JP2007183798A - Biological information processor and automatic transaction device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a biological information processor and an automatic transaction device, capable of improving convenience for users and responding to a condition change when authenticating. <P>SOLUTION: The biological information processor comprises a biological information acquisition means for acquiring biological information of an object person of collation as acquired biological information; a determination means for determining whether a collation rate of collation for authenticity based on registered biological information stored in a storage part and the acquired biological information corresponds to lack of collation rate where the collation rate is lower than a predetermined reference value; a storage instruction means for storing, when at least the lack of collation rate is determined, the acquired biological information in the storage part as accumulated biological information; and an update instruction means for updating, when the frequency of determination of the lack of collation rate reaches a predetermined frequency, the registered biological information in the storage part based on the accumulated biological information. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to, for example, an automatic transaction apparatus installed in a financial institution and a biological information processing apparatus provided in the automatic transaction apparatus, and particularly relates to a process for updating a user's biological information.

  When a financial transaction is performed between a financial institution and a user, the financial institution starts the transaction after authenticating the user. For example, in the case of a transaction by an automatic transaction apparatus (ATM), the automatic transaction apparatus performs identity verification using a cash card and a personal identification number.

  The medium such as a cash card or a passbook is a stable quality medium issued by a financial institution based on an industrial standard or the like. The personal identification number is stable information that is not affected by the input speed or the strength of pressing during input. For this reason, the automatic transaction apparatus can acquire information such as a personal identification number written on the medium with high reliability, and authenticates the user based on whether or not it completely matches the personal identification number input by the user. be able to.

  In recent years, damage caused by the use of stolen cards or counterfeit cards has increased in transactions at financial institutions. For this reason, in particular, automatic transaction apparatuses are strongly required to improve security.

  A biometric authentication system that uses biometric information such as user fingerprint data and finger vein data has begun to be put into practical use as a system that meets such a demand for security improvement. This biometric authentication system registers biometric information such as user fingerprint data and finger vein data as registered biometric information in the IC chip of an IC card issued by a financial institution server or financial institution. And the acquired biometric information acquired from the user are verified and authenticated.

  This biometric authentication system cannot uniquely fix the position of the living body (front and rear, left and right, up and down) when the user sets the living body on the biometric information acquisition apparatus. In addition, biometric information may change due to injury, illness, and age changes. For this reason, unlike stable information such as a conventional password, registration biometric information registered at the time of IC card issuance and acquisition acquired by a biometric information acquisition device provided in the automatic transaction device at the time of actual transaction by the automatic transaction device There is a problem that biometric information does not necessarily match.

  For this reason, the automatic transaction apparatus adopts a method of authenticating the identity of the biometric information when the degree of coincidence between the registered biometric information and the acquired biometric information is equal to or greater than a predetermined threshold value. If the verification rate is insufficient or the verification does not match, the transaction is rejected as not being the person.

On the other hand, it is conceivable to update the registered biometric information in order to improve the authentication accuracy in response to a change in conditions during authentication such as a change in biometric information due to an injury or a change in set position.
As a method for updating registered biometric information, a maintenance method for a personal authentication device based on biometric information has been proposed (see Patent Document 1). This personal authentication device performs personal authentication by collating biometric information registered in an IC card with biometric information read from the biometric information acquisition device. And the maintenance method registers the alternative biometric information in the server as the alternative biometric information, and changes the biometric information registered in the IC card to the alternative biometric information registered in the server in response to a user request. It is to be updated.

However, this maintenance method has a problem that it is necessary for the user to arbitrarily update the biometric information, which causes troublesomeness.
In addition, various conditions when registering biometric information (variation of the biometric information acquisition apparatus, physical condition of the user, etc.) do not necessarily match the conditions when actually using the automatic transaction apparatus. For this reason, the registered biometric information at the time of biometric information registration and the acquired biometric information read by the biometric information acquisition device at the time of transaction do not necessarily match, and it cannot be said that the authentication accuracy is necessarily increased by updating the biometric information. There is a point.

