JP2007272506A - Authentication system, authentication information management apparatus, authentication information distribution method and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To identify a user without giving stress to the user by biological information using an IC card and to prevent leakage of biological information. <P>SOLUTION: An authentication information management server 5 generates three pieces of tally data α, β, and γ of which the two or more pieces of data can reproduce original data, from data for authentication indicating the biological information of the user read by a biological authentication apparatus 4 so that the tally data α is a minimum data for securing security, and writes them to an IC card 2, the authentication information management server 5 and an authentication information management recovery server 6, respectively. When the user is identified, original data for authentication is generated from the tally data α read from a memory in the IC card 2 by an IC card R/W 3 and the tally data β stored in the authentication information management server 5 and is compared with biological information of the user to be identified, which is read by the biological authentication apparatus 4, to identify the user. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an authentication system, an authentication information management device, an authentication information distribution method, and a computer program.

Conventionally, there is a technique in which biometric information such as fingerprint data and iris data of a user is stored in an IC card, and personal authentication is performed using the biometric information (for example, Patent Document 1). Also, registration data related to the user's biometric information is stored in the portable device, and authentication is performed by comparing this registration data with detection data obtained by converting the biometric information detected by the biometric information detector. There is a technique to perform (for example, Patent Document 2).
JP 2005-18128 A JP 2005-38257 A

While the current speed between an IC card and a card reader is very slow, such as several kilobytes / second, the amount of biometric information is generally large. Therefore, when biometric authentication data used for personal authentication is stored in an IC card, if the security is increased, the amount of data required correspondingly increases, so the data transfer speed takes time and stresses the user. May give. For example, when the data transmission rate is 8 kbps [kb / s] and the amount of data stored in the IC card is 3 kilobytes (kbyte) (= 24 kilobits (kbit)), 3 is used for data transfer at the time of data reading. It will take about a second. Such a data transfer speed problem between an IC card and a card reader is not limited to the technique of Patent Document 1, but also in the technique of Patent Document 2, the amount of registered data stored in the portable device is different from the biometric information data. Unless it becomes very small, the same problem occurs.
Furthermore, when biometric authentication data is managed centrally on the client side or the server side, there is a risk of biometric information leakage. For example, when biometric authentication data is stored in an IC card, there is a risk of biometric information leakage when the IC card is lost. In addition, when biometric authentication data is centrally managed on the server side, there is a risk of biometric information leakage from the server.

  The present invention has been made in consideration of such circumstances, and the purpose of the present invention is to perform personal authentication using biometric information using an IC card without causing stress on the user, An object is to provide an authentication system, an authentication information management device, an authentication information distribution method, and a computer program that can prevent leakage.

  The present invention has been made to solve the above-described problem. An authentication terminal that performs personal authentication using a portable information recording medium, an authentication information management device that manages data used for personal authentication, and personal authentication An authentication information management and recovery device that holds backup data of data used for the authentication information management device, wherein the authentication information management device comprises personal identification data and management device tally data generated from the authentication data. Tally data that can be restored from two or more tally data out of three tally data from authentication data by tally storage means for management device stored in association with threshold secret sharing method Tally data generating means for generating tally data for information recording medium, tally data for management device, and tally data for recovery device, and tally generation The management device tally data generated by the stage is written in the management device tally storage means in association with the personal identification data, and the personal identification data and the tally data for the information recording medium generated by the tally generation means Tally registering means for transmitting the personal identification data and the tally data for recovery device generated by the tally generating means to the authentication information management recovery device, and the authentication information management recovery device, Recovery device tally storage means for storing personal identification data and recovery device tally data in association with each other, personal identification data received from the authentication information management device, and recovery device tally data in association with the recovery Recovery device tally registering means for writing to the device tally storage means, and the authentication terminal includes the authentication information Comprising a personal identification data received from the management apparatus, an information recording medium for tally writing means in association with the tally data for an information recording medium is written to the information recording medium is an authentication system wherein the.

  Further, the present invention is the above-described authentication system, wherein the authentication terminal includes information recording medium tally reading means for reading personal identification data and information recording medium tally data from the information recording medium, and the information recording medium tally. Authentication means for transmitting the personal identification data read by the reading means to the authentication information management apparatus, authentication data corresponding to the personal identification data transmitted by the notification means, and authentication target data are compared for authentication. The authentication information management device further includes first tally reading means for reading management device tally data corresponding to personal identification data received from the authentication terminal from the management device tally storage unit. The authentication terminal or the authentication information management device includes the tally data for management device read by the first tally reading means, and the information recording. Comprising a first authentication data generation means for generating authentication data the authentication unit is used to authenticate the tally and data read information recording medium by tally reading means for medium, characterized in that.

  Further, the present invention is the above-described authentication system, wherein the authentication management device reads tally data for management device corresponding to personal identification data for identifying an individual to be regenerated for tally data from the tally storage unit for management device. And second tally reading means for transmitting the personal identification data to the authentication information management recovery apparatus and reading the tally data for recovery apparatus, tally data for management apparatus read by the second tally reading means, and the recovery apparatus And a second authentication data generating means for restoring the authentication data from the tally data for use, wherein the tally generating means generates a threshold secret from the authentication data generated by the second authentication data generating means. The tally data for the information recording medium is generated by a distributed method, and the authentication information management recovery device receives personal identification data from the authentication information management device. And a recovery device tally reading means for reading out and returning the recovery device tally data corresponding to the received personal identification data from the recovery device tally storage means, and the information recording medium tally writing means comprises: The tally data for the information recording medium generated by the tally generating means of the authentication information management apparatus is written to the information recording medium in association with the personal identification data for identifying the individual for which tally data is to be regenerated.

  The present invention is the authentication system described above, wherein the authentication terminal or the authentication information management device compares the authentication data generated by the second authentication data generation means with the authentication target data. A recovery authentication means for performing authentication in comparison, and the tally writing means for the information recording medium, when the authentication by the recovery authentication means is successful, the tally data for the information recording medium is a tally data regeneration target And writing to an information recording medium in association with the personal identification data for identifying the individual.

  Further, the present invention is the authentication system described above, wherein the tally data for information recording medium has a smaller data amount than the tally data for management device and the tally data for recovery device.

  The present invention is the authentication system described above, wherein the authentication data is biometric authentication data, and the authentication terminal reads biometric information and generates biometric authentication data. It is characterized by comprising.

  The present invention is also an authentication system having an authentication terminal for performing personal authentication using a portable information recording medium, and an authentication information management device for managing data used for personal authentication, wherein the authentication information management device includes: A tally storage unit for management device for storing personal identification data and tally data for management device generated from authentication data in association with each other, and information recording as two tally data from the authentication data by the secret sharing method Tally data for medium and tally generation means for generating tally data for management apparatus, and tally data for management apparatus generated by the tally generation means are associated with personal identification data in the tally storage means for management apparatus Tally registering means for writing the personal identification data and tally data for information recording medium generated by the tally generating means to an authentication terminal, Tally reading means for receiving personal identification data for identifying a user to be authenticated from the authentication terminal and reading tally data for management apparatus corresponding to the received personal identification data from the tally storage means for management apparatus, The terminal includes an information recording medium tally writing means for writing the personal identification data received from the authentication information management apparatus and the information recording medium tally data in association with the information recording medium, and an authentication target from the information recording medium. The information recording medium tally reading means for reading the personal identification data for identifying the individual and the tally data for the information recording medium, and the personal identification data read by the tally reading means for the information recording medium are transmitted to the authentication information management device Comparing the authentication target data with the authentication data corresponding to the personal identification data transmitted by the notification means Authentication means for performing authentication, wherein the authentication terminal or the authentication information management apparatus includes tally data for management apparatus read by the tally reading means and information read by the tally reading means for information recording medium An authentication system comprising: authentication data generating means for generating authentication data used by the authentication means for authentication from tally data for recording medium.

