JP2002032755A - System, device and method for personal identification - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve identification accuracy by making both data of a picture and physical characteristic information undividable and reliably and easily detecting forgery even though either or both of the data are rewritten. SOLUTION: A physical characteristic 10 extracted from a reader 2 is compared with physical identification information 5 of 1st electronized information 6 extracted from a medium 1 (1st identification) by using the medium 1 having the 1st electronized information 6 where the picture 4 and physical identification information 5 are embedded and 2nd electronized information 7 where physical identification information 15 being the same as the information 6 is separately formed, and when the identification due to the comparison is successful, the physical identification information 5 of the 1st information 6 with which the identification is successful is compared with physical identification information 15 extracted from the 2nd information 7 (2nd identification) to identify whether or not to be a person in question.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication field for identifying whether or not a user is an individual using physical characteristic information. The present invention relates to a personal authentication system, a personal authentication device, and a personal authentication method that can reliably and easily detect forgery even if one or both data are rewritten.

[0002]

2. Description of the Related Art Generally, as a method for identifying whether or not a user is a person, information such as fingerprints, faces, retinas, and other physical characteristics of a person possessed only by the person is registered in advance and the characteristic information is indicated. This confirms that you are who you say you are, or that you have it, such as a driver's license or passport.

[0003] Regarding the former authentication method using human physical characteristic information, it is said that the method using a fingerprint is highly reliable and feasible, and technically it has been almost established. In addition, a method of comparing a plurality of pieces of physical characteristic information has been proposed.

[0004] Regarding the latter authentication method using property,
It issues a proof of identity and confirms the person who owns it.However, in order to prevent impersonation due to theft, a driver's license or passport has only one face photo The person is confirmed by.

[0005]

However, the above-mentioned prior art has the following problems.

[0006] With regard to an authentication method using human physical characteristic information, impersonation cannot be prevented when physical characteristic information written in advance in a portable electronic device such as an IC card is rewritten.

[0007] Regarding the authentication method based on the property,
There was no means to check forgery of the photograph of the driver's license or passport, etc.

Accordingly, an object of the present invention is to make the data of both image information and physical characteristic information inseparable and to reliably and easily detect forgery even if one or both of the data are rewritten, and to perform authentication. An object of the present invention is to provide a personal authentication system, a personal authentication device, and a personal authentication method capable of improving accuracy.

[0009]

SUMMARY OF THE INVENTION According to the present invention, digitized information stored in an information storage medium and physical characteristics read from an external reading device are input to a personal authentication device to determine whether or not the user is a user. An identity authentication system that authenticates at least
First digitized information in which image information and body identification information are integrally embedded, and second digitized information in which the same information as the body identification information of the first digitized information is formed in separate areas Wherein the external reading device comprises: an external reading device that reads personal identification information of an individual; and an extracting device that extracts a physical feature from the read body identification information. Reading means for reading said first digitized information and said second digitized information stored in said information storage medium; and said body identification based on said first digitized information and said second digitized information. Extracting means for extracting information; comparing the physical characteristics extracted by the external reading device with the body identification information of the first digitized information extracted from the information storage medium to determine whether or not the user is the principal; Or A first authentication means for certifying, said first
Comparing the body identification information extracted from the first digitized information of the information storage medium with the body identification information extracted from the second digitized information when the authentication by the authentication means is successful. The second is to authenticate the identity of the person
Authentication means and a display means for displaying the result of the authentication, thereby forming an identity authentication system.

[0010] The present invention is a personal identification device for separately inputting digitized information and physical characteristics stored in an information storage medium and authenticating whether or not the user is an individual. Information storage having first digitized information in which information is integrally embedded, and second digitized information in which the same information as the body identification information of the first digitized information is formed in a separate area. Using a medium, external reading means for reading the body identification information of the individual from the outside, external feature extraction means for extracting a physical feature from the body identification information read from the outside, and the second feature stored in the information storage medium. Reading means for reading the first digitized information and the second digitized information;
Extracting means for extracting the body identification information from the first digitized information and the second digitized information; the physical features extracted by the external feature extracting means; and the physical features extracted from the information storage medium. First authentication means for authenticating the identity of the user by comparing the body identification information of the first digitized information with the physical identification information; and when the authentication by the first authentication means is successful, Second authentication means for authenticating whether or not the user is a person by comparing the body identification information extracted from the first digitized information with the body identification information extracted from the second digitized information; And a display unit for displaying the result of the authentication.

According to the present invention, there is provided a personal authentication apparatus for inputting digitized information stored in an information storage medium and physical characteristics read from an external reading apparatus, and a center apparatus for managing personal information for authentication. An authentication system for transmitting and receiving data between at least first electronic information in which at least image information and body identification information are embedded integrally;
Using an information storage medium having personalized information in which related information is formed in a separate area and digitized information, wherein the external reading device comprises: an external reading means for reading personal body identification information from outside; Extracting means for extracting physical characteristics from the body identification information read from the computer, wherein the personal authentication apparatus reads the first digitized information and the personal identification information stored in the information storage medium. Extracting means for extracting the body identification information from the first digitized information; the physical features extracted by the external reading device; and the first digitized information extracted from the information storage medium. A first authentication unit that authenticates the user by comparing the identification information with the body identification information; and a display unit that displays a result of the authentication. Acquiring the personal identification information from the personal authentication source and the personal authentication device, which manages the second digitized information which is the same information as the child information and in which the image information and the body identification information are embedded integrally. Means for searching for desired second digitized information from the personal information source based on the acquired personal identification information, and means for extracting body identification information from the searched second digitized information And when the authentication by the first authentication unit is successful in the personal authentication device, the body identification information extracted from the first digitized information on the information storage medium and the body identification information extracted from the second digitized information. The personal authentication system is configured by including second authentication means for authenticating the identity of the user by comparing the obtained body identification information.

