Authentication System

• US 20090189736A1
• Filed: 03/23/2006
• Published: 07/30/2009
• Est. Priority Date: 03/23/2005
• Status: Abandoned Application

• Current Assignee: IHC Corporation
• Original Assignee: IHC Corporation
• Inventors: Hayashi, Hitoshi
• Application Number:
  US11/886,749
• Publication Number:
  US 20090189736A1
• Time in Patent Office: Days
• US Class Current: 340/5.810
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G07B 15/00 Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points handling coins or valuable papers, e.g. banknotes, G07D; apparatus for vending or hiring articles or services activated by coins, credit cards, paper currency or the like G07F7/00, G07F17/00
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

[Problems] To provide an authentication system improving authentication accuracy of existence of a registered person and easily find an unauthorized act to improve the security in a system by performing authentication using coincidence/non-coincidence of biometrics information and temporal/spatial authentication when performing individual authentication via a network by using electronic information which is easily tampered, easily leaks out, and is easily stolen.

[Means for Solving Problems] An authentication server (1) includes a database for managing individual information on a registered person to be authenticated. Moreover, the authentication server (1) is connected to a plurality of management servers (2) via a communication network and correlates the individual information transmitted from an individual information input device (3) via the management server (2) with the individual information in the database, thereby authenticating the existence of the registered person.

Claims

1. An authentication system comprising

a plurality of servers each equipped with a database for managing individual information on registered people to be authenticated, and

a plurality of information input devices to be operated by the registered people connected to the servers via a communication line network, wherein

the information input devices send movement information including information input by the registered people to the servers, and

the servers, on receiving the movement information from the of information input devices, on the basis of the received movement information, and the individual information in the database, perform authentication of the existence of the registered people.

2. An authentication system according to claim 1, wherein

the servers collate the received movement information, and the individual information in the database, and at match of the above, send permission information to permit the information input devices to perform a specified action, to the information input devices, and

the information input devices, on receiving the permission information, perform the specified action.

3. An authentication system according to claim 1, wherein

the movement information includes position information showing the installation position of the information input device of the movement information sending source, temporal information showing the time at which information is input by registered people, and individual identification IDs peculiar to the registered people, and

the servers, on receiving a plurality of movement information including identical individual identification IDs, on the basis of the information input place and time of the registered people that the received movement information shows, perform continuous authentication of the existence of the registered people.

4. An authentication system according to claim 1, wherein

the servers and the information input devices send the movement information on the basis of transfer routes of the registered people.

5. An authentication system according to claim 1, wherein

the information input devices are equipped with a database for managing individual information, and when information is input from the registered people, collate the input information, and the individual information in the database, and at match of the above, perform a specified action.

6. An authentication system according to claim 1, wherein

the servers include a management server for managing the information input devices collectively in unit of building structure, transfer means, facility, region or organization, and an authentication server equipped with a database for totally managing the information in the database of the management server.

7. An authentication system according to claim 6, wherein

the authentication system has a plurality of units including at least one authentication server and a communication line network for connecting information input devices and terminals, and the authentication server controls rejection of the specified action by the information input devices, in unit of the units.

8. An authentication system according to claim 6, wherein

the authentication server, on receiving the movement information from the information input device, sends control information for limiting or prohibiting the specified action of the information input device, to the information input devices installed in other units than the unit to which the information input device belongs.

9. An authentication system according to claim 6, wherein

the authentication server, after receiving the movement information from the information input device, on receiving the movement information including identical individual identification IDs, sent from the information input devices in other units than the unit to which the information input device belongs,

sends control information for limiting or prohibiting the specified action by the information input device to the registered people specified by the individual identification IDs, to the information input device.

10. An authentication system according to claim 6, wherein

the authentication server, on receiving the movement information from the information input device, sends control information for deleting the movement information, to the information input devices and the management servers in other units than the unit to which the information input device belongs, to the information input device.

11. An authentication system according to claim 6, wherein

the authentication server, on receiving the movement information from the information input device, sends control information for limiting or prohibiting the specified action by the information input device, to the information input devices installed in the unit to which the information input device belongs.

12. An authentication system according to claim 6, wherein

the authentication server accumulates the received movement information, and on receiving the movement information from the information input device, on the basis of the installation positions of those skilled in the art information input devices of the sending source, and the accumulated movement information, forecasts the transfer route of the registered people, and sends control information for performing an execution preparation of a specified action, to the information input devices installed on the forecasted transfer route.

13. An authentication system according to claim 6, wherein

the authentication server, on receiving movement information including information showing destination of transfer means that the registered people use, and

receiving the movement information from the information input devices related to the transfer means, sends control information for performing an execution preparation of a specified action, to the information input devices related to the destination.

14. An authentication system according to claim 12, wherein

the authentication server, on receiving the movement information from the information input device installed out of the forecasted transfer route, sends control information for limiting or prohibiting the specified action by the information input device, to the information input device.

15. An authentication system according to claim 1, wherein

the servers and the information input devices have preset order of sending destinations of received or input information, and at failure of sending the received or input information, send the received or input information to the sending destination of the next order of the failed sending destination.

16. An authentication system according to claim 1, wherein

the authentication action, by collation of the biometrics information of registered people included in the movement information, and the biometrics information managed by the database, authenticates the existence of the registered people.

17. An authentication system according to claim 3, wherein

the servers convert local identification IDs, and individual identification IDs used in a limited organization.

18. An authentication system according to claim 1, wherein

the servers, on receiving the movement information from the information input device, perform authentication on the basis of the received movement information, and at success of the authentication, send permission information to permit the execution of financial transaction or settlement transaction, to the information input device.

19. An authentication system according to claim 1, wherein

the servers, on receiving the movement information from the information input device, perform authentication on the basis of the received movement information, and at success of the authentication, send information to recognize that a public identification card has been presented, to the information input device.

20. An authentication system according to claim 1, wherein

in the case of a temporal disconnection of network in the authentication system,

the information input devices send a signal to check whether connection is available at present to the servers and other information input devices that have been connectable with own device, and establish network with the servers or other information input devices with which connection is available.

21. An authentication system according to claim 20, wherein

the information input devices store list information showing the servers and other information input devices that are connectable with own device, and on the list information shows connection priority order, and

the information input devices, in the case of a temporal disconnection of network in the authentication system, send a signal to check in accordance with the priority order and establish network.