  The present invention is also an authentication system having an authentication terminal for performing personal authentication using a portable information recording medium, and an authentication information management device for managing data used for personal authentication, wherein the authentication information management device includes: And tally generating means for generating two tally data having different data amounts from the authentication data, and tally registering means for transmitting the two tally data generated by the tally generating means to the authentication terminal. Is a tally writing means for information recording medium for writing two tally data received from the authentication information management device to the information recording medium, and before or during the input of authentication target data, The tally data having the larger data amount is read from the information recording medium, and the tally data having the smaller data amount is input after the data to be authenticated is input. Information recording medium tally reading means to be read out, authentication data generating means for generating authentication data from two tally data read by the information recording medium tally reading means, and generated by the authentication data generating means An authentication system comprising: authentication means for performing authentication by comparing the input authentication data with the input authentication target data.

  The present invention also provides an authentication terminal that performs personal authentication using a portable information recording medium, an authentication information management device that manages data used for personal authentication, and an authentication that holds backup data of data used for personal authentication An authentication information management apparatus in an authentication system having an information management recovery apparatus, the management apparatus tally storage means for storing personal identification data and management apparatus tally data generated from authentication data in association with each other The tally data for the information recording medium, the tally data for the information recording medium, and the management device can be restored as tally data that can be restored from tally data of two or more of the three tally data by the threshold secret sharing method. Tally data generating means for generating tally data and tally data for recovery device, and management device allocation generated by the tally generating means Write the data in association with the personal identification data in the tally storage means for management device, and the personal identification data and tally data for the information recording medium generated by the tally generation means to the authentication terminal An authentication information management apparatus comprising tally registration means for transmitting data and tally data for recovery device generated by the tally generation means to the authentication information management recovery apparatus.

  According to another aspect of the present invention, there is provided the first authentication information management apparatus which receives personal identification data and information recording medium tally data from the authentication terminal, and reads management apparatus tally data corresponding to the received personal identification data. Generating authentication data from tally data reading means, tally data for management device read by the first tally reading means, and tally data for information recording medium received by the tally reading means, and the authentication terminal And a first authentication data generating means for returning to the server.

  Further, the present invention is the authentication information management device described above, wherein tally data for management device corresponding to personal identification data for identifying a tally data regeneration target individual is read from the tally storage unit for management device and the authentication From the second tally reading means for transmitting the personal identification data to the information management recovery apparatus and reading out the tally data for recovery apparatus, the tally data for management apparatus and the tally data for recovery apparatus read out by the second tally reading means Second tally data generating means for restoring authentication data, wherein the tally generating means uses the threshold secret sharing method to obtain information from the authentication data generated by the second authentication data generating means. Recording tally data for a recording medium is generated.

  The present invention also provides an authentication terminal that performs personal authentication using a portable information recording medium, an authentication information management device that manages data used for personal authentication, and an authentication that holds backup data of data used for personal authentication An authentication information distribution method for use in an authentication system having an information management recovery device, wherein the authentication information management device uses two or more tally data of three tally data from authentication data by a threshold secret sharing method. As tally data that can restore the authentication data from the data, the tally data generation process for generating tally data for information recording medium, tally data for management apparatus, and tally data for recovery apparatus, and generated in the tally generation process The management device tally data is written in the management device tally storage means in association with the personal identification data, and Identification data and tally data for information recording medium generated in the tally generation process are sent to an authentication terminal, and the personal identification data and tally data for recovery device generated in the tally generation process are sent to an authentication information management recovery apparatus A tally registration process to be transmitted to the authentication information management recovery device, and the authentication information management recovery device writes the personal identification data received from the authentication information management device and the recovery device tally data in the recovery device tally storage means in association with each other A tally registration process, a tally writing process for information recording medium in which the authentication terminal writes personal identification data received from the authentication information management apparatus and tally data for information recording medium in association with each other to the information recording medium, An authentication information distribution method characterized by comprising:

  Further, the present invention is the above-described authentication information distribution method, wherein the authentication terminal reads the personal identification data and the information recording medium tally data from the information recording medium, and the information recording medium. A notification process of transmitting the personal identification data read in the tally reading process to the authentication information management apparatus, and the management information tally data corresponding to the personal identification data received by the authentication information management apparatus from the authentication terminal. A tally reading process for reading from the tally storage unit for apparatus, and the tally data for management apparatus read by the authentication terminal or the authentication information management apparatus in the tally reading process and the tally reading process for the information recording medium. An authentication data generation process for generating authentication data from the tally data for the information recording medium, and the authentication terminal And authentication data generated in the authentication data generation process, and having an authentication process for authenticating by comparing the authentication object data.

  The present invention is also the authentication information distribution method described above, wherein the authentication information management device stores tally data for management device corresponding to personal identification data for identifying an individual for which tally data is to be regenerated. And a recovery tally reading process for reading the personal identification data to the authentication information management recovery apparatus and the recovery information corresponding to the personal identification data received from the authentication information management apparatus by the authentication information management recovery apparatus Tally data for recovery device that reads out the tally data for recovery from the tally storage means for recovery device and returns it, and the tally data for management device that the authentication information management device reads out in the tally reading process for recovery, and Restore authentication data from tally data for recovery device received from authentication information management recovery device A recovery data generating process for generating tally data for information recording medium from the restored authentication data by a threshold secret sharing method; and the tally data for information recording medium generated by the authentication terminal in the recovery data generating process. And a recovery data writing process for writing to the information recording medium in association with the personal identification data for identifying the individual to which the tally data is to be regenerated.

  The present invention also provides an authentication terminal that performs personal authentication using a portable information recording medium, an authentication information management device that manages data used for personal authentication, and an authentication that holds backup data of data used for personal authentication A computer program for use in an authentication system having an information management recovery device, wherein the authentication information management device uses a threshold secret sharing method from authentication data from two or more tally data out of three tally data. As tally data that can restore the authentication data, tally data for generating information recording medium, tally data for management device, and tally data for recovery device, and tally data generated in the tally generation step The management device tally data is written in the management device tally storage means in association with the personal identification data, Personal identification data and tally data for information recording medium generated in the tally generation process to an authentication terminal, and authentication information management of the personal identification data and tally data for recovery device generated in the tally generation process Tally registration process to be transmitted to the recovery device, and recovery in which the authentication information management recovery device writes the personal identification data received from the authentication information management device and the tally data for recovery device in association with the tally storage means for recovery device Tally registration process for apparatus and tally writing process for information recording medium in which the authentication terminal writes personal identification data received from the authentication information management apparatus and tally data for information recording medium in association with each other to the information recording medium And a computer program.

  The present invention is also the above-described computer program, in which the authentication terminal reads the tally reading information for the information recording medium and the tally for the information recording medium for reading the personal identification data and the tally data for the information recording medium from the information recording medium. A notification process of transmitting the personal identification data read in the reading process to the authentication information management apparatus; and the management information tally data corresponding to the personal identification data received by the authentication information management apparatus from the authentication terminal. The tally reading process read from the tally storage means, the authentication terminal or the authentication information management device is read in the tally data for management device read in the tally reading process and the tally reading process for the information recording medium Authentication data generation process for generating authentication data from tally data for information recording medium, and the authentication terminal The to the authentication data generated in the authentication data generation process, the authentication process for authenticating by comparing the authentication object data, characterized in that to the computer running.

