JP5862026B2 - Vein authentication device, vein authentication system, and vein authentication method - Google Patents

Description

  The present invention relates to a vein authentication device, a vein authentication system, and a vein authentication method.

  As one mode of biometric authentication, vein authentication is known. Such vein authentication is difficult to replicate because it uses veins, which are internal organs, and it is recognized that biometric authentication is an authentication method suitable for personal authentication. However, when the environment changes between the time when vein information is registered in advance for reference and the time when vein information is input, for example, when a temperature difference occurs, blood vessels contract even if the same user is used. Or since it expand | swells, authentication precision may fall.

  As an example of an authentication technique corresponding to such a change in environment, there is a personal authentication system that uses environmental information such as temperature, weather, and time for personal authentication. In this personal authentication system, based on the authentication result by the high-precision personal authentication device that authenticates using a personal identification number or fingerprint, user movement detection information detected by the tracking sensor, and personal schedule information, the personal authentication means Narrow down candidates for authentication. On that basis, the personal authentication means, for the narrowed-down users, personal characteristics such as height and weight extracted by the personal characteristic extraction sensor and environmental information such as temperature, weather and time detected by the environmental information sensor Is applied to the personal authentication rule to execute personal authentication.

International Publication No. 2006/006533

  However, the above-described conventional technology still has a problem that it is impossible to prevent a decrease in authentication accuracy.

  In other words, the personal authentication system described above is merely for authenticating an individual by incorporating environmental information as an element of a condition called a personal authentication rule without using user-specific authentication information. Such a personal authentication rule is merely a conditioned condition regarding a user's behavior, and there is no guarantee that another user will not take the action just because a certain user takes a specific action. Thus, even if a plurality of users perform personal authentication using a personal authentication rule that can satisfy the same condition, a user's misidentification occurs, so that a reduction in authentication accuracy cannot be prevented.

  The disclosed technology has been made in view of the above, and an object thereof is to provide a vein authentication device, a vein authentication system, and a vein authentication method that can prevent a decrease in authentication accuracy.

The vein authentication apparatus disclosed in the present application includes an additional unit that adds vein information that has been successfully vein-authenticated and the temperature at the time of vein authentication to the storage unit as vein information for reference. Furthermore, the vein authentication device has an acquisition unit that acquires the temperature. Further, the vein authentication device includes an extraction unit that extracts vein information used for collation with the reference vein information from the authentication target vein image when a vein image to be authenticated is input. Further, the vein authentication device and the vein information to be authenticated extracted by the extraction unit, when the gas temperature and the vein authentication acquired by the acquisition unit of the vein information for reference stored in the storage unit The authentication unit authenticates the reference vein information with the smallest difference in temperature between the reference temperature and the reference vein information. The storage unit stores the reference vein information corresponding to each of a plurality of temperature zones. Then, when there is no vein information for reference in a temperature zone corresponding to the temperature at the time of vein authentication that succeeded in vein authentication, the additional unit refers to the vein information that has succeeded in vein authentication and the temperature at the time of vein authentication. Is added to the storage unit as vein information.

  According to one aspect of the vein authentication device disclosed in the present application, it is possible to prevent a reduction in authentication accuracy.

FIG. 1 is a diagram schematically illustrating an external configuration of a vein authentication device according to the first embodiment. FIG. 2 is a functional block diagram illustrating the configuration of the vein authentication device according to the first embodiment. FIG. 3 is a diagram illustrating a configuration example of information stored in the vein data storage unit. FIG. 4 is a diagram illustrating a transition example of data stored in the vein data storage unit. FIG. 5 is a flowchart illustrating the procedure of the registration process according to the first embodiment. FIG. 6 is a flowchart illustrating the procedure of vein authentication processing according to the first embodiment. FIG. 7 is a schematic diagram illustrating an example of a computer that executes a vein authentication program according to the first and second embodiments.

  Embodiments of a vein authentication device, a vein authentication system, and a vein authentication method disclosed in the present application will be described below in detail with reference to the drawings. Note that this embodiment does not limit the disclosed technology. Each embodiment can be appropriately combined within a range in which processing contents are not contradictory.

