JP2000215294A - Ic card incorporating living body identification information and identity certification method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an IC card incorporating living body identification information improvable in reliability by strictly certifying identity and its identity certification method. SOLUTION: The IC card incorporating living body identification information is provided with a living body identification information storage part 116b stored in the IC card 111 and a living body identification information collation processing part 115a collating living body identification information stored in the living body identification information storage part 116b with living body identification information which a camera reads.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to an IC card with built-in biometric identification information and a personal identification method for the same.

[0002]

2. Description of the Related Art A conventional personal (personal) authentication method using an IC card relies on a password stored by the user.

FIG. 13 is a schematic diagram of such a conventional personal authentication means using an IC card.

In this figure, reference numeral 11 denotes an IC card, 12
Is an IC chip built in the IC card, 13 is password information, 14 is password (personal identification) result information, 15 is an access control unit in the IC chip,
Reference numeral 6 denotes a password collating unit of the access control unit, 17 denotes a password information storage unit, and 18 denotes various information storage units.

[0005] As shown in FIG.
And the result (OK / NG) information 14 is stored in the IC card 11
And an external device.

FIG. 14 is a schematic diagram of a personal authentication means in a conventional entry / exit management system.

As shown in this figure, a person stands in front of a door 29 of a room to enter and exit, and a camera 21 is installed to read the iris pattern 26 of the iris 20 of the person. An ID card reader (IC card reader) 23 is provided beside the door. Further, there is an entrance / exit management system 25 for controlling these devices, and a database 24 in which an iris pattern 26, a user ID and the like are registered exists therein. In addition,
Reference numeral 22 denotes an IC card.

Here, the iris is one of living body identification information and represents an iris portion of a human eye. The iris pattern is digital information obtained by encoding the iris pattern.

[0009]

However, in the above-described personal authentication method, in terms of the function of the IC card,
No matter how good the security function is, IC
In some cases, such as card and password theft, they were misused.

Specifically, theft of an IC card and a password causes (1) retrieval of information such as personal information in the IC card (leakage of privacy), and (2) improper withdrawal of money from an account by impersonating another person. It was possible to illegally enter a room where entry and exit were controlled, and take it out of a security-controlled safe.

Further, in the conventional case, the identification data is not stored in a card carried by the person, but is stored in a data storage device for centrally storing data. Problems such as forgery and fraudulent use of fraudulent cards (impersonation of iris) are rare.

The present invention has been made in order to solve the above problems.
An object of the present invention is to provide an IC card with built-in biometric identification information which can improve reliability by strictly performing personal authentication and a personal authentication method thereof.

[0013]

In order to achieve the above object, the present invention provides: [1] a biometric identification information built-in type IC card, wherein a biometric identification information storage section stored in the IC card; The image processing apparatus further includes a biometric identification processing unit that compares biometric identification information stored in the biometric identification information storage unit with biometric identification information read from the imaging device.

[2] The IC card with built-in biometric identification information according to [1], wherein a password information storage section for storing password information stored in the IC card, and a password information storage section for storing the password information. And a password information collation processing unit for collating the password information with the password information input from the input device.

[3] The IC card with built-in biometric identification information according to [1], wherein the biometric identification information is iris pattern information.

[4] In the personal authentication method using an IC card, biometric identification information is incorporated in the IC card, and the biometric identification information and the biometric identification information unique to the individual are processed by a biometric identification matching processing unit in the IC card. The processing is performed to perform personal authentication.

[5] The personal identification method using an IC card according to the above [4], wherein a collation history is stored in the IC card, and the collation history in the IC card is sequentially updated. It is.

[6] The personal identification method using an IC card according to the above [4], wherein the biometric identification information is iris pattern information.

[0019]

Embodiments of the present invention will be described below in detail.

First, a first embodiment of the present invention will be described.

FIG. 1 is a schematic diagram of a personal authentication unit using an IC card according to a first embodiment of the present invention.

