Personal authentication system and its program

Abstract

The objective is to provide a personal authentication system that can prevent illegal personal authentication by employing a mechanism that, when performing personal authentication, sends verification information of the personal authentication applicant from the authentication device to the communication terminal of the personal authentication applicant, and when the personal authentication applicant is unable to access this information, displays the transmitted verification information of the personal authentication applicant as a verification QR code on the applicant's communication terminal. [Solution] The personal authentication system 1 consists of an authentication device 6 and a management server 7. When applying for personal authentication, even if the user ID is stolen or a copy of the QR code 10 is used, confirmation transmission information is sent to the authentication applicant 3, the confirmation QR code 10 is displayed on the communication terminal 4 used by the authentication applicant 3, and the information of this confirmation QR code 10 is compared with the original confirmation transmission information sent for confirmation, thereby performing personal authentication that prevents impersonation.

Description

Technical Field

[0001] The present invention relates to a personal authentication system and its program for authenticating an individual employee, which is performed when an employee or the like specifies the employment start time when starting work, etc., and particularly relates to a personal authentication system and its program for preventing fraud such as a person impersonating an employee and registering for employment.

Background Art

[0002] With the diversification of business forms, the employment start times of employees and the like are also diversified and not fixed. Therefore, it is necessary to certify for each individual the time when each person starts work. To specify the employment start time of an employee or the like, it is first necessary to specify whether the employee or the like starting work belongs to the company or the like as the person himself or herself. This is what is generally called personal authentication (hereinafter referred to as "personal authentication"). Generally, as methods of personal authentication, there are password authentication, fingerprint authentication, face authentication, SMS authentication, QR code (registered trademark, the same hereinafter) authentication, and the like.

[0003] From the perspective that fraud can be committed by impersonating others, it is possible by passing on copies of passwords, numbers, and QR codes to others. On the other hand, fingerprint authentication cannot be used when there are rough hands or dirty fingers such as in the case of kitchen staff or oil stains, and there is a concern that face authentication can be impersonated using copied photos and videos.

[0004] When performing personal authentication, in order to prevent others from impersonating, an operation terminal device that generates a one-time password using time as a function or key is distributed in advance to each individual who requires authentication, and in addition to the user ID and password registered in advance by the authentication applicant who performs the electronic application operation of personal authentication, a system that requires the input of a one-time password exists (see Patent Document 1). In electronic applications for personal authentication, the identity of the applicant is verified using a terminal device that generates a one-time password each time, in addition to the user ID and password. However, there is a risk that the terminal device itself, which generates the one-time password each time, may be stolen. Furthermore, it cannot be ruled out that the mechanism (time function, etc.) and rules for generating the one-time password each time using the terminal device could be analyzed and deciphered using advanced IT and AI technologies over time, potentially leading to illegal personal authentication. [Prior art documents] [Patent Documents]

[0005] Japanese Patent Publication No. 2024-115482 [Disclosure of the Invention] [Problems that the invention aims to solve]

[0006] This invention provides a personal authentication system and program that, when performing personal authentication, sends verification information of the personal authentication applicant from an authentication device to the personal authentication applicant's mobile device, and when the personal authentication applicant is unable to access this information, displays the transmitted verification information as a verification QR code on the authentication applicant's communication device, thereby preventing illegal personal authentication. [Means for solving the problem]

[0007] The present invention provides a personal authentication system for solving these problems, which performs personal authentication via a communication network, comprising: an authentication device that communicates with a communication terminal used by an authentication applicant who makes an electronic application for personal authentication, accepts the application for personal authentication, and displays the authentication result; and a management server connected to the authentication device, wherein the authentication device comprises a QR code acquisition device that acquires a QR code presented by the authentication applicant, a confirmation transmission means that causes the communication terminal used by the authentication applicant to display a QR code for personal authentication confirmation via the communication device, and a means that indicates whether or not personal authentication is approved, wherein the management server comprises a storage device that stores personal information of the subject of personal authentication, and a computer having a personal authentication confirmation program, wherein the personal authentication confirmation program obtains the personal information of the authentication applicant from the QR code obtained by the authentication device at the time of the application for personal authentication A reception step of comparing personal information with personal information in the storage device; an inspection step of creating confirmation transmission information for personal authentication if the personal information of the authentication applicant matches any of the personal information in the storage device; an instruction step of transmitting the confirmation transmission information for personal authentication from the authentication device to the communication terminal of the authentication applicant and instructing the authentication device to generate the confirmation QR code at the communication terminal of the authentication applicant based on the confirmation transmission information for personal authentication; a confirmation step of checking whether the information obtained from the QR code presented again by the authentication applicant contains the confirmation transmission information; an authentication step of confirming and authenticating the personal authentication of the authentication applicant only if the information obtained from the QR code presented again by the authentication applicant contains the original confirmation transmission information, and displaying a message on the authentication device indicating that personal authentication has been performed; and the authentication applicant and The time when the personal authentication of the aforementioned authentication applicant was confirmed and authenticated. It includes a memory step for storing and .