[External configuration of vein authentication device]
FIG. 1 is a diagram schematically illustrating an external configuration of a vein authentication device according to the first embodiment. A vein authentication device 10 shown in FIG. 1 performs vein authentication in which vein data obtained from a vein image obtained by imaging a vein of a user's palm is compared with vein data registered in advance.

  As shown in FIG. 1, the vein authentication device 10 is provided with a lamp 11b and a speaker 11c for notifying the user of information related to vein authentication on a plane on which the guide portion 11a is provided. In the example of FIG. 1, the case where the lamp 11b and the speaker 11c are provided on the same plane as the guide portion 11a is illustrated. However, the lamp 11b and the speaker 11c are not necessarily provided on the same plane as the guide portion 11a. Can be provided at any location.

  Among these, the guide part 11a is a sign for guiding the palm of the user to the imaging range of the vein sensor 14 described later. In the example of FIG. 1, the case where the guide portion 11a is formed as a flat surface is illustrated, but the guide portion 11a may have a convex portion that is curved in accordance with the shape of the palm and fingers.

  The lamp 11b is an LED (Light Emitting Diode) that represents various states related to vein authentication by switching the number of lighting or lighting color. As an example, when the device 11 is performing vein authentication, the lamp 11b notifies the progress of vein authentication by increasing the number of lights as the authentication is completed among the four lamps. As another example, the lamp 11b is lit in green when the vein authentication is successful, and is lit in red when the vein authentication fails, thereby notifying the result of the vein authentication.

  The speaker 11c is an audio output device that outputs various states related to vein authentication as audio. As an example, when the vein authentication is successful or the vein authentication is unsuccessful, the speaker 11c notifies the result of the vein authentication by outputting a notification sound or a message to that effect.

  Here, the vein authentication apparatus 10 according to the present embodiment adds vein data that has been successfully vein-authenticated and the temperature at the time of vein authentication to the storage unit as vein data for reference. Furthermore, the vein authentication device 10 acquires the temperature. Further, when a vein image to be authenticated is input, the vein authentication device 10 extracts vein data used for matching with reference vein data from the vein image to be authenticated. Further, the vein authentication device 10 performs authentication by comparing the extracted vein data to be authenticated with the reference vein data corresponding to the air temperature previously acquired from the reference vein data stored in the storage unit. To do.

  As described above, the vein authentication apparatus 10 according to the present embodiment performs vein authentication using reference vein data with a temperature difference as small as possible with respect to the temperature at which the vein image is input. The effect of the expansion and contraction of the substrate can be minimized. For this reason, in the vein authentication device 10 according to the present embodiment, the person rejection rate and the other person acceptance rate can be reduced. Therefore, according to the vein authentication apparatus 10 according to the present embodiment, it is possible to prevent a decrease in authentication accuracy.

  Furthermore, in the vein authentication device 10 according to the present embodiment, vein data that has been successfully vein-authenticated is added as reference vein data together with the temperature at the time of vein authentication. Therefore, reference vein data is not necessarily registered from the beginning. There is no need. Therefore, in the vein authentication apparatus 10 according to the present embodiment, it is possible to register reference vein data for each temperature without the trouble of collecting vein images after raising and lowering the temperature during registration. Moreover, although the example which acquires temperature data and preserve | saves temperature data as reference vein data at the time of vein authentication was illustrated above, the temperature data of the living body itself to be authenticated can be used instead of the temperature data. . According to this method, since authentication is performed using reference data based on the temperature of the living body itself at the time of authentication, it is possible to perform authentication according to the state of the living body at the time of authentication.

[Functional configuration of vein authentication device]
FIG. 2 is a functional block diagram illustrating the configuration of the vein authentication device according to the first embodiment. As illustrated in FIG. 2, the vein authentication device 10 includes a notification unit 11, a communication I / F unit 12, an air temperature acquisition unit 13, a vein sensor 14, a vein data storage unit 15, a registration unit 16, and an extraction unit. The unit 17, the authentication unit 18, and the addition unit 19 are included. In the example of FIG. 2, only one user's vein data is registered in the later-described vein data storage unit 15 via an authentication server (not shown) for the first time, and the temperature is changed each time subsequent vein authentication succeeds. Assume an example in which reference vein data is expanded by adding corresponding vein data.

