JP2005002566A - Individual authentication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a highly reliable individual authentication system, for surely avoiding illicit use such as disguise. <P>SOLUTION: This system takes in organism information on an interviewee and an interviewer, when reserving an interview; generates key data from these organism information; registers the key data and the organism information on the interviewer in response to the organism information on the interviewee; takes in the organism information on the interviewee in the interview thereafter; calculates the organism information on the interviewer, by an arithmetic operation of the key data registered in response to the organism information on this interviewee and the organism information on the interviewee; and determines coincidence of the organism information on the interviewee at reservation time and interview time, by a comparison between this calculated organism information on the interviewer and the registered organism information on the interviewer. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a personal authentication system for performing personal authentication.
[0002]
[Prior art]
In general, in order to prove the legitimacy of a visitor or accessor in a meeting with a person who knows important information or access to protected information (hereinafter referred to as an application) In general, there is a widespread method of reviewing and registering a person who has been granted the permit, issuing a permit to the authorized applicant, and allowing the person presenting the permit to meet and access. .
[0003]
Such a method may not be able to prove the legitimacy of the visitor or accessor by renting, forgery or alteration of a permit. Therefore, a method for using the characteristics of the applicant as a permit has been proposed.
For example, during the registration procedure, the fingerprint is read by the fingerprint reader as a feature of the applicant and stored in the memory. Thereafter, when the applicant accesses the object to be protected (information), the fingerprint is again read by the fingerprint reading device and compared with the fingerprint information stored in the memory to obtain the object to be protected (information). Whether access is permitted or not. (For example, refer to Patent Document 1).
[0004]
It proposes a method of protecting the protected object by proving the legitimacy of this access.
The fingerprints used in the patent are treated as important evidence of criminal investigations, for example, and their high personal identification is publicly known. Physical characteristics such as are also used for personal authentication. (For example, refer to Patent Document 2).
[0005]
Although the use of physical features (such as fingerprints, voiceprints, irises, and facial features) for personal authentication has greatly improved the reliability of identifying individuals, each means has its own weaknesses.
[0006]
In the case of fingerprints, the fingerprint of the registrant can be collected by some method, and it can be accessed by a finger model that duplicates the fingerprint pattern (the act of impersonating such a non-registrant as a registrant is called impersonation below). There is a fundamental weakness.
Similarly, there is a problem that voiceprints can be impersonated by recording the voices of registrants, and irises and faces can be imitated by photographs.
[0007]
[Patent Document 1]
Japanese Patent No. 3222111 [Patent Document 2]
JP 2002-230553 A.
[0008]
[Problems to be solved by the invention]
An object of the present invention is to provide a highly reliable personal authentication system that can reliably avoid unauthorized use such as impersonation.
[0009]
[Means for Solving the Problems]
The personal authentication system of the present invention captures the biometric information of the visitor and the respondent at the time of appointment of the visit, generates key data from the biometric information, and corresponds to the biometric information of the visitor with the key data and the respondent Biometric information is registered, and at the time of the visitor, the biometric information of the visitor is captured, and the biometric information of the respondent is obtained by calculating the key data registered corresponding to the biometric information of the visitor and the biometric information of the visitor. By calculating and comparing the calculated biometric information of the respondent and the registered biometric information of the respondent, it is determined whether the biometric information of the visitor at the time of the reservation and the visit is the same.
