JP2021129147A - Server, biometric system, and program - Google Patents

Abstract

To reduce the possibility of leakage of biometric information stored in a server.SOLUTION: A server according to a first embodiment includes a storage device, a receiving unit that receives registration information from a client terminal, and an encryption/decryption unit that decrypts the registration information with a preset fixed key, obtains biometric information of a user of a client terminal and a client encryption key, encrypts the biometric information decrypted from the registration information with the client encryption key decrypted from the registration information, stores the biometric information encrypted by the client encryption key in the storage device, and discards the client encryption key.SELECTED DRAWING: Figure 3

Description

Embodiments of the present invention relate to servers, biometric authentication systems, and programs.

For biometric authentication of the user of the client terminal, biometric information such as fingerprints and veins is registered in advance, and the biometric information input by the user when the user is authenticated and the biometric information registered in advance. This is done by comparing the information with.

JP-A-2007-122368

By the way, in bioauthentication, in addition to the method of authenticating the user in the client terminal in which the biometric information is registered in advance, the biometric information is registered in advance in the server connected to the client terminal via the network. , When authenticating the user, the biometric information input at the client terminal is transmitted to the server, and the biometric information received at the server is compared with the biometric information registered in advance to authenticate the user. There is a server authentication method that performs.

According to the server authentication method, the biometric information used for the user's biometric authentication can be centrally managed on the server together with the user's ID information, and can be specified if the biometric information is detected using the same biometric sensor. There is an advantage that the user can be authenticated from a terminal other than the client terminal of. However, in the server authentication method, since biometric information, which is sensitive personal information, is collected in one place, there is a possibility that all of the biometric information that is centrally managed may be leaked in the event of information leakage due to a security attack or the like. be.

Further, in general, the biometric information centrally managed by the server is encrypted, and it is difficult to decrypt the original biometric information as it is, but the encryption key used for decrypting the biometric information. Is stored in the server as part of the authentication program, so if the server itself falls into the hands of an unauthorized user and the encryption key is decrypted, all of the biometric information centrally managed by the server will be stored. It may leak. In addition, when a malicious administrator operates the server, the encryption key setting itself may have no meaning for the leakage of biometric information.

The server according to the first aspect of the present invention decrypts the registration information by the storage device, the receiving unit that receives the registration information from the client terminal, and the fixed key set in advance, and obtains the biometric information of the user of the client terminal. , The client encryption key and the biometric information decrypted from the registration information are encrypted by the client encryption key decrypted from the registration information, and the biometric information encrypted by the client encryption key is stored in the storage device. , It is equipped with an encryption / decryption unit that destroys the client encryption key.

The biometric authentication system according to the second aspect of the present invention includes a client terminal and a server. The client terminal uses a detection unit that detects the biometric information of the user of the client terminal, and a registration information that encrypts the biometric information detected by the detection unit and the client encryption key by a preset fixed key. It includes an encryption unit to be generated and a transmission unit to transmit the registration information generated by the encryption unit to the server. The server decrypts the registration information by the storage device, the receiving unit that receives the registration information from the client terminal, and the fixed key set in advance, acquires the biometric information and the client encryption key, and decrypts the registration information from the registration information. An encryption / decryption unit that encrypts the encrypted biometric information with the client encryption key decrypted from the registered information, stores the biometric information encrypted with the client encryption key in the storage device, and destroys the client encryption key. Be prepared.

The program according to the third aspect of the present invention decrypts the registration information of the computer by a receiving unit that receives the registration information from the client terminal and a fixed key set in advance, and obtains the biometric information of the user of the client terminal. The client encryption key and the biometric information decrypted from the registration information are encrypted by the client encryption key decrypted from the registration information, and the biometric information encrypted by the client encryption key is stored in the storage device. It functions as an encryption / decryption unit that destroys the client encryption key.

The program according to the fourth aspect of the present invention is a cipher that generates registration information that encrypts a computer, a computer, a biometric information of a user of a client terminal, and a client encryption key by a fixed key set in advance. It functions as a conversion unit and a transmission unit that transmits the registration information generated by the encryption unit to the server.

According to the above aspect of the present invention, the possibility of leakage of biometric information stored in the server can be reduced.

