JP2005309565A - Id discriminating device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an ID discriminating device for blocking the registration of biological information by an impostor at the time of collecting the biological information of a user principal by using a password or the like. <P>SOLUTION: This ID discriminating device is provided with a biological information validity determination part 50, and when it is determined that biological information which is valid for biological authentication has been acquired by a biological authentication validity/invalidity deciding part 40, whether or not it is the biological information of a user principal is decided by using biological information initially registered by the user, and when it is determined that it is the biological information of the user principal, the biological information registered in a biological information registering part 30 is deleted. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to biometric authentication, and more particularly to an ID discrimination device for performing personal authentication.

  The conventional ID discriminating apparatus is effective for biometric authentication at a time in order to reduce the psychological resistance of the user when registering the biometric information when registering the biometric information necessary for performing personal authentication. First of all, it asks for input of a password to authenticate an individual by a method other than biometric authentication such as a password, and at the same time, obtains biometric information at the same time. In addition to registering information, it is determined whether the obtained biometric information is sufficiently effective when used for authentication, and as a result, it is determined that data effective for authentication is obtained, and then biometric authentication is performed. It was. (For example, refer to Patent Document 1).

  FIG. 8 shows a block diagram of a conventional ID discrimination device. In FIG. 8, the authentication information input unit 1 acquires information, biometric information, and a password necessary for personal authentication, and the first authentication unit 2 determines whether the user is the user by a method other than biometric authentication. 1 is registered in the biometrics data registration unit 3, and the biometrics authentication availability determination unit 4 determines whether the information registered in the biometrics data registration unit 3 is valid for biometric authentication. When it is determined that sufficient information has been obtained, the second authentication unit 5 performs biometric authentication from the next time to authenticate the individual. Finally, the authentication result output unit 6 outputs the personal authentication result.

FIG. 9 shows a flow chart of processing in a conventional ID discrimination device.
JP 2003-186845 A (page 8-9, FIG. 1)

  However, although the risk of being misrepresented by using biometric information instead of the conventional authentication method should be eliminated, the PIN number etc. at the time of registration so that it can cope with the psychological burden and physical condition of the user at the time of biometric information registration By using the above, a dangerous state that is spoofed in the authentication occurs temporarily. That is, when performing personal authentication using a method other than biometric information authentication, for example, a personal identification number or an ID card, the personal identification number can be seen by someone else or the card can be stolen. Before the information is registered, there is a problem that there is a risk that another person may register biometric information different from the person himself / herself.

  The present invention solves the conventional problems, and is a method using a method other than biometric authentication until biometric information effective for biometric authentication is obtained in order to reduce a user's psychological burden when registering biometric information. An object of the present invention is to provide an ID discriminating apparatus with a low risk of being misrepresented by another person even when an individual is authenticated.

  In order to solve the conventional problems, the ID discrimination device of the present invention is input to the authentication information input unit that inputs biometric information for authenticating the user and information other than the biometric information, and the authentication information input unit. A first authentication unit that authenticates the user using information other than biometric information, and biometric information about the user that is input by the authentication information input unit when authenticated by the first authentication unit. A biometric information registration unit to store, a biometric authentication availability determination unit that determines whether biometric authentication can be used with reference to the biometric information stored in the biometric information registration unit, and the biometric information registration unit Is registered in the biometric registration unit according to the determination results of the biometric authentication availability determination unit and the information validity determination unit. Biometric information Is obtained by comprising the second authentication unit for performing biometric authentication are.

  Further, according to the present invention, the information validity determination unit compares other registration data other than the user's initial registration data, sets an individual-specific acceptance threshold from the result, and uses the acceptance threshold to the user. The first registration data is subjected to solid authentication, and the validity of the registration data is determined.

  Further, the information validity determining means uses the data having the lowest rate of accepting others by mistake among other registration data other than the user's first registration data, and solid authentication of the user's first registration data The registration data is determined to be valid.