[0010]
The personal authentication system of the present invention is a personal authentication system having a first mobile terminal possessed by a visitor, a second mobile terminal possessed by a visitor, and a reception terminal that accepts the visit. The first portable terminal transmits the visitor's biometric information to the second portable terminal by first acquisition means for obtaining the visitor's biometric information and the visitor's biometric information acquired by the first acquisition means. And the second portable terminal acquires the biological information of the visitor's biological information, the biological information of the visitor's biological information acquired by the second acquisition means, and the second Second transmitting means for transmitting visitor biometric information from one mobile terminal and visit information such as visit date and time and place to the accepting terminal, wherein the accepting terminal is connected to the second mobile terminal. The biometric information of the visitor and the biometric information of the respondent Generation means for generating key data; registration means for registering the key data generated by the generation means together with visit information such as visit date, place, biometric information of the visitor, and biometric information of the respondent; and accepting the visit Registered in the registration means corresponding to the biometric information of the visitor that matches the biometric information of the visitor acquired by the third acquisition means that obtains the biometric information of the visitor to perform. A reading means for reading the key data and the biometric information of the respondent; an extracting means for extracting the biometric information of the respondent from the key data read by the reading means and the biometric information of the visitor obtained by the obtaining means; And authenticating means for authenticating the visitor based on the degree of coincidence between the biometric information of the respondent extracted by the extracting means and the biometric information of the respondent read by the reading means.
[0011]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, an entrance / exit management system (visit reservation authentication system) using a personal authentication system according to an embodiment of the present invention will be described with reference to the drawings.
As shown in FIG. 1, the entrance / exit management system includes a mobile phone (first mobile terminal) 1 and a mobile phone (second mobile terminal) 2 of an attendee (responder), The eye, nose, mouth for the receiving terminal 3 installed at the entrance of the meeting room where the visit is to be performed, and an image including at least the face of the applicant (hereinafter referred to as a face image) A feature extracting device 17 for extracting each feature parameter (biological information) based on the position of the person, a date and time as a reservation content of the visit, a location, a feature parameter for the face image of the visitor candidate, and a feature parameter for the face image of the respondent The entrance / exit management server 5 stores key data. The mobile phone 1, the mobile phone 2, and the receiving terminal 3 are connected by a public line, and the receiving terminal 3 and the entrance / exit management server 5 are connected by a LAN 4 or the like.
[0012]
The mobile phones 1 and 2 and the receiving terminal 3 have built-in cameras 1a, 2a, and 3a that can capture face images, respectively. The mobile phones 1 and 2 and the receiving terminal 3 each have operation keys, a display unit, a memory, a control unit, a modem, and the like.
[0013]
For example, the receiving terminal 3 includes a control unit 11 for controlling the whole, operation keys 12 for setting various instructions, a display unit 13, a memory 14, a public line, a modem 15 for connecting to the Internet, a communication interface 16 for LAN 4, It is configured to include a feature extraction device 17 that extracts respective feature parameters based on the positions of eyes, nose, and mouth with respect to the face image captured by the camera 3a or the face image transmitted from the mobile phones 1 and 2. .
[0014]
The feature extraction device 17 can be similarly implemented even in a configuration that is provided outside the receiving terminal 3 and can exchange data with the receiving terminal 3 via the LAN 4.
A gate controller 6 is connected to the receiving terminal 3, and the gate controller 6 unlocks the entrance door 8 of the reception room 7 as a meeting place.
[0015]
Next, in such a configuration, the appointment reservation process and the appointment acceptance process will be described with reference to the flowcharts shown in FIGS.
The visitor (applicant) makes a reservation for a visit, that is, visit date and time, place, etc. on the mobile phone 1 (ST1 to ST3).
[0016]
At the time of this reservation, the person who wishes to visit takes a picture of his face (biological information of the person who is scheduled to visit) with the camera 1a of the mobile phone 1 (first acquisition means) (ST1), and the visit date and time as the reservation contents of the visit , The location is entered, and transmission to the cellular phone 2 is instructed (ST2). The transmission data including the visit date and time, the place, and the face image of the person who wants to meet as the reservation contents of this visit is transmitted to the mobile phone 2 of the respondent (first transmission means) (ST3).
[0017]
The receptionist's mobile phone 2 receives the transmission data from the mobile phone 1 and registers it in the memory, displays the visit date and time, the location and the face image of the visitor as the reservation contents of the visit (ST4), permits the visit, A non-permitted inquiry is made to the responder (ST5). This display may be all or part of the transmission data (the main point).