[0008] Furthermore, the personal authentication system of the present invention is configured such that the confirmation transmission information for personal authentication includes encryption or is encrypted as a whole.

[0009] Furthermore, the personal authentication system of the present invention is configured such that the QR code includes information that identifies the communication terminal used by the authentication applicant, and one of the requirements for verifying personal authentication is whether the communication terminal used by the authentication applicant who makes an electronic application for personal authentication matches the communication terminal that displays the QR code presented again by the authentication applicant.

[0010] Furthermore, the present invention provides a personal authentication system that performs personal authentication via a communication network, comprising: an authentication device that communicates with a communication terminal used by an authentication applicant who makes an electronic application for personal authentication, receives the application for personal authentication, and displays the authentication result; and a management server connected to the authentication device, wherein the authentication device comprises a QR code acquisition device that acquires a QR code presented by the authentication applicant; a confirmation transmission means that causes the communication terminal used by the authentication applicant to display a QR code for personal authentication confirmation via the communication device; and a means that indicates whether or not personal authentication is approved, wherein the management server comprises a storage device that stores personal information of the subject of personal authentication, and a computer having a personal authentication confirmation program, wherein the personal authentication confirmation program obtains the personal information of the authentication applicant from the QR code obtained by the authentication device at the time of the application for personal authentication A reception step of comparing the aforementioned personal information with the personal information in the storage device; an inspection step of creating confirmation transmission information for personal authentication if the aforementioned personal information of the authentication applicant matches any of the aforementioned personal information in the storage device; an instruction step of transmitting the confirmation transmission information for personal authentication from the authentication device to the communication terminal of the authentication applicant and instructing the authentication device to receive the confirmation transmission information for personal authentication at the communication terminal of the authentication applicant; a confirmation step of checking whether the transmitted confirmation transmission information contains the original confirmation transmission information when the confirmation transmission information is transmitted from the communication terminal of the authentication applicant; an authentication step of verifying the personal authentication of the authentication applicant only if the information transmitted by the authentication applicant contains the confirmation transmission information, and displaying a message on the authentication device indicating that personal authentication has been performed; and the authentication applicant and The time when the personal authentication of the aforementioned authentication applicant was confirmed and authenticated. It includes a memory step for storing and .

[0011] Furthermore, the present invention relates to a program for a personal authentication system that performs personal authentication via a communication network, the program being executed by a computer in a management server connected to an authentication device that communicates with a communication terminal used by an authentication applicant who makes an electronic application for personal authentication, accepts the application for personal authentication, and displays the authentication result, the program comprising: a reception step of comparing the personal information of the authentication applicant obtained from a QR code obtained by the authentication device at the time of the application for personal authentication with personal information in the storage device of the management server; and, if the personal information of the authentication applicant matches any of the personal information in the storage device, a transmission information for confirming personal authentication. An inspection step to create a personal authentication; an instruction step to send the confirmation transmission information for personal authentication from the authentication device to the communication terminal of the authentication applicant, and to instruct the authentication device to receive the confirmation transmission information for personal authentication at the communication terminal of the authentication applicant; a confirmation step to check whether the original confirmation transmission information is included in the confirmation transmission information sent from the communication terminal of the authentication applicant; an authentication step to verify the personal authentication of the authentication applicant only if the information sent from the authentication applicant includes the confirmation transmission information, and to display a message on the authentication device indicating that personal authentication has been performed; and the authentication applicant and The time when the personal authentication of the aforementioned authentication applicant was confirmed and authenticated. It includes a memory step for storing and . [Effects of the Invention]

[0012] This personal authentication system and program, configured in this manner, provides a system and program that, when performing personal authentication, sends verification information of the personal authentication applicant from the authentication device to the personal authentication applicant's mobile device. Since the personal authentication applicant cannot access the verification information of the personal authentication applicant, it cannot be copied, thus preventing illegal personal authentication through impersonation and other means. [Brief explanation of the drawing]

