JP2000030028A - Authentication medium, authentication medium issuing device, and authenticating device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve the security of application by constituting an authentication medium so that biometric information can be recorded on and read out of a recording medium such as an IC card and a SIM chip. SOLUTION: Necessary items of respective files are inputted by a keyboard and then user's authentication card such as an IC card and a SIM is inserted into an insertion slot 12. Then, the read of biometric information of the user is guided and displayed on a display unit 13, and when the user places a specific finger on a sensor 14 to read the fingerprint out, fingerprint information is taken in and the feature quantity of the fingerprint is read according to the matching level and matching score of set attribute data. Thus, when the user's fingerprint information is determined together with its attribute data, they are written to the authentication card 11 together with the necessary items which are already inputted to constitute the authentication medium.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

TECHNICAL FIELD The present invention relates to, for example,
The present invention relates to an authentication medium, an authentication medium issuing device, and an authentication device that can authenticate a person in settlement of distribution or the like.

[0002]

2. Description of the Related Art Conventionally, since high security is required in the settlement fields such as finance and distribution described above, highly reliable authentication is also required for authentication of a person who executes processing.
For example, the application for executing the above-described payment processing includes a biometric sensor (comprising a fingerprint reader and a CCD array) for reading a user's fingerprint, and a storage unit for storing user's fingerprint information registered in advance. When the user performs a payment process, the fingerprint of the user is read by the biometric sensor, and is compared with the fingerprint information stored in the storage means, and is determined to be the same. can do.

In such a configuration, it is necessary for the application to store biometric information (for example, fingerprint information) of all the users to be operated in the storage means, and the storage capacity becomes extremely large. Have a point.

[0004]

SUMMARY OF THE INVENTION The present invention provides an application for storing biometric information of a user on a recording medium such as an IC card or a shim chip (SIM chip) owned by the user and making the user own the application. It is an object of the present invention to provide an authentication medium capable of performing highly reliable authentication of an individual with a reduced storage capacity on the side.

Furthermore, even if the reading performance of the biometric sensors provided on each application side varies, good personal authentication can be performed, and further, personal authentication can be performed according to the security level set for each application. Further, it is another object of the present invention to provide an authentication medium capable of improving the security of the application by allowing the application to move when the personal authentication is obtained, and preventing the authentication medium from being misused. It is still another object of the present invention to provide an authentication medium issuing device capable of issuing an authentication medium that achieves the above object. It is still another object of the present invention to provide an authentication device that can perform personal authentication using an authentication medium that achieves the above object.

[0006]

According to a first aspect of the present invention, there is provided an authentication medium storing biometric information in a readable recording medium.

According to a second aspect of the present invention, there is provided an authentication medium which records attribute information such as a collation level and a collation score of the biometric information in addition to the configuration of the invention according to the first aspect. Features.

According to a third aspect of the present invention, in addition to the configuration of the first aspect of the present invention, there is provided an authentication medium recording attribute information corresponding to a plurality of security levels.

According to a fourth aspect of the present invention, in addition to the configuration of the first aspect of the present invention, there is provided an authentication medium which records information for permitting an application to move when authentication is obtained. And

According to a fifth aspect of the present invention, there is provided an authentication medium provided with destruction means for making it impossible to read out recorded information when authentication is not obtained, in addition to the configuration of the first aspect of the present invention. There is a feature.

According to a sixth aspect of the present invention, there is provided an apparatus for issuing an authentication medium according to any one of the first to fifth aspects, wherein a recording means for recording information on the authentication medium, and An authentication medium issuance apparatus comprising: a reading unit for reading; and a control unit for controlling recording of the biometric information read by the reading unit on an authentication medium by a recording unit.

According to a seventh aspect of the present invention, there is provided an input unit for inputting attribute information of biometric information, and the attribute information input by the input unit is recorded. And a control means for controlling recording by means.

According to an eighth aspect of the present invention, there is provided an apparatus for authenticating a user by accepting one of the authentication media according to any one of the first to fifth aspects, wherein the first apparatus reads information from the authentication medium. Reading means, second reading means for reading the user's biometric information, biometric information recorded on the authentication medium read by the first reading means, and user's biometric information read by the second reading means And a determination means for determining the user by comparing the authentication device with the authentication device.

