JP2001333059A - Authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication system that can contribute to reduce the possibility of illegal use. SOLUTION: A coding section 12 receiving a request of transmission of a confirmation code captures an image of an iris of a user from an image pickup output of a camera section 11, extracts a feature (iris code) of this image, and transmits it as the confirmation code to a server 20 via a network 30. A retrieval section 23 receives the confirmation code via a communication section 21 and a decoding section 22 and compares the confirmation code with all codes registered in a registration code database 24. When they are not completely coincident but a degree of coincidence is on the threshold or over, the retrieval section 23 compares the confirmation code with all history codes corresponding to the confirmation code in a history code database 25 and permits log-in when there is no history code completely coincident with the confirmation code, or requests transmission of the confirmation code again when there are a registration code and a history code coincident with the confirmation code.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

TECHNICAL FIELD The present invention relates to an authentication device,
In particular, it relates to an authentication device that can contribute to reducing the possibility of unauthorized use.

[0002]

2. Description of the Related Art Biological characteristics such as fingerprints, retinas, and iris (iris) patterns vary from individual to individual, and after the anagen, the change is extremely small and the possibility of forgery is extremely low. Therefore, by using such biological characteristics as authentication information, the accuracy of authentication can be improved.

For example, a conventional authentication system adopting an authentication method using an iris pattern as authentication information is, for example, as shown in FIG.
0 is connected to the server 40.

The terminal 10 captures an iris image from an imaging output of the camera unit 11 for capturing an iris of a user who uses the terminal 10, and uses a wavelet filter or the like to extract a characteristic image from the captured image. A coding unit 12 that extracts data (iris code) and uses it as authentication information, and an encryption unit 13 that encrypts the iris code
A communication unit 14 for transmitting the encrypted iris code to the server 20;
And an electronic payment function unit 15 for using a service (for example, an electronic payment service) provided by.

The server 40 instructs the terminal 10 to transmit an iris code and receives a iris code from the terminal 10, and a decoding unit 42 that decodes the iris code received via the communication unit 21. A search processing unit 43 for searching for registration data corresponding to the decrypted iris code; a registration code database 44 in which the iris code of the registered user is registered; and a service provided to the terminal 10 via the network 30 (electronic Payment service)
And an electronic settlement function unit 45 realized by executing server software for providing the electronic payment.

In such an authentication system, for example, in an authentication method using an iris pattern as authentication information,
Information (iris code) indicating the feature of the iris pattern is registered in advance in the registration code database 44 as shown in FIG. 8 for each user. The iris code (registration code) is obtained by performing a calculation for extracting a characteristic such as a change in shading from a user's iris image by a process using an orthogonal transform such as a wavelet filter.

FIGS. 9 and 10 are flowcharts showing the operation of the authentication system thus configured. FIG. 9 is a flowchart showing the operation of the server 40, and FIG. 10 is a flowchart showing the operation of the terminal 10.

First, when a login is requested from the terminal 10, the electronic settlement function unit 45 of the server 40 requests the terminal 10 to transmit an iris code in step S30 in FIG.

In response, terminal 10 starts the process from step S40 in FIG. 10. In this step S40, when the user turns his / her eyes to a position where the iris can be imaged, coding section 12 continues. In step S41, an iris image is captured from the imaging output of the camera unit 11, and in step S42, characteristic data (iris code) is extracted from the captured image data and supplied to the encryption unit 13.

[0010] When the iris code (confirmation code) is supplied, the encryption unit 13 proceeds to step S43.
Encrypt the supplied verification code. This confirmation code is transmitted to the server 20 by the communication unit 14 in the following step S44.