[0013] [Figure 1]Configuration diagram of a personal authentication system according to an embodiment of the present invention. [Figure 2] Configuration diagram of the QR code according to the same embodiment [Figure 3] Configuration diagram of the personal authentication verification program for the personal authentication system according to the said embodiment. [Modes for carrying out the invention]

[0014] The personal authentication system according to an embodiment of the present invention will be described below with reference to Figures 1 to 3. Figure 1 is a configuration diagram of the personal authentication system according to an embodiment of the present invention, Figure 2 is a configuration diagram of a QR code according to the same embodiment, and Figure 3 is a configuration diagram of the personal authentication confirmation program for the personal authentication system according to the same embodiment. As shown in Figures 1 and 2, the personal authentication system 1 according to an embodiment of the present invention is a system that performs personal authentication via a communication network 2, and consists of an authentication device 6 which has a built-in communication device 5 that communicates with a communication terminal 4 used by an authentication applicant 3 who makes an electronic application for personal authentication, and a management server 7 connected to this authentication device 6. In this embodiment, the authentication applicant 3 will be described using an employee of a restaurant 8 as an example. The authentication device 6 is installed at the employee entrance of the restaurant 8, and the authentication applicant 3 (employee) who comes to work applies for personal authentication to the authentication device 6 using their smartphone or the like (corresponding to the communication terminal 4), and upon authentication, it is authenticated that they have actually come to work at the restaurant 8, and the name of the employee and the time of arrival (similar authentication is performed when leaving the restaurant, and the time of departure is also registered as appropriate) are recorded.

[0015] A communication network is established between the communication terminal 4 (such as a mobile phone, smartphone, or electronic tablet) and the authentication device 6 when the camera (not shown) of the authentication device 6 reads the QR code 10 on the display 9 of the communication terminal 4, and when the communication device 5 communicates via Bluetooth® to exchange information. If there are multiple restaurants 8, an authentication device 6 is installed in each restaurant. Information exchange and communication between the authentication device 6 and the management server 7 takes place over the communication network 2. This uses so-called internet communication, but if there are no multiple restaurants 8, the authentication device 6 and the management server 7 can be configured in a single device, and the communication network 2 can be configured using internal communication within that device.

[0016] The authentication device 6 further includes a QR code acquisition device 11 that acquires information by reading the QR code 10 presented by the authentication applicant 3 with a camera (not shown), and a confirmation transmission means 12 that displays the QR code 10 for personal authentication confirmation on the communication terminal 4 used by the authentication applicant 3 via the communication device 5. The authentication device 6 further includes a display 13 and has a function to communicate with the management server 7 and display on the display 13 that the personal authentication of the authentication applicant 3 has been approved. The management server 7 includes a storage device 14 that stores information on all authentication applicants (employees) 3 who are subject to personal authentication, and a computer 15 that has a personal authentication verification program.