In this figure, reference numeral 111 denotes an IC card, 1
12 is an IC chip built in the IC card, 113
Is password information, 114 is password information and information of the result of biometric identification information (identification), 115 is an access control unit in the IC chip, 115a is a password and biometric identification information matching processing unit of the access control unit, and 116a is a password An information storage unit 116b stores biometric identification information (here, an iris pattern) storage unit 11
Reference numeral 7 denotes various information storage units.

As described above, in the IC chip 112, the access control unit 115, the password information and biometric identification information matching processing unit 115a, the password information storage unit 1
16a, biometric identification information storage unit 1 such as an iris pattern
16b) and other various information storage sections 117 which record personal information and the like, input of the password information 113 of the IC card holder, collation result information [password (OK / NG) and biometric identification information (When the result is OK)] The output of 114 is configured to be exchanged between the IC card 111 and the external device.

FIG. 2 is a block diagram showing the structure of the biometric identification information embedded I shown in FIG.
It is a schematic diagram for explaining the example which applied the personal identification by a C card to the entrance / exit management system.

A person stands in front of a door 122 of a room to enter and exit, and an iris pattern recognition camera 121 for reading an iris pattern 126 of the iris 120 of the person is installed near the door 122. A password input device 123 and an IC card reader (IC card reader) 124 are provided beside the door 122. Further, there is an entrance / exit management system 125 for controlling these devices, and a database 129 in which a user ID and the like are registered exists in the entrance / exit management system 125.

In the IC card 111, iris pattern information A, which is biometric identification information of the IC card owner, is incorporated. If the password information verification is OK, the iris pattern information and the user ID can be read. .

Hereinafter, a method of personal authentication according to this embodiment will be described with reference to FIG.

(1) First, on the entrance / exit management system 125 side, when a person who is going to enter the room stands in front of the door 122 and inputs the IC card 111 to the IC card reader (IC card reader) 124, the iris pattern recognition system The camera 121 reads the iris pattern information of a standing person (step S1).

(2) Next, the password information 113 is inputted from the password input device 123, and the password information 113 is inputted.
Then, the iris pattern information A of the IC card 111 is requested based on No. 3 (step S2).

(3) The IC card 111 receives the password information 113 from an external device (step S11), and receives the password information 11 in the IC card 111.
3 (step S12), and password information 1
13 is OK, the IC card 11
The iris pattern information A, the user's iris pattern information, and the user ID registered in the device 1 are read (step S13), and the password matching result and its IC card 1 are read.
11 is returned with various information (iris pattern, user ID) registered in step 11 (step S14).

(4) On the entrance / exit management system 125 side, the iris pattern 126 read from the camera 121 is read.
The iris pattern is compared with the iris pattern in the IC card 111 (step S3).

(5) Next, the collation result is determined (step S4).

(6) If the result is OK in step S4, the password information 113 is searched (step S5).

(7) Next, the password information 113 is checked (step S6).

(8) Next, if the password information 113 is OK
If so, the door is opened (step S7).

As described above, according to the first embodiment of the present invention, (A) it is not necessary to register the iris pattern information of the user in the database on the entrance / exit management system side.
The iris pattern information is not leaked or falsified.

(B) The user can use the IC card in which his or her iris pattern information is registered by himself, and can use it with ease.

(C) Even if the IC card is lost,
Since the iris pattern information in the C card cannot be rewritten, there is no fear that another person impersonates himself and enters the room using the IC card.

(D) Since the iris pattern is stored in the IC card and does not need to be exchanged online, even if it is difficult to go online, such as a door scattered over a wide area, the iris pattern is located in various places. No need to set up a data database. Cost /
It is also advantageous in terms of maintenance.

(E) The collation method such as password collation, iris collation, and password + iris double collation can be freely determined by a system using an IC card. ) Can be selected. However, if the password is stolen, there is a risk that various information in the IC card will be read. (Note: The password itself is I
It is a mechanism that cannot be read from the C card, and there is a mechanism that the IC card itself invalidates the card if the password is incorrect three times in succession. (F) Since there is no need to go online, the IC card can be commonly used between different systems.

