JPH1153559A - Card authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent a card from being illicitly used by forgery and to improve the security of authentication by collating pieces of discrimination information by block obtained by dividing a region of visual information with previously stored comparison reference information. SOLUTION: A photograph 8 attached to an IC card 1 is read by a digital camera 11. The digital camera 11 is controlled by a data processor 12 to regard the photograph 8 as one screen and detect it as video data expanded into n×m pixels, and sends them out to the data processor 12. The data processor 12 generates identification codes corresponding to the divided blocks from the data and generate one integrated identification code. When the IC card 1 receives a message of the identification code transmission from the data processor 12, a processor 2 generates the integrated identification code from an EEPROM 5 and sends it back as a response message. The data processor 12 matches the integrated identification code that the data processor generates against the integrated identification code from the IC card 1 to detect their matching.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a card authentication system, and more particularly, to a video information from an IC card having visible information for identifying an individual, such as a photograph, a signature character, and a real seal, for identifying the individual. In an IC card authentication system that reads visible information as (image data) and authenticates the IC card based on this information, an IC card capable of preventing unauthorized use such as forgery of a card and improving security in authentication. Regarding the authentication system.

[0002]

2. Description of the Related Art Under card authentication, commercial transactions using a credit card or the like, withdrawal of bank deposits using a cash card, or the like, or electronic commerce using the Internet is performed. Cards are being used. The problem with this type of card is counterfeiting and unauthorized use. In order to prevent such a situation, there has been conventionally known an IC card authentication system in which a fingerprint or a voiceprint is recorded in a memory of an IC card as personal characteristic data and collated. As one of the techniques, a technique of scanning and reading a fingerprint or the like of a card user with a scanner, and collating the obtained fingerprint image with fingerprint data sent from an IC card is disclosed in, for example, Japanese Patent Application Laid-Open No. 61-153796. This is described in, for example, Japanese Unexamined Patent Publication No. 61-260881 and is known. By performing such processing, card authentication is performed with higher security than collation of the personal identification number.

Also, there have been proposed cards which form images using bolograms on the surface of the card, and specially printed cards. For example, in the technology disclosed in Japanese Patent Application Laid-Open No. 4-338593, there is a technique in which a transparent protective layer having irregularities such that an image is formed by a thermal transfer method in an identification card or the like is provided on the image forming surface. Also, Japanese Patent Application Laid-Open No. Hei.
No. 3,883, No. 3883 secures security against card forgery and unauthorized use by acquiring image data from a card, converting the image, and collating the image data to perform card authentication.

[0004]

Recently, various techniques for preventing unauthorized use have been proposed by using a card displaying a photograph or signature of the owner on the card and a system therefor, and have a better anti-counterfeiting property than before. Has been attracting attention. However, in the above-described conventional technology, there is a problem that it is difficult to construct a card collation processing system for performing card collation using information corresponding to an image located in a visual confirmation area such as a face photograph or a signature. The reason is that it is difficult to perform an appropriate conversion on the image information located in the visual confirmation area and to set an appropriate conversion in a part for calculating the verification code. In other words, the arithmetic processing for the conversion is desirably a simple operation from the viewpoint of processing time, but too simple is a problem in maintaining confidentiality. On the other hand, if the image information is used as it is, the amount of data increases and the video information cannot always be collected under fixed and fixed conditions, so that it is difficult to compare and detect with the reference data. An object of the present invention is to solve such a problem of the related art, and to provide a card authentication system that prevents unauthorized use such as forgery of a card and improves security in authentication.

[0005]

SUMMARY OF THE INVENTION A feature of the card authentication system of the present invention for achieving the above object is that visible information for identifying the individual, such as a photograph for identifying the individual, a sign character, a real seal, or the like. Card having an area on its surface, a reader for reading visible information from the card as video information, and an image of each block when the area of visible information is divided into a plurality of blocks based on the video information obtained from this reader Identification information generating means for performing predetermined arithmetic processing on information for each block and generating identification information for each block, and detecting coincidence between the identification information for each block and the comparison reference information for each block stored in advance And a collation means for outputting a collation result.