[0017] Next, the personal authentication verification program will be described. The personal authentication verification program is executed by a computer 15 located on the management server 7, and consists of the following steps shown in Figure 3. 1) Reception step 101 compares the personal information of the authentication applicant 3 obtained from the QR code 10 acquired by the authentication device 6 when applying for personal authentication with the personal information stored in the storage device 14. In reception step 101, the personal information of the authentication applicant 3, in particular the employee ID, is compared with the employee IDs of all employees 3 stored in the storage device 14 to verify whether there are any matches. 2) Inspection step 102: If the personal information of authentication applicant 3 matches any of the personal information in storage device 14, an inspection step 102 is performed to create verification transmission information for personal authentication. In inspection step 102, the authentication applicant 3 is verified to be a registered employee (a legitimate employee whose employee ID is stored in the storage device 14) and to confirm that the applicant is not an imposter, by creating transmission information for personal authentication verification. This information is sent from the authentication device 6 to the communication terminal 4 of the authentication applicant 3 in the next step. The transmission information for personal authentication verification includes at least the employee ID of the authentication applicant 3, a one-time password, and the reception server-side ID, and these are encrypted (AES encrypted) to form a QR code 10 for verification of 20 characters (or more). The transmission information for personal authentication verification may include encryption in part, or it may be encrypted as a whole. 3) Instruction step 103 instructs the authentication device 6 to generate a verification QR code 10 on the communication terminal 4 of the authentication applicant 3 based on the verification transmission information for personal authentication. In instruction step 103, the authentication device 6 receives the transmission information for verifying personal authentication generated after the inspection in inspection step 102. The authentication device 6 then instructs the communication terminal 4 of the authentication applicant 3 to generate a verification QR code 10 at the communication terminal 4 based on the transmission information for verifying personal authentication. The verification QR code 10 includes information that identifies the communication terminal 4. 4) Verification step 104: Check whether the information obtained from the QR code 10 presented again by the authentication applicant 3 contains the original verification transmission information. In confirmation step 104, on the premise that the confirmation QR code 10 is generated on the communication terminal 4 of the authentication applicant 3 based on the transmission information for personal authentication confirmation, it is compared and verified whether the information obtained from the QR code 10 re-presented by the authentication applicant 3 contains the confirmation transmission information. The verification targets the employee ID, one-time password, and reception server-side ID of the authentication applicant 3. In the case of forgery, the confirmation transmission information (encrypted employee ID, one-time password, and reception server-side ID) cannot be received or decrypted, so the information obtained from the QR code 10 re-presented does not contain the confirmation transmission information, preventing forgery. 5) Authentication step 105: Only when the information obtained from the QR code 10 re-presented by the authentication applicant 3 contains the confirmation transmission information, approve the personal authentication of the authentication applicant 3 and display a message indicating personal authentication on the authentication device 6. In authentication step 105, an instruction is given to the authentication device 6 to display a message indicating that the personal authentication has been authenticated on the display 13 of the authentication device 6. The display for confirming the approval of the personal authentication of the authentication applicant 3 may be by voice or may also use an image. 6) Confirm the personal authentication of the authentication applicant 3, Time of verification and authentication of personal authentication for authentication applicant 3 and a storage step 106 for storing the employee ID of the authentication applicant 3. The storage step 106 is used for registering the attendance time and leaving time of the authentication applicant 3 who is an employee.

[0018] In the personal authentication system 1 of the present invention, an additional configuration is provided with a terminal confirmation step 107 for determining whether the communication terminal 4 used by the authentication applicant 3 for displaying the QR code 10 and the communication terminal 4 for displaying the QR code 10 re-presented by the authentication applicant 3 at the time of confirmation match, and making it one of the requirements for performing the confirmation authentication of personal authentication. Since the QR code 10 contains information for identifying the communication terminal 4 used by the authentication applicant 3, when the communication terminal 4 indicated by the first-presented QR code 10 is different from the communication terminal indicated by the QR code 10 re-presented by the authentication applicant 3 for confirmation, it can be determined that fraud or other irregularities have occurred, enabling a more secure determination.

Industrial Applicability

[0019] According to the personal authentication system of the present invention, when applying for personal authentication, even if the user ID is stolen or a copy of the QR code is used, confirmation transmission information is sent to the authentication applicant, and a confirmation QR code is displayed on the communication terminal used by the authentication applicant. The information of this confirmation QR code is compared and confirmed with the confirmation transmission information sent for confirmation, and personal authentication is performed. Therefore, a high-level personal information authentication system is not required, and there is no inconvenience that personal authentication cannot be performed because the living body cannot be confirmed due to dirt on the living body or the like.

Explanation of Signs

[0020] 1 Personal authentication system 2 Communication network 3 Authentication applicant (employee) 4 Communication terminal 5 Communication device 6 Authentication device 7 Management server 8 Restaurant 9 Display 10 QR code 11 QR code acquisition device 12 Confirmation transmission means 13 Display 14 Storage device 15 Computer 101 Reception step 102 Inspection step 103 Instruction step 104 Confirmation step 105 Authentication step 106 Storage step 107 Terminal confirmation step