The confirmation code from the terminal 10 is transmitted to the communication unit 41
Is supplied to the decoding unit 42 via the
At 31, decoding is performed by the decoding unit 42. In the subsequent step S32, the search processing unit 43 compares the decrypted confirmation code with all the registered codes registered in the registered code database and, for example, confirms the confirmation determined according to the distance between the registered code and the confirmed code. If there is a registered code in which the degree of coincidence between the code and the registered code is equal to or greater than a predetermined threshold, the process proceeds from step S33 to step S33.
In step S33, if it is determined that the person who has been authenticated is a registered user corresponding to the registration code and there is no registration code whose degree of coincidence with the registration code is equal to or greater than a predetermined threshold value, the process proceeds to step S33. If the number of retries is equal to or less than the predetermined limit value, the process returns to step S30 to repeat the above-described processing. If the number of retries is greater than the predetermined limit value, the process proceeds to step S36 and the user is not a registered user. judge.

In an authentication method using a user's belongings that record authentication information such as a magnetic card and an IC card, it is necessary to manage the belongings so that the belongings are not stolen or copied. In an authentication method using authentication information based on memory of a person, it is necessary to manage the authentication information so that it is not known to others. However, in an authentication method using biometric characteristics as authentication information, theft of authentication information, The likelihood of plagiarism is extremely low and its management is easy.

[0013]

However, when the above-described authentication method using biological characteristics is used for authentication via a network, a problem may occur.

When the user's terminal and the service provider's server are connected via a network, the image of the user's iris captured by the terminal or the iris code obtained from the image is transmitted to the server. For example, if the terminal and the server are connected via the Internet, there is a risk that the contents of the communication may be known by other Internet users, and this may cause the iris of the legitimate registered user to be identified. The image or iris code may be known to others.

[0015] Even if a person other than the registered user requests authentication to the server using the iris image or iris code learned in this way, the server does not store the iris image or iris supplied from the terminal. Since there is no means for confirming whether or not the code belongs to the user of the terminal, the server authenticates the user of the terminal as a registered user corresponding to the supplied iris image or iris code. Resulting in.

The present invention has been made in view of such a problem, and has as its object to provide an authentication device that can contribute to reducing the possibility of unauthorized use.

[0017]

According to the present invention, there is provided an authentication apparatus comprising: receiving means for receiving authentication information for confirmation according to physical characteristics of a user supplied via a network; Holding means for holding, comparing means for confirming the authentication information received by the receiving means and each authentication information held in the holding means, and a comparing means for obtaining a degree of coincidence between the authentication information, and a match obtained by the comparing means If the degree is equal to or more than the first threshold or less than the second threshold, it is determined that the user is not the user corresponding to the registered authentication information, and if the degree is equal to or more than the second threshold and less than the first threshold, Determining means for determining that the user corresponds to the registered authentication information.

[0018]

DETAILED DESCRIPTION OF THE INVENTION The present invention relates to, for example, a dedicated communication line,
E-commerce such as online shopping and online banking via networks such as public communication lines and the Internet, so-called remote login to corporate networks via other networks, and connection of service providers who provide connection services to networks such as the Internet It can be used as an authentication device for authenticating a user via a network such as login to a point (access point) via another network.

FIG. 1 is a block diagram showing a configuration of a settlement system according to a first embodiment to which an authentication device according to the present invention is applied.

This payment system comprises a personal computer (PC), a dedicated service use terminal, and the like. Each of the plurality of terminals 10 used by a user to use the payment service is connected to a network 30 such as the Internet. The terminal 10 is connected and includes a server 20 for providing a settlement service.

The terminal 10 captures an iris image from an imaging output of the camera unit 11 for capturing an iris of a user who uses the terminal 10, and uses a wavelet filter or the like to extract a characteristic image from the captured image. A coding unit 12 that extracts data (iris code) and uses it as authentication information, and an encryption unit 13 that encrypts the iris code
A communication unit 14 for transmitting the encrypted iris code to the server 20;
And an electronic payment function unit 15 for using a service (for example, an electronic payment service) provided by.