There are the following effects.

Next, a second embodiment of the present invention will be described.

FIG. 4 is a schematic diagram of personal authentication using an IC card according to a second embodiment of the present invention.

In this figure, reference numeral 211 denotes an IC card, in which an IC chip 212 is embedded. The access control unit 2 is inside the IC chip 212.
15 (a password collation processing unit 215a, a password information storage unit 216a, a biometric identification collation processing unit 215b, a biometric identification information storage unit 216b such as an iris pattern), and other various information storage units 218 storing personal information and the like. You. Biometric identification information by IC card holder (+
Password) 213 input and result (collation rate) information 214
Indicates the type of data exchanged between the IC card 211 and the external device.

FIG. 5 is a schematic diagram for explaining an example in which the personal authentication method using the biometric identification built-in IC card shown in FIG. 4 is applied to an entry / exit management system.

As shown in FIG. 5, a person stands in front of a door 222 of a room to enter and exit, and an iris pattern recognition camera 221 (imaging device) is installed to read the iris pattern information 220 of the person. I have. A password input device 223 and an IC card reading device 224 are provided beside the door 222. Further, there is an entrance / exit management system 225 for controlling these devices, and a database 229 in which a password or the like as a user ID is registered exists therein.

The IC card 211 contains iris pattern information 220 of the card owner, which is used in the card when performing the iris matching processing by the biometric identification matching processing unit 215b in the IC card 211. Has become. IC card 211 even if password is known
The iris pattern information 220 itself cannot be read from outside the IC card 211. That is, the iris pattern information 220 or the iris pattern information + password information is transmitted from the outside of the IC card 211 to the IC card 211, and the information of the authentication result (authentication rate) is returned.

When reading various data, it cannot be read unless the iris pattern information or the iris pattern information + password match. This configuration is significantly different from the first embodiment.

FIG. 6 is a flow chart of identity verification using an IC card according to the second embodiment of the present invention. With reference to this figure, how the personal authentication is performed in the entry / exit management system will be described.

(1) First, on the entrance / exit management system 225 side, when a person who is going to enter the room stands in front of the door 222 and inputs the IC card 211, the camera 221 reads the iris pattern information 220 of the standing person ( Step S21).

(2) Next, the read iris pattern information 220 (or iris pattern + password) is transmitted to the IC card (step S22).

(3) Next, the processing inside the IC card is performed. That is, when the IC card receives the iris pattern information from the external device (step S23), the IC card compares the iris pattern information with the iris pattern information in the IC card (step S2).
4) If the collation rate is equal to or more than the set value, the user ID in the IC card is read (step S25), and the iris pattern information collation result (collation rate) and the user ID are answered (step S26).

(4) Next, the entrance / exit management system 225 receives the result of collation in the IC card and the user ID (step S27).

(5) Next, based on the received collation rate and the security level of the room, a collation result (OK / NG) is determined in accordance with the received predetermined condition (step S28).

(6) Next, a user ID is searched (step S29).

(7) Next, the user ID is checked (step S30).

(8) If the user is a registered user, open the door (step S31).

Steps S28 and S30
In the case of NG, the process ends.

In step S22, authentication may be added not only with iris information but also with a password.

As described above, according to the second embodiment of the present invention, (A) it is not necessary to register the iris pattern information of the user in the database on the entrance / exit management system side.
The iris pattern information is not leaked or falsified.

(B) The user can carry his or her own IC card in which his or her iris pattern information is registered, so that the user can use it with ease.

(C) Even if the IC card is lost,
Since the iris pattern information in the C card cannot be rewritten, there is no fear that another person impersonates himself and enters the room. Further, since no information on the card can be read without the iris pattern information, there is no fear that the personal information is read by another person. (Note: If the verification rate is less than the set value three times in a row, the IC card itself can invalidate the card.) (D) The iris pattern information is stored in the IC card and exchanged online Since there is no need to do this, even if it is difficult to go online, such as doors scattered over a wide area, it is possible to cope without having to put a database of iris pattern data in various places. It is also advantageous in terms of cost and maintenance.

