JP2007226519A - System, method, and program for updating and managing biological information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To excellently keep reliability in master biological information by responding to the change in the biological information. <P>SOLUTION: A system comprises: a biological information for authentication acquiring part 110 for acquiring the biological information for biological authentication, which is read from a biological authentication device 120 for reading the biological information from a biological authentication object, as biological information for authentication; a master biological information acquiring part 111 for acquiring master biological information of the object, which is read by a biological information extracting device; an expiration date determining part 112 for collating the biological information for authentication and the master biological information, confirming the final update date of the master biological information in a storage device when coincidence is not less than a prescribed threshold so as to determine the mutual coincidence, and determining whether the final update date exceeds the prescribed expiration date or not; and an update processing part 113 for deleting the applicable master biological information in the storage device when the final update date exceeds the expiration date and registering the biological information for authentication as the master biological information. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a biometric information update management system, a biometric information update management method, and a biometric information update management program.

Authentication techniques based on biometric information have been proposed. For example, a portable storage device that stores registered biometric information of a user, means for reading registered biometric information from the portable storage device, a portable terminal that transmits the registered biometric information and a service request by data communication, A monitoring device that determines whether the registered biometric information transmitted from the mobile terminal is valid, an acquisition unit that acquires biometric information input by a user, the determination result and the registered biometric information from the monitoring device And means for receiving the service request, means for collating input biometric information by the user with the received registered biometric information when the determination result indicates that the determination result is valid, and the input biometric information A user authentication system comprising a means for providing the requested service to the user when it is legitimate. Reference 1), and the like have been proposed.
JP 2004-137553 A

  In the prior art, no technology has been proposed in which master biometric information serving as an authentication standard is periodically updated in response to an event that the biometric information of a biometric authentication subject changes.

  Therefore, the present invention has been made in view of the above problems, and is a biometric information update management system, a biometric information update management method, and a biometric information update management method that can maintain the reliability of master biometric information in a favorable manner in response to changes in biometric information. The main purpose is to provide a biometric information update management program.

  The biometric information update management system of the present invention that solves the above problems is a system that performs update management related to biometric information for biometric authentication stored in a storage device, and is a biometric authentication device that reads biometric information from a subject of biometric authentication From the biometric information acquisition unit that acquires biometric information at the time of biometric authentication read by the biometric authentication device for the subject person as biometric information at the time of authentication and the biometric information extraction device that reads the biometric information from the storage device, A master biometric information acquisition unit that acquires the master biometric information of the subject read by the biometric information extraction device, a verification process between the biometric information during authentication and the master biometric information is executed, and the authentication is performed in the verification process. If the degree of coincidence between the time biometric information and the master biometric information is equal to or greater than a predetermined threshold value, And confirming the last update date and time of the master biometric information, and determining whether or not the last update date exceeds a predetermined expiration date, and an expiration date determination unit, and the last update date exceeds the expiration date An update processing unit that deletes corresponding master biometric information in the storage device and registers the biometric information at the time of authentication as master biometric information.

  In addition, it is preferable that the biometric information update management system includes an update notification unit that outputs to the output interface that the biometric information at the time of authentication is registered in the storage device as master biometric information.

  Also, the biometric information update management method of the present invention is a method of performing update management related to biometric information for biometric authentication stored in a storage device by a computer, from a biometric authentication device that reads biometric information from a subject of biometric authentication. The biometric information reading device reads the biometric information at the time of biometric authentication read by the biometric authentication device as the biometric information at the time of authentication and reads the biometric information from the storage device. The master biometric information of the subject is acquired, the verification biometric information and the master biometric information are collated, and the degree of coincidence between the authentication biometric information and the master biometric information is equal to or greater than a predetermined threshold in the collation processing If it can be determined that they match each other, the last update date and time of the master biometric information in the storage device is confirmed, and the previous It is determined whether or not the last update date has exceeded a predetermined expiration date. If the last update date has exceeded the expiration date, the corresponding master biometric information is deleted from the storage device, and the authentication biometric is deleted. The information is registered as master biometric information.