The server 20 includes a communication unit 21 for receiving information such as an iris code from the terminal 10 and a decoding unit 22 for decoding the iris code received via the communication unit 21.
And a search processing unit 23 for searching for registration data corresponding to the decrypted iris code, a registration code database 24 in which the iris code of the registered user is registered, and a history of the iris code of the registered user at the time of authentication. History code database 25 and network 30
And an electronic payment function unit 26 implemented by executing server software for providing a service (electronic payment service) provided to the terminal 10 via the terminal 10.

The network 30 may be a dedicated communication line such as a so-called LAN or a public communication line such as a public telephone network or a public data communication network, whether wired or wireless.

In this settlement system, an iris code detected at the terminal 10 connected to the server 20 via the network 30 is used as authentication information of the registered user. As described above, in the conventional authentication system using the iris code as the authentication information, the iris code of the registered user is compared with the iris code of the user at the time of authentication at the time of login, and for example, the inter-code distance between these codes is determined. When the degree of coincidence is greater than or equal to a predetermined threshold, it is determined that the user attempting to log in is a registered user, and when the degree of coincidence is less than the predetermined threshold, the user is not a registered user. Is determined.

On the other hand, in this settlement system, the electronic settlement function unit 26 includes an iris code (confirmation code) at the time of authentication at login, an iris code (registration code) at the time of registration, and a confirmation code (history) at the time of past authentication. code)
Is less than a predetermined threshold (first threshold T1) and the degree of coincidence between the registration code and the confirmation code is less than or equal to the predetermined threshold (second threshold T2), the operator of the terminal 10 Is determined to be a registered user and login is permitted.

When the degree of coincidence between the registration code and the confirmation code or the history code is equal to or less than the first threshold value T1 and when the distance between the registration code and the confirmation code is greater than a predetermined threshold value, the operator of the terminal 10 Is not the registered user, and instructs the terminal 10 to transmit the iris code again. Further, when an authentication error occurs continuously for a predetermined number of times or more, it is determined that the user operating the terminal 10 is not a registered user, and processing such as rejection of login is executed.

For example, when the first threshold value T1 is the degree of coincidence when the inter-code distance is 0.5, it is determined that the registered user is not the registered user when the confirmation code and the registered code or the history code completely match. You. Note that the inter-symbol distance is the number of bits that differ between the codes to be compared,
For example, if there is a difference of one bit, the inter-code distance is one. Therefore, when the inter-symbol distance is 0.5, it does not actually exist, but is used for convenience to detect a perfect match between the confirmation code, the registration code, and the history code.

Hereinafter, the operation of the payment system configured as described above will be described. The electronic settlement function unit 26 is, for example, a settlement server executed by the server 20 or SE.
PG (P in T (Secure Electronic Transaction)
ayment Gateway (payment gateway).

The electronic payment function unit 15 of the terminal 10 is for using the payment service provided by the electronic payment function unit 26, and is realized by payment request software for requesting payment, WALLET software in SET, or the like. Have been. The electronic payment function unit 15 is implemented as, for example, a Web browser plug-in or a single application.

The electronic settlement function unit 15 is replaced with the electronic settlement function unit 26
First, the user of the terminal 10 requests the electronic payment function unit 26 for authentication processing and logs in, and then sends a message indicating the contents of the payment processing to the electronic payment function unit 15 To the electronic payment function unit 26, and finally, a message indicating the result of the payment processing is transmitted to the electronic payment function unit 26.

Hereinafter, these processes will be described in order. In this payment system, a payment service is provided to a user registered in advance by using an electronic payment function unit 26.

In order to register a user, for example, the user operates the terminal 10 and inputs information such as name, address, and age into an input form in a predetermined format obtained by a Web browser or the like. The server 20 via the communication unit 14 together with the obtained iris code (registration code) of the user.
Send to

The input form from the terminal 10 is supplied to the electronic payment function unit 26 via the network 30 and the communication unit 21, and the electronic payment function unit 26 is provided with a user specific to the supplied input form. Identification number (ID)
For example, the assigned ID and information such as the user's name, address, and age extracted from the input form are registered in the settlement database having the configuration shown in FIG.

