Internet service system and internet accessing method
Abstract
(-- 57) summary and a subject -- an efficient and safe Internet service system is offered. Solution means It has Internet terminal 1 which receives Internet services 2 through the Internet 4, and the Internet provider server 3 which restricts the connection with the Internet 4 of this terminal, and access to Internet services 2. A user's vital feature information read by the biometrics apparatus 5 is transmitted to the server 3 from Internet terminal 1, and personal authentication is performed. When this attestation result is just, from the server 3, it is transmitted to Internet terminal 1 and interim storage of a user's individual attribute information registered beforehand is carried out. In Internet terminal 1, personal environment peculiar to a user is generated based on the kept individual attribute information.
Term
Term ended
Projected expiry passed 19 April 2020, 6.4 years ago.
- Priority and filed
- Published
- Projected expiry
- Today
19 claims: 8 independent, 11 dependent
- 1[Claims] 1. In an Internet service system in which access to the Internet service of an Internet terminal receiving a predetermined Internet service is restricted by an Internet provider server. The Internet terminal is provided with biometrics means for acquiring the biometric characteristics of the user, and is configured to transmit the biometric information of the user obtained by the biometrics means to the Internet provider server. The Internet provider server A storage means in which biometric information about the user and personal attribute information required for the user to use the Internet service are associated and stored in advance, and It has an authentication means for collating the biometric information transmitted from the Internet terminal with the biometric information stored in the storage means. Only when the collation of the biometric information by the authentication means is valid, the personal attribute information of the user is read from the storage means based on the biometric information, and the read personal attribute information is read out to the Internet terminal. The Internet service system is characterized in that the personal environment unique to the user is generated by transmitting the information, and the interface for accessing the Internet service is set according to a predetermined rule. 【特許請求の範囲】 【請求項1】 所定のインターネットサービスを受けるインターネット端末の前記インターネットサービスへのアクセスがインターネットプロバイダサーバにより制限されるインターネットサービスシステムにおいて、 前記インターネット端末は、利用者の生体特徴を取得するためのバイオメトリクス手段を備え、該バイオメトリクス手段により得られる利用者の生体特徴情報を前記インターネットプロバイダサーバへ送信するように構成され、 前記インターネットプロバイダサーバは、 利用者に関する生体特徴情報と利用者が前記インターネットサービスを利用する上で必要となる個人属性情報とが対応づけられて予め格納された格納手段と、 前記インターネット端末から送信された生体特徴情報と前記格納手段に格納されている生体特徴情報との照合を行う認証手段とを有し、 前記認証手段による生体特徴情報の照合が正当である場合にのみ、その生体特徴情報を基に前記格納手段から利用者の個人属性情報を読み出し、前記インターネット端末に対して、その読み出した個人属性情報を送信して利用者固有の個人環境を生成させるとともに、前記インターネットサービスへのアクセスを行うためのインタフェースを予め決められたルールに従って設定するように構成されていることを特徴とするインターネットサービスシステム。
- 3The second aspect of the present invention is that the Internet terminal is configured to erase the temporarily stored personal attribute information in response to a predetermined input operation for terminating the connection to the Internet. The listed internet service system. 【請求項3】 インターネット端末は、インターネットへの接続を終了するための所定の入力操作に応じて、一時保管した個人属性情報を消去するように構成されていることを特徴とする請求項2に記載のインターネットサービスシステム。
- 5In an Internet terminal in which access to a predetermined Internet service is restricted by an Internet provider server. It is provided with a biometrics means for acquiring the biometrics of the user, and the biometrics information of the user obtained by the biometrics means is sent to the Internet provider server to receive personal authentication, and the authentication result is valid. An Internet terminal characterized in that it is configured to temporarily store a user's personal attribute information received from the Internet provider server and to generate a user-specific personal environment based on the personal attribute information. .. 【請求項5】 所定のインターネットサービスへのアクセスがインターネットプロバイダサーバにより制限されるインターネット端末において、 利用者の生体特徴を取得するためのバイオメトリクス手段を備え、該バイオメトリクス手段により得られる利用者の生体特徴情報を前記インターネットプロバイダサーバへ送出して個人認証を受け、その認証結果が正当である場合に前記インターネットプロバイダサーバから受信する利用者の個人属性情報を一時保管するとともに、その個人属性情報を基に利用者固有の個人環境を生成するように構成されていることを特徴とするインターネット端末。
- 8In an Internet provider server that restricts access to the Internet service of an Internet terminal that receives a predetermined Internet service. The storage means in which the biometric information about the user and the personal attribute information required for the user to use the Internet service are associated and stored in advance, the biometric information sent from the Internet terminal, and the above. It has an authentication means that collates with the biometric information stored in the storage means. Only when the collation of the biometric information by the authentication means is valid, the personal attribute information of the user is read from the storage means based on the biometric information, and the read personal attribute information is read out to the Internet terminal. An Internet provider server, which is configured to generate a personal environment peculiar to a user by transmitting information, and to set an interface for accessing the Internet service according to a predetermined rule. 【請求項8】 所定のインターネットサービスを受けるインターネット端末の前記インターネットサービスへのアクセスを制限するインターネットプロバイダサーバにおいて、 利用者に関する生体特徴情報と利用者が前記インターネットサービスを利用する上で必要となる個人属性情報とが対応づけられて予め格納された格納手段と、前記インターネット端末から送出された生体特徴情報と前記格納手段に格納されている生体特徴情報との照合を行う認証手段とを有し、 前記認証手段による生体特徴情報の照合が正当である場合にのみ、その生体特徴情報を基に前記格納手段から利用者の個人属性情報を読み出し、前記インターネット端末に対して、その読み出した個人属性情報を送信して利用者固有の個人環境を生成させるとともに、前記インターネットサービスへのアクセスを行うためのインタフェースを予め決められたルールに従って設定するように構成されていることを特徴とするインターネットプロバイダサーバ。