[0014]

According to the authentication medium of the present invention, biometric information represented by fingerprints, voice prints, retinal prints, facial features, and the like can be read from recording media represented by IC cards, SIM chips, and the like from which data can be read. The authentication medium is configured so that it can be recorded and read in the application, so that the application does not need to store and save the biometric information of all the users to be operated in the storage means. Very small capacity is required. Also, 1
One authentication medium can be used for a plurality of applications in different industries, such as a bank, a credit company, a post office, other financial institutions, and other organizations requiring authentication, which is convenient.

Further, as attribute information of the biometric information, for example, a collation level in which a threshold level of a reading means for reading the biometric information is set, or a feature point which is a reference value for collating and determining the biometric information. If the collation score with the number of points set is recorded, the collation can be performed even if the reading means for collating the biometric information has a variation in the reading accuracy or if the user side has a slight variation in the reading condition. By adjusting the accuracy, it is possible to read the information required for verification, and even if there are multiple authentication devices, verification can be performed under the same conditions. Even if the user is the user himself, authentication is impossible due to a problem on the machine side Is prevented.

Further, by recording information corresponding to the security level as attribute information of the biometric information, it is possible to perform collation corresponding to the security level on the application side, which is convenient.

Further, if authentication is not obtained even after executing the authentication processing, it is determined that the unauthorized use by a third party is performed. Security can be enhanced, and it is also a countermeasure against forgery.

Further, the authentication medium issuing device can issue an authentication medium having the above-described effects, and the authentication device can perform authentication processing of the authentication medium having the above-described effects. Any one of the authentication medium issuing device and the authentication device can also have a mutual function.

[0019]

An embodiment of the present invention will be described below with reference to the drawings. The drawing shows an authentication card and an authentication device. In FIG. 1, an authentication device 10 has an insertion slot 1 into which an authentication card 11 is inserted.
2, a display 13 with a touch panel for displaying operation guidance and other information and for inputting necessary items, and a biometric sensor 14 composed of a CCD array for reading a fingerprint of an operator. The authentication device 10 is connected to a higher-level device, for example, a personal computer (not shown) and drives various applications.

The above-mentioned authentication card 11 is formed of an IC card, on which personal information of the holder and fingerprint information of the holder as biometric information and other necessary information are recorded.

The authentication card 11 has the authentication device 10
When the card is inserted into the insertion slot 12, the card information is read by the internal IC card reader, then the registered finger of the authentication card holder is placed on the upper surface of the biometric sensor 14 to read the fingerprint, and the read is performed. The fingerprint information and the fingerprint information recorded on the authentication card 11 are compared, and if a match of the fingerprint is determined, the person is authenticated. When the personal authentication is obtained, the operation of a predetermined application of the personal computer connected to the authentication device 10 is permitted. Alternatively, the terminal connected to the authentication device 10 is activated.

FIG. 2 shows a block diagram of a control circuit of the authentication device 10 described above. The CPU 20 controls the driving of each circuit device according to a program stored in the ROM 21, and the RAM 22 composed of a flash RAM is necessary for operation. Store the data. The touch panel 23 performs a touch input corresponding to the display on the display 13, and the IC card reader 24 transmits card data to the authentication card 11, which is provided inside the above-described insertion slot 12 and is configured by an inserted IC card. reading/
Write. The contact output terminal 25 outputs the result of personal authentication to a device connected thereto, for example, an automatic transaction processing device. The upper interface circuit 26 transmits and receives data by connecting to a personal computer (PC), which is a host. In addition, the personal computer (P
C), when the authentication device 10 is used as a device for issuing the authentication card 11, becomes a means for inputting card data necessary for the authentication card 11 such as personal information.

FIG. 3 shows a block diagram of a control circuit of the authentication card 11 described above. The CPU 30 controls driving of each circuit device based on a program and setting data stored in the ROM 31, and the RAM 32 composed of a flash RAM operates. In addition to storing data necessary for the card, card data is stored. The CPU 30, ROM 31, RAM 3
2 is composed of one chip. The IC contact 33 is connected to the IC card reader 15 of the authentication device 10.

The fuse ROM 34 has a function of electrically destroying (fusing) an electric circuit. The ROM 34 stores a vector address for starting a program when the power is turned on.
If the circuit No. 4 is destroyed, the program cannot be started. As a result, the card data can be protected without being read illegally, and the security of the authentication card can be enhanced.