FIG. 1 is a diagram showing an example of the overall configuration of the biometric authentication system according to the first embodiment. FIG. 2 is a diagram showing an example of a functional configuration of a client terminal and a biometric authentication server included in the biometric authentication system according to the first embodiment. FIG. 3 is a diagram for explaining an example of the biometric information registration process of the user of the client terminal in the biometric authentication system according to the first embodiment. FIG. 4 is a flowchart showing an example of a flow of registration information transmission processing by a client terminal included in the biometric authentication system according to the first embodiment. FIG. 5 is a flowchart showing an example of the flow of the biometric information template registration process by the biometric authentication server of the biometric authentication system according to the first embodiment. FIG. 6 is a diagram for explaining an example of authentication processing of biometric information of a user of a client terminal in the biometric authentication system according to the first embodiment. FIG. 7 is a flowchart showing an example of a flow of authentication information transmission processing by the client terminal included in the biometric authentication system according to the first embodiment. FIG. 8 is a flowchart showing an example of a flow of biometric information collation processing by the biometric authentication server of the biometric authentication system according to the first embodiment. FIG. 9 is a diagram for explaining an example of the biometric information registration process of the user of the client terminal in the biometric authentication system according to the second embodiment. FIG. 10 is a diagram for explaining an example of collation processing of the biometric information of the user of the client terminal 1 in the biometric authentication system according to the second embodiment.

Hereinafter, an example of the server, the biometric authentication system, and the program according to the present embodiment will be described with reference to the attached drawings.

(First Embodiment)
FIG. 1 is a diagram showing an example of the overall configuration of the biometric authentication system according to the first embodiment. First, an example of the overall configuration of the biometric authentication system according to the present embodiment will be described with reference to FIG.

As shown in FIG. 1, the biometric authentication system according to the present embodiment includes a client terminal 1 and a biometric authentication server 2. The client terminal 1 and the biometric authentication server 2 are connected by a network NT such as the Internet.

The client terminal 1 is, for example, a PC (Personal Computer) having a calculation function, a storage function, an input / output function, and the like. Further, as shown in FIG. 1, the client terminal 1 is connected to the biosensor 3 according to a serial bus standard such as USB (Universal Serial Bus).

Here, the biosensor 3 is an example of a detection unit capable of detecting biometric information such as fingerprints and veins of the user of the client terminal 1. In the present embodiment, the client terminal 1 takes in the biometric information detected by the biosensor 3 after converting it into a data format in which various processes can be executed by the processor possessed by the client terminal 1.

Further, as shown in FIG. 1, the client terminal 1 includes a CPU (Central Processing Unit) 101, a ROM (Read Only Memory) 102, a RAM (Random Access Memory) 103, a display device 104, an input device 105, and the like.

The CPU 101 is an example of a processor that reads and executes a program stored in a storage device such as a ROM 102. The ROM 102 stores various information such as a program executed by the CPU 101. The RAM 103 temporarily stores various data used when the CPU 101 executes a program to execute various arithmetic processes. The display device 104 is a liquid crystal display, an organic display, or the like, and can display various types of information. The input device 105 is a keyboard, a touch panel, or the like, and can input various information.

The biometric authentication server 2 is, for example, a server having a calculation function, a storage function, an input / output function, and the like. Further, the biometric authentication server 2 includes a storage capable of storing the biometric information of the user of the client terminal 1. Further, as shown in FIG. 1, the biometric authentication server 2 includes a CPU 201, a ROM 202, a RAM 203, a storage device 204, and the like.

The CPU 201 is an example of a processor that reads and executes a program stored in a ROM 202, a storage device 204, or the like. The ROM 202 stores various information such as a program executed by the CPU 201. The RAM 203 temporarily stores various data used when the CPU 201 executes a program to execute various arithmetic processes. The storage device 204 is an HDD (Hard Disk Drive), an SSD (Solid State Drive), or the like, and stores various information used for authenticating the biometric information of the user of the program executed by the CPU 201 and the user of the client terminal 1.

FIG. 2 is a diagram showing an example of a functional configuration of a client terminal and a biometric authentication server included in the biometric authentication system according to the first embodiment. Next, an example of the functional configuration of the client terminal 1 and the biometric authentication server 2 included in the biometric authentication system according to the present embodiment will be described with reference to FIG.