  Among these, the notification unit 11 is a processing unit that notifies the user of information related to vein authentication. Examples of the notification unit 11 include the lamp 11b and the speaker 11c described with reference to FIG. As an example, the progress of vein authentication, the result of vein authentication, and the like are notified to the user through the lamp 11b and the speaker 11c.

  The communication I / F unit 12 is an interface that performs communication control with another device, for example, an authentication server (not shown). For example, the communication I / F unit 12 receives vein data and temperature that are initially registered from the authentication server. For example, a network interface card (NIC) such as a LAN card or a modem can be adopted as the communication I / F unit 12.

  The air temperature acquisition unit 13 is a processing unit that acquires the outside air temperature around the guide unit 11 a of the vein authentication device 10. As an example, the air temperature acquisition unit 13 acquires the outside air temperature around the guide unit 11a and outputs it to the authentication unit 18 (described later) when a vein image is captured by the vein sensor 14 (described later). A known temperature sensor can be applied to the temperature acquisition unit 13. The air temperature acquisition unit 13 can be replaced with a living body temperature acquisition unit (not shown) that measures the temperature of the living body described above.

  The vein sensor 14 is a sensor that acquires a vein image of the palm of the user that is close to or in contact with the guide portion 11a. As an example, a vein image is acquired by emitting near-infrared light to the palm of the user and receiving the reflected light. The vein sensor 14 may be either a contact type or a non-contact type.

  The vein data storage unit 15 is a storage unit that stores vein data. As an example, the vein data storage unit 15 is referred to by an authentication unit 18 described later at the time of vein authentication in order to collate with vein data obtained from a vein image input from the vein sensor 14. As another example, the vein data storage unit 15 is accessed by an adding unit 19 to be described later in order to add vein data for which vein authentication is successful to reference vein data. In the following description, the vein data in which the feature amount is extracted from the vein image acquired by the vein sensor 14 by the extraction unit 17 described later is referred to as “input vein data”. Furthermore, vein data referred to for authenticating input vein data and stored in the vein data storage unit 15 may be referred to as “registered vein data”.

  As one aspect of the vein data storage unit 15, user ID (identification), temperature zone type, presence / absence of registered vein data, and data associated with vein data can be adopted. The “temperature zone level” here refers to a temperature zone level obtained by dividing the temperature into predetermined intervals. For example, the temperature zone level “A” indicates vein data collected when the temperature is less than 0 degrees, and the temperature zone level “B” indicates vein data collected when the temperature is 0 degrees or more and less than 10 degrees. The belt level “C” indicates vein data collected when the temperature is 10 degrees or more and less than 20 degrees. The temperature zone level “D” indicates vein data collected when the temperature is 20 degrees or more and less than 30 degrees, and the temperature zone level “E” indicates vein data collected when the temperature is 30 degrees or more and less than 40 degrees. It refers to vein data collected when the temperature is 40 degrees or more and less than 50 degrees. Further, when the temperature is the temperature of the living body itself, the temperature of the living body is handled as biological data collected in a predetermined temperature range. As the temperature range of the living body, a narrow temperature range is set with respect to the temperature range of the air temperature.

  FIG. 3 is a diagram illustrating a configuration example of information stored in the vein data storage unit 15. The example of the user with the user ID “0000001” shown in FIG. 3 indicates that three vein data corresponding to the temperature of 0 degrees or more and less than 30 degrees are registered. In the example of the user with the user ID “0000002” shown in FIG. 3, only one vein data corresponding to an air temperature of 10 degrees or more and less than 20 degrees is registered. Further, in the example of the user with the user ID “0000003” shown in FIG. 3, it is indicated that two vein data corresponding to the temperature of 20 degrees or more and less than 40 degrees are registered. In this example, each vein data is stored in a binary format.

