ID Registration System, ID Registration Method, and Program

Abstract

To provide a management server, an ID registration system, an ID registration method, and a program that can securely register ID information indicated by an existing ID card with a mobile terminal with a simple procedure.SOLUTION: According to an embodiment, a management server includes a communication unit and a processor. The communication unit communicates with a mobile terminal. The processor receives, by the communication unit, information including a reading result of a code image from the mobile terminal that has read the code image generated in response to a registration application of ID information indicated by an existing ID card to the mobile terminal, and transmits the ID information to be registered with the mobile terminal to the mobile terminal by the communication unit when validity based on the reading result of the code image included in the information received from the mobile terminal is confirmed.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] Embodiments of the present invention relate to ID Registration System, ID Registration Method, and Program this.

Background Art

[0002] In recent years, digitization of identification cards (ID cards) such as driver's licenses, national ID cards (e.g., My Number cards), or health insurance cards has been under consideration. For example, operations to realize mobile IDs that can be used as ID cards by applications installed on portable electronic devices (mobile terminals) such as smartphones have also been considered. As a specific example, demonstration experiments have been conducted in which a mobile driver's license realized by a dedicated application program installed on a mobile terminal such as a smartphone is used as a driver's license.

[0003] Since the mobile ID as described above is a certificate of information including personal information, forgery and impersonation must be prevented. That is, the mobile ID needs to be registered on the mobile terminal of the ID card owner in a state where sufficient security is ensured so that only the owner himself / herself can register it and it cannot be tampered with.

[0004] On the other hand, ID cards such as conventional driver's licenses are issued (registered) by being issued by an official's operation at a predetermined issuing place (a predetermined jurisdiction such as a police department), and thus the security in the issuing (registration) process is maintained. However, there is a problem that the procedure of actually issuing the ID card after the user goes to the predetermined issuing place takes a lot of time and effort for both the user and the issuer. For this reason, there is a demand for a mobile ID realized by an application program installed on a mobile terminal that can be easily issued (registered) while eliminating impersonation and ensuring a secure state.

Prior Art Documents

Patent Documents

[0005] [Patent Document 1] Japanese Patent Application Laid-Open No. 2019-153906 [Summary of the Invention] [Problems to be Solved by the Invention]

[0006] In order to solve the above problems, the present invention can securely register the ID information indicated by an existing ID card in a mobile terminal with a simple procedure. ID Registration System, ID Registration Method, and Program provided. [Means for Solving the Problems]

[0007] According to an embodiment, The ID registration system includes a mobile terminal and a management server. The mobile terminal has a first communication unit, a storage unit, an image acquisition unit, and a first processor. The first communication unit communicates with the management server. The storage unit stores an application program for displaying ID information indicated by an existing ID card and information used in the application program. The image acquisition unit acquires a code image including authentication information for registering the ID information. The first processor transmits information including information obtained by decoding the code image acquired by the image acquisition unit by a reader function provided in the application program to the management server, and then invalidates the reader function when the ID information acquired from the management server by the first communication unit is registered in the storage unit. The management server has a second communication unit and a second processor. The second communication unit communicates with the mobile terminal. The second processor receives, by the second communication unit, information including information obtained by decoding a code image by the reader function of the application program by the mobile terminal, and when the legitimacy of the mobile terminal as a mobile terminal for registering the ID information is confirmed based on the information received from the mobile terminal, transmits the ID information to be registered in the mobile terminal to the mobile terminal by the second communication unit. [Brief Description of the Drawings]

[0008]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

[0009] Hereinafter, embodiments will be described with reference to the drawings. First, the configuration of a mobile ID issuance system 1 as an ID registration system according to an embodiment will be described. FIG. 1 is a diagram schematically showing a configuration example of a mobile ID issuance system 1 according to an embodiment. The mobile ID issuance system 1 according to the embodiment is a system for registering information (ID information) indicated by an existing ID card such as a driver's license in a portable terminal 2 owned by a user. The portable terminal 2 is used as an electronic ID card (mobile ID) by displaying the ID information registered using an application program for mobile ID (mobile ID program).

[0010] In the embodiment described below, it is assumed that the mobile ID is a mobile driver's license (hereinafter also referred to as mDL) that can be used as a driver's license registered in the owner's portable terminal. However, the mobile ID issuance system is not limited to a system that issues a mobile driver's license, and can be applied to a system that issues (registers) a mobile ID that can be used as various ID cards.

