JP7283345B2 - Fingerprint authentication IC card - Google Patents

Description

The present invention relates to a fingerprint authentication IC card, which is an IC card with a fingerprint authentication function added.

Two-factor authentication, which uses a password as a knowledge-based factor and a card as a possession-based factor, has long been used for identity verification, which is required for services such as payment services. Cards used as possession information were magnetic cards, but now IC cards are widely used as cards used as possession information.

Although security has been improved by using IC cards as possession information, if IC cards are lost or stolen and passwords are leaked, unauthorized persons other than the card holders of the IC cards will be involved. A person can illegally use an IC card. There are still many cases where passwords that can be easily guessed are set, and illegal use of IC cards has become a problem.

Therefore, in recent years, in order to achieve higher security, the use of biometric information for personal identification, which is necessary for services such as payment services, has been promoted. Biometric information that can be used for identity verification includes veins and voiceprints, but fingerprints are generally used for IC cards used for identity verification.

A fingerprint authentication IC card, which is an IC card with a fingerprint authentication function, has already been disclosed. It has a fingerprint sensor module that reads the fingerprint of the holder.

There are two configurations for performing fingerprint authentication in the fingerprint authentication IC card. For example, the fingerprint authentication IC card disclosed in Patent Document 1 is configured such that the fingerprint sensor module itself authenticates the fingerprint read by the fingerprint sensor module. Further, for example, a fingerprint authentication IC card disclosed in Patent Document 2 is configured such that a processor included in an MCU authenticates a fingerprint read by a fingerprint sensor module.

Also, the external I/F (interface) used to connect the fingerprint authentication IC card and the terminal device corresponds to a contact I/F and a non-contact I/F, respectively. The fingerprint authentication IC card disclosed in Patent Document 1 operates with a non-contact I/F, and the fingerprint authentication IC card disclosed in Patent Document 2 operates with either a contact I/F or a non-contact I/F. Operate. Furthermore, Patent Document 3 discloses a fingerprint authentication IC card that operates with both a contact I/F and a non-contact I/F.

Japanese Patent Publication No. 2017-532683 JP 2018-18324 A JP 2012-238126 A

In the case of a fingerprint authentication IC card that operates on both the contact I/F and the non-contact I/F, as in the invention disclosed in Patent Document 3, the external I/F used by the fingerprint authentication IC card Since the finger used for fingerprint authentication often changes depending on the IC card, it is desirable to be able to preferentially use the fingerprint of the finger corresponding to the external I/F used by the fingerprint authentication IC card for fingerprint authentication.

Therefore, the present invention preferentially uses a fingerprint corresponding to the external I/F used by the fingerprint authentication IC card in a fingerprint authentication IC card that operates with both a contact I/F and a non-contact I/F. The purpose is to enable fingerprint authentication.

A first invention for solving the above-mentioned problems, a contact I/F and a non-contact I/F which are external I/Fs used for connection with a terminal device, an MCU having a processor and NVM, and a fingerprint sensor module having a fingerprint sensor is implemented, and as reference fingerprint information used for fingerprint authentication, reference fingerprint information preferentially used when operating with contact I / F and reference fingerprint information preferentially used when operating with contactless I / F are stored in NVM in a state in which each corresponding external I/F can be identified, and as a function realized using a processor, the first reference fingerprint information used for fingerprint authentication corresponds to the external I/F in use. This fingerprint authentication IC card is characterized by comprising a fingerprint authentication means for fingerprint authentication of the fingerprint information read by the fingerprint sensor by setting it as reference fingerprint information to be read by the fingerprint sensor. In order to solve the problems of the present invention, the first invention is configured so that the first reference fingerprint information used for fingerprint authentication can be set to the reference fingerprint information corresponding to the external I/F in use.

Furthermore, the second invention is the fingerprint authentication IC card described in the first invention, wherein the fingerprint authentication means fails the fingerprint authentication using the reference fingerprint information corresponding to the external I/F in use. It is characterized by executing fingerprint authentication using other reference fingerprint information that does not correspond to the external I/F. The second invention is configured such that if fingerprint authentication using reference fingerprint information corresponding to the external I/F in use fails, fingerprint authentication can be performed using other reference fingerprint information.

Furthermore, the third invention is the fingerprint authentication IC card described in the first invention or the second invention. is registered in NVM as the reference fingerprint information corresponding to the contact I/F, and the fingerprint information read by the fingerprint sensor when operating with the contactless I/F is registered in NVM as the reference fingerprint information corresponding to the contactless I/F. and a fingerprint registration means for registering the fingerprint. The third invention is configured so that the reference fingerprint information can be stored in the NVM in a state in which the external I/F corresponding to the reference fingerprint information can be identified without setting the external I/F.