  The registration unit 16 is a processing unit that registers vein data in the vein data storage unit 15. As one aspect, when receiving a vein data registration request from an authentication server (not shown), the registration unit 16 receives the vein data and the temperature together with the user ID from the authentication server. Then, the registration unit 16 newly creates a record of the user ID received from the authentication server in the vein data storage unit 15 and registers the vein data in association with the temperature zone level corresponding to the temperature.

  The extraction unit 17 is a processing unit that extracts a feature amount related to a vein blood vessel pattern from a vein image acquired by the vein sensor 14. As an aspect, the extraction unit 17 extracts a blood vessel portion from a vein image and thins it, and extracts feature quantities such as the coordinates of branch points in the blood vessel, the length between the branch points, and the branch angle of the branch points. Then, the extraction unit 17 outputs the vein data obtained by extracting the feature amount from the vein image acquired by the vein sensor 14 to the later-described authentication unit 18 as input vein data. Here, the case where data relating to a branch point is extracted as the feature amount of the vein is illustrated, but other feature amounts, that is, data according to an authentication method adopted by the authentication unit 18 described later is extracted. be able to.

  The authentication unit 18 collates the input vein data extracted by the extraction unit 17 with the registered vein data corresponding to the temperature acquired by the temperature acquisition unit 13 among the registered vein data stored in the vein data storage unit 15. It is a processing unit that authenticates.

  As one aspect, the authentication unit 18 reads all registered vein data of the user corresponding to the temperature acquired by the temperature acquisition unit 13 among the registered vein data stored in the vein data storage unit 15. Then, the authentication unit 18 calculates a matching score between the registered vein data and the input vein data of each user. At this time, the authentication unit 18 performs vein authentication between the registered vein data having the maximum matching score and the input vein data when the maximum fire fighting score among the previously calculated matching scores is equal to or greater than a predetermined threshold. Judge as successful. The authentication unit 18 determines that the vein authentication has failed when the maximum fire fighting score is equal to or greater than a predetermined threshold. Note that the authentication unit 18 can employ an arbitrary authentication method such as a minutiae method, a pattern matching method, or a frequency analysis method.

  Here, the case where the authentication unit 18 performs collation between the input vein data and all registered vein data is illustrated, but the disclosed apparatus is not limited to this. For example, the disclosed apparatus creates narrowed-down data that represents simpler quantities than the vein data extracted by the extraction unit 17, and uses the narrowed-down data to narrow down registered vein data, thereby matching registered vein data It is also possible to collate after reducing the number of.

  The adding unit 19 is a processing unit that adds the input vein data that has been successfully subjected to vein authentication and the temperature at the time of vein authentication to the vein data storage unit 15 as registered vein data. As an aspect, when the authentication unit 18 determines that the vein authentication is successful, the adding unit 19 stores the registered vein data corresponding to the temperature zone level when the vein image is captured this time, as the vein data storage unit Search from 15. At this time, when the registered vein data is not registered in the vein data storage unit 15, the adding unit 19 adds a record of a user ID that has been successfully authenticated for veins and corresponds to the temperature range corresponding to the temperature. In addition, the input vein data is added to the vein data storage unit 15.

  FIG. 4 is a diagram illustrating a transition example of data stored in the vein data storage unit 15. In the example of FIG. 4, the transition of registered vein data related to the user with the user ID “0000005” is shown. For example, it is assumed that the initial registration via the authentication server is performed in an environment where the temperature is 15 degrees in the season “spring”. In this case, as illustrated in the upper part of FIG. 4, the vein data received via the authentication server is registered by the registration unit 16 in association with the temperature zone level “C” of the temperature of 10 degrees or more and less than 20 degrees. Next, it is assumed that vein authentication is successful between the input vein data and the registered vein data of the user ID “0000005” in an environment where the temperature is 28 degrees in the season “summer”. In this case, as shown in the middle part of FIG. 4, the input vein data is additionally registered by the adding unit 19 in association with the temperature zone level “D” of the temperature of 20 degrees or more and less than 30 degrees. Furthermore, it is assumed that the vein authentication is successful between the input vein data and the registered vein data with the user ID “0000005” in an environment where the temperature is 3 degrees in the season “winter”. In this case, as shown in the lower part of FIG. 4, the input vein data is additionally registered by the adding unit 19 in association with the temperature zone level “B” in which the temperature is 0 degree or more and less than 10 degrees.