  The biometric information update management program of the present invention is a program for causing a computer to execute an update management method related to biometric information for biometric authentication stored in a storage device, and reads biometric information from a subject of biometric authentication. From the biometric authentication device, the biometric authentication device reads biometric information at the time of biometric authentication read about the subject as biometric information at the time of authentication, and the biometric information extraction device that reads the biometric information from the storage device. The step of acquiring the subject's master biometric information read by the extraction device and the verification biometric information and the master biometric information are collated, and in the collation processing, the authentication biometric information and the master biometric information Is equal to or greater than a predetermined threshold value and it can be determined that they match each other, the storage device Checking the last update date and time of the master biometric information, determining whether or not the last update date exceeds a predetermined expiration date; and if the last update date exceeds the expiration date, the storage Deleting the corresponding master biometric information in the apparatus and registering the biometric information at the time of authentication as master biometric information.

  In addition, the problems disclosed by the present application and the solutions thereof will be clarified by the embodiments of the present invention and the drawings. The present invention also includes performing update processing when the last update date and the expiration date have a predetermined relationship. That is, in addition to the case where the expiration date is exceeded, the expiration date and the date and time of the expiration date pre-processing may be used.

  According to the present invention, the reliability of master biometric information can be favorably maintained in response to changes in biometric information.

--- System configuration ---
Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a network configuration diagram including a biometric information update management system in the present embodiment. In the present embodiment, for example, a situation is assumed in which the biometric information update management system of the present invention automatically updates the user's master biometric information at an ATM or a window of a financial institution where biometric authentication of the user is performed. Of course, the application range of the present invention is not limited to this assumption example, and can be applied to any situation where biometric authentication is performed.

  In addition, biometric authentication is to authenticate the person by using different parts of the body and behavioral features of the individual human, and this system is embodied and systemized as a biometric authentication (human crypto authentication) system. is called. Examples of biometric authentication technologies that have been put into practical use and researched include biometric information such as fingerprints, signs, veins, palm prints, retinas, irises, facial expressions, and voices. In the present embodiment, for example, biometric authentication using finger vein verification technology is taken as an example.

  The biometric information update management system 100 (hereinafter, system 100) of the present invention stores a program 102 stored in a program database 101 such as a rewritable memory in order to realize a function for executing the biometric information update management method of the present invention. And executed by the CPU 104 which is an arithmetic unit.

  Further, the system 100 includes various keyboards and buttons generally provided in a computer device, an input / output interface 105 such as a display, a server 130 as a storage device storing master biometric information and the like in the biometric information storage unit 131, and the like. The communication means 106 responsible for exchanging data between and the like.

  The system 100 is connected to the server 130 by the communication means 106 via a network 140 such as the Internet, a LAN, or a serial interface communication line, and data such as authentication biometric information other than master biometric information and master biometric information. Perform the transfer. Between the various functional units of the system 100 and the communication means 106, the I / O unit 107 executes data buffering and various mediation processes.

  In addition, the system 100 includes a biometric authentication device 120 that reads biometric information from a subject of biometric authentication. In the biometric authentication device 120, the finger vein sensor 121 is controlled by the finger vein sensor control unit 122, and the IC card read / writer device 124 is controlled by the card reader control unit 123. The IC card reader / writer device 124 is a biometric information extracting device for reading biometric information from the biometric information storage unit 51 in the IC card 50 as another storage device. The biometric authentication device 120 uses the verification program 125 to obtain master biometric information read from the server 130 or the IC card 50 serving as a storage device and biometric information at the time of authentication acquired by sensing the user at the time of authentication. It is assumed that the process of matching can be executed.

  The biometric authentication device 120 reads the programs 122 to 125 in the program database 11 to the memory 13 and executes them by the arithmetic device 14, as in the system 100. The biometric authentication device 120 includes an input / output interface 105 such as various keyboards, buttons, and a display, and is connected to an external device such as the system 100 via a network 140 such as a LAN or the Internet to exchange data. The communication means 16 to perform is provided. Furthermore, the biometric authentication device 120 is connected to the system 100 via the network 140 such as the Internet, a LAN, or a serial interface communication line by the communication unit 16 and executes data exchange such as a result of biometric authentication. Between the various functional units of the biometric authentication device 120 and the communication unit 16, the I / O unit 17 performs data buffering and various mediation processes.

  Further, the server 130 reads the server program 132 in the program database 11 to the memory 13 and executes it by the arithmetic unit 14 as in the system 100 and the like. The server 130 includes an input / output interface 15 such as various keyboards, buttons, and a display, and connects to external devices such as the system 100 via the network 140 such as a LAN or the Internet to execute data exchange. Communication means 16 is provided. Further, the server 130 is connected to the system 100 via the network 140 such as the Internet, a LAN, or a serial interface communication line by the communication unit 16 and executes data exchange such as biometric information. Between the various functional units of the server 130 and the communication means 16, the I / O unit 17 executes data buffering and various mediation processes.

