JP2001256191A - Network fingerprint authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To reduce the loads of a network and an authentication server while unitarily managing authentication information. SOLUTION: This system is provided with a fingerprint DB capable of preserving a user identifier and fingerprint information, a fingerprint collation device for collating an inputted user identifier and sampled fingerprint information with the fingerprint DB and outputting the sampled fingerprint information in the case that the collated result matches or in the case that the inputted user identifier is not preserved in the fingerprint DB, a computer for transmitting the authentication information including the fingerprint information outputted from the fingerprint collation device and the user identifier and requesting authentication, an authentication DB for preserving the authentication information including the user identifier and the fingerprint information registered beforehand and a fingerprint authentication server for collating the authentication information transmitted from the computer with the authentication DB and authenticating a fingerprint.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a network fingerprint authentication system for performing fingerprint authentication using collected fingerprint information.

[0002]

2. Description of the Related Art FIG.
Is a conventional network authentication system disclosed in Japanese Patent Application Laid-Open Publication No. H10-207, in a computer network system in which a plurality of computer systems performing an authentication process are interconnected via a communication network, there is no information for the authentication process in the corresponding computer system. Only in this case, by requesting another computer system to perform authentication processing via a network, data communication efficiency on the network can be improved.

FIG. 9 will be described. In the computer network system shown in FIG. 9, a plurality of computer systems 11 (11-1 to 11-3) for performing a collation process for judging the presence or absence of an access right are interconnected via a communication network 12. . Each computer system 11 has a data degeneration unit 13 (13-1 to 13-
Through 3), feature measuring units 14 (14-1 to 14-3) for measuring the physical features (feature data) of the user are connected to each other. The data reduction unit 14 extracts the physical characteristics of the user as an electric signal.
A file system 15 (15-1 to 15-3) is connected to each computer system 11.
The file system 15 stores the registered feature data referred to in the collation processing for determining the presence or absence of the access right,
Also, various file data to be processed are stored. The number of connected computer systems is not limited to this.

Next, the operation will be described. The file access operation of the computer network system shown in FIG. 9 will be described with reference to the flowcharts shown in FIGS.

In the computer network system shown in FIG. 9, when a file access request occurs in an arbitrary computer system 11, the computer 11 uses a feature measuring unit 14 to input a physical feature, for example, a fingerprint of a finger. Request to do so. Here, when the user's fingerprint is placed on the feature measurement unit 14, the feature data reduced by the data reduction unit 13 is extracted (steps S11 and S12).

[0006] Extracted feature data (extracted feature data)
Is added to the date and time when the access request is generated, or to a user identifier such as a password (step S13). It should be noted that only the degenerated extracted feature data may be used without giving a user identifier such as date and time or a password.

Next, the computer system 11 determines whether or not the requested file is stored in the file system 15 connected to the computer system 11 (step S14). here,
When the file requested to be accessed is stored in the file system 15, a matching process is performed to check whether the registered feature data stored in the file system 15 is the same as the extracted feature data and the user identifier ( Step S16). If they match, the file is accessed (step S17). If they do not match, a notification that the file cannot be accessed or the like is issued, and the process according to the file access request ends.

In step S14, if the file requested to be accessed is not stored in the file system 15, the computer system 11 sends the extracted characteristic data and the user identifier together with the file name of the file requested to be accessed to the communication network 12. Is transmitted to another computer system via the server (step S18). After this,
A response is received from the destination computer system that has sent the extracted feature data and the like, and the above-described processing is performed depending on whether access is possible (step S19). As will be described later, when the access is permitted, the file requested to be accessed is sent and stored in the file system 15.

Next, the processing of the computer system 11 which has received the various data transmitted in step S18 will be described with reference to FIG.

When the computer system 11 receives the extracted characteristic data and the user identifier together with the file name and the like of the file requested to be accessed from another computer system (step S21), the computer system 11 determines whether the file requested to be accessed is in its own computer system. It is determined whether the file is stored in the file system 15 connected to the file system 15 connected to the file system 11 (step S
22). Here, if the requested file is not stored in the file system 15, this is notified to the requesting computer system (step S23).

In step 22, if the file requested to be accessed is stored in the file system 15, the requesting user has the file access right using the extracted characteristic data and the user identifier received in step S21. A collation process is performed to determine whether or not this is the case (steps S24 and S25). If the collation results in a match, the access-requested file is transmitted (step S26). If the collation results do not match, the requesting computer system is notified that there is no file access right (step S27). ).

[0012]

As described above, in the conventional network fingerprint authentication system, a plurality of computer systems for performing the authentication process are connected to the network in order to reduce the load on the network and distribute the load on the authentication server. Information required for authentication (authentication information) is distributed and managed, making it difficult to maintain consistency when managing registration / deletion / change of authentication information. However, there is a problem that a load is applied to the authentication server.

The present invention has been made to solve the above problems, and has as its object to reduce the load on a network and an authentication server while centrally managing authentication information.

[0014]

According to the present invention, there is provided a network fingerprint authentication system comprising: a fingerprint DB in which a user identifier and fingerprint information can be stored; and a fingerprint DB in which an input user identifier and collected fingerprint information are stored. A fingerprint matching device that outputs the collected fingerprint information when the matching result matches, or when the input user identifier is not stored in the fingerprint DB; A computer for transmitting authentication information including the fingerprint information output from the user and the user identifier and requesting authentication, an authentication DB storing authentication information including a pre-registered user identifier and fingerprint information, A fingerprint authentication server for performing fingerprint authentication by collating the authentication information transmitted from the computer with the authentication DB.

Further, in the network fingerprint authentication system according to the next invention, the fingerprint collation device is configured such that the fingerprint authentication result obtained by the fingerprint authentication server is successful, and that the user identifier is the fingerprint DB. When not stored in the fingerprint DB, the input user identifier and the collected fingerprint information are stored in the fingerprint DB.

Further, in the network fingerprint authentication system according to the next invention, the threshold value of the fingerprint matching in the fingerprint matching device is set lower than the threshold value of the fingerprint matching in the fingerprint authentication server.

Further, in the network fingerprint authentication system according to the next invention, the fingerprint collation device is characterized in that whenever the fingerprint authentication result of the collected fingerprint information in the fingerprint authentication server is successful, the collected fingerprint information is obtained. Is stored in the fingerprint DB.

Further, in the network fingerprint authentication system according to the next invention, the fingerprint collation device is characterized in that when the fingerprint authentication result of the collected fingerprint information in the fingerprint authentication server is an authentication failure, the collected fingerprint information is Is stored in the fingerprint DB, and if the user identifier entered later is the user identifier that failed authentication, the stored fingerprint information that failed authentication and later collected. The fingerprint information is collated with the obtained fingerprint information, and if they match, the fingerprint information collected thereafter is not output to the computer.