First, an example of the functional configuration of the client terminal 1 will be described.

As shown in FIG. 2, the client terminal 1 includes an encryption unit 111 and a communication unit 112. In the present embodiment, the client terminal 1 realizes these functional configurations by executing a program stored in the ROM 102 or the like by the CPU 101, but the present invention is not limited to this, and one of these functional configurations is used. Part or all may be realized by dedicated hardware (circuit).

When registering the biometric information of the user of the client terminal 1, the encryption unit 111 uses a preset encryption key (hereinafter referred to as a fixed key) to detect the biometric information by the biosensor 3 and the client encryption key. This is an example of an encryption unit that generates registration information encrypted with.

Here, the biometric information encrypted by the encryption unit 111 may be the biometric information (for example, an image of the biometric information) itself detected by the biosensor 3, or the biometric information detected by the biosensor 3 may be used. It may be templated information. The biometric information template is a feature point or the like of an image of biometric information detected by the biosensor 3.

Further, here, the client encryption key is an encryption key preset in the client terminal 1. Further, the client encryption key is preferably an encryption key different from the fixed key.

In the present embodiment, the encryption unit 111 generates the biometric information detected by the biometric sensor 3 and the information obtained by collectively encrypting the client encryption key as the registration information, but the present invention is not limited to this. , The biometric information detected by the biometric sensor 3, and the information in which each of the client encryption key is encrypted separately may be generated as the registration information. Further, when the encryption unit 111 authenticates the biometric information of the user of the client terminal 1, the authentication information obtained by encrypting the biometric information detected by the biometric sensor 3 and the client encryption key with a fixed key is used. Generate.

In the present embodiment, the encryption unit 111 generates the biometric information detected by the biometric sensor 3 and the information obtained by collectively encrypting the client encryption key as authentication information, but the present invention is not limited to this. , The biometric information detected by the biometric sensor 3, and the information obtained by separately encrypting each of the client encryption key may be generated as the authentication information.

The communication unit 112 is an example of a transmission unit that transmits the registration information generated by the encryption unit 111 to the biometric authentication server 2 via the network NT when registering the biometric information of the user of the client terminal 1. ..

Further, when the communication unit 112 authenticates the biometric information of the user of the client terminal 1, the communication unit 112 transmits the authentication information generated by the encryption unit 111 to the biometric authentication server 2 via the network NT. Then, the communication unit 112 receives the execution result of the biometric information collation process by the biometric authentication server 2 from the biometric authentication server 2 via the network NT. After that, the client terminal 1 executes the authentication process of the user of the client terminal 1 based on the execution result of the received collation process.

In the present embodiment, the client terminal 1 executes the authentication process of the user of the client terminal 1, but the present invention is not limited to this, and the biometric authentication server 2 performs the authentication process of the user of the client terminal 1. You can do it. In that case, the communication unit 112 receives the execution result of the authentication process of the user of the client terminal 1 from the biometric authentication server 2 via the network NT. Further, when the biometric authentication server 2 executes the authentication process of the user of the client terminal 1, the communication unit 112 succeeds in authenticating the client terminal 1 from the biometric authentication server 2 via the network NT. You may receive the login destination information that makes it possible to identify the login destination that is the terminal that can log in as the execution result of the authentication process.

Next, an example of the functional configuration of the biometric authentication server 2 will be described.

As shown in FIG. 2, the biometric authentication server 2 includes a communication unit 211 and an encryption / decryption unit 212. In the present embodiment, the biometric authentication server 2 has a program in which the CPU 201 is stored in the ROM 202 or the like. By executing, these functional configurations are realized, but the present invention is not limited to this, and a part or all of these functional configurations may be realized by dedicated hardware (circuit).

The communication unit 211 is an example of a reception unit that receives registration information from the client terminal 1 via the network NT. Further, the communication unit 211 receives the authentication information from the client terminal 1 via the network NT. Further, the communication unit 211 transmits the execution result of the collation processing of the biometric information of the user of the client terminal 1 to the client terminal 1 via the network NT.

In the present embodiment, in order to execute the authentication process of the user of the client terminal 1 on the client terminal 1, the execution result of the biometric information collation process of the user of the client terminal 1 is transmitted to the client terminal 1. When the biometric authentication server 2 executes the authentication process of the user of the client terminal 1, the communication unit 211 transmits the execution result of the biometric information authentication process of the user of the client terminal 1 to the client terminal 1. do.