  As described above, even when only one vein data is registered in the vein data storage unit 15 at the time of initial registration, vein data corresponding to various temperature zone levels is registered as registered vein data as time passes. Is possible.

  Note that various types of integrated circuits and electronic circuits can be employed for the registration unit 16, the extraction unit 17, the authentication unit 18, and the addition unit 19. For example, an ASIC (Application Specific Integrated Circuit) is an example of the integrated circuit. Examples of the electronic circuit include a central processing unit (CPU) and a micro processing unit (MPU).

  The vein data storage unit 15 can employ a semiconductor memory element or a storage device. For example, examples of the semiconductor memory device include a video random access memory (VRAM), a random access memory (RAM), and a flash memory. Examples of the storage device include storage devices such as a hard disk and an optical disk.

[Process flow]
Next, a processing flow of the vein authentication device according to the present embodiment will be described. Here, after (1) registration processing executed by the vein authentication device 10 is described, (2) vein authentication processing is described.

(1) Registration Process FIG. 5 is a flowchart illustrating a registration process procedure according to the first embodiment. Such registration processing is started when a registration request for vein data is received from an authentication server (not shown).

  As shown in FIG. 5, when a registration request for vein data is received from the authentication server (Yes at Step S101), the registration unit 16 receives the vein data and the temperature together with the user ID from the authentication server (Step S102). Then, the registration unit 16 newly creates a record of the user ID received from the authentication server in the vein data storage unit 15 and registers the vein data in association with the temperature range corresponding to the temperature (step S103). End the process.

(2) Vein Authentication Processing FIG. 6 is a flowchart illustrating the procedure of vein authentication processing according to the first embodiment. The vein authentication process is started when a vein image is acquired by the vein sensor 14.

  As illustrated in FIG. 6, when a vein image is acquired by the vein sensor 14 (Yes in step S301), the extraction unit 17 generates vein data by extracting a feature amount related to a vein blood vessel pattern from the vein image ( Step S302). And the temperature acquisition part 13 acquires the outside temperature around the guide part 11a (step S303).

  Subsequently, the authentication unit 18 reads all registered vein data of the user corresponding to the temperature acquired by the temperature acquisition unit 13 among the registered vein data stored in the vein data storage unit 15 (step S304).

  Then, the authentication unit 18 performs vein authentication by collating the input vein data with each user's registered vein data (step S305). Then, the authentication unit 18 turns on the lamp 11b according to the result of vein authentication, outputs a notification sound or a message to the speaker 11c, or outputs the result of vein authentication to an authentication server (not shown). The result is notified (step S306).

  Thereafter, when the authentication unit 18 determines that the vein authentication is successful (Yes in step S307), the adding unit 19 uses the registered vein data corresponding to the temperature zone level when the vein image is captured this time as veins. A search is performed from the data storage unit 15 (step S308). If vein authentication fails (No at step S307), the process proceeds to step S301.

  Here, if the registered vein data is not registered (Yes at step S309), a record of a user ID that has been successfully authenticated for veins is added, and the input vein data is associated with the temperature level corresponding to the temperature. Is added to the vein data storage unit 15 (step S310). After additional registration of input vein data, the process proceeds to step S301.

  On the other hand, when the registered vein data is already registered (No at Step S309), it is not necessary to register again. Therefore, the process proceeds to step S301 without performing additional registration of input vein data. If the input vein data that has succeeded in vein authentication this time has a higher collation score than the registered vein data additionally registered before that, the registered vein data may be overwritten. In addition, when the temperature data is handled as the temperature of the living body itself, the processing described above is the same.

