INFORMATION MANAGEMENT SYSTEM, AUTHENTICATION DEVICE, AND PERSONAL INFORMATION SERVER
An information management system includes an authentication device and a personal information server. The authentication device includes a sensor, a memory, an interface, and a first processor. The personal information server includes a communication unit, a data memory, and a second processor. The first processor outputs information indicating a location of the personal information server to the terminal device if a biometric verification between the biological information acquired by the sensor and the biological information stored in the memory is successful. The second processor supplies the personal information of the holder of the authentication device stored in the data memory to the terminal device in response to a request from the terminal device to which the authentication device is connected.
1 . An information management system comprising an authentication device and a personal information server,
the authentication device including:
a sensor configured to acquire biological information of a person;
a memory configured to store biological information of a holder;
an interface configured to connect to a terminal device; and
a first processor configured to output information indicating a location of the personal information server to the terminal device if a biometric verification between the biological information acquired by the sensor and the biological information stored in the memory is successful,
the personal information server including:
a communication unit configured to communicate with the terminal device;
a data memory configured to store personal information of a holder of the authentication device; and
a second processor configured to supply the personal information of the holder of the authentication device stored in the data memory to the terminal device in response to a request from the terminal device to which the authentication device is connected.
2 . The information management system according to claim 1 , wherein
the second processor of the personal information server issues a one-time token, transmits the one-time token to the authentication device through secure messaging, and then, if data received from the terminal device matches the issued one-time token, transmits the personal information to the terminal device, and
the first processor of the authentication device transmits, to the terminal device, the one-time token issued by the personal information server and obtained by decrypting the data received through the secure messaging from the personal information server.
3 . The information management system according to claim 1 , wherein
the first processor of the authentication device transmits, to the personal information server, signed personal information obtained by digitally signing the personal information of the holder received from the personal information server, and
the second processor of the personal information server discloses a public key of the authentication device acquired from the authentication device to the terminal device, and, in response to a request from the terminal device, transmits the personal information of the holder of the authentication device stored in the data memory, and then supplies the terminal device with the signed personal information, the signed personal information being personal information digitally signed by the authentication device.
4 . The information management system according to claim 3 , wherein
the first processor of the authentication device transmits, to the terminal device, a one-time token issued by the personal information server and obtained by decrypting data received through secure messaging from the personal information server, and
the second processor of the personal information server issues the one-time token, transmits the one-time token to the authentication device through secure messaging, and then, if challenge data of a one-time token received from the terminal device matches the issued one-time token, transmits the signed personal information to the terminal device.
5 . The information management system according to claim 1 , wherein
the authentication device has a card-shaped main body, and
the sensor of the authentication device is a fingerprint sensor configured to read a fingerprint as biological information, and
the first processor of the authentication device outputs the information indicating the location of the personal information server to the terminal device if a fingerprint verification between fingerprint information acquired by the fingerprint sensor and fingerprint information stored in the memory is successful.
6 . An authentication device comprising:
a sensor configured to acquire biological information of a person;
a memory configured to store biological information of a holder;
an interface configured to connect to a terminal device; and
a processor configured to output, to the terminal device, information indicating a location of a personal information server that stores personal information of the holder if a biometric verification between the biological information acquired by the sensor and the biological information stored in the memory is successful.
7 . A personal information server comprising:
a communication unit configured to communicate with a terminal device to which an authentication device is connected, the authentication device performing a biometric verification on biological information acquired by a sensor and registered biological information of a holder;
a data memory configured to store personal information of a holder of the authentication device; and
a processor configured to supply the personal information of the holder of the authentication device stored in the data memory to the terminal device in response to a request from the terminal device if a biometric verification of the holder performed in the authentication device connected to the terminal device is successful.
8 . An information management system comprising an authentication device and a personal information server,
the authentication device including:
a sensor configured to acquire biological information of a person;
a memory configured to store biological information of a holder;
an interface configured to connect to a terminal device; and
a first processor configured to output information indicating a location of the personal information server to the terminal device if a biometric verification between the biological information acquired by the sensor and the biological information stored in the memory is successful,
the personal information server including:
a communication unit configured to communicate with the terminal device;
a data memory configured to store personal information of a holder of the authentication device; and
a second processor configured to write write information supplied from the terminal device in the data memory as the personal information of the holder of the authentication device in response to a write request from the terminal device to which the authentication device is connected.
9 . The information management system according to claim 8 , wherein
the first processor of the authentication device transmits, to the terminal device, a one-time token issued by the personal information server and obtained by decrypting data received through secure messaging from the personal information server, and
the second processor of the personal information server issues the one-time token, transmits the one-time token to the authentication device through secure messaging, and then, if challenge data of a one-time token received from the terminal device matches the issued one-time token, writes the write information received from the terminal device in the data memory.
10 . The information management system according to claim 8 , wherein
the second processor of the personal information server acquires signed write information from the terminal device, verifies the signed write information using a public key of the terminal device, and then writes the write information in the data memory, the signed write information being the write information digitally signed by the terminal device.
11 . The information management system according to claim 10 , wherein
the first processor of the authentication device transmits, to the terminal device, a one-time token issued by the personal information server and obtained by decrypting data received through secure messaging from the personal information server, and
the second processor of the personal information server issues the one-time token, transmits the one-time token to the authentication device through secure messaging, then, if challenge data of a one-time token received from the terminal device matches the issued one-time token, verifies the signed write information received from the terminal device using a public key of the terminal device, and then writes the write information in the data memory.
12 . The information management system according to claim 8 , wherein
the authentication device has a card-shaped main body, and
the sensor of the authentication device is a fingerprint sensor configured to read a fingerprint as biological information, and
the first processor of the authentication device outputs the information indicating the location of the personal information server to the terminal device if a fingerprint verification between fingerprint information acquired by the fingerprint sensor and fingerprint information stored in the memory is successful.
13 . A personal information server comprising:
a communication unit configured to communicate with a terminal device to which an authentication device is connected, the authentication device performing a biometric verification on biological information acquired by a sensor and registered biological information of a holder;
a data memory configured to store personal information of a holder of the authentication device; and
a processor configured to write, if a biometric verification of the holder performed in the authentication device connected to the terminal device is successful, write information supplied from the terminal device in the data memory as the personal information of the holder of the authentication device in response to a write request from the terminal device.