(E) Verification by iris, password +
The collation method such as double iris collation can be freely determined by a system using an IC card. Since the judgment result is obtained by the collation rate (%), the lower limit of the collation rate can be selected according to the security level of the entrance / exit (security necessity).

(F) Since there is no need to go online,
The IC card can be easily used in common between different systems.

(G) The password is forgotten in some cases because it is stored by the user. Some people leave a password memo at hand so that they do not forget it, and the password can be stolen from that memo. On the other hand, authentication using an iris is possible even if the user does not memorize the password, so that there is no fear of forgetting or being stolen from a memo or the like.

Next, a third embodiment of the present invention will be described.

FIG. 7 is a schematic diagram of a personal authentication unit using an IC card according to a third embodiment of the present invention, and FIG. 8 is a diagram showing an example of a data structure in biometric identification information.

In this figure, reference numeral 311 denotes an IC card, 3
12 is an IC chip built in the IC card, 313 is a password or biometric identification information, 314 is a collation result + three past collation history information, 315 is an access control unit in the IC chip, and 315a is an access control unit in the IC chip. A password information matching processing unit, 315b is a biometric identification matching processing unit, 316a is a password information storage unit, 316b
Denotes a biometric identification information (here, iris pattern) storage unit, and 317 denotes various information storage units.

As shown in FIG. 8, the iris pattern data 316b is stored in the biometric information storage 316b.
1. It has data of the past three times (latest three times) of the collation history 316b2.

As described above, this embodiment is almost the same as the second embodiment, except that the matching history is stored in the biometric identification information such as the iris pattern.

Although common to the first and second embodiments, in the case of biometric identification collation, it is generally difficult to perform 100% collation. In practice, the threshold is set to a value such as OK if the percentage is greater than or equal to%.

Further, the collation rate varies from person to person, and there is aging of the body.

In the third embodiment, the collation history (for example, the collation rates of the past three times) is stored in the IC card, so that the influence of individual differences in the collation rate and aging can be improved.

FIG. 9 is a schematic diagram for explaining an example in which personal authentication using the IC card with a built-in biometric identification shown in FIGS. 7 and 8 is applied to an entry / exit management system, and FIG. 10 is an entry / exit management of the third embodiment. It is an operation | movement flowchart of a system.

(1) First, a person who is going to enter the room stands in front of the door 322 and inserts the IC card 311 into the recitation input device 3.
23, the camera 321 reads an iris pattern of a standing person (step S41).

(2) Next, the read iris pattern information (or iris pattern + password information)
The data is transmitted to the C card 311 (step S42).

(3) Next, the IC card 311 receives iris pattern information from an external device (step S43).

(4) Next, comparison is made with the iris pattern information in the IC card 311 (step S44).

(5) Next, if the collation rate is equal to or higher than the set value, IC
The past three matching histories (the latest three times) and the user ID in the card are read (step S45).

(6) Next, the past three matching histories are updated to the latest three times including the current one (step S46).

(7) Next, the result of this collation (collation rate)
The past three matching histories (collating rate) and the user ID are answered (step S47).

(8) Next, on the entrance / exit management system side,
These are received (step S48), and the collation result (OK / NG) is determined according to a predetermined condition based on the current collation rate and the past three collation rates (step S4).
9).

(9) Next, if the result is OK, the user ID
Is retrieved from the database (step S50).

(10) Next, the user ID is checked (step S51). If the user is registered, the door is opened (step S52).

If the result of step 49 and step 51 is NG, the process ends.

FIG. 11 is a flowchart showing the details of the process of judging the comparison result OK / NG according to the third embodiment of the present invention.

(1) First, it is determined whether or not the current collation rate is equal to or greater than a set value (step S61). It is determined whether the value is equal to or less than the set value and the past three times are equal to or less than the set value (step S6).
5) If below, the IC card is invalidated (step S66), and the result is set to NG (step S6).
7).