JP 2002-63141 A

  An object of this invention is to provide the biometric information processing apparatus and automatic transaction apparatus which can improve the convenience of a user and can respond to the change of the conditions at the time of authentication in view of the above-mentioned problem.

  According to the present invention, biometric information acquisition means for acquiring biometric information of a person to be verified as acquired biometric information, and verification by the verification means based on the registered biometric information stored in the storage unit and the acquired biometric information. A determination unit that determines whether or not the verification rate is lower than a predetermined reference value; a storage instruction unit that stores at least the acquired biometric information in the storage unit as accumulated biometric information when the verification rate is insufficient; and the verification A biometric information processing apparatus comprising: an update instruction unit that updates registered biometric information in the storage unit based on the accumulated biometric information when the number of times determined to be insufficient is a predetermined number of times. To do.

  According to the present invention, it is possible to provide a biological information processing apparatus and an automatic transaction apparatus that improve user convenience and can cope with a change in conditions during authentication.

  An embodiment of the present invention will be described below with reference to the drawings.

FIG. 1 shows a system configuration diagram of a financial institution system (biological information processing system) 1 when a user (financial institution customer) M as a collation target uses ATM2.
This financial institution system 1 is configured by connecting an ATM 2 as an automatic transaction apparatus and a host computer 5 to a network line 3 so that they can communicate with each other.

The ATM 2 is provided with a finger vein reader 16 as biometric information acquisition means. The finger vein reader 16 acquires biometric image information as biometric information of the user M, performs personal authentication, and is connected. Various transactions can be processed while communicating with the host computer 5.
The host computer 5 is provided with a database 6, and determines whether or not the transaction is possible by using various information such as user information stored in the database 6.

  Biometric information in the present embodiment means information based on a living body, and biometric image information that is image information acquired by scanning the living body of the user M, and feature points are extracted from the biological image information. Thus, it is a concept including both biometric feature information created based on this feature point.

FIG. 2 is a block diagram showing the configuration of ATM2.
The ATM 2 processes a display unit (output unit) 11 such as a liquid crystal for displaying transaction guidance to a user, an input unit (input unit) 12 such as a touch panel for performing transaction operations, and an inserted IC card. A card processing unit 13, a finger vein reader 16 for acquiring biometric image information of the user, a banknote depositing / withdrawing unit (one of money processing means) 17 for processing banknotes such as banknote depositing / withdrawing, and coins A coin deposit / withdrawal unit (one of the money processing means) 18 for processing coins such as deposits and withdrawals, a statement slip printing unit 19 for performing statement slip printing processing, a passbook printing unit 20 for performing passbook printing processing, The main control part (control means) 21 which controls the operation | movement of the whole ATM2 is comprised.

  The card processing unit 13 reads / writes the magnetic stripe read / write unit 14 for reading / writing the magnetic stripe 43 of the IC card C (see FIG. 3) inserted by the user and the IC chip 41 as a storage unit. An IC chip read / write unit 15 is provided.

  The main control unit 21 includes a CPU 22 that controls each process, a memory 23 that stores a program for executing each process, transaction information, and the like, and a host computer 5 that transmits and receives data via the network line 3. A communication unit 24, a recording unit 25 that sequentially records transaction information with the user M, and a power source 26 that supplies power to each unit are provided.

  The card processing unit 13 and the main control unit 21 constitute a biological information processing apparatus.

FIG. 3 is an external view of the IC card C.
On the IC card C, a magnetic stripe 43 and a contact type IC chip 41 are mounted. Further, the IC card C can be further mounted with a non-contact type IC chip 42. In this case, an antenna (not shown) is preferably provided for non-contact communication.

  4 is a block diagram illustrating an internal configuration of the IC card C, FIG. 5 is a configuration diagram illustrating a service function stored in the IC card C, and FIG. 6 is a configuration diagram of update parameters stored in the IC card C. is there.