- 9In an Internet access method performed in an Internet service system in which access to the Internet service by an Internet terminal receiving a predetermined Internet service is restricted by an Internet provider server. Pre-registering biometric information and predetermined personal attribute information about the user in the Internet provider server, When using the Internet terminal, the biometrics of the user are obtained, and personal authentication is performed by collating the obtained biometrics information with the biometrics information registered in advance in the Internet provider server. When, When the authentication result is valid, the personal attribute information about the user is read from the personal attribute information registered in advance in the Internet provider server, and the read personal attribute information is temporarily stored in the Internet terminal. At least, an Internet access method including generating a user-specific personal environment in the Internet terminal based on the temporarily stored personal attribute information. 【請求項9】 所定のインターネットサービスを受けるインターネット端末の前記インターネットサービスへのアクセスがインターネットプロバイダサーバにより制限されるインターネットサービスシステムにおいて行われるインターネットアクセス方法において、 利用者に関する生体特徴情報と所定の個人属性情報を前記インターネットプロバイダサーバに予め登録することと、 前記インターネット端末を利用する際に、その利用者の生体特徴を入手し、該入手した生体特徴情報と前記インターネットプロバイダサーバに予め登録しておいた生体特徴情報を照合することで個人認証を行うことと、 前記認証結果が正当である場合に、前記インターネットプロバイダサーバに予め登録しておいた個人属性情報からその利用者に関する個人属性情報を読み出して、該読み出した個人属性情報を前記インターネット端末に一時保管するとともに、該一時保管した個人属性情報に基づいて前記インターネット端末に利用者固有の個人環境を生成することとを少なくとも含むインターネットアクセス方法。
- 13A personal authentication process for performing personal authentication by collating biometric information received from an Internet terminal with biometric information about a user stored in advance. Only when the authentication result is valid, the personal attribute information required for the user to use the Internet service, which is stored in advance corresponding to the biometric information, is transmitted to the Internet terminal. Then, the personal attribute information transmission process for causing the Internet terminal to generate a user-specific personal environment based on the personal attribute information, A record characterized by recording an interface setting process for setting an interface for accessing an Internet service to the Internet terminal according to a predetermined rule, and a program for causing a computer of an Internet provider server to execute the interface setting process. Medium. 【請求項13】 インターネット端末から受信した生体特徴情報と予め格納されている利用者に関する生体特徴情報とを照合して個人認証を行う個人認証処理と、 前記認証結果が正当である場合にのみ、その生体特徴情報に対応して予め記憶されている、利用者が前記インターネットサービスを利用する上で必要となる個人属性情報を、前記インターネット端末へ送信して、該個人属性情報に基づく利用者固有の個人環境を前記インターネット端末に生成させる個人属性情報送信処理と、 前記インターネット端末に対して、インターネットサービスへのアクセスを行うためのインタフェースを予め決められたルールに従って設定するインタフェース設定処理と、をインターネットプロバイダサーバのコンピュータに実行させるプログラムを記録したことを特徴とする記録媒体。
- 14The biometric information transmission process of transmitting the biometric information of the user to the Internet provider server and receiving personal authentication. When the authentication result is valid, the user's personal attribute information is received from the Internet provider server, the information is temporarily stored, and a user-specific personal environment is generated based on the stored personal attribute information. A recording medium characterized in that a personal environment generation process and a program for executing a computer of an Internet terminal are recorded. 【請求項14】 利用者の生体特徴情報をインターネットプロバイダサーバへ送信して個人認証を受ける生体特徴情報送信処理と、 前記認証結果が正当である場合に、前記インターネットプロバイダサーバから利用者の個人属性情報を受け取ってその情報を一時保管するとともにその保管された個人属性情報に基づいて利用者固有の個人環境を生成する個人環境生成処理と、をインターネット端末のコンピュータに実行させるプログラムを記録したことを特徴とする記録媒体。
- 17The biometric information transmission process of transmitting the biometric information of the user to the Internet provider server and receiving personal authentication. When the authentication result is valid, the user's personal attribute information is received from the Internet provider server, the information is temporarily stored, and a user-specific personal environment is generated based on the stored personal attribute information. Record the program that causes the computer of the Internet terminal to execute the personal environment generation process, Personal authentication processing that performs personal authentication by collating the biometric information received from the Internet terminal with the biometric information about the user stored in advance, Only when the authentication result of the biometric information is valid, the personal attribute information required for the user to use the Internet service, which is stored in advance corresponding to the biometric information, can be obtained from the Internet. The personal attribute information transmission process of transmitting to the terminal and causing the Internet terminal to generate a user-specific personal environment based on the personal attribute information. A record characterized by recording an interface setting process for setting an interface for accessing an Internet service to the Internet terminal according to a predetermined rule, and a program for causing a computer of an Internet provider server to execute the interface setting process. Medium. 【請求項17】 利用者の生体特徴情報をインターネットプロバイダサーバへ送信して個人認証を受ける生体特徴情報送信処理と、 前記認証結果が正当である場合に、前記インターネットプロバイダサーバから利用者の個人属性情報を受け取ってその情報を一時保管するとともにその保管された個人属性情報に基づいて利用者固有の個人環境を生成する個人環境生成処理と、をインターネット端末のコンピュータに実行させるプログラムを記録し、 インターネット端末から受信した生体特徴情報と予め格納されている利用者に関する生体特徴情報とを照合して個人認証を行う個人認証処理と、 前記生体特徴情報の認証結果が正当である場合にのみ、その生体特徴情報に対応して予め記憶されている、利用者が前記インターネットサービスを利用する上で必要となる個人属性情報を、前記インターネット端末へ送信して、該個人属性情報に基づく利用者固有の個人環境を前記インターネット端末に生成させる個人属性情報送信処理と、 前記インターネット端末に対して、インターネットサービスへのアクセスを行うためのインタフェースを予め決められたルールに従って設定するインタフェース設定処理と、をインターネットプロバイダサーバのコンピュータに実行させるプログラムを記録したことを特徴とする記録媒体。