According to the present invention, data is transmitted / received between a personal authentication device in which digitized information and physical characteristics stored in an information storage medium are separately input and a center device managing personal information for authentication. Wherein at least the first digitized information in which the image information and the body identification information are embedded integrally, and the information related to the first digitized information are formed in separate areas. Using an information storage medium having personal identification information, the external authentication means for externally reading the personal identification information of the individual, and the means for extracting physical characteristics from the externally read body identification information An external reading device having: a means for reading the first digitized information and the personal identification information stored in the information storage medium; and extracting the body identification information from the first digitized information. Means for authenticating whether or not the user is a person by comparing the physical characteristics extracted by the external reading device with the body identification information of the first digitized information extracted from the information storage medium. 1. The center device comprises: an authentication unit; and a display unit for displaying a result of the authentication, wherein the center device is the same information as the first digitized information, and the image information and the body identification information are embedded integrally. A personal information source that manages the obtained second digitized information; a unit that acquires the personal identification information from the personal authentication device; and a desired second information from the personal information source based on the acquired personal identification information. Means for retrieving the second digitized information, means for extracting the body identification information from the retrieved second digitized information, and information obtained when the first authentication means succeeds in the personal authentication device. Record A second authentication for authenticating whether or not the user is a person by comparing body identification information extracted from the first digitized information of the medium with body identification information extracted from the second digitized information; Means to constitute an identity authentication system.

The present invention relates to a personal authentication method for inputting digitized information stored in an information storage medium and physical characteristics read from an external reading device to a personal authentication device to authenticate whether the user is a user. And at least first electronic information in which image information and body identification information are embedded integrally;
Using the information storage medium having the body identification information of the digitized information and the second digitized information in which the same information is formed in a separate area, reading the body identification information of the individual from outside in the external reading device A reading step, an extraction step of extracting a physical feature from the body identification information read from the outside, and, in the personal identification device, the first digitized information and the second digitized information stored in the information storage medium. A reading step of reading the digitized information, an extracting step of extracting the body identification information from the first digitized information and the second digitized information, and the physical feature extracted by the external reading device; A first authentication step of authenticating whether or not the user is an individual by comparing the first digitized information extracted from the information storage medium with body identification information;
When the authentication by the authentication of the body is successful, the body identification information extracted from the first electronic information of the information storage medium;
A second authentication step of authenticating the identity of the user by comparing the body identification information extracted from the second digitized information, and a display step of displaying a result of the authentication. , Providing an authentication method.

According to the present invention, there is provided a personal authentication apparatus for inputting digitized information stored in an information storage medium and physical characteristics read from an external reading apparatus, and a center apparatus for managing personal information for authentication. An identity authentication method for transmitting and receiving data between at least first electronic information in which image information and body identification information are integrally embedded, and information related to the first electronic information are separately provided. Using the information storage medium having the personal identification information formed in the area of, the external reading device to read the body identification information of the individual from the outside, and the physical characteristics from the body identification information read from the outside. A reading step of reading the first digitized information and the personal identification information stored in the information storage medium in the personal authentication device; and Extracting the body identification information from the digitized information, and comparing the physical characteristics extracted by the external reading device with the body identification information of the first digitized information extracted from the information storage medium. Thus, the first authentication step of authenticating the identity of the user, the display step of displaying the result of the authentication, and the center apparatus, wherein the same information as the first digitized information, Acquiring the personal identification information from the personal identification device using a personal information source that manages the second digitized information in which the personal identification information is embedded integrally with the second electronic information, and based on the acquired personal identification information. Retrieving desired second digitized information from the personal information source; extracting body identification information from the retrieved second digitized information; When the authentication by the certificate is successful, by comparing the body identification information extracted from the first digitized information of the information storage medium with the body identification information extracted from the second digitized information, A second authentication step of authenticating whether or not the user is an identity, thereby providing an identity authentication method.

According to the present invention, data is transmitted and received between a personal authentication device to which digitized information and physical characteristics stored in an information storage medium are input and a center device for managing personal information for authentication. A personal authentication method, comprising: at least first electronic information in which image information and body identification information are embedded integrally; and an individual in which information related to the first electronic information is formed in separate areas. Using an information storage medium having identification information, in the personal identification device, an external reading step of reading the body identification information of an individual from outside, and an extracting step of extracting a physical feature from the body identification information read from outside. Reading the first digitized information and the personal identification information stored in the information storage medium; extracting the body identification information from the first digitized information; A first authentication step of authenticating whether or not the user is a person by comparing the physical characteristics read and extracted from the information with the body identification information of the first digitized information extracted from the information storage medium A display step of displaying a result of the authentication; and a second electronic device in the center device, the second electronic device being the same information as the first digitized information, wherein the image information and the body identification information are integrally embedded. Acquiring the personal identification information from the personal authentication device using a personal information source that manages the personalized information; and, based on the acquired personal identification information, a desired second digitized information from the personal information source. Searching for the body identification information from the searched second digitized information; and, if the authentication by the first authentication is successful in the personal authentication device, the first of the information storage medium is of A second authentication step of authenticating whether or not the user is an individual by comparing the body identification information extracted from the child information and the body identification information extracted from the second electronic information. Provides an identity authentication method.

According to the present invention, there is provided a medium in which a program for controlling an authentication process as to whether or not an individual is authenticated is recorded by a computer, wherein at least a first electronic device in which at least image information and body identification information are embedded. Using an information storage medium having digitized information and second digitized information in which the same information as the body identification information of the first digitized information is formed in a separate area. The first digitized information and the second digitized information stored in the information storage medium are read out of the body identification information from the outside, and the physical characteristics are extracted from the body identification information read out from the outside. , The body identification information is extracted from the first digitized information and the second digitized information, and the physical feature extracted by the external reading and the information By comparing the first digitized information extracted from the storage medium with the body identification information, whether or not the user is authenticated is authenticated. If the authentication is successful, the first digitized information of the information storage medium is read. By comparing the body identification information extracted from and the body identification information extracted from the second digitized information, the user is authenticated as to whether or not the user is authenticated, and the result of the authentication is displayed.
Provided is a medium on which an authentication control program is recorded.