[0006]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
Alternatively, visible information for identifying the individual, such as a photograph, a sign character, and a real seal, for identifying the individual engraved is read as video information, and based on the read video information, the identification information generating means sets the visible information area. The video information of each block when divided into a plurality of blocks is subjected to a predetermined arithmetic processing for each block to generate identification information for each block, and the matching unit generates identification information for each block. Since the matching with the comparison reference information for each block stored in advance is detected and the matching result is obtained, the arithmetic processing for generating the identification information can be performed by the data processing corresponding to the block, so that the entire video information can be processed. The processing is simpler than the arithmetic processing, and the load of the arithmetic processing is small, and by generating a large number of identification information for each block, High security can be the processing for generating the identification information for each block to be simplified because it can be secured. As a result, authentication with high confidentiality can be performed by simple arithmetic processing, unauthorized use such as forgery of a card can be prevented, and security in authentication can be improved.

[0007]

FIG. 1 is a block diagram showing an embodiment of an IC card authentication system to which the card authentication system of the present invention is applied, and FIG. 2 is a diagram for explaining how to divide a video attached to an IC card. 3 is an explanatory diagram of a gradation change of the Laplacian filter process, and FIG. 4 is an explanatory diagram of a contour enhancement process of video data by the Laplacian filter. In FIG. 1, reference numeral 1 denotes an IC card, and a photograph 8 is attached to the surface thereof. The photograph 8 is a photograph of the person's face attached to the visual confirmation area 8a, which may be any visible information for identifying the individual who uses the card, such as a sign character for identifying the individual and a real seal image. And so on. 1a is a magnetic stripe, 1b is a built-in I
C and 1c are characters such as a user name. IC card 1
As shown as a block on the left side, a processor 2 including a system control logic and a CPU, a ROM 3 for storing a system program executed by the CPU, a RAM 4 as a work area, various application programs and their data EE that is a storage area
It has a PROM 5 and an I / O port 6, which are interconnected by a bus 7.

In the ROM 3, a system program 3a
The identification code tampering check program 3b, the identification code integration processing program 3c, the reception processing program 3d,
A response program 3e and the like are provided. Also,
The EEPROM 5 stores a block-corresponding identification code group 5a, which is a comparison reference for photo collation, and a block identification code group 5c including a redundant code 5b generated corresponding to the identification code group 5a. The identification code group 5a and the redundant code 5b may be an integrated code, but are described here as being separated for convenience of explanation. Reference numeral 10 denotes an IC card reader / writer, which is a photograph 8 attached to the IC card 1.
A digital camera 11, a data processing device 12, etc., which is a reading device for reading image data as video information. The data processing device 12 includes an MPU 13, a memory 14,
An IC card interface 15 is provided as a C card communication interface, and these are connected to each other via a bus 16.

The digital camera 11 includes the data processing device 1
2, and the picture 8 is taken as one screen, which is nxm
(N, m are positive integers) are detected as video data of a bitmap image of one screen developed into pixels and transmitted to the data processing device 12. At this time, the video signal for each pixel of one screen represents one level of a digital value of, for example, 8 bits and 256 gradations, to express light and dark on a photograph. The data processing device 12 is a digital camera 10
, And generates an identification code corresponding to each divided block from the data, generates one integrated identification code from the generated identification code corresponding to each block, and sends out the integrated identification code from the IC card 1. A match is detected by collating with an integrated identification code serving as a comparison reference. In this case, the identification code corresponding to each block may be directly collated without generating the integrated identification code.However, in the following embodiment, when the integrated identification code is calculated and a match is obtained. Here is an example.

The generation of the identification code corresponding to each divided block includes three steps of a block dividing process, an emphasizing process, and a counting process. These processes are respectively performed by the block division processing program 14a, the enhancement processing program 14b, and the count processing program 1 stored in the memory 14.
4c is executed by the MPU 13. The plurality of identification codes corresponding to each block generated by these processes are then integrated with the integrated identification code generation program 14.
It is calculated by d and is generated as an integrated identification code.
The memory 14e further stores a collation program 14e for collating the integrated identification code generated by the integrated identification code generation program 14d with the integrated identification code sent from the IC card 1, and parameters required for the arithmetic processing of the integrated processing. The stored parameter storage area 14f is provided.