[0011] In the configuration example shown in FIG. 1, the mobile ID issuance system 1 includes a portable terminal 2 and a management server 4 and the like. The portable terminal 2 is a portable electronic device owned by a user. The portable terminal 2 is realized by a portable electronic device such as a smartphone or a tablet PC, for example. In the embodiment, since the portable terminal 2 assumes an operation in which the owner carries a mobile driver's license (mobile ID) used as a driver's license (ID card), it is assumed to be a portable electronic device. However, when the mobile ID does not need to be carried by the owner, the portable terminal 2 may be replaced with a stationary computer or the like for implementation.

[0012] The mobile terminal 2 has a function of executing an application program. In this embodiment, the mobile terminal 2 can execute an application program (hereinafter also simply referred to as an app) that provides a mobile driving license used as a driving license, i.e., a mobile ID program. The app for the mobile driving license as the mobile ID program (hereinafter also referred to as the mDL app) causes a display unit of the mobile terminal 2 to display part or all of the information (ID information including license information) indicated by the driving license stored (registered) in the storage unit of the mobile terminal 2 in response to a user's operation.

[0013] The management server 4 is a server device that manages various types of information related to driving licenses. For example, the management server 4 is provided within a predetermined jurisdiction (e.g., the National Police Agency, the Driving License Center) that manages information related to driving licenses. In this embodiment, the management server 4 performs an application reception process for receiving an application for online registration of a mobile driving license and a registration process for registering (issuing) a mobile driving license to the user's mobile terminal 2 online.

[0014] Note that the management server 4 may be a single server device or may be realized by a plurality of server devices. For example, the management server 4 may be realized as a system including a server that performs an application reception process for online registration of a mobile driving license, a server that performs an online registration process for a mobile driving license, and a server that manages information on issued driving licenses.

[0015] The application reception process in the management server 4 is a process of receiving an application for online registration of a mobile driving license applied for by a user. In the application reception process, the management server 4 generates information necessary for online registration of a mobile driving license in response to an application from the user. The management server 4 generates a coded image (e.g., a two-dimensional code) obtained by coding the information necessary for online registration generated in response to an application from the user. The management server 4 issues a notification card C on which the above coded image is printed.

[0016] The registration process in the management server 4 is a process of registering the data of the mobile driving license online to the mobile terminal 2 of the user who has been accepted for the online registration of the mobile driving license in the application reception process. In the registration process, the management server 4 communicates securely with the mobile terminal 2 that has read the code image printed on the notification card C. After confirming the application, that is, the applicant, and the validity of the application process based on the information from the mobile terminal 2, the management server 4 performs a process of supplying the data (driver's license information) to be registered in the mobile driving license to the mobile terminal 2. As a result, the mobile driving license is registered in the mobile terminal 2 based on the data from the management server 4. Note that for the confirmation of whether the applicant is the right person, it may be done by prompting the input of information that only the applicant can know, or by referring to other reliable ID information, for example, ID information under the jurisdiction of other ministries and agencies that has already been registered.

[0017] Next, the configuration of the mobile terminal 2 according to the embodiment will be described. FIG. 2 is a block diagram schematically showing a configuration example of a control system in the mobile terminal 2 according to the embodiment. The mobile terminal 2 is realized as a smartphone or a tablet PC, etc., and has a housing that can be carried by the user. In the configuration example shown in FIG. 2, the mobile terminal 2 includes a processor 21, a ROM 22, a RAM 23, a storage unit 24, a mobile communication unit 25, a card reader 26, a display unit 27, an operation unit 28, a camera 29, and a fingerprint sensor 30, etc.

[0018] The processor 21 executes various processes by executing programs. The processor 21 is, for example, a CPU. The ROM 22 is a non-volatile memory that stores programs, control data, etc. The RAM 23 functions as a working memory that temporarily holds data. The processor 21 realizes various processes by executing the programs stored in the ROM 22 or the storage unit 24 using the RAM 23.

[0019] The storage unit 24 is a storage device including a rewritable non-volatile memory. For example, the storage unit 24 stores an application program (mobile ID program) for a mobile driver's license that can be used as a driver's license (ID card). Further, the storage unit 24 stores the information (ID information) of the driver's license of the owner himself / herself used by the application for the mobile driver's license. In the present embodiment, storing the information of the driver's license as the ID information used in the application program for the mobile driver's license in the storage unit 24 is referred to as the issuance (registration) process of the mobile driver's license.