According to the present invention, there is provided a medium in which a program for controlling an authentication process for authenticating a person or not is recorded by a computer, wherein at least a first electronic device in which image information and body identification information are embedded integrally. Using an information storage medium having personalized information and personal identification information in which information related to the first electronic information is formed in a separate area, and the control program causes the computer to transmit personal body identification information to a computer from outside. The first electronic information and the personal identification information stored in the information storage medium are read, and the first electronic information is read. The physical identification information extracted from the computerized information, the physical characteristics extracted by reading from the outside, and the first digitized information extracted from the information storage medium By comparing with the body identification information, the user is authenticated as to whether or not he / she is the person, the result of the authentication is displayed, and the image information and the body identification information are the same information as the first digitized information. Using a personal information source that manages the second digitized information embedded in the personal information source, the personal identification information is acquired, and based on the acquired personal identification information, a desired second electronic information is transmitted from the personal information source. For identifying body information, extracting body identification information from the searched second digitized information, and, if the authentication is successful, the body identification information extracted from the first digitized information in the information storage medium. And the body identification information extracted from the second digitized information, thereby authenticating whether or not the user is an identity, and displaying the result of the authentication. Offer To.

[0018]

Embodiments of the present invention will be described below in detail with reference to the drawings.

[First Example] A first embodiment of the present invention will be described with reference to FIGS.

(Outline) First, an outline of the present invention will be described with reference to FIG.

The personal authentication system according to the present invention comprises an information storage medium 1 storing electronic information, a reading device 2 for reading physical characteristics of an individual, and an electronic information storage device for reading information stored in the information storage medium 1. And a personal authentication device 3 for inputting the physical characteristics read from 2 and authenticating whether or not the user is an individual.

In the information storage medium 1, image information 4 and body identification information 5 are digitized and embedded in the form of first digitized information 6, and body identification information 5 of the first digitized information 6. The second digitized information 7, the personal information 8, and the like in which the body identification information 15 having the same data content as those in the above are formed in separate areas are stored.

The reading device 2 includes the body identification information 10 of the individual 9.
And reading means for extracting a physical feature from the read body identification information 10.

The personal authentication device 3 comprises a reading means 11, an extraction means, first and second authentication means, and a display means 12.

The reading means 11 reads the first digitized information 6 and the second digitized information 7 stored in the information storage medium 1.

The extracting means extracts physical features from the read first digitized information 6 and second digitized information 7.

The first authentication means compares the body identification information 10 extracted by the reading device 2 with the physical characteristics of the first digitized information 6 extracted from the information storage medium 1 to determine whether or not the person is the person. Authenticate.

When the authentication by the first authentication means succeeds, the second authentication means outputs the physical feature extracted from the first electronic information 6 of the information storage medium 1 and the second electronic information 7
The user is authenticated by comparing with the physical characteristics extracted from the user.

The display means 12 displays the results of the authentication by the first and second authentication means, respectively.

(Specific Example) Hereinafter, a specific example will be described.

FIG. 1 shows a hardware configuration of the personal authentication system. This example is an example in which the personal authentication device 3 is installed in a store or the like and personal authentication is performed.

The present system comprises an IC card 1 as an information storage medium storing various types of information 6, 7, and 8, a fingerprint reader 2 as a reading device, and information 6, 7 stored in the IC card 1. , 8 and fingerprint information 10 as body identification information read by the fingerprint reader 2 are inputted, and the personal authentication device 3 authenticates whether or not the user is an individual.

The personal authentication device 3 includes an IC card reader 11
And a display 12. The IC card reader 11 is provided with a card insertion section 11a for reading the IC card 1. The fingerprint reader 2 is connected to the personal authentication device 3.

In this example, a face image 4 is taken as an example of image information, and fingerprint feature point data 5 indicating a fingerprint is taken as an example of a physical feature embedded in the face image 4.

Thus, the first digitized information 6 is information in which the face image 4 and the fingerprint feature point data 5 are digitized and embedded together. Also, the second electronic information 7
Is composed of fingerprint feature point data 15 having the same data content as fingerprint feature point data 5.

The technique for embedding the fingerprint feature point data 5 in the face image 4 uses an information embedding technique. Here, the information embedding technique refers to a technique of embedding a physical feature by modifying an image in which a physical feature is to be embedded so that the image cannot be perceived by human eyes. Examples of this information embedding technology include a digital watermarking technology and steganography.

The physical features embedded in the face image 4 may be a fingerprint, a voiceprint, an iris, or a combination of a plurality of pieces of physical feature information.

(Software Configuration of System) FIG.
2 shows a software configuration of the system in FIG. 1.

The personal authentication device 3 includes a fingerprint feature point data extraction unit 20 for extracting fingerprint feature point data 5 embedded in the digitized face image 4 stored in the IC card 1 by the information embedding technique, An information extracting unit 21 for extracting the fingerprint feature point data 15 and the personal information 8 stored in the card 1 and a fingerprint feature point data generating unit 31 from the fingerprint information 10 input by the fingerprint image input unit 30 of the fingerprint reader 2
The fingerprint feature point data 32 is generated by the
A data comparing unit 22 for comparing with the fingerprint feature point data 5 input from the PC, a face image displaying unit 23 for displaying the digitized face image 4 input from the IC card 1, and an authentication result for displaying each comparison result And a display unit 24.

(System Operation) FIG. 3 is a flowchart showing a personal authentication process in the present system.

First, in step S 1, the IC card 1 possessed by the authenticator is inserted into the IC card reader 11 of the personal authentication device 3, and information is added to the digitized face image 4 stored in the IC card 1 in advance. The fingerprint feature point data 5 embedded by the embedding technology is used to extract the fingerprint feature point data
Extract by

In step S2, the fingerprint of the authenticator is input as a fingerprint image 10 in the fingerprint reader 2, and based on the fingerprint image 10, the fingerprint characteristic point data generator 31 of the fingerprint reader 2 generates the fingerprint characteristic point data. Convert to 32.