[0018]
When the visitor permits the visit, the attendant inputs permission by the mobile phone 2, inputs the visit date / time and place by the receiving terminal 3, and captures his / her face image by the camera 3 a (second acquisition) Means) (ST6). This person's face image may be an image captured in advance.
[0019]
By the permission input by the mobile phone 2 (ST7), the respondent's mobile phone 2 transmits the date and time, the location, and the face image of the person who wants to meet as the reservation contents of the visit to the receiving terminal 3 (second transmission means) (ST8).
The receiving terminal 3 registers the transmission data including the date and time, the location, and the face image of the person who wants to meet from the mobile phone 2 of the receiver in the receiving memory 14 (ST9), and the camera 3a. Is registered in the memory 14 (ST10), and the characteristic parameters (X1, X2) based on the positions of the eyes, nose, and mouth of the face image of the person who wants to meet and the face image of the responder are registered. Are extracted using the feature extraction device 17 (ST11).
[0020]
The transmission data from the mobile phone 2 of the responder and the face image of the responder can be dealt with depending on the date and place of the reservation, and may be dealt with based on the reservation number or the like.
Further, the receiving terminal 3 generates key data (X) by calculating, for example, addition of the feature parameter (X1) for the face image of the person who wants to meet and the feature parameter (X2) for the face image of the responder (generation means). (ST12).
[0021]
The reception terminal 3 manages entry / exit of the date / time, location, and the feature parameter (X1) for the face image of the applicant, the feature parameter (X2) and key data (X) for the face image of the interviewee as the reservation contents of the visit. It transmits to the server 5 (ST13). The entrance / exit management server (registration means) 5 includes the date and time, the location and the feature parameter (X1) for the face image of the person who wants to visit, the feature parameter (X2) and the key for the face image of the respondent. Data (X) is stored (ST14).
[0022]
Then, the visitor who has reserved the above visit goes to the receiving terminal 3 at the reservation date and time, and sets the receiving terminal 3 to the visit mode (ST21). Thereby, the receiving terminal 3 guides the imaging of the face image of the person who wants to meet (ST22). By this guidance, the person who wants to visit takes a picture of his / her face with the camera 3a of the receiving terminal 3 (third acquisition means) (ST23).
[0023]
The receiving terminal 3 uses the feature extraction device 17 to extract feature parameters (X1) based on the ratio of the distances between the feature points of the eyes, nose, and mouth with respect to the face image of the applicant for the visit (ST24).
[0024]
Further, the receiving terminal 3 retrieves the matching facial image feature parameter (X1) from the entrance / exit management server 5 using the feature parameter (X1) for the facial image of the applicant as a search key (ST25). The key data (X) registered corresponding to the retrieved feature parameter (X1) and the feature parameter (X2) of the face image of the responder are extracted (read out) (reading means) (ST26).
[0025]
Further, the receiving terminal 3 calculates (restores,) the feature parameter (X2) for the face image of the respondent by subtracting the feature parameter (X1) for the face image of the applicant for the visit from the extracted key data (X). (Extraction) (extraction means) (ST27), and the similarity between the calculated feature parameter (X2) of the face image of the respondent and the feature parameter (X2) of the face image of the respondent extracted from the entrance / exit management server 5 (ST28), and the visitor is sent when it is determined that the respondents are substantially the same (the distance between the two feature parameters is the closest, or the one with a predetermined threshold or less is determined as the responder) based on the similarity. It is judged (authenticated) whether or not the applicant for the visit and the applicant for the appointment at the time of reservation match (authentication means) (ST29).
[0026]
As a result of the determination, if the above-mentioned agreement is obtained, the receiving terminal 3 notifies the visit requester to the visit requester (ST30), and the gate controller 6 unlocks the entrance door 8 of the reception room 7 as the visit place. Then (ST31), the visitor's mobile phone 2 is further notified of the visit by the visitor (ST32).