[0020] The mobile communication unit 25 is a communication interface for communicating with an external device. The mobile communication unit 25 performs wireless communication such as mobile communication or Wifi (registered trademark), for example. In the present embodiment, the mobile communication unit 25 functions as a communication unit for communicating with the management server 4.

[0021] The card reader 26 reads the information recorded on the driver's license. For example, when the driver's license to be read is configured as a contactless IC card, the card reader 26 is configured to read information from the driver's license by a communication method (for example, NFC) used for the contactless IC card. Note that the card reader 26 may be any device that can read the information recorded on the ID card corresponding to the mobile ID issued by the registration process described later.

[0022] The display unit 27 is a display device that displays various information according to the control of the processor 21. The operation unit 28 is a device for the operator to input an operation instruction. The display unit 27 and the operation unit 28 function as a user interface. For example, the display unit 27 and the operation unit 28 are configured by a display device with a touch panel. Further, the operation unit 28 may include a keyboard, a numeric keypad, a pointing device, and the like.

[0023] Camera 29 captures images. Camera 29 captures the user's face or the image of the driver's license face sheet. For example, the processor 21 performs face authentication by comparing the face image captured by camera 29 with a pre-registered face image (the face image of the owner). Also, the processor 21 may perform character recognition on an image such as a driver's license captured by camera 29. Further, the processor 21 may extract an image of the face photo area from the image of the driver's license captured by camera 29. Also, camera 29 also functions as an image acquisition unit that captures an image of a notification card on which a code image described later is printed.

[0024] The fingerprint sensor 30 is a sensor that reads fingerprints. For example, the processor 21 performs fingerprint authentication by comparing the fingerprint read by the fingerprint sensor 30 with a pre-registered fingerprint (the fingerprint of the owner). Also, the processor 21 may transmit or store the fingerprint data read by the fingerprint sensor 30 to / on the management server 4 as the biometric information of the user. Note that the fingerprint sensor 30 is an example of a device that acquires the biometric information of the user (operator), and may be replaced with a device that acquires other biometric information.

[0025] Next, the configuration of the management server 4 according to the embodiment will be described. FIG. 3 is a block diagram schematically showing a configuration example of a control system in the management server 4 according to the embodiment. In the configuration example shown in FIG. 3, the management server 4 includes a processor 41, a ROM 42, a RAM 43, a storage unit 44, a communication unit 45, and a card creation unit 46, etc. The processor 41 executes various processes by executing programs. The processor 41 is, for example, a CPU. The ROM 42 is a non-volatile memory that stores programs, control data, etc. The RAM 43 functions as a working memory that temporarily holds data. With these configurations, the processor 41 realizes various processes by executing the programs stored in the ROM 42 or the storage unit 44 using the RAM 43.

[0026] The storage unit 44 is a storage device including a rewritable non-volatile memory. The storage unit 44 stores information for issuing a mobile driving license. For example, the storage unit 44 stores an application program (mDL app) for the mobile terminal 2 to operate as a mobile driving license. The mDL app stored in the storage unit 44 is appropriately downloaded in response to a request from the mobile terminal 2. Also, the mDL app to be downloaded to the mobile terminal 2 is an application program including a reader function (registration function) as a function necessary for registering the information of the driver's license of the person himself / herself.

[0027] Furthermore, the storage unit 44 stores key information used for encryption processing and the like. For example, the storage unit 44 stores a public key provided to the mobile terminal 2 together with the mDL app, and a secret key corresponding to the public key. The secret key is information managed by the competent authority so as not to be disclosed to the outside.

[0028] The communication unit 45 is a communication interface for communicating with external devices. For example, the communication unit 45 is configured as a communication interface for communicating with the mobile terminal 2 via a network. Also, the communication unit 45 may communicate with a data server that stores information on issued driving licenses.

[0029] The card creation unit 46 creates the notification card C. The card creation unit 46 is constituted by, for example, a printer or the like for printing an image including a code image on a recording medium as the notification card C. The card creation unit 46 creates a notification card printed with print data including the code image according to the control of the processor 41. Note that the card creation unit 46 may be an interface for connecting to an external system that creates the notification card C. Here, the case of creating the notification card C has been described. However, it is not always necessary to create a physical notification card C. Instead, electronic data including information indicating that it is surely issued by the management server may be issued or information may be output, and it may be possible to download or transmit it through a network or a communication line. That is, the electronic data or information may be uploadable or transmittable from a mobile terminal.