In step S3, the personal authentication device 3
Data comparison is performed between the fingerprint feature point data 5 input from the C card 1 and the fingerprint feature point data 32 input from the fingerprint reader 2 (first authentication).

If the two data do not match as a result of the first authentication, the flow advances to step S4 to stop the authentication, and at the same time, display an authentication failure on the authentication result display unit 24.

On the other hand, if the two data match by the first authentication, the process proceeds to step S5.

In step S5, the fingerprint feature embedded by the information embedding technique in the digitized face image 4 stored in advance in the IC card 1 possessed by the authenticator whose validity has been confirmed by the first authentication. The point data 5 is input to the personal authentication device 3.

In step S 6, the fingerprint feature point data 15 stored in another area of the IC card 1 owned by the authenticator is input to the personal identification device 3.

In step S7, the personal identification device 3 compares the fingerprint feature point data 5 with the fingerprint feature point data 15 (second authentication).

If the two data do not match as a result of the second authentication, the flow advances to step S8 to stop the authentication.
At the same time, an authentication failure is displayed using the authentication result display unit 24.

On the other hand, if the two data match by the second authentication, the process proceeds to step S9.

In step S9, the personal authentication device 3 checks the validity of the I that has been verified in the first authentication and the second authentication.
An electronic face image 4 stored in advance in the C card 1 is received.

In step S10, the face image 4 is displayed by the face image display unit 23, and compared with the face of the person directly with the human eyes (third authentication).

If the two data do not match as a result of the third authentication, the flow advances to step S12 to stop the authentication.

On the other hand, if the two data match by the third authentication, the authenticator can receive various services.

(Forgery Example) Next, a description will be given of a forgery example.

For example, when an unauthorized user who possesses another person's IC card 1 impersonates a legitimate user, the data that may be falsified is digitized with the fingerprint feature point data 5 embedded by the information embedding technology. The three types of fingerprint feature point data 5 and fingerprint feature point data 15 embedded in the digitized face image 4 by the information embedding technology.

First, consider a case where only the face image data has been tampered with.

For example, this is a case where a part of the face image is rewritten by adding a beard or glasses. Since the information embedding technology here employs an information embedding technology in which the embedded information is destroyed and cannot be read out even if the face image data is changed even a little, a correct fingerprint feature point is used in the first authentication process. The extraction of the data 5 cannot be performed, thereby detecting fraud.

Next, consider a case where only the fingerprint feature point data 5 is falsified.

The information embedding algorithm here is assumed to be secret, and since the digitized face image 4 and the fingerprint feature point data 5 are inseparable and cannot be separated, even if the fingerprint feature point data 5 alone is to be tampered with, At the same time, the digitized face image 4 is disturbed, so that fraud is discovered by the second authentication and the third authentication.

Next, let us consider a case where only the fingerprint feature point data 15 is falsified.

In this case, fraud is discovered by the second authentication.

Next, let us consider a case where the data has been falsified.

In this case, fraud is discovered by the second authentication.

Next, consider a case in which the data has been falsified.

In this case, as in the case of the falsification of only the data, the fraud is found in the first authentication process.

Next, let us consider a case where the data is altered.

In this case, as in the case of falsification of only the data, the third authentication reveals fraud.

Finally, let us consider a case where all the data of,, and have been falsified.

The algorithm for embedding information in the digitized face image 4 is based on the premise that it is secret. Therefore, when a fingerprint is extracted from the digitized face image 4, the fingerprint cannot be correctly extracted. Fraud is discovered by the process.

By the above-described authentication processing, even if the personal data written in the portable electronic device such as the IC card is tampered, it is possible to reliably and easily find the impersonation.

In the present embodiment, the fingerprint reader 2 is formed separately from the personal identification device 3, but the present invention is not limited to this, and the fingerprint reader 2 may be integrated into the device main body.

Further, a code for error detection may be added to the digitized information to be embedded by using the information embedding technique.

[Second Example] A second embodiment of the present invention will be described with reference to FIGS. The description of the same parts as those in the first example is omitted, and the same reference numerals are given.

(Overview) First, an overview of the present system will be described.

FIG. 4 shows a hardware configuration of the personal authentication system. In this example, the personal authentication device 3 is installed in a store or the like, and one of the authentication means is distributed to the center device 40 side.

In this system, the personal authentication device 3
It is connected via a communication line 100 to a center device 40 having a personal information database 41.

In the IC card 1, the first digitized information 6 in which the face image 4 and the fingerprint feature point data 5 are digitized and embedded integrally, and the data contents related to the first digitized information 6 Are stored in a separate area, such as a personal ID 50 as personal identification information.

[0086] The personal authentication device 3 transmits the first
Means for reading the electronic information 6 and the personal ID 50 of
A fingerprint image 10 extracted by the fingerprint reader 2 and an IC
Personal ID 5 of first digitized information 6 extracted from card 1
The first to authenticate the identity by comparing with 0
Authentication means.

The center device 40 obtains the personal information database 41, an obtaining means for obtaining the personal ID 50 from the personal authentication device 3, and searches the personal information database 41 for the second digitized information 44 based on the obtained personal ID 50. It has a search means, an extraction means for extracting the fingerprint feature point data 43 from the searched second digitized information 44, and a second authentication means.

The personal information database 41 has a personal ID
42, second digitized information 44 in which the face image 4 and the fingerprint feature point data 43 are digitized and embedded integrally.

In this case, the second digitized information 44 has the same data content as the body identification information 5 of the first digitized information 6 in the personal identification device 3. The personal ID 42 corresponds to the personal ID 50 in the personal authentication device 3.

When the first authentication is successful in the personal authentication device 3, the second authentication means outputs the fingerprint feature point data 5 extracted from the first digitized information 6 of the IC card 1 and the second
Fingerprint feature point data 43 extracted from the computerized information 44
Is authenticated by comparing with

(System Configuration) FIG. 5 shows a schematic configuration of the present system of FIG.