Independent claims8
144 paragraphs in 1 section, as filed
Description: TECHNICAL FIELD [Detailed description of the invention]
【0001】
[Technical field to which the invention belongs]
The present invention relates to a system and a method of accessing an Internet service via the Internet. Further, the present invention relates to an Internet terminal and an Internet provider server that constitute such a system, and a recording medium that records a program that executes such a method.
【0002】
[Conventional technology]
In recent years, the usage patterns of Internet service systems using the Internet include information exchange by e-mail and provision of various information by WWW (World Wide Web), electronic commerce (EC) services, and ASP (Application service providers). , Is expanding to provide online administrative services.
【0003】
Figure 5 shows an example of an Internet service system that provides services using the Internet. The network configuration of this system is such that the Internet terminal 101, the Internet service 102, and the Internet provider server 103 are each connected to the Internet 100. The Internet terminal 101 is a personal computer (PC) that receives Internet services and is used by an unspecified number of users. The Internet service 102 provides an e-mail service, a WWW service, an EC service, an online administrative service, and the like via the Internet 100. The Internet provider server 103 provides a connection service to the Internet 100 of the Internet terminal 101.
【0004】
In this Internet service system, when receiving an Internet service from the Internet service 102, the user first inputs a predetermined personal authentication information (ID number, password, etc.) for connecting to the Internet from the Internet terminal 101 (Fig.). 5). The entered personal authentication information is encrypted and sent to the Internet provider server 103 (Fig. 5).
【0005】
When the Internet provider server 103 receives the personal authentication information, the Internet provider server 103 performs personal authentication (user authentication) based on the received information, and as a result, only when it is confirmed that the user should receive the service, the Internet terminal 101 Allows you to connect to the Internet 102 (Figure 5).
【0006】
When the connection to the Internet 102 is permitted, the user subsequently accesses the desired Internet service of the Internet service 102 and inputs another predetermined personal authentication information (ID number, password, etc.). This entered personal authentication information is encrypted and sent to the Internet service 102 (Fig. 5).
【0007】
When the Internet service 102 receives the personal authentication information, the Internet service 102 performs personal authentication (user authentication) based on the received information, and only when it is confirmed that the user should receive the service is the Internet service 102 for the Internet terminal 101. Allows the connection to the Internet 102 and distributes the service to the Internet terminal 101 via the Internet 102 (Fig. 5). As a result, the user can receive the desired Internet service.
【0008】
[Problems to be Solved by the Invention]
In the conventional Internet service system described above, the user enters personal information (ID number, password, etc.) to connect to the Internet and receives personal authentication. Furthermore, after connecting to the Internet, each Internet service is different. It was necessary to enter personal information (ID number, password, etc.) to receive personal authentication. Further, the user also needs to input necessary user information for each Internet service. In this way, in the past, when receiving an Internet service, in addition to inputting a plurality of different personal information, a large amount of user information was required to be input to the user, so that it was never easy for the user to handle. I could not say it.
【0009】
In addition, most Internet services are general-purpose and guide common menus, so users cannot easily find or select the services they need. , I often got lost. Therefore, it has been strongly desired to provide an Internet service that is easy for users to understand and use.
【0010】
Furthermore, since personal authentication is performed for each Internet service, the current situation is that the security and responsibility are also borne by each Internet service. Therefore, there is an urgent need to develop a system that can guarantee safety and unify the burden of responsibility and allow users to receive Internet services with peace of mind.
【0011】
An object of the present invention is to provide an efficient and secure Internet service system and an Internet access method capable of providing user attribute information necessary for using an Internet service as a common infrastructure service. It is in.
【0012】
A further object of the present invention is to provide an Internet terminal and an Internet provider server capable of realizing such an Internet service.
【0013】
Furthermore, another object of the present invention is to provide a recording medium on which a program for executing such an Internet service is recorded.