  According to the ID discriminating apparatus of the present invention, even if the registration information is determined to be effective for biometric authentication, the first registered biometric information is obtained by using the biometric information registered after that. By obtaining an acceptance threshold and evaluating the biometric information registered first using the acceptance threshold, it is possible to determine whether the biometric information is registered by the spoofer and to prevent the misrepresentation.

  In addition, even if the registration information is determined to be valid for biometric authentication, the biometric information registered first is used among the biometric information registered after that, and the information with the lowest rate of accepting others by mistake is used. By confirming whether or not the user is the person himself / herself, it is possible to prevent biometric information registration by an impersonator.

  Embodiments of the ID discrimination device of the present invention will be described below in detail with reference to the drawings.

  FIG. 1 is a block diagram of an ID discriminating apparatus according to the first embodiment of the present invention. In FIG. 1, 10 is an authentication information input unit for acquiring biometric information, 20 is a first authentication unit that determines whether the user is the user by a method other than biometric authentication, and 30 is information obtained by the authentication information input unit 1. Is a biometric information registration unit for registering the biometric authentication, 40 is a biometric authentication enable / disable determination unit for determining whether the data registered in the biometric information registration unit is valid for biometric authentication, and 50 is the newly obtained biometric information. A biometric information validity determination unit that determines whether the information is the original user information, 60 is a second authentication unit that performs biometric authentication using the data registered in the biometric information registration unit, and 70 is an authentication result to the user. An authentication result output unit to be presented.

  An outline of ID discrimination processing using biometric authentication in this configuration will be described below.

  When the user performs authentication processing for the first time, the authentication information input unit 10 acquires biometric information, and the first authentication unit 20 inputs a password, for example, for authentication. The biometric information acquired here is information that can be used to determine whether the user is an individual using personal physical characteristics such as fingerprints, finger joint wrinkles, iris, retina, ear, face, and voice. In addition, as an authentication method other than biometric authentication performed by the first authentication unit 20, authentication using a password will be described as an example here, but the present invention is not limited to password authentication.

  The first authentication unit 20 uses the password input by the authentication information input unit 10 to confirm the identity of the user, and if the user can be confirmed, the biometric information obtained by the authentication information input unit 10 is used as the biometric information registration unit 30. To register in the storage device. Note that this storage device is in the biometric information registration unit 30, and the form thereof is not limited. If the authentication fails in the first authentication unit 20, it is determined that the user is not himself and the process is terminated.

  If the authentication is successful in the first authentication unit 20 and the information is registered in the biometric information registration unit 30, then the biometric authentication availability determination unit 40 determines whether the registered data is valid for biometric authentication.

  The ideal biometric information in biometric authentication is when the characteristics of the principal and the characteristics of others other than the principal are completely independent and have no similarity. In this case, it is possible to set a threshold value in the determination between the person and the other person, and determine whether the person is the other person or not based on whether the similarity (error) exceeds the threshold value. However, since the characteristics of the principal and the characteristics of others other than the principal are somewhat similar, there may be cases where determination cannot be made with the set threshold depending on the state of the obtained information, and erroneous determination occurs.

  There are two types of misjudgment, one of which is the FRR (False Rejection Rate), which is an error rate that rejects acceptance even if the person who is accessing is the principal. It is. Another misjudgment is another person acceptance rate FAR (False Acceptance Rate), which is an error rate for judging that the other person is the correct person.

  The biometric authentication feasibility determination unit 40 determines that biometric authentication is possible using the data after obtaining data that satisfies both the acceptance rate FAR and the rejection rate FRR. Until data with a good other person acceptance rate FAR of the user can be acquired, only the other person acceptance rate FAR of the acquired data is evaluated. If you can obtain data for a good false acceptance rate FAR, evaluate the false rejection rate FRR for data with a good false acceptance rate FAR, and data that will be obtained thereafter, and satisfy both the false acceptance rate FAR and false rejection rate FRR. Aim to acquire data.