The encryption / decryption unit 212 decrypts the registration information received by the communication unit 211 with a fixed key which is a preset encryption key, and acquires (extracts) the biometric information and the client encryption key. Next, the encryption / decryption unit 212 encrypts the biometric information decrypted from the registered information with the client encryption key decrypted from the registered information.

Then, the encryption / decryption unit 212 stores the encrypted biometric information in the storage device 204. In the present embodiment, the encryption / decryption unit 212 stores the encrypted biometric information in the storage device 204 in association with the identification information of the user of the client terminal 1 from which the registration information is transmitted. In addition, the encryption / decryption unit 212 destroys the client encryption key used for encrypting the biometric information. Here, the destruction of the client encryption key is a process of deleting the client encryption key that is decrypted from the registration information and temporarily stored in the RAM 203 or the like of the biometric authentication server 2 from the biometric authentication server 2.

As a result, the client encryption key used for encrypting the biometric information in the biometric authentication server 2 does not remain stored in the biometric authentication server 2, and the administrator of the biometric authentication server 2 does not know the client encryption key. Even if the biometric information leaks from the biometric authentication server 2, it is difficult to decrypt the biometric information. As a result, the possibility of leakage of biometric information stored in the biometric authentication server 2 can be reduced.

Further, the encryption / decryption unit 212 decrypts the authentication information received by the communication unit 211 with a fixed key, and acquires (extracts) the biometric information and the client encryption key. Next, the encryption / decryption unit 212 decrypts the biometric information stored in the storage device 204 by the client encryption key decrypted from the authentication information. In the present embodiment, the encryption / decryption unit 212 stores the biometric information stored in the storage device 204 in association with the identification information of the user of the client terminal 1 that is the source of the authentication information. Decrypt. Then, the encryption / decryption unit 212 contains the biometric information decrypted from the authentication information and the biometric information stored in the storage device 204 (in other words, the biometric information decrypted by the client encryption key decrypted from the authentication information). Performs a collation process to compare ,. Further, the encryption / decryption unit 212 destroys the client encryption key decrypted from the authentication information.

In the present embodiment, since the user authentication process is performed on the client terminal 1, the biometric authentication server 2 collates the biometric information decoded from the authentication information with the biometric information stored in the storage device 204. Although only the processing is executed, when the bioauthentication server 2 executes the user authentication processing, the encryption / decryption unit 212 authenticates the user of the client terminal 1 based on the execution result of the collation processing. The process shall be executed.

FIG. 3 is a diagram for explaining an example of the biometric information registration process of the user of the client terminal in the biometric authentication system according to the first embodiment. Next, an example of the biometric information registration process of the user of the client terminal 1 in the biometric authentication system according to the present embodiment will be described with reference to FIG.

When the input device 105 or the like of the client terminal 1 instructs the execution of the user's biometric information registration process and the biosensor 3 detects the image of the user's biometric information, the encryption unit 111 performs the biosensor 3 Acquires an image of biometric information detected by (step S301). In the present embodiment, it is assumed that the image of the biometric information detected by the biometric sensor 3 is encrypted. Therefore, when the encryption unit 111 acquires the image of the biometric information from the biosensor 3, the encryption unit 111 decrypts the image of the acquired biometric information.

Next, the encryption unit 111 converts the acquired image of the biometric information into a biometric information template (step S302). Next, the encryption unit 111 encrypts the biometric information template and the client encryption key with a fixed key to generate registration information (step S303). Then, the communication unit 112 transmits the generated registration information to the biometric authentication server 2 via the network NT by encrypted communication (step S304).

The communication unit 211 of the biometric authentication server 2 receives the registration information from the client terminal 1 via the network NT. The encryption / decryption unit 212 decrypts the registration information received by the communication unit 211 with a fixed key, and extracts the biometric information template and the client encryption key from the registration information (step S305).

Next, the encryption / decryption unit 212 encrypts the extracted biometric information template with the client encryption key (step S306), and stores the encrypted biometric information template in the storage device 204 (step S307). After that, the encryption / decryption unit 212 destroys the client encryption key (step S308).