As shown in the figure, the settlement database is configured to record, for each registered user, an ID and the name, address, age, etc. of the user in association with each other. It is used for managing users, managing the use history of settlement services, and the like.

When the input to the input form is completed, the user operates the terminal 10 to instruct creation of a registration code. The processing from step S10 in FIG. 3 is started.

First, in step S10, the coding unit 12 waits until the user instructs to take in an image. When the user turns his / her eyes to a position where an iris can be imaged by the camera unit 11 and instructs to capture an image, the coding unit 12 proceeds to step S11.
An image of the user's iris is captured from the imaging output of the camera unit 11, and in step S12, characteristic data (iris code) of, for example, about 256 bytes is extracted from the captured image data using a wavelet filter or the like. , To the encryption unit 13.

When the iris code (registration code) is supplied, the encryption unit 13 proceeds to step S13.
Using the public key corresponding to the secret key held by the decryption unit 22 of the server 20, the supplied registration code is encrypted and supplied to the communication unit 14. When the encrypted registration code is supplied, the communication unit 14 transmits the encrypted registration code to the server 20 in the subsequent step S14,
The transmission of the registration code ends.

The registration code from the communication unit 14 is
1 and decrypted by the decryption unit 22 using the secret key, and supplied to the search processing unit 23. The search processing unit 23 associates the ID assigned to the user by the electronic settlement function unit 26 with the registration code decrypted by the decryption unit 22 as described above, for example, as shown in FIG.
It registers in the registration code database of the structure shown in (A).

In the registration code database, as shown in the figure, an ID assigned to each registered user and a registration code of the user are recorded in association with each other. This registration code is referred to by the search processing unit 23 for comparison with an iris code (confirmation code) supplied from the terminal 10 for authentication or the like at login or the like.

The search processing unit 23 stores the user ID
Is registered in the history code database having the configuration shown in FIG. 4B, for example. The history code database is supplied to the search processing unit 23 at the time of past authentication of the user corresponding to the ID, as shown in FIG. And an area for recording a confirmation code (history code).

The user who has completed the above-described registration processing can use the payment system, but in order to use the payment system, the user must first use the payment system.
It is necessary to log in to the electronic settlement function unit 26 of the server 20.

In the login process, first, the electronic payment function unit 15 requests the electronic payment function unit 26 to log in in response to an instruction from the user. In response to the login request, the electronic payment function unit 26 starts the authentication processing from step S20 in FIG. 5, and in this step S20,
It requests the terminal 10 to transmit a confirmation code.

When the transmission of the confirmation code is requested, the terminal 1
0 executes the processing in FIG. 3 described above, the coding unit 12 captures the image of the iris of the user from the imaging output of the camera unit 11, extracts the iris code (confirmation code) from the image, and encrypts the iris code. The encrypting unit 13 encrypts the confirmation code, and the communication unit 14 transmits this to the server 20.

When the encrypted confirmation code from the communication unit 14 is supplied to the communication unit 21 via the network 30, the communication unit 21 supplies the confirmation code to the decryption unit 22, and in the subsequent step S21 , The decryption unit 22 decrypts the confirmation code using the secret key, and supplies the decryption code to the search processing unit 23.

In the subsequent step S22, the search processing unit 23 compares the supplied confirmation code with all the registered codes registered in the registered code database 24, and for example, registers the registered code and the code of the confirmation code. The degree of coincidence between the confirmation code and the registration code according to the inter-spacing (for example, determined according to the inter-symbol distance described above. When the inter-symbol distance is small, the degree of coincidence is high; )). The search processing unit 23 determines whether there is no match whose degree of match is equal to or greater than the above-described second threshold T2, or that there is a match whose degree of match is equal to or greater than the above-described first threshold T1, that is, a registration that completely matches the confirmation code. If there is a code, the process proceeds from the subsequent step S23 to step S28; otherwise, that is, if there is a registered code whose degree of coincidence with the confirmation code is equal to or greater than the second threshold T2 and less than the first threshold T1. , The ID corresponding to the registration code is read from the registration code database 24, and the process proceeds from step S23 to step S24.

