JP2000194806A - Ic card collation system, ic card collation method, ic card and reader-writer - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an IC card collation system capable of confirming the authenticity of an IC card without outputting information inside an IC chip to the outside of the chip and performing simple and high-security collation for the IC card. SOLUTION: Data for indicating the feature of a prescribed image printed at the prescribed position of the surface of this IC card 10 are recorded in the nonvolatile memory of the IC chip 12 as first collation data. Upon inserting the IC card 10 to this reader-writer 20, the prescribed image is photographed, second collation data are generated, based on image data obtained by the photographing, and the first collation data and the second collation data are collated and decided in this system.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a technology for security of an IC card, and to a technology for confirming authenticity of the card.

[0002]

2. Description of the Related Art IC cards are already being used as devices with higher security than magnetic cards, such as prepaid cards, employee ID cards, point cards, or membership cards, and have added value such as monetary value and personal information. In recent years, devices that record and process high information have been spotlighted in fields such as electronic money and electronic transactions.

[0003] In the case of the above-mentioned prepaid card, employee card, and point card, it is a replacement method of a magnetic card. It is essential to confirm whether or not Usually a magnetic card or I
In the C card, the information recording unit such as a magnetic stripe and an IC chip is considered to be integral with the card body, and if there is no fraud in the card itself, the information storage unit in the card is considered to be genuine at present. .

[0004]

However, according to the above-described determination method, it is actually necessary to say that security is insufficient. That is, as the IC card is applied to a high value-added service such as electronic money, the IC card is more likely to be subjected to malicious attacks such as fraud and spoofing than before.

[0005] For example, since printing performed on the surface of an IC card can be easily performed, an image similar to an image printed on another person's card is printed on one's own card, and there is a possibility of being spoofed. is there. Alternatively, since the IC chip is merely adhered to the card surface as a mounted module, it is easy to replace and forge the IC module chip.

[0006] Therefore, as a countermeasure against such abuse, in order to secure higher security, it is necessary to quickly realize a technology for confirming whether or not the card is genuine, that is, a technology for confirming the authenticity of the card. There is a strong need in card systems. At this time, it is important for security to perform collation processing in the chip of the IC card without exposing information in the IC chip to the outside of the chip.

According to the present invention, the authenticity of an IC card can be confirmed without exposing information in the IC chip to the outside of the chip, and a simple and highly secure collation of the IC card can be performed. It is an object to provide an IC card collation system, an IC card collation method, an IC card, and a reader / writer.

[0008]

According to the present invention, there is provided an IC card collating system for collating an IC card on which a prescribed image is printed at a prescribed position on the surface of the IC card, the data representing characteristics of the prescribed image. A non-volatile memory of an IC chip recorded as first collation data, and image input means for photographing the predetermined image when the IC card is inserted into a reader / writer and electrically activated. ,
A second collation data generating unit that generates second collation data based on image data obtained by capturing the predetermined image by the image input unit; An IC card collation system including a data collation unit that calculates a degree of coincidence with second collation data and performs collation determination between the first collation data and the second collation data.

[0009]

DESCRIPTION OF THE PREFERRED EMBODIMENTS FIG. 1 is a diagram schematically showing the appearance of an IC card 10 according to one embodiment of the present invention.

The IC card 10 is a card having a front surface 11, an IC chip 12, and a print image 13.

The IC chip 12 has a non-volatile memory in which data representing the characteristics of the print image 13 printed at a predetermined position on the front surface 11 of the IC card 10 is recorded as first collation data.

FIG. 2 is a diagram showing a reader / writer 20 according to another embodiment of the present invention.

The reader / writer 20 is provided with an IC card 10
It reads and writes data in the memory of the C chip 12, and has an image input device 21 and an arithmetic processing device 22.

The image input device 21 is an image input means for taking a print image 13 when the IC card 10 is inserted into the reader / writer 20 and electrically activated.

The arithmetic processing unit 22 generates second collation data based on the image data obtained by photographing the print image 13 by the image input device 21 and generates the second collation data.
Has a transfer means for transferring the collation data to the IC chip 12 of the IC card 10.