  An example of the principal rejection rate FRR and the other person acceptance rate FAR is shown in FIG. As shown in FIG. 2, when the threshold value used for determination (hereinafter referred to as the acceptance threshold value) is increased (acceptance threshold value 1 to acceptance threshold value 2), the rejection rate FRR decreases, but the false acceptance rate FAR increases. The possibility of determination increases, and the acceptance rate FAR can be reduced by decreasing the acceptance threshold (acceptance threshold 1 and acceptance threshold 3).

  Whether the person is the person using the acquired biometric information when the evaluation results for the two erroneous determinations using the acceptance threshold (for example, acceptance threshold 1) set appropriately are within a predetermined range. The determination by the biometric authentication availability determination unit 40 is performed based on whether the identity rejection rate FRR and the other-person acceptance rate FAR of the registered biometric information are converged within a predetermined range.

  The determination of the other person acceptance rate FAR is evaluated using the biological information of another person already registered on the apparatus. That is, a specific acceptance threshold is set, and determination is made based on the similarity between the biometric information registered by another person and the biometric information of the newly registered person. This other person's biometric information includes data of a user who has already used this system and data collected in advance.

  The principal rejection rate FRR determines the similarity by changing the acceptance threshold between a plurality of pieces of data acquired as the user's own information. Even biometric information obtained from the same person does not always provide information having the same characteristics. As shown in FIG. 3, P2 indicating two identity rejection rates FRR has a larger average error rate than P1. Thus, even the biometric information of the same person varies greatly depending on the environment and conditions for acquiring the information.

  In addition, since the biometric information of another person cannot be used for the evaluation of the principal rejection rate FRR, the biometric authentication availability determination unit 40 does not evaluate the principal rejection rate FRR until data of a plurality of principals is acquired.

  Next, the biometric information validity determination unit 50 determines whether the biometric authentication availability determination unit 40 registers the user with the user during the period from when the individual first data is registered until it is determined that valid data has been obtained or accumulated. Controls each unit so as to prevent biometric authentication availability determination using biometric data registered by different third parties.

  In the biometric authentication availability determination unit 40, even if data with a good other person acceptance rate FAR is found, if the data belongs to a spoofer, the user himself / herself will not be authenticated in biometric authentication. When good data can be obtained, check whether the registered data belongs to the user.

  The determination of the presence or absence of data registration by the scammers is performed according to the following procedure.

  Since there is a risk of accepting a false person as the user himself / herself, when the biometric information of the user himself / herself is first registered by the biometric information registration unit 30, the biometric authentication availability determination unit 40 uses the registered information. If it is determined whether biometric authentication is to be performed or not, the biometric information validity determination unit 50 then determines whether the biometric information of the user has gathered a specified number or any number of biometric information or until the biometric authentication availability determination unit The process waits until it is determined in 40 that biometric information effective for authentication is obtained. Therefore, the authentication by the second authentication unit 60 is not performed until the processing by the biometric information validity determination unit 50 is performed.

  The biometric information validity determination unit 50 is registered in the biometric information registration unit 30 when a predetermined number of pieces of biometric information are collected or when the biometric authentication availability determination unit 40 determines that biometric information with a good other-person acceptance rate FAR has been obtained. Evaluate whether the living body information belongs to the user himself / herself.

  In the evaluation of the biometric information validity determination unit 50, first, other biometric information (n data from DATA1 to DATAn) excluding the first biometric information DATA0 of the user registered in the biometric information registration unit 30 is used. The person rejection rate FRR is evaluated. In this evaluation, an acceptance threshold Th1 for obtaining an effective identity rejection rate FRR is obtained. At that time, an upper limit is set for the acceptance threshold. By providing this upper limit, it is possible to prevent the acceptance threshold from becoming too large when the spoofer's information is mixed into the user's own biometric information.

  Using the obtained acceptance threshold Th1, both the person rejection rate FRR and the other person acceptance rate FAR are included in information (DATA1 to DATAn) other than the first biological information DATA0 of the user registered in the biological information registration unit 30. The first registered biometric information of the user is evaluated using the best biometric information DATAi.