【0014】
[Means for solving problems]
In order to achieve the above object, the system of the present invention is an Internet service system in which access to the Internet service by an Internet terminal receiving a predetermined Internet service is restricted by an Internet provider server, and the Internet terminal is a living body of a user. It is provided with biometrics means for acquiring features, and is configured to transmit the biometrics information of the user obtained by the biometrics means to the Internet provider server, and the Internet provider server is configured to transmit the biometrics information about the user. And the personal attribute information required for the user to use the Internet service are associated with each other and stored in advance, and the biometric information transmitted from the Internet terminal and the storage means are stored. It has an authentication means for collating with the existing biometric information, and only when the collation of the biometric information by the authentication means is valid, the personal attribute information of the user is used from the storage means based on the biometric information. Is read, and the read personal attribute information is transmitted to the Internet terminal to generate a user-specific personal environment, and an interface for accessing the Internet service is set according to a predetermined rule. It is characterized in that it is configured to do so.
【0015】
In the above case, the Internet terminal temporarily stores the personal attribute information received from the Internet provider server, and also stores the required information from the temporarily stored personal attribute information in response to a predetermined input operation for accessing the Internet service. It may be configured to read and send to the server that provides the Internet service. In addition, the Internet terminal may be configured to erase the temporarily stored personal attribute information in response to a predetermined input operation for terminating the connection to the Internet. Furthermore, when the Internet terminal sends the required information read from the temporarily stored personal attribute information to the server that provides the Internet service, a message indicating that the personal authentication based on the biometric information has been obtained is added to the information. The server that provides the Internet service may be configured to provide the service only to the Internet terminal that has transmitted the message.
【0016】
The Internet terminal of the present invention includes a biometric means for acquiring a user's biological characteristics in an Internet terminal whose access to a predetermined Internet service is restricted by an Internet provider server, and the use obtained by the biometric means. The person's biometric information is sent to the Internet provider server to receive personal authentication, and if the authentication result is valid, the user's personal attribute information received from the Internet provider server is temporarily stored and the personal attribute is stored. It is characterized in that it is configured to generate a user-specific personal environment based on information.
【0017】
In the above case, the required information may be read from the temporarily stored personal attribute information and transmitted to the server that provides the Internet service in response to a predetermined input operation for accessing the Internet service. Further, it may be configured to delete the temporarily stored personal attribute information in response to a predetermined input operation for terminating the connection to the Internet.
【0018】
The server of the present invention is an Internet provider server that restricts access to the Internet service of an Internet terminal that receives a predetermined Internet service, and is required for biometric information about the user and the user to use the Internet service. It has a storage means that is associated with personal attribute information and is stored in advance, and an authentication means that collates the biometric information sent from the Internet terminal with the biometric information stored in the storage means. Only when the collation of the biometric information by the authentication means is valid, the personal attribute information of the user is read from the storage means based on the biometric information, and the read personal attribute is read out to the Internet terminal. It is characterized in that it is configured to transmit information to generate a personal environment peculiar to a user and to set an interface for accessing the Internet service according to a predetermined rule.
【0019】
The Internet access method of the present invention is an Internet access method performed in an Internet service system in which access to the Internet service by an Internet terminal receiving a predetermined Internet service is restricted by an Internet provider server, and is defined as biometric information about a user. The personal attribute information of the user is registered in advance in the Internet provider server, and when the Internet terminal is used, the biometric characteristics of the user are obtained, and the obtained biometric information and the biometric information are registered in advance in the Internet provider server. Personal authentication is performed by collating the stored biometric information, and if the authentication result is valid, personal attribute information about the user is obtained from the personal attribute information registered in advance in the Internet provider server. Is read and the read personal attribute information is temporarily stored in the Internet terminal, and at least includes generating a user-specific personal environment in the Internet terminal based on the temporarily stored personal attribute information. It is a feature.
【0020】
In the above case, in response to a predetermined input operation for accessing the Internet service, the required information is read from the personal attribute information temporarily stored in the Internet terminal, and the information is transmitted to the server that provides the Internet service. May further be included. Further, it may further include erasing the personal attribute information temporarily stored in the Internet terminal in response to a predetermined input operation for terminating the connection to the Internet. Furthermore, when the required information read from the temporarily stored personal attribute information is transmitted to the server that provides the Internet service, a message indicating that the personal authentication based on the biometric information has been obtained is added to the information, and the above-mentioned It may further include providing the Internet service only to the Internet terminal that sent the message.
【0021】
The recording medium of the present invention includes a personal authentication process in which personal authentication is performed by collating the biometric information received from an Internet terminal with the biometric information about the user stored in advance, and when the authentication result is valid. Only, the personal attribute information required for the user to use the Internet service, which is stored in advance corresponding to the biometric information, is transmitted to the Internet terminal and used based on the personal attribute information. Personal attribute information transmission processing that causes the Internet terminal to generate a personal environment unique to a person, interface setting processing that sets an interface for accessing the Internet service to the Internet terminal according to predetermined rules, and It is characterized by recording a program that causes the computer of the Internet provider server to execute.
【0022】
Further, the recording medium of the present invention can be used by the biometric information transmission process of transmitting the biometric information of the user to the Internet provider server and receiving personal authentication, and when the authentication result is valid, from the Internet provider server. A program that causes the computer of the Internet terminal to execute the personal environment generation process that receives the personal attribute information of the person, temporarily stores the information, and generates the personal environment unique to the user based on the stored personal attribute information. It is characterized by being recorded.