In step S24, the search processing section 23
With reference to the history code database 25, the degree of coincidence between all history codes corresponding to the IDs read as described above and the current confirmation code is calculated, and the degree of coincidence with the current confirmation code is determined by the first threshold T1. If there is a history code that is as described above, the process proceeds from the following step S25 to step S28,
If there is no history code whose degree of coincidence with the current confirmation code is equal to or greater than the first threshold value T1, the process proceeds from step S25 to step S26.

In step S26, the search processing unit 23
Is for the registered user with the current verification code,
It is determined that the user is a valid user, and in the following step S27, the current confirmation code is registered as a history code in the history code database 25, and the authentication process ends.

The electronic payment function unit 26 permits login in response to the search processing unit 23 determining that the user is a valid user, and permits the user of the terminal 10 to use the payment service.

Thereafter, the electronic settlement function unit 15 sends a message indicating the contents of the settlement processing to the electronic settlement function unit 26, and the electronic settlement function unit 26 performs the settlement processing according to the message, and executes the settlement processing. A message indicating the result is transmitted to the electronic payment function unit 15. When the electronic payment function unit 15 receives this message, the payment processing ends.

On the other hand, step S23 or step S23
When the process proceeds from step S25 to step S28, it is determined whether or not the number of retries (the initial value is 0 and increases by one each time the confirmation code is retransmitted) is within a predetermined limit value. If the number of times is within the limit value, step S2
Returning to 0, the electronic payment function unit 26 requests the terminal 10 to transmit the confirmation code again, and repeats the above processing. On the other hand, if the number of retries has exceeded the limit value, the process proceeds to the subsequent step S29, where it is determined that the user is improper and the authentication process ends. Accordingly, the electronic payment function unit 26 does not permit the login, and the user of the terminal 10 cannot use the payment service.

In this settlement system, when the distance between the confirmation code, the registration code, and the history code is equal to or greater than the first threshold, that is, when the confirmation code completely matches the registration code or the history code, Iris image,
It is assumed that the registration code or history code is likely to have been leaked, so it is assumed that the user is an unauthorized user, a retransmission of the confirmation code is instructed, and if the number of retries exceeds a predetermined limit, login is refused. I have.

Even if the image of the iris is the same person, a slight difference is caused for each photographing due to a difference in photographing conditions such as a positional relationship between the camera unit 11 and the user, an opening state of an eyelid, or external illumination reflecting on an iris. Yes, the probability of a perfect match is extremely low. For this reason, the iris code obtained from the iris image also has a difference for each photographing, and the probability that the confirmation code completely matches the registered code is extremely low. As shown in FIG. , In a certain range A.

Therefore, when the degree of coincidence between the confirmation code and the registration code is equal to or greater than the first threshold value T1, for example, when the confirmation code completely matches the registration code, a legitimate registered user is excluded even if the user is regarded as an invalid user. Is very unlikely.
Also, even if the confirmation code completely matches the registration code, the possibility that the confirmation code completely matches the registration code twice in succession by instructing retransmission of the iris code is the same person. Therefore, if the user is a valid registered user, an iris code different from the previous one is obtained, and it is considered that the user is determined to be a valid user by the second authentication.

On the other hand, if the iris image or the iris code is stolen, the authentication code at the time of authentication is completely the same as the stolen iris code, the history code or the registration code, and is an illegal user. And the payment system cannot be used. Further, simply changing the iris image or the iris code is considered to lower the degree of coincidence with the registered code, and thus it is considered that the user is often determined to be an invalid user.