[Effect of Example 1]
As described above, the vein authentication apparatus 10 according to the present embodiment performs vein authentication using reference vein data having a temperature difference as small as possible with respect to the temperature at which the vein image is input. The effects of vessel expansion and contraction can be minimized. For this reason, in the vein authentication device 10 according to the present embodiment, the person rejection rate and the other person acceptance rate can be reduced. Therefore, according to the vein authentication apparatus 10 according to the present embodiment, it is possible to prevent a decrease in authentication accuracy.

  Furthermore, in the vein authentication device 10 according to the present embodiment, vein data that has been successfully vein-authenticated is added as reference vein data together with the temperature at the time of vein authentication. Therefore, reference vein data is not necessarily registered from the beginning. There is no need. Therefore, in the vein authentication device 10 according to the present embodiment, it is possible to register reference vein data for each temperature without the trouble of collecting a vein image after raising and lowering the temperature during registration.

  The vein authentication device 10 can be suitably applied to the case where personal authentication is executed by various systems such as entrance / exit management in addition to login to an information processing device or a web application. In addition, when processing the temperature of the living body itself instead of the temperature, a state that more reflects the state of the living body at the time of biometric authentication can be used for authentication, and personal authentication according to the state of the living body can be performed. Become.

  Although the embodiments related to the disclosed apparatus have been described above, the present invention may be implemented in various different forms other than the above-described embodiments. Therefore, another embodiment included in the present invention will be described below.

[Application example]
Furthermore, in the first embodiment, the case where input vein data is added in association with the temperature zone level when vein authentication is successful is illustrated, but it is not always necessary to add input vein data as registered vein data. For example, the blood vessel pattern of adult women and children is harder to collect than adult men, so input only when the user's gender is female or the user's age is a predetermined value, for example, 15 years old or less The vein data may be added as registered vein data. As a result, the amount of data stored in the vein data storage unit 15 can be reduced.

[Application example]
For example, in the first embodiment, the case where “1: N authentication” is performed in which authentication is performed by comparing vein data input by a user with vein data of N persons registered in advance is illustrated. The disclosed apparatus is not limited to this. That is, the disclosed apparatus can also be applied to “1: 1 authentication” in which authentication is performed by collating vein data input by a user with vein data registered in advance in association with user identification information.

  In the first embodiment, the case where authentication is performed using a vein image obtained by imaging the veins of the palm is illustrated. However, veins other than the palm, for example, vein images obtained by imaging the veins of the fingers and the back of the hand are used. The same applies to authentication.

  In the first embodiment, the vein authentication apparatus 10 performs stand-alone vein authentication. However, the disclosed apparatus is not limited to this. For example, it can be provided as a vein authentication system having a terminal device that acquires a vein image to be authenticated and an authentication server that performs vein authentication using vein data obtained from the vein image to be authenticated. In this case, it can be easily realized by moving a part of the functional unit of the vein authentication device 10 shown in FIG. 2 to the authentication server. As an example, in the disclosed system, the terminal device includes at least the air temperature acquisition unit 13 (biological temperature acquisition unit), the vein sensor 14 and the extraction unit 17, and the authentication server includes the vein data storage unit 15, the authentication unit 18, and the addition unit. A configuration having 19 can be adopted. When such a configuration is adopted, the input vein data is transmitted from the terminal device to the authentication server, the authentication result is notified from the authentication server to the terminal device, and various processes such as login permission are performed according to the authentication result. Or unlocking the door. As a result, the vein data extracted from the vein image, which is personal information, is exchanged between the terminal device and the authentication server, so that the personal information of the user can be protected more securely.

[Distribution and integration]
In addition, each component of each illustrated apparatus does not necessarily need to be physically configured as illustrated. In other words, the specific form of distribution / integration of each device is not limited to that shown in the figure, and all or a part thereof may be functionally or physically distributed or arbitrarily distributed in arbitrary units according to various loads or usage conditions. Can be integrated and configured. For example, the extraction unit 17, the authentication unit 18, or the addition unit 19 may be connected as an external device of the vein authentication device 10 via a network. Further, the functions of the vein authentication device 10 may be realized by having the extraction unit 17, the authentication unit 18, or the addition unit 19, respectively, which are connected to the network and cooperate.

