JP2002140306A - Method and system for providing organismic information authentication log management service - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a service for informing an auth person to be authenticated of authentication information on the premise that the authentication rate of user authentication using organismic information is not 100%. SOLUTION: This system is equipped with an authenticating device 1 which performs authentication by using organismic information and outputs authentication log information composed of the result of the authentication using the organismic information and the organismic information used for the authentication, an authentication log managing device 3 which retrieves user information by using a user ID from the authentication log information obtained through a network 2 and informs the corresponding user of the authentication log information, and an information terminal 4 which receives the authentication log information from the authentication log managing device through the network 2, and provides the service for surely information the person to be authenticated of the authentication log information.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to biometric identification using a terminal, and more specifically, to a method of providing a biometric information authentication log management service for notifying a user of a result of performing biometric identification and a system thereof. Things.

[0002]

2. Description of the Related Art At present, means for user authentication are classified into two types: an access token type and a storage data type. The access token type includes smart cards, credit cards, keys, and the like. The storage data type includes passwords, user names,
There is a personal identification number (PIN) and the like. The problem with access tokens is that they are easily lost or stolen. On the other hand, the problem with the storage data type is that it is easy to forget or set easy data for fear of forgetting. The use of a combination of the two increases safety,
Similar problems remain. The biometrics technology is a technology that uses the characteristics of the body (biological information) as a means for personal authentication, and can be an effective means for solving the above-mentioned problems of loss and memory and for identifying individuals. Fingerprints, handprints, faces, irises, retinas, voiceprints, and the like are known as specific biological information.

[0003] Numerous methods have been proposed as conventional authentication methods using biological information, such as Japanese Patent Application Laid-Open Nos. 8-329010 and 10-312459. FIG. 7 shows a typical configuration of the prior art. If the biometric information registered by the user matches the input biometric information, the authentication is successful, otherwise the authentication is rejected. That is, the conventional devices and methods are configured on the assumption that the authentication accuracy of the authentication device using biometric information is 100%.

[0004]

However, user authentication using biometric information requires an error rate (FRR) for incorrectly discriminating oneself as another person and an error rate (FAR) for incorrectly discriminating another person as oneself. ) Is not zero. There are two major sources of error. One is that the biological information itself is constantly changing. Second, the biometric information to be taken into the authentication unit changes depending on the environment (for example, temperature, lighting, noise, etc.) in which the authentication is performed. Therefore, unlike the conventional access token type or stored data type authentication means, it is necessary to cope with errors when performing authentication using biometric information.

[0005] The present invention performs personal authentication from biological information,
The purpose is to accumulate and manage authentication log information consisting of the authentication result and biometric information, etc., and to provide a service that notifies the authenticated user of the authentication log information, thereby notifying the user's record as authentication log information. And

[0006]

In order to solve this problem, the present invention receives biometric information input for performing authentication using biometric information and authentication results as authentication log information,
The authentication log information is notified to a user who is to be authenticated.

[0007] Since the user himself / herself can know the biometric information used for authentication and the authentication result by means other than the authentication means, receiving the biometric information authentication log plays a role of another authentication. In addition, since the authentication log is stored and managed, even if the user fails to receive the authentication log, the authentication log can be sent to the user as many times as possible until the user succeeds, and the user can reliably receive the authentication log. .
By receiving the authentication log, the user can confirm the authentication result, and can take measures according to the result.
For example, if the authentication is successful even though another person has performed authentication, a correction can be offered to a company that provides a biometric authentication service. At this time, it is assured that the user is the person who owns the authentication log via the authentication log management service. Thus, by using the means of the present invention, it is possible to correct an incorrect authentication result.

[0008]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The invention according to claim 1 of the present invention is characterized in that biometric information input from one or more authentication devices for performing personal authentication using biometric information for performing authentication using biometric information is provided. Receiving the authentication result as authentication log information via a network, storing and managing the authentication log information, and notifying the user to be authenticated of the authentication log information from the user ID of the authentication log information. This has the effect that the user can receive a biometric information authentication log management service that can receive and confirm the authentication log information using means different from the authentication device.