The fuse ROM write control circuit 35
Is a circuit for supplying a site power supply to the above-mentioned fuse ROM 34 and destroying the ROM 34.
Controlled by 0.

FIG. 4 shows card data recorded in the flash RAM 32 of the authentication card 11, and the card data is composed of three files: a master file, an authentication file, and a personal file.

The above-described master file is information such as a code number indicating an issuer, which is an issuer key. If the issuer key is not determined to be appropriate at the time of verification, reading / writing of the authentication file is not permitted. .

The above-mentioned master file contains administrator information,
It consists of three small files, an administrator PIN (personal identification number) and an administrator terminal key. The management information includes an authentication unit number (authentication device number), an administration terminal number, a collation level, a collation score,
It consists of position information and the number of reading errors.

The above-mentioned authentication unit number indicates the device number of the authentication device 10, and records the device number recorded in the ROM of the control unit of the authentication device 10. The management terminal number indicates the machine number of an operable terminal, and records the machine number recorded in the program of the host computer. The collation level indicates a set value of a threshold level when the biometric sensor 14 reads a fingerprint. The collation level can be set for each authentication device 10. The collation score indicates the number of feature points of the fingerprint. The position information is the X.D. of the center of the feature point. Indicates the Y coordinate value, and is used for alignment of fingerprint information when the biometric sensor 14 reads and verifies a fingerprint. The number of reading errors is a count value obtained by counting the authentication NG results. If there is a predetermined number of NG or more, the authentication card 11 is electrically destroyed and cannot be used.

The administrator PIN (personal identification number) indicates the personal identification number of the managing user, the administrator terminal key indicates information that permits operation of the terminal, and the administrator PIN and the administrator terminal key described above. Does not allow reading / writing of personal files when does not indicate a particular relationship.

The above-mentioned personal file is composed of two small files, a personal information key and a bio key. The personal information key is key information at the time of collation. Read / write not allowed. Also, as personal information, the type, name, ID code, age, date of birth, address,
Record phone number, company name, etc. The bio key is key information at the time of collation, and if the suitability is not determined, reading / writing of information on the next biometric information is not allowed. Also, as biometric information,
Information indicating the characteristics of the fingerprint, as attribute data of the fingerprint,
Record the collation level and collation score. The biometric information includes, in addition to fingerprints, voiceprints, retinal prints,
It includes features that can identify individuals, such as facial features and palm prints.

FIG. 4 shows information that is not disclosed.
The security level is set to a plurality of levels, for example, levels 1, 2, and 3 for various applications, and the matching score is set to 90% or more, and the matching score is set to 80% to 90%.
% Collation, 70% -80% collation,
Authentication can be obtained according to the security of the application.

Next, the processing operation of the authentication device 10 will be described. The authentication device 10 has a function of issuing an authentication card 11, and the authentication card 11 is issued by an attendant. At the time of this issuance, a personal computer (PC) is connected to the authentication device 10 and necessary card data is transmitted from the PC. Is input.

The processing of the CPU 20 of the authentication device 10 for issuing the above-described authentication card 11 will be described with reference to the flowchart of FIG. The attendant (operator) is given an operator authentication card 11 and a password for registration in advance, and the display unit 13 guides the user to enter the password. When the attendant inputs the password from the touch panel 23 of the display unit 13, Compared with the password stored in the RAM 22 in advance, if the passwords do not match, an input is required again, and if they match, the process proceeds to the next step (steps n1 and n2).

In the next step, the guidance of the insertion of the operator's authentication card 11 is displayed on the display 13, and when the operator's authentication card 11 is inserted into the insertion slot 12 based on this display, the IC contact 33 is connected to the IC. Connected to the card reader 24, the card data is read by the IC card reader 24 and the card data is checked, that is, the issuer key, administrator PIN, administrator terminal key, personal information key, bio key, etc. When the suitability is recognized, the display 13 guides the operator to read the biometric information, and when the operator places a predetermined finger on the biometric sensor 14 to read the fingerprint, the fingerprint information is obtained. At the same time, the biometric information set in the card data matches the matching level and matching score of the attribute data. And Zui be collated is determined (step n3, n4).

When it is determined in the above-described fingerprint information collation determination that the two match or the predetermined amount of feature (matching score) matches, the operator is authenticated, and the user is allowed to issue the authentication card 11 of the user. (Step n
5).