FIG. 3 is a flowchart showing the operation of issuing an IC card and the operation of image recognition in the above embodiment.

First, the operation of issuing the IC card 10 will be described. A photograph (original photograph) serving as a basis of a print image 13 to be printed on the front surface 11 of the IC card 10 is prepared, and image information of the original photograph is digitized to obtain original image data (S1). Then, based on the original image data, an IC
The print image 13 is printed on the front surface 11 of the card 10 (S
2).

Data representing the characteristics of the print image 13 (data created based on the original image data) is
It is generated as first collation data (S3), and the first collation data is recorded in the nonvolatile memory of the IC chip 12 (S4).

The print image 13 on the IC card 10
Is printed based on the original photo. The image information to be recorded on the IC chip 12 may be the image itself based on the original photograph, and may be affected by the topography on the card such as the emboss. Therefore, the printed image 13 is taken again by the camera and processed. You may do so.

When the recording capacity to the IC chip 12 increases, it takes time for the transfer and the arithmetic processing. Therefore,
The amount of data to be recorded on the IC chip 12 is reduced by digitizing the characteristics of the image data to be recorded on the IC chip 12, compressing the image data, or performing image processing such as binarization. By performing image processing in this way, the time required for transfer and arithmetic processing can be reduced.

Next, in the above embodiment, the IC card 1
The operation of recognizing the print image 13 printed at 0 will be described.

First, the IC card 10 is stored in the reader / writer 20.
Is inserted, the IC card 10 is positioned at a predetermined position, and the IC chip 12 is electrically activated. IC
The image input device 21 photographs the print image 13 printed on the front surface 11 of the card 10, and the image data is taken into the arithmetic processing device 22 (S11).

Then, the captured image data is normalized (S12), and second collation data is generated (S13). This second collation data is stored in the IC chip 1
2 (S14). Then, the first collation data recorded in the nonvolatile memory of the IC chip 12;
The degree of coincidence with the second collation data is determined by the IC chip 12
Is calculated. That is, the IC chip 12 performs the collation determination between the first collation data and the second collation data (S15). Then, the collation determination result is sent to the outside of the reader / writer 20 (S16).

Under the control of the arithmetic processing unit 22 provided in the reader / writer 20, the image input device 21 is automatically started. By integrating the camera of the image input device 21 with the reader / writer 20, data transfer to the IC card 10 and image processing can be realized in one device, thereby simplifying the IC card verification system. In addition, since information does not appear unnecessarily outside the reader / writer 20, a system with high security can be constructed.

The image data captured by the image input device 21 is transferred to the IC card 10 as it is,
In this case, the data may be converted into second collation data. Further, since the image captured by the image input device 21 has a large data amount and requires a long time for transfer and calculation, the image processing is performed by the arithmetic processing device 22 and appropriate second collation data having a small data amount is obtained. After converting to
The data may be transferred to the IC chip 12. At this time, it is preferable to encrypt the second collation data from the viewpoint of improving security. The IC chip 12 that has received the data decrypts the data, if necessary, and compares it with the first collation data recorded therein to determine the degree of coincidence. The operation of collating the first collation data with the second collation data is referred to as collation operation (1, 2).

A series of operations of the collation operation (1, 2) is performed by IC
Since the operation is for confirming the authenticity of the card 10,
It must be performed before the application of other electronic money, etc., usually immediately after activation of the IC card and before mutual authentication with a terminal etc. on the network using cryptographic technology. It is. Therefore, as a result of the collation determination according to the above embodiment, if the determination is true, the process proceeds to an application such as mutual authentication with the terminal. If the determination is false, at least the reader / writer 20
And the like, and the processing in the card is stopped and put into a standby state.

FIG. 4 is a diagram showing an IC card 10a according to another embodiment of the present invention.

The IC card 10a has a surface 11a
This is a card on which the print face image 14 is printed. Also,
In the above embodiment, the first collation data stored in the IC chip 12 and the second collation data obtained by photographing the print image for an arbitrary print image by the collation operation (1, 2). Is checked, but as a print image,
It is preferable to use the print face image 14 of the cardholder P1.

