US-12621294-B2 - Remote issuance system and data generation server

US12621294B2US 12621294 B2US12621294 B2US 12621294B2US-12621294-B2

Abstract

According to an embodiment, a remote issuance system includes a portable electronic apparatus and a data generation server. The portable electronic apparatus includes a biometric sensor, a memory, a communication interface, and a first processor. The first processor generates authentication data for performing an issuance process in the portable electronic apparatus in a case where biometric authentication succeeds, outputs the authentication data to the reader/writer, and executes the issuance process based on issuance data supplied from the reader/writer. The data generation server includes a communication unit and a second processor. The second processor generates issuance data for causing the portable electronic apparatus to execute an issuance process based on application data corresponding to the contract ID and the authentication data to transmit the generated issuance data to the user terminal.

Inventors

Yuto MISAWA
Mizuki Uno

Assignees

KABUSHIKI KAISHA TOSHIBA

Dates

Publication Date: 20260505
Application Date: 20230912
Priority Date: 20210318

Claims (4)

1 . A remote issuance system comprising: a portable electronic apparatus; and a data generation server, wherein the portable electronic apparatus includes a biometric sensor that acquires biometric information, a memory including a storage area in which biometric information of a user is stored, a communication interface that communicates with a reader/writer connected to a user terminal, and a first processor that generates authentication data for performing an issuance process in the portable electronic apparatus in a case where biometric authentication by collation between biometric information acquired by the biometric sensor and biometric information stored in the memory succeeds, outputs the authentication data to the reader/writer, and executes the issuance process based on issuance data corresponding to the authentication data supplied from the reader/writer, and wherein the data generation server includes a communication unit that communicates with the user terminal, and a second processor that generates, in a case where an issuance request including the authentication data generated by the portable electronic apparatus and a contract ID is received from the user terminal, issuance data for causing the portable electronic apparatus to execute an issuance process based on application data corresponding to the contract ID and the authentication data to transmit the generated issuance data to the user terminal.
2 . The remote issuance system according to claim 1 , wherein the portable electronic apparatus is an IC card including a module including the biometric sensor, the memory, the first processor, and the communication interface, and a main body that stores the module.
3 . The remote issuance system according to claim 1 , wherein the biometric sensor is a fingerprint sensor that acquires fingerprint information.
4 . The remote issuance system according to claim 1 , wherein in the portable electronic apparatus, the memory further includes a secure memory that stores key information, and the first processor generates the authentication data using key information stored in the secure memory, and wherein the data generation server further includes an interface connected to a hardware security module that stores key information corresponding to key information stored in the secure memory included in the portable electronic apparatus, and the second processor transmits, to the user terminal, the authentication data processed using the key information stored in the hardware security module and the issuance data based on the application data.

Description

CROSS REFERENCE TO RELATED APPLICATIONS This application is a Continuation Applications of PCT Application No. PCT/JP2022/004002, filed Feb. 2, 2022 and based upon and claiming the benefit of priority from Japanese Patent Applications No. 2021-044573, filed Mar. 18, 2021; and No. 2021-044594, filed Mar. 18, 2021; and No. 2021-146164, filed Sep. 8, 2021, the entire contents of all of which are incorporated herein by reference. FIELD Embodiments of the present invention relate to a remote issuance system and a data generation server. BACKGROUND In the related art, an IC card as a portable electronic apparatus requires a procedure called secondary issuance in which an operation institution writes information for operating as a credit card or the like and enables the credit card to be used. In addition, even in a case where a new function is added to the IC card, a predetermined procedure by the operation institution is required. In the related art, secondary issuance and function addition to an IC card are performed using a dedicated issuance machine after a person in charge of an operation institution or a handling store confirms identity confirmation of a user with an official certificate or the like. In the procedure of an issuance process such as secondary issuance and function addition to the conventional IC card as described above, it is necessary for the user to go to a designated place such as an operation institution or a store, and for staff in the designated place to perform identity confirmation. In addition, in recent years, an IC card having a function of performing identity confirmation using biometric information such as a fingerprint has been developed, but even with such an IC card having a biometric authentication function, there is a problem that it is necessary to perform an issuance process such as secondary issuance and function addition by a procedure similar to that of the conventional IC card. BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a diagram schematically illustrating a configuration example of an IC card issuance system as a remote issuance system according to the first embodiment. FIG. 2 is a block diagram illustrating a configuration example of an IC card for which an issuance procedure is performed by an IC card issuance system as a remote issuance system according to the first embodiment. FIG. 3 is a block diagram illustrating a configuration example of a mobile terminal in the IC card issuance system as the remote issuance system according to the first embodiment. FIG. 4 is a block diagram illustrating a configuration example of a contract management server in the IC card issuance system as the remote issuance system according to the first embodiment. FIG. 5 is a block diagram illustrating a configuration example of a data generation server in the IC card issuance system as the remote issuance system according to the first embodiment. FIG. 6 is a sequence for describing an operation example of an application procedure in the IC card issuance system as the remote issuance system according to the first embodiment. FIG. 7 is a sequence for describing an operation example of an issuance procedure in the IC card issuance system as the remote issuance system according to the first embodiment. FIG. 8 is a sequence for describing an operation example of an issuance procedure in the IC card issuance system as the remote issuance system according to the first embodiment. FIG. 9 is a diagram schematically illustrating a configuration example of an IC card issuance system as a remote issuance system according to the second embodiment. FIG. 10 is a block diagram 10 illustrating a configuration example of an IC card for which an issuance procedure is performed by the IC card issuance system as the remote issuance system according to the second embodiment. FIG. 11 is a block diagram 11 illustrating a configuration example of a mobile terminal in the IC card issuance system as the remote issuance system according to the second embodiment. FIG. 12 is a block diagram 12 illustrating a configuration example of a contract management server in the IC card issuance system as the remote issuance system according to the second embodiment. FIG. 13 is a block diagram 13 illustrating a configuration example of a data generation server in the IC card issuance system as the remote issuance system according to the second embodiment. FIG. 14 is a sequence for 14 describing an operation example of an application procedure in the IC card issuance system as the remote issuance system according to the second embodiment. FIG. 15 is a sequence for 15 describing an operation example of an issuance procedure in the IC card issuance system as the remote issuance system according to the second embodiment. FIG. 16 is a sequence for 16 describing an operation example of an issuance procedure in the IC card issuance system as the remote issuance system according to the second embodiment. DETAILED DESCRIPTION Accordin