When the clerk is authorized to issue the authentication card 11 for the user, the clerk prepares the card data by using a personal computer (PC) connected to the authentication device 10 so as to create the card data shown in FIG. Input the necessary information of the file from its keyboard (input means),
User authentication card 11 (IC card) in insertion slot 12
Are inserted (steps n6 and n7).

Next, the reading of the biometric information of the user (user) is displayed on the display 13. When the user puts a predetermined finger on the biometric sensor 14 and reads the fingerprint, the fingerprint information is captured. At the same time, the feature amount of the fingerprint is read based on the set matching level and matching score of the attribute data (step n8).

When the user's fingerprint information is determined together with the attribute data in this way, the card data is completed together with the previously input necessary items, and this card data is written on the authentication card 11 by the IC card reader 24. And the user authentication card 11 is completed.
9).

Thereafter, it is determined whether or not the next user's authentication card 11 has been issued. If there is a next issuance, the process returns to step n6, and if not, the issuance process ends (step n10).

Next, the processing of the CPU 20 of the authentication device 10 when changing the card data of the user authentication card 11 already issued by the authentication device 10 will be described with reference to the flowchart of FIG. The attendant (operator) is given an operator authentication card 11 and a password for change in advance, and the display unit 13 guides the input of the password, and when the attendant inputs the password from the touch panel 23 of the display unit 13, Compared with the password stored in the RAM 22 in advance, if the passwords do not match, an input is required again. If the passwords match, the process proceeds to the next step (steps n11 and n12).

In the next step, the guidance of the insertion of the operator's authentication card 11 is displayed on the display 13, and based on the display, the operator's authentication card 11 is inserted into the insertion slot 12. The data is read and the card data is checked.

That is, the issuer key, the administrator PIN, the administrator terminal key, the personal information key, the bio key, and the like are checked, and if the suitability is recognized, the reading of the operator's biometric information is displayed on the display 13 as a guide. When the clerk puts a predetermined finger on the biometric sensor 14 and reads the fingerprint, the fingerprint information is captured, and the biometric information set in the card data is used as the matching level and matching score of the attribute data. Are collated and determined (steps n13 and n14).

If it is determined in the above-described fingerprint information collation determination that the data matches or the feature value (collation score) of a predetermined value matches, the operator is authenticated, so that the operator can change the card data of the user authentication card 11. Operation is permitted (step n15).

When the operation of changing the authentication card 11 for the user by the attendant is permitted, the authentication card 11 (IC card) for the user is inserted into the insertion slot 12 (step n16). The inserted authentication card 11 is read by the IC cart reader 24, and the personal computer (P
The operator corrects and changes the personal information displayed on the display unit (C) and having the card owner changed from the keyboard (input means) of the personal computer (PC).
For example, the age of the cardholder, the address, the telephone number, the company name, and other changes are corrected (step n17). Then, the fingerprint of the cardholder is also changed. It is determined whether or not the change is made (step n18). If there is a change, the reading of the biometric information of the user (user) is displayed on the display 13 as a guide. To read the fingerprint, the fingerprint information is captured, and the feature amount of the fingerprint is read based on the set matching level and matching score of the attribute data (step n1).
9).

When the fingerprint information of the user is determined together with the attribute data in this way, the card data is completed together with the necessary items to which the changed items have been input, and the card data is transferred to the authentication card by the IC card reader 24. 1
1 and the change processing of the user authentication card 11 is completed (step n20).

Thereafter, it is determined whether or not there is a next change operation of the user authentication card 11, and if there is a next change operation, the process returns to step n16, and if not, the process is terminated (step n21).

Next, a description will be given, with reference to the flow chart of FIG. 7, of the verification processing of the personal authentication of the user authentication card 11 by the CPU 20 of the authentication apparatus 10. The attendant (operator) is given an operator authentication card 11 and a password for collation in advance, and the display unit 13 guides the user to enter the password, and when the attendant enters the password from the touch panel 23 of the display unit 13, , RAM 22
If the passwords do not match, the input is requested again. If the passwords match, the process proceeds to the next step (steps n31 and n32).

In the next step, the guidance of the insertion of the operator's authentication card 11 is displayed on the display 13, and based on the display, the operator's authentication card 11 is inserted into the insertion slot 12. The data is read and the card data is checked.