FIG. 5 is a schematic diagram of a system configuration when the IC card 10a on which the print face image 14 is printed is used.

At the stage where the cardholder P1 hands the IC card 10a to the clerk P2, the clerk P2 compares the person's face of the cardholder P1 with the print face image 14 described on the IC card 10a. Judge the legitimacy of the owner. This is the same as the operation on a normal photo credit card. By combining this operation with the collation operation (1, 2), collation between the IC chip 12 and the card holder P1 becomes possible, and the authenticity of the IC card 10a can be confirmed (photograph of the IC card 10a). Can be found when the card is replaced by forgery, etc.), and the card holder can be individually authenticated (it knows who the owner P1 is), which is very useful. Is high.

Although the image quality of the print image 13 and the image quality of the print face image 14 depend on the design of the card, it is generally desirable that the quality be visually aesthetically high. There is no need to deteriorate. However, as long as the image is captured by the image input device 21 and features are extracted by image processing, it is necessary to have appropriate luminance, number of colors, and patterns.

In particular, when the print face image 14 is printed, the characteristics of human eyes are different between the skin portion and the background portion even with the same noise, and the evaluation of the face image is more severe than that of a general image. Is preferably set to 100 dpi or more.

That is, for example, in consideration of the human eye visibility and image processing for extracting the feature amount of the eyes, the number of pixels required for the width of the eyes is set to at least 10 pixels, and the number of pixels of the face image is generally If it is required that the number of pixels is about eight times as large as the eye width, the width of the face image will be 80 pixels.
When the face image is printed at 20 mm in consideration of the free space,
It becomes about 100 dpi.

Also, like a driver's license or passport,
It is desirable that the eyes, nose and mouth, and the outline of the face can be visually recognized with a substantially frontal face so that the clerk can visually confirm that the owner is the owner.

The resolution of the image input device can be evaluated accurately if the resolution is high.
When 15 mm is captured at 0 dpi, 750 KB (B
Considering that the amount of information is an MP format (MP format), in order to reduce the cost of the arithmetic processing device 22 of the reader / writer 20 and to speed up the arithmetic processing of image feature extraction,
Actually, it is 200 dpi or less.

That is, the general performance of the image input device 21 is as follows.
It is about 0 dpi. Therefore, in consideration of cost, 200 dpi is appropriate as the highest performance of a small CCD camera in a generally obtainable range.

Print position of print image 13 and print face image 14
The print position may basically be either the front surface or the back surface of the card. However, the print image 13 and the print face image 14 are printed so as not to overlap the IC chip 12. In this case, in order to secure a certain photo size, the print image 13 and the print face image 14 may be printed in the magnetic stripe 15 or the area 17 overlapping with the emboss area 16, and may be printed as an image including the emboss area 16. Features can be extracted. However, when the IC card is repeatedly used, the magnetic stripe 15, the embossed area 16, and the area in the vicinity thereof are physically contacted with the reading device and are worn to cause printing deterioration. Therefore,
In the case of printing them in an overlapping manner, printing is performed so that an area where the visibility of the image is not impaired, that is, an area below the neck and a background area in the face photograph are located in the stripe 15 and the embossed area 16.

Print size of print image 13, print face image 1
The print size of 4 is set to 6 mm or more as the horizontal margin 18 and the vertical margin 19 from the card edge, and the size that fits in the area inside the margin is maximized.

In general, in a card printer, 3
When a print margin of mm is set, and when the image is taken in by the image input device 21, the camera position is estimated to be 3 mm as a measurement error that shifts back and forth, and left and right. .

The minimum size of the print image 13 and the print face image 14 is a size (10 mm) at which image contents can be visually recognized.
Angle) or more, but preferably 15-30 m in consideration of reducing the influence of scratches on the IC card surface in operation.
It is about m square.

The second collation data, which is information representing the characteristics of the image, is transferred to the IC chip 12 at a high speed, and requires 1 KB, for example, as a data capacity in order to perform quick and highly accurate collation. 96, the current mainstream
0.8 seconds at 00 bps, 38.4 kbp at high speed
In s, it is 0.2 seconds. In order to reduce the processing time of the entire system to about 1 second, it is necessary to set about 0.5 seconds from the insertion of the IC card to the completion of the collation operation (1, 2). The size of the collation data is the upper limit at which 1 KB is practically useful.
More preferably, it is 0 to 500 bytes.