As described above, according to the present invention, in a fingerprint authentication IC card that operates with both a contact I/F and a non-contact I/F, the fingerprint authentication IC card supports the external I/F used by the fingerprint authentication IC card. Fingerprints can be used preferentially for fingerprint authentication.

FIG. 2 is a diagram for explaining the surface of the fingerprint authentication IC card according to the embodiment; 1A and 1B are diagrams for explaining the configuration of a fingerprint authentication IC card according to an embodiment; FIG. 4 is a block diagram of an MCU mounted on the fingerprint authentication IC card according to the embodiment; FIG. 2 is a functional block diagram of the fingerprint authentication IC card 1 according to the embodiment; FIG. FIG. 4 is a diagram for explaining a finger used for fingerprint authentication; FIG. 4 is a diagram for explaining the operation of the fingerprint authentication IC card when fingerprint authentication is performed; FIG. 4 is a diagram for explaining the operation of the fingerprint authentication IC card when registering fingerprint information;

Embodiments according to the present invention will now be described. This embodiment is intended to facilitate understanding of the present invention, and the present invention is not limited to this embodiment. In addition, unless otherwise specified, the drawings are schematic diagrams drawn to facilitate understanding of the present invention.

A fingerprint authentication IC card 1 according to this embodiment will be described. FIG. 1 is a diagram for explaining the surface of a fingerprint authentication IC card 1 according to the embodiment, FIG. 2 is a diagram for explaining the configuration of the fingerprint authentication IC card 1 according to the embodiment, and FIG. 2 is a block diagram of MCU 10 mounted on IC card 1. FIG. Also, FIG. 4 is a functional block diagram of the fingerprint authentication IC card 1 according to the embodiment. FIG. 5 is a diagram for explaining a finger used for fingerprint authentication. FIG. 6 is a diagram for explaining the operation of the fingerprint authentication IC card 1 when performing fingerprint authentication. FIG. 7 is a diagram for explaining the operation of the fingerprint authentication IC card 1 when fingerprint information is registered.

Referring to FIG. 1, the fingerprint authentication IC card 1 according to the present embodiment is a card medium of credit card size. A fingerprint sensor 111 for reading appears. Information required for services using the fingerprint authentication IC card 1 can be printed on the front and back surfaces of the fingerprint authentication IC card 1, and further, media required for services using the fingerprint authentication IC card 1 can be processed. For example, when the fingerprint authentication IC card 1 is used for a credit settlement service, the credit card number, card holder's name and expiration date are printed on the surface of the fingerprint authentication IC card 1 . Further, when the fingerprint authentication IC card 1 is used for credit settlement services, a hologram is processed on the front side, and a signature space for entering a signature is processed on the back side.

Referring to FIG. 2, the configuration of the fingerprint authentication IC card 1 according to the present embodiment includes an MCU 10 (Micro Controller Unit) that controls the processing executed by the fingerprint authentication IC card 1, and a fingerprint sensor 111 that reads fingerprints. It includes a fingerprint sensor module 11, a contact plate 101a for establishing contact communication, and an antenna coil 102a for establishing contactless communication.

Referring to FIG. 3, the MCU 10 has a contact I/F 101 and a non-contact I/F 102 as an external I/F (interface) used for connection with the external terminal device 2 . The contact I/F 101 is an external I/F conforming to ISO7816, for example, and is connected to a contact plate 101a for establishing contact communication. The non-contact I/F 102 is an external I/F conforming to ISO14443, for example, and is connected to an antenna coil 102a for establishing non-contact communication.

Furthermore, the MCU 10 has an internal I/F 106 for establishing communication between the MCU 10 mounted on the fingerprint authentication IC card 1 and the fingerprint sensor module 11 . As the internal I/F 106 for establishing communication between the MCU 10 and the fingerprint sensor module 11, for example, an SPI (Serial Peripheral Interface) can be used.

The MCU 10 includes a processor 100 that executes an instruction set written in a computer program, a ROM 104 that is electrically non-rewritable non-volatile memory, a RAM 105 that is electrically rewritable volatile memory, and an electrically rewritable memory. It has an NVM 103 (Non-volatile memory) which is a non-volatile memory.

In the NVM 103 provided in the MCU 10, reference fingerprint information 107 (first reference fingerprint information 107a) that is preferentially used when operating with the contact I/F 101 as reference fingerprint information 107 used for fingerprint authentication, and non-contact I/F 102 The reference fingerprint information 107 (second reference fingerprint information 107b) that is preferentially used when operating in the memory is stored in such a manner that the corresponding external I/F can be identified. In the present invention, the number of pieces of reference fingerprint information 107 stored in the NVM 103 is the number of external I/Fs used for communication with the terminal device 2 (here, two). 107 can also be registered with NVM 103 .