That is, the issuer key, the administrator PIN, the administrator terminal key, the personal information key, the bio key, and the like are checked, and if the suitability is confirmed, the display unit 13 guides the operator to read the biometric information. When the clerk puts a predetermined finger on the biometric sensor 14 and reads the fingerprint, the fingerprint information is captured, and the biometric information set in the card data is used as the matching level and matching score of the attribute data. Are collated and determined (steps n33 and n34).

If it is determined in the above-described fingerprint information collation determination that the two match or the predetermined amount of feature amount (collation score) matches, the operator is authenticated, and the operator verifies the user authentication card 11 for personal authentication. Operation is permitted (step n35).

When the operation of changing the authentication card 11 for the user by the attendant is permitted, the authentication card 11 for the user is inserted into the insertion slot 12 (step n36). The inserted authentication card 11 is read by the IC cart reader 24 and displayed on a display of a personal computer (PC). Next, the display 13 guides the user (user) to read the biometric information. When the user reads a fingerprint by placing a predetermined finger on the biometric sensor 14, the fingerprint information is captured, and based on the set matching level and matching score of the attribute data,
The characteristic amount of the fingerprint is read (step n37).

Next, the biometric information recorded on the authentication card 11 and the biometric information based on the fingerprint of the user read by the sensor 14 are collated and determined based on the collation level and the collation score (step n3).
8) If they match, personal authentication has been obtained,
An authentication output is output from the contact output terminal 25 (see FIG. 2) (step n39). With this output, the terminal connected thereto, for example, an automatic transaction processing device or the like is activated.

If it is determined in step n38 that there is no match, the process returns to step n36 to repeat the collation operation again. Is determined, the fuse ROM 34 (see FIG. 3) of the authentication card 11 is destroyed, and the use of the authentication card 11 becomes impossible.

If the above-described authentication and collation processing is continuous, the process returns to step n36. If not, the process is terminated (step n40).

Next, the processing operation of the CPU 20 for setting data required to start up the authentication device 10 will be described with reference to the flowchart of FIG. The attendant (operator) is given an operator authentication card 11 and a password for setting in advance, and the display unit 13 guides the user to enter the password, and when the attendant enters the password from the touch panel 23 of the display unit 13, , RAM in advance
Compared with the password stored in 22, if they do not match, input is requested again, and if they match, the process proceeds to the next step (steps n 41 and n 42).

In the next step, the guidance of the insertion of the operator's authentication card 11 is displayed on the display 13, and based on the display, the operator's authentication card 11 is inserted into the insertion slot 12. The data is read and the card data is checked.

That is, the issuer key, the administrator PIN, the administrator terminal key, the personal information key, the bio key, and the like are checked, and if the suitability is confirmed, the display unit 13 guides the operator to read the biometric information. When the clerk puts a predetermined finger on the biometric sensor 14 and reads the fingerprint, the fingerprint information is captured, and the biometric information set in the card data is used as the matching level and matching score of the attribute data. Are collated and determined (steps n43, n44).

If it is determined in the above-mentioned fingerprint information collation determination that the two match or the predetermined amount of feature (matching score) matches, the operator is authenticated, and the setting operation by the operator is permitted (step n45). .

When the setting operation by the attendant is permitted, a setting screen is displayed on the display of the personal computer (PC), and the setting data is input by the keyboard (steps n46 and n47). This setting data includes, for example, passwords for registration, change, verification, and setting,
Date, applicable card, automatic change flag, change processing flag,
Other necessary data.

When the input and editing of the setting data described above are completed, the setting data is updated to a higher-level device.
The setting process ends (steps n48, 49, 50).

According to the authentication card 11 shown in the above-described embodiment, the biometric information based on the fingerprint is recorded on the readable IC card and is readable, so that the application side of the personal computer (PC) is provided. It is not necessary to store and save the biometric information of all the users to be operated in the storage means, and the storage capacity on the application side can be extremely small. Further, one authentication card 11 can be used for a plurality of applications in different industries such as a bank, a credit company, a post office, other financial institutions, and other institutions requiring authentication. Having.