[Venous authentication program]
The various processes described in the above embodiments can be realized by executing a prepared program on a computer such as a personal computer or a workstation. In the following, an example of a computer that executes a vein authentication program having the same function as that of the above-described embodiment will be described with reference to FIG.

  FIG. 7 is a schematic diagram illustrating an example of a computer that executes a vein authentication program according to the first and second embodiments. As shown in FIG. 7, the computer 100 includes an operation unit 110a, a speaker 110b, a camera 110c, a display 120, and a communication unit 130. Further, the computer 100 includes a CPU 150, a ROM 160, an HDD 170, and a RAM 180. These units 110 to 180 are connected via a bus 140.

  As shown in FIG. 7, the HDD 170 stores in advance a vein authentication program 170 a that performs the same functions as the extraction unit 17, the authentication unit 18, and the addition unit 19 described in the first embodiment. The vein authentication program 170a may be integrated or separated as appropriate, as with each component of the extraction unit 17, the authentication unit 18, and the addition unit 19 shown in FIG. In other words, all data stored in the HDD 170 need not always be stored in the HDD 170, and only data necessary for processing may be stored in the HDD 170.

  Then, the CPU 150 reads the vein authentication program 170 a from the HDD 170 and expands it in the RAM 180. Thereby, as shown in FIG. 7, the vein authentication program 170a functions as a vein authentication process 180a. The vein authentication process 180a expands various data read from the HDD 170 in an area allocated to itself on the RAM 180, and executes various processes based on the expanded various data. The vein authentication process 180a includes processes executed by the extraction unit 17, the authentication unit 18, and the addition unit 19 shown in FIG. 2, for example, the processes shown in FIGS. In addition, each processing unit virtually realized on the CPU 150 does not always require that all processing units operate on the CPU 150, and only a processing unit necessary for the processing needs to be virtually realized.

  Note that the vein authentication program 170a is not necessarily stored in the HDD 170 or the ROM 160 from the beginning. For example, each program is stored in a “portable physical medium” such as a flexible disk inserted into the computer 100, so-called FD, CD-ROM, DVD disk, magneto-optical disk, or IC card. Then, the computer 100 may acquire and execute each program from these portable physical media. In addition, each program is stored in another computer or server device connected to the computer 100 via a public line, the Internet, a LAN, a WAN, etc., and the computer 100 acquires and executes each program from these. It may be.

DESCRIPTION OF SYMBOLS 10 Vein authentication apparatus 11 Notification part 11a Guide part 11b Lamp 11c Speaker 12 Communication I / F part 13 Temperature acquisition part 14 Vein sensor 15 Vein data storage part 16 Registration part 17 Extraction part 18 Authentication part 19 Addition part

Claims (5)