Since the external I/F corresponding to each of the two pieces of reference fingerprint information 107 can be identified, the NVM 103 provided in the MCU 10 stores fingerprint management information 108 linking the reference fingerprint information 107 and the corresponding external I/F. be. In this embodiment, the MCU 10 has a contact I/F 101 and a non-contact I/F 102 as external I/Fs used for communication with the terminal device 2. Therefore, in the fingerprint management information 108 stored in the NVM 103, The first reference fingerprint information 107a is associated with the contact I/F 101, and the second reference fingerprint information 107b is associated with the non-contact I/F 102.

Referring to FIG. 2, the fingerprint sensor module 11 includes a fingerprint sensor 111 having a fingerprint reading function and a controller 110 controlling communication with the MCU 10 . In the fingerprint authentication IC card 1 of this embodiment, the MCU 10 and the fingerprint sensor module 11 each operate independently with power supplied from the external I/F. When activated by the contact I/F 101, power input to the Vcc terminal of the contact plate 101a connected to the contact I/F 101 is supplied to the MCU 10 and the fingerprint sensor module 11 respectively. Also, when activated by the non-contact I/F 102, power excited by the antenna coil 102a connected to the non-contact I/F 102 is supplied to the MCU 10 and the fingerprint sensor module 11, respectively.

As a method for reading fingerprints, there is a swipe method in which a finger placed on the sensor is swiped, but in this embodiment, considering the operability of the fingerprint authentication IC card 1, the finger is placed on the sensor without sliding. The fingerprint sensor 111 employs a capacitive area type for reading the fingerprint of a finger. As shown in FIG. 1, the area-type fingerprint sensor 111 has a planar shape.

In the fingerprint authentication IC card 1 of this embodiment, the controller 110 of the fingerprint sensor module 11 reads the fingerprint information of the finger placed on the fingerprint sensor 111 until the fingerprint information is read. The fingerprint information of the finger placed on the controller 110 is held in the memory of the controller 110 . Furthermore, the controller 110 communicates with the processor 100 of the MCU 10 using the internal I/F 106 and executes processing corresponding to requests from the processor 100 . This process includes a process of notifying the fingerprint information reading status and a process of transmitting the fingerprint information read by the fingerprint sensor 111 to the processor 100 of the MCU 10 .

Referring to FIG. 4, the fingerprint authentication IC card 1 according to the embodiment includes command processing means 120, fingerprint authentication means 130, and fingerprint registration means 140 as functions realized using a computer program that operates the processor 100. .

The command processing means 120 provided in the fingerprint authentication IC card 1 processes commands received from the external terminal device 2 using the external I/F. The commands supported by the command processing means 120 depend on the service using the fingerprint authentication IC card 1, but in FIG. , and a fingerprint registration command 122 for registering the fingerprint information of the holder in the fingerprint authentication IC card 1 is shown as the command.

The fingerprint authentication means 130 is means called by the command processing means 120 when the command processing means 120 processes the personal identification command 121 . When the fingerprint authentication means 130 is called from the command processing means 120, the fingerprint authentication IC card 1 specifies the external I/F in use, and the first reference fingerprint information 107 used for fingerprint authentication is identified by the external I/F in use. is set in the reference fingerprint information 107 corresponding to , and the fingerprint information read by the fingerprint sensor 111 is subjected to fingerprint authentication. In the present embodiment, the external I/F in use is an external I/F that has undergone activation processing for activating the fingerprint authentication IC card 1. When the process is executed, the fingerprint authentication IC card 1 becomes ready for command processing.

When fingerprint authentication is performed, the fingerprint authentication means 130 sets the first reference fingerprint information 107 used for fingerprint authentication to the reference fingerprint information 107 corresponding to the external I/F in use, as shown in FIG. This is because the finger used for fingerprint authentication is often different depending on the holder, depending on whether the fingerprint authentication IC card 1 is used with the contact I/F 101 or the non-contact I/F 102 .

As shown in FIG. 5A, when the fingerprint authentication IC card 1 is used with the terminal device 2a that supports the contact I/F 101, a part of the fingerprint authentication IC card 1 is inserted into the terminal device 2a. The finger used for fingerprint authentication is often the index finger. On the other hand, as shown in FIG. 5B, when the fingerprint authentication IC card 1 is used in the terminal device 2b that supports the non-contact I/F 102, the fingerprint authentication IC card 1 is sandwiched between the thumb and forefinger. , the finger used for fingerprint authentication is often the thumb. In this way, if only the fingerprint information of the thumb, which is often used for fingerprint authentication on the non-contact I/F 102, can be used for fingerprint authentication, the fingerprint authentication on the contact I/F 101 may will fail.