[0030] Next, the application reception process for the online registration of the mobile driver's license in the mobile ID issuance system according to the embodiment will be described. FIG. 4 is a flowchart for explaining an example of an application reception process in which the management server 4 of the mobile ID issuance system according to the embodiment receives an application for online registration of a mobile driver's license. A user (applicant) who holds a driver's license applies to a predetermined jurisdiction for online registration of the mobile driver's license (mDL) on the mobile terminal 2 that the user holds. For example, as an application for online registration of the mDL, it is assumed that the applicant transmits application information created in a predetermined format to a destination designated by a predetermined jurisdiction. The management server 4 acquires the application information transmitted to the designated destination.

[0031] For example, the applicant may input application information on the web page provided by the competent authority. In this case, the management server 4 may obtain the application information input on the web page. Also, the applicant may send an electronic file containing the application information to the destination specified on the web page provided by the competent authority. In this case, the management server 4 may obtain the application information from the electronic file containing the application information that has arrived at the specified destination.

[0032] Also, for the application for online registration of mDL, the applicant may mail the application form describing the application details to a predetermined destination, or may submit the application form describing the application details to a predetermined window. In these cases, the application details (application information) described in the application form may be input by an officer of the predetermined competent authority using an input device or the like, and the management server 4 may obtain the input application information.

[0033] The application details for online registration of mDL are reviewed by a predetermined authority. For example, for the application for online registration of mDL, only the owner of the driver's license can apply only once for one of the mobile terminals selected by the owner from among the mobile terminals owned by the applicant. In such an operation, if there is an issued driver's license that matches the application details and the registration of mDL for the said driver's license is the first time (not yet implemented), the management server 4 accepts the application details of the online application for mDL. Note that the review of the application details may be carried out visually by an officer of the predetermined authority, or may be determined based on the application information obtained by the management server 4 and the information of the registered driver's license. If considering the case of replacing the mobile terminal, a new application may be approved on the premise that the original mDL registration has been deleted.

[0034] Also, when it is possible to apply only once for one driver's license, for applications after the second time, accept them at the counter of the competent authority, and after an official of the competent authority performs a predetermined procedure (for example, a procedure for permitting applications after the second time), perform the processing after ST12 described below. This enables online registration of mDL as described below even when it is necessary to re-register mDL (after the second time) due to a model change or failure of the mobile terminal 2.

[0035] When receiving an application for online registration of mDL, the processor 21 of the management server 4 stores the received application information in the storage unit 44 (ST11). After storing the application information, the processor 21 generates authentication information for performing online registration of mDL (ST12). The authentication information is information for authenticating access from the mobile terminal 2 possessed by the applicant of the received application information. For example, the authentication information may be an access token or may include information associated with the applicant's driver's license.

[0036] After generating authentication information for authenticating access from the mobile terminal 2, the processor 21 encrypts the information including the authentication information using the private key managed by the management server 4 (ST13). After encrypting the information including the authentication information, the processor 21 generates a code image such as a two-dimensional code obtained by coding the encrypted information (ST14). Assume that the code image is information that can be decoded by the reader function of the mDL application installed in the mobile terminal 2.

[0037] After generating the code image, the processor 21 creates a notification card C on which the code image is printed by the card creation unit 46 (ST15). For example, the processor 21 generates print data of the notification card C including the code image and supplies the print data to the card creation unit 46. The card creation unit 46 creates the notification card C based on the print data from the processor 21. The notification card C may be a postcard with the destination specified by the applicant printed thereon or a document enclosed in an envelope.

[0038] Alternatively, the notification card C may be created by a card creation system different from the management server 4. In this case, the processor 21 may supply information including the code image necessary for creating the notification card C to the card creation system via the interface as the card creation unit 46.

[0039] Through the above processes, the management server 4 executes the registration of application information and the creation of notification cards. After receiving the application information through the application reception process, the management server 4 can receive access from the mobile terminal 2 using the authentication information indicated by the code image printed on the notification card C. On the other hand, the notification card C is sent to the address managed by the jurisdiction (such as the police department or government office) associated with the ID card (such as a driver's license or personal number card) by mail or the like, and thus reaches the holder of the ID card (the person himself / herself of the driver's license or personal number card).

