JP2006184992A - Biological information authentication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide technology for discriminating customers whose biological authentication is required from customers whose biological authentication is not required, wherein those customers coexist in transaction, in an ATM since it is necessary to register a biological pattern for executing biological authentication and it is difficult to simultaneously switch to transaction having biological authentication for all customers, and security improvement by the biological authentication is considered as a service to a specific customer. <P>SOLUTION: An area where information is written for deciding whether or not a customer is one whose finger vein authentication is required is prepared in the magnetic data format of a magnetic stripe card, and an ATM reads the magnetic data of an inserted magnetic stripe in order to decide whether or not the customer who has inserted the card is one whose finger vein authentication is required. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to authentication of biometric information. For example, this technique is suitable for use in transactions in an automatic transaction apparatus such as an ATM installed in a store such as a bank or other financial institution.

  In recent years, the damage caused by the use of stolen cards or counterfeit cards has increased in transactions with financial institutions, and a system for performing identity verification using biometric authentication such as finger vein authentication has also been proposed as an improvement in security in transactions with ATMs. (See Patent Documents 1 to 3).

JP 09-106470 A Japanese Patent Laid-Open No. 10-134229 Japanese Unexamined Patent Publication No. 2001-67523

  In order to perform biometric authentication, it is required to register a biometric pattern, so it is difficult to switch to a transaction that requires biometric authentication for all customers at once. In addition, security improvement by biometric authentication can be considered as a service for specific customers. For this reason, a customer who requires biometric authentication and a customer who does not need it in a transaction are mixed.

  Here, if the customer chooses whether or not biometric authentication is required, the customer will be troublesome, and the operation may be mistaken, and the cause of allowing transactions that do not use biometric authentication with a theft card It also becomes.

  In addition, finger vein authentication is authentication based on the vein pattern inside the finger, but because the finger is used, the customer is misrecognized as fingerprint authentication and resists registration and authentication from the image of the criminal's fingerprint collection. There are cases where

  Therefore, for example, in the magnetic data format of the magnetic stripe card, an area for writing information is prepared in order to determine whether the customer is a customer who requires finger vein authentication. By reading the data, it is determined whether the customer who inserted the card is a customer who requires finger vein authentication.

  Alternatively, in the data format stored in the IC chip of the IC card, an area for writing information is prepared in order to determine whether the customer is a customer requiring finger vein authentication, and the ATM inserts the inserted IC. By reading the data in the IC chip of the card, it is determined whether or not the customer who inserted the card is a customer requiring finger vein authentication.

  Also, in finger vein authentication in ATM transactions, when the finger vein image read when the finger is held over the finger vein lead part is actually displayed on the display part, or when the finger is held over the finger vein reading part By displaying an illustration of the finger vein during the included transaction, the customer can visually recognize that the finger vein, not the fingerprint, is used for authentication.

  For example, there are the following effects. Since ATMs can automatically determine which customers require biometric authentication and which customers do not need biometrics, the financial institution does not switch to requiring biometric authentication for all ATM transactions at the same time. It is possible to have a customer who requires authentication and a customer who does not require authentication, and to have an elapsed period in introducing the biometric authentication system.

  In addition, since ATMs can automatically determine which customers require biometric authentication and which customers do not need it, financial institutions can be positioned as a value-added service for improving security through biometric authentication. It is possible to provide a service for performing identity verification by biometric authentication using ATM only.

  In addition, finger vein authentication is authentication based on the vein pattern inside the finger, but because the finger is used, the customer is misrecognized as fingerprint authentication and resists registration and authentication from the image of criminal fingerprint collection. In finger vein authentication in ATM transactions, the finger vein image read when the finger is held over the finger vein reading unit may be actually displayed on the transaction display unit, or the finger vein reading unit may By displaying finger vein illustrations during transactions, including when you hold your finger, it is possible for customers to visually recognize that the finger vein instead of the fingerprint is being used for authentication .

  Hereinafter, the application form to ATM (automatic transaction apparatus) is demonstrated as an Example.

  FIG. 1 is a block diagram of an ATM having a finger vein authentication system. The ATM 101 includes a finger vein authentication unit 102 that reads a finger vein and authenticates it with a finger vein pattern registered in advance, a display unit 103 that displays operation guidance for a customer, and a card mechanism that processes a card inserted into the ATM. 104, a banknote depositing / withdrawing mechanism 105 for processing banknotes such as banknote depositing / withdrawing, a coin depositing / withdrawing mechanism 106 for processing coins such as coin depositing / withdrawing, and a bill slip printing mechanism 107 for performing bill slip printing processing A passbook printing mechanism 108 that performs a passbook printing process and a control unit 109 that controls the overall operation are provided.

  The finger vein authentication unit 102 includes a finger vein reader unit 110 for reading a finger vein held by a customer, a finger vein pattern read and a finger vein registered in advance extracted from an IC card or a host server. An authentication control unit 111 that performs authentication processing with a pattern is provided.