  Further, the present invention is the above-described computer program, in which the authentication information management device receives tally data for management device corresponding to personal identification data for identifying an individual for which tally data is to be regenerated from the tally storage unit for management device. A recovery tally reading process for reading and transmitting the personal identification data to the authentication information management recovery device; and a recovery device tally corresponding to the personal identification data received from the authentication information management device by the authentication information management recovery device A recovery device tally reading process for reading data from the recovery device tally storage means and returning it, and the authentication information management device reads the tally data for management device read in the recovery tally reading process, and the authentication Authentication data from tally data for recovery device received from information management recovery device A recovery data generating process for generating the information recording medium tally data from the restored authentication data by the threshold secret sharing method, and the authentication terminal generating the information recording medium tally generated in the recovery data generating process. A recovery data writing process for writing data to an information recording medium in association with the personal identification data for specifying the individual to which the tally data is to be regenerated is executed by a computer.

As described above, according to the present invention, data stored in an information recording medium such as an IC card can be reduced regardless of a security level, an authentication terminal, an authentication algorithm, and the like. Therefore, the time for reading data from the information recording medium at the time of personal authentication is shortened, and high-security personal authentication can be performed without stressing the user. Further, personal authentication can be performed even with a magnetic card or the like having a small data capacity that can be stored.
In addition, by storing biometric authentication data in the information recording medium and the authentication information management device in a distributed manner, even if information leaks from either the information recording medium or the authentication information management device, the original biometric data is stored. Since the authentication data cannot be restored, the biometric authentication data itself can be prevented from leaking.

[First Embodiment]
FIG. 1 is a diagram showing the configuration of an authentication system according to the first embodiment of the present invention.
In the figure, an authentication terminal, an authentication information management server 5 (authentication information management device), and an authentication information management recovery server 6 (authentication information management recovery device) are a LAN (Local Area Network), a WAN, a private network, and a public network. Connected to a network N such as the Internet. The authentication terminal includes a biometric authentication device 4 that reads biometric information of a user and an IC card reader / writer 3 (hereinafter referred to as “IC”) as a reading device for information recorded in an IC card 2 that is a portable information recording medium. Client terminal 1 provided with a card R / W3 ”. The portable information recording medium can be, for example, a magnetic card, a memory using a USB (Universal Serial Bus), an electronic device, or the like in addition to the IC card. The client terminal 1 is a computer terminal such as a personal computer, a PDA (Personal Digital Assistants: information portable terminal), or a cellular phone.

  First, the operation outline of the registration algorithm, authentication algorithm, and recovery algorithm in the authentication system shown in FIG. 1 will be described below. Note that data communication with high security is performed between the client terminal 1 and the biometric authentication device 4 and between the biometric authentication device 4 and the authentication information management server 5 using DES (Data Encryption Standard), SSL (Secure Socket Layer), or the like. And

<Registration algorithm>
In the registration algorithm, the biometric authentication device 4 connected to the client terminal 1 generates authentication data x indicating the biometric information of the user for personal authentication, for example, information such as fingerprint, face, vein, and iris. The authentication information management server 5 uses the distributed tally technology to generate tally data α (information recording medium tally data) for storing the IC card from the authentication data x, and tally data β (for the management device) for storing the authentication information management server. (Tally data) and tally data γ (recovery device tally data) for authentication information management recovery server storage are generated. Here, as a distributed tally technique, three tally data are generated from the original data, and the data amount of each tally data can be the same or different, and one tally data is lost. In other words, the “threshold secret sharing method” that can generate the original data from the remaining two tally data is used. The personal ID and tally data α are recorded on the IC card 2 by the IC card R / W3. The authentication information management server 5 stores tally data β for personal authentication, and the authentication information management recovery server 6 stores tally data γ for reissuing the IC card due to loss of the IC card.

  The threshold secret sharing method is an application of the secret sharing method. The secret sharing method is a technique for dividing original data into a plurality of electronic tally and restoring all the electronic tally to the original data (for example, Japanese Patent Application No. 2000-596543, in particular, drawings). 9). On the other hand, the threshold secret sharing method divides the original data into a plurality of electronic tally, and even if a certain number or less, for example, one electronic tally is damaged, the remaining electronic tally is integrated to restore the original data. (See, for example, Japanese Patent Application Laid-Open No. 2004-53969, in particular, paragraph number 0036 ~, drawing 9 ~, etc.). The threshold secret sharing method is also described in JP-A-2004-341152 (paragraphs 0003 to 0007), JP-A-2004-336577, and the like.

The registration algorithm will be described more specifically. First, the biometric authentication device 4 reads biometric information and generates authentication data x. The client terminal 1 receives the authentication data x generated by the biometric authentication device 4 and personal information including information such as an IC card number read from the IC card 2 and a name input to the client terminal 1. To 5.
The authentication information management server 5 generates tally data α, tally data β, and tally data γ from the authentication data x by the threshold secret sharing method. At this time, the tally data α is generated as smaller data than the tally data β and tally data γ as much as possible. Here, the smallest possible data means data in a range that is the smallest data that can ensure security without affecting the communication speed between the IC card R / W 3 and the IC card 2.

  Next, the authentication information management server 5 assigns a personal ID (referred to as “ID [m]”), transmits ID [m] and tally data α to the client terminal 1, and the client terminal 1 The received data is written to the IC card 2 by the R / W 3. Furthermore, the authentication information management server 5 transmits ID [m] and tally data γ to the authentication information management recovery server 6, and the authentication information management recovery server 6 stores these data in its own storage means. The authentication information management server 5 deletes the tally data α, tally data γ, and authentication data x from the internal memory or the like when the generated ID [m], personal information, and tally data β are written in its storage means. To do.

<Authentication algorithm>
In the authentication algorithm, the authentication data x is generated from the tally data α read from the memory in the IC card 2 by the IC card R / W 3 and the tally data β stored in the authentication information management server 5, and biometric authentication is performed. The personal authentication is performed by comparing with the biometric information of the user to be authenticated read by the device 4.

First, the personal ID [m] stored in the IC card 2 and the tally data α corresponding to the personal ID [m] are read from the IC card R / W 3 connected to the client terminal 1. The client terminal 1 transmits the personal ID [m] and tally data α read from the IC card 2 to the authentication information management server 5 and requests authentication data x.
When the authentication information management server 5 reads the tally data β stored in its storage means in association with the received personal ID [m], the tally data α received from the client terminal 1 by the distributed tally technology, Authentication data x is generated from the read tally data β. The authentication information management server 5 returns the generated authentication data x to the client terminal 1, and the client terminal 1 passes the received authentication data x to the biometric authentication device 4. The biometric authentication device 4 compares the received authentication data x with authentication target data y that is biometric information read from the user to be authenticated, and performs personal authentication.

According to the above authentication algorithm, since the authentication target data y, which is personal biometric information, is not transmitted / received over the network N, security is high. The present invention is also applicable when the client terminal 1 is a thin client. However, since the algorithm of the distributed tally technique has a high processing load, the authentication information management server 5 may be overloaded. Therefore, the generation process of the authentication data x may be performed by the client terminal 1. In this case, the client terminal 1 transmits the personal ID [m] extracted from the IC card 2 to the authentication information management server 5, and the authentication information management server 5 obtains the tally data β corresponding to the received personal ID [m]. Read from the internal storage means and send it back. The client terminal 1 generates the authentication data x using the tally data α read from the IC card 2 and the tally data β acquired from the authentication information management server 5, and passes it to the biometric authentication device 4.
In the above, the biometric authentication device 4 reads the personal ID [m] from the IC card 2 and transmits it to the authentication information management server 5, but uses the IC card number instead of the personal ID [m]. The above algorithm may be executed.