If the value is equal to or larger than the set value in step S61, an average collation rate (with individual differences) is calculated from the past three collation rates (step S62). Further, the average collation rate is compared with the current collation rate (step S63), and if the current collation rate is a numerical value equal to or higher than the average of the past three collation rates minus 10%, the result is determined to be OK (step S64). Otherwise, the result is NG (step S67).

FIG. 12 is a diagram showing an example of a result judgment showing the third embodiment of the present invention.

This figure shows three specific cases. In Case 1, the matching rate was low at 70% this time, but the result is OK because the average matching rate of the past three times is also low.

On the other hand, in case 2, the result is NG because the average collation rate for the past three times is good even though the collation rate this time is higher than in case 1. Case 3 is an example in which the IC card is invalidated because the past three times and the collation rate this time are below the set value.

As an example of this determination method, a relatively simple calculation method is used, but it is also possible to perform calculation including changes (gradients) and variations in the past three times.

The present invention is characterized in that the current collation is determined based on the past collation rate, and does not depend on the calculation method.

As described above, by updating the history every time, individual differences (such as readability of the iris pattern) can be improved.
In addition, it becomes possible to cope with aging (such as changes in the iris pattern due to aging).

As described above, the living body identification method shown in the embodiment is an example using an iris (pupil pattern), but can be applied to other living body identification methods as it is. Other biometric identification methods include, for example, DNA analysis, gender judgment, genetic predisposition to disease, unique genetic features such as blood type, fingerprint, tooth shape, palm print, footprint, facial features, ear shape, Some use unique external features such as a retinal blood vessel pattern, hand and wrist blood vessel patterns, voice, and facial blood vessel patterns.

[0096] Regarding the IC card, regardless of the card type, any card that uses an IC memory with a built-in program, such as a wristwatch embedded type, a ring type, or a body embedded chip, can be applied.

In the above embodiment, entry / exit management using an IC card with a built-in biometric identification has been described. However, security for buildings, safe deposit boxes, bank counters, credit card transactions, electronic commerce transactions, access to computers and important databases, etc. For a wide range of fields that require advanced identity authentication, such as access control, passports, license cards, health insurance cards, issuance and application of certificates at local government offices, election voting, boarding procedures for airplanes and other vehicles, and qualification registration. Applicable.

Further, the present invention is not limited to the above-described embodiment, and various modifications are possible based on the gist of the present invention, and these are not excluded from the scope of the present invention.

[0099]

As described above, according to the present invention, the following effects can be obtained.

[A] (1) Since there is no need to register the user's iris pattern information in the database on the entrance / exit management system side,
The iris pattern is not leaked or tampered with.

(2) The user can carry his or her own IC card in which his or her iris pattern information is registered, so that the user can use it with peace of mind.

(3) Even if the IC card is lost,
Since the iris pattern information in the C card cannot be rewritten, there is no fear that another person impersonates himself and enters the room using the IC card.

(4) Since the iris pattern is stored in the IC card and does not need to be exchanged online, even if it is difficult to go online such as a door scattered over a wide area, the iris pattern is provided in various places. No need to set up a data database. Cost /
It is also advantageous in terms of maintenance.

(5) The collation method such as password collation, iris collation, and password + iris double collation can be freely determined by a system using an IC card. ) Can be selected. However, there is a risk that if the password is stolen, various information in the IC card will be read. (Note: The password itself is a mechanism that cannot be read from the IC card, and if the password is incorrect three times in a row, the IC card will invalidate the card itself.) (6) There is no need to go online Therefore, the IC card can be easily used in common between different systems.

[B] (1) The comparison criterion can be changed (the individual difference can be absorbed) by the difference in readability of the iris pattern due to the individual difference (the degree of eye opening, the difference in color, etc.).

(2) Since the criterion decreases as the iris pattern of the user changes over time due to aging of the iris pattern and environmental changes, the iris pattern can be flexibly followed. The IC card is automatically invalidated when it is no longer able to follow (can absorb aging). And so on.

[Brief description of the drawings]

FIG. 1 is a schematic diagram of a personal authentication unit using an IC card according to a first embodiment of the present invention.