  The display unit 103 is provided with a touch panel (input unit) 112 for receiving an input in which a customer operates a transaction by pressing the key when the customer displays a key for selecting an operation.

  The card mechanism 104 reads the magnetic stripe of the inhaled card or reads the information in the IC chip of the inhaled card and the magnetic stripe read / write unit 113 for writing new information to the magnetic stripe, or the IC An IC card read ride unit 114 for writing new information in the chip is provided.

  The control unit 109 includes a CPU 115 that controls each process, a RAM 116 that is a memory, a ROM 117 that stores a program and the like for executing each process, and a communication unit 118 that transmits and receives data to and from the host and server. It is provided.

  FIG. 2 is a configuration diagram when a customer uses ATM, and FIG. 3 is an example of a data format of magnetic data written on a magnetic stripe of a card or IC data in an IC chip.

  The magnetic stripe card, the IC card, or the card 202 having both the magnetic stripe and the IC chip is used when the customer 201 performs a transaction at the ATM 203. The magnetic stripe or IC chip stores transactions necessary for financial institution transactions such as account numbers and financial institution numbers as shown in FIG.

  The finger vein pattern registered in advance is stored in the IC chip of the card 202 and is used for authentication processing by being read by the IC card read / write unit 114.

  Alternatively, the finger vein pattern registered in advance is stored in the upper database 205, and is used for the authentication process by obtaining the registered finger vein pattern by communicating with the host computer 204 through the communication unit 118.

  As shown in FIG. 3, it is the present invention that information for determining whether or not biometric authentication is performed in an ATM transaction for each customer is provided in the data format of the magnetic stripe or IC chip. The ATM 203 reads the biometric authentication presence / absence information in the data format of the magnetic stripe or IC chip, and determines whether or not to perform identity verification by biometric authentication for the customer 201 in the transaction.

  FIG. 4 is a flowchart of finger vein authentication system processing for determining whether or not biometric authentication is performed using ATM according to the present invention.

First, the customer 201 who makes a transaction at the ATM 203 selects and presses the “draw” key from the transaction selection screen displayed on the display unit 103. (Step 401)
Next, the customer 201 inserts a card 202 having a magnetic stripe or IC chip into the card insertion slot of the card mechanism 104. (Step 402)
The card mechanism 104 sucks the inserted card 202 and reads the magnetic stripe by the magnetic stripe read / write unit 113 or the information in the IC chip by the IC card read / write unit 114. (Step 403)
The card mechanism 104 uses the biometric presence / absence information in the magnetic stripe or IC chip data format to determine whether the customer 201 who inserted the card 202 is set to perform biometric authentication in the transaction. To check. (Step 404) The host computer 204 may make a decision without making a decision with ATM, but it is desirable to make a decision with ATM because the customer is kept waiting while waiting for a reply with ATM.

  If the reading result of the biometric authentication presence / absence information indicates that there is biometric authentication, the process is shifted to performing biometric authentication. If the biometric authentication is not performed, the process proceeds to the withdrawal process without performing biometric authentication. (Step 405) At this time, input of a personal identification number may be requested.

If it is determined that there is biometric authentication, the finger vein reader unit of the finger vein authentication unit 102 displays the guidance screen on the display unit 103 or guides the user 201 by voice to perform biometric authentication. Guide to 110. (Step 406)
The finger vein reader unit 110 detects that the finger is held up and reads the vein pattern of the finger of the customer 201 held up. (Step 407)
The pre-registered finger vein authentication pattern stored in the IC chip of the card 202 inhaled by the IC card read / write unit 114 of the card mechanism unit 104 is read. (Step 408)
The authentication control unit 111 of the finger vein authentication unit 102 performs authentication between the finger vein pattern of the customer 201 read by the finger vein reader unit 110 and the previously registered finger vein authentication pattern read by the IC card read / write unit 114. To do. (Step 409) It is conceivable that authentication is performed not by the finger vein authentication unit 102 but by the control unit 109 or the host computer 204 (including the server), but authentication by the finger vein authentication unit from the viewpoint of preventing leakage of finger vein information Is desirable.

If the authentication result is successful, the identity of the customer 201 has been confirmed and the process proceeds to a withdrawal process. If the authentication result is unsuccessful, the identity of the customer 201 has not been obtained, so the card 202 is returned and the withdrawal transaction is performed. Cancel. (Step 410)
When the authentication result is successful and the identity is confirmed, the communication unit 118 of the control unit 109 displays information necessary for the transaction read from the magnetic stripe or IC chip, and the withdrawal amount input via the touch panel 112 of the display unit 103. Or the personal identification number is transmitted to the host computer 204 and necessary information is received. (Step 411)
Also, if the result of reading biometric authentication presence / absence information in step 405 indicates that there is no biometric authentication, the biometric authentication process in steps 406 to 410 is not performed, and communication with the host computer is performed in order to shift to the withdrawal process. In this case, since the identity verification is not performed, the security is relatively low as compared with the case where the biometric authentication process is performed.