【0023】
In the above case, the Internet terminal performs the personal attribute information transmission process of reading the required information from the temporarily stored personal attribute information and transmitting it to the server that provides the Internet service in response to a predetermined input operation for accessing the Internet service. It may be a further record of the program to be executed by the computer. Further, a program for causing the computer of the Internet terminal to execute the personal attribute information erasing process for erasing the temporarily stored personal attribute information in response to a predetermined input operation for terminating the connection to the Internet may be further recorded. ..
【0024】
Further, the recording medium of the present invention can be used by the biometric information transmission process of transmitting the biometric information of the user to the Internet provider server and receiving personal authentication, and when the authentication result is valid, from the Internet provider server. A program that causes the computer of the Internet terminal to execute the personal environment generation process that receives the personal attribute information of the person, temporarily stores the information, and generates the personal environment unique to the user based on the stored personal attribute information. A personal authentication process that records and collates the biometric information received from the Internet terminal with the biometric information about the user stored in advance to perform personal authentication, and when the authentication result of the biometric information is valid. Only, the personal attribute information required for the user to use the Internet service, which is stored in advance corresponding to the biometric information, is transmitted to the Internet terminal and is based on the personal attribute information. Personal attribute information transmission processing that causes the Internet terminal to generate a user-specific personal environment, and interface setting processing that sets the interface for accessing the Internet service to the Internet terminal according to predetermined rules. , Is recorded on the computer of the Internet provider server.
【0025】
In the above case, in response to a predetermined input operation for accessing the Internet service, the personal attribute information transmission process of reading the required information from the temporarily stored personal attribute information and transmitting it to the server that provides the Internet service is performed by the Internet terminal. It may be a further record of the program to be executed by the computer. Further, a program for causing the computer of the Internet terminal to execute the personal attribute information erasing process for erasing the temporarily stored personal attribute information in response to a predetermined input operation for terminating the connection to the Internet may be further recorded. ..
【0026】
In the present invention as described above, when the user inputs his / her own biocharacteristics when using the Internet service, personal authentication is performed by the Internet provider server based on the input biometrics information. Therefore, the user does not need to enter the ID number and password at the time of personal authentication by the Internet provider server.
【0027】
In addition, the Internet provider server stores personal attribute information necessary for the user to use the Internet service in advance, and when it is confirmed by personal authentication that the user is the person, the personal attribute information about the user is stored. It is sent to the Internet terminal to automatically generate a user-specific personal environment, and the interface for accessing the Internet service is automatically set. Therefore, the user can access any Internet service simply by inputting his / her own biological characteristics.
【0028】
Further, according to the present invention, necessary information is read from the personal attribute information temporarily stored in the Internet terminal and transmitted to the server providing the Internet service in response to a predetermined input operation for accessing the Internet service. Therefore, the user does not need to enter the ID number and password when personally authenticating with the Internet service, and can use the desired Internet service without entering personal attribute information. It is possible.
【0029】
In addition, when an Internet terminal adds a message indicating that it has received personal authentication based on biometric information to the required information read from personal attribute information, the message is confirmed by the server that provides the Internet service. Since it is possible to check whether the access is legitimate, it is possible to eliminate unauthorized access from other servers.
【0030】
As described above, according to the present invention, personal authentication can be performed by an Internet provider server and an Internet service simply by inputting a user's biological characteristics, and personal attributes when accessing an arbitrary Internet service. Since the information can be input automatically, it is possible to provide the user attribute information required for using the Internet service as a common infrastructure service.
【0031】
BEST MODE FOR CARRYING OUT THE INVENTION
Next, an embodiment of the present invention will be described with reference to the drawings.
【0032】
FIG. 1 is a block diagram showing a schematic configuration of an Internet service system according to an embodiment of the present invention. In the network configuration of this Internet service system, the Internet terminal 1 equipped with the biometric device 5, the Internet service 2, and the Internet provider server 3 can each be connected to the Internet 4.
【0033】
The Internet terminal 1 is a terminal that can connect to the Internet, such as a personal computer (PC). The Internet terminal 1 includes, for example, a terminal placed in a store and used by an unspecified number of users, and a terminal owned by the user. Internet service 2 provides users with e-mail services, WWW services, EC services, online administrative services, etc. via the Internet 4. The biometrics device 5 measures individual biological characteristics such as fingerprints, palm prints, retinas, and voices. In this embodiment, it is assumed that the biometrics device 5 is provided with a fingerprint sensor, and a device that measures the user's fingerprint by the sensor is used. The fingerprint information measured by the biometrics device 5 is encrypted by the Internet terminal 1, and this is sent to the Internet provider server 3 as fingerprint information for personal authentication.