[0027]
As a result of the determination, if the agreement is not obtained, the receiving terminal 3 notifies the visitor who is not permitted to visit and informs the visitor of the request.
In the above example, the key data (X = X1 + X2) is calculated by adding the feature parameter (X1) for the face image of the person who wants to meet and the feature parameter (X2) for the face image of the respondent. The key data may be calculated by subtraction, multiplication, division, or logarithmic exponent operation.
[0028]
A method of preparing a plurality of calculation formulas (functions) for obtaining the key data X and making the calculation formula difficult to guess from the outside by selecting from a reception number, a reception date and time, an initial of the applicant and the respondent, or a random number. You can also.
In the above example, the feature parameter of the face image is used as the biological information. However, the present invention is not limited to this, and a feature vector of the face image may be used. Further, a fingerprint, a voiceprint, or the like may be used.
[0029]
In this case, key data is created by calculation based on the feature data of the highly publicized visitor and the feature data of the respondent. There are a plurality of calculation formulas, and the confidentiality of the formula is high by arbitrarily selecting from the formulas, and impersonation due to forgery, forgery, alteration, etc. can be prevented.
Personal authentication based on the biometric information of multiple persons (of which at least one is a registered person), the applicant and the respondent or guarantor, and the authentication data including the registered person's data is more reliable Is.
[0030]
Next, a personal authentication system used on the Internet or the like as another embodiment of the present invention will be described.
In this case, as shown in FIG. 4, the person who wants to visit the person who wants to access the information to be protected (the person who wants to access it), and the person who has guaranted the person who wants to access (the person who is already registered in the system) The entrance / exit management server 5 is the database server 20 storing the information to be protected, the reception room 7 is the terminal 23 on which the information is displayed, the gate 8 and the gate controller 6 are the database server 20 and the terminal Thus, an information system is constructed in which the reliability of authentication of the accessor to the information to be protected is secured.
[0031]
The database server 20 is provided with a member information database 21 and a music information database 22. In the member information database 21, feature parameters (X2) for voiceprint information (biological information) are registered as already registered member information.
[0032]
In such a configuration, personal authentication processing used on the Internet or the like will be described with reference to the flowcharts shown in FIGS. For example, music information (music software) is provided for a fee.
That is, the mobile phone 1 possessed by the person who wishes to access is connected to the database server 20 that provides the music information via the Internet (ST41). Next, personal information for member registration is input by the mobile phone 1, and voice information of the member registrant and the existing member is input (ST42). The cellular phone 1 extracts the characteristic parameter (X1) for the voiceprint information (biological information) from the voice information of the member registrant (ST43), and the characteristic parameter (X2) for the voiceprint information (biological information) from the voice information of the existing member. Key data (X = X1 + X2) is calculated by adding (ST44) and registered in the memory, and personal information including the key data and the characteristic parameter (X1) for the voice print information (biological information) of the member registrant is stored in the database. It transmits to the server 20 (ST45).
[0033]
The database server 20 obtains the characteristic parameter (X2) for the voiceprint information (biological information) of the existing member obtained by subtracting the characteristic parameter (X1) for the voiceprint information (biological information) of the member registrant from the supplied key data. The calculated feature parameter (X2) is compared with the feature parameter (X2) for the voice print information (biometric information) of the existing member registered in the database 21 (ST47), and the similarity is a predetermined value. When there is larger voiceprint information, authentication is performed, and personal information including the feature parameter (X1) for the voiceprint information of the new member and key data is registered in the database 21 (ST48).
[0034]
After performing such registration, when downloading music information, the mobile phone 1 possessed by the person wishing to access is connected to the database server 20 providing the music information via the Internet (ST51). Next, a feature parameter (X1) for voiceprint information (biological information) is extracted from the voice information of the access requester by the mobile phone 1 (ST52). The key data (X = X1 + X2) at the time of member registration stored in the memory is transmitted to the database server 20 (ST53).
