Authentication System

Abstract

[Problems] To provide an authentication system improving authentication accuracy of existence of a registered person and easily find an unauthorized act to improve the security in a system by performing authentication using coincidence/non-coincidence of biometrics information and temporal/spatial authentication when performing individual authentication via a network by using electronic information which is easily tampered, easily leaks out, and is easily stolen. [Means for Solving Problems] An authentication server ( 1 ) includes a database for managing individual information on a registered person to be authenticated. Moreover, the authentication server ( 1 ) is connected to a plurality of management servers ( 2 ) via a communication network and correlates the individual information transmitted from an individual information input device ( 3 ) via the management server ( 2 ) with the individual information in the database, thereby authenticating the existence of the registered person.

1 . An authentication system comprising
 a plurality of servers each equipped with a database for managing individual information on registered people to be authenticated, and   a plurality of information input devices to be operated by the registered people connected to the servers via a communication line network, wherein   the information input devices send movement information including information input by the registered people to the servers, and   the servers, on receiving the movement information from the of information input devices, on the basis of the received movement information, and the individual information in the database, perform authentication of the existence of the registered people.   
   
   
       2 . An authentication system according to  claim 1 , wherein
 the servers collate the received movement information, and the individual information in the database, and at match of the above, send permission information to permit the information input devices to perform a specified action, to the information input devices, and   the information input devices, on receiving the permission information, perform the specified action.   
   
   
       3 . An authentication system according to  claim 1 , wherein
 the movement information includes position information showing the installation position of the information input device of the movement information sending source, temporal information showing the time at which information is input by registered people, and individual identification IDs peculiar to the registered people, and   the servers, on receiving a plurality of movement information including identical individual identification IDs, on the basis of the information input place and time of the registered people that the received movement information shows, perform continuous authentication of the existence of the registered people.   
   
   
       4 . An authentication system according to  claim 1 , wherein
 the servers and the information input devices send the movement information on the basis of transfer routes of the registered people.   
   
   
       5 . An authentication system according to  claim 1 , wherein
 the information input devices are equipped with a database for managing individual information, and when information is input from the registered people, collate the input information, and the individual information in the database, and at match of the above, perform a specified action.   
   
   
       6 . An authentication system according to  claim 1 , wherein
 the servers include a management server for managing the information input devices collectively in unit of building structure, transfer means, facility, region or organization, and an authentication server equipped with a database for totally managing the information in the database of the management server.   
   
   
       7 . An authentication system according to  claim 6 , wherein
 the authentication system has a plurality of units including at least one authentication server and a communication line network for connecting information input devices and terminals, and the authentication server controls rejection of the specified action by the information input devices, in unit of the units.   
   
   
       8 . An authentication system according to  claim 6 , wherein
 the authentication server, on receiving the movement information from the information input device, sends control information for limiting or prohibiting the specified action of the information input device, to the information input devices installed in other units than the unit to which the information input device belongs.   
   
   
       9 . An authentication system according to  claim 6 , wherein
 the authentication server, after receiving the movement information from the information input device, on receiving the movement information including identical individual identification IDs, sent from the information input devices in other units than the unit to which the information input device belongs,   sends control information for limiting or prohibiting the specified action by the information input device to the registered people specified by the individual identification IDs, to the information input device.   
   
   
       10 . An authentication system according to  claim 6 , wherein
 the authentication server, on receiving the movement information from the information input device, sends control information for deleting the movement information, to the information input devices and the management servers in other units than the unit to which the information input device belongs, to the information input device.   
   
   
       11 . An authentication system according to  claim 6 , wherein
 the authentication server, on receiving the movement information from the information input device, sends control information for limiting or prohibiting the specified action by the information input device, to the information input devices installed in the unit to which the information input device belongs.   
   
   
       12 . An authentication system according to  claim 6 , wherein
 the authentication server accumulates the received movement information, and on receiving the movement information from the information input device, on the basis of the installation positions of those skilled in the art information input devices of the sending source, and the accumulated movement information, forecasts the transfer route of the registered people, and sends control information for performing an execution preparation of a specified action, to the information input devices installed on the forecasted transfer route.   
   
   
       13 . An authentication system according to  claim 6 , wherein
 the authentication server, on receiving movement information including information showing destination of transfer means that the registered people use, and   receiving the movement information from the information input devices related to the transfer means, sends control information for performing an execution preparation of a specified action, to the information input devices related to the destination.   
   
   
       14 . An authentication system according to  claim 12 , wherein
 the authentication server, on receiving the movement information from the information input device installed out of the forecasted transfer route, sends control information for limiting or prohibiting the specified action by the information input device, to the information input device.   
   
   
       15 . An authentication system according to  claim 1 , wherein
 the servers and the information input devices have preset order of sending destinations of received or input information, and at failure of sending the received or input information, send the received or input information to the sending destination of the next order of the failed sending destination.   
   
   
       16 . An authentication system according to  claim 1 , wherein
 the authentication action, by collation of the biometrics information of registered people included in the movement information, and the biometrics information managed by the database, authenticates the existence of the registered people.   
   
   
       17 . An authentication system according to  claim 3 , wherein
 the servers convert local identification IDs, and individual identification IDs used in a limited organization.   
   
   
       18 . An authentication system according to  claim 1 , wherein
 the servers, on receiving the movement information from the information input device, perform authentication on the basis of the received movement information, and at success of the authentication, send permission information to permit the execution of financial transaction or settlement transaction, to the information input device.   
   
   
       19 . An authentication system according to  claim 1 , wherein
 the servers, on receiving the movement information from the information input device, perform authentication on the basis of the received movement information, and at success of the authentication, send information to recognize that a public identification card has been presented, to the information input device.   
   
   
       20 . An authentication system according to  claim 1 , wherein
 in the case of a temporal disconnection of network in the authentication system,
 the information input devices send a signal to check whether connection is available at present to the servers and other information input devices that have been connectable with own device, and establish network with the servers or other information input devices with which connection is available. 
   
   
   
       21 . An authentication system according to  claim 20 , wherein
 the information input devices store list information showing the servers and other information input devices that are connectable with own device, and on the list information shows connection priority order, and   the information input devices, in the case of a temporal disconnection of network in the authentication system, send a signal to check in accordance with the priority order and establish network.