Further, in the network fingerprint authentication system according to the next invention, the computer is configured to be able to present to a user the degree of collation between the collected fingerprint information and the fingerprint information stored in the fingerprint DB. It is.

Further, in the network fingerprint authentication system according to the next invention, when the fingerprint information registered in the fingerprint authentication server is changed, the fingerprint collation device stores the fingerprint information stored in the fingerprint DB. Is deleted.

Further, in the network fingerprint authentication system according to the next invention, the fingerprint collation device is configured to delete the fingerprint information stored in the fingerprint DB after a predetermined time.

Furthermore, a network fingerprint authentication system according to the next invention is characterized in that a fingerprint matching device for outputting collected fingerprint information, and authentication information including the fingerprint information output from the fingerprint matching device and its user identifier. A computer that transmits and requests authentication, a fingerprint DB that can store a user identifier and fingerprint information, and a fingerprint DB and the user identifier included in the authentication information transmitted from the computer.
A fingerprint authentication cache server that outputs the authentication information when the matching result matches, or when the input user identifier is not stored in the fingerprint DB; An authentication DB that stores authentication information including a user identifier and fingerprint information; and a fingerprint authentication server that performs fingerprint authentication by comparing the authentication information output from the fingerprint authentication cache server with the authentication DB. Things.

Further, in the network fingerprint authentication system according to the next invention, the fingerprint authentication cache server includes:
When the collation results do not match, an authentication failure is transmitted as the fingerprint authentication result.

Further, in the network fingerprint authentication system according to the next invention, the computer is configured to control an application based on the fingerprint authentication result.

[0025]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiment 1 FIG. 1 is a system configuration diagram showing the overall configuration of the first embodiment of the present invention. In the figure, reference numerals 21-1 to 21-1 denote a fingerprint DB in which a user identifier and fingerprint information can be stored. Here, the fingerprint DB is installed inside the fingerprint collation device. Further, a user identifier and fingerprint information are stored in advance. 22-1 to 3-2 collect the fingerprint information of the user, collate the input user identifier and the collected fingerprint information with the fingerprint DBs 21-1 to 3-2, and when the collation results match, or A fingerprint collation device that outputs the collected fingerprint information when the input user identifier is not stored in the fingerprint DBs 21-1 to 3-2. Also, here, when the fingerprint authentication result in the fingerprint authentication server is successful, and when the user identifier is not stored in the fingerprint DBs 21-1 to 3-1, the entered user An identifier and the collected fingerprint information are stored in the fingerprint DBs 21-1 to 3-2.

23-1 to 23-3 correspond to the fingerprint collating device 22-.
This is a computer that sends authentication information including the fingerprint information output from 1 to 3 and its user identifier to the fingerprint authentication server and requests authentication. In this computer, an instruction is issued to the user for fingerprint acquisition, and , The user identifier as the fingerprint matching device 2
The system is configured to control the application based on the fingerprint authentication result of the fingerprint authentication server by inputting the information to 2-1 to 3-2.

Reference numeral 24 denotes an authentication DB in which authentication information including a pre-registered user identifier and fingerprint information is stored.
Here, it is configured to manage a user identifier, fingerprint information, access control information for the application, and the like of a user to be authenticated. Reference numeral 25 denotes the authentication information transmitted from the computers 23-1 to 23-3 and the authentication D
B24, and compares the fingerprint authentication result with the computer 23-.
This is a fingerprint authentication server that transmits to the fingerprint authentication server 1 to 3 A network 26 connects the fingerprint authentication server 25 and a plurality of computers 23-1 to 23-3.

Next, the operation will be described with reference to FIG.
First, the fingerprint matching device 22 collects fingerprint information from a user according to an instruction from the computer 23 (step S31). At this time, the user identifier of the user who collects the fingerprint information is also received from the computer 23. Then, the user accesses the fingerprint DB 21 using the above-mentioned user identifier to determine whether the fingerprint information of the user is stored (step S32). If the fingerprint information is not stored, the collected fingerprint information is transmitted to the computer 23 (step S34). If the fingerprint information is stored, the stored fingerprint information is compared with the collected fingerprint information (step S3).
3). If the fingerprint matches in step S33, the collected fingerprint information is transmitted to the computer 23 (step S34). If the fingerprint matches do not match, the fingerprint information is collected again (step S31).

Next, the computer 23 transmits authentication information obtained by adding information necessary for authentication such as a user identifier to the received fingerprint information to the fingerprint authentication server 25 (step S35).

Next, the fingerprint authentication server 25 performs authentication using the received authentication information and the authentication information stored in the authentication DB 24 (step S36). If the authentication is successful, a response to the authentication success is transmitted to the computer 23. In the case of authentication failure, an authentication failure response is transmitted to the computer 23.

Next, the computer 23 operates as a fingerprint authentication server 25.
If the response is successful, the application is executed (step S37). If the authentication fails, the user is notified and the process ends.

Next, when the application is executed by the computer 23 (step S37), the fingerprint collation device 22
Determines whether the fingerprint information is stored in the fingerprint DB 21 (step S38). If it is stored, the process ends. If not stored, the collected fingerprint information and user identifier are stored in the fingerprint DB 21 (step S39).

As described above, according to the network fingerprint authentication system of this embodiment, the fingerprint collation device performs the fingerprint collation, and when the fingerprint collation result matches, or when the input user identifier is the fingerprint DB. The fingerprint authentication server performs fingerprint authentication when it is not stored in the server, which reduces the number of transmissions to the fingerprint authentication server, improves user convenience, reduces the load on the fingerprint authentication server, The communication load can be reduced. Also,
By centrally managing the authentication information in the authentication DB, it is possible to improve the management cost and the security of concealing the authentication information. In addition, there is no need to change the existing fingerprint authentication server side, and the terminal side (a computer, a fingerprint collation device,
This can be applied by changing only the fingerprint DB). In addition, since the fingerprint authentication server finally determines the fingerprint authentication, the consistency of the authentication accuracy can be maintained.

If the fingerprint authentication result obtained by the fingerprint authentication server is successful and the user identifier is not stored in the fingerprint DB, the entered user identifier and the collected fingerprint are stored. Since the information and the information are stored in the fingerprint DB, the fingerprint verification of the user can be performed by the fingerprint verification device in the next and subsequent fingerprint verification, so that the load on the fingerprint authentication server can be reduced. it can. Further, there is no need to change the existing fingerprint authentication server side, and the present invention can be applied by changing only the terminal side.