Claims

1. A personal authentication system that performs personal authentication via a communication network, An authentication device communicates with a communication terminal used by an authentication applicant who submits an electronic application for personal authentication, receives the personal authentication application, and displays the authentication result. The system includes a management server connected to the aforementioned authentication device, The authentication device comprises a QR code acquisition device that acquires a QR code presented by the authentication applicant, a confirmation transmission means that causes the communication terminal used by the authentication applicant to display a QR code for personal authentication confirmation via a communication device, and a means for indicating whether or not personal authentication is approved. The aforementioned management server includes a storage device that stores personal information subject to personal authentication, A computer having a personal authentication verification program, The aforementioned personal authentication verification program is: A reception step in which the personal information of the authentication applicant obtained from the QR code obtained by the authentication device at the time of application for personal authentication is compared with the personal information stored in the storage device. An inspection step in which, if the personal information of the authentication applicant matches any of the personal information in the storage device, a verification step is created to create transmission information for personal authentication confirmation. Instruction step of transmitting the verification transmission information for personal authentication from the authentication device to the communication terminal of the authentication applicant, and instructing the authentication device to generate the verification QR code at the communication terminal of the authentication applicant based on the verification transmission information for personal authentication, A verification step to confirm whether the information obtained from the QR code presented again by the aforementioned authentication applicant includes the aforementioned verification transmission information. An authentication step in which the personal authentication of the authentication applicant is verified and authenticated only if the information obtained from the QR code presented again by the authentication applicant includes the original verification transmission information, and the authentication device displays a message indicating that personal authentication has been performed. A personal authentication system characterized by comprising a storage step of storing the authentication applicant and the time at which the personal authentication of the authentication applicant was confirmed and authenticated.

2. The personal authentication system according to claim 1, characterized in that the confirmation transmission information for personal authentication includes encryption or is encrypted as a whole.

3. The aforementioned QR code includes information that identifies the communication terminal used by the authentication applicant, The personal authentication system according to claim 1, characterized in that one of the requirements for verifying personal authentication is whether the communication terminal used by the authentication applicant who makes an electronic application for personal authentication matches the communication terminal that displays the QR code presented again by the authentication applicant.

4. A personal authentication system that performs personal authentication via a communication network, An authentication device communicates with a communication terminal used by an authentication applicant who submits an electronic application for personal authentication, receives the personal authentication application, and displays the authentication result. The system includes a management server connected to the aforementioned authentication device, The authentication device comprises a QR code acquisition device that acquires a QR code presented by the authentication applicant, a confirmation transmission means that causes a QR code for personal authentication to be displayed on the communication terminal used by the authentication applicant via a communication device, and a means that indicates whether or not personal authentication is approved. The aforementioned management server includes a storage device that stores personal information subject to personal authentication, A computer having a personal authentication verification program, The aforementioned personal authentication verification program is: A reception step in which the personal information of the authentication applicant obtained from the QR code obtained by the authentication device at the time of application for personal authentication is compared with the personal information stored in the storage device. An inspection step in which, if the personal information of the authentication applicant matches any of the personal information in the storage device, a verification step is created to create transmission information for personal authentication confirmation. Instruction step of transmitting the confirmation transmission information for personal authentication from the authentication device to the communication terminal of the authentication applicant, and instructing the authentication device to cause the communication terminal of the authentication applicant to receive the confirmation transmission information for personal authentication, A verification step to confirm whether the transmitted verification information contains the original verification information when the verification information is transmitted from the communication terminal of the authentication applicant. An authentication step in which the personal authentication of the authentication applicant is verified and authenticated only if the information transmitted by the authentication applicant includes the verification transmission information, and the authentication device displays a message indicating that personal authentication has been performed. A personal authentication system characterized by comprising a storage step of storing the authentication applicant and the time at which the personal authentication of the authentication applicant was confirmed and authenticated.

5. A program for a personal authentication system that performs personal authentication via a communication network, The program is executed by a computer in a management server connected to an authentication device that communicates with a communication terminal used by an authentication applicant who submits an electronic application for personal authentication, accepts the personal authentication application, and displays the authentication result. The aforementioned program, A reception step in which, when applying for personal authentication, the personal information of the authentication applicant obtained from the QR code obtained by the authentication device is compared with the personal information stored in the storage device of the management server. An inspection step that creates a transmission information for verifying personal authentication when the personal information of the authentication applicant matches any of the personal information in the storage device. Instruction step of sending the verification transmission information for personal authentication from the authentication device to the communication terminal of the authentication applicant, and instructing the authentication device to cause the communication terminal of the authentication applicant to receive the verification transmission information for personal authentication, A verification step to confirm whether the transmitted verification information contains the original verification information when the verification information is transmitted from the communication terminal of the authentication applicant. An authentication step in which the personal authentication of the authentication applicant is verified and authenticated only if the information transmitted by the authentication applicant includes the verification transmission information, and the authentication device displays a message indicating that personal authentication has been performed. A program for a personal authentication system, characterized by comprising a storage step of storing the authentication applicant and the time at which the personal authentication of the authentication applicant was confirmed and authenticated.

Images