Remote issuance system and data generation server
According to an embodiment, a remote issuance system includes a portable electronic apparatus and a data generation server. The portable electronic apparatus includes a biometric sensor, a memory, a communication interface, and a first processor. The first processor generates authentication data for performing an issuance process in the portable electronic apparatus in a case where biometric authentication succeeds, outputs the authentication data to the reader/writer, and executes the issuance process based on issuance data supplied from the reader/writer. The data generation server includes a communication unit and a second processor. The second processor generates issuance data for causing the portable electronic apparatus to execute an issuance process based on application data corresponding to the contract ID and the authentication data to transmit the generated issuance data to the user terminal.
1 . A remote issuance system comprising: a portable electronic apparatus; and a data generation server, wherein
the portable electronic apparatus includes
a biometric sensor that acquires biometric information,
a memory including a storage area in which biometric information of a user is stored,
a communication interface that communicates with a reader/writer connected to a user terminal, and
a first processor that generates authentication data for performing an issuance process in the portable electronic apparatus in a case where biometric authentication by collation between biometric information acquired by the biometric sensor and biometric information stored in the memory succeeds, outputs the authentication data to the reader/writer, and executes the issuance process based on issuance data corresponding to the authentication data supplied from the reader/writer, and wherein
the data generation server includes
a communication unit that communicates with the user terminal, and
a second processor that generates, in a case where an issuance request including the authentication data generated by the portable electronic apparatus and a contract ID is received from the user terminal, issuance data for causing the portable electronic apparatus to execute an issuance process based on application data corresponding to the contract ID and the authentication data to transmit the generated issuance data to the user terminal.
2 . The remote issuance system according to claim 1 , wherein
the portable electronic apparatus is an IC card including a module including the biometric sensor, the memory, the first processor, and the communication interface, and a main body that stores the module.
3 . The remote issuance system according to claim 1 , wherein
the biometric sensor is a fingerprint sensor that acquires fingerprint information.
4 . The remote issuance system according to claim 1 , wherein
in the portable electronic apparatus,
the memory further includes a secure memory that stores key information, and
the first processor generates the authentication data using key information stored in the secure memory, and wherein
the data generation server further includes
an interface connected to a hardware security module that stores key information corresponding to key information stored in the secure memory included in the portable electronic apparatus, and
the second processor transmits, to the user terminal, the authentication data processed using the key information stored in the hardware security module and the issuance data based on the application data.