Further, the computer controls the application based on the fingerprint authentication result of the fingerprint authentication server, so that the user can be provided with an application corresponding to the fingerprint authentication result.

Embodiment 2 In the first embodiment,
Before the fingerprint authentication is performed by the fingerprint authentication server, the fingerprint authentication is performed by the fingerprint authentication device so that the fingerprint authentication by the fingerprint authentication server is easily performed. Usually, in fingerprint matching,
If there is a matching degree equal to or greater than a predetermined threshold value, it is determined that the two fingerprints match. Next, in order to handle fingerprint information that matches in the fingerprint matching of the fingerprint authentication server but does not match in the fingerprint matching of the fingerprint matching device, the fingerprint matching device matches the fingerprint in the fingerprint matching device. An embodiment in which the threshold value of the collation is reduced.

FIG. 1 is a system configuration diagram showing the overall configuration of a second embodiment of the present invention, similarly to the first embodiment. The description of the same parts as those in the above-described embodiment will be omitted. In this embodiment, the threshold value of the fingerprint collation in the fingerprint collation device 22 (the threshold value of the collation degree) is set lower than the threshold value of the collation degree of the fingerprint authentication server 25. That is,
The threshold value of the fingerprint authentication server 25 is
In contrast to the threshold value set for centrally managing -1 to -3, the threshold value of each fingerprint matching device 22-1 to 3-3 is lower than the threshold value of the fingerprint authentication server 25. Are set individually.

Next, the operation will be described with reference to FIG. First, the fingerprint matching device 22 collects fingerprint information from the user according to the instruction from the computer 23 (step S3).
1). At this time, the user identifier of the user who collects the fingerprint information is also received from the computer 23. Then, the fingerprint DB 21 is accessed using the above-mentioned user identifier to determine whether the fingerprint information of the corresponding user is stored (step S3).
2). If the fingerprint information is not stored, the computer 23
The collected fingerprint information is transmitted to the user (step S3).
4). If the fingerprint information is stored, the stored fingerprint information is collated with the collected fingerprint information (step S33). If the fingerprint matches in step S33, the collected fingerprint information is transmitted to the computer 23 (step S34). If the fingerprint matches do not match,
The fingerprint information is collected again (step S31).
Note that the threshold value used for fingerprint collation in step S33 is set lower than the threshold value used for fingerprint collation in the fingerprint authentication server described later.

Next, the computer 23 transmits authentication information obtained by adding information necessary for authentication such as a user identifier to the received fingerprint information to the fingerprint authentication server 25 (step S35).

Next, the fingerprint authentication server 25 performs authentication using the received authentication information and the authentication information stored in the authentication DB 24 (step S36). If the authentication is successful, a response to the authentication success is transmitted to the computer 23. In the case of authentication failure, an authentication failure response is transmitted to the computer 23. The threshold value used for the fingerprint collation performed in the authentication in step S36 is a threshold value (normal threshold value) set for centrally managing the plurality of fingerprint collation devices 22-1 to 22-3. ), And uses a threshold set higher than the threshold set in the fingerprint matching device.

Next, the computer 23 operates as a fingerprint authentication server 25.
If the response is successful, the application is executed (step S37). If the authentication fails, the user is notified and the process ends.

Next, when the application is executed by the computer 23 (step S37), the fingerprint collation device 22
Determines whether the fingerprint information is stored in the fingerprint DB 21 (step S38). If it is stored, the process ends. If not stored, the collected fingerprint information and user identifier are stored in the fingerprint DB 21 (step S39).

As described above, according to the network fingerprint authentication system of this embodiment, the threshold value of the fingerprint matching in the fingerprint matching device is set lower than the threshold value of the fingerprint matching in the fingerprint authentication server. This reduces the likelihood that fingerprint information that should match in fingerprint matching on the fingerprint matching authentication server will fail in fingerprint matching with the fingerprint matching device, thus reducing the number of times a user needs to collect fingerprints. Can be improved. Further, there is no need to change the existing fingerprint authentication server side, and the present invention can be applied by changing only the terminal side (the fingerprint collation device in this embodiment).

Embodiment 3 FIG. In Embodiment 2 described above,
The fingerprint collation by the fingerprint collation device does not match, but when a fingerprint is collected that matches the fingerprint collation by the fingerprint authentication server, the fingerprint collation device matches the fingerprint.
Next, an embodiment in which a fingerprint obtained from the latest user who has been successfully authenticated by the fingerprint authentication server is stored in the fingerprint matching device although the threshold value of the matching by the fingerprint matching device is lowered. Is shown.

FIG. 1 is a system configuration diagram showing an overall configuration of a third embodiment of the present invention, similarly to the first embodiment. The description of the same parts as those in the above-described embodiment will be omitted. In this embodiment, the fingerprint matching device 22 is configured to store the collected fingerprint information in the fingerprint DB 21 whenever the fingerprint authentication result of the collected fingerprint information in the fingerprint authentication server 25 is successful. I have.

Next, the operation will be described with reference to FIG.
First, the fingerprint matching device 22 collects fingerprint information from the user according to an instruction from the computer 23 (step S41). At this time, the user identifier of the user who collects the fingerprint information is also received from the computer 23. Then, the fingerprint DB 21 is accessed using the above-mentioned user identifier to determine whether the fingerprint information of the corresponding user is stored (step S42). If the fingerprint information is not stored, the collected fingerprint information is transmitted to the computer 23 (step S44). If the fingerprint information is stored, the stored fingerprint information is compared with the collected fingerprint information (step S4).
3). If the fingerprint matches in step S43, the collected fingerprint information is transmitted to the computer 23 (step S44). If the fingerprint matches do not match, fingerprint information is collected again (step S41).

Next, the computer 23 transmits authentication information obtained by adding information necessary for authentication such as a user identifier to the received fingerprint information to the fingerprint authentication server 25 (step S45).

Next, the fingerprint authentication server 25 performs authentication using the received authentication information and the authentication information stored in the authentication DB 24 (step S46). If the authentication is successful, a response to the authentication success is transmitted to the computer 23. In the case of authentication failure, an authentication failure response is transmitted to the computer 23.

Next, the computer 23 operates as a fingerprint authentication server 25.
If the response is successful, the application is executed (step S47). If the authentication fails, the user is notified and the process ends.

Next, when the application is executed by the computer 23 (step S47), the fingerprint collation device 22
Saves the collected fingerprint information and user identifier in the fingerprint DB 21 (step S48).