  Further, various terminals 210 such as ATMs and window terminals shown in FIG. 1 are computers used when a user receives biometric authentication. Similar to the system 100, various input / output processes required as the terminal 210 are used. The business program 220 realizing the function and the like is read from the program database 11 to the memory 13 and executed by the arithmetic device 14. In addition, the terminal 210 includes a communication unit 16 that is connected to an external device such as the system 100 via a network 140 such as a LAN or the Internet to exchange data. Furthermore, the terminal 210 is connected to the system 100 via the network 140 such as the Internet, a LAN, or a serial interface communication line by the communication unit 16 and executes data exchange such as a result of biometric authentication. Between the various function units of the terminal 210 and the communication means 16, the I / O unit 17 performs data buffering and various mediation processes.

  Further, the terminal 210 may include an IC card read / writer device 215 that executes a read / write process on the biological information storage unit 51 of the IC card 50. In addition, the terminal 210 includes a display device such as a display that outputs biometric authentication results and the like, and an input / output interface 215 such as a touch panel, a keyboard, and a mouse that accepts input from the user.

  Next, functional units that are configured and held by the system 100 based on the program 102 will be described. The system 100 obtains biometric information at the time of biometric authentication read by the biometric authentication device 120 for the subject from the biometric authentication device 120 that reads biometric information from the subject of biometric authentication as biometric information at the time of authentication. An information acquisition unit 110 is provided.

  In addition, the system 100 receives the biometric information from the biometric information extraction device (the biometric authentication device 120 including the server itself or the IC card reader / writer device 124) that reads biometric information from the storage device (the server 130 or the IC card 50). A master biometric information acquisition unit 111 that acquires the master biometric information of the subject read by the extraction device is provided.

  Further, the system 100 executes a verification process between the authentication biometric information and the master biometric information, and in the verification process, the degree of coincidence between the authentication biometric information and the master biometric information is equal to or greater than a predetermined threshold. If it can be determined that they match, an expiration date determination unit 112 that checks the last update date and time of the master biometric information in the storage device and determines whether or not the last update date and time exceeds a predetermined expiration date Prepare.

  Further, the system 100 deletes the corresponding master biometric information in the storage device and registers the biometric information at the time of authentication as master biometric information when the last update date exceeds the expiration date. Is provided.

  The system 100 may further include an update notification unit 114 that outputs to the output interface that the biometric information during authentication is registered in the storage device as master biometric information.

  Note that each of the functional units 110 to 114 in the system 100 shown so far may be realized as hardware, or may be realized as a program stored in an appropriate storage device such as a memory or an HDD (Hard Disk Drive). Good. In this case, the CPU 104 reads the corresponding program from the storage device into the memory 103 and executes it in accordance with the execution of the program.

  The network 140 is not limited to the Internet, LAN, ATM line, dedicated line, WAN (Wide Area Network), power line network, wireless network, public line network, mobile phone network, serial interface communication line, etc. A network can also be adopted. If a virtual private network technology such as VPN (Virtual Private Network) is used, communication with improved security is established when the Internet is adopted. The serial interface is a serial transmission that sends data one bit at a time using a single signal line, and refers to an interface for connecting to external devices. Communication methods include RS-232C, RS-422, IrDA, USB, IEEE1394, fiber channel, etc. can be assumed.

--- Structural example of biological information storage unit ---
Next, the structure of the biological information storage units 51 and 131 used by the system 100 in this embodiment will be described. The biometric information storage units 51 and 131 are provided in the server 130 or the IC card 50. FIG. 2 is a diagram illustrating an example of the data structure of the biological information storage unit in the present embodiment.

  The biometric information storage unit is a database that stores biometric information other than the master biometric information and the master biometric information of the subject of biometric authentication. This biometric information storage unit is a collection of records in which data such as a pattern indicating master biometric information or other biometric information, the last update date of biometric information, and an expiration date are associated with the biometric reading part as a key. Yes.