  The IC card C includes a CPU 51 for controlling each IC chip, a memory unit 61 for recording biometric feature information as biometric information, and biometric features in the memory according to the settings of the update parameter 53 (see FIG. 6). A registration data calculation processing unit 52 that performs control such as updating of information (registration data) is provided.

  The update parameter 53 is collectively managed for all ATMs 2 connected to the host computer 5 according to instructions from the host computer 5. Note that each ATM 2 may be configured to be set individually, and the settings may be changed according to the environment of each branch of the financial institution.

  In the memory unit 61, a plurality of registration files 62 for recording master registration data 63 as registered biometric information, save registration data 64 as saved biometric information, and acquisition data 66 as accumulated biometric information are recorded. An acquisition file 65 is provided. Here, the master registration data 63 is biometric information used for user authentication of the user M at the time of ATM2 transaction. The acquired data 66 is biometric information read as acquired biometric information by the finger vein reader 16 at the time of personal authentication in a transaction, and is stored in the acquisition file 65 together with the acquisition date and time when the biometric information was acquired by the finger vein reader 16 of ATM2. Stored as accumulated biometric information. The master registration data 63, the evacuation registration data 64, and the acquisition data 66 are all composed of biometric feature information. The biometric feature information is data for personal authentication created by extracting a feature point from a finger vein image acquired as biometric image information from the user M and creating the feature point.

  If there is an item corresponding to the update parameter 53 (see FIG. 6), the registration data calculation processing unit 52 calculates the acquisition data 66 recorded in the acquisition file 65 and newly registers it as the master registration data 63 in the registration file 62. To update. Also, the registration data calculation processing unit 52 saves the old master registration data 63 so far as save registration data 64.

  FIG. 5 shows an example of service functions stored in the IC chip 41. The IC chip 41 includes account information such as a cash card, debit card, credit card, loan card, transfer card, electronic money, electronic passbook, and employee card supported by the issuing financial institution, and master registration data 63 (see FIG. 4), biometric related information including update parameters 53 and the like are registered.

  FIG. 6 shows update parameters indicating parameters for updating the master registration data 63 initially registered based on the biometric feature information recorded on the IC chip 41 and the biometric image information acquired by the finger vein reader 16. FIG.

  This parameter is roughly divided into five items, and update permission designation 71 as update availability information is biometric feature information with insufficient matching rate among biometric feature information created from biometric image information acquired by the finger vein reader 16. This parameter specifies whether the function of updating the master registration data 63, which is raw feature information registered in advance, is valid or invalid based on the acquired data 66.

  The acquired data number designation 72 is a parameter for designating the number of times of acquisition (Na times) that serves as a reference for timing of updating the master registration data 63 registered in advance based on the acquired data 66 of the verification data deficient among the acquired data 66. It is. The number of acquisitions stores the number of times that the acquisition data 66 has determined that the verification rate is insufficient.

  The acquisition period designation 73 is a parameter for designating which point in time the reference acquisition count specified in the acquisition data count designation 72 is counted as the starting date. Normally, the last update date and time is the starting date.

  The biometric information acquisition data format 74 defines information to be added in addition to the acquisition data 66 acquired by the finger vein reader 16. Thereby, information necessary for updating the master registration data 63 such as the acquisition date and time and the data valid period can be added.

  The number of acquisitions 75 by biometric information collation rate includes acquisition data 66 that is biometric feature information based on biometric image information acquired by the finger vein reader 16, master registration data 63 that is biometric feature information registered in the IC card C, and This is a parameter for counting the matching results for each matching rate. The biometric information matching rate acquisition count 75 is Nd, which is the number of times that the matching rate is satisfied (matching rate is 95% or more), and Ne is the number of times that the matching rate is insufficient (the matching rate is 80% to less than 95%). The number of times is divided into three patterns of Nf times that are the number of times of non-coincidence. Note that the lack of matching rate (80% to less than 95%) is a numerical value that can be determined to be the principal, but refers to a case where the matching rate is insufficient to allow a transaction. Inconsistency refers to a case where the person cannot be identified.