As described above, according to the network fingerprint authentication system of this embodiment, the latest fingerprint information whose fingerprint authentication has been successfully performed by the fingerprint authentication server is stored in the fingerprint DB, so that the fingerprint verification device can perform the verification. As a result, the number of times of fingerprint collection of the user is reduced and the convenience of the user can be improved. Further, there is no need to change the existing fingerprint authentication server side, and the present invention can be applied by changing only the terminal side (computer, fingerprint collation device, fingerprint DB in this embodiment).

Embodiment 4 FIG. In the third embodiment, the fingerprint collected from the latest user who has been successfully authenticated by the fingerprint authentication server is stored in the fingerprint matching device.
Next, the fingerprint in the case where the authentication by the fingerprint authentication server has failed is also stored, and when the fingerprint is obtained next time and the result of the collation with the failed fingerprint matches, the fingerprint is collected again. An embodiment will be described.

FIG. 1 is a system configuration diagram showing an overall configuration of a fourth embodiment of the present invention, similarly to the first embodiment. The description of the same parts as those in the above-described embodiment will be omitted. In this embodiment, when the fingerprint authentication result of the collected fingerprint information in the fingerprint authentication server 25 is authentication failure, the fingerprint matching device 22 compares the collected fingerprint information and the input user identifier with the fingerprint DB 21. In the case where the user identifier input later is the user identifier that failed in authentication, the stored fingerprint information that failed in authentication is compared with the fingerprint information that is collected later, and matches. In this case, the fingerprint information collected after that is not output to the computer 23. Further, the threshold value of the fingerprint collation for collating the fingerprint information of the authentication failure with the fingerprint information collected later is set higher than the threshold value used in the fingerprint authentication server 25.

Next, the operation will be described with reference to FIG. First, the fingerprint matching device 22 collects fingerprint information from the user according to an instruction from the computer 23 (step S5).
1). At this time, the user identifier of the user who collects the fingerprint information is also received from the computer 23. Then, the user accesses the fingerprint DB 21 using the above-mentioned user identifier to determine whether the fingerprint information of the user is stored (step S5).
2). If the fingerprint information is not stored, the computer 23
The collected fingerprint information is transmitted to the user (step S5).
4). If the fingerprint information is stored, the stored fingerprint information is collated with the collected fingerprint information (step S53). In step S53, the fingerprint authentication server 25
If the fingerprint collation with the fingerprint information that has been successfully authenticated in the fingerprint authentication matches, the collected fingerprint information is transmitted to the computer 23 (step S54). When the fingerprint verification of the fingerprint authentication server 25 does not match with the fingerprint information of which the authentication succeeded, or when the fingerprint authentication of the fingerprint authentication server 25 matches with the fingerprint information of which the authentication has failed, Performs fingerprint information collection again (step S5).
1). In step S53, the threshold value used for fingerprint matching with fingerprint information for which authentication has failed is set higher than the threshold value used for fingerprint matching in the fingerprint authentication server 25.

Next, the computer 23 transmits authentication information obtained by adding information necessary for authentication such as a user identifier to the received fingerprint information to the fingerprint authentication server 25 (step S55).

Next, the fingerprint authentication server 25 performs authentication using the received authentication information and the authentication information stored in the authentication DB 24 (step S56). If the authentication is successful, a response to the authentication success is transmitted to the computer 23. In the case of authentication failure, an authentication failure response is transmitted to the computer 23. The threshold value used for the fingerprint collation performed in the authentication in step S56 is a threshold value (normal threshold value) set for centrally managing the plurality of fingerprint collation devices 22-1 to 22-3. ).

Next, the computer 23 operates as a fingerprint authentication server 25.
If the response is successful, the application is executed (step S57).

Next, when the application is executed by the computer in the fingerprint collating apparatus (step S57), it is determined whether the fingerprint information is stored in the fingerprint DB 22 (step S58). If it is stored, the process ends. If not, the collected fingerprint information, user identifier, and authentication result are stored in the fingerprint DB 22 (step 59). If the authentication fails in step S56, the collected fingerprint information, user identifier, and authentication result are stored in the fingerprint DB 22 (step 59), and the process ends.

As described above, according to the network fingerprint authentication system of this embodiment, the fingerprint information coincident with the fingerprint information that has failed authentication once by the fingerprint authentication server is not sent to the fingerprint authentication server. Since the fingerprint information similar to the fingerprint information for which authentication failed previously is not transmitted to the fingerprint authentication server, the number of times of transmission to the fingerprint authentication server can be reduced, user convenience is improved, the load on the fingerprint authentication server is reduced, and Communication load can be reduced. Further, there is no need to change the existing fingerprint authentication server side, and the present invention can be applied by changing only the terminal side (computer, fingerprint collation device, fingerprint DB in this embodiment).

Further, the threshold value used when comparing the fingerprint information whose authentication has failed in the fingerprint authentication server with the fingerprint information collected later is set higher than the threshold value used in the fingerprint authentication server. In addition, it is possible to reduce the possibility that the fingerprint matching apparatus does not send fingerprint information that should match in fingerprint matching in the fingerprint authentication server to the fingerprint authentication server. That is, it is possible to reduce the possibility that the fingerprint matching device discards the fingerprint information that should match in the fingerprint matching in the fingerprint authentication server.

Embodiment 5 As described above, Embodiment 4
Was to use a fingerprint that failed authentication in the fingerprint authentication server in the fingerprint collation device and not send authentication information that was known to be unsuccessful even if it was sent to the fingerprint authentication server. An embodiment of presenting the degree of collation when collation is performed by the collation device to the user will be described.

FIG. 1 is a system configuration diagram showing an overall configuration of a fifth embodiment of the present invention, similarly to the first embodiment. The description of the same parts as those in the above-described embodiment will be omitted. In this embodiment, the computer 23 is configured to be able to present the degree of collation between the collected fingerprint information and the fingerprint information stored in the fingerprint DB 21 to the user.

Next, the operation will be described with reference to FIG.
First, the fingerprint matching device 22 collects fingerprint information from a user according to an instruction from the computer 23 (step S31). At this time, the user identifier of the user who collects the fingerprint information is also received from the computer 23. Then, the user accesses the fingerprint DB 21 using the above-mentioned user identifier to determine whether the fingerprint information of the user is stored (step S32). If the fingerprint information is not stored, the collected fingerprint information is transmitted to the computer 23 (step S34). If the fingerprint information is stored, the stored fingerprint information is compared with the collected fingerprint information (step S3).
3). At this time, the fingerprint matching device 22 transmits the matching degree to the computer 23, and the computer 23 presents the matching degree to the user. If the fingerprint matches in step S33, the collected fingerprint information is transmitted to the computer 23 (step S34). If the fingerprint matches do not match, the fingerprint information is collected again (step S31).