FIG. 4 is a flowchart showing an example of a flow of registration information transmission processing by a client terminal included in the biometric authentication system according to the first embodiment. Next, an example of the flow of the registration information transmission process by the client terminal 1 will be described with reference to FIG.

When the input device 105 or the like of the client terminal 1 instructs the execution of the authentication process of the user's biometric information and the biosensor 3 detects the image of the user's biometric information, the encryption unit 111 performs the biosensor 3 Acquires an image of biometric information detected by (step S401). In the present embodiment, it is assumed that the image of the biometric information detected by the biometric sensor 3 is encrypted. Therefore, when the encryption unit 111 acquires the image of the biometric information from the biosensor 3, the encryption unit 111 decrypts the image of the acquired biometric information.

Next, the encryption unit 111 converts the acquired image of the biometric information into a biometric information template (step S402). Further, the encryption unit 111 sets the client encryption key (step S403). Then, the encryption unit 111 generates registration information in which the biometric information template and the client encryption key are encrypted with a preset fixed key (step S404). After that, the communication unit 112 transmits the registration information generated by the encryption unit 111 to the biometric authentication server 2 via the network NT by encrypted communication (step S405).

FIG. 5 is a flowchart showing an example of the flow of the biometric information template registration process by the biometric authentication server of the biometric authentication system according to the first embodiment. Next, an example of the flow of the biometric information template registration process by the biometric authentication server 2 will be described with reference to FIG.

The communication unit 211 receives the registration information from the client terminal 1 via the network NT. Next, the encryption / decryption unit 212 decrypts the registration information received by the communication unit 211 with a fixed key, and acquires (extracts) the biometric information template and the client encryption key from the registration information (step S501). ..

Further, the encryption / decryption unit 212 encrypts the biometric information template decrypted from the registered information with the client encryption key decrypted from the registered information (step S502). Then, the encryption / decryption unit 212 stores the encrypted biometric information template in the storage device 204 (step S503). Further, the encryption / decryption unit 212 destroys the client encryption key used for encrypting the biometric information template (step S504).

FIG. 6 is a diagram for explaining an example of authentication processing of biometric information of a user of a client terminal in the biometric authentication system according to the first embodiment. Next, an example of the biometric information authentication process of the user of the client terminal 1 in the biometric authentication system according to the present embodiment will be described with reference to FIG.

When the input device 105 or the like of the client terminal 1 instructs the execution of the authentication process of the user's biometric information and the biosensor 3 detects the user's biometric information, the encryption unit 111 detects it by the biosensor 3. The biometric information to be obtained is acquired (step S601), and the acquired biometric information is converted into a biometric information template (step S602).

Next, the encryption unit 111 encrypts the biometric information template and the client encryption key with a fixed key to generate authentication information (step S603). Then, the communication unit 112 transmits the generated authentication information to the biometric authentication server 2 via the network NT by encrypted communication (step S604).

The communication unit 211 of the biometric authentication server 2 receives the authentication information from the client terminal 1 via the network NT. The encryption / decryption unit 212 decrypts the authentication information received by the communication unit 211 with a fixed key, and extracts the biometric information template and the client encryption key from the authentication information (step S605).

Next, the encryption / decryption unit 212 decrypts the encrypted biometric information template stored in the storage device 204 with the client encryption key extracted from the authentication information (step S606). Then, the encryption / decryption unit 212 executes a collation process for comparing the biometric information template stored in the storage device 204 with the biometric information template extracted from the authentication information (step S607). Further, the encryption / decryption unit 212 destroys the client encryption key extracted from the authentication information. After that, the communication unit 211 transmits the execution result of the collation process to the client terminal 1 via the network NT by encrypted communication (step S608).

FIG. 7 is a flowchart showing an example of a flow of authentication information transmission processing by the client terminal included in the biometric authentication system according to the first embodiment. Next, an example of the flow of the authentication information transmission process by the client terminal 1 will be described with reference to FIG. 7.

The encryption unit 111 acquires the biometric information detected by the biosensor 3 (step S701). Next, the encryption unit 111 converts the acquired biometric information into a biometric information template (step S702).