<Recovery algorithm>
When reissuance is required due to loss of the IC card 2 or the like, the recovery algorithm uses the tally data stored in the authentication information management server 5 and the authentication information management recovery server 6 in a distributed manner for authentication. Data x is generated and tally data α is regenerated.

  First, the biometric authentication device 4 reads the biometric information of the user whose card is to be reissued to generate authentication target data z. The client terminal 1 transmits personal information [m] (or a card ID number), personal information such as name and authentication target data z input to the terminal to the authentication information management server 5, Request regeneration of tally data α. The authentication information management server 5 reads the tally data β corresponding to the personal ID [m] received from the client terminal 1 from its storage means, and further transmits the personal ID [m] to the authentication information management recovery server 6. Request tally data γ.

  The authentication information management recovery server 6 reads the tally data γ of the requested personal ID [m] from its own storage means and returns it to the authentication information management server 5. The authentication information management server 5 generates authentication data x using the tally data β read from its storage means and the tally data γ returned from the authentication information management recovery server 6.

  Subsequently, the authentication information management server 5 compares the authentication data x with the authentication target data z received from the client terminal 1 and performs personal authentication. If the authentication is OK, the authentication information management server 5 performs registration from the authentication data x. The tally data α is generated by the same algorithm (threshold secret sharing method). If the authentication cannot be performed, the reason why the tally data α cannot be generated is returned to the client terminal 1.

  When the tally data α is returned from the authentication information management server 5, the client terminal 1 writes the personal ID [m] and the tally data α to the IC card 2 by the IC card R / W 3. On the other hand, the authentication information management server 5 deletes the generated tally data α, authentication data x, and authentication target data z from the memory or the like.

  When the tally data α is generated from the authentication data x in the authentication information management server 5, the tally data α, the tally data β, and the tally data γ must be regenerated by the tally technique. Information in the IC card 2, the authentication information management server 5, and the authentication information management recovery server 6 is updated by α, tally data β, and tally data γ, respectively.

Next, the configuration of each device shown in FIG. 1 will be described.
The IC card 2 includes an IC chip, and includes a central processing unit (CPU) that centrally controls the entire IC chip, a memory that records programs and data, a communication unit that transmits and receives data to and from the IC card R / W3, and the like. Have.

  FIG. 2 is a block diagram showing the configuration of the client terminal 1. The client terminal 1 includes a control unit 11, a communication unit 12, a registration information transmission unit 13, an information recording medium tally writing unit 14, an information recording medium tally reading unit 15, an authentication data acquisition unit 16, and a recovery request unit. 17. The control unit 11 includes a CPU and various memories, and controls each part, temporarily stores data, transfers data, and the like. The communication unit 12 transmits / receives data to / from the IC card R / W 3, the biometric authentication device 4, and the authentication information management server 5.

  The registration information transmitting unit 13 receives the authentication data x to be registered from the biometric authentication device 4 and notifies the authentication information management server 5 of the data. The tally writing means 14 for information recording medium writes the tally data α and personal ID received from the authentication information management server 5 to the IC card 2 by the IC card R / W 3. The information recording medium tally reading means 15 reads the tally data α and the personal ID from the IC card 2 of the user who authenticates with the IC card R / W3. The authentication data acquisition unit 16 transmits the tally data α and the personal ID to the authentication information management server 5 and acquires the authentication data x. The recovery request unit 17 receives the authentication target data z used for authentication at the time of the recovery request from the biometric authentication device 4, and transmits the authentication target data z and the personal ID for specifying the recovery target user to the authentication information management server 5. To do.

  FIG. 3 is a block diagram showing a configuration of the biometric authentication device 4. The biometric authentication device 4 includes a control unit 41, a biometric information reading unit 42, a communication unit 43, and an authentication unit 44. The control unit 41 includes a CPU and various memories, and controls each unit, temporarily stores data, transfers data, and the like. The biological information reading unit 42 reads biological information such as a fingerprint, a face, a vein, and an iris. The communication unit 43 transmits / receives data to / from the client terminal 1. The authentication unit 44 performs authentication by comparing the authentication target data y that is the biometric information of the authentication target individual read by the biometric information reading unit 42 with the authentication data x received from the client terminal 1.

  FIG. 4 is a block diagram showing a configuration of the authentication information management server 5. The authentication information management server 5 includes control means 51, communication means 52, tally generation means 53, tally registration means 54, management server tally storage means 55, tally reading means 56, authentication data generation means 57, and recovery authentication means. 58. The control unit 51 includes a CPU and various memories, and controls each unit, temporarily stores data, transfers data, and the like. The communication means 52 transmits and receives data between the client terminal 1 and the authentication information management recovery server 6 via the network N.

  The tally generating means 53 uses the threshold tally sharing method electronic tally technology that can restore the original data from two or more tally data of the three tally data from the authentication data x as three tally data. , Tally data α, tally data β, and tally data γ are generated. The tally registration means 54 writes the tally data β in association with the personal ID to the management server tally storage means 55, and the tally data α and personal ID to the client terminal 1, and the tally data γ and personal ID to the authentication information management recovery. Send to server 6.

  The tally reading means 56 receives the personal ID from the client terminal 1, the tally data β corresponding to the personal ID from the management server tally storage means 55, and the tally data γ corresponding to the personal ID from the authentication information management recovery server 6. Is read. The authentication data generating means 57 generates authentication data x from the tally data α received from the client terminal 1 or the tally data γ read from the authentication information management recovery server 6 and the tally data β.

  The recovery authentication means 58 compares the authentication data x generated from the tally data β and the tally data γ by the authentication data generation means 57 with the biometric information data z received from the client terminal 1 and the authentication is OK. The tally generating means 53 is instructed to generate the tally data α from the restored authentication data x.

  FIG. 5 is a block diagram showing the configuration of the authentication information management recovery server 6. The authentication information management recovery server 6 includes control means 61, communication means 62, recovery server tally registration means 63, recovery server tally storage means 64, and recovery server tally reading means 65. The control unit 61 includes a CPU and various memories, and controls each unit, temporarily stores data, transfers data, and the like. The communication unit 62 transmits / receives data to / from the authentication information management server 5 via the network N. The recovery server tally registration means 63 writes the tally data γ and the personal ID received from the authentication information management server 5 to the recovery server tally storage means 64. The recovery server tally reading means 65 receives the personal ID from which the tally data is to be read from the authentication information management server 5 and reads out the tally data γ corresponding to the personal ID from the recovery server tally registration means 63 and notifies it.

  Next, a configuration example of data held by each device and a processing flow of a registration algorithm, an authentication algorithm, and a recovery algorithm will be described. Here, an example in which a fingerprint is used as biometric information is shown.

  FIG. 6 shows a configuration example of information registered in the management server tally storage means 55 of the authentication information management server 5. In the figure, the management server tally storage means 55 stores an authentication information management server fingerprint management table comprising a plurality of entry data including personal ID, name, fingerprint tally data as tally data β, attribute, and remark information. . The attribute information is information relating to an individual, and includes, for example, an IC card number. Here, the user name “Matsu” of the personal ID “c-id-1”, fingerprint tally data “sx-1” which is tally data β generated from the fingerprint information of this user, attribute 1 “A1”, attribute 2 “B1”, attribute 3 “C1”, remarks “matsu”,... Are registered.