Next, the computer 23 transmits to the fingerprint authentication server 25 authentication information obtained by adding information necessary for authentication such as a user identifier to the received fingerprint information (step S35).

Next, the fingerprint authentication server 25 performs authentication using the received authentication information and the authentication information stored in the authentication DB 24 (step S36). If the authentication is successful, a response to the authentication success is transmitted to the computer 23. In the case of authentication failure, an authentication failure response is transmitted to the computer 23.

Next, the computer 23 operates as a fingerprint authentication server 25.
If the response is successful, the application is executed (step S37). If the authentication fails, the user is notified and the process ends.

Next, when the application is executed by the computer 23 (step S37), the fingerprint collation device 22
Determines whether the fingerprint information is stored in the fingerprint DB 21 (step S38). If it is stored, the process ends. If not stored, the collected fingerprint information and user identifier are stored in the fingerprint DB 21 (step S39).

As described above, according to the network fingerprint authentication system of this embodiment, the degree of fingerprint collation between the collected fingerprint information and the fingerprint information stored in the fingerprint DB is presented to the user. Since the user learns how to put a finger, the collected fingerprint information is stable, the number of transmissions to the server can be reduced, user convenience is improved, the load on the fingerprint authentication server is reduced, and the communication load on the network is reduced. Can be realized. In addition, there is no need to change the existing fingerprint authentication server side, and the present invention can be applied by changing only the terminal side (the computer and the fingerprint matching device in the present embodiment).

Embodiment 6 FIG. As described above, in the fifth embodiment, the collation degree is presented to the user when collation is performed in the fingerprint collation apparatus. Next, the fingerprint information stored in the authentication DB is changed. An embodiment that can cope with the case will be described.

FIG. 1 is a system configuration diagram showing the overall configuration of the second embodiment of the present invention, similarly to the first embodiment. The description of the same parts as those in the above-described embodiment will be omitted. In this embodiment, the fingerprint authentication server 25 uses the authentication DB 2
When the fingerprint information stored in the storage device 4 is changed, the user identifier and the fingerprint deletion notification are transmitted to the computer 23. The computer 23, when notified of the deletion of the fingerprint from the fingerprint authentication server 25,
, The user identifier and the fingerprint deletion notification are transmitted. In addition, the fingerprint matching device 22 is configured to delete the fingerprint information stored in the fingerprint DB 21 when the fingerprint information registered in the fingerprint authentication server 25 is changed. When notified of the deletion of the fingerprint, the fingerprint information corresponding to the user identifier is deleted from the fingerprint DB 21.

Next, the operation will be described with reference to FIGS. First, the fingerprint matching device 22 collects fingerprint information from the user according to the instruction from the computer 23 (step S3).
1). At this time, the user identifier of the user who collects the fingerprint information is also received from the computer 23. Then, the fingerprint DB 21 is accessed using the above-mentioned user identifier to determine whether the fingerprint information of the corresponding user is stored (step S3).
2). If the fingerprint information is not stored, the computer 23
The collected fingerprint information is transmitted to the user (step S3).
4). If the fingerprint information is stored, the stored fingerprint information is collated with the collected fingerprint information (step S33). If the fingerprint matches in step S33, the collected fingerprint information is transmitted to the computer 23 (step S34). If the fingerprint matches do not match,
The fingerprint information is collected again (step S31).

Next, the computer 23 transmits to the fingerprint authentication server 25 authentication information obtained by adding information necessary for authentication such as a user identifier to the received fingerprint information (step S35).

Next, the fingerprint authentication server 25 performs authentication using the received authentication information and the authentication information stored in the authentication DB 24 (step S36). If the authentication is successful, a response to the authentication success is transmitted to the computer 23. In the case of authentication failure, an authentication failure response is transmitted to the computer 23.

Next, the computer 23 sends the fingerprint authentication server 25
If the response is successful, the application is executed (step S37). If the authentication fails, the user is notified and the process ends.

Next, when the application is executed by the computer 23 (step S37), the fingerprint collation device 22
Determines whether the fingerprint information is stored in the fingerprint DB 21 (step S38). If it is stored, the process ends. If not stored, the collected fingerprint information and user identifier are stored in the fingerprint DB 21 (step S39).

Next, the operation when the fingerprint information in the authentication DB 24 is changed will be described with reference to FIG. When the fingerprint information stored in the authentication DB 24 is changed (step S61), the fingerprint authentication server 25 transmits a fingerprint deletion notification and a corresponding user identifier to the computer 23 (step S6).
2). When notified of the fingerprint deletion from the fingerprint authentication server 25, the computer 23 transmits the fingerprint deletion notification and the corresponding user identifier to the fingerprint matching device 22 (step S63). When notified of the fingerprint deletion by the computer 23, the fingerprint matching device 22
It is checked whether the fingerprint information of the user identifier is stored in the fingerprint DB 21 (step S64). If the fingerprint information is stored, the corresponding information is deleted (step S65).

As described above, according to the network fingerprint authentication system of the sixth embodiment, when the fingerprint information stored in the authentication DB is changed, the content of the fingerprint DB is deleted. It is possible to easily maintain the consistency of fingerprint information.

Embodiment 7 As described above, in the sixth embodiment, the contents of the fingerprint DB are deleted when the fingerprint of the authentication DB is changed. Next, the contents of the fingerprint DB are deleted in a certain period. Show.

FIG. 1 is a system configuration diagram showing the overall configuration of the second embodiment of the present invention, similarly to the first embodiment. The description of the same parts as those in the above-described embodiment will be omitted. In this embodiment, the fingerprint matching device 22 includes a fingerprint DB 21
The fingerprint information stored in the storage device is deleted after a predetermined time from the storage of the fingerprint information.

Next, the operation will be described with reference to FIGS. First, the fingerprint matching device 22 collects fingerprint information from the user according to the instruction from the computer 23 (step S3).
1). At this time, the user identifier of the user who collects the fingerprint information is also received from the computer 23. Then, the fingerprint DB 21 is accessed using the above-mentioned user identifier to determine whether the fingerprint information of the corresponding user is stored (step S3).
2). If the fingerprint information is not stored, the computer 23
The collected fingerprint information is transmitted to the user (step S3).
4). If the fingerprint information is stored, the stored fingerprint information is collated with the collected fingerprint information (step S33). If the fingerprint matches in step S33, the collected fingerprint information is transmitted to the computer 23 (step S34). If the fingerprint matches do not match,
The fingerprint information is collected again (step S31).

Next, the computer 23 sends authentication information obtained by adding information necessary for authentication such as a user identifier to the received fingerprint information to the fingerprint authentication server 25 (step S35).