【0034】
The Internet provider server 3 restricts the connection of the Internet terminal 1 to the Internet 4 and the access to the Internet service 2. The Internet provider server 3 includes a personal authentication unit 31 that performs personal authentication based on encrypted fingerprint information for personal authentication transmitted from the Internet terminal 1, and an individual in which personal configuration parameters of each user are stored in advance. It has a personal internet service 30 with a configuration parameter storage unit 32. Here, the personal configuration parameters are the ID number and password required for an individual to use the Internet service, as well as the personal credit number, bank account number, insurance card number, address, administrative district, and the Internet service used. User attribute information consisting of e-mail addresses, occupations, affiliations, hobbies / health concerns, etc. The user attribute information and the personal fingerprint information are provided in advance by the user at the time of contract, are encrypted, and are stored in the personal configuration parameter storage unit 32. The data registration work at the time of this contract can also be performed via the Internet.
【0035】
Regarding the interface required for the connection between the Internet terminal 1 and the Internet service 2 when accessing various Internet services (personal authentication and input of user attribute information) between the Internet service 2 and the Internet provider server 3. Arrangements and mechanisms (rules) are built in advance. The Internet provider server 3 performs personal authentication based on the encrypted fingerprint information for personal authentication transmitted from the Internet terminal 1, and only when the validity of the information is confirmed, the personal configuration for the user is performed. The parameters and the personal environment generation program are sent to the Internet terminal 1. By executing this personal environment generation program, a user-specific personal environment can be generated on the Internet terminal 1 that is the destination based on the personal configuration parameters sent together, and Internet service authentication and distribution content can be generated. It is possible to set the interface according to a predetermined rule such as selection of. This personal environment generation program is pre-encrypted and stored in a storage device (not shown) in the Internet provider server 3.
【0036】
Hereinafter, the specific processing procedure for receiving the Internet service in this Internet service system will be described in detail.
【0037】
When the user activates an arbitrary Internet terminal 1 and accesses the personal Internet service 30 of the Internet provider server 3, the personal Internet service 30 sends a personal authentication request by fingerprint input to the Internet terminal 1. In response to this, when the user inputs his / her fingerprint image from the sensor unit of the biometrics device 5 provided in the terminal, the biometrics device 5 has a fingerprint feature with respect to the input fingerprint image. A well-known process is performed to extract the fingerprint information, and the extraction result is transmitted to the Internet terminal 1 as fingerprint information (Fig. 1). When the Internet terminal 1 receives the fingerprint information, the fingerprint information is subjected to a predetermined encryption process, and the encrypted data is sent to the Internet provider server 3 as fingerprint information for personal authentication (FIG. 1).
【0038】
When the Internet provider server 3 receives the personal authentication fingerprint information (encrypted data), it decrypts the received personal authentication fingerprint information (encrypted data) and the pre-registered personal fingerprint information (encrypted data). (Step S12), personal authentication is performed by collating both fingerprint information. Normally, since there are a plurality of registered fingerprint information, 1-to-N verification is performed in which the registered fingerprint information is sequentially read and collated. If the result of personal authentication is invalid, access is denied, and if it is valid, the personal authentication is performed from the personal configuration parameter (encrypted data) stored in advance in the personal configuration parameter storage unit 32. Reads the personal configuration parameters (encrypted data) related to the user, sends them to the Internet terminal 1 together with the personal environment generation program (encrypted data), and allows the Internet terminal 1 to connect to the Internet 4. ((Fig. 1). Here, the personal configuration parameters are sent to the Internet terminal 1 as one of the information of the portal service. The portal service is a provider server when the user accesses the Internet service. This is the first service provided to the user's terminal, and the user accesses the desired Internet service using the service information (menu, etc.) provided by this portal service.
【0039】
When the Internet terminal 1 receives the personal configuration parameter (encrypted data) and the personal environment generation program (encrypted data), it decrypts both received data and executes the personal environment generation program. The received personal configuration parameters are temporarily stored in the Internet terminal 1. When the personal environment generation program is executed, the environment of Internet terminal 1 is generated based on the stored personal configuration parameters (Fig. 1), and Internet service authentication, distribution content selection, etc. are determined in advance. The interface is set according to the rules. Then, when the user performs an operation to access the desired Internet service, the stored personal configuration parameters are automatically sent to the Internet service (Fig. 1).
【0040】
The Internet service that has received the personal configuration parameters performs personal authentication based on the received personal configuration parameters, and provides distribution services such as unique contents and programs according to the personal attributes to the Internet terminal 1 ( (Fig. 1).
【0041】
According to the above processing, all users who use the Internet can use the Internet service in a unified manner only by inputting a fingerprint without inputting an individual ID number and password. This fingerprint input Internet service is also effective in preventing unjust acts by malicious third parties such as "spoofing".
【0042】
In addition, the menus and services most suitable for the individual are automatically provided according to the personal attributes included in the personal configuration parameters, so that the user can receive the Internet service with peace of mind. For example, when using an EC service, virtual shopping that suits the taste is introduced, and the user can easily make a payment without entering extra information such as a credit number and a bank account number. In addition, when using an electronic administrative service (online administrative service), the user is automatically guided to the relevant administrative agency and the required administrative service menu is provided, so the user can select the procedure without hesitation. be able to. Below, as an example, the configuration and operation of the system when using the electronic administration service will be specifically described.
【0043】
(Example) FIG. 2 is a block diagram showing a schematic configuration of an Internet service system that provides an electronic administrative service, which is an embodiment of the present invention. This Internet service system has the electronic administrative service 2a and the credit service 2b as the Internet service 2, and also has the printer 6 for printing out the electronic data provided by the electronic administrative service 2a. It is the same as the network configuration shown in. In FIG. 2, the same parts are designated by the same reference numerals, and detailed description of their configurations will be omitted here.