FIG. 2 is a schematic diagram of an example in which a personal authentication method using a biometric identification built-in IC card according to a first embodiment of the present invention is applied to an entry / exit management system.

FIG. 3 is a flow chart of a personal authentication operation using an IC card according to the first embodiment of the present invention.

FIG. 4 is a schematic diagram of a personal authentication unit using an IC card according to a second embodiment of the present invention.

FIG. 5 is a schematic diagram of an example in which a personal authentication method using a biometric identification built-in IC card according to a second embodiment of the present invention is applied to an entry / exit management system.

FIG. 6 is a flowchart of an identity verification operation using the IC card according to the second embodiment of the present invention.

FIG. 7 is a schematic diagram of a personal authentication unit using an IC card according to a third embodiment of the present invention.

FIG. 8 is a diagram showing a data configuration example in biometric identification information of an IC card according to a third embodiment of the present invention.

FIG. 9 is a schematic diagram of an example in which the personal authentication method using the biometric identification built-in IC card shown in FIGS. 7 and 8 is applied to an entry / exit management system.

FIG. 10 is an operation flowchart of an entry / exit management system according to a third embodiment of the present invention.

FIG. 11 shows a comparison result OK / N showing a third embodiment of the present invention.
It is a flowchart which shows the detail of the determination process of G.

FIG. 12 is a diagram illustrating a result determination example according to a third embodiment of the present invention.

FIG. 13 is a schematic diagram of a conventional personal authentication means using an IC card.

FIG. 14 is a schematic view of a personal authentication unit in a conventional entry / exit management system.

[Explanation of symbols]

111, 211, 311 IC card 112, 212, 312 IC chip 113 Password information 114 Information on the result of password information and biometric identification information (identification) 115, 215, 315 Access control unit in IC chip 115a Password of access control unit And biometric identification information matching processing sections 116a, 216a password information storage sections 116b, 216b, 316b biometric identification information storage sections 117, 218, 317 various information storage sections 120 iris 121, 221 iris pattern recognition cameras 122, 222 123, 223 PIN input device 124, 224 IC card reader 125, 225 Entry / exit management system 126 Iris pattern 129, 229 Database 213 Biometric identification information ( Password) 214 Result (collation rate) information 215a Password collation processing unit 215b Biometric identification collation processing unit 220 Iris pattern information 313 Password or biometric identification information 314 Collation result + past three collation history information 315a Password information collation processing of access control unit Part 316b1 Iris pattern data 316b2 Matching history of the past three times (latest three times)

 ──────────────────────────────────────────────────続 き Continued on the front page F term (reference) 5B035 AA03 AA14 BC00 BC03 CA22 CA38 5B043 AA09 BA04 CA10 FA04 FA10 GA01 GA19

Claims (6)

[Claims] 1. An IC card with built-in biometric identification information, comprising: (a) a biometric identification information storage section stored in an IC card; and (b) biometric identification information stored in the biometric identification information storage section. A biometric identification information built-in type IC card, comprising: a biometric identification collation processing unit for collating with biometric identification information read from an imaging device. 2. The IC with built-in biometric identification information according to claim 1.
A password information storage unit for storing password information stored in the IC card; and password information for collating password information stored in the password information storage unit with password information input from an input device. A biometric identification information built-in type IC card, comprising: a collation processing unit. 3. The IC with built-in biometric identification information according to claim 1.
A card, wherein the biometric identification information is iris pattern information. 4. An identity authentication method using an IC card, wherein (a) biometric identification information is embedded in the IC card,
(B) The biometric identification information and the personal biometric identification information
An identity authentication method using an IC card, wherein the identity is processed by a biometric identification / collation processing unit in a C card. 5. The personal authentication method using an IC card according to claim 4, wherein a collation history is stored in the IC card, and the collation history in the IC card is sequentially updated. Personal authentication method using a card. 6. The personal authentication method using an IC card according to claim 4, wherein the biometric identification information is iris pattern information.