  As a result, if the first biometric information DATA0 can be correctly authenticated, that is, if the error between the two data is sufficiently small, it is determined that the biometric information of the user himself / herself has been obtained. Then, when the user accesses from the next time onward, the second authentication unit 60 performs biometric authentication using the biometric information DATAi that has the best personal rejection rate FRR and other person acceptance rate FAR.

  When data with good false acceptance rate FAR is registered in the biometric information registration unit 30, the biometric information validity determination unit 50 first authenticates the information of the user himself / herself registered using this spoofer data. Because it is not possible, you can confirm the data registration of the impersonator.

  At this time, if the data that is determined to be valid by the biometric authentication availability determination unit 40 is not obtained, the same processing is performed until the data that is determined to be valid by the biometric authentication availability determination unit 40 after the next time. repeat.

  In addition, if the first data DATA0 cannot be authenticated, the biometric information validity determination unit 50 determines that the spoofer data is registered, and the biometric information registration unit 30 except for the first registration data of the user. Delete the data stored in. In the subsequent access by the user, the biometric information validity determination unit 50 does not perform processing until a specified number of biometric information of the user is collected again.

  When the biometric authentication availability determination unit 40 determines that the target biometric information is valid for biometric authentication when the user first accesses, the biometric authentication is performed by the second authentication unit 60 from the next time. However, since the principal rejection rate FRR cannot be evaluated at this time, the biometric information is obtained every time the user accesses, the principal rejection rate FRR is evaluated, and better biological information is obtained. Otherwise, effective biometric information is collected without performing biometric authentication by the second authenticating unit 60.

  In the second and subsequent accesses, the authentication information unit 10, the first authentication unit 20, and the biometric information registration unit 30 perform the same processing as the first time. When valid biometric information can be confirmed by the biometric authentication availability determination unit 40, the biometric information validity determination unit 50 confirms that the data of the impersonator is not included. If it can be confirmed that the data is user data, biometric authentication is performed by the second authentication unit 60 from the next time.

  Finally, the authentication result output unit 70 outputs the personal authentication result.

  FIG. 4 is a flowchart showing the contents of processing of the biometric authentication device in the first exemplary embodiment of the present invention.

  In FIG. 4, first, in S001, information used for determining whether or not the user is the person is acquired.

  In S002, authentication using, for example, a password that is not biometric information among the information acquired in S001 is performed.

  In S003, if it is determined that the user is not the user as a result of the authentication in S002, the process proceeds to S009. If it is determined that the user is not the user, the process proceeds to S004.

  In S004, the biometric information acquired in S001 is registered and saved.

  In S005, it is determined whether or not the biometric information registered in S004 can be used for biometric authentication. If it is determined that biometric authentication is possible, the process proceeds to S005. If it is determined that biometric authentication is not possible, the process proceeds to S009.

  In S006, it is determined whether or not the data registered in S004 is data registered by the current user. If it can be confirmed as the information of the user, the process proceeds to S008, and if not confirmed, the process proceeds to S007.

  In S007, the data registered in S004 is deleted.

  In S008, biometric authentication is performed using the biometric information acquired in S001.

  In S009, the authentication result is output to the user.

  As described above, in the first embodiment, when the biometric information validity determination unit 50 is provided and the other person acceptance rate FAR of the first biometric information of the user is not good, the biometric information is collected after a predetermined number of biometric information is collected. By obtaining biometric information suitable for biometric authentication and evaluating the initial biometric information using the biometric information, registration of biometric information by an impersonator can be prevented.

  FIG. 5 is a block diagram of an ID discrimination apparatus according to the second embodiment of the present invention. In addition, the same code | symbol is used about the same structure as the Example mentioned above, and description is abbreviate | omitted.

