JP2006092283A - Personal authentication system and personal authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To avoid a personal authentication in case that an eavesdropper requests personal authentication to a certification organization by use of eavesdropped biological information by spoofing as a regular user. <P>SOLUTION: A data comparison means 2-3b collates acquired biological information collation devices 1-1 to 1-n acquired from a user who requests personal authentication with registered biological information the user has preliminarily registered in a collation center 2 to detect a characteristic difference between both the biological information. An abnormal state detection means 2-3d rejects the personal authentication in a case that the characteristic difference is zero based on the detection result by the comparison means 2-3b. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a personal authentication system and a personal authentication method, and more particularly to a personal authentication system and a personal authentication method capable of avoiding personal authentication due to data eavesdropping.

  With the progress of the information society, there is a need for a personal authentication system with high accuracy and safety measures. In order to satisfy this social requirement, personal authentication systems that use biometric information that is a characteristic of the human body, such as irises, fingerprints, and facial features, have become widespread. In the conventional system, the biometric information of the user is converted into data in advance and registered in the verification organization. The user obtains biometric information by the collation device again when requesting personal authentication. The certification authority compares and matches the registered biometric information already registered with the acquired biometric information received from the verification device. If the feature dissimilarity is equal to or less than a certain value, the person is personally authenticated (see Patent Document 1).

On the other hand, the system size of the personal authentication system is expanding based on social demands. Under such circumstances, when the user requests biometric information registration or personal authentication, the biometric information is converted into data from the verification device and sent to the authentication organization. The risk of eavesdropping increases on public lines and the like. Furthermore, the risk of eavesdropping from registered biometric information registered in the certification authority cannot be ignored. If an eavesdropper uses the biometric information eavesdropped in this way to impersonate a legitimate user and ask the certification body for personal authentication, it is impossible to avoid personal authentication in the conventional system. .
JP 2004-152045 A

  The problem to be solved is that, as described above, if an eavesdropper impersonates a legitimate user and asks a certification authority for personal authentication using the eavesdropped biometric information, in the conventional system, the personal authentication is performed. It is impossible to avoid.

  In the present invention, based on the detection result of the feature comparison means, the personal authentication is performed when the feature difference between the acquired biometric information and the registered biometric information or the feature difference between the acquired biometric information and the history biometric information is zero. The main feature is to provide an abnormal situation detection means for refusal.

  In the acquisition of biometric information, the surrounding environment, acquisition conditions, and the like at the time of acquisition cannot completely match. Therefore, if the registered biometric information that has already been registered or the characteristics of the historical biometric information that has been personally authenticated in the past and the characteristics of the acquired biometric information received from the verification device are completely the same, eavesdropping, etc. It can be considered that an abnormal situation has occurred. In such a case, by providing the abnormal situation detection means, it becomes possible to refuse personal authentication once, request re-input of the acquired biometric information, and the like, thereby improving the system safety.

  A function for notifying an administrator of the occurrence of an abnormal situation using a predetermined alarm means, and a request for re-input of acquired biometric information via a collation device, and extending the response time corresponding to the abnormal situation By including the functions, it was possible to construct a system that was easy to post-process.

FIG. 1 is a schematic configuration diagram of a personal authentication system according to the first embodiment.
As shown in the figure, the personal authentication system according to the first embodiment includes a plurality of verification devices 1-1 to 1-n, a verification center 2, and a network 3 connecting the two.

  In the registration process and the collation process, the collation device 1-1 (˜1-n) obtains biometric information from the user, extracts feature data included in the biometric information, and passes through the network 3. This is the part sent to the verification center. Inside, biometric information acquisition means 1-1a and feature data extraction means 1-1b are provided. Here, the registration process is a process in which the user registers his / her biometric information in the personal authentication system in advance. The collation process is a process in which the user requests personal authentication from the personal authentication system in, for example, a financial institution.

  The biometric information acquisition unit 1-1a is a unit that acquires biometric information that is a characteristic of the human body, such as an iris, a fingerprint, and a facial appearance, from a user. Usually, an optical system sensor such as a camera shares this role based on control of a CPU (Central Processing Control Unit) (not shown) provided in the collation device 1-1.

  The feature data extraction unit 1-1b is a part that extracts feature data from the biological information acquired by the biological information acquisition unit 1-1a. Usually, the CPU provided in the collation device 1-1 is a computer control means that is activated by executing a predetermined program stored in a memory (not shown) provided in the collation device 1-1. .