FIG. 7 is a flowchart showing an operation executed by the CPU 22 of the ATM2.
As transaction selection processing, the CPU 22 performs screen guidance on the display unit 11 of the ATM 2, causes the user M to select a desired transaction, and accepts this selection at the input unit 12 (step S1).

As the card receiving process, the CPU 22 causes the user M to insert the IC card C into the card processing unit 13 of the ATM 2, reads the account information of the magnetic stripe 43 by the magnetic stripe read / write unit 14, and the IC chip read / write unit. 15 reads the account information of the IC chip 41 (step S2).
The CPU 22 sets the finger of the user M on the finger vein reader 16 of the ATM 2 as personal identification processing, and acquires the biometric image information (finger vein image data) of the user M by the finger vein reader 16 (step S3). .

  The CPU 22 creates acquisition data 66 as biometric feature information from the acquired biometric image information as collation processing, and collates this acquisition data 66 with the master registration data 63 registered in the IC chip 41 of the IC card C (step) S4). In step S4, the CPU 22 functions as a collating unit.

If the collation rate between the acquired data 66 and the master registration data 63 is 95% (predetermined reference value) or more, the authentication is OK and it is proved that the person is a legitimate person (step S5: YES). Therefore, it is not necessary to register the acquisition data with insufficient verification rate of the present invention in the acquisition file, and update (count up) by adding 1 to the verification rate satisfaction of the update parameter 53 (see FIG. 6) (step S6).
Then, the CPU 22 continuously executes the transaction (step S7), discharges the IC card C (step S20), and ends the transaction.

  If the authentication is NG (step S5: NO), the CPU 22 determines that the verification rate is insufficient because the verification rate is insufficient (whether the verification rate is between 80% and less than 95%). Or is the collation rate insufficient?) (Step S8). The CPU 22 that executes step S8 functions as a determination unit.

  If it is not caused by the unsuccessful matching rate, that is, if they do not match (step S8: NO), it is not necessary to register the acquired data with insufficient matching rate in the acquisition file 65 because it is not possible to confirm the right person, and the CPU 22 Then, 1 is added to the mismatch of the update parameter 53 (see FIG. 6) to update (count up) (step S9). In step S9, the CPU 22 functions as a counting instruction unit. And CPU22 discharges | emits IC card C (step S20), and complete | finishes a transaction.

  If it is determined in step S8 that the collation rate is insufficient (if the collation rate is 80% to less than 95%) (step S8: NO), the CPU 22 obtains the biometric information accumulation process in step S3. Image feature information based on the finger vein image data is recorded as acquisition data 66 in the acquisition file 65 in the memory unit 61 of the IC card C (step S10). At the time of storage, the CPU 22 sets items of acquisition date and data validity period in addition to the biometric feature information based on the acquired biometric image information according to the biometric information acquisition data format 74 (see FIG. 6) of the update parameter 53. Append.

  The CPU 22 determines whether or not the condition that the expired acquisition data 66 and the evacuation registration data 64 exist as a predetermined condition is satisfied based on the acquisition date and time of each data. If not, the process proceeds to step S14 (NO in step S11).

  If the expired acquisition data 66 and the save registration data 64 exist (step S11: YES), the CPU 22 deletes the expired acquisition data 66 and the save registration data 64 from the memory unit 61 of the IC card C (step S12). If necessary, the update parameter 53 (see FIG. 6) is updated (counted down) by subtracting 1 from the lack of collation rate (step S13). In step S12 at this time, the CPU 22 functions as a deleting unit.

  The CPU 22 updates (counts up) by adding 1 to the number of verification rate deficiencies (80% to less than 95%) of the biometric information verification rate acquisition count 75 of the update parameter 53 (see FIG. 6) (step S14).

  The CPU 22 confirms the setting of the update permission designation 71 of the update parameter 53. If this setting is set to “invalid” (step S15: NO), the update is impossible, and the process proceeds to step 19. If it is set to “valid” (step S15: YES), the master registration data 63 can be updated, and the process proceeds to step S16.