【0044】
Figure 3 shows an example of the information stored in the personal configuration parameter storage unit 32 of this system. In this example, fingerprint information, name, age / gender, birthday / blood type are registered as basic information, and the basic attributes are home address, current address / telephone number, basic pension number, insurance card information, email address, etc. Electronic certification is registered, and bank account information and credit information are registered as payment attributes. The basic information, the basic attribute, and the personal attribute information of the payment attribute are prepared for each user and stored as table data so that the personal attribute information of each user can be searched from the fingerprint information.
【0045】
Hereinafter, the specific processing procedure for receiving the Internet service in the system of this embodiment will be described in detail. Since the processes up to ~ in FIG. 2 are the same as the processes up to ~ in FIG. 1 described above, the processes up to ~ are omitted here.
【0046】
A personal environment generation program is executed on the Internet terminal 1, a user-specific personal environment is generated on the Internet terminal 1, and an interface that follows predetermined rules such as authentication of Internet services and selection of distributed contents. When the user accesses the electronic administrative service 2a after the settings are made, the personal configuration parameters temporarily stored in the terminal are automatically sent to the electronic administrative service 2a (Fig. 2). The electronic administrative service 2a that has received the personal configuration parameter performs personal authentication based on the received personal configuration parameter, and sends a login program to the Internet terminal 1. When the receive login program is executed on the Internet terminal 1 and the user logs in, the current address is read from the personal configuration parameters temporarily stored in the Internet terminal 1 and automatically sent to the electronic administrative service 2a. Will be sent.
【0047】
The electronic administrative service 2a that receives the current address data from the Internet terminal 1 determines the administrative district from the received current address data, and transmits the electronic administrative service menu program of the corresponding administrative district to the Internet terminal 1 (Fig. 1). When the received electronic administrative service menu program is executed on the Internet terminal 1, a service menu including items such as "issue resident's card" is displayed on the screen of the terminal. When the user selects "Issue of resident's card" from the displayed service menu and then selects the item of "Registered domicile / person only" displayed as one of the issuance conditions, it is temporarily stored in the terminal. The name, current address, and electronic certificate (which corresponds to the registered seal) are read out from the personal configuration parameters provided and automatically sent to the electronic administrative service 2a (Fig. 2).
【0048】
The electronic administrative service 2a that receives each data of the name, the current address, and the electronic certificate determines the necessary resident's card data and the resident's card issuing program based on the received data, and transmits it to the Internet terminal 1. At the time of this transmission, the electronic administrative service 2a also transmits a confirmation message confirming that the resident card issuance fee will be paid by credit card to the Internet terminal 1 (Fig. 2). When the received resident card issuance program is executed on the Internet terminal 1, a confirmation message for credit payment is displayed on the screen of the terminal. When the user responds to the message and inputs that he / she agrees, the resident's card data received from the electronic administrative service 2a is sent to the printer 6 and the resident's card is printed out (Fig. 2). Credit information is read from the personal configuration parameters temporarily stored in the terminal and automatically sent to the electronic administrative service 2a (Fig. 2). [Outside 1]
<img file="JP2001306523A_D0001.tif" />). At the time of this transmission, the Internet terminal 1 also transmits a message to the effect that the user has agreed to pay the resident card issuance fee by credit card to the electronic administrative service 2a.
【0049】
Upon receiving the credit information and the payment consent message, the electronic administrative service 2a determines the applicable credit company based on the received credit information, and uses the credit service provided by the credit company (here, the credit service 2b). In response, the received credit information and payment consent message are sent to charge the residence card issuance fee (Fig. 2). [Outside 2]
<img file="JP2001306523A_D0002.tif" />). Credit service 2b processes the request for the resident's card issuance fee and makes a payment based on the credit information received from the electronic administrative service 2a and the payment consent message (Fig. 2). [Outside 3]
<img file="JP2001306523A_D0003.tif" />)。
【0050】
In the embodiment described above, the fingerprint of the user is read by the biometrics device 5, and personal authentication is performed by comparing the information obtained from the fingerprint image with the fingerprint information registered in advance in the Internet provider server 3. However, this personal authentication can also be performed on the Internet terminal 1 side. In that case, the fingerprint information of the user is registered in advance on the Internet terminal 1 side.
【0051】
In addition, when the user's fingerprint information is encrypted and written to an IC card and the Internet service is used, the fingerprint information written on the IC card is compared with the fingerprint information obtained by the biometrics device to be an individual. Authentication may be performed.
【0052】
Further, when a predetermined input operation for terminating the connection to the Internet by the user is performed on the Internet terminal 1, the personal attribute information temporarily stored in the terminal may be deleted. As a result, the security for personal attribute information is further enhanced.
【0053】
Further, in the above-mentioned example, personal authentication is performed for each Internet service based on the personal configuration parameters, but this personal authentication can be performed by authentication by the Internet provider server. By doing so, it is possible to omit the processing related to personal authentication in each Internet service, and it is possible for the Internet provider server side to take overall responsibility for personal authentication in each Internet service.