Further, the encryption unit 111 sets the client encryption key (step S703). Then, the encryption unit 111 generates the authentication information obtained by encrypting the biometric information template and the client encryption key with the fixed key (step S704). After that, the communication unit 112 transmits the authentication information generated by the encryption unit 111 to the biometric authentication server 2 via the network NT by encrypted communication (step S705).

FIG. 8 is a flowchart showing an example of a flow of biometric information collation processing by the biometric authentication server of the biometric authentication system according to the first embodiment. Next, an example of the flow of the biometric information collation processing by the biometric authentication server 2 will be described with reference to FIG.

The communication unit 211 receives the authentication information from the client terminal 1 via the network NT. Next, the encryption / decryption unit 212 decrypts the authentication information received by the communication unit 211 with a fixed key, and extracts the biometric information template and the client encryption key (step S801).

Further, the encryption / decryption unit 212 decrypts the biometric information template stored in the storage device 204 with the client encryption key decrypted from the authentication information (step S802). After that, the encryption / decryption unit 212 destroys the client encryption key decrypted from the authentication information (step S803). Then, the encryption / decryption unit 212 executes a collation process for comparing the biometric information template stored in the storage device 204 with the biometric information template decrypted from the authentication information (step S804). Further, the encryption / decryption unit 212 destroys the client encryption key decrypted from the authentication information. The communication unit 211 transmits the execution result of the collation process to the client terminal 1 via the network NT by encrypted communication (step S805).

As described above, according to the biometric authentication system according to the first embodiment, the client encryption key used when encrypting the biometric information is destroyed, so that the client used for encrypting the biometric information in the biometric authentication server 2. The encryption key does not remain stored in the biometric authentication server 2. As a result, since the administrator of the biometric authentication server 2 does not know the client encryption key, even if the biometric information leaks from the biometric authentication server 2, it is difficult to decrypt the biometric information. As a result, the possibility of leakage of biometric information stored in the biometric authentication server 2 can be reduced.

According to the biometric authentication system according to the first embodiment, the authentication information is decrypted by a fixed key to acquire the biometric information and the client encryption key, and the biometric information template is decrypted by the client encryption key. The biometric authentication system executes a verification process using the biometric information acquired from the authentication information and the biometric information decrypted by the client encryption key, and destroys the client encryption key. As a result, the biometric authentication system can reduce the possibility of leakage of biometric information even after the verification process.

(Second Embodiment)
In the present embodiment, in the biometric authentication server, the biometric information decrypted from the registered information is encrypted by the client encryption key and the server encryption key, and the biometric information encrypted by the client encryption key and the server encryption key is stored in the storage device. This is an example of In the following description, description of the same configuration as that of the first embodiment will be omitted.

FIG. 9 is a diagram for explaining an example of the biometric information registration process of the user of the client terminal in the biometric authentication system according to the second embodiment. Next, an example of the biometric information registration process of the user of the client terminal 1 in the biometric authentication system according to the present embodiment will be described with reference to FIG. In the following description, the same processing as in FIG. 3 described above will be designated by the same reference numerals, and the description thereof will be omitted.

The encryption / decryption unit 212 of the biometric authentication server 2 encrypts the biometric information template decrypted from the registration information with the client encryption key decrypted from the registration information and the server encryption key preset in the biometric authentication server 2. (Step S901), the encrypted biometric information template is stored in the storage device 204 (step S902).

As a result, the encryption key used for encrypting the biometric information template in the biometric authentication server 2 is different from the client encryption key set in the client terminal 1 and the server encryption key set in the biometric authentication server 2. That is, neither the user of the client terminal 1 nor the administrator of the biometric authentication server 2 knows the encryption key used for encrypting the biometric information template, and by any chance, the biometric information template from the biometric authentication server 2 Even if the data is leaked, it is difficult to decrypt the biometric information template. As a result, the possibility of leakage of the biometric information template stored in the biometric authentication server 2 can be reduced.

For example, the encryption / decryption unit 212 generates a synthetic encryption key in which a client encryption key decrypted from the registration information and a server encryption key are combined. Then, the encryption / decryption unit 212 encrypts the biometric information template with the generated synthetic encryption key. Here, the synthetic encryption key may be, for example, a hash value of a client encryption key and a server encryption key simply combined, a client encryption key, and a server encryption key.

After that, the encryption / decryption unit 212 discards the client encryption key decrypted from the registration information (step S308).