As shown in FIG. 6, the degree of coincidence is extremely high (for example, the inter-code distance is equivalent to about 2 or less).
Since the probability is also very small, the first threshold value T1 is set to be smaller than the value corresponding to the above-described case where the intersymbol distance is 0.5, and the value of the degree of coincidence corresponding to the case where the intersymbol distance is 2, for example. In addition to the case where the confirmation code completely matches the registration code and the history code, if the degree of coincidence is extremely high, the user requesting authentication is regarded as an invalid user, and the terminal 10 is notified of the iris code. Retransmission may be requested. This increases the possibility of detecting a user who has modified the stolen iris image or iris code. Note that the value of the first threshold T1 is not limited to these examples, and the probability that the registered user is rejected for authentication is too high according to the detection result of the degree of coincidence between the iris codes corresponding to FIG. It can be statistically determined within a range (for example, 1% or less) that does not need to be.

As described above, in this settlement system, even when authentication information such as an iris image and an iris code is known to another person, it is possible to contribute to a reduction in the possibility of unauthorized use such as impersonation. it can. In particular, in electronic payment, a large amount of funds can be transferred instantaneously, so that it is possible to prevent damage by eliminating logins due to unauthorized use.

In the above description, the case where characteristic data (iris code) extracted from the iris image is used as the authentication information has been described. However, the authentication information corresponding to the physical characteristics of the user includes the iris. Besides, fingerprints,
Hand type, facial appearance, retina, voiceprint, handwriting, etc. are included. The present invention can be applied to authentication using such authentication information.

For example, when a fingerprint is used as authentication information, characteristic data (for example, characteristic points and vector information) is extracted from the fingerprint pattern of the user read by the terminal, and registered as a registration code in a registration code database. In advance, characteristic data of a fingerprint pattern obtained by a similar method at the time of authentication is transmitted as a confirmation code to the server via the network, and the degree of coincidence with the registration code is obtained. If the registered data and the confirmation data completely match based on the degree of coincidence, or if the degree of coincidence is extremely high, it is determined that the registered user is not a registered user. Similar effects can be obtained.

In the above description, the case where the confirmation code at the time of past authentication is registered as a history code in the history code database has been described. However, since the history code increases by one for each authentication, all the past history codes are registered. There is a possibility that the recording area becomes enormous when trying to hold the code. For this reason, it is desirable to arrange the history codes as appropriate.

As a method for this, for example, an upper limit number of history codes is determined, and when the upper limit number is exceeded,
You may make it delete a history code in an old order. Alternatively, a history code whose degree of coincidence with the confirmation code has become equal to or greater than the first threshold is recorded, and a history code whose degree of coincidence with the confirmation code has not become equal to or greater than the first threshold is prioritized. For example, a history code to be registered in the history code database may be appropriately selected in accordance with a past authentication situation, such as sorting and organizing.

As a result, an appropriate history code can be stored in accordance with the past authentication situation, and the viewpoint of maintaining the effectiveness of preventing unauthorized access and preventing the required recording area from increasing. Is desirable.

In the above description, when the degree of coincidence between the confirmation code and the registration code or the history code is equal to or greater than the first threshold value, it is determined that the user is an invalid user, and the number of retries exceeds the limit value. In this case, the login is not permitted, but when it is determined that the user is an unauthorized user, for example, the access source of the user may be investigated or recorded.

As a result, the system administrator can easily grasp the fact of access from an unauthorized user and the source of the access, for example, prohibiting access from a specific address, and changing the authentication setting of a specific user. And other measures can be easily performed.

[0064]

According to the authentication device of the present invention, at the time of authentication,
Authentication information for confirmation according to the physical characteristics of the user is supplied to the comparing means via the network and the receiving means. The comparing means compares the authentication information with the authentication information of each user held in the holding means to determine the degree of coincidence between the authentication information. It is determined that the user is not the user corresponding to the registered authentication information when the value is less than the threshold value, and is the user corresponding to the registered authentication information when the value is equal to or more than the second threshold value and less than the first threshold value. Is determined.