  FIG. 7 shows a configuration example of information registered in the recovery server tally storage unit 64 of the authentication information management recovery server 6. In the figure, a recovery server tally storage means 64 stores an authentication information management recovery server fingerprint management table comprising a plurality of entry data including personal ID, name, fingerprint tally data as tally data γ, attributes, and remarks information. To do. Here, the user name “Matsu” of the personal ID “c-id-1”, fingerprint tally data “rs-x-1” which is tally data γ generated from the fingerprint information of this user, attribute 1 “A1”, Attribute 2 “B1”, attribute 3 “C1”, remarks “matsu”,... Are registered.

  FIG. 8 shows a configuration example of information registered in the IC card 2. In the figure, the IC card 2 stores fingerprint information including personal ID, name, fingerprint tally data which is tally data α, attributes, and remarks information. In the figure, the user name “Matsu” of the personal ID “c-id-1” and fingerprint tally data “c-x-1” which is tally data α generated from the fingerprint information of the user are registered.

FIG. 9 shows a processing flow of the registration algorithm.
First, information such as the name of a user to be registered, attributes related to the user, and remarks is input to the client terminal 1. Furthermore, the client terminal 1 reads the IC card number from the IC card 2 using the IC card R / W 3. Subsequently, the fingerprint of the user to be registered is read by the biometric information reading means 42 of the biometric authentication device 4 that is a fingerprint reader to generate fingerprint authentication data (shimon-a) as the authentication data x, and to the client terminal 1. Output. The registration information transmitting unit 13 of the client terminal 1 is generated by the biometric authentication device 4 and personal information including information input by an input unit such as a keyboard provided therein, and information of an IC card number read from the IC card 2. The registration request in which the fingerprint authentication data (shimon-a) is set is transmitted to the authentication information management server 5 (step S110).

  When the tally generation means 53 of the authentication information management server 5 receives the registration request from the client terminal 1, it assigns a personal ID (c-id-a). The tally generation means 53 uses fingerprint tally data (cxa) and tally data as tally data α from the fingerprint authentication data (shimon-a) extracted from the received registration request by the electronic tally technology of the threshold secret sharing method. Fingerprint tally data (sxa) as β and fingerprint tally data (rs-xa) as tally data γ are generated (step S120).

  The tally registration means 54 of the authentication information management server 5 creates a new entry from the personal ID (c-id-a) assigned by the tally generation means 53, the generated fingerprint tally data (cxa), and the personal information extracted from the registration request. Data is generated and added to the authentication information management server fingerprint management table (step S130). Further, the tally registration means 54 transmits a recovery data registration request in which the personal ID (c-id-a), fingerprint tally data (rs-xa), and personal information are set to the authentication information management recovery server 6, and the client terminal 1 sends a card registration request in which a personal ID (c-id-a) and fingerprint tally data (cxa) are set.

The recovery server tally registration means 63 of the authentication information management recovery server 6 includes a personal ID (c-id-a) extracted from the recovery data registration request received from the authentication information management server 5, fingerprint tally data (rs-xa), Then, new entry data is generated from the personal information and added to the authentication information management recovery server fingerprint management table (step S140).
On the other hand, the tally writing means 14 for the information recording medium of the client terminal 1 includes the personal ID (c-id-a) and the fingerprint tally data (cxa) extracted from the card registration request received from the authentication information management server 5, and the step Fingerprint information including all or part of the personal information input in S110 is written to the IC card 2 by the IC card R / W3 (step S150). The tally registration means 54 of the authentication information management server 5 deletes the fingerprint authentication data (shimon-a), fingerprint tally data (cxa), and fingerprint tally data (rs-xa) from the internal memory or the like.

FIG. 10 shows a processing flow of the authentication algorithm.
First, the tally reading means 15 for the information recording medium of the client terminal 1 receives the personal ID (c-id-a) from the fingerprint information stored in the IC card 2 from the IC card R / W 3 connected to the client terminal 1. ) And fingerprint tally data (cxa) are read (step S210). The authentication data acquisition means 16 of the client terminal 1 transmits an authentication data request in which the personal ID (c-id-a) and fingerprint tally data (cxa) read from the IC card 2 are set to the authentication information management server 5. (Step S220).

  The tally reading means 56 of the authentication information management server 5 reads the fingerprint tally data (sxa) from the management server tally storage means 55 using the personal ID (c-id-a) extracted from the received authentication data request as a key. . The authentication data generating means 57 uses fingerprint tally data (cxa) extracted from the authentication data request and fingerprint tally data (sxa) read by the tally reading means 56 using the distributed tally technique of the threshold secret sentence distribution method. From this, fingerprint authentication data (shimon-a) is generated (step S230). The tally reading means 56 returns the generated fingerprint authentication data (shimon-a) to the client terminal 1.

  The authentication data acquisition means 16 of the client terminal 1 passes the received fingerprint authentication data (shimon-a) to the biometric authentication device 4. The biometric information reading unit 42 of the biometric authentication device 4 reads the fingerprint of the user to be authenticated and generates fingerprint authentication target data (shimon-b) that is the authentication target data y (step S240). The authentication unit 44 performs personal authentication using the fingerprint authentication data (shimon-a) received from the client terminal 1 and the fingerprint authentication target data (shimon-b) generated by the biometric information reading unit 42 (step). S250).

  Note that when the client terminal 1 generates fingerprint authentication data (shimon-a), an authentication data generation unit 57 is provided on the client terminal 1 side. Then, the authentication data acquisition means 16 of the client terminal 1 transmits the personal ID (cxa) taken out from the IC card 2 to the authentication information management server 5, and the tally reading means 56 of the authentication information management server 5 The fingerprint tally data (sxa) stored in the management server tally storage means 55 corresponding to the ID (c-id-a) is read and returned. The authentication data generation means 57 in the client terminal 1 uses the fingerprint tally data (cxa) read from the IC card 2 and the fingerprint tally data (sxa) acquired from the authentication information management server 5 to obtain the fingerprint authentication data (shimon- a) is generated and transferred to the biometric authentication device 4.

FIG. 11 shows the processing flow of the recovery algorithm.
First, personal information (name, attribute, etc.) is input to the client terminal 1 by input means such as a keyboard. The recovery request unit 17 of the client terminal 1 transmits a recovery request in which the input personal information is set to the authentication information management server 5. The tally reading means 56 of the authentication information management server 5 identifies the entry of the authentication information management server fingerprint management table in the management server tally storage means 55 based on the received personal information in the recovery request, and the personal ID (c-id- a) is read (step S310). The personal ID (c-id-a) may be input to the client terminal 1, set as a recovery request, and transmitted to the authentication information management server 5.

  The tally reading means 56 of the authentication information management server 5 transmits a tally transmission request in which the personal ID (c-id-a) is set to the authentication information management recovery server 6. The recovery server tally reading means 65 of the authentication information management recovery server 6 reads the fingerprint tally data (rs-xa) from the recovery server tally storage means 64 using the received personal ID (c-id-a) as a key. It returns to the authentication information management server 5 (step S320). The authentication data generation means 57 of the authentication information management server 5 includes the fingerprint tally data (sxa) read from the tally reading means 56 from the management server tally storage means 55 and the fingerprint tally data read from the authentication information management recovery server 6. (Rs-xa) generates fingerprint authentication data (shimon-a). Further, the tally generating unit 53 uses the electronic tally technique of the threshold secret sharing method similar to step S230 in FIG. 9 from the fingerprint authentication data (shimon-a) generated by the authentication data generating unit 57. Data (cxa) is generated (step S330).