[0040] Next, the registration process by online registration of the mobile driver's license in the mobile ID issuance system 1 according to the embodiment will be described. FIG. 5 is a sequence for explaining an example of the registration process by online registration of the mobile driver's license in the mobile ID issuance system 1 according to the embodiment. After the user (applicant) applies for the online registration of the mDL to a predetermined jurisdiction, the user receives the notification card C from the jurisdiction. The user who has received the notification card C can access the management server 4 by reading the code image printed on the notification card C using the mobile terminal 2 he / she possesses, and register the information of his / her driver's license in the mDL application.

[0041] That is, the user performs an operation of installing an mDL app with a reader function on the mobile terminal 2 that the user owns. The processor 21 of the mobile terminal 2 acquires the mDL app with the reader function and the public key according to the operation by the user, and installs the acquired mDL app (ST31). Further, the processor 21 acquires the public key together with the mDL app, and stores the acquired public key in the storage unit 24 (ST32).

[0042] For example, the mDL app with the reader function and the public key may be provided on a homepage published by a jurisdiction that is published on the Internet. In this case, the processor 21 of the mobile terminal 2 accesses the homepage of the jurisdiction by the mobile communication unit 25 according to the operation of the user, and downloads the mDL app with the reader function and the public key that can be downloaded from the homepage. The processor 21 of the mobile terminal 2 installs the mDL app downloaded via the mobile communication unit 25, and stores the public key in the storage unit 24.

[0043] Note that the method for the mobile terminal 2 to acquire the mDL app with the reader function and the public key is not limited to the method described above. For example, the mobile terminal 2 may read the mDL app stored in a portable storage medium, or may acquire the mDL app from an external device connected locally. Also, the mDL app may be installed on the mobile terminal 2 at any timing. For example, the mDL app may be installed on the mobile terminal 2 before the user receives the notification card C, or may be installed on the mobile terminal 2 after receiving the notification card.

[0044] The processor 21 of the mobile terminal 2 on which the mDL app is installed performs a registration process of registering various types of information required as the user's driver's license in the mDL app by the operation of the user who has received the notification card C. For example, the user who has received the notification card C operates the operation unit 28 of the mobile terminal 2 to instruct the activation of the mDL app.

[0045] The processor 21 activates the mDL application in response to an operation on the operation unit 28 by the user. When the mDL application is activated, the processor 21 reads the code image displayed on the notification card C by the reader function of the mDL application (ST33). For example, the processor 21 displays, on the display unit 27, a guidance to the effect that the code image of the notification card C is projected onto the camera 29 by the reader function of the mDL application. The processor 21 performs a process of extracting the code image from the image captured by the camera 29 as an image acquisition unit by the reader function of the mDL application. When the processor 21 extracts the code image from the image captured by the camera 29, the processor 21 decodes the extracted code image by the reader function of the mDL application. The processor 21 acquires, as the reading result of the code image, the information obtained by decoding the code image by the reader function.

[0046] When reading the code image, the processor 21 decrypts the information read from the code image using the public key obtained from the jurisdictional authority together with the mDL application (ST34). The code image is information encrypted with the private key managed by the jurisdictional authority, which includes information containing the authentication information generated in response to the application. Therefore, the information obtained by decrypting the reading result of the code image with the public key obtained from the jurisdictional authority includes the authentication information.

[0047] Also, the processor 21 acquires the data of the driver's license already possessed by the user (ST35). For example, the data of the driver's license includes the image of the face of the driver's license captured by the camera 29 and the information read by the card reader 26 from the driver's license. In this case, the user performs an operation of capturing the face of his or her own driver's license with the camera 29 of the mobile terminal 2 and bringing the driver's license close to the card reader 26 to read the information.

[0048] Also, the processor 21 acquires the identification information for identifying the model and the body of the mobile terminal 2 (ST36). For example, the processor 21 acquires terminal information including the body number of the mobile terminal 2, such as a MAC address or the like. Also, the processor 21 acquires an image including the face image of the user himself / herself captured by the camera 29 (ST37). For example, the processor 21 displays a guidance on the display unit 27 to the effect that the user's own face is to be captured by the camera 29 to prompt the capture of the face image. The processor 21 acquires the face image extracted from the image captured by the camera 29. Also, the processor 21 may guide the user to capture the face from not only the front but also any plurality of directions. In this case, the processor 21 can acquire not only the face image from the front but also the face images captured from a plurality of directions, and can prevent forgery of the face image and the like.

