Personal authentication system, and personal authentication method and program used therefor

• US 7,028,013 B2
• Filed: 04/20/2001
• Issued: 04/11/2006
• Est. Priority Date: 04/26/2000
• Status: Expired due to Fees

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Saeki, Tomoya
• Primary Examiner(s): Tramwell, James P.
• Assistant Examiner(s): Worjloh, Jalatee
• Application Number:
  US09/838,319
• Publication Number:
  US 20010037310A1
• Time in Patent Office: 1,817 Days
• Field of Search: 705 64- 79, 705200-202, 705/2, 705/3, 713200-202, 713/155, 713182-186
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/357 Cards having a plurality of specified features
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07B 15/02 taking into account a variable factor such as distance or time, e.g. for passenger transport, parking systems or car rental systems G07B15/06 takes precedence; taximeters G07B13/00; parking meters per se G07F17/24; car rental systems per se G07B15/00
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/33 by means of a password
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

To provide a personal authentication system that enables a client to receive services even if he fails to carry his card or the like with him or loses it, thus preventing the abuse of the card or the like by a third person and the leakage of the personal information. When data identifying a client are transferred to an authentication server using an authentication terminal, the authentication server collates the sent data against personal authentication data registered previously in a database to identify the client and sends the results of the identification to the authentication terminal. After the authentication, when the authentication terminal requests the payment of charges from a settling account registered previously in the database, the read and modification of personal data, or the like, the authentication server executes a process based on the sent request.

Claims

1. A personal authentication system for connecting, via a communication line, an authentication server for authenticating a client to identify the client to an authentication terminal for inputting authentication information required for said personal authentication:

wherein the system has a database for storing at least personal authentication data required for said personal authentication and previously registered, settling account information required to process charges, and data required to receive various services;

wherein said authentication server has a function of collating said authentication information input from said authentication terminal via said communication terminal, against said personal authentication data stored in said database, a function of processing charges based on said settling account information registered in said database based on a request from said authentication terminal when the client is authenticated during said identification, and a function of providing, registering, and managing personal data registered beforehand in said database based on a request from said authentication terminal when the client is authenticated during said identification and periodically communicating a collation history, a personal data usage history, and a charge process history;

wherein the function of communicating said collation history, said personal data usage history, and said charge process history is configured to communicate this information by electronic mail at preset specified times; and

wherein only at times other than said preset specified times, said collation history, said personal data usage history, and said charge process history are recorded.

2. A personal authentication system for connecting, via a communication line, an authentication server for authenticating a client to identify the client to an authentication terminal for inputting authentication information required for said personal authentication:

wherein the system has a database for storing at least personal authentication data required for said personal authentication and previously registered, settling account information required to process charges, and data required to receive various services;

wherein said authentication server has a function of collating said authentication information input from said authentication terminal via said communication terminal, against said personal authentication data stored in said database, a function of processing charges based on said settling account information registered in said database based on a request from said authentication terminal when the client is authenticated during said identification, and a function of providing, registering, and managing personal data registered beforehand in said database based on a request from said authentication terminal when the client is authenticated during said identification and periodically communicating a collation history, a personal data usage history, and a charge process history;

wherein the function of communicating said collation history, said personal data usage history, and said charge process history is configured to show this information on a home page;

wherein only previously registered clients are allowed to view said home page; and

wherein said authentication server renews said collation history, said personal data usage history, and said charge process history, that is shown on said home page, after reading out said personal data registered beforehand and communicating read out personal data; and

wherein said authentication server renews said collation history, said personal data usage history, and said charge process history, that is shown on said home page, after reading out and modifying said personal data registered beforehand.

3. A personal authentication system for connecting, via a communication line, an authentication server for authenticating a client to identify the client to an authentication terminal for inputting authentication information required for said personal authentication:

wherein the system has a database for storing at least personal authentication data required for said personal authentication and previously registered, settling account information required to process charges, and data required to receive various services;

wherein said authentication server has a function of collating said authentication information input from said authentication terminal via said communication terminal, against said personal authentication data stored in said database, a function of processing charges based on said settling account information registered in said database based on a request from said authentication terminal when the client is authenticated during said identification, and a function of providing, registering, and managing personal data registered beforehand in said database based on a request from said authentication terminal when the client is authenticated during said identification and periodically communicating a collation history, a personal data usage history, and a charge process history;

wherein said authentication terminal is installed at a hospital clerk'"'"'s window and is configured to request said authentication server to execute said identification when the client visits said hospital and is configured to request said authentication server to extract personal information including a medical sheet and various examination data of the client who is authenticated during said identification and is configured to pay said hospital medical expenses from said settling account;

wherein when said authentication server does not detect a match between said authentication information input from said authentication terminal and said personal authentication data, said authentication server notifies said authentication terminal that the client is not authenticated; and

wherein when the client requires additional diagnosis or treatment, said authentication terminal is configured to request said authentication server to extract the client'"'"'s medical sheet, and is configured to schedule an appointment for said additional diagnosis or treatment.