  The collation center 2 is a part for registering feature data received from the collation devices 1-1 to 1-n via the network 3 as registered biometric information in the registration process. In the verification process, the feature data received from the verification devices 1-1 to 1-n via the network 3 is used as biometric information acquired by the user who requests personal authentication. It is also a part that compares and collates with the history biometric information and returns the determination result to the collation devices 1-1 to 1-n. It includes a registration data storage unit 2-1, an authentication history storage unit 2-2, and a control unit 2-3. Here, the history biometric information refers to all of the acquired biometric information when personal authentication has been performed in the past.

  The registration data storage unit 2-1 is a database that stores registered biometric information of users. The authentication history storage unit 2-2 is a sub memory of the registration data storage unit 2-1, which stores the history biometric information in association with the registered biometric information. Normally, a part of the memory area in the registered data storage unit 2-1 is allocated.

  The control unit 2-3 is a CPU that controls the entire verification center 2, and in addition to normal control means (not shown), in this embodiment, executes a program stored in a predetermined memory (not shown). This is a part for starting the data storing / reading means 2-3a, the data comparing means 2-3b, the collation determining means 2-3c, and the abnormal situation detecting means 2-3d.

  In the registration process, the data storing / reading unit 2-3a stores the feature data received from the verification devices 1-1 to 1-n via the network 3 in the registered data storage unit 2-1 as registered biometric information. In the above collation processing, the registered biometric information of the corresponding user is read from the registration data storage unit 2-1, and the history biometric information is stored in the authentication history storage unit 2-2 or read out. Means.

  In the collation process, the data comparison unit 2-3b receives the biometric information of the user who requests personal authentication received from the collation devices 1-1 to 1-n via the network 3 and the registration of the user. It is a control means for comparing and collating with biometric information to detect a feature difference. Further, in the verification process, the acquired biometric information of the user who requests personal authentication and the history related to the registered biometric information of the user accepted from the verification devices 1-1 to 1-n via the network 3. It is also a control means for comparing and collating with biometric information to detect a feature difference.

  Based on the comparison result of the data comparison unit 2-3b, the collation determination unit 2-3c determines in advance the degree of feature difference between the acquired biometric information of the user who requests personal authentication and the registered biometric information of the user. If it is less than the predetermined value, it is determined that the personal authentication has passed, and if the feature difference exceeds a predetermined value, it is determined that the personal authentication has failed, and the determination result is collated via the network 3. It is a means for sending a reply to the devices 1-1 to 1-n. Furthermore, it is also a means for determining that the personal authentication has failed when an abnormal situation occurs based on the recognition of the abnormal situation detecting means 2-2d described later and returning the determination result to the collation devices 1-1 to 1-n via the network 3. is there.

  The abnormal situation detection means 2-3d is based on the comparison result of the data comparison means 2-3b, the degree of feature difference between the acquired biometric information of the user who requests personal authentication and the registered biometric information of the user, or When the characteristic difference between the acquired biometric information of the user who requests personal authentication and the historical biometric information of the user is 0, that is, when the characteristics completely match, the occurrence of an abnormal situation is recognized, and collation determination means This is means for notifying 2-3c.

  The network 3 is a line connecting the collation devices 1-1 to 1-n and the collation center 2, and a public line is usually used, but it may be a dedicated line or a LAN (local area network). Or the case where each collation apparatus and the collation center 2 are directly connected with a cable is also included.

Next, the operation of the first embodiment will be described using a flowchart.
FIG. 2 is an operation flowchart of the personal authentication system according to the first embodiment.
The operation of the first embodiment will be described in the order of steps S1-1 to S1-7 in the flowchart. However, the registered biometric information of the user who requests personal authentication and the historical biometric information related to the registered biometric information are stored in advance in the registration data storage unit 2-1 (FIG. 1) and the authentication history storage unit 2-2 ( Assume that it is stored in FIG.

Step S1-1
When a user seeking personal authentication is relative to a predetermined position with respect to the verification device 1-1 (FIG. 1), the biological information acquisition unit 1-1a (FIG. 1) acquires predetermined biological information from the user.
Step S1-2
The feature data extraction unit 1-1b (FIG. 1) extracts feature data from the biological information acquired by the biological information acquisition unit 1-1a (FIG. 1). This characteristic data is sent from the collation device 1-1 (FIG. 1) to the collation center 2 (FIG. 1) via the network 3 as acquired biometric information of a user who requests personal authentication.