[0049] Also, the processor 21 acquires the fingerprint information of the user by the fingerprint sensor 30 (ST38). For example, the processor 21 displays a guidance on the display unit 27 to the effect that the user's own fingerprint is to be read by the fingerprint sensor 30 to prompt the acquisition of the fingerprint information by the fingerprint sensor 30. However, the fingerprint information is an example of the personal information of the applicant to be registered in the management server 4, and may be omitted depending on the operation mode. Also, as the personal information of the applicant to be registered in the management server 4, biometric information other than the fingerprint information may be acquired.

[0050] Also, the processor 21 checks the consistency between the information read from the driver's license and the information read from the code image (ST39). For example, the processor 21 calculates the Hash value in the mDL application based on the information read from the driver's license, and may make it possible to access the management server 4 when the Hash value matches the reading result of the code image. Thereby, not only security measures in the management server 4 but also access to the management server 4 can be made more secure in the mobile terminal 2 in which the mDL application is installed.

[0051] When the consistency between the information on the driver's license and the information read from the code image can be confirmed, the processor 21 generates transmission data including each acquired information, and encrypts the transmission data with the public key (ST40). The processor 21 transmits the transmission data (encrypted data) encrypted with the public key to the management server 4 (ST41).

[0052] The management server 4 receives the encrypted data from the mobile terminal 2 through the communication unit 45. The processor 41 of the management server 4 decrypts the encrypted data received from the mobile terminal 2 with the private key managed by the jurisdictional authority (ST42). The processor 41 decrypts the encrypted data encrypted by the mobile terminal 2 with the public key with the private key. Thereby, the management server 4 securely acquires information such as the reading result of the code image displayed on the notification card C, the data of the driver's license, the terminal information, the face photo, and the fingerprint information included in the data for transmission from the mobile terminal 2.

[0053] After decrypting the encrypted data from the mobile terminal 2, the processor 41 checks the legitimacy of the mobile terminal 2 as the one that registers the applicant's driver's license information based on the data acquired from the mobile terminal 2 (ST43). For example, the processor 41 confirms the legitimacy by checking the authentication information included in the reading result of the code image displayed on the notification card C. Also, the processor 41 may confirm the legitimacy by checking the consistency between the data of the driver's license acquired from the mobile terminal 2 and the information of the issued driver's license managed by the jurisdictional authority.

[0054] When the legitimacy can be confirmed, the processor 41 registers the data such as the data of the driver's license, the terminal information, the face photo, and the fingerprint information acquired from the mobile terminal 2 (ST44). For example, the processor 41 stores the data acquired from the mobile terminal 2 in association with the information of the driver's license of the applicant managed by the jurisdictional authority.

[0055] After storing the data acquired from the mobile terminal 2, the processor 41 encrypts the information of the driver's license (registration data in the mobile terminal 2) as the ID information to be registered in the mobile terminal 2 that can be used in the mDL application with the private key (ST45). After encrypting the registration data of the mobile terminal 2, the processor 41 transmits the encrypted registration data to the mobile terminal 2 (ST46).

[0056] The mobile terminal 2 acquires the encrypted registration data from the management server 4 via the mobile communication unit 25. The processor 21 of the mobile terminal 2 decrypts the encrypted registration data acquired from the management server 4 using the public key (ST47). The processor 21 registers the registration data including the decrypted ID information in the storage unit 24 as information that can be used by the mDL application (ST48). For example, the processor 21 stores in the storage unit 24 the driver's license information as the ID information included in the registration data acquired from the management server 4 so that it can be displayed by the mDL application.

[0057] When the registration of the registration data including the driver's license information that can be used by the mDL application is completed, the processor 21 invalidates the reader function added to the mDL application (ST49). When the invalidation of the reader function is completed, the processor 21 makes it possible to execute as a mobile driver's license (mobile ID) by displaying the driver's license information (ID information) registered by the mDL application. In this way, by invalidating the reader function as the registration function included in the mDL application after the registration is completed, it is possible to prevent the registration process from being tried multiple times.