According to a second aspect of the present invention, in the method for providing a biometric information authentication log management service according to the first aspect, the authentication log information includes personal information, a user ID, an authentication ID, a time at which the authentication was performed, and authentication. Location, input biometric information used for authentication, registered biometric information, and at least one of the authentication results, using the authentication log information notified by means other than the authentication device Has the effect that it can be confirmed.

According to a third aspect of the present invention, in the biometric information authentication log management service providing method according to the first or second aspect, the authentication log information is obtained from one of a mobile phone and a mobile terminal. It has the effect of being able to receive services in various places.

According to a fourth aspect of the present invention, in the method of providing a biometric information authentication log management service according to the first aspect, the biometric information is a face, and it is determined whether the biometric information is personal biometric information. And a third party can easily determine.

The invention according to claim 5 is characterized in that when the authentication result is unsuccessful, the user is notified in real time, and even if the user fails in the authentication using the biometric information, the authentication succeeds immediately. This has the effect that, when another person has performed authentication, it is possible to immediately know that the person has been misused.

According to a sixth aspect of the present invention, in the biometric information authentication log management service providing method according to the first aspect, a service for counting the number of failed authentication results is provided. This has the effect of notifying the user of the update time of the.

According to a seventh aspect of the present invention, in the biometric information authentication log management service providing method according to any one of the first to sixth aspects, the authentication log is received when the authentication log is transmitted to the user. It is characterized in that it is transmitted to the user who is to be authenticated using a communication means different from the means, and has an effect that the security of the communication means of the authentication log is improved.

[0015] The invention described in claim 8 is the invention according to claims 1 to 7.
In the biometric information authentication log management method according to any one of the above, a fee is charged every time a user to be authenticated is notified or a fixed fee is charged. Has the effect of being able to receive the notified service.

According to a ninth aspect of the present invention, an authentication result obtained from at least one authentication device that performs authentication using biometric information and authentication log information including biometric information used for authentication are transmitted via a network. An authentication log management / accumulation unit for managing the obtained authentication log information, and a user who manages personal information of the person to be authenticated from the user ID of the authentication log information and is to be authenticated with the authentication log information And a personal information management unit for notifying the user of the personal information. The personal information management unit stores the authentication result using the biometric information, and has the effect that the person to be authenticated can check the authentication result.

According to a tenth aspect of the present invention, there is provided an authentication apparatus which performs authentication using biometric information, and outputs an authentication result obtained by performing authentication using biometric information and authentication log information including biometric information used for authentication. An authentication log management device that searches for user information using a user ID from the authentication log information obtained via a network, and notifies the corresponding user of the authentication log information; and authentication log information from the authentication log management device. Is characterized by having an information terminal that receives the information via a network, and has an effect that the person to be authenticated confirms the authentication result using the biometric information.

According to an eleventh aspect of the present invention, in the biometric information authentication log management system according to the tenth aspect, the authentication log information includes personal information, a user ID, an authentication ID, a time when the authentication was performed, and a place where the authentication was performed. , Comprising at least one of the input biometric information used for authentication, the registered biometric information, and the authentication result. The authentication is performed using authentication log information notified by means different from the authentication device. Has the effect of being able to.

According to a twelfth aspect of the present invention, in the biometric information authentication log management system according to the tenth aspect, the information terminal includes a portable terminal, a facsimile, a personal computer,
It is characterized by being one of a set-top box, a mobile phone, and a fixed phone, and has an effect that the authentication log can be confirmed wherever the person to be authenticated is.

According to a thirteenth aspect of the present invention, in the biometric information authentication log management system according to the tenth aspect, the authentication device is one of a mobile terminal and a mobile phone. It has the effect that authentication can be performed wherever the person to be authenticated is.

According to a fourteenth aspect of the present invention, in the biometric information authentication log management system according to the tenth aspect, when the authentication result is rejected, the authentication device outputs the authentication result to the authentication log management device. The authentication method is switched, and if the authentication result is correct, the record of the unauthorized user can be left as an authentication log, and if the authentication result is incorrect, the user is authenticated by another authentication method. Has the effect of being able to.