Step S1-3
When the verification center 2 (FIG. 1) accepts the acquired biometric information of the user who requests this personal authentication, the data storing / reading means 2-3a (FIG. 1) stores the registered biometric information of the user in the registered data storage unit. Read from 2-1 (FIG. 1). Further, the user's history biometric information is read from the authentication history storage unit 2-2 (FIG. 1). The data comparison unit 2-3b (FIG. 1) compares the registered biometric information and history biometric information with the received acquired biometric information, and detects the feature difference.

Step S1-4
The collation determining means 2-3c (FIG. 1) predetermines the degree of feature difference between the acquired biometric information of the user and the corresponding registered biometric information based on the comparison collation result of the data comparing means 2-3b (FIG. 1). If the predetermined value exceeds the predetermined value, the process proceeds to step S1-5, and if the feature difference is equal to or less than a predetermined value, the process proceeds to step S1-6.

Step S1-5
The collation determination unit 2-3c (FIG. 1) determines that the personal authentication has failed, and returns the determination result to the collation device 1-1 (FIG. 1) via the network 3 (FIG. 3).

Step S1-6
When the abnormal situation detection means 2-3d (FIG. 1) completely matches the acquired biometric information of the user and the corresponding registered biometric information based on the comparison result of the data comparison means 2-3b (FIG. 1). Advances to step S1-5. Furthermore, even when the acquired biometric information of the user and the corresponding registered biometric information do not completely match, if the acquired biometric information of the user and the corresponding historical biometric information completely match, an abnormal situation Is recognized and the process proceeds to step S1-5. Only when both do not completely match, the normal state is recognized and the process proceeds to step S1-7.

Step S1-7
The collation determination unit 2-2c (FIG. 1) determines that the personal authentication has passed, and returns the determination result to the collation device 1-1 (FIG. 1) via the network 3 (FIG. 3). At this time, the acquired biometric information of the user is stored as historical biometric information in the authentication history storage unit 2-2 (FIG. 1).

  In the above description of the operation, the abnormal situation detection means 2-2d (FIG. 1) recognizes the occurrence of the abnormal situation in the following cases, for example, and the flow proceeds from step S1-6 to step S1-5. .

(Example 1)
Whether or not the eavesdropping feature data is transmitted from any of the verification devices 1-1 to 1-n (FIG. 1) via an unauthorized PC or other PC (personal computer) connected to the network 3 In this case, the information is disguised and sent to the verification center 2 (FIG. 1). In such a case, the feature difference degree becomes zero.
(Example 2)
This is a case where the feature data of the unauthorized user sent from the matching devices 1-1 to 1-n (FIG. 1) is replaced with the feature data eavesdropped by the unauthorized user and sent to the matching center 2 (FIG. 1). Even in such a case, the feature difference degree becomes zero.

  As described above, according to the present embodiment, the feature difference between the acquired biometric information of the user seeking personal authentication and the registered biometric information is 0, or the acquired biometric information of the user seeking personal authentication and the history biometric When the feature dissimilarity from the information is 0, personal authentication is rejected, so that it is possible to prevent an unauthorized user from impersonating a legitimate user using feature data that has been wiretapped.

  In this embodiment, the abnormal condition detection means notifies the administrator of the occurrence of the abnormal situation using a predetermined alarm means, and asks the unauthorized user to re-input the acquired biometric information via the verification device, The purpose is to facilitate post-processing by including a function to increase the response time corresponding to the situation.

FIG. 3 is a schematic configuration diagram of the personal authentication system according to the second embodiment.
As shown in the figure, the personal authentication system according to the second embodiment includes a plurality of verification devices 1-1 to 1-n, a verification center 12, and a network 3 connecting the two. Only differences from the first embodiment will be described below. The same parts as those of the first embodiment are denoted by the same reference numerals as those of the first embodiment, and the description thereof is omitted.

  The collation center 12 is a part for registering the feature data received from the collation devices 1-1 to 1-n via the network 3 as registered biometric information in the registration process. In the verification process, the feature data received from the verification devices 1-1 to 1-n via the network 3 is used as biometric information acquired by the user who requests personal authentication. It is also a part that compares and collates with the history biometric information and returns the determination result to the collation devices 1-1 to 1-n. Inside, a registration data storage unit 2-1, an authentication history storage unit 2-2, and a control unit 12-3 are provided. Here, the history biometric information refers to all of the acquired biometric information when personal authentication has been performed in the past.

  The control unit 12-3 is a CPU that controls the entire verification center 12, and in addition to normal control means (not shown), in this embodiment, executes a program stored in a predetermined memory (not shown). This is a part for starting the data storing / reading means 2-3a, the data comparing means 2-3b, the collation determining means 2-3c, and the abnormal situation detecting means 12-3d.