[0058] When the mDL application becomes able to use the ID information, the processor 21 displays the driver's license information (ID information) on the display unit 27 in response to an operation instruction to the operation unit 28 by executing the mDL application (ST50). Thereby, the mobile terminal 2 is used as a mobile driver's license (mobile ID).

[0059] As described above, in the mobile ID issuance system according to the embodiment, the mobile terminal reads the code image printed on the notification card by the reader function of the mDL application, encrypts the information including the reading result of the code image using the public key, and transmits it to the management server. The management server decrypts the information including the reading result of the code image from the mobile terminal using the private key, and when the validity is confirmed by the decrypted information, transmits the registration data including the driver's license information to the mobile terminal. The mobile terminal stores the driver's license information included in the registration data received from the management server in the storage unit as information that can be displayed on the display unit by the mDL application.

[0060] Accordingly, according to the mobile ID issuance system according to the embodiment, ID information including the driver's license information indicated by the existing driver's license can be easily registered online. Further, according to the mobile ID issuance system according to the embodiment, the management server creates a notification card printed with a code image including authentication information in response to an application, and the mobile terminal reads the code image of the notification card and then performs an online registration process of the ID information. Therefore, secure online procedures can be implemented.

[0061] Also, according to the mobile ID issuance system according to the embodiment, the mobile terminal reads the code image printed on the notification card by the reader function of the mDL application. Further, after the mobile terminal stores the driver's license information from the management server in the storage unit, it disables the reader function of the mDL application. The mobile terminal enables the mDL application to display the driver's license information stored in the storage unit on the display unit after disabling the reader function. Thereby, multiple registration processes by the mDL application can be surely invalidated, and the registration process in one mDL application can be limited to once to prevent multiple registration processes due to unauthorized use.

[0062] Although several embodiments of the present invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the gist of the invention. These embodiments and their modifications are included in the scope and gist of the invention, and are included in the invention described in the claims and its equivalent scope.

Description of Reference Numerals

[0063] 2... Mobile terminal, 4... Management server, 21... Processor (first processor), 24... Memory unit, 25... Mobile communication unit (communication unit, first communication unit), 26... Card reader, 27... Display unit, 28... Operation unit, 29... Camera (image acquisition unit), 41... Processor (second processor), 44... Memory unit, 45... Communication unit (second communication unit), 46... Card creation unit.

Claims

1. An ID registration system including a mobile terminal and a management server, The mobile terminal includes A first communication unit for communicating with the management server, A storage unit for storing an application program for displaying ID information indicated by an existing ID card and information used in the application program, An image acquisition unit for acquiring a code image including authentication information for registering the ID information, and after transmitting information including information obtained by decoding the code image acquired by the image acquisition unit to the management server by a reader function provided in the application program, when the ID information acquired from the management server by the first communication unit is registered in the storage unit, a first processor for invalidating the reader function, The management server includes A second communication unit for communicating with the mobile terminal, When the management server receives information including information obtained by decoding a code image by the reader function of the application program of the mobile terminal, and when the legitimacy of the mobile terminal for registering the ID information is confirmed based on the information received from the mobile terminal, a second processor for transmitting the ID information to be registered in the mobile terminal to the mobile terminal by the second communication unit, An ID registration system.

2. An ID registration method for registering ID information in a mobile terminal, The mobile terminal acquires a code image including authentication information for registering the ID information by a reader function provided in an application program for displaying ID information indicated by an existing ID card, and transmits information including information obtained by decoding the acquired code image to a management server, When the management server confirms the legitimacy of the mobile terminal for registering the ID information based on the information received from the mobile terminal, the management server transmits the ID information to be registered in the mobile terminal to the mobile terminal, The mobile terminal registers the ID information received from the management server in a storage unit, and invalidates the reader function when the ID information is registered in the storage unit. ID registration method.

3. In a mobile terminal, a reader function that acquires a code image including authentication information for registering ID information indicated by an existing ID card and decodes the acquired code image; a registration function that stores, in a storage unit, the ID information acquired from the management server after transmitting, to the management server, information including the information obtained by decoding the code image by the reader function; an invalidation function that invalidates the reader function when the ID information is stored in the storage unit by the registration function; a display function that, after invalidating the reader function by the invalidation function, causes a display to display the ID information registered in the storage unit by the registration function in response to an operation instruction; A program for implementing the above.

Images