4. A personal authentication method for a personal authentication system for connecting, via a communication line, an authentication server for authenticating a client to identify the client to an authentication terminal for inputting authentication information required for said personal authentication:

storing at least personal authentication data required for said personal authentication and previously registered, settling account information required to process charges, and data required to receive various services in a database stored on a computer; and

collating said authentication information input from said authentication terminal via said communication terminal, against said personal authentication data stored in said database, a step of processing charges based on said settling account information registered in said database based on a request from said authentication terminal when the client is authenticated during said identification, and a step of providing, registering, and managing personal data registered beforehand in said database based on a request from said authentication terminal when the client is authenticated during said identification and periodically communicating a collation history, a personal data usage history, and a charge process history at said authentication server;

wherein the step of communicating said collation history, said personal data usage history, and said charge process history is configured to communicate this information by electronic mail at preset specified times; and

wherein only at times other than said preset specified times, said collation history, said personal data usage history, and said charge process history is recorded.

5. A personal authentication method for a personal authentication system for connecting, via a communication line, an authentication server for authenticating a client to identify the client to an authentication terminal for inputting authentication information required for said personal authentication:

storing at least personal authentication data required for said personal authentication and previously registered, settling account information required to process charges, and data required to receive various services in a database stored on a computer; and

collating said authentication information input from said authentication terminal via said communication terminal, against said personal authentication data stored in said database, a step of processing charges based on said settling account information registered in said database based on a request from said authentication terminal when the client is authenticated during said identification, and a step of providing, registering, and managing personal data registered beforehand in said database based on a request from said authentication terminal when the client is authenticated during said identification and periodically communicating a collation history, a personal data usage history, and a charge process history at said authentication server;

wherein the step of communicating said collation history, said personal data usage history, and said charge process history is configured to show this information on a home page;

wherein only previously registered clients are allowed to view said home page; and

renewing said collation history, said personal data usage history, and said charge process history, that is shown on said home page, after reading out said personal data registered beforehand and communicating read out personal data at said authentication server; and

renewing said collation history, said personal data usage history, and said charge process history, that is shown on said home page, after reading out and modifying said personal data registered beforehand at said authentication server.

6. A personal authentication program for a personal authentication system for connecting, via a communication line, an authentication server for authenticating a client to identify the client to an authentication terminal for inputting authentication information required for said personal authentication:

instructions stored in a computer for storing at least personal authentication data required for said personal authentication and previously registered, settling account information required to process charges, and data required to receive various services in a database; and

instructions stored in a computer for collating said authentication information input from said authentication terminal via said communication terminal, against said personal authentication data stored in said database, a step of processing charges based on said settling account information registered in said database based on a request from said authentication terminal when the client is authenticated during said identification, and a step of providing, registering, and managing personal data registered beforehand in said database based on a request from said authentication terminal when the client is authenticated during said identification and periodically communicating a collation history, a personal data usage history, and a charge process history at said authentication server;

wherein the step of communicating said collation history, said personal data usage history, and said charge process history is configured to communicate this information by electronic mail at preset specified times; and

wherein only at times other than said preset specified times, said collation history, said personal data usage history, and said charge process history is recorded.

7. A personal authentication program for a personal authentication system for connecting, via a communication line, an authentication server for authenticating a client to identify the client to an authentication terminal for inputting authentication information required for said personal authentication:

instructions stored in a computer for storing at least personal authentication data required for said personal authentication and previously registered, settling account information required to process charges, and data required to receive various services in a database; and

instructions stored in a computer for collating said authentication information input from said authentication terminal via said communication terminal, against said personal authentication data stored in said database, a step of processing charges based on said settling account information registered in said database based on a request from said authentication terminal when the client is authenticated during said identification, and a step of providing, registering, and managing personal data registered beforehand in said database based on a request from said authentication terminal when the client is authenticated during said identification and periodically communicating a collation history, a personal data usage history, and a charge process history;

wherein the step of communicating said collation history, said personal data usage history at said authentication server, and said charge process history is configured to show this information on a home page;

wherein only previously registered clients are allowed to view said home page; and

instructions stored in a computer for renewing said collation history, said personal data usage history, and said charge process history, that is shown on said home page, after reading out said personal data registered beforehand and communicating read out personal data at said authentication server; and

instructions stored in a computer for renewing said collation history, said personal data usage history, and said charge process history, that is shown on said home page, after reading out and modifying said personal data registered beforehand at said authentication server.