The bill deposit / withdrawal mechanism 105 and the coin deposit / withdrawal mechanism 106 prepare for withdrawal of the amount of money input by the customer 201 to the display unit 103. (Step 412)
The card mechanism 104 discharges the card 202, and the statement slip printing mechanism 107 discharges the statement slip and returns it to the customer 201. (Step 413)
The bill deposit / withdrawal mechanism 105 and the coin deposit / withdrawal mechanism 106 discharge bills or coins from the respective dispensing outlets, and the customer 201 receives them. (Step 414)
FIG. 5 is a guide screen diagram displayed on the display unit 103 during finger vein authentication of the finger vein authentication system according to the present invention.

  When the customer 201 holds the finger over the finger vein reader unit 110 for finger vein authentication, the finger read by the finger vein reader unit 110 in the guide diagram 501 during finger vein authentication displayed on the display unit 103 is displayed. A vein pattern is displayed (finger vein pattern 502) to visually recognize that the customer 201 is performing finger vein authentication. Thereby, it can be expected that it is easy to convey to the customer that it is not fingerprint reading.

  Alternatively, the finger vein pattern 502 displayed on the display unit 103 is not a finger vein pattern actually read by the finger vein reader unit 110 but an illustration or animation of a predetermined finger vein pattern, so that the customer 201 can be visually confirmed. To recognize that finger vein authentication is being performed. As a result, the processing load can be reduced, and personal biological information can be prevented from being exposed (displayed).

  In the above description, the finger vein has been described. However, it is also possible to perform biometric authentication such as vein authentication other than a finger, fingerprint authentication, iris authentication, and face authentication.

  In addition, although “biometric authentication presence / absence information” is stored in the card and an example of determination based on this has been described, it is also conceivable to determine whether biometric authentication is executed or not in accordance with an account number or the like. However, in this case, since it is required to examine a DB in which an account number and biometric authentication presence / absence information are associated with each other, it is difficult to implement in ATM, and if the access to the center is required, the transaction time becomes long. The problem which ends.

  This embodiment also includes the following forms.

  (1) A biometric authentication system that performs identity verification using finger vein authentication in an ATM in which a customer makes a transaction, and reads a customer's finger vein pattern to determine whether it matches a registered customer's finger vein pattern Authentication unit for authentication, reading unit for magnetic stripe card in which magnetic information necessary for transaction is written, reading unit for IC card storing information necessary for transaction and registered finger vein pattern, and guidance for customer operation Or a transaction display unit that operates by pressing a selection key on which a customer is displayed, a control unit that performs overall transaction processing, and a communication unit that communicates with a host computer or a server.

  (2) The customer stores whether the customer requires finger vein authentication as magnetic information of the magnetic stripe card in advance, and performs finger vein authentication for the customer who inserted the card by reading the magnetic information. Determine whether or not.

  (3) Alternatively, whether the customer is a customer who requires finger vein authentication is stored in advance in the IC chip of the IC card, and the finger vein for the customer who has inserted the card by reading the IC chip information Determine whether or not to perform authentication.

  (4) The customer's finger vein pattern registered in advance is stored not in the IC card but in the host database and communicated with the host computer to read the customer's finger vein pattern and authentication. To do.

  (5) The finger vein image read during finger vein authentication is actually displayed on the transaction display unit.

  (6) The finger vein illustration is displayed on the transaction display unit during finger vein authentication.

It is an example of the block diagram of the finger vein authentication system in ATM. It is an example of the block diagram at the time of a customer using ATM. It is an example of the data format figure of a magnetic stripe or IC chip. It is an example of the flowchart of the finger vein authentication system process which judges the biometrics authentication implementation status by ATM. It is an example of the screen during execution of biometric authentication displayed by ATM.

Explanation of symbols

101: ATM
102: finger vein authentication unit 103: display unit 104: card mechanism 105: bill deposit / withdrawal mechanism 106: coin deposit / withdrawal mechanism 107: statement slip printing mechanism 108: passbook printing mechanism 109: control unit 110: finger vein reader unit 111: authentication Control unit 112: Touch panel 113: Magnetic stripe read / write unit 114: IC card read / write unit 115: CPU (processing unit)
116: RAM
117: ROM
118: Communication unit 201: Customer 202: Magnetic stripe card or IC card 203: ATM
204: Host computer 205: Database 501: Guide screen during finger vein authentication 502: Finger vein pattern image or finger vein illustration

Claims (3)

A card reader for reading a customer's card;
A biometric information reader that reads the biometric information of the customer;
A display for displaying guidance to customers;
A biometric information authentication system comprising: a control unit that controls the biometric information reading unit to guide the biometric information reading by the display unit based on information read by the card reading unit. The biometric authentication system according to claim 1,
When the biometric information is read by the biometric information reading unit, the display unit displays a vein pattern image on the display unit. A card reading unit for reading biometric information presence / absence information from a customer's card;
A biometric information authentication unit that performs authentication by reading the biometric information of the customer;
A biometric information authentication system comprising: a control unit that performs biometric information authentication by the biometric information authentication unit when the biometric information presence / absence information read by the card reading unit is determined to have biometric information.

Images