 4 is applied may be any of the systems described with reference to FIG. 1, FIG. 3, FIG.
[0028]
In FIG. 6, first, in step S1, the client 1 requests the server 3 for access. In response, the server 3 requests the client 1 to collate the feature data in step S2. The client 1 prepares for the collation in step S3. That is, for example, in the system of FIG. 1, the feature data acquisition unit 4 acquires an image of the eye of the user 9 and performs a process of generating feature data. Next, in step S5, a preparation completion report is made to the server 3. On the other hand, the server 3 requests the client 1 to collate the feature data in step S2, and then performs monitoring using a timer (step S4).
[0029]
That is, the time from the collation request to the preparation completion report is monitored, and after performing appropriate processing on the client 1 side, it is determined whether or not the preparation completion report S5 has been accepted. If the time to report is extremely long or abnormally short, the transaction will be stopped because some fraud has occurred. If a fraud is detected, the process proceeds to step S10, where a transaction stop process or the like is performed. Further, the server 3 receiving the preparation completion report in step S5 issues a collation start instruction in step S6. On the other hand, the client 1 executes the collation processing in step S7, and reports a result notification in step S9. In this case as well, the server 3 monitors the timer from the time when the collation start instruction S6 is sent to the client 1 until the result notification is received in step S9 (step S8).
[0030]
Here, too, in consideration of the time required for the matching process, a case where the time is extremely short and a case where the time is extremely long are determined to be illegal processing. In this way, it is possible to distinguish whether the actual feature data collation processing is being performed or whether the identification code has been immediately transmitted without performing this processing.
[0031]
<Effect of Specific Example 4>
As described above, since the server monitors the collation processing time including the preparation for collation by the client, unauthorized processing can be eliminated, and security can be enhanced. For example, if a preparation completion report is immediately sent using the characteristic data acquired in advance, or an identification code is returned in such a short time that collation processing cannot be performed, it can be determined that the user has been prepared improperly.
[0032]
<Example 5>
FIG. 7 shows a system block diagram of the fifth embodiment.
In this system as well, a client 1 is connected to a server 3 via a network 2. Further, in this system, the camera 16 is connected to the client 1 and acquires an image of the eye of the user 9. Further, a registered feature data file 15 and a collating unit 7 are provided on the server 3 side.
[0033]
The system having the above configuration operates as follows.
FIG. 8 shows an operation flowchart of the specific example 5.
In step S1 of the figure, when an access request from the client 1 arrives at the server 3, the server 3 issues a start request to the camera 16 of the client 1. In step S2, the client 1 acquires an image of the eye of the user 9 using the camera 16, and transmits bitmap data 17 of the eye image to the server 3 via the network 2.
[0034]
Here, in the server 3, the client performs the characteristic data acquisition processing of the eye image performed in the specific examples 1 and 2 on the server side (step S3). Next, in step S4, the server performs a matching process with reference to the registered feature data file 15.
That is, the bitmap data of the image of the eye is transferred to the server side, from which the feature data is acquired and collated with the registered feature data file. If the user is confirmed in step S5, predetermined services and other processes are started in step S6. On the other hand, if the user is not confirmed, the process proceeds from step S5 to step S7, and the process is stopped.
[0035]
<Effect of Specific Example 5>
An image of the user's eyes is directly sent to the server side by a photographing device such as a video camera, and the server performs collation processing of feature data and the like, so that centralized management of registered feature data can be performed. Moreover, since the image of the eye itself is transmitted, the content is not easily decipherable, such as identification data, a password, and the like, so that an improvement in security can be expected. Further, since an access request can be made to the server using a simple video camera provided in a general multimedia personal computer, there is an effect that the equipment cost on the client side can be reduced.
[0036]
<Example 6>
FIG. 9 shows a system block diagram of the sixth embodiment.
This system is different from the fifth embodiment in that input means such as a keyboard 21 is provided on the client 1 side so that the identification code 13 can be input. The other parts are the same as in the fifth embodiment.
[0037]
FIG. 10 shows a system operation flowchart of the specific example 6.
Here, as in the case of the specific example 5, the camera is activated in response to an access request from the client in step S1, and the image of the eye photographed by the camera is transmitted to the server 3 in step S2. On the server side, feature data is acquired for the image of the eye. Further, in the specific example 6, in step S4, the identification code 13 is input using the keyboard 21 on the client side.
[0038]
This identification code is sent to the server 3 via the network 2. The matching unit 7 of the server 3 refers to the registered feature data file 15 and extracts a registered feature data group 18 corresponding to the identification code 13. After that, the registered feature data group 18 is compared with the acquired feature data generated by the server 3. The identification code 13 and the registered feature data may be stored on a one-to-one basis, or the registered feature data group may be stored so as to correspond to one identification code 13. In any case, since a part of the registered feature data is extracted from the large amount of registered feature data and the matching process is performed, the processing time can be shortened.
[0039]
<Effect of Specific Example 6>
Since the identification code can be input from the client using the keyboard and the registered feature data to be collated on the server can be narrowed down, the speed of the collation processing can be increased. Further, since the amount of calculation is reduced, there is an effect that the server machine can be replaced with a low-power inexpensive machine.
[0040]
<Specific Example 7>
FIG. 11 shows a system block diagram of the seventh embodiment.
The configuration of this system is the same as that of the system shown in FIG. 1 for the client side and the network. A registered feature data file 15 is provided on the server 3 side, and stores data in which the identification code 13 and the registered feature data 12 are associated with each other.
[0041]
FIG. 12 shows a system operation flowchart of the seventh embodiment.
This system operates as follows.
First, in step S1, the server makes a request for collation of characteristic data in response to an access request from a client. In step S2, the client acquires an image of the user's eyes, and in step S3, reads the registered feature data from the card. In step S4, the client reads the identification code from the card. Then, in step S5, the identification code is sent to the server, and the server reads data corresponding to the identification code from the registered feature data file 15. In step S6, the read registered feature data is sent to the client.
[0042]
That is, in this specific example, the registered feature data read from the card and the registered feature data read from the server are sent to the client side, and three pieces of feature data obtained from the eye image obtained on the client side are collated at the same time. You. In step S7, when this collation processing is performed, it is determined in step S8 whether or not the user is the user. If the user is determined to be the user, the process is continued in step S9. Aborted.
[0043]
<Effect of Specific Example 7>
Since the three types of feature data are collated with each other, security for personal identification is further improved as compared with the conventional systems.
[Brief description of the drawings]
FIG. 1 is a system block diagram of a specific example 1.
FIG. 2 is a system operation flowchart of a specific example 1.
FIG. 3 is a system block diagram of a specific example 2;
FIG. 4 is a system operation flowchart of a specific example 2.
FIG. 5 is a system block diagram of a specific example 3.
FIG. 6 is a sequence chart of a specific example 4.
FIG. 7 is a system block diagram of a specific example 5;
FIG. 8 is a system operation flowchart of a specific example 5;
FIG. 9 is a system block diagram of a specific example 6;
FIG. 10 is a system operation flowchart of a specific example 6.
FIG. 11 is a system block diagram of a specific example 7;
FIG. 12 is a system operation flowchart of a specific example 7;
[Explanation of symbols]
1 Client 2 Network 3 Server 4 Feature Data Acquisition Unit 5 Card 6 Card Input Unit 7 Collation Unit 8 Identification Code File