Therefore, in the present invention, fingerprint information of a finger (for example, index finger) used by the holder for fingerprint authentication in the contact I/F 101 and fingerprint information of a finger (for example, thumb) used by the holder for fingerprint authentication in the non-contact I/F 102 Each piece of information is registered in the fingerprint authentication IC card 1 as reference fingerprint information 107 . Then, the fingerprint authentication means 130 first uses the reference fingerprint information 107 corresponding to the external I/F used by the fingerprint authentication IC card 1 to perform fingerprint authentication. Fingerprint authentication failures due to different fingers on the external I/F are reduced.

From here, the operation of the fingerprint authentication IC card 1 will be described in detail. First, the operation of the fingerprint authentication IC card 1 when performing fingerprint authentication will be described with reference to FIG.

Referring to FIG. 6, when performing fingerprint authentication, the command processing means 120 of the fingerprint authentication IC card 1 receives an identity verification command 121 from the terminal device 2 (S1). Since the fingerprint authentication IC card 1 according to this embodiment has both the contact I/F 101 and the non-contact I/F 102, the external I/F that receives the command from the terminal device 2 can be either the contact I/F 101 or the non-contact I/F. Any of the contact I/Fs 102 . Also, the type of command received from the terminal device 2 can generally be identified from the APDU (Application Protocol Data Unit) of the command received from the terminal device 2 .

Upon receiving the identity verification command 121 from the terminal device 2, the command processing means 120 of the fingerprint authentication IC card 1 calls the fingerprint authentication means 130 (S2).

The fingerprint authentication means 130 called from the command processing means 120 inquires the fingerprint information reading status to the controller 110 of the fingerprint sensor module 11. If the fingerprint information reading is completed on the fingerprint sensor module 11 side, the fingerprint information , and the fingerprint information read by the fingerprint sensor 111 is received from the controller 110 of the fingerprint sensor module 11 (S3).

Next, the fingerprint authentication means 130 identifies the external I/F in use (S4). The processor 100 of the MCU 10 generally has a flag indicating the external I/F used by the MCU 10. By referring to this flag, the external I/F in use can be specified.

Next, the fingerprint authentication means 130 refers to the fingerprint management information 108 and sets the first reference fingerprint information 107 used for fingerprint authentication to the reference fingerprint information 107 corresponding to the external I/F in use (S5). As described above, in the present embodiment, the MCU 10 includes the contact I/F 101 and the non-contact I/F 102 as external I/Fs used for communication with the terminal device 2. In the fingerprint management information 108, the first reference fingerprint The information 107a is linked to the contact I/F 101, and the second reference fingerprint information 107b is linked to the non-contact I/F 102. FIG. Therefore, when the external I/F in use is the contact I/F 101, the first reference fingerprint information 107 used for fingerprint authentication is the first reference fingerprint information 107a, and the external I/F in use is the non-contact I/F 102. , the first reference fingerprint information 107 used for fingerprint authentication is the second reference fingerprint information 107b.

Next, the fingerprint authentication means 130 compares the fingerprint information received from the controller 110 of the fingerprint sensor module 11 in S3 of FIG. 6 with the reference fingerprint information 107 set in S4 of FIG. Fingerprint authentication is performed on the fingerprint information received from the controller 110 (S6).

Next, the fingerprint authentication means 130 branches the processing according to the result of the fingerprint authentication executed in S6 of FIG. If the fingerprint authentication performed in S6 of FIG. 6 is successful, the fingerprint authentication means 130 proceeds to S9 of FIG. 6, sets the result of fingerprint authentication to success, and terminates the procedure of FIG.

If the fingerprint authentication executed in S6 of FIG. 6 fails, there is a possibility that the finger used for fingerprint authentication is different. 107 is set to other reference fingerprint information 107 that does not correspond to the external I/F in use (S7).

Next, the fingerprint authentication means 130 compares the fingerprint information received from the controller 110 of the fingerprint sensor module 11 in S3 of FIG. 6 with the reference fingerprint information 107 set in S7 of FIG. Fingerprint authentication is performed on the fingerprint information received from the controller 110 (S8).