Next, the fingerprint authentication server 25 performs authentication using the received authentication information and the authentication information stored in the authentication DB 24 (step S36). If the authentication is successful, a response to the authentication success is transmitted to the computer 23. In the case of authentication failure, an authentication failure response is transmitted to the computer 23.

Next, the computer 23 operates as the fingerprint authentication server 25.
If the response is successful, the application is executed (step S37). If the authentication fails, the user is notified and the process ends.

Next, when the application is executed by the computer 23 (step S37), the fingerprint collation device 22
Determines whether the fingerprint information is stored in the fingerprint DB 21 (step S38). If it is stored, the process ends. If not stored, the collected fingerprint information and user identifier are stored in the fingerprint DB 21 (step S39).

Next, the operation when the fingerprint information in the fingerprint DB 21 is changed will be described with reference to FIG. The fingerprint collation device 22 stores the fingerprint information stored in the fingerprint DB 21
It is determined whether or not a predetermined time has elapsed since the data was stored (step S71). If the predetermined time has elapsed, the fingerprint information is deleted (step S72). This operation is performed at predetermined time intervals.

As described above, according to the network fingerprint authentication system of this embodiment, the contents of the fingerprint DB are checked at predetermined time intervals, and old information that has been stored for a predetermined time has been automatically deleted. Authentication DB
In the case where the fingerprint information is changed, it is possible to cope with the change after a predetermined time has elapsed. In addition, since the information stored in the fingerprint DB becomes the latest information to some extent, it is possible to cope with the temporal change of the fingerprint information, and it is not necessary to change the existing fingerprint authentication server side. In this case, the present invention can be applied by changing only the calculator, the fingerprint collation device, and the fingerprint DB).

Embodiment 8 FIG. As described above, in the seventh embodiment, the content of the fingerprint DB is deleted after a predetermined time, but next, the fingerprint authentication server and the computer use the transmitted fingerprint information that has been successfully authenticated last time. Fingerprint authentication cache to check whether the sent fingerprint information is correct
1 shows an embodiment in which a server is installed.

FIG. 10 is a system configuration diagram showing the overall configuration of the eighth embodiment of the present invention. In the figure, 31
Reference numerals -1 to -3 denote fingerprint matching devices that output collected fingerprint information. 32-1 to 32-1 are the fingerprint matching devices 31-1 to 31-1.
3 is a computer that sends authentication information including the fingerprint information and its user identifier output from 3 to a fingerprint authentication cache server and requests authentication. Here, it is configured to instruct a user to acquire a fingerprint and to control an application based on a fingerprint authentication result of a fingerprint authentication server. Reference numerals 33-1 to 3-3 denote a fingerprint DB in which a user identifier and fingerprint information can be stored. Here, the user identifier and the fingerprint information are stored in advance.

34-1 to 3-4 correspond to the computers 32-1 to 32-3.
The fingerprint information and the user identifier included in the authentication information transmitted from are compared with the fingerprint DBs 33-1 to 3-3, and when the matching result matches, or when the input user identifier is the fingerprint A fingerprint authentication cache that outputs the authentication information when the authentication information is not stored in the DB 33-1 to 3
Server. Further, when the collation results do not match, an authentication failure is transmitted to the computers 32-1 to 32-3 as a fingerprint authentication result. Here, in the case where the fingerprint authentication result in the fingerprint authentication server is authentication success and the user identifier is not stored in the fingerprint DBs 33-1 to 3-3, the user identifier and the fingerprint information are stored. Are stored in the fingerprint DBs 33-1 to 3-3.

Reference numeral 35 denotes an authentication DB in which authentication information including a user identifier and fingerprint information registered in advance is stored.
Here, it is configured to manage a user identifier, fingerprint information, access control information for the application, and the like of a user to be authenticated. A fingerprint authentication server 36 compares the authentication information output from the fingerprint authentication cache servers 34-1 to 3 with the authentication DB 36, and transmits the fingerprint authentication result to the fingerprint authentication cache servers 34-1 to 3-3. It is. 37 is the computer 32
This is a network for connecting the fingerprint authentication cache servers 34-1 to 3-3 to -1 to -3.

Next, the operation will be described with reference to FIG.
First, the fingerprint matching device 31 collects a fingerprint from the user according to an instruction from the computer 32 (step S81), and transmits the collected fingerprint information to the computer 32 (step S8).
2).

Next, the computer 32 transmits to the fingerprint authentication server 25 authentication information obtained by adding information necessary for authentication such as a user identifier to the received fingerprint information (step S83).

Next, the fingerprint authentication cache server 34
Accesses the fingerprint DB 33 using the received user identifier and determines whether fingerprint information of the user is stored in the fingerprint DB 33 (step S84). If the fingerprint information is stored, the fingerprint information and the received fingerprint information are collated (step S85), and if the collation is matched, the authentication information is transmitted to the fingerprint authentication server 36 (step S86). If the collation does not match, the computer is notified of the result and the processing is terminated. If the fingerprint information is not stored in the fingerprint DB 33 in step S84, the authentication information is transmitted to the fingerprint authentication server 34 as it is (step S86).

Next, the fingerprint authentication server 34 performs authentication using the received authentication information and the information stored in the authentication DB 35 (step S86). If the authentication is successful, a response of the authentication success is transmitted to the computer 32 via the fingerprint authentication cache server 34. If the authentication has failed, a response to the authentication failure is transmitted to the computer 32 via the fingerprint authentication cache server 34.

Next, the computer 32 operates the fingerprint authentication server 36.
Is determined based on the response (step S87). If the authentication is successful, the application is executed (step S88). If the authentication fails, the user is notified and the process ends.

Next, when the application is executed by the computer (step S88), that is, in step S8
If the authentication of No. 6 is successful, the fingerprint authentication cache server 34 determines whether the corresponding fingerprint information is stored in the fingerprint DB 33 (step S89). If it is stored, the process ends. If not stored, the collected fingerprint information and user identifier are stored in the fingerprint DB 33 (step S90).

As described above, according to the network fingerprint authentication system of this embodiment, the fingerprint authentication cache
When the server performs verification and the fingerprint verification result matches, or when the user identifier is not stored in the fingerprint DB, the fingerprint verification is performed by the fingerprint verification server. If it is known in advance, the fingerprint information is not transmitted to the fingerprint authentication server, so the number of times of transmission to the fingerprint authentication server can be reduced, user convenience is improved, the load on the fingerprint authentication server is reduced, and the network communication load is reduced. Reduction can be realized. Also, by centrally managing the authentication information in the authentication DB, it is possible to improve the management cost and the security of concealing the authentication information. Further, the existing system does not need to be changed, and is applicable only by installing the fingerprint authentication cache server and the fingerprint DB between the computer and the fingerprint authentication server.