First, the MPU 13 is a digital camera 10
Is temporarily stored in the memory 14, and the block division processing program 14a is executed, and as shown in FIG. 2, the area of the photograph 8 shown in FIG. As shown in b), first, the video data of the first block is extracted from the video data by a process of dividing the data into a plurality of blocks of the same size in a uniform grid shape.
Next, the MPU 13
Executes the emphasis processing program 14b to generate edge-enhanced contour data for the block. Then, the MPU 13 executes the count processing program 14c to count the number of pixels of each pixel of each block at a specific condition level, thereby generating an identification code corresponding to each block. The generated identification code is recorded in the memory 14 for each block. This is performed for each block while sequentially updating the divided blocks, and an identification code is generated for each block and stored in the memory 14.

The block division processing will be described in detail. The block division processing includes a plurality of division methods for dividing the visual check area 8a into a plurality of blocks. For example, the block is divided by a rectangular block as shown in FIG. 2B, or the block is divided by a closed curve including a curve as shown in FIG. 2C. Simple block division as actual block division processing is division by rectangular blocks or square blocks as shown in FIG. By dividing into rectangular or square blocks, the area of all the divided blocks can be made equal. Further, the shape of each block can be made equal in all blocks. Here, a plurality of divisions 1 corresponding to the IC card 1
It is assumed that one is selected in advance. This selection may be determined, for example, by a card-specific code such as a recitation code input corresponding to the IC card 1.

Next, the emphasis processing will be described. There are two filter processings, Laplacian filter processing and contour emphasis filter processing. Video data (image information) in each block of the visual confirmation area 8a of the card shown in FIG.
(B) shows the information after the Laplacian transformation has been performed from. As shown in FIG. 3B, by performing the Laplacian filter processing, edge enhancement (contour enhancement) is performed. Furthermore, by performing filter processing for enhancement processing in addition to this, the gradation information of the pixels in each block is converted into enhancement data as shown in FIG. FIG. 4 shows calculation processing parameters for explaining the conversion between the Laplacian filter and the filter for enhancement processing. The differential mask shown in FIG. 4A is used as a Laplacian filter for performing a second differentiation of the original image, and performs the following operation. When the gradation information at the position (x, y) of the original image is s (x, y) and the gradation information of all pixels is input, the output L (x, y) of the Laplacian filter at the position (x, y) y) satisfies Equation 1. L (x, y) = s (x, y-1) + s (x-1, y) +
s (x + 1, y) + s (x, y + 1) -4s (x, y)

The mask shown in FIG. 4B has a position (x,
y), the contour emphasizing process is performed, and the emphasizing process filter at the position (x, y) is shown in FIG.
The output of the Laplacian filter can be subtracted from the gradation information of the original image shown in FIG. Note that the output E (x, y) of the enhancement processing filter at the position (x, y)
y) satisfies Equation 2. E (x, y) = s (x, y) -L (x, y) =-s (x, y-1) -s (x-1, y) -s (x + 1, y) -s (x , Y + 1) + 5s (x, y)

Lastly, the counting process will be described. This is a process of counting the number of pixels having a specified range of gradations in each block after performing the above-mentioned emphasizing process. To do
For example, in each block, the number of pixels within the upper limit and the lower limit as compared with the preset upper limit and lower limit is used as the identification code of the block. In this case, the upper limit and the lower limit are assumed to be built in the count processing program 14c. Alternatively, as an operation of the count processing program 14c for obtaining an identification code from the image information in each block, for the pixels in each block,
The number of pixels equal to the threshold value is compared with a predetermined threshold value set in advance, and is used as the identification code of the block. Further, the comparison may count the number of pixels that are greater than a predetermined threshold, or may count the number of pixels that are less than a predetermined threshold. From these, the identification code of the block can be obtained.