  The CPU 22 confirms the number of acquisition times (Na times) set in the acquisition data number designation 72 of the update parameter 53, and the number of acquisition data 66 stored in the memory unit 61 of the IC card C is the number of acquisition times (Na (Step S16: NO), the registration data cannot be updated, and the process proceeds to step S19. If the number of acquisition data 66 satisfies the reference acquisition count (step S16: YES), the master registration data 63 can be updated, and the process proceeds to the update process of the master registration data 63.

  In the update process, the CPU 22 collects a plurality of pieces of acquisition data 66 with insufficient verification rate recorded in the acquisition file 65 of the memory unit 61 of the IC card C, and performs an arithmetic process in the registration data arithmetic processing unit 52 based on this data. The accumulated biometric feature information created by the processing is newly registered in the registration file 62 as master registration data 63 (step S17). This aggregated biometric feature information is stored in the acquisition file 65 and is collected by a plurality of (n) acquisition data 66 having different acquisition timings, and a weighted average of these is obtained, and the center of the standard deviation is calculated. Is to be calculated. In this way, by using the latest acquisition data 66 with insufficient verification rate for the calculation, the master registration data 63 can be flexibly handled in response to a change in conditions during authentication such as a change in biometric information or a set position due to an injury or the like. It can be updated. In step S17, the CPU 22 functions as an update instruction unit.

  The CPU 22 stores the old master registration data 63 that has been used for personal authentication so far as the save registration data 64 in the registration file 62 (step S18).

  The CPU 22 determines that the transaction has not been established and outputs a message indicating that the transaction has not been established on the display unit 11 (step S19), ejects the IC card C (step S20), and ends the transaction.

With the above configuration and operation, the convenience of the user M can be improved and the change in conditions during authentication can be dealt with.
That is, if the setting of the update permission designation 71 is set to “valid”, the master registration data 63 is appropriately updated without special processing by the user M, so that the user M is troublesome to update. It can be used comfortably without feeling.

  In addition, since the master registration data 63 used for identity verification can be updated to the aggregated biometric feature information calculated based on the latest plurality of acquired data 66, the authentication rate is insufficient in the identity authentication from the next transaction. Can be prevented. Therefore, it is possible to improve the authentication rate while ensuring the legitimacy of the person.

  In addition, the physical condition of the user that changes daily due to external conditions (climate) and variations unique to the authentication device can be dealt with by updating the master registration data 63, and the authentication rate of the individual can be improved. .

  Also, a plurality of memory areas for recording biometric feature information such as a registration file 62 and an acquisition file 65 are provided, and the biometric feature information is recorded as the acquisition file 65 every time a transaction is made, and when the condition of the update parameter 53 is reached. By automatically updating the master registration data 63 based on the accumulated plurality of acquired files 65, it is possible to provide ATM 2 that maintains biometric accuracy at a high level and ensures sufficient security.

FIG. 8 is a system configuration diagram of the financial institution system 90 according to the second embodiment.
The financial institution system 90 of the second embodiment is configured to register biometric feature information in the host computer 5 of the upper center, unlike the first embodiment in which the biometric feature information is registered in the IC card C.

  In this case, the host computer 5 is provided with a registration data calculation processing unit 52 and a memory unit 61 as a storage unit, stores the update parameter 53 in the registration data calculation processing unit 52, and acquires the registration file 62 in the memory unit 61. The registration file 62 may store the master registration data 63 and save registration data 64, and the acquisition file 65 may store a plurality of acquisition data 66.

In addition, the IC card C may be configured to store the authentication master authentication data 92 and the saved authentication data 93 saved from the master authentication data 92 in the authentication file 91 and not the acquisition data 66.
In this case, the operation of the ATM 2 is the same as that of the first embodiment except that the information storage destination and the reading source in the operation of the first embodiment are not the IC card C but the host computer 5.