When the result of the fingerprint authentication by the fingerprint authentication server is successful, and the user identifier is not stored in the fingerprint DB, the user identifier and the collected fingerprint information are stored. Is stored in the fingerprint DB, the fingerprint verification of the user can be performed in the fingerprint verification cache server in the next and subsequent fingerprint verifications, so that the load on the fingerprint verification server can be reduced. it can. Further, there is no need to change the existing fingerprint authentication server side, and the present invention can be applied by changing only the terminal.

Further, since the fingerprint authentication cache server is configured to transmit an authentication failure as the fingerprint authentication result when the verification result does not match, the fingerprint authentication failure is not transmitted to the fingerprint authentication server. This is effective in reducing the load on the fingerprint authentication server and the communication load on the network.

Further, the computer controls the application based on the fingerprint authentication result in the fingerprint authentication server or the fingerprint authentication cache server, thereby providing the user with an application corresponding to the fingerprint authentication result. Can be.

[0101]

As described above, according to the network fingerprint authentication system of the present invention, the fingerprint DB capable of storing the user identifier and the fingerprint information, the input user identifier and the collected fingerprint information are stored in the fingerprint database. A fingerprint collation device that outputs the collected fingerprint information when the collation result matches with the fingerprint DB, or when the input user identifier is not stored in the fingerprint DB; A computer for transmitting authentication information including the fingerprint information output from the collation device and the user identifier and requesting authentication, an authentication DB storing authentication information including a pre-registered user identifier and fingerprint information, and And a fingerprint authentication server for performing fingerprint authentication by comparing the authentication information transmitted from the computer with the authentication DB, so that the authentication information can be centrally managed and the fingerprint authentication server Is sent only those that are likely to succeed in fingerprint matching, reducing the number of re-authentications due to authentication failure, improving user convenience, reducing the load on the fingerprint authentication server, and reducing the network communication load. There is. Further, since there is no need to change the fingerprint authentication server side, when applied to an existing network fingerprint authentication system, it can be applied by changing only the terminal side. Also,
Eventually, the fingerprint authentication server determines the fingerprint authentication, so that the consistency of the authentication accuracy can be maintained.

Further, according to the network fingerprint authentication system of the next invention, the fingerprint collation device determines that the fingerprint authentication result in the fingerprint authentication server is successful and that the user identifier is the fingerprint. When the input user identifier and the collected fingerprint information are stored in the fingerprint DB when they are not stored in the DB, the fingerprint verification of the user is performed in the next and subsequent fingerprint verification. Can be performed by the fingerprint collating device, so that the load on the fingerprint authentication server can be reduced.

According to the network fingerprint authentication system of the next invention, the threshold value of the fingerprint matching in the fingerprint matching device is set lower than the threshold value of the fingerprint matching in the fingerprint authentication server. Since fingerprint information that should match in fingerprint matching in the fingerprint matching authentication server is less likely to fail in fingerprint matching in the fingerprint matching device, the number of times of re-authentication due to further authentication failure can be reduced. effective. Further, since there is no need to change the fingerprint authentication server side, when the present invention is applied to an existing network fingerprint authentication system, the change can be applied only to the terminal side.

Further, according to the network fingerprint authentication system of the next invention, the fingerprint collating device, each time the fingerprint authentication result of the collected fingerprint information by the fingerprint authentication server is successful, indicates that the collected fingerprint is Since the information is configured to be stored in the fingerprint DB, the fingerprint information stored in the fingerprint DB is updated, and the possibility of failure in the verification by the fingerprint verification device is reduced. This has the effect of reducing the number of times of sampling and improving the convenience for the user. Further, since there is no need to change the fingerprint authentication server side, when the present invention is applied to an existing network fingerprint authentication system, the change can be applied only to the terminal side.

Further, according to the network fingerprint authentication system of the next invention, when the fingerprint authentication result of the collected fingerprint information in the fingerprint authentication server of the fingerprint authentication server is an authentication failure, the acquired fingerprint is determined. Information and the entered user identifier are stored in the fingerprint DB, and if the subsequently entered user identifier is the failed user identifier, the stored authentication failed fingerprint information and The fingerprint information is compared with the collected fingerprint information, and in the case of a match, the fingerprint information collected thereafter is not output to the computer. Since it is not transmitted to the authentication server, the number of times of re-authentication due to further authentication failure can be reduced. Further, since there is no need to change the fingerprint authentication server side, when the present invention is applied to an existing network fingerprint authentication system, the change can be applied only to the terminal side.

Further, according to the network fingerprint authentication system of the next invention, the computer is configured to be able to present to the user the degree of collation between the collected fingerprint information and the fingerprint information stored in the fingerprint DB. Thereby, the stabilization of the fingerprint information by learning the user's finger placement can be expected, and the number of times of re-authentication due to further authentication failure can be reduced. Further, since there is no need to change the fingerprint authentication server side, when applied to an existing network fingerprint authentication system, it can be applied by changing only the terminal side.

Further, according to the network fingerprint authentication system of the next invention, when the fingerprint information registered in the fingerprint authentication server is changed, the fingerprint collation device stores the fingerprint stored in the fingerprint DB. Since the configuration is such that the information is deleted, it is possible to easily maintain the consistency of the fingerprint information, so that it is applicable to a network fingerprint authentication system in which the fingerprint information is changed.

[0108] According to the network fingerprint authentication system of the next invention, the fingerprint collation device is configured to delete the fingerprint information stored in the fingerprint DB after a predetermined time. There is an effect that even when information is changed, it is possible to cope after a predetermined time has elapsed. Further, since there is no need to change the fingerprint authentication server side, when applied to an existing network fingerprint authentication system, it can be applied by changing only the terminal side.

Further, according to the network fingerprint authentication system of the next invention, a fingerprint collation device for outputting the collected fingerprint information, and the authentication information including the fingerprint information output from the fingerprint collation device and its user identifier. , A computer that sends a request for authentication, a fingerprint DB that can store a user identifier and fingerprint information, and the fingerprint information and the user identifier included in the authentication information transmitted from the computer.
A fingerprint authentication cache server that outputs the authentication information when the matching result matches, or when the input user identifier is not stored in the fingerprint DB; An authentication DB that stores authentication information including a user identifier and fingerprint information; and a fingerprint authentication server that performs fingerprint authentication by comparing the authentication information output from the fingerprint authentication cache server with the authentication DB. As a result, authentication information can be centrally managed, and only those that have a high possibility of successful fingerprint verification are sent to the fingerprint authentication server, so the number of re-authentications due to authentication failure can be reduced, and the load on the fingerprint authentication server can be reduced This has the effect of reducing the communication load on the network. Further, when the present invention is applied to an existing network fingerprint authentication system, it is not necessary to change the existing system, and the present invention can be applied only by installing the fingerprint authentication cache server and the fingerprint DB between the computer and the fingerprint authentication server. In addition, since the fingerprint authentication server finally determines the fingerprint authentication, the consistency of the authentication accuracy can be maintained.