【0054】
In addition, a message indicating that the Internet provider server 3 has received personal authentication based on biological characteristics is added to the personal configuration parameters sent from the Internet terminal 1 to the Internet service 2, and the Internet service 2 receives the personal configuration parameters. The service may be provided only to the terminal that sent the message by confirming the given message. By doing so, it is possible to easily eliminate unauthorized access to the Internet service 2 by a third party via another provider server.
【0055】
(Other Embodiments) The provision of the Internet service by inputting the biological characteristics (fingerprints) described above can be realized by supplying a recording medium in which the procedure is recorded to the system. FIG. 4 is a block diagram showing a configuration example of a system including a recording medium in which a procedure for providing an Internet service by inputting biological characteristics is recorded.
【0056】
The recording media 1b and 3b are magnetic disks, semiconductor memories, and other recording media. The recording medium 3b has a personal authentication process for performing personal authentication by collating the biometric information received from the Internet terminal with the biometric information about the user stored in advance, and only when the authentication result is valid. , The personal attribute information necessary for the user to use the Internet service, which is stored in advance corresponding to the biological characteristic information, is transmitted to the Internet terminal, and the specific personal environment based on the personal attribute information is transmitted to the Internet. The personal attribute information transmission process generated by the terminal and the interface setting process for setting the interface for accessing the Internet service to the Internet terminal according to a predetermined rule are performed on the server computer 3a of the Internet provider server 3. The program to be executed is recorded. On the other recording medium 1b, the biometric information transmission process of transmitting the biometric information of the user to the Internet provider server and receiving personal authentication, and when the authentication result is valid, the user from the Internet provider server 3 A program that causes the computer 1a of the Internet terminal to execute the personal environment generation process that receives the personal attribute information of the Internet service provider, temporarily stores the information, and generates a specific personal environment based on the stored personal attribute information is recorded. ing.
【0057】
The server computer 3a of the Internet provider server 3 executes the program recorded on the recording medium 3b, and the computer 1a of the Internet terminal executes the program recorded on the recording medium 1b. The provision of Internet services will be realized.
【0058】
In addition, in order to receive a specific Internet service on the recording medium 1b, the personal attribute information transmission process of reading the required information from the temporarily stored personal attribute information and transmitting it to the server providing the Internet service is sent to the computer 1a of the Internet terminal. You may further record the program to be executed.
【0059】
Furthermore, when a predetermined input operation for terminating the user's connection to the Internet is performed on the recording medium 1b, the personal attribute information erasing process for erasing the temporarily stored personal attribute information is performed on the computer 1a of the Internet terminal. Further records of the program to be executed may be recorded.
【0060】
The programs recorded on the recording media 1b and 3b may be collectively recorded on one recording medium. In this case, the computer 1a of the Internet terminal or the server computer 3a of the Internet provider server 3 executes the program, and the necessary program is transmitted from the computer 1a to the server computer 3a or from the server computer 3a to the computer 1a.
【0061】
[Effect of the invention]
As described above, according to the present invention, the user can receive personal authentication and a personal environment peculiar to the user is generated in the terminal to be used simply by inputting his / her own biological characteristics. , Efficient and secure internet service can be provided.
[Simple explanation of drawings]
[Figure 1]
It is a block diagram which shows the schematic structure of the Internet service system of one Embodiment of this invention.
[Figure 2]
It is a block diagram which shows the schematic structure of the Internet service system which provides the electronic administration service which is an Example of this invention.
[Fig. 3]
It is a figure which shows an example of the personal attribute information stored in the personal configuration parameter storage part of the system shown in FIG.
[Fig. 4]
It is a block diagram which shows the other embodiment of this invention.
[Fig. 5]
It is a block diagram which shows the schematic structure of the conventional Internet service system.
[Explanation of symbols]
1 Internet terminal 1a personal computer 1b, 3b recording medium 2 Internet service 2a Electronic administrative services 2b credit service 3 Internet provider server 3a server computer 4 internet 5 Biometrics equipment 30 Personal Internet Services 31 Personal Authentication Department 32 Personal configuration parameter storage
Every citation, both ways
| Document | Relation | Office | Cited during |
|---|---|---|---|
| US10313501B2 | Cited by | United States of America | Applicant |
| US9378347B2 | Cited by | United States of America | Applicant |
| US9912793B2 | Cited by | United States of America | Applicant |
| JP2015125680A | Cited by | Japan | Search report |
| JP2017182326A | Cited by | Japan | Search report |
| US10979549B2 | Cited by | United States of America | Applicant |
2 priority claims, no other members on record
Priority claims2
| Document | Office | Kind | Date |
|---|---|---|---|
| 2000118181 | Japan | A | |
| JP20000118181 | – | – | – |
1 legal event, as the office reported them to INPADOC
Events
| Event | Code | |
|---|---|---|
| Decision of refusalA02 | A02 |
Numbers
- Publication
- 2001-306523
- Publication, DOCDB
- 2001306523
- Publication, EPODOC
- JP2001306523
- Application
- 118181
- Application, DOCDB
- 2000118181
- Application, EPODOC
- JP20000118181
Titles2
- Japanese
- 【発明の名称】インターネットサービスシステムおよびインターネットアクセス方法
- English
- INDUSTRIAL APPLICABILITY: Internet service system and Internet access method
Classification
- IPC, 4
- G06F13 00
- G06F15 00
- G06F21 32
- H04L12 22