Since other configurations and operations are the same as those in the first embodiment, the same reference numerals are given to the same elements, and detailed descriptions thereof are omitted.
In this case, the same effect as that of the first embodiment can be obtained.

  In the embodiment, the finger vein authentication device implemented in ATM2 as an automatic transaction device has been described. However, biometric information is not limited to finger veins, and palm veins, fingerprints, irises, and facial images are used as biometric information. However, the same effect can be obtained.

  The registration of biometric information has been described using the IC chip 41 mounted on the IC card C. However, the same effect can be obtained even if the finger information is registered in a portable terminal such as a cellular phone. In this case, by configuring the ATM chip IC chip read / write unit 15 of ATM 2 so as to support not only a contact type but also a non-contact type, finger information registered in a mobile phone can be obtained wirelessly.

  In addition, the instruction to the user is configured to use the display unit 11 and voice guidance of ATM2, but a liquid crystal display unit is mounted on the finger vein reader 16 itself serving as a biometric information registration device or authentication device, You may comprise so that a user may be instruct | indicated from this liquid crystal display part.

  In addition, the collation rate is 95% or more, the collation rate is satisfied, 80% to less than 95%, the collation rate is insufficient, and if it is less than that, it does not match, but this ratio is not limited, An appropriate ratio can be set.

  The present invention is not limited only to the configuration of the above-described embodiment, and many embodiments can be obtained.

The system block diagram of a financial institution system. The block diagram which shows the structure of ATM. 1 is an external view of an IC card. The block diagram which shows the internal structure of an IC card. The block diagram which shows the service function memorize | stored in an IC card. The block diagram of the update parameter memorize | stored in an IC card. The flowchart which shows the operation | movement which CPU of ATM performs. The system block diagram of the financial institution system of Example 2. FIG.

Explanation of symbols

2 ... ATM
DESCRIPTION OF SYMBOLS 11 ... Display part 12 ... Input part 16 ... Finger vein reader 17 ... Banknote depositing / withdrawing part 18 ... Coin depositing / withdrawing part 21 ... Main control part 52 ... Registration data arithmetic processing part 53 ... Update parameter 61 ... Memory part 63 ... Master registration data 64 ... Saved registration data 66 ... Acquisition data 71 ... Update permission designation 72 ... Acquisition data count designation 75 ... Acquisition count by biometric information collation rate C ... IC card

Claims (5)

Biometric information acquisition means for acquiring biometric information of the person to be verified as acquired biometric information;
A determination unit that determines whether or not the verification rate verified by the verification unit based on the registered biometric information stored in the storage unit and the acquired biometric information is lower than a predetermined reference value;
Storage instruction means for storing the acquired biometric information in the storage unit as accumulated biometric information at least when the verification rate is insufficient;
A biometric information processing apparatus comprising: an update instruction unit configured to update registered biometric information in the storage unit based on the stored biometric information when the number of times that the collation rate is determined to be insufficient reaches a predetermined number. The update instructing means updates the registered biometric information when the update availability information stored in the storage unit is updatable, and does not update the registered biometric information when the update availability information is not updatable. The biological information processing apparatus according to claim 1 configured. When it is determined that the verification rate is insufficient, the counter includes a count instruction unit that increases the number of verification rate shortages stored in the storage unit,
3. The biological information processing apparatus according to claim 1, wherein the update instruction unit is configured to determine whether or not the predetermined number of times has been reached based on the number of insufficient matching rates stored in the storage unit. 4. The biological information processing apparatus according to claim 1, further comprising a deletion unit that deletes the old stored biological information when the stored biological information stored in the storage unit reaches a predetermined condition. The biological information processing apparatus according to any one of claims 1 to 4,
Money handling means for processing money;
Input means for allowing input operations related to transactions;
An output means for outputting a transaction result;
Control for controlling the input of transaction contents by the input means, the insertion or withdrawal of money by the money processing means, and the output of transaction results by the output means when the identity can be verified by the verification by the biological information processing apparatus And an automatic transaction apparatus.

Images