As attribute information of the biometric information, for example, a sensor 1 for reading the biometric information
When a collation level in which a threshold level of 4 is set and a collation score in which the number of feature points serving as reference values for collating and determining biometric information are set are recorded, a sensor 14 for collating biometric information is recorded. Even if there is a variation in the reading accuracy of the device, or even if the user has a slight change in the reading condition, the information necessary for the matching can be read by adjusting the matching accuracy. Even if there is more than one, the collation can be performed under the same condition, and even if the user is the user himself, it is prevented that the authentication becomes impossible due to a problem on the machine side.

Further, by recording information corresponding to a plurality of security levels as attribute information of biometric information, collation corresponding to the security level on the application side can be performed.

Further, if the authentication is not obtained even after executing the authentication processing, it is determined that the unauthorized use by a third party is performed. In this case, the recorded information is made unreadable by the fuse ROM 34 (destruction means). Thereby, the security of the authentication card 11 can be enhanced, and it is also a countermeasure for forgery.

Further, the authentication device 10 can issue and authenticate the authentication card 11 having the above-mentioned effects, and can be used alone as the authentication medium issuing device and the authentication device.

In the above embodiment, a fingerprint is shown as biometric information. However, in addition to a fingerprint, a fingerprint, a retinal print, a facial feature, a palm print, and other features that can identify an individual can be used. .

In the correspondence between the configuration of the present invention and the above-described embodiment, the authentication medium of the present invention corresponds to the authentication card 11 using the IC card of the embodiment or the SIM chip,
Similarly, the destruction means corresponds to the fuse ROM 34, the fuse ROM write control circuit 35, and other means for physically destroying the authentication card 11, and the recording means of the authentication medium issuing device corresponds to the IC card reader 24. The reading means corresponds to the biometric sensor 14, the control means corresponds to the CPU 20, the input means corresponds to a keyboard of a personal computer (PC), and the first reading means of the authentication device is an IC card reader. 24, the second reading means corresponds to the biometric sensor 14, and the determining means corresponds to the CPU 20, but the present invention is applied based on the technical idea described in the claims. It is not limited only to the configuration of the embodiment.

[Brief description of the drawings]

FIG. 1 is a perspective view of an authentication device and an authentication card.

FIG. 2 is a control circuit block diagram of the authentication device.

FIG. 3 is a block diagram of a control circuit of the authentication card.

FIG. 4 is an explanatory diagram of card data of an authentication card.

FIG. 5 is a flowchart of an authentication card registration process.

FIG. 6 is a flowchart of an authentication card change process.

FIG. 7 is a flowchart of an authentication card authentication verification process.

FIG. 8 is a flowchart of an authentication card setting process.

[Explanation of symbols]

 Reference Signs List 10 authentication device 11 authentication card 14 biometric sensor 20 authentication device CPU 24 IC card reader 34 fuse ROM 35 fuse ROM write control circuit

Continued on the front page F term (reference) 3E042 BA17 BA18 CC02 3E044 AA09 AA20 BA04 CA06 CA07 CA10 DA05 DC05 5B035 AA06 AA13 AA14 BB09 BC01 CA11 CA22 CA29 CA38 5B058 CA13 CA25 KA02 KA04 KA11 KA32 KA38 YA02

Claims (8)

[Claims] An authentication medium storing biometric information in a readable recording medium. 2. A collation level of the biometric information,
2. The authentication medium according to claim 1, wherein attribute information such as a collation score is recorded. 3. The authentication medium according to claim 1, wherein attribute information corresponding to a plurality of security levels is recorded. 4. The authentication medium according to claim 1, wherein information permitting the operation of the application when the authentication is obtained is recorded. 5. The authentication medium according to claim 1, further comprising destruction means for making it impossible to read the recorded information when the authentication is not obtained. 6. An apparatus for issuing an authentication medium according to claim 1, wherein said recording means records information on said authentication medium, reading means reads biometric information, and said reading means comprises: An authentication medium issuing device comprising: a control unit configured to control recording of read biometric information on an authentication medium by a recording unit. 7. The authentication medium issuing apparatus according to claim 6, further comprising: input means for inputting attribute information of the biometric information; and control means for recording and controlling the attribute information input by the input means with a recording means. 8. An apparatus for accepting one of the authentication media according to claim 1 and authenticating a user, wherein said first reading means reads information from said authentication medium, and a biometric of the user. The second reading means for reading the information, the biometric information recorded on the authentication medium read by the first reading means, and the biometric information of the user read by the second reading means are compared to identify the user. An authentication device, comprising: a determination unit.