The personal authentication device 3 includes a fingerprint feature point data extraction unit 20 for extracting fingerprint feature point data 5 embedded in the digitized face image 4 stored in the IC card 1 by the information embedding technique, Information extraction unit 21 for extracting personal ID 50 and personal information 8 stored in card 1
A fingerprint feature point data generation unit 31 generates fingerprint feature point data 32 from the fingerprint image 10 input by the fingerprint image input unit 30 of the fingerprint reader 2, and the fingerprint feature point data 5 input from the IC card 1. A data comparison unit to be compared,
It has a face image display unit 23 for displaying the digitized face image 4 input from the IC card 1 and an authentication result display unit 24 for displaying each comparison result.

The center device 40 stores a personal ID 42 for identifying the individual 9 (this corresponds to the personal ID 50) and fingerprint feature data 43 embedded in the digitized face image 4 by the information embedding technique. Personal information database 41 and personal ID 5 received from personal authentication device 3
0, a DB search unit 45 for searching the personal information database 41, and fingerprint feature point data 43 from the searched face image 4.
A fingerprint feature point data extraction unit 46 for extracting the fingerprint feature point data 5 embedded in the face image 4 by the information embedding technique from the first digitized information 6 received from the personal identification device 3 It has a data extracting section 47 and a data comparing section 48 for comparing these data.

(System Operation) FIGS. 6 and 7 are flowcharts showing personal authentication processing in the present system.

FIG. 6 shows the personal authentication processing on the personal authentication device 3 side.

First, in step S20, the IC card 1 possessed by the certifier is transferred to the IC card reader 1 of the personal authentication device 3 at the store where the personal authentication device 3 is installed.
1 and the fingerprint feature point data extraction unit 20 extracts fingerprint feature point data 50 embedded in the digitized face image 4 stored in the IC card 1 in advance by the information embedding technique.

In step S 21, the fingerprint of the authenticator is input as the fingerprint image 10 in the fingerprint image input unit 30 of the fingerprint reader 2, and the fingerprint feature point data generation unit 31 uses the fingerprint feature point data generation unit 31 based on the fingerprint image 10. It is converted to data 32.

In step S22, the personal authentication device 3
The fingerprint comparison unit 22 compares the fingerprint feature point data 5 input from the IC card 1 with the fingerprint feature point data 32 input from the fingerprint reader 2 (first authentication).

If the two data do not match as a result of the first authentication, the flow advances to step S23 to stop the authentication, and at the same time, display an authentication failure using the authentication result display unit 24.

On the other hand, if the two data match by the first authentication, the process proceeds to step S24, and the data that has been successfully authenticated is stored.

Here, the personal authentication device 3 is installed in a store or the like, and there are many personal authentication devices. Therefore, there is a risk that the store and the certifier cooperate and are illegally used.

Therefore, the authentication data is transmitted to the center device 40 using the communication line 100, and the center device 40 compares the data.

The procedure is as follows. In step S25, the fingerprint feature point data 5 used in the first authentication is embedded in the digitized face image 4 by the information embedding technique using the communication line 100, that is, Fingerprint feature point data 5
Center device 40 as the state of the first digitized information 6 including
Send to

By transmitting the fingerprint feature point data 5 embedded in the digitized face image 4 by the information embedding technique in this manner, even if the fingerprint feature point data is seen by a third party on the communication path, the fingerprint feature point data is transmitted. Since it is not known whether the data itself is embedded, it is safe in terms of confidentiality.

In step S26, the personal ID 50 is obtained from the IC card 1. In step S27, the personal ID 50 is also transmitted to the center device 40. FIG. 7 shows personal authentication processing on the center device 40 side.

Personal information database 4 of center device 40
1 includes a personal ID 42 for identifying an individual in advance at the time of issuance of an IC card, and fingerprint feature point data 43 of an authenticator (corresponding to the personal ID 42 and embedded in the digitized face image 4 by an information embedding technique). 2 electronic information 44) are registered.

In steps S50 to S51, the center device 40 performs the first digitization in which the fingerprint feature point data 5 is embedded in the personal ID 50 and the digitized face image 4 from the personal identification device 3 by the information embedding technique. Data including information (physical characteristic information) 6 is received through the communication line 100, and the first digitized information 6 is obtained.

In steps S52 to S53, data including the personal ID 50 is received, and the personal ID 50 is obtained.

In step S54, the center device 40
Based on the personal ID 50 received from the personal authentication device 3,
Authenticator fingerprint feature point data 43 embedded in the digitized face image 4 registered in the personal information database 41 by the DB search unit 45 by the information embedding technique.
Search for.

In step S55, the fingerprint feature point data extraction unit 46 extracts the fingerprint feature point data 43 from the retrieved data.

In step S56, fingerprint feature point data is extracted from the first digitized information 6 (physical feature information) embedded in the digitized face image 4 received from the personal identification device 3 by the information embedding technique. The fingerprint feature point data 5 is extracted by the unit 47.

In step S57, the fingerprint comparison unit 43 compares the fingerprint feature point data 43 extracted from the personal information database 41 with the fingerprint feature point data 5 extracted from the first digitized information 6 received from the personal identification device 3. Compare by 48 (second authentication).

At step S58, 2nd is obtained by the second authentication.
If the two data do not match, an authentication failure signal is sent. If the two data match by the second authentication, an authentication success signal is sent from the center device 40 via the communication line 100 to the user. It is transmitted to the authentication device 3.

Referring back to FIG. 6, in steps S28 to S29, data indicating the second authentication result is received via communication line 100, and an authentication failure signal or an authentication success signal is obtained.

In step S30, the second authentication result is compared. If the result indicates authentication failure, the flow advances to step S31 to display the authentication failure using the authentication result display unit 24 of the personal authentication device 3. , End the authentication.