Next, the biometric information reading unit 42 of the biometric authentication device 4 reads the fingerprint of the individual to be authenticated and generates the fingerprint authentication target data (shimon-c) that is the authentication target data z (step S340), and the client terminal 1 The recovery request unit 17 transmits the fingerprint authentication target data (shimon-c) generated by the biometric authentication device 4 to the authentication information management server 5. The recovery authentication means 58 of the authentication information management server 5 includes the fingerprint authentication data (shimon-a) generated by the authentication data generation means 57 in step S330 and the fingerprint authentication target data (shimon-c) received from the client terminal 1. The personal authentication is performed using (step S350).
The recovery authentication means 58 of the authentication information management server 5 transmits the fingerprint tally data (cxa) and the personal ID (c-id-a) to the client terminal 1 when determining that the authentication is OK. If the authentication cannot be performed, the client terminal 1 is notified of the reason.

  The recovery request means 17 of the client terminal 1 includes the fingerprint tally data (cxa) and personal ID (c-id-a) received from the authentication information management server 5, and all or a part of the personal information input in step S310. Is written into the IC card 2 by the IC card R / W3 (step S360). The authentication information management server 5 deletes the fingerprint authentication data (shimon-a) and the fingerprint authentication target data (shimon-c) from the memory etc. from the internal memory, and when the fingerprint tally data (cxa) is generated in step S330 When tally data (sxa) and fingerprint tally data (rs-xa) are generated, these data are also deleted from the memory or the like.

  In step S330, when the authentication information management server 5 generates fingerprint tally data (cxa) from fingerprint authentication data (shimon-a), different tally data, fingerprint tally data (cx-a ′), fingerprint tally When data (sx-a ') and fingerprint tally data (rs-x-a') must be regenerated, the fingerprint tally data (cx-a ') is written to the IC card 2 and the management server tally The fingerprint tally data (sxa) in the storage means 55 is changed to fingerprint tally data (sx-a ′), and the fingerprint tally data (rs-xa) in the recovery server tally storage means 64 is changed to fingerprint tally data (rs-x-a). Rewrite to ').

  When the biometric authentication device 4 performs the personal authentication in step S350, the authentication data generation unit 57 of the authentication information management server 5 uses the generated fingerprint authentication data (shimon-a) and fingerprint tally data (cxa) as the client. The data is transmitted to the terminal 1, and the client terminal 1 delivers the received fingerprint authentication data (shimon-a) to the biometric authentication device 4. The authentication unit 44 of the biometric authentication device 4 uses fingerprint authentication target data (shimon-c) generated by reading the fingerprint of the user to be authenticated by the biometric information reading unit 42 and fingerprint authentication data (shimon-a). The personal authentication is performed and the client terminal 1 is notified of the personal authentication result. When the personal authentication result is OK, the client terminal 1 writes the fingerprint tally data (c-x-a) and the personal ID (c-id-a) into the IC card 2 by the IC card R / W3.

[Second Embodiment]
Although the tally data β is stored in the authentication information management server 5 in the first embodiment, the tally data β is held in the IC card 2 in the present embodiment.
Hereinafter, differences from the first embodiment will be described.

  In the registration algorithm, when the authentication information management server 5 receives the personal information and the authentication data x from the client terminal 1, the tally data α and the tally are obtained from the received authentication data x by the electronic tally technique as in the first embodiment. Three tally data of data β and tally data γ are generated. The authentication information management server 5 transmits the personal ID, the tally data α, and the tally data β to the client terminal 1 after registering the tally data β, the assigned personal ID, personal information, and the like in the management server tally storage means 55. Then, the client terminal 1 writes these data into the IC card 2 using the IC card R / W3. The tally data γ is registered in the authentication information management recovery server 6 as in the first embodiment.

  In the authentication algorithm, if the IC card 2 is set in the IC card R / W 3 before the user to be authenticated reads the biometric information (if the wireless communication is used, the IC card 2 is placed at a position where wireless communication is possible). Immediately, the IC card R / W3 starts reading the tally data β in the IC card 2. As a result, tally data β is read before or while biometric information is subsequently read by biometric authentication device 4. When the reading of the biometric information is completed, the client terminal 1 further reads the tally data α from the IC card 2. The client terminal 1 generates authentication data x from the tally data α and tally data β read from the IC card 2. The biometric authentication device 4 performs personal authentication by comparing the generated authentication data x with the authentication target data y that is the read biometric information. Thereby, it is possible to prevent the authentication target user from feeling the data transfer time from the IC card 2. Note that the tally data β may be held by the client terminal 1.

[Third Embodiment]
In the third embodiment, the authentication information management recovery server 6 is not used in the first embodiment and the second embodiment. That is, in the registration algorithm, the authentication information management server 5 divides the original data into a plurality of electronic tally and integrates all the electronic tally to restore the original data by using the secret sharing method. Only two tally data, tally data α and tally data β are generated from the data x, and data registration similar to that in the first embodiment and the second embodiment is performed. The authentication algorithm is the same as in the first and second embodiments, but the recovery algorithm is not applied.

As described above, according to the embodiment of the present invention, the data stored in the information recording medium such as the IC card 2 can be reduced regardless of the security level, the authentication information management server 5, the authentication algorithm, and the like. it can. Therefore, the time for reading data from the information recording medium at the time of personal authentication is shortened, and high-security personal authentication can be performed without stressing the user. In addition, personal authentication can be performed even with a magnetic card or the like having a small storable data capacity.
Further, by storing the biometric authentication data in the information recording medium and the authentication information management server 5 in a distributed manner, even if information is leaked from either the information recording medium or the authentication information management server 5, Since the biometric authentication data cannot be restored, it is possible to prevent leakage of the biometric authentication data itself.
Even if a failure occurs in the authentication information management server 5, it is possible to perform authentication processing using the tally data γ stored in the recovery server tally storage means 64 of the authentication information management recovery server 6. .

  Note that the client terminal 1, the biometric authentication device 4, the authentication information management server 5, and the authentication information management recovery server 6 described above have a computer system therein. Then, the registration information transmission unit 13, the information recording medium tally writing unit 14, the information recording medium tally reading unit 15, the authentication data acquisition unit 16, the recovery request unit 17, and the biometric authentication device 4 of the client terminal 1 described above. Authentication means 44, tally generation means 53 of authentication information management server 5, tally registration means 54, tally storage means 55 for management server, tally reading means 56, authentication data generation means 57 and recovery authentication means 58, and authentication information management The operation processes of the recovery server tally registering means 63 and the recovery server tally reading means 65 of the recovery server 6 are stored in a computer-readable recording medium in the form of a program, and the computer system reads and executes this program. Thus, the above process is performed. The computer system here includes a CPU, various memories, an OS, and hardware such as peripheral devices.

Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. Furthermore, the “computer-readable recording medium” dynamically holds a program for a short time like a communication line when transmitting a program via a network such as the Internet or a communication line such as a telephone line. In this case, a volatile memory in a computer system serving as a server or a client in that case is also used to hold a program for a certain period of time. The program may be a program for realizing a part of the functions described above, and may be a program capable of realizing the functions described above in combination with a program already recorded in a computer system.