  The abnormal situation detection means 12-3d is based on the comparison result of the data comparison means 2-3b, the degree of feature difference between the acquired biometric information of the user who requests personal authentication and the registered biometric information of the user, or When the characteristic difference between the acquired biometric information of the user who requests personal authentication and the historical biometric information of the user is 0, that is, when the characteristics completely match, the occurrence of an abnormal situation is recognized, and collation determination means This is means for notifying 2-3c. Furthermore, an abnormal situation notification function 12-3d1 for recognizing the occurrence of an abnormal situation and notifying the administrator of the collation center 12 of the occurrence of the abnormal situation using a predetermined warning means, and a collation device facing the user The biometric information reacquisition requesting function 12-3d2 requests the unauthorized user to re-input the acquired biometric information via 1-1 (˜1-n). Here, the predetermined alarm means may be, for example, an alarm or the like that notifies by sound, or a special light emission or the like that uses light beams, or a combination of both.

Next, the operation of the second embodiment will be described using a flowchart.
FIG. 4 is an operation flowchart of the personal authentication system according to the second embodiment.
The operation of the second embodiment will be described in order of steps from step S2-1 to step S2-9 in the flowchart. However, the registered biometric information of the user who requests personal authentication and the historical biometric information related to the registered biometric information are stored in advance in the registration data storage unit 2-1 (FIG. 3) and the authentication history storage unit 2-2 ( Assume that they are stored in FIG.

Step S2-1
When a user seeking personal authentication is relative to a predetermined position with respect to the verification device 1-1 (FIG. 3), the biological information acquisition unit 1-1a (FIG. 3) acquires predetermined biological information from the user.
Step S2-2
The feature data extraction unit 1-1b (FIG. 3) extracts feature data from the ecological information acquired by the biological information acquisition unit 1-1a (FIG. 3). This characteristic data is sent from the collation device 1-1 (FIG. 3) to the collation center 12 (FIG. 3) as biometric information acquired by the user who requests personal authentication via the network 3.

Step S2-3
When the verification center 12 (FIG. 3) accepts the acquired biometric information of the user who requests this personal authentication, the data storing / reading means 2-3a (FIG. 3) stores the registered biometric information of the user in the registered data storage unit. Read from 2-1 (FIG. 3). Further, the history biometric information of the user is read from the authentication history storage unit 2-2 (FIG. 3). The data comparison unit 2-3b (FIG. 3) compares the registered biometric information and history biometric information with the received acquired biometric information, and detects the feature difference.

Step S2-4
The collation determining means 2-3c (FIG. 3) determines in advance the feature difference between the acquired biometric information of the user and the corresponding registered biometric information based on the comparison collation result of the data comparing means 2-3b (FIG. 3). If it exceeds the predetermined value, the process proceeds to step S2-5, and if the feature difference is equal to or less than a predetermined value, the process proceeds to step S2-6.

Step S2-5
The collation determination unit 2-3c (FIG. 3) determines that the personal authentication has failed, and returns the determination result to the collation device 1-1 (FIG. 3) via the network 3 (FIG. 3).

Step S2-6
The abnormal situation detection means 2-3d (FIG. 3), when the acquired biometric information of the user and the corresponding registered biometric information completely match based on the comparison result of the data comparison means 2-3b (FIG. 3). Advances to step S2-8. Furthermore, even when the acquired biometric information of the user and the corresponding registered biometric information do not completely match, if the acquired biometric information of the user and the corresponding historical biometric information completely match, an abnormal situation Is recognized, the process proceeds to step S2-8, and only when both are not completely matched, the normal state is recognized and the process proceeds to step S2-7.

Step S2-7
The collation determination unit 2-2c (FIG. 3) determines that the personal authentication has passed, and returns the determination result to the collation device 1-1 (FIG. 3) via the network 3 (FIG. 3). At this time, the acquired biometric information of the user is stored in the authentication history storage unit 2-2 (FIG. 3) as historical biometric information.

Step S2-8
The abnormal situation notifying function 12-3d1 of the abnormal situation detecting means 12-3d (FIG. 3) notifies the administrator of the verification center 12 of the occurrence of the abnormal situation using a predetermined warning means.

Step S2-9
The biological information reacquisition request function 12-3d2 of the abnormal situation detection means 12-3d (FIG. 3) again sends the biological information to the user (in this case, an unauthorized user) via the verification device 1-1 (FIG. 3). Information acquisition is requested, and the process proceeds to step S2-5 to reject personal authentication. Here, by requesting biometric information acquisition again, it is possible to earn time for post-processing such as reporting to the police.