On the other hand, the second authentication result is compared, and if the result of the authentication is successful, the process proceeds to step S32.

In step S32, the digitized face image 4 stored in advance in the IC card 1 whose validity has been confirmed in the first authentication and the second authentication is obtained.

In step S33, the obtained face image 4 is displayed by the face image display section 23 of the personal identification device 3.

In step S34, the displayed face image 4 is directly compared with the face of the person in the human eyes (third authentication).

If the two data do not match as a result of the third authentication, the flow advances to step S35 to stop the authentication.

If the two data match by the third authentication, the process proceeds to step S36, and the authenticator receives various services.

(Fake Example) Next, a description will be given of a forgery example.

For example, the unauthorized user and the store where the personal identification device 3 is installed cooperate to decode the algorithm of the information embedding technology and to transfer the fingerprint feature point data 5 without destroying the digitized face image 4. Even if it has been tampered with, the center device 40 embeds in the face image 4 digitized based on the falsified fingerprint feature point data 5 and the personal ID 42 corresponding to the personal ID 50 by the information embedding technique. By comparing the digitized information 44 with the fingerprint feature point data 43, an unauthorized user can be reliably grasped, and the security can be improved.

Further, by encrypting the data flowing on the communication line, threats such as prying eyes on the communication path are reduced.

Furthermore, when information is registered in the personal information database 41, a hash value of each information is registered, and tampering is detected by comparing with a hash value of each data received from the personal authentication device 3. Good.

According to the above-described method, even if the personal data written in the portable electronic device such as the IC card is tampered with, it is possible to detect the spoofing, and the store in which the personal authentication device 3 is installed and the unauthorized user are used. Can also detect unauthorized use by By decentralizing security in this way, it is expected that resistance to collusion attacks will be enhanced.

[Comparative Example] Next, a comparative example will be described.

FIG. 8 is an example in which the method of the present invention is compared with the conventional method.

The IC card 200 is an example of a conventional system in which a plurality of conventionally proposed physical information are independently stored.

The IC card 1 is an example of the method of the present invention in which fingerprint feature point data 5 as a physical feature is embedded in a face image 4 using an information embedding technique.

When comparing the security against falsification of the IC card, the following three points can be said. (1) The security against the disguise of the certifier and the false fingerprint
The conventional system and the present invention system are almost the same. (2) The possibility that the fingerprint characteristic point data f of the individual is falsified and impersonated by the fingerprint characteristic point data f 'of the perpetrator is the same in the conventional method and the present invention. (3) The possibility that the face image data p of the person is falsified by the face image data p 'of the perpetrator and spoofed is higher in the conventional method.

Here, the reason (3) will be considered.

The fingerprint feature point data f is embedded in the face image data p of the IC card 1 according to the present invention using an information embedding technique. However, the information embedding algorithm W is secret, and the fingerprint feature of the perpetrator is used. It is difficult to replace with point data f '.

Moreover, even if the fingerprint feature point data f (5) of the first digitized information 6 is replaced with the fingerprint feature point data f 'of the perpetrator, the fingerprint of the second digitized information 7 is replaced. Since further matching is performed with the feature point data f ₂ (15), forgery can be reliably determined.

Note that by performing authentication using a face, which is currently used most frequently, through human eyes as final comparison means (third authentication), it is easy for the authenticator to accept, and it can be determined only by a computer. There is also an advantage that it is possible to discriminate subtle differences in facial expressions that cannot be made. For this reason,
Authentication through both humans and computers can improve the authentication accuracy more than authentication using only computers.

[Other Example 1] In the same configuration as the first example described above, an information embedding technique that is sensitive to a change in an image or the like to be embedded and has no tolerance is used.

Here, the information embedding technique that is sensitive to the change of the image or the like to be embedded and has no tolerance is used when the face image is slightly changed by the perjury person. Second, the fingerprint feature point data f embedded in the face image is not correctly detected, and the tampering is easily detected. Therefore, it becomes difficult for the perpetrator to forge or replace the face image data in the IC card, and the effect of performing more secure personal authentication can be expected.

[Other Example 2] In the configuration similar to that of the second example described above, an information embedding technique that is sensitive to a change in an image or the like to be embedded and has no tolerance is used.

As in the above-mentioned other example 1, it becomes difficult for the perpetrator to forge or replace the face image data in the IC card, and the effect of performing more secure personal authentication can be expected.

[0133]

As described above, according to the present invention,
First digitized information in which image information and body identification information are digitized and embedded integrally, and second digitized information in which the same data content as the first digitized information is formed in a separate area Using an information storage medium having information and comparing the physical characteristics extracted from the reading device with the body identification information of the first digitized information extracted from the information storage medium (first authentication), If the authentication is successful, the body identification information of the first digitized information that has been successfully authenticated is compared with the body identification information extracted from the second digitized information (second authentication) to determine whether the user is the principal. Since it was made to authenticate, the data of both the face photograph and the physical characteristic information are made inseparable, and even if one or both data are rewritten, it is possible to reliably and easily find a forgery, Authentication accuracy can be improved.

Further, according to the present invention, since a plurality of comparative authentication processes are performed in combination as described above, when the present invention is adopted in an authentication system using human physical characteristic information, an IC card It is possible to reliably detect falsification of the characteristic information registered in advance in the portable electronic device such as.

Further, according to the present invention, by adding a code for error detection to the digitized information embedded by the information embedding technique, the data tampering detection ability can be further improved.

[Brief description of the drawings]

FIG. 1 is an explanatory diagram illustrating a schematic configuration of a personal authentication system according to a first embodiment of the present invention.

FIG. 2 is a block diagram mainly showing a software configuration in the system of FIG. 1;

FIG. 3 is a flowchart illustrating a personal authentication process.

FIG. 4 is an explanatory diagram illustrating a schematic configuration of a personal authentication system according to a second embodiment of the present invention.

FIG. 5 is a block diagram mainly showing a software configuration in the system of FIG. 4;

FIG. 6 is a flowchart illustrating an authentication process on the personal authentication device side.