Further, according to the network fingerprint authentication system of the next invention, the fingerprint authentication cache server comprises:
Since the authentication failure is sent as the fingerprint authentication result when the matching result does not match, the fingerprint authentication failure is not sent to the fingerprint authentication server, so the load on the fingerprint authentication server is reduced, and the communication load on the network is reduced. There is an effect of reduction.

Further, according to the network fingerprint authentication system of the next invention, the computer is configured to control the application based on the fingerprint authentication result, so that the computer responds to the user according to the fingerprint authentication result. There is an effect that an application can be provided.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a system configuration according to first to seventh embodiments.

FIG. 2 is a flowchart showing an operation of the first, second, fifth, sixth and seventh embodiments.

FIG. 3 is a flowchart showing an operation of the third embodiment.

FIG. 4 is a flowchart showing an operation of the fourth embodiment.

FIG. 5 is a flowchart showing an operation of the sixth embodiment.

FIG. 6 is a flowchart showing an operation of the seventh embodiment.

FIG. 7 is a block diagram illustrating a system configuration according to an eighth embodiment.

FIG. 8 is a flowchart showing an operation of the eighth embodiment.

FIG. 9 is a block diagram showing a system configuration of a conventional technique.

FIG. 10 is a flowchart showing the operation of the conventional technique.

FIG. 11 is a flowchart showing the operation of the conventional technique.

[Explanation of symbols]

11-1 to 3 Computer System 12 Communication Network 13-1 to 3 Data Reduction Unit 14-1 to 3
Feature measurement unit 15-1-3 File system 21-1-3
Fingerprint DB 22-1-3 Fingerprint collation device 23-1-3
Computer 24 Authentication DB 25 Fingerprint Authentication Server 26 Network 31-1 to 3
Fingerprint collation device 32-1 to 3 Computer 33-1 to 3
Fingerprint DB 34-1 to 3 Fingerprint authentication cache server 35 Authentication DB 36 Fingerprint authentication server 37 Network

Continuing from the front page (72) Inventor Naoyoshi Okazaki 2-3-2 Marunouchi, Chiyoda-ku, Tokyo Mitsubishi Electric Corporation (72) Inventor Hiroshi Nakamura 2-3-2 Marunouchi, Chiyoda-ku, Tokyo Mitsubishi Electric Inside (72) Inventor Teruko Fujii 2-3-2 Marunouchi, Chiyoda-ku, Tokyo Mitsubishi Electric Corporation F-term (reference) 5B043 AA09 BA02 CA05 CA09 CA10 FA02 FA03 FA07 FA08 GA01 5B085 AE02 AE26 BG07

Claims (11)

[Claims] 1. A fingerprint DB capable of storing a user identifier and fingerprint information, and the inputted user identifier and the collected fingerprint information are compared with the fingerprint DB, and when the matching results match, or
A fingerprint matching device that outputs the collected fingerprint information when the input user identifier is not stored in the fingerprint DB; and fingerprint information output from the fingerprint matching device and the user identifier. A computer that sends authentication information and requests authentication, an authentication DB in which authentication information including a pre-registered user identifier and fingerprint information is stored, and a verification of the authentication information transmitted from the computer and the authentication DB. And a fingerprint authentication server for performing fingerprint authentication. 2. The fingerprint matching device according to claim 1, wherein the fingerprint authentication result in the fingerprint authentication server is successful, and
The apparatus according to claim 1, wherein when the user identifier is not stored in the fingerprint DB, the input user identifier and the collected fingerprint information are stored in the fingerprint DB. The described network fingerprint authentication system. 3. The fingerprint matching device according to claim 1, wherein a threshold value for fingerprint matching in the fingerprint matching device is set lower than a threshold value for fingerprint matching in the fingerprint authentication server. Network fingerprint authentication system. 4. The fingerprint matching device is configured to store the collected fingerprint information in the fingerprint DB each time the fingerprint authentication result of the collected fingerprint information in the fingerprint authentication server is successful. The network fingerprint authentication system according to any one of claims 1 to 3, wherein: 5. The fingerprint verification apparatus according to claim 1, wherein when the fingerprint authentication result of the collected fingerprint information in the fingerprint authentication server is an authentication failure, the fingerprint matching device compares the collected fingerprint information with the input user identifier. If the user identifier stored in the DB is later entered and the user identifier is the authentication failure, the stored fingerprint information of the failed authentication is compared with the fingerprint information collected later, and the password information matches. 5. The network fingerprint authentication system according to claim 1, wherein the fingerprint information collected thereafter is not output to the computer. 6. The computer according to claim 1, wherein the computer is configured to be able to present a degree of collation between the collected fingerprint information and the fingerprint information stored in the fingerprint DB to a user. The network fingerprint authentication system according to any one of the above. 7. The fingerprint collation device is configured to delete fingerprint information stored in the fingerprint DB when fingerprint information registered in the fingerprint authentication server is changed. The network fingerprint authentication system according to any one of claims 1 to 6, wherein 8. The network according to claim 1, wherein the fingerprint collation device is configured to delete the fingerprint information stored in the fingerprint DB after a predetermined time. Fingerprint authentication system. 9. A fingerprint matching device that outputs collected fingerprint information, a computer that sends authentication information including the fingerprint information output from the fingerprint matching device and its user identifier and requests authentication, and a user identifier. And a fingerprint DB that can store the fingerprint information and the fingerprint information, and the fingerprint information and the user identifier included in the authentication information transmitted from the computer are compared with the fingerprint DB, and when the comparison result matches, or When the inputted user identifier is not stored in the fingerprint DB, a fingerprint authentication cache server for outputting the authentication information, and authentication information including a pre-registered user identifier and fingerprint information are stored. And a fingerprint authentication server that performs fingerprint authentication by comparing the authentication information output from the fingerprint authentication cache server with the authentication DB. Work fingerprint authentication system. 10. The fingerprint authentication cache server,
10. The network fingerprint authentication system according to claim 9, wherein an authentication failure is transmitted as a fingerprint authentication result when the collation results do not match. 11. The network fingerprint authentication system according to claim 1, wherein the computer is configured to control an application based on the fingerprint authentication result.