[0035]
The database server 20 obtains the characteristic parameter (X2) for the voiceprint information (biological information) of the existing member obtained by subtracting the characteristic parameter (X1) for the voiceprint information (biological information) of the member registrant from the supplied key data. Calculate (ST54), and compare the calculated feature parameter (X2) for the existing member's voiceprint information (biological information) with the feature parameter (X2) for the existing member's voiceprint information (biological information) registered in the database 21. If there is voiceprint information having a degree of similarity greater than a predetermined value (ST55), downloading of the music information is permitted (ST56).
[0036]
Thereby, the database server 20 reads out desired music information from the database 22 and downloads it to the terminal 23 (ST56).
[0037]
As a result, the biometric information of the accessor (unregistered person) who wants to access the data stored in the information database system and the guarantor (registered person) who guarantees the affiliation of the accessor, etc. is taken in, and from this biometric information Key keys based on the extracted feature data are used.
[0038]
【The invention's effect】
As described above in detail, according to the present invention, unauthorized use such as impersonation can be reliably avoided, and a highly reliable personal authentication system can be provided.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a schematic configuration of an entrance / exit management system using a personal authentication system for explaining an embodiment of the present invention.
FIG. 2 is a flowchart for explaining a visit reservation process.
FIG. 3 is a flowchart for explaining a meeting acceptance process.
FIG. 4 is a block diagram showing a schematic configuration of a personal authentication system.
FIG. 5 is a flowchart for explaining personal authentication processing;
FIG. 6 is a flowchart for explaining personal authentication processing;
[Explanation of symbols]
1.2 ... cell phone 1a, 2a ... camera 3 ... terminal 3a ... camera 4 ... LA
N 5 ... Entrance / exit management server 6 ... Gate controller 7 ... Reception room 8 ... Door 11 ... Control unit 17 ... Feature extraction device.

Claims (3)

At the time of appointment of the visit, the biometric information of the visitor and the respondent is captured, key data is generated from the biometric information, the key data and the biometric information of the respondent are registered corresponding to the biometric information of the visitor,
At the time of the visit, the biometric information of the visitor is taken, and the biometric information of the respondent is calculated by calculating the key data registered corresponding to the biometric information of the visitor and the biometric information of the visitor, and this calculation A personal authentication system characterized in that a match between a visitor's biometric information at the time of a reservation and a visit is determined by comparing the biometric information of the respondent with the registered biometric information of the attendant. In a personal authentication system having a first portable terminal possessed by a visitor, a second portable terminal possessed by a visitor, and a receiving terminal that accepts the visit,
The first portable terminal is
First acquisition means for acquiring biometric information of the visitor;
First transmitting means for transmitting the biometric information of the visitor acquired by the first acquiring means to the second portable terminal,
The second mobile terminal is
A second acquisition means for acquiring biometric information of the visitor at the visit;
The second information is transmitted to the receiving terminal by the second acquisition means, the biometric information of the visitor, the biometric information of the visitor from the first portable terminal, and the visit information such as the date and time of the visit. Transmission means,
The receiving terminal is
Generating means for generating key data from the biometric information of the visitor from the second portable terminal and the biometric information of the respondent;
Registration means for registering the key data generated by the generation means together with the visit information such as visit date and time, place, the biometric information of the visitor and the biometric information of the respondent
Third acquisition means for acquiring biometric information of the visitor who accepts the visit;
A reading means for reading out the key data registered in the registration means and the biometric information of the respondent in correspondence with the biometric information of the visitor that matches the biometric information of the visitor acquired by the third acquisition means;
Extraction means for extracting the biometric information of the respondent from the key data read by the reading means and the biometric information of the visitor acquired by the acquisition means;
A personal authentication system comprising authentication means for authenticating the visitor based on the degree of coincidence between the biometric information of the respondent extracted by the extracting means and the biometric information of the respondent read by the reading means . The personal authentication system according to claim 2, wherein the biometric information of the visitor and the biometric information of the respondent are face images, fingerprint information, retina information, and voiceprint information.

Images