--- Processing flow 1 (registration of master biometric information) ---
Hereinafter, the actual procedure of the biometric information update management method according to the present embodiment will be described with reference to the drawings. Various operations corresponding to the biometric information update management method described below are realized by the program 102 that the system 100 reads out to the memory 103 and executes. And this program 102 is comprised from the code | cord | chord for performing the various operation | movement demonstrated below.

  FIG. 3 is a flowchart showing an actual procedure example of the biometric information update management method in the present embodiment. First, taking the IC card 50 as an example of a storage device in the present invention, registration processing of master biometric information in the IC card 50 will be described. The biometric authentication device 120 included in the system 100 uses the finger vein sensor device 121 to read biometric information about a predetermined part (eg, a plurality of parts) of the user's body of the IC card 50 and execute acquisition of biometric information ( s1000). The acquired biometric information is transmitted to the read writer device 124 of the IC card 50 (s1001).

  The read writer device 124 receives it (s1002), and stores the received biometric information in the biometric information storage unit 51 of the IC card 50 (s1003). It is assumed that the IC card 50 is set in advance in the lead writer device 124 prior to biometric information registration processing. Further, at least one of the biological information is stored in the biological information storage unit 51 as master biological information.

  The IC card 50 notifies the terminal 210 such as an ATM via the reader / writer device 124 that the master biometric information is stored in the IC card 50 (s1004). On the other hand, the terminal 200 receives this notification (s1005), and executes a recording request to the business system such as a financial institution for the user that the master biometric information has been stored in the IC card 50 (s1006). ). In this business system, the recording request is received (s1007), the storage event of the user's master biometric information is recorded (s1008), and the processing is completed.

--- Processing flow 2 (automatic update of master biometric information) ---
FIG. 4 is a flowchart showing an actual procedure example 2 of the biometric information update management method in the present embodiment. When the user performs a transaction using the IC card 50 in the terminal 210 such as the ATM, a situation is assumed in which the system 100 executes biometric authentication for the user. The IC card 50 outputs master biometric information from its biometric information storage unit 51 (s1100), and transmits it to the terminal 210 (s1101). The terminal 210 receives this (s1102) and transmits it to the biometric authentication device 120 of the system 100 (s1103).

  The biometric authentication device 120 of the system 100 receives this (s1104) and temporarily stores it in the memory 13. Further, the finger vein sensor device 121 reads the biometric information for a predetermined part (for example, a plurality of places) of the user's body of the IC card 50, and executes the acquisition of biometric information at the time of authentication (s1105).

  Then, the biometric authentication device 120 collates the acquired biometric information at the time of authentication with the master biometric information derived from the IC card 50 temporarily stored in the memory 13 (s1106). Based on the collation here, it is determined whether or not the degree of coincidence between the master biometric information and the biometric information at the time of authentication stored in the biometric information storage unit 51 is greater than or equal to a predetermined threshold value, and a biometric authentication result is generated. If the degree of coincidence with the master biometric information is greater than or equal to the threshold value for the biometric information at the time of authentication, the master biometric information and the biometric information at the time of authentication coincide with each other, resulting in authentication OK.

  If the authentication biometric information and the master biometric information derived from the IC card 50 do not match in the process of step s1106 (s1106: NG), a mismatch notification is generated and transmitted to the terminal 210 such as an ATM (s1107). . On the other hand, the terminal 210 receives and outputs it (s1108), and ends the process.

  On the other hand, if the biometric information at the time of authentication and the biometric information derived from the IC card 50 match in the verification process (s1106: OK), the master biometric stored in the biometric information storage unit 51 of the IC card 50 is stored. The last update date and time of the information is confirmed (s1109), and it is determined whether or not the last update date and time exceeds a predetermined expiration date (s1110). If it is determined in step s1109 that the last update date has exceeded the expiration date (s1109: YES), the corresponding master biometric information is erased in the biometric information storage unit 51 of the IC card 50 ( s1111), the authentication biometric information is registered as master biometric information (s1112).

  Subsequently, the system 100 outputs to the output interface 105 that the biometric information at the time of authentication is registered as the master biometric information in the biometric information storage unit 51 of the IC card 50 (s1113). By this output processing, for example, the system 100 notifies the registration event to the terminal 210 such as an ATM, and the terminal 210 receives the event (s1114) and displays it on an output interface such as a display (s1115). Thereby, the user can recognize the update event of the master biometric information.

  According to the present invention, the reliability of master biometric information can be favorably maintained in response to changes in biometric information.