In the above, the identification code of each block divided on the basis of the counting process is obtained. The identification code based on the number of pixels can be obtained even if the outline emphasis process is performed. It is easily affected by the signal level (gradation value). Therefore, instead of such a counting process, the block number of a block having a pixel having a gradation in a specified range in each block (the position of the block with respect to all blocks, that is, what number of the divided block Block) can be used as the identification code of the block.
In such a case, the identification code is “0” for a block in which there is no pixel having the gradation in the specified range.
Alternatively, it is set to a specific value. Needless to say, the comparison is made based on the position information (block number) of a block having a pixel having a gradation value equal to a predetermined threshold value or the position information (block number) of a block having a pixel having a gradation value larger than the threshold value. (Block number) or position information (block number) of a block having a pixel with a gradation value smaller than the threshold value
May be used as the identification code of the block. Thus, it is possible to suppress a slight change in the gradation value of the video data when the video of the photograph 8 is collected.

In the calculation of the identification code corresponding to the block, the outline is emphasized before the calculation.
The reason why the contours are emphasized in the pixels in each block is to reduce errors when counting the number of pixels in the count processing. Alternatively, it is to reduce an error at the time of gradation comparison for the block position.
Therefore, instead of this, an arithmetic process that applies other processing to reduce the noise of the tone value of each pixel and the error due to the shooting environment in common to the tone values of all the pixels beyond the block is performed. Then, the identification code as described above may be extracted for each block from the data obtained by converting the gradation value of each pixel.

The identification code of each block obtained in this way is stored in the memory 14 in a predetermined order or in a form corresponding to each block. Next, the integrated identification code generation program 14d is called, and these identification codes are converted into one integrated identification code by the integration processing. The MPU 13 includes an integrated identification code generation program 14
d, and referring to the parameter storage area 14f,
For example, the following processing is performed. (A) When the number of pixels is used as a block identification code The number of pixels of each block obtained by the above-described count processing is compared with a predetermined reference value, and a block number having the same number of pixels is extracted. Next, one identification code is generated by linking the extracted block numbers, or by adding, adding, or subtracting the blocks. Of course, the extraction of the block number in this case may be a block number having a pixel number larger or smaller than the predetermined reference value for the pixel number of each block. As described above, the advantage of extracting the block number from the number of pixels instead of the number of pixels itself as each identification code is that it is less susceptible to a change in gradation of each pixel when video data is collected.

(B) When the block position is used as a block identification code In the latter case where the block number is obtained as the identification code of each block, the identification codes are integrated by concatenating or adding, adding, and subtracting the identification codes. One identification code can be generated. In the generation of the integrated identification code, an operation is performed on the identification code of each block with reference to the parameter 14f by the integrated identification code generation program 14d. For example, addition processing may be performed using a mathematical expression stored in the parameter area 14f or a coefficient provided for each block as a variable.

The MPU 13 temporarily stores the integrated identification code generated from the video data of the photograph 8 in the memory 14, sends a transmission message of the identification code to the IC card 1, Wait for the transfer of the integrated identification code as a comparison reference. The visual confirmation area 8a
Depending on the nature of the image, a configuration in which the enhancement process is omitted is also possible. For example, as an operation for obtaining an identification code from image information in each block, the number of pixels having a gradation equal to the threshold value among pixels in each block is compared with a preset threshold value. Alternatively, any one of the number of pixels having a gradation higher than the threshold value or the number of pixels having a gradation lower than the threshold value may be used as the identification code.

Next, the IC card 1 will be described.
In the C card 1, the identification code group 5 a stored in the EEPROM 5 is based on the above-described block division processing for the video information obtained by taking the photograph 8 by the digital camera 11.
A three-stage process of an emphasis process and a count process is performed, an identification code is extracted for each block, and the extracted identification codes are sequentially arranged as comparison reference identification codes. The redundant code 5b is added to perform error detection for each identification code, and is provided in correspondence with the identification code of each block. May be provided for the whole. The redundant code 5b is for checking whether the identification code group 5a has been tampered with. The redundancy adding process will be described. In the redundancy adding process, the original data is converted, the redundant data is generated by a predetermined process, and a part of the identification code is converted so that the original data is not falsified. Add as This makes it possible to detect a case where the original data is tampered with.