FIG. 7 is a flowchart illustrating an authentication process on the center device side.

FIG. 8 is an explanatory diagram showing a comparative example with the conventional method.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 IC card 2 Fingerprint reader 3 Identity authentication device 4 Face image 5 Fingerprint feature data 6 First digitized information 7 Second digitized information 8 Personal information 9 Individual 10 Fingerprint 11 IC card reader 12 Display 15 Fingerprint feature Data 32 Fingerprint feature point data 40 Center device 41 Personal information data bank 42 Personal ID 43 Fingerprint feature point data 44 Second digitized information 100 Communication line

 ──────────────────────────────────────────────────続 き Continuation of the front page (72) Inventor Horioka Riki 2-3-1 Otemachi, Chiyoda-ku, Tokyo Inside Nippon Telegraph and Telephone Corporation (72) Inventor Toru Wakahara 2-3-1 Otemachi, Chiyoda-ku, Tokyo No. 1 Inside Nippon Telegraph and Telephone Corporation (72) Minoru Sakagami 3-15 Babacho, Chuo-ku, Osaka City, Osaka Prefecture F-term (in reference) 5B043 AA09 BA02 BA04 CA09 CA10 FA02 FA04 GA10 GA11 GA13 HA02

Claims (9)

[Claims] 1. An identity authentication system for inputting digitized information stored in an information storage medium and physical characteristics read from an external reading device to an identity authentication device to authenticate whether the user is an identity authentication system. At least first electronic information in which image information and body identification information are embedded integrally, and a second electronic information in which the same information as the body identification information of the first electronic information is formed in a separate area. Using an information storage medium having digitized information, the external reading device comprises: external reading means for reading personal identification information of an individual; and extracting means for extracting a physical feature from the read body identification information, Reading means for reading the first digitized information and the second digitized information stored in the information storage medium; and a reading means for reading the first digitized information and the second digitized information. The body sensation Extracting means for extracting information; and comparing the physical characteristics extracted by the external reading device with the body identification information of the first digitized information extracted from the information storage medium to determine whether the user is the user. A first authentication unit that authenticates the user, and when the authentication by the first authentication unit is successful, the body identification information extracted from the first digitized information in the information storage medium; Personal authentication characterized by comprising second authentication means for authenticating whether or not the user is an identity by comparing the identification information with the body identification information extracted from the authentication information, and display means for displaying the result of the authentication. system. 2. A personal authentication device for separately inputting digitized information and physical characteristics stored in an information storage medium and authenticating whether the user is an individual or not, comprising at least image information and body identification information. An information storage medium having first digitized information integrally embedded therein and second digitized information in which the same information as the body identification information of the first digitized information is formed in a separate area. External reading means for reading the body identification information of an individual from outside; external feature extracting means for extracting a physical feature from the body identification information read from the outside; and the first feature stored in the information storage medium. Reading means for reading the digitized information and the second digitized information; extracting means for extracting the body identification information from the first digitized information and the second digitized information; and the external feature extracting means Extracted First authentication means for authenticating whether or not the user is a person by comparing the obtained physical characteristics with the body identification information of the first digitized information extracted from the information storage medium; Comparing the body identification information extracted from the first digitized information of the information storage medium with the body identification information extracted from the second digitized information when the authentication by the authentication means is successful. A second authentication unit for authenticating whether the user is an individual or not, and a display unit for displaying a result of the authentication. 3. A personal authentication device for inputting digitized information stored in an information storage medium and physical characteristics read from an external reading device, and a center device for managing personal information for authentication. An identity authentication system for transmitting and receiving data, wherein at least first electronic information in which image information and body identification information are embedded integrally, and information related to the first electronic information are stored in separate areas. Using an information storage medium having personal identification information formed in the external storage device, wherein the external reading device reads externally the personal identification information of the individual, and extracts a physical feature from the externally read body identification information. Reading means for reading the first digitized information and the personal identification information stored in the information storage medium; and the first digitizing means. Extracting means for extracting the body identification information from a report, and comparing the physical characteristics extracted by the external reading device with the body identification information of the first digitized information extracted from the information storage medium. A first authentication unit for authenticating whether or not the user is a user, and a display unit for displaying the result of the authentication. The center device is the same information as the first digitized information, and A personal information source that manages the second digitized information in which the information and the body identification information are integrally embedded, a unit that acquires the personal identification information from the personal authentication device, and based on the acquired personal identification information. Means for retrieving desired second digitized information from the personal information source; means for extracting body identification information from the retrieved second digitized information; and the first authentication in the personal authentication device. When the authentication by the step is successful, by comparing the body identification information extracted from the first digitized information of the information storage medium with the body identification information extracted from the second digitized information, A personal authentication system comprising: a second authentication unit for authenticating whether or not the user is an individual. 4. Data transmission / reception is performed between a personal authentication device into which digitized information and physical characteristics stored in an information storage medium are separately input and a center device managing personal information for authentication. An identity authentication system, comprising: at least first electronic information in which image information and body identification information are embedded integrally; and an individual in which information related to the first electronic information is formed in separate areas. Using an information storage medium having identification information, the personal authentication device includes: an external reading unit that reads the body identification information of an individual from the outside; and a unit that extracts a physical feature from the body identification information that is read from the outside. An external reading device, means for reading the first digitized information and the personal identification information stored in the information storage medium, and means for extracting the body identification information from the first digitized information A first authentication unit that authenticates the user by comparing the physical characteristics extracted by the external reading device with the body identification information of the first digitized information extracted from the information storage medium; An authentication unit, and a display unit for displaying a result of the authentication, wherein the center device is the same information as the first digitized information, and the image information and the body identification information are integrally embedded. A personal information source that manages the second digitized information; a unit that acquires the personal identification information from the personal identification device; and a desired second from the personal information source based on the acquired personal identification information. Means for retrieving digitized information; means for extracting body identification information from the retrieved second digitized information; and information authentication when the authentication by the first authentication means is successful in the personal authentication device. A second authentication for authenticating whether or not the user is a person by comparing body identification information extracted from the first digitized information of the medium with body identification information extracted from the second digitized information; Personal authentication system characterized by comprising means. 