In order to encrypt the data transferred to the IC chip 12, an encryption method is used, and a public key encryption method such as RSA or elliptic curve encryption or a common secret key encryption method such as DES or FEAL is used. It does not matter, but it is preferable to use an encryption method capable of performing arithmetic processing with high speed and high encryption strength.

The above-mentioned judgment threshold value changes according to the setting of the other person exclusion rate, the false acceptance rate, and the like.
Non-uniformity of the illumination system of the reader / writer 20 with built-in CD (usually 3
５5%) or a position error (about 5%) at the time of capturing, and if the safety coefficient is tripled, one guideline is to set the above-mentioned determination threshold to, for example, about 20% of the maximum value.

With respect to the method for obtaining the evaluation function, it is possible to use an existing image processing technique, but it is preferable to adopt a simpler and faster method than a method that achieves high accuracy by advanced processing. It is preferable to make a complex and highly accurate determination by combining a plurality of methods.

The first collation data may be any image processing method as long as the data well represents the features of the image. For example, it is also possible to characterize an image simply by extracting points in the image at random and extracting a predetermined amount of data. However, in this case, there is a problem that the image is very susceptible to misregistration and noise. Therefore, it is preferable to use an image in which information of the entire image is captured while removing noise by mosaic processing. Alternatively, it is preferable to extract the information related to the image content by a method of emphasizing evaluation by quantifying the positional relationship of the eyes, nose and mouth in the face image.

Although the above description has been made with reference to a contact type IC card, basically, in a system in which image authentication is performed by a non-contact type IC card which differs only in the data communication and the power transport system, the above-described embodiment is applied. Examples can be applied.

Next, the above embodiment will be described more specifically.

(Embodiment 1) First, when an IC card is issued, a logo mark photograph of an IC card prepared in advance is photographed by a digital camera having a resolution of 300 dpi, and RGB is used.
An image of 180 pixels in the horizontal direction × 180 pixels in the vertical direction in which the image is trimmed and the luminance is normalized is set as an original image with 8-bit color gradation. This original image is printed on the image printable area 17 shown in FIG. 6 as a color image with a horizontal size of 15 mm × a vertical size of 20 mm. In this case, the margin from the card edge is 6 mm for both the horizontal margin 18 and the vertical margin 19.

On the other hand, the data to be recorded on the IC chip 12 is obtained by converting the original image into gray scale with 8 bits (256 gradations), then converting the original image into 30 vertical pixels and 30 horizontal pixels, compressing the data, and converting the data into a RAW format (pixel value). (Only data) in the IC chip 12. The capacity of the first collation data is 900 bytes.

In the case of collation by the IC card 10, when the IC card 10 is inserted into the reader / writer 20 having a built-in color CCD of 380,000 pixels, the IC card 10 is first initialized. In parallel with this initialization, the print image 13 printed on the IC card 10 is taken into the CCD image input device 21 at 100 dpi and transferred to the arithmetic processing device 22 in the reader / writer 20. The arithmetic processing unit 22 performs trimming of the captured image and normalization of the luminance in the same procedure as at the time of issuance, and then performs gray scale processing and mosaic processing. The processed second collation data is transferred to the IC chip 12 at a speed of 38.4 kbps. The actual transfer time of the data only is calculated to be 0.01 second.

The IC chip 12 having received the second collation data calculates the absolute value of the difference between each pixel between the recorded first collation data and the received second collation data. , The pixel average error δ is calculated. It is determined that δ ≦ 20 is true and δ> 20 is false, and the determination result is returned to the terminal 30. If the result of this determination is true, mutual authentication with the terminal 30 is performed. If the result of the determination is false, a standby state is set immediately after initialization, and a response from the terminal 30 is waited. Terminal 3
From 0, it is possible to execute at least an instruction to perform collation again or an instruction to stop the process.