1 is an overall configuration diagram of an authentication system according to a first embodiment of the present invention. It is a block diagram which shows the structure of the client terminal shown in FIG. It is a block diagram which shows the structure of the biometrics apparatus shown in FIG. It is a block diagram which shows the structure of the authentication information management server shown in FIG. It is a block diagram which shows the structure of the authentication information management recovery server shown in FIG. It is a figure which shows the example of a data structure which the tally storage means for management servers shown in FIG. 4 memorize | stores. It is a figure which shows the example of a data structure which the tally storage means for recovery servers shown in FIG. 5 memorize | stores. It is a figure which shows the data structural example which the IC card shown in FIG. 1 memorize | stores. It is a figure which shows the processing flow of the authentication system shown in FIG. It is a figure which shows the processing flow of the authentication system shown in FIG. It is a figure which shows the processing flow of the authentication system shown in FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Client terminal 11, 41, 51, 61 ... Control means 12, 43, 52, 62 ... Communication means 13 ... Registration information transmission means 14 ... Information recording medium tally writing means 15 ... Information recording medium tally reading means 16 ... Authentication data acquisition means (notification means)
17 ... Recovery request means 2 ... IC card (information recording medium)
3 ... IC card R / W
DESCRIPTION OF SYMBOLS 4 ... Biometric authentication apparatus 42 ... Biometric information reading means 44 ... Authentication means 5 ... Authentication information management server (authentication information management apparatus)
53 ... Tally generating means 54 ... Tally registering means 55 ... Management server tally storage means (management device tally storage means)
56. Tally reading means (first tally reading means, second tally reading means)
57. Authentication data generation means (first authentication data generation means, second authentication data generation means)
58 ... Recovery authentication means 6 ... Authentication information management recovery server (authentication information management recovery device)
63 ... Tally registration means for recovery server (tally registration means for recovery device)
64 ... Recovery server tally storage means (recovery device tally storage means)
65. Tally reading means for recovery server (tally reading means for recovery device)

Claims (17)