FIG. 10 is a diagram for explaining an example of collation processing of the biometric information of the user of the client terminal 1 in the biometric authentication system according to the second embodiment. Next, an example of the biometric information authentication process of the user of the client terminal 1 in the biometric authentication system according to the present embodiment will be described with reference to FIG. In the following description, the same processing as in FIG. 6 described above will be designated by the same reference numerals, and the description thereof will be omitted.

The encryption / decryption unit 212 of the bio-authentication server 2 generates a synthetic encryption key in which the client encryption key decrypted from the registration information and the server encryption key preset in the bio-authentication server 2 are combined (step S1001). ). Next, the encryption / decryption unit 212 decrypts the biometric information template stored in the storage device 204 with the generated synthetic encryption key (step S1002).

The encryption / decryption unit 212 compares the biometric information template stored in the storage device 204 (in other words, the biometric information template decrypted by the synthetic encryption key) with the biometric information template decrypted from the authentication information. The process is executed (step S607). Further, the encryption / decryption unit 212 destroys the client encryption key extracted from the authentication information. After that, the communication unit 211 transmits the execution result of the verification process by the encryption / decryption unit 212 to the client terminal 1 via the network NT by encrypted communication (step S608).

As described above, according to the biometric authentication system according to the second embodiment, neither the user of the client terminal 1 nor the administrator of the biometric authentication server 2 knows the encryption key used for encrypting the biometric information. Even if the biometric information leaks from the biometric authentication server 2, it is difficult to decrypt the biometric information. As a result, the possibility of leakage of biometric information stored in the biometric authentication server 2 can be reduced.

(Third Embodiment)
This embodiment is an example in which the client encryption key is an encryption key based on information set for each user of the client terminal. In the following description, description of the same configuration as that of the above-described embodiment will be omitted.

In the present embodiment, the encryption unit 111 of the client terminal 1 sets the client encryption key based on the information set for each user of the client terminal 1. For example, the encryption unit 111 sets a hash value of information set for each user of the client terminal 1 as a client encryption key. Here, the set value is, for example, an ID of the user of the client terminal 1 or a value preset by the user of the client terminal 1. Then, the encryption unit 111 encrypts the client encryption key and the biometric information based on the set value with the fixed key to generate the registration information or the authentication information.

As described above, according to the biometric authentication system according to the third embodiment, the user of the client terminal 1 can set the client encryption key without being aware of the setting of the client encryption key. It is possible to prevent the client encryption key from being inadvertently leaked.

(Fourth Embodiment)
This embodiment is an example in which the client encryption key is an encryption key based on information set for each client terminal. In the following description, description of the same configuration as that of the above-described embodiment will be omitted.

In the present embodiment, the encryption unit 111 of the client terminal 1 sets the client encryption key based on the information set for each client terminal 1. Here, the information set for each client terminal 1 is, for example, an individual information of the GUID (Globally Unique Identifier) of the client terminal 1 or a value randomly generated for each client terminal 1 belonging to a preset group. be.

As described above, according to the biometric authentication system according to the fourth embodiment, even if the user who authenticates the biometric information is the same, another client different from the client terminal 1 used by the user for registering the biometric information. It is not possible to authenticate biometric information using a terminal. As a result, it is possible to prevent the biometric information of the user of the client terminal 1 from being forged by an unauthorized means and being authenticated by another client terminal using the biometric information.

The software program executed by the client terminal 1 and the biometric authentication server 2 of the present embodiment is provided by being incorporated in a storage device such as a ROM 102 or 202 in advance, but is a file in an installable format or an executable format. The software may be configured to be recorded and provided on a computer-readable recording medium such as a CD-ROM, a flexible disk (FD), a CD-R, or a DVD (Digital Versatile Disk).

Further, the software program executed by the client terminal 1 and the biometric authentication server 2 of the present embodiment is stored on a computer connected to a network such as the Internet, and is configured to be provided by downloading via the network. Is also good. Further, the software program executed by the client terminal 1 and the biometric authentication server 2 of the present embodiment may be configured to be provided or distributed via a network such as the Internet.