Next, the fingerprint authentication means 130 branches the processing according to the result of the fingerprint authentication executed in S8 of FIG. If the fingerprint authentication executed in S8 of FIG. 6 is successful, the fingerprint authentication means 130 proceeds to S9 of FIG. 6, sets the result of fingerprint authentication to success, and terminates the procedure of FIG. If the fingerprint authentication executed in S8 of FIG. 6 fails, the fingerprint authentication means 130 proceeds to S10 of FIG. 6, sets the fingerprint authentication result to failure, and terminates the procedure of FIG.

By executing the procedure of FIG. 6, when the fingerprint authentication IC card 1 is operating with the contact I/F 101, the reference fingerprint information 107 that is first used for fingerprint authentication is the first fingerprint information corresponding to the contact I/F 101. When the reference fingerprint information 107a is used and the fingerprint authentication using the first reference fingerprint information 107a fails, the reference fingerprint information 107 used for fingerprint authentication is switched to the second reference fingerprint information 107b corresponding to the contactless I/F 102. Further, when the fingerprint authentication IC card 1 is operated by the non-contact I/F 102, the reference fingerprint information 107 first used for fingerprint authentication becomes the second reference fingerprint information 107b corresponding to the non-contact I/F 102, When the fingerprint authentication using the second reference fingerprint information 107b fails, the reference fingerprint information 107 used for fingerprint authentication is switched to the first reference fingerprint information 107a corresponding to the contact I/F 101. FIG.

Next, the operation of the fingerprint authentication IC card 1 when registering fingerprint information will be described with reference to FIG.

Referring to FIG. 7, when registering fingerprint information, the command processing means 120 of the fingerprint authentication IC card 1 receives a fingerprint registration command 122 from the terminal device 2 (S20). receives the fingerprint registration command 122 from the terminal device 2, it calls the fingerprint registration means 140 (S21).

The fingerprint registration means 140 called from the command processing means 120 inquires the fingerprint information reading status to the controller 110 of the fingerprint sensor module 11. If the fingerprint information reading is completed on the fingerprint sensor module 11 side, the fingerprint information , and the fingerprint information read by the fingerprint sensor 111 is received from the controller 110 of the fingerprint sensor module 11 (S22).

Next, the fingerprint registration means 140 identifies the external I/F in use (S23). Next, the fingerprint registration means 140 writes the fingerprint information received from the controller 110 of the fingerprint sensor module 11 in the NVM 103 as the reference fingerprint information 107 in S22 of FIG. By writing information that links the reference fingerprint information 107 to the external I/F in use identified in S23 of FIG. The procedure ends.

By executing the procedure of FIG. 7, the fingerprint information read by the fingerprint sensor 111 when operating with the contact I/F 101 is registered in the NVM 103 as the reference fingerprint information 107 corresponding to the contact I/F 101, and is registered in the NVM 103. Fingerprint information read by the fingerprint sensor 111 when operating in the F 102 is registered in the NVM 103 as reference fingerprint information 107 corresponding to the non-contact I/F 102 .

1 fingerprint authentication IC card 10 MCU
100 Processor 101 Contact I/F
102 Non-contact I/F
103 NVM
107 reference fingerprint information 108 fingerprint management information 11 fingerprint sensor module 110 controller 111 fingerprint sensor 120 command processing means 130 fingerprint authentication means 140 fingerprint registration means

Claims (3)

An MCU having a contact I/F and a non-contact I/F, which are external I/Fs used for connection with a terminal device, a processor and an MCU having NVM, and a fingerprint sensor module having a fingerprint sensor are mounted, and a reference fingerprint used for fingerprint authentication As information, the reference fingerprint information preferentially used when operating with the contact I/F and the reference fingerprint information preferentially used when operating with the non-contact I/F are stored in the corresponding external I/F. is stored in NVM in a state in which it can be identified, and as a function realized using a processor, the first reference fingerprint information used for fingerprint authentication is set to the reference fingerprint information corresponding to the external I / F in use, and the fingerprint A fingerprint authentication IC card, comprising fingerprint authentication means for authenticating fingerprint information read by a sensor. When fingerprint authentication using reference fingerprint information corresponding to the external I/F in use fails, the fingerprint authentication means performs fingerprint authentication using other reference fingerprint information not corresponding to the external I/F in use. 2. The fingerprint authentication IC card according to claim 1, characterized by: As a function realized by using a processor, the fingerprint information read by the fingerprint sensor when operating on the contact I/F is registered in NVM as reference fingerprint information corresponding to the contact I/F, and is registered on the non-contact I/F. 3. A fingerprint according to claim 1 or 2, further comprising fingerprint registration means for registering fingerprint information read by the fingerprint sensor during operation in the NVM as reference fingerprint information corresponding to the non-contact I/F. Authentication IC card.

Images