An authentication terminal that performs personal authentication using a portable information recording medium, an authentication information management device that manages data used for personal authentication, and an authentication information management recovery device that holds backup data of data used for personal authentication, An authentication system comprising:
The authentication information management device includes:
Tally storage means for management device for storing personal identification data and tally data for management device generated from authentication data in association with each other;
As tally data that can restore the authentication data from tally data of two or more of the three tally data from the authentication data by the threshold secret sharing method, tally data for information recording medium, tally for management device Tally generating means for generating data and tally data for recovery device;
The management device tally data generated by the tally generation unit is written in the management device tally storage unit in association with personal identification data, and the personal identification data and the information recording medium generated by the tally generation unit Tally data for authentication to the authentication terminal, tally registration means for transmitting the personal identification data and the tally data for recovery device generated by the tally generation means to the authentication information management recovery device,
The authentication information management recovery device includes:
Recovery device tally storage means for storing personal identification data and recovery device tally data in association with each other;
A recovery device tally registration means for associating the personal identification data received from the authentication information management device with the recovery device tally data and writing it to the recovery device tally storage means;
The authentication terminal is
An information recording medium tally writing means for writing the personal identification data received from the authentication information management apparatus and the information recording medium tally data in association with the information recording medium;
An authentication system characterized by that. The authentication terminal is
Tally reading means for information recording medium for reading personal identification data and tally data for information recording medium from the information recording medium;
Notification means for transmitting the personal identification data read by the information recording medium tally reading means to the authentication information management device;
Authentication data corresponding to the personal identification data transmitted by the notification means, and authentication means for performing authentication by comparing the authentication target data,
The authentication information management device includes:
First tally reading means for reading tally data for management device corresponding to personal identification data received from the authentication terminal from the tally storage means for management device;
The authentication terminal or the authentication information management device is
The authentication means used for authentication by the authentication means from the tally data for management device read by the first tally reading means and the tally data for information recording medium read by the tally reading means for information recording medium First authentication data generating means for generating data;
The authentication system according to claim 1, wherein: The authentication information management device includes:
The management device tally data corresponding to the personal identification data for identifying the tally data regeneration target is read from the management device tally storage means, and the personal identification data is transmitted to the authentication information management recovery device for recovery. Second tally reading means for reading tally data for use;
A second authentication data generating unit that restores authentication data from the tally data for management device and the tally data for recovery device read by the second tally reading unit;
The tally generating means is
Generating tally data for information recording medium from the authentication data generated by the second authentication data generating means by a threshold secret sharing method;
The authentication information management recovery device includes:
A recovery device tally reading means for receiving personal identification data from the authentication information management device, reading out the recovery device tally data corresponding to the received personal identification data from the recovery device tally storage means, and returning it;
The tally writing means for information recording medium,
Writing the tally data for the information recording medium generated by the tally generating means of the authentication information management device in the information recording medium in association with the personal identification data for identifying the individual for which tally data is to be regenerated.
The authentication system according to claim 1 or 2, characterized by the above. The authentication terminal or the authentication information management device is
A recovery authentication unit that performs authentication by comparing the authentication data generated by the second authentication data generation unit and the authentication target data;
The tally writing means for information recording medium,
When the authentication by the recovery authentication means is successful, the tally data for the information recording medium is written to the information recording medium in association with the personal identification data for identifying the individual to which the tally data is to be regenerated.
The authentication system according to claim 3.   5. The authentication system according to claim 1, wherein the information recording medium tally data has a data amount smaller than that of the management device tally data and the recovery device tally data. 6. The authentication data is data for biometric authentication,
The authentication terminal includes biometric information reading means for reading biometric information and generating biometric data.
The authentication system according to any one of claims 1 to 5, wherein: An authentication system having an authentication terminal that performs personal authentication using a portable information recording medium, and an authentication information management device that manages data used for personal authentication,
The authentication information management device includes:
Tally storage means for management device for storing personal identification data and tally data for management device generated from authentication data in association with each other;
Tally generating means for generating tally data for information recording medium and tally data for management device as two tally data from authentication data by secret sharing method;
The management device tally data generated by the tally generation unit is written in the management device tally storage unit in association with personal identification data, and the personal identification data and the information recording medium generated by the tally generation unit Tally registration means for transmitting tally data to the authentication terminal;
Tally reading means for receiving personal identification data for identifying a user to be authenticated from the authentication terminal, and reading tally data for management apparatus corresponding to the received personal identification data from the tally storage means for management apparatus,
The authentication terminal is
Information recording medium tally writing means for associating the personal identification data received from the authentication information management device with the information recording medium tally data and writing to the information recording medium;
Tally reading means for information recording medium for reading personal identification data for identifying an individual to be authenticated and tally data for information recording medium from the information recording medium;
Notification means for transmitting the personal identification data read by the information recording medium tally reading means to the authentication information management device;
Authentication data corresponding to the personal identification data transmitted by the notification means, and authentication means for performing authentication by comparing the authentication target data,
The authentication terminal or the authentication information management device is
Authentication data used by the authentication unit for authentication is generated from the tally data for management device read by the tally reading unit and the tally data for information recording medium read by the tally reading unit for information recording medium Comprising authentication data generating means for
An authentication system characterized by that. An authentication system having an authentication terminal that performs personal authentication using a portable information recording medium, and an authentication information management device that manages data used for personal authentication,
The authentication information management device includes:
Tally generating means for generating two tally data having different data amounts from the authentication data;
Tally registration means for transmitting two tally data generated by the tally generation means to the authentication terminal,
The authentication terminal is
Tally writing means for information recording medium for writing the two tally data received from the authentication information management device to the information recording medium;
Before or during the input of the authentication target data, the tally data having the larger data amount is read from the information recording medium, and after the input of the authentication target data, the data amount Tally reading means for information recording medium for reading out the smaller tally data;
Authentication data generating means for generating authentication data from two tally data read by the information recording medium tally reading means;
Authentication data generated by the authentication data generation means, and authentication means for performing authentication by comparing the input authentication target data.
An authentication system characterized by that. An authentication terminal that performs personal authentication using a portable information recording medium, an authentication information management device that manages data used for personal authentication, and an authentication information management recovery device that holds backup data of data used for personal authentication, The authentication information management device in an authentication system comprising:
Tally storage means for management device for storing personal identification data and tally data for management device generated from authentication data in association with each other;
As tally data that can restore the authentication data from tally data of two or more of the three tally data from the authentication data by the threshold secret sharing method, tally data for information recording medium, tally for management device Tally generating means for generating data and tally data for recovery device;
The management device tally data generated by the tally generation unit is written in the management device tally storage unit in association with personal identification data, and the personal identification data and the information recording medium generated by the tally generation unit Tally data to the authentication terminal, tally registration means for transmitting the personal identification data and tally data for recovery device generated by the tally generation means to the authentication information management recovery device,
An authentication information management apparatus comprising: First tally reading means for receiving personal identification data and tally data for information recording medium from the authentication terminal, and reading tally data for management device corresponding to the received personal identification data;
First, authentication data is generated from the tally data for the management device read by the first tally reading means and the tally data for the information recording medium received by the tally reading means, and returned to the authentication terminal. An authentication data generation means;
The authentication information management apparatus according to claim 9. The management device tally data corresponding to the personal identification data for identifying the tally data regeneration target is read from the management device tally storage means, and the personal identification data is transmitted to the authentication information management recovery device for recovery. Second tally reading means for reading tally data for use;
A second authentication data generating unit that restores authentication data from the tally data for management device and the tally data for recovery device read by the second tally reading unit;
The tally generating means is
Generating tally data for an information recording medium from the authentication data generated by the second authentication data generating means by a threshold secret sharing method;
The authentication information management apparatus according to claim 9 or 10, characterized in that An authentication terminal that performs personal authentication using a portable information recording medium, an authentication information management device that manages data used for personal authentication, and an authentication information management recovery device that holds backup data of data used for personal authentication, An authentication information distribution method used for an authentication system having
The authentication information management device is
As tally data that can restore the authentication data from tally data of two or more of the three tally data from the authentication data by the threshold secret sharing method, tally data for information recording medium, tally for management device Tally generating process for generating data and tally data for recovery device;
The tally data for management device generated in the tally generation process is written in the tally storage unit for management device in association with the personal identification data, and the personal identification data and for the information recording medium generated in the tally generation process Tally data to an authentication terminal, the tally registration process of transmitting the personal identification data and the tally data for recovery device generated in the tally generation process to the authentication information management recovery device,
The authentication information management recovery device comprises:
A tally registration process for recovery apparatus that writes personal identification data received from the authentication information management apparatus and tally data for recovery apparatus to the tally storage unit for recovery apparatus in association with each other;
The authentication terminal is
A tally writing process for information recording medium in which personal identification data received from the authentication information management apparatus and tally data for information recording medium are associated with each other and written to the information recording medium;
A method for distributing authentication information, comprising: The authentication terminal is
Tally reading process for information recording medium for reading personal identification data and tally data for information recording medium from the information recording medium;
A notification process of transmitting the personal identification data read in the tally reading process for the information recording medium to the authentication information management device;
The authentication information management device is
A tally reading process of reading tally data for management device corresponding to personal identification data received from the authentication terminal from the tally storage unit for management device;
The authentication terminal or the authentication information management device is
An authentication data generating process for generating authentication data from the tally data for the management device read in the tally reading process and the tally data for the information recording medium read in the tally reading process for the information recording medium;
The authentication terminal is
An authentication process for performing authentication by comparing authentication data generated in the authentication data generation process with authentication target data;
The authentication information distribution method according to claim 12, further comprising: The authentication information management device is
Recovery tally for reading out tally data for management apparatus corresponding to personal identification data for identifying a tally data regeneration target from the tally storage means for management apparatus and transmitting the personal identification data to the authentication information management recovery apparatus Reading process;
The authentication information management recovery device comprises:
A recovery device tally reading process for reading out and returning recovery device tally data corresponding to the personal identification data received from the authentication information management device from the recovery device tally storage means;
The authentication information management device is
The management device tally data read in the recovery tally read process and the recovery device tally data received from the authentication information management recovery device are used to restore the authentication data, and the threshold value is restored from the restored authentication data. Recovery data generation process for generating tally data for information recording medium by secret sharing method;
The authentication terminal is
A recovery data writing step of writing the tally data for the information recording medium generated in the recovery data generation step to the information recording medium in association with the personal identification data for identifying the individual of the tally data regeneration target;
14. The method for distributing authentication information according to claim 12 or claim 13, comprising: An authentication terminal that performs personal authentication using a portable information recording medium, an authentication information management device that manages data used for personal authentication, and an authentication information management recovery device that holds backup data of data used for personal authentication, A computer program for use in an authentication system comprising:
The authentication information management device is
As tally data that can restore the authentication data from tally data of two or more of the three tally data from the authentication data by the threshold secret sharing method, tally data for information recording medium, tally for management device Tally generating process for generating data and tally data for recovery device;
The tally data for management device generated in the tally generation process is written in the tally storage unit for management device in association with the personal identification data, and the personal identification data and for the information recording medium generated in the tally generation process Tally data to an authentication terminal, the tally registration process of transmitting the personal identification data and the tally data for recovery device generated in the tally generation process to the authentication information management recovery device,
The authentication information management recovery device comprises:
A tally registration process for recovery apparatus that writes personal identification data received from the authentication information management apparatus and tally data for recovery apparatus to the tally storage unit for recovery apparatus in association with each other;
The authentication terminal is
Tally writing process for information recording medium for writing personal identification data received from the authentication information management device and tally data for information recording medium in association with the tally data for information recording medium,
A computer program characterized by causing a computer to execute. The authentication terminal is
Tally reading process for information recording medium for reading personal identification data and tally data for information recording medium from the information recording medium;
A notification process of transmitting the personal identification data read in the tally reading process for the information recording medium to the authentication information management device;
The authentication information management device is
A tally reading process of reading tally data for management device corresponding to personal identification data received from the authentication terminal from the tally storage unit for management device;
The authentication terminal or the authentication information management device is
An authentication data generating process for generating authentication data from the tally data for the management device read in the tally reading process and the tally data for the information recording medium read in the tally reading process for the information recording medium;
The authentication terminal is
An authentication process for performing authentication by comparing authentication data generated in the authentication data generation process with authentication target data;
The computer program according to claim 15, wherein the computer program is executed by a computer. The authentication information management device is
Recovery tally for reading out tally data for management apparatus corresponding to personal identification data for identifying a tally data regeneration target from the tally storage means for management apparatus and transmitting the personal identification data to the authentication information management recovery apparatus Reading process;
The authentication information management recovery device comprises:
A recovery device tally reading process for reading out and returning recovery device tally data corresponding to the personal identification data received from the authentication information management device from the recovery device tally storage means;
The authentication information management device is
The management device tally data read in the recovery tally read process and the recovery device tally data received from the authentication information management recovery device are used to restore the authentication data, and the threshold value is restored from the restored authentication data. Recovery data generation process for generating tally data for information recording medium by secret sharing method;
The authentication terminal is
A recovery data writing step of writing the tally data for the information recording medium generated in the recovery data generation step to the information recording medium in association with the personal identification data for identifying the individual of the tally data regeneration target;
The computer program according to claim 15, wherein the computer program is executed by a computer.

Images