Claims (5)

A server for transmitting service information to the client and the client are connected to each other via a network,
The client-side, and wherein the data acquisition unit for generating feature data to obtain the image of the user's eye, and a card input portion by the user reads the registration feature data and the registered ID code stored in the inserted curd , and a matching unit for matching to the person identifying said feature data registered feature data and feature data acquisition section that the card input part has read outputs,
Wherein the server side in the network system Ru an identification code file storing identity codes for matching with the registered identification code,
A network security method , wherein the server receives the access request from the client, requests the client to perform a collation request, activates the collation unit, and determines whether the registration identification code is received from the client. . A server for transmitting service information to the client and the client are connected to each other via a network,
The client-side, and wherein the data acquisition unit for generating feature data to obtain the image of the user's eye, and a card input portion by the user reads the file search key and the registration identification code recorded in the inserted curd, the reads the corresponding registered feature data from the registration feature data file by the file search key card input unit has read, matching for matching to the person identifying the registered feature data and the feature data the feature data acquisition unit outputs Department and
On the server side in the network system Ru an identification code file storing identity codes for matching with the registered identification code,
A network security method , wherein the server receives the access request from the client, requests the client to perform a collation request, activates the collation unit, and determines whether the registration identification code is received from the client. . A server for transmitting service information to the client and the client are connected to each other via a network,
The client-side, and wherein the data acquisition unit for generating feature data to obtain the image of the user's eye, and a card input portion by the user reads the file search key and the registration identification code recorded in the inserted curd, the to read out the corresponding registered feature data from the registration feature data files connected via other networks by the file search key card input unit has read, the feature data and the registered feature data to which the characteristic data acquisition unit outputs the collates a collation unit for person identification,
On the server side in the network system Ru an identification code file storing identity codes for matching with the registered identification code,
A network security method , wherein the server receives the access request from the client, requests the client to perform a collation request, activates the collation unit, and determines whether the registration identification code is received from the client. . In the network security method according to claim 1, claim 2 or claim 3,
The client activates the feature data acquisition unit in response to the collation request, notifies the server at the time when the feature data is generated, and notifies the server of completion of the collation at the time when the collation start instruction is received from the server. Disclose the operation of the collating unit,
The server monitors an elapsed time from when the verification request is output to when the preparation completion notification is received. When the elapsed time is small and large, the server determines that the access is unauthorized, and when the server receives the preparation completion notification, the client The collation start instruction, and monitors the elapsed time from the output of the collation start instruction to the reception of the registration identification code. If the elapsed time is small and large, the network is determined to be an unauthorized access. Security method. A server for transmitting service information to the client and the client are connected to each other via a network,
To the client-side, and wherein the data acquisition unit for acquiring characteristic data from the user's eye image, and a card input portion by the user reads the registration feature data and the registered ID code stored in the inserted curd, the card input And a collation unit for performing personal identification based on the registered feature data read by the unit.
Wherein the server side in the network system Ru with a registered feature data file stored in correspondence with the registered feature data of identity codes and the principal,
If you send the registration ID code from the client, the server refers to the registration feature data file, and sends the corresponding registered feature data to the client,
The verification unit of the client, and the registered feature data of the person received from the server, and the registration feature data to which the card input part is read, mutually collates the said characteristic data to which the characteristic data acquiring unit acquires It makes the identification of whether this in humans,
Results of the verification process, when the user has identified with the human, said is notified to the server to that effect from the client,
A network security method , wherein the server starts a service based on the notification.

Images