As for the setting of the redundancy for the identification code group 5a, it is preferable to add redundant data calculated using a function that can be defined using a Galois field.
Functions that can be defined using the Galois field include CRC polynomial functions and functions corresponding to BCH codes and Reed-Solomon codes. In addition, in setting the redundancy for a plurality of identification codes, redundancy calculated using a function defined using a Galois field may be added. It is particularly preferable that the ratio of the redundancy to the plurality of identification codes is set to a ratio of 1/10 or more and twice or less with respect to the identification code having no redundancy.

It is the identification code tampering check program 3b that checks this tampering. IC card 1
Data processing device 12 to IC card interface 15
, The processor 2 first executes the identification code falsification check program 3b and checks whether or not there is falsification by error detection using the identification code group 5a and the redundant code 5b. I do. Here, if an error is found, it indicates that there is tampering, and a response message to that effect is returned to the data processing device 12. If it is determined that there is no tampering, the processor 2
Executes the identification code integration processing program 3c to execute the integrated identification code generation program 14d of the data processing device 12.
By performing the same processing as described above, an integrated identification code is generated from the identification code group 5a and returned to the data processing device 12 as a response message.

The identification code group 5a may be registered by the IC card 1 receiving the transfer of the identification code of each block generated by the data processing device 12, and the processor 2 executing a special program. , Separately, I
When the C card is issued, the same photograph may be read by a digital camera to generate video data, an identification code may be generated for each block, and registered in the EEPROM 5. Similarly, the redundant code 5b may be generated by the data processing device 12, transferred to the IC card 1, and registered, or may be separately calculated from the identification code of each block and registered.

Next, output of evidence using a card will be described. According to the present invention, a function of outputting information indicating that the card is a valid owner card to both the card owner and the system administrator as evidence is added. The MPU 13 executes the integrated identification code generation program 14d as information indicating that the card belongs to a valid owner.
1 is further encrypted (encoded) by performing arithmetic processing on information integrated with the information recorded on the recording medium of the card at a portion not shown in FIG. Output as evidence to both parties. In this case, the evidence is output to paper, and additionally, the evidence information is recorded in a recordable storage area of the recording medium of the card. Usually, the card 1 has a magnetic stripe 1a
And the IC 1b are mounted, the evidence information can be recorded on the magnetic stripe 1a and the IC 1b. As a recording medium, at least one of a magnetic recording medium, an IC, and an optical recording medium only needs to be mounted, and a combination different from that of this embodiment can be used.

In the above embodiment, the integrated identification code obtained from the video data of the photo 8 and the IC card 1 is compared with the integrated identification code serving as a comparison reference obtained from 1. However, there are cases where it is desired to obtain higher security. In such a case, the IC card 1 is provided with a means (matching program) for detecting the coincidence between the integrated identification code obtained from the video data and the integrated identification code generated internally, and the integrated data transmitted from the data processing device 12 is provided. It is preferable to detect a match with the identification code. Further, the matching may be detected not by the integrated identification code but by matching the identification code of each block corresponding to the block. In such a case, the identification codes transmitted from the data processing device 12 are transmitted to the IC card 1 corresponding to the respective blocks.

[0027]

As described above, according to the present invention, visible information for identifying an individual, such as a photograph, a sign character, or a real seal, for identifying the individual, which is affixed or engraved on the card. Is read as video information, and based on the read video information, the identification information generating means divides the visible information area into a plurality of blocks, and performs predetermined arithmetic processing on the video information of each block in correspondence with each block. ,
Since the identification information is generated for each block and the matching means detects a match between the generated identification information for each block and the comparison reference information for each block stored in advance, and obtains a matching result. In addition, since the arithmetic processing for generating the identification information requires only data processing corresponding to the block, the processing is simpler than the arithmetic processing for the entire video information, and accordingly, the load of the arithmetic processing is small. By generating the identification information, high security can be ensured, so that the arithmetic processing for generating the identification information for each block can be simplified. As a result, authentication with high confidentiality can be performed by simple arithmetic processing, unauthorized use such as forgery of a card can be prevented, and security in authentication can be improved.