Here, the details of the average error δ and the basis of the determination of the authenticity with the numerical card holder P1 will be described.
If the first collation data is d1 (x, y), the second collation data is d2 (x, y), and the size is M × N, the average error δ = Σ | d1 (i, j)・ D2 (i, j)
/ (M · N) {1 ≦ i ≦ M, 1 ≦ j ≦ N} |

As a result of the experiment, the exclusive ratio of others was 99.9.
When examining the case of 9%, the luminance error per pixel is 16%, where 30% of the pixels correspond to the maximum error of 20%.
Therefore, the threshold is set to 20 in consideration of the measurement error.

(Embodiment 2) In the above-described embodiment 1, a print photograph is used as a face photograph of the owner. At the time of card issuance, the face of the owner is photographed with a digital camera and trimmed around the face, and an image of 220 pixels horizontally by 270 pixels vertically is used as an original face image.

This image is placed in the image printable area 17 shown in FIG.
Print at 8 mm and 22 mm height. The first collation data recorded on the IC chip 12 is mosaiced into 33 pixels vertically and 28 pixels horizontally, compressed, and recorded on the IC chip 12. The capacity of the first collation data is 924 bytes.
When the first collation data and the second collation data are transferred to the IC card 10, they are encrypted by DES. I
The C card 10 determines the degree of coincidence between the mosaic processing data after decoding by the DES.

(Embodiment 3) In the second embodiment, when forming second collation data from an image captured in the reader / writer 20, as shown in FIG.
1. The distance L2 between the eyes and the central tip of the nose and the distance L3 between the ends of the nose and the mouth are digitized and normalized by the lateral width W of the face to obtain a feature vector. This second collation data is encrypted using FEAL and transferred to the IC card 10.

In the IC card 10, after decoding by FEAL, a numerical value is converted from the original image in the same procedure, and the Euclidean distance δ from the recorded face information is calculated. δ ≦
Let 20 be true.

Here, the details of the Euclidean distance δ and the basis of the value 20 of the true / false judgment will be described. If the first collation data obtained by normalizing the intervals L1, L2, and L3 with the width W is d1 = {X, Y, Z}, and the second collation data is d2 = {x, y, z}, Euclidean distance δ
= {((X−x) ＾ 2 + (Y−y) ＾ 2 + (Z−z)}
2) Here, when examining the case where the other person exclusion rate becomes 99.99%, an error of 18 pixels per data, which corresponds to an error of 20% of the maximum value of 90 pixels, the threshold value is considered in consideration of the measurement error. Is set to 20 pixels.

Fourth Embodiment In the second embodiment, when collation data is formed from an image captured in the reader / writer 20, an image normalized by the face width W as shown in FIG. 1000 points are extracted from the contour points 31 of the face, eyes, nose, and mouth, and the position coordinates (x ₁ , y ₁ ) to
And feature vector (x _1000, y _1000).

The data capacity is 1 KB. At this time, since the hair region is more likely to change than the face information, the hair region is excluded. The inter-vector distance δ is calculated by a point pattern matching process using the relaxation method. δ ≦ 200
Is true.

Here, the basis of the numerical value 20 for the true / false judgment of the inter-vector distance δ by the point pattern matching processing by the relaxation method will be described in detail. First, the Euclidean distance between the corresponding points obtained by the relaxation method is obtained.
Here, when examining the case where the other person exclusion rate is 99.99%, an error of 180 pixels per data, which corresponds to 20% of the maximum value of 900 pixels, the threshold value is set to 200 in consideration of the measurement error. Set as pixel.

According to the above embodiment, the authenticity of the IC card can be confirmed based on the collation between the image printed on the surface of the card and the image recorded in the built-in IC. High matching can be performed. Therefore, the above embodiment is an effective countermeasure against counterfeiting, spoofing, and the like of the card.

Further, if the photograph of the face of the IC card owner is printed as an image to be printed on the surface of the IC card, the clerk can visually check the printed face photograph and the card owner. This is extremely useful because it is possible to collate the owner and the IC chip and personal authentication using an IC card becomes possible.

[0064]

According to the present invention, the authenticity of the card can be confirmed based on the comparison between the image printed on the card surface and the image recorded on the built-in IC.
The C card has an effect that simple and highly secure collation can be performed.