  In the above description of the operation, the abnormal situation detection unit 12-2d (FIG. 3) recognizes the occurrence of the abnormal situation in the following cases, for example, as in the first embodiment, and the flow proceeds from step S2-6 to step S2. Proceed to -8.

(Example 1)
Whether or not the eavesdropping feature data is sent from any of the collation devices 1-1 to 1-n (FIG. 3) via an other PC (personal computer) or the like connected to the network 3 In this case, the information is disguised and sent to the verification center 2 (FIG. 3). In such a case, the feature difference degree becomes zero.
(Example 2)
This is a case where the feature data of the unauthorized user sent from the matching devices 1-1 to 1-n (FIG. 3) is replaced with the feature data eavesdropped by the unauthorized user and sent to the matching center 2 (FIG. 3). Even in such a case, the feature difference degree becomes zero.

  As described above, according to the present embodiment, in addition to the effects of the first embodiment, the abnormal situation notification function 12-3d1 allows the administrator of the collation center 12 to generate an abnormal situation using a predetermined warning means. Further, the biometric information reacquisition request function 12-3d2 requests the user (in this case, an unauthorized user) to obtain biometric information again via the verification device 1-1 (FIG. 3), Since it is also possible to earn time, an effect is obtained that post-processing after occurrence of an abnormal situation is facilitated.

  In the above description, all of the data comparison unit 2-3b, the collation determination unit 2-3c, and the abnormal situation detection unit (2-3d and 12-3d) in the description of the first embodiment and the second embodiment described above are the CPUs. Has been described as being computer control means that is activated by executing a predetermined program, but the present invention is not limited to this example. That is, the present invention can be applied to a system in which all or a part of the above means is configured by a dedicated electronic circuit.

It is a schematic block diagram of the personal authentication system of Example 1. FIG. 3 is an operation flowchart of the personal authentication system according to the first embodiment. It is a schematic block diagram of the personal authentication system of Example 2. 6 is an operation flowchart of the personal authentication system according to the second embodiment.

Explanation of symbols

1-1 to 1-n collation device 1-1a biometric information acquisition unit 1-1b feature data extraction unit 2 collation center 2-1 registration data storage unit 2-2 authentication history storage unit 2-3 control unit 2-3a data storage・ Reading means 2-3b Data comparing means 2-3c Collation determining means 2-3d Abnormal situation detecting means

Claims (8)

A personal authentication system that collates acquired biometric information acquired by a collation device from a user with registered biometric information registered in advance by a collation organization and performs personal authentication based on a collation result of the biometric information. ,
A feature comparison means for comparing the acquired biometric information with the registered biometric information and detecting a feature difference between the biometric information;
A personal authentication system comprising: an abnormal situation detection unit that rejects the personal authentication when the feature difference is zero based on a detection result of the feature comparison unit. The verification organization stores biometric information used for personal authentication in the past as historical biometric information,
The feature comparison means further collates the acquired biometric information and the history biometric information, detects a feature difference between the biometric information,
The abnormal situation detection means further rejects the personal authentication based on the detection result of the feature comparison means when the degree of feature difference between the acquired biometric information and the history biometric information is zero. The personal authentication system according to claim 1.   The personal authentication system according to claim 1, wherein the abnormal situation detection unit further notifies the occurrence of the abnormal situation using a predetermined warning unit.   The personal authentication system according to claim 1, wherein the abnormal situation detection unit further requests re-input of acquired biometric information via the verification device. A personal authentication method for collating acquired biometric information acquired from a user by a collation device with registered biometric information registered in advance by a collation organization and performing personal authentication based on a collation result of both biometric information. ,
A feature comparison procedure for collating the acquired biometric information with the registered biometric information and detecting a feature difference between the two,
A personal authentication method comprising: an abnormal situation detection procedure for rejecting the personal authentication when the feature difference is zero based on a detection result of the feature comparison procedure. The verification organization stores biometric information used for personal authentication in the past as historical biometric information,
In the feature comparison procedure, the acquired biometric information and the history biometric information are further collated, and the feature difference between the biometric information is detected,
In the abnormal situation detection procedure, based on the detection result of the feature comparison procedure, the personal authentication is rejected when the degree of feature difference between the acquired biometric information and the history biometric information is zero. The personal authentication method according to claim 5.   6. The personal authentication method according to claim 5, wherein in the abnormal situation detection procedure, the occurrence of the abnormal situation is further notified using a predetermined alarm procedure. 6. The personal authentication system according to claim 5, wherein in the abnormal situation detection procedure, re-input of acquired biometric information is further requested through the verification device.

Images