The software program executed on the client terminal 1 of the present embodiment has a module configuration including the above-mentioned parts (encryption unit 111 and communication unit 112), and as actual hardware, a processor such as the CPU 101 is the ROM 102. By reading and executing the software program from, each of the above units is loaded on the main storage device, and the encryption unit 111 and the communication unit 112 are generated on the main storage device.

Further, the software program executed by the biometric authentication server 2 of the present embodiment has a module configuration including the above-mentioned parts (communication unit 211 and encryption / decryption unit 212), and the actual hardware includes the CPU 201 and the like. When the processor of the above reads a software program from the ROM 202 and executes it, each of the above parts is loaded on the main storage device, and the communication unit 211 and the encryption / decryption unit 212 are generated on the main storage device. ..

1 Client terminal 2 Biometric authentication server 3 Biometric sensor 101,201 CPU
102, 202 ROM
103,203 RAM
104 Display device 105 Input device 111 Encryption unit 112, 211 Communication unit 204 Storage device 212 Encryption / decryption unit NT network

Claims (9)

Storage device and
A receiver that receives registration information from a client terminal,
The registration information is decrypted by a preset fixed key to acquire the biometric information of the user of the client terminal and the client encryption key, and the biometric information decrypted from the registration information is obtained from the registration information. An encryption / decryption unit that encrypts with the client encryption key decrypted from the above, stores the biometric information encrypted with the client encryption key in the storage device, and destroys the client encryption key.
Server with. The receiving unit receives the authentication information from the client terminal and receives the authentication information.
The encryption / decryption unit decrypts the authentication information with a preset fixed key, acquires the biometric information and the client encryption key, and decrypts the authentication information from the client encryption key. , The biometric information stored in the storage device is decrypted, a collation process for comparing the decoded biometric information with the biometric information decoded from the authentication information is executed, and the client encryption key is executed. The server according to claim 1. The encryption / decryption unit encrypts the biometric information decrypted from the registered information with the client encryption key and a preset server encryption key, and encrypts the biometric information with the client encryption key and the server encryption key. The server according to claim 1 or 2, which stores biometric information in the storage device. A biometric authentication system having a client terminal and a server.
The client terminal
A detector that detects the biometric information of the user of the client terminal,
An encryption unit that generates registration information that encrypts the biometric information detected by the detection unit and the client encryption key by a fixed key set in advance.
A transmission unit that transmits the registration information generated by the encryption unit to the server, and a transmission unit.
With
The server
Storage device and
A receiving unit that receives the registration information from the client terminal, and
The registration information is decrypted by a preset fixed key, the biometric information and the client encryption key are acquired, and the biometric information decrypted from the registration information is decrypted from the registration information. An encryption / decryption unit that encrypts with an encryption key, stores the biometric information encrypted with the client encryption key in the storage device, and destroys the client encryption key.
A biometric authentication system equipped with. The encryption unit generates authentication information that encrypts the biometric information detected by the detection unit and the client encryption key with a fixed key set in advance.
The transmission unit transmits the authentication information generated by the encryption unit to the server.
The receiving unit receives the authentication information from the client terminal and receives the authentication information.
The encryption / decryption unit decrypts the authentication information with a preset fixed key, acquires the biometric information and the client encryption key, and decrypts the authentication information from the client encryption key. The biometric information stored in the storage device is decrypted, a collation process for comparing the decrypted biometric information with the biometric information decrypted from the authentication information is executed, and the client encryption key is used. The biometric authentication system according to claim 4, which is to be discarded. The biometric authentication system according to claim 4 or 5, wherein the client encryption key is an encryption key based on information set for each user of the client terminal. The biometric authentication system according to claim 4 or 5, wherein the client encryption key is information based on information set for each client terminal. Computer,
A receiver that receives registration information from a client terminal,
The registration information is decrypted by a preset fixed key to acquire the biometric information of the user of the client terminal and the client encryption key, and the biometric information decrypted from the registration information is obtained from the registration information. An encryption / decryption unit that encrypts with the client encryption key decrypted from the above, stores the biometric information encrypted with the client encryption key in a storage device, and destroys the client encryption key.
A program to function as. Computer,
An encryption unit that generates registration information that encrypts the biometric information of the user of the client terminal and the client encryption key using a fixed key set in advance.
A transmission unit that transmits the registration information generated by the encryption unit to the server, and a transmission unit.
A program to function as.

Images