[Brief description of the drawings]

FIG. 1 is a view schematically showing an external appearance of an IC card 10 according to one embodiment of the present invention.

FIG. 2 is a diagram showing a reader / writer 20 according to another embodiment of the present invention.

FIG. 3 is a flowchart showing an operation of issuing an IC card and an operation of image recognition in the embodiment.

FIG. 4 is a diagram showing an IC card 10a according to another embodiment of the present invention.

FIG. 5 is an IC card 1 on which a print face image 14 is printed.
FIG. 2 is a schematic diagram of a system configuration when 0a is used.

FIG. 6 is a diagram showing a back surface of the IC card 10;

FIG. 7 is an enlarged view showing a print face image 14 in the embodiment.

FIG. 8 is an enlarged view showing a print face image 14 in the embodiment.

[Explanation of symbols]

 10, 10a: IC card, 12: IC chip, 13: Print image, 14: Print face image, 20: Reader / writer, 21: Image input device, 22: Operation device, 30: Terminal, P1: Card holder, P2 ... clerk, L1: distance between eyes, L2: distance between eyes and nose, L3: distance between nose and mouth, W: face width.

 ────────────────────────────────────────────────── ─── Continued on the front page (72) Inventor Tadao Takeda 3-19-2 Nishi-Shinjuku, Shinjuku-ku, Tokyo Japan Telegraph and Telephone Corporation F-term (reference) 5B035 BB09 BC01 5B058 CA01 KA38

Claims (11)

[Claims] 1. An IC card verification system for verifying an IC card on which a predetermined image is printed at a predetermined position on a surface of the IC card, wherein the data representing the characteristic of the predetermined image is first verification data. A non-volatile memory of an IC chip recorded as: an image input means for taking the predetermined image when the IC card is inserted into a reader / writer and electrically activated; Second collation data generating means for generating second collation data based on image data obtained by capturing the image of the first and second images; and the first collation data and the second collation data And a data collating means for computing the degree of coincidence of the first and second data for collation and performing a collation determination between the first data for collation and the second data for collation. 2. The IC card verification system according to claim 1, wherein the predetermined image is a photograph of the face of the owner of the IC card. 3. The IC card verification system according to claim 1, wherein the data verification unit is an IC chip of the IC card. 4. The data according to claim 1, wherein the first data for collation is image data obtained by compressing and reducing the predetermined image by mosaic processing, and the second data for collation is: An IC card matching system, wherein the image input means is an image obtained by compressing and reducing image data obtained by photographing the predetermined image by mosaic processing. 5. The IC card matching system according to claim 1, wherein the first matching data and the second matching data are contour data of the predetermined image. . 6. The method according to claim 2, wherein the first collation data and the second collation data are data obtained by digitizing the relative positions of the eyes, nose and mouth in the face photograph. IC card verification system. 7. The IC card verification system according to claim 3, wherein the second verification data is data encrypted in an arithmetic processing unit in a reader / writer and transferred to the IC chip. . 8. The IC card according to claim 3, wherein the collated IC card responds to the terminal with the result of the collation determination, and executes the next operation prepared in advance if the result of the collation determination is true. If the result of the determination is false, the IC card collation system is stopped and waits for an input from a terminal. 9. An IC card collation method for collating an IC card on which a predetermined image is printed at a predetermined position on a surface of the IC card, wherein the data representing the characteristic of the predetermined image is first data for comparison. A first collation data recording step of recording the data as an image; and an image capturing step of capturing the predetermined image when the IC card is inserted into a reader / writer and electrically activated;
A second collation data generating step of generating a second collation data based on image data obtained by photographing the predetermined image; and A data matching step of calculating a degree of coincidence with the second matching data, and performing a matching determination between the first matching data and the second matching data. Method. 10. An IC card, comprising: a predetermined image printed at a predetermined position on the surface of the IC card; and a nonvolatile memory storing information representing characteristics of the predetermined image. . 11. Image input means for photographing an image printed at a predetermined position on the surface of an IC card; and second collation data is generated from the image photographed by said image input means. Transfer means for transferring the second collation data to an IC chip of the IC card.