An additional unit that adds the vein information that has been successfully vein-authenticated and the temperature at the time of vein authentication to the storage unit as vein information for reference;
An acquisition unit for acquiring the temperature;
An extraction unit that extracts vein information used for collation with the reference vein information from the authentication target vein image when an authentication target vein image is input;
The temperature difference between the vein information of the authentication target extracted by the extraction unit and the temperature acquired by the acquisition unit of the reference vein information stored in the storage unit and the temperature at the time of vein authentication An authentication unit that verifies and authenticates the smallest reference vein information,
The storage unit stores the reference vein information corresponding to each of a plurality of temperature zones,
If there is no vein information for reference in a temperature range corresponding to the temperature at the time of vein authentication succeeding in vein authentication, the additional unit is configured to refer to the vein information that has been successfully authenticated by vein and the temperature at the time of vein authentication. A vein authentication apparatus characterized by being added to the storage unit as vein information. A vein authentication system having a terminal device that acquires a vein image to be authenticated, and an authentication server that performs vein authentication using vein information obtained from the vein image to be authenticated,
The terminal device
An acquisition unit for acquiring the temperature;
An extraction unit that extracts vein information used for collation with reference vein information from the authentication target vein image when the authentication target vein image is input;
A transmission unit that transmits the temperature acquired by the acquisition unit and the vein information of the authentication target extracted by the extraction unit;
The authentication server is
An additional unit that adds vein information that has been successfully vein-authenticated and the temperature at the time of vein authentication to the storage unit as vein information for reference;
There is a temperature difference between the vein information to be authenticated transmitted by the transmitting unit and the temperature transmitted by the transmitting unit and the temperature at the time of vein authentication among the reference vein information stored in the storage unit. An authentication unit that verifies and authenticates the smallest reference vein information,
The storage unit stores the reference vein information corresponding to each of a plurality of temperature zones,
If there is no vein information for reference in a temperature range corresponding to the temperature at the time of vein authentication succeeding in vein authentication, the additional unit is configured to refer to the vein information that has been successfully authenticated by vein and the temperature at the time of vein authentication. A vein authentication system characterized by being added to the storage unit as vein information. Computer
The vein information that has been successfully vein-authenticated and the temperature at the time of vein authentication are added to the storage unit as vein information for reference,
When the authentication target vein image is input, the vein information used for matching with the reference vein information is extracted from the authentication target vein image;
Get the temperature,
The extracted vein information for authentication, and the reference vein information with the smallest temperature difference between the acquired temperature and the temperature at the time of vein authentication among the reference vein information stored in the storage unit; Execute the process of verifying and verifying
The storage unit stores the reference vein information corresponding to each of a plurality of temperature zones,
When there is no vein information for reference in a temperature range corresponding to the temperature at the time of vein authentication that has succeeded in vein authentication, the vein information that has been successfully authenticated by vein and the temperature at the time of vein authentication are stored as reference vein information. A vein authentication method characterized by further executing processing to be added to the section. A vein authentication method used in a vein authentication system having a terminal device that acquires a vein image to be authenticated and an authentication server that performs vein authentication using vein information obtained from the vein image to be authenticated,
The terminal device is
When the authentication target vein image is input, the vein information used for verification with reference vein information is extracted from the authentication target vein image;
Get the temperature,
Execute the process to send the acquired temperature and the extracted vein information for authentication,
The authentication server is
The vein information that has been successfully vein-authenticated and the temperature at the time of vein authentication are added to the storage unit as vein information for reference,
The smallest difference in temperature between the vein information to be authenticated received from the terminal device and the reference vein information stored in the storage unit between the temperature received from the terminal device and the temperature at the time of vein authentication. Execute the process of verifying against the reference vein information,
The storage unit stores the reference vein information corresponding to each of a plurality of temperature zones,
When there is no vein information for reference in a temperature range corresponding to the temperature at the time of vein authentication that has succeeded in vein authentication, the vein information that has been successfully authenticated by vein and the temperature at the time of vein authentication are stored as reference vein information. A vein authentication method characterized by further executing processing to be added to the section. An additional unit that adds the vein information that has been successfully vein-authenticated and the temperature of the living body to be authenticated at the time of vein authentication to the storage unit as vein information for reference;
An acquisition unit for acquiring the temperature of the living body to be authenticated;
An extraction unit that extracts vein information used for collation with the reference vein information from the authentication target vein image when an authentication target vein image is input;
The authentication target vein information extracted by the extraction unit, the living body temperature acquired by the acquisition unit among the reference vein information stored in the storage unit, and the authentication target biological temperature at the time of the vein authentication An authentication unit that authenticates the reference vein information with the smallest temperature difference between and the reference vein information,
The storage unit stores the reference vein information corresponding to each of a plurality of temperature zones,
When there is no vein information for reference in a temperature zone corresponding to the temperature of a living body to be authenticated at the time of vein authentication succeeding in vein authentication, the additional unit succeeds in vein authentication and the vein information at the time of vein authentication The vein authentication apparatus, wherein the temperature of the living body to be authenticated is added to the storage unit as reference vein information.

Images