  As mentioned above, although embodiment of this invention was described concretely based on the embodiment, it is not limited to this and can be variously changed in the range which does not deviate from the summary. The present invention can be applied to other than the financial system described in this embodiment. For example, the present invention can also be applied to authentication for database access restrictions, Internet shopping, and the like.

It is a network block diagram including the system in this embodiment. It is a figure which shows the example of a data structure of the biometric information storage part in this embodiment in this embodiment. It is a flowchart which shows the actual procedure example 1 of the biometric information update management method in this embodiment. It is a flowchart which shows the actual procedure example 2 of the biometric information update management method in this embodiment.

Explanation of symbols

11, 21 Program database 12, 22 Program 13, 23 Memory 14, 24 CPU
15, 25 Input / output interface 16, 26 Communication means 17, 27 I / O unit 50 IC card 51 Biometric information storage unit 100 Biometric information update management system, system 101 Program database 102 Program 103 Memory 104 CPU
105 I / O interface 106 Communication means 107 I / O unit 110 Authentication biometric information acquisition unit 111 Master biometric information acquisition unit 112 Expiration date determination unit 113 Update processing unit 114 Update notification unit 120 Biometric authentication device 121 Finger vein sensor device 122 Finger vein Sensor control unit 123 Card reader control unit 124 IC card reader / writer device 125 Verification program 130 Server 131 Biometric information storage unit 132 Server program 140 Network 150 Member terminal 160 IC card 210 Terminal (ATM, counter terminal)
215 IC card reader / writer 220 business program

Claims (4)

A system for performing update management related to biometric information for biometric authentication stored in a storage device,
A biometric information acquisition unit for authentication that acquires biometric information at the time of biometric authentication read by the biometric authentication device for the subject from the biometric authentication device that reads biometric information from the subject of biometric authentication;
A master biometric information acquisition unit that acquires the biometric information of the subject read by the biometric information extraction device from a biometric information extraction device that reads the biometric information from the storage device;
The verification biometric information and the master biometric information are collated, and in the collation processing, the degree of coincidence between the authentication biometric information and the master biometric information is equal to or greater than a predetermined threshold value, and it can be determined that they match each other. In this case, an expiration date determination unit that confirms the last update date and time of the master biometric information in the storage device and determines whether or not the last update date and time exceeds a predetermined expiration date;
An update processing unit that deletes the corresponding master biometric information in the storage device and registers the biometric information at the time of authentication as master biometric information when the last update date and time has exceeded the expiration date;
A biometric information update management system. In claim 1,
A biometric information update management system including an update notification unit that outputs to the output interface that biometric information at the time of authentication is registered in a storage device as master biometric information. A method for performing update management on biometric information for biometric authentication stored in a storage device by a computer,
From the biometric authentication device that reads biometric information from the subject of biometric authentication, the biometric authentication device reads the biometric information at the time of biometric authentication read about the subject as biometric information at the time of authentication,
From the biometric information extraction device that reads biometric information from the storage device, obtain the master biometric information of the subject read by the biometric information extraction device,
The verification biometric information and the master biometric information are collated, and in the collation processing, the degree of coincidence between the authentication biometric information and the master biometric information is equal to or greater than a predetermined threshold value, and it can be determined that they match each other. The last update date and time of the master biometric information in the storage device, determine whether or not the last update date exceeds a predetermined expiration date,
If the last update date and time has exceeded the expiration date, delete the corresponding master biometric information in the storage device, and register the authentication biometric information as master biometric information,
A biometric information update management method characterized by the above. A program for causing a computer to execute an update management method related to biometric information for biometric authentication stored in a storage device,
Acquiring biometric information at the time of biometric authentication read by the biometric authentication device from the biometric authentication device that reads biometric information from the subject of biometric authentication as biometric information at the time of authentication;
From the biometric information extraction device that reads biometric information from the storage device, obtaining the master biometric information of the subject read by the biometric information extraction device;
The verification biometric information and the master biometric information are collated, and in the collation processing, the degree of coincidence between the authentication biometric information and the master biometric information is equal to or greater than a predetermined threshold value, and it can be determined that they match each other. A step of confirming a last update date and time of the master biometric information in the storage device and determining whether or not the last update date and time exceeds a predetermined expiration date;
If the last update date has exceeded the expiration date, deleting the corresponding master biometric information in the storage device, and registering the authentication biometric information as master biometric information;
A biometric information update management program.

Images