  5 is different from the configuration of the first embodiment in that a biometric information validity determination unit 100 and a registration information management unit 110 that deletes invalid information of biometric information managed by the biometric information registration unit 30 are provided.

  The biometric information validity determination unit 100 is configured to prevent registration of data by a third party different from the principal until it is determined that valid biometric information has been obtained or accumulated in the biometric authentication availability determination unit 40. To control.

  When the registration information management unit 110 determines that data has been registered in the biometric information registration unit 30 by a third party, the registration information management unit 110 deletes the registration data.

  The following procedure is used to prevent data registration by an impersonator.

  The biometric authentication 60 and the biometric information 60 inputted by the biometric authentication availability determination unit 40 for the biometric information that is first input by the user, that is, the user data registered in the biometric information registration unit 30, The biometric information validity determination unit 100 controls the registered information management unit 110 to perform the following processing (1) and processing (2).

Process (1): When the other person acceptance rate FAR of the user's first data DATA0 is low Since the other person acceptance rate FAR of DATA0 is low, the rate of accepting another person by mistake is erroneously accepted. By using this registration data DATA0 to determine whether biometric authentication is valid for new registration information, it can be prevented from being spoofed by others.

  Therefore, even if the first authentication unit 20 authenticates the user at the next and subsequent times, the biometric information validity determination unit 100 uses the newly obtained biometric information DATA1 as the first registration data DATA0. To evaluate.

  Similarly, when the user is authenticated for the second time or later, the biometric information validity determination unit 100 performs biometric authentication validity determination processing using the newly obtained biometric information DATAn and the first biometric information DATA0. The determination is performed until the determination unit 40 determines that information effective for biometric authentication has been obtained. The determination method of the validity determination process in the biological information validity determination unit 100 differs depending on the biological information to be used. For example, the absolute value of the difference between the biometric information newly registered in the biometric information registration unit 30 and the biometric information that has already been registered is simply used, or the square of the absolute value of the difference between the two data is used. Accumulation is obtained, and if these differences are equal to or less than a set value (threshold value), it is determined that authentication is effective.

  If the registration information management unit 110 determines that the biometric information DATA1 is not valid information as a result of the determination by the biometric information validity determination unit 100, the registered information management unit 110 may be spoofed by another person. The information DATA1 newly registered in the information registration unit 30 is deleted.

When it is determined that the biometric information validity determination unit 100 determines that the biometric information is valid, the following processing is performed in the subsequent authentication processing based on the determination result of the biometric authentication availability determination unit 40. If it is determined that sufficient information effective for biometric authentication has been obtained, personal authentication is performed by the second authentication unit 60 using biometric information already obtained from the next time.
Further, when it is determined that sufficient information effective for biometric authentication is not obtained, the above process is repeated.

  An outline of the flow of the process (1) is shown in FIG.

Process (2): When the other person acceptance rate FAR of the user's first biometric information DATA0 is bad Since the other person acceptance rate FAR is bad, there is a risk of accepting a spoofer as the user himself, so the new acceptance rate FAR is good. Control is performed so that biometric authentication is not performed in the second authentication unit 60 until the correct biometric information DATAm is confirmed by the biometric authentication availability determination unit 40.

  When the biometric information DATAn having a good other person acceptance rate FAR is confirmed in the biometric authentication availability determination unit 40 in the authentication process after the next time of the user, the biometric information validity determination unit 100 uses the biometric information DATAn. It is determined whether the first biological information DATA0 of the person is valid.

  When the biometric information DATA0 of the user registered first using the data DATAn having a good other person acceptance rate FAR is determined by the biometric information validity determination unit 100, the biometric information of the same person is found to be Process.

  When the biometric authentication availability determination unit 40 determines that the biometric authentication is effective, the second authentication unit 60 performs biometric authentication using the new biometric information DATAn obtained this time at the time of the subsequent authentication. Control.