5. A personal authentication method for inputting digitized information stored in an information storage medium and physical characteristics read from an external reading device to a personal authentication device to authenticate whether the user is a user or not. At least first electronic information in which image information and body identification information are embedded integrally, and a second electronic information in which the same information as the body identification information of the first electronic information is formed in a separate area. Using an information storage medium having digitized information, in the external reading device, a reading step of reading personal body identification information from outside, and an extracting step of extracting a physical feature from the body identification information read from outside. A reading step of reading the first digitized information and the second digitized information stored in the information storage medium; and the first digitized information and the second digitized information. Emotion Extracting the body identification information from the computer; and comparing the physical characteristics extracted by the external reading device with the body identification information of the first digitized information extracted from the information storage medium. A first authentication step of authenticating whether or not the user is an individual; and, if the authentication by the first authentication is successful, the body identification information extracted from the first digitized information of the information storage medium; A second authentication step of authenticating whether or not the user is an individual by comparing the body identification information extracted from the digitized information of step 2, and a display step of displaying a result of the authentication. Authentication method. 6. A personal authentication device for inputting digitized information stored in an information storage medium and physical characteristics read from an external reading device, and a center device for managing personal information for authentication. A personal authentication method for transmitting and receiving data, wherein at least first electronic information in which image information and body identification information are embedded integrally, and information related to the first electronic information are stored in separate areas. Using the information storage medium having the personal identification information formed in the external reading device, a reading step of reading the body identification information of the individual from the outside, and extracting a physical feature from the body identification information read from the outside. A reading step of reading the first digitized information and the personal identification information stored in the information storage medium in the personal authentication device; Extracting the body identification information from a report, and comparing the physical characteristics extracted by the external reading device with the body identification information of the first digitized information extracted from the information storage medium. A first authentication step of authenticating whether or not the user is a user, a display step of displaying the result of the authentication, and the center device, wherein the same information as the first digitized information, A step of acquiring the personal identification information from the personal authentication device using a personal information source that manages the second digitized information in which the body identification information is integrally embedded, based on the acquired personal identification information Retrieving desired second digitized information from the personal information source; extracting body identification information from the retrieved second digitized information; When the authentication by the certificate is successful, by comparing the body identification information extracted from the first digitized information of the information storage medium with the body identification information extracted from the second digitized information, A second authentication step of authenticating the identity of the user. 7. Personal authentication for transmitting and receiving data between a personal authentication device to which digitized information and physical characteristics stored in an information storage medium are input and a center device for managing personal information for authentication. A method, comprising: at least first electronic information in which image information and body identification information are embedded integrally; and personal identification information in which information related to the first electronic information is formed in a separate area. An information reading medium having an external reading step of reading an individual's body identification information from outside, an extraction step of extracting a physical feature from the body identification information read from outside, Reading the first digitized information and the personal identification information stored in an information storage medium; extracting the body identification information from the first digitized information; A first authentication step of authenticating whether or not the user is an individual by comparing the physical characteristics extracted and extracted with the body identification information of the first digitized information extracted from the information storage medium; A display step of displaying the result of the authentication; and the center device, wherein the second electronic information is the same information as the first digitized information, and the image information and the body identification information are integrally embedded. Acquiring personal identification information from the personal authentication device using a personal information source that manages personalized information; and, based on the acquired personal identification information, desired second digitized information from the personal information source. Searching for; identifying body identification information from the searched second digitized information; and, if the authentication by the first authentication is successful in the personal authentication device, the first of the information storage medium. of A second authentication step of authenticating whether or not the user is a person by comparing the body identification information extracted from the child information and the body identification information extracted from the second electronic information. A personal authentication method characterized by the following. 8. A medium in which a program for controlling an authentication process as to whether or not the user is an identity is recorded by a computer, wherein at least the first digitized information in which image information and body identification information are embedded integrally. And an information storage medium having the same information as the body identification information of the first digitized information and the second digitized information in which the same information is formed in a separate area. The identification information is read from the outside, the physical characteristics are extracted from the body identification information read from the outside, and the first digitized information and the second digitized information stored in the information storage medium are read. The body identification information is extracted from the first digitized information and the second digitized information, and the physical feature extracted by reading from the outside and the information record are extracted. To authenticate whether the person by comparing the physical identification information of the first electronic information is extracted from the medium, if the authentication is successful, the first of the information storage medium
Body identification information extracted from the digitized information of
A medium storing a personal authentication control program characterized by authenticating the identity of a user by comparing the identification information with the body identification information extracted from the digitized information, and displaying the result of the authentication. 9. A medium in which a computer is recorded with a program for controlling an authentication process as to whether or not the user is an individual, wherein at least the first digitized information in which image information and body identification information are embedded integrally. And an information storage medium having personal identification information in which information related to the first digitized information is formed in a separate area. The control program causes a computer to read the body identification information of the individual from outside. Extracting a physical feature from the body identification information read from the outside, reading the first digitized information and the personal identification information stored in the information storage medium, the first digitized information And the physical characteristics extracted by reading from the outside and the physical information of the first digitized information extracted from the information storage medium. By comparing the identification information,
Authenticating whether or not the person is the person, displaying the result of the authentication, the second information being the same information as the first digitized information, wherein the image information and the body identification information are embedded integrally. Using a personal information source to be managed, acquiring the personal identification information, and searching the personal information source for desired second digitized information based on the acquired personal identification information. The body identification information is extracted from the second digitized information, and when the authentication is successful, the first
Body identification information extracted from the digitized information of
A medium storing a personal authentication control program characterized by authenticating the identity of a user by comparing the identification information with the body identification information extracted from the digitized information, and displaying the result of the authentication.