[Brief description of the drawings]

FIG. 1 is a block diagram showing one embodiment of an IC card authentication system to which a card authentication system of the present invention is applied.

FIGS. 2A and 2B are explanatory diagrams of a method of dividing a video affixed to an IC card. FIG. 2A is an explanatory diagram of an original image, and FIG. Explanatory diagram,
(C) is an explanatory view of another equal division.

FIGS. 3A and 3B are explanatory diagrams of a gradation change in a Laplacian filter process. FIG. 3A is a diagram illustrating a gradation change in an original image, and FIG. 3B is a diagram illustrating a floor after the Laplacian filter process. FIG. 7C is an explanatory diagram of the tone change, and FIG. 9C is an explanatory diagram of the tone conversion after performing the edge enhancement filter processing.

FIG. 4A is an explanatory diagram of a mask for contour enhancement processing of video data by a Laplacian filter;
(B) is an explanatory view of a mask of the contour enhancement filter processing.

[Explanation of symbols]

1 IC card, 2 processor, 3 ROM, 4 R
AM, 3a: system program, 3b: identification code falsification check program, 3c: identification code integration processing program, 3e: reception processing program, 3d: response program, 5a: identification code group, 5b: redundancy code,
5b: Data conversion parameters 5, 6, 13: I / O port, 7: Bus, 10: IC card reader / writer, 11: Digital camera, 12: Data processing device, 13: MPU, 14: Memory, 14a: Block division Processing program, 14b: emphasis processing program, 14c: count processing program, 14d: integrated identification code generation program, 14e: collation program, 1
4f: parameter, 15: IC card interface.

Claims (7)

[Claims] (1) a photograph, a sign character,
A card having an area of visible information for identifying the individual such as a real seal on the surface, a reader for reading the visible information from the card as video information, and a reader for the visible information based on the video information obtained from the reader. Identification information generating means for performing predetermined arithmetic processing on the video information of each block when the area is divided into a plurality of blocks and generating identification information for each of the blocks, and identification information for each of the blocks; And a matching means for detecting a match between the comparison reference information for each block stored in advance and outputting a matching result. 2. The apparatus according to claim 1, further comprising: integrating means for integrating the identification information corresponding to each of the blocks generated by the identification information generating means into one identification information, wherein the card is an IC card, and the comparison reference information is , Corresponding to the one integrated identification information, wherein the identification information generating means generates identification information for each of the blocks after receiving the video information and performing edge enhancement processing, the collation means, The card authentication system according to claim 1, wherein a match between the one piece of identification information integrated by the integration means and the comparison reference information is detected. 3. The card authentication system according to claim 2, wherein said identification information generating means generates identification information for each block obtained by equally dividing said visible information area as its block position with respect to all blocks. 4. The video information includes one screen of n × m (n, m
Is a positive integer) bitmap image information of one screen developed into pixels, and the predetermined arithmetic processing by the identification information generating means is a signal level corresponding to each of the pixels in the block of the video information. Is compared with a preset threshold value, and among the pixels in each of the blocks, the number of pixels having a gradation equal to the threshold value and the number of pixels having a gradation greater than the threshold value 3. The card authentication system according to claim 2, wherein any one of the number of pixels having a tone smaller than the threshold value is generated as the identification information in each of the blocks. 5. The video information includes one screen of n × m (n, m
Is a positive integer) bitmap image information of one screen developed into pixels, and the predetermined arithmetic processing by the identification information generating means is a signal level corresponding to each of the pixels in the block of the video information. Is compared with a preset threshold value, and among the pixels in each of the blocks, a position of a block having a pixel having a gradation equal to the threshold value and a gradation value larger than the threshold value are provided. 3. The card authentication system according to claim 2, wherein any one of a block position having a pixel and a block position having a pixel having a gradation smaller than the threshold is generated as the identification information. 4. 6. The card authentication system according to claim 2, wherein said identification information generating means includes a plurality of dividing means for dividing said visible information area into a plurality of blocks, and one of said dividing means is selected. 7. The comparison reference information for each block is information to which redundant information capable of detecting an error is added.
Card authentication system as described.