When the physical characteristics of the user are used as the authentication information, there is a slight difference in the authentication information obtained for each authentication, depending on the small difference in the arrangement between the user and the means for acquiring the authentication information. Therefore, even if the same person, there is only a difference of less than such a small difference, that is, the authentication information at the time of registration and the authentication information at the time of authentication may completely match or have a very high degree of matching Sex is considered to be extremely low. On the other hand, the stolen authentication information completely matches the authentication information at the time of registration or at the time of the previous authentication without any modification.
Further, it is considered that the degree of coincidence with the registered authentication information is reduced by simply modifying the stolen authentication information.

Therefore, if a threshold value is set in accordance with a slight difference in authentication information for each authentication, when an attempt is made to use the stolen authentication information to perform authentication, a user corresponding to the registered authentication information is used. Is not determined, and the possibility that a person other than the registered regular user is erroneously recognized as a regular user can be reduced, thereby contributing to a reduction in the possibility of unauthorized use.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a payment system according to a first embodiment to which an authentication device according to the present invention is applied.

FIG. 2 is a diagram illustrating an example of a payment database.

FIG. 3 is a flowchart showing an operation of a terminal constituting the payment system.

FIG. 4 is a diagram showing an example of a registration code database and a history code database constituting a server constituting the settlement system.

FIG. 5 is a flowchart showing an authentication process in the server.

FIG. 6 is a diagram showing a comparison result between a confirmation code at the time of authentication and a registration code registered in the registration code database.

FIG. 7 is a block diagram showing a configuration of a conventional authentication system.

FIG. 8 is a diagram showing an example of a registration code database in a conventional authentication system.

FIG. 9 is a flowchart showing an operation of a server constituting the authentication system.

FIG. 10 is a flowchart showing an operation of a terminal constituting the authentication system.

[Explanation of symbols]

 Reference Signs List 10 terminal 11 camera unit 12 encoding unit 13 encryption unit 14 communication unit 15 electronic settlement function unit 20 server 21 communication unit 22 decryption unit 23 search processing unit 24 registration code database 25 history code database 26 electronic settlement function unit 30 network

Claims (6)

[Claims] 1. A receiving means for receiving authentication information for confirmation according to a physical characteristic of a user supplied via a network, a holding means for holding authentication information of each user, and a receiving means for receiving the authentication information. Comparing means for comparing the authentication information for confirmation with each of the authentication information held in the holding means, and obtaining a degree of coincidence between the authentication information, wherein the degree of coincidence obtained by the comparing means is equal to or greater than a first threshold or If it is less than the second threshold, it is determined that the user is not the user corresponding to the registered authentication information, and if it is not less than the second threshold and less than the first threshold, it corresponds to the registered authentication information. An authentication device comprising: a determination unit that determines that the user is a user. 2. The authentication apparatus according to claim 1, wherein the authentication information held by the holding unit is authentication information of a user at the time of registration. 3. The authentication apparatus according to claim 1, wherein the authentication information held by the holding unit is authentication information for confirmation received by the receiving unit. 4. The authentication apparatus according to claim 1, wherein the comparing unit obtains the degree of matching according to a distance between codes between the pieces of authentication information. 5. A retransmission requesting means for requesting transmission of authentication information again when the degree of coincidence obtained by said comparing means is equal to or greater than said first threshold value or less than said second threshold value. The authentication device according to claim 1, further comprising: 6. An authentication history holding means for holding past authentication information supplied to said receiving means, wherein said comparing means includes: authentication information received by said receiving means;
2. The authentication apparatus according to claim 1, wherein each authentication information is compared with each authentication information held in the authentication history holding means, and a matching degree between the authentication information is obtained.