  Furthermore, if the data DATAn having a good other person acceptance rate FAR is not authenticated as a result of the determination by the biometric information validity determination unit 100, it is determined that the data is not the user's own biometric information, and the biometric authentication availability determination unit 40 is effective. Even when it is determined as data, the registration information management unit 110 deletes the information DATAn newly registered in the biometric information registration unit 30 this time. In this case, at the next authentication, the process (2) is performed from the beginning.

  Other operations are the same as those in the first embodiment.

  An outline of the flow of the process (2) is shown in FIG.

  As described above, in the second embodiment, the biological information validity determination unit 100 and the biological information management unit 110 are provided, and the determination result of the biological information availability determination unit 40 is used to determine the validity of the input biological information. And the biometric information validity determination unit 100 performs biometric authentication based on the spoofer's biometric information even if the first authentication unit 20 is misrepresented during the period until valid biometric information is obtained. Can be prevented.

  The ID discriminating apparatus according to the present invention reduces the psychological burden on the user until biometric authentication valid information is obtained when registering biometric information, and prevents the registration of biometric information of an impersonator different from the user himself / herself. It is useful in applications that require personal authentication by a machine, such as an electronic service under the Internet environment.

1 is a block configuration diagram of an ID discrimination device according to Embodiment 1 of the present invention. The figure which shows the characteristic curve of the principal rejection rate FRR and the stranger acceptance rate FAR in Example 1 of this invention The figure which shows the characteristic curve of the principal rejection rate FRR in Example 1 of this invention. Flow chart of processing in ID discrimination device in embodiment 1 of the present invention Block configuration diagram of the ID discrimination device in Embodiment 2 of the present invention The flowchart of the 1st process in the ID discrimination | determination apparatus in Example 2 of this invention. Flowchart of second processing in ID discrimination apparatus in embodiment 2 of the present invention Block diagram of a conventional ID discrimination device Flow chart of processing in a conventional ID discrimination device

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Authentication information input part 2 1st authentication part 3 Biometric information registration part 4 Biometrics authentication propriety determination part 5 Second authentication part 6 Authentication result output part 10 Authentication information input part 20 1st authentication part 30 Biometric information registration part 40 Biometric authentication availability Determination unit 50 Biometric information validity determination unit 60 Second authentication unit 70 Authentication result output unit 100 Biometric information validity determination unit 110 Biometric information management unit

Claims (6)

An authentication information input unit that inputs biometric information for authenticating the user and information other than the biometric information, and a first that authenticates the user using information other than the biometric information input to the authentication information input unit An authentication unit, a biometric information registration unit that registers and stores biometric information related to the user input by the authentication information input unit when authenticated by the first authentication unit, and is stored in the biometric information registration unit Determining whether or not biometric authentication can be used with reference to the biometric information, and determining whether or not the information stored in the biometric information registration unit is the user's own And a second authentication unit that performs biometric authentication using biometric information registered in the biometric registration unit according to the determination results of the biometric authentication availability determination unit and the information validity determination unit. With that feature That ID discrimination device. The information validity determination unit compares other registration data excluding the user's first registration data, sets an individual-specific acceptance threshold from the result, and uses the acceptance threshold to determine the initial registration data of the user. The ID discrimination apparatus according to claim 1, wherein the authentication is performed by performing solid authentication. The ID determination apparatus according to claim 2, wherein the information validity determination unit limits a maximum value of the acceptance threshold when the acceptance threshold specific to an individual is used. The information validity determining means performs solid authentication of the first registration data of the user by using data having the lowest rate of accepting others by mistake among other registration data other than the first registration data of the user. The ID determination device according to claim 1, wherein the registration data is determined to be valid. 5. The ID discrimination according to claim 2 or 4, wherein the information validity judgment unit judges whether the biometric information registered when a specified number of biometric information is registered belongs to the user himself / herself. apparatus. When the information validity determining means determines that the registered biometric information is invalid, the biometric information stored in the biometric information registration unit is deleted by the user other than the biometric information registered first. The ID discriminating apparatus according to claim 2 or 4, characterized by the above.

Images