According to a fifteenth aspect of the present invention, in the biometric information authentication log management system according to the tenth aspect, the notification of the authentication log information is sent to an information terminal installed at the address of the person to be authenticated. This has the effect that the user can reliably receive the authentication log.

According to a sixteenth aspect of the present invention, in the biometric information authentication log management system according to any one of the tenth to fifteenth aspects, each time a user to be authenticated is notified or a fixed amount is charged. This has the effect that anyone can receive a service for notifying the authentication log information by paying a fee.

Hereinafter, an embodiment of the present invention will be described with reference to FIG.
This will be described with reference to FIG.

(Embodiment 1) First, the configuration of Embodiment 1 of the present invention will be described.

FIG. 1 shows the configuration of a first embodiment of the biometric information authentication log management system of the present invention.

In FIG. 1, an authentication device 1, a network 2, an authentication log management device 3, and an information terminal 4 are provided.
The authentication device 1 has a function of performing authentication using biometric information,
The biometric information may be any of a fingerprint, a handprint, a face, an iris, a retina, a voiceprint, and the like. In this embodiment, a method using face image recognition will be described as an example.

The authentication log management device 3 has a function of receiving and accumulating an authentication log composed of the result of authentication performed by the authentication device 1 and biometric information input at the time of authentication, and transmitting the authentication log to the person to be authenticated. It comprises a personal information management unit 11 and an authentication log accumulation / management unit 12.

The information terminal 4 is a terminal that can be reliably used by the person to be authenticated, and has a function of receiving the authentication log transmitted from the authentication log management device 3 and transmitting a message to the authentication log management device 3. Have. Specifically, the authentication device 1 corresponds to a personal computer, a mobile terminal, a mobile phone, a set-top box, an intercom, or the like.

The information terminal 4 specifically corresponds to a facsimile, a personal computer, a set-top box, a portable terminal, a portable telephone, or the like. The personal information management unit 11 has a function of managing, as personal information, a mobile phone number, a telephone number, a fax number, an address, a mail address, a user name, and a user ID. It has a function to accumulate and manage data.

FIG. 2 shows an example of the authentication log, and FIG. 3 shows an example of the authentication ID. The authentication log includes a user ID, an authentication ID, a time at which authentication was performed, a location at which authentication was performed, input biometric information used for authentication, registered biometric information, and an authentication result. The authentication ID is the serial number given in the order of authentication, the date and time of authentication,
It is composed of a terminal ID for specifying the authentication device.

Next, the operation of the first embodiment of the present invention will be described with reference to FIGS. FIG. 4 shows a processing flow of the authentication log management service, and FIG. 5 shows a message sequence between the above components.

The authentication device 1 performs authentication using a face image as biometric information (step 1), and transmits an authentication log (see FIG. 2) as an authentication result to the authentication log management device 3 as an authentication log notification message (step 1). step2). Upon receiving the authentication log notification message, the authentication log management device 3 stores the authentication log.
(step 3), the personal information management unit 11 searches for user information using the user ID of the authentication log, and transmits an authentication log notification message to the corresponding user (step 4). Means for transmitting the authentication log notification message include facsimile, e-mail, and telephone, and one of them is selected. In the case of the authentication device 1 with GPS (for example, a mobile phone): the authentication location of the user can be left as a log.

If an error occurs during transmission, the authentication log accumulation / management unit 12 reads out the authentication log (step
5), perform retransmission. If an error has occurred a certain number of times, switching to another transmission means is performed.

The information terminal 4 receives the authentication log notification message, and the person to be authenticated checks the authentication log (step
6). For example, if another person has succeeded in the authentication, the authentication result is changed by, for example, applying to a company that provides an authentication service. At this time, it is assured that the person who has requested the change of the authentication result is the person who owns the authentication log.

The authentication log management device 3 charges when transmission to each information terminal 4 is completed. Alternatively, charging may be performed once when the authentication log management device 3 receives the authentication log information from the authentication device 1 and may be further charged when the transmission to the information terminal 4 is completed. Alternatively, the usage fee for a certain period may be a fixed amount.

The authentication log accumulation / management unit 12 performs a service of counting the number of failures in the authentication result and notifying the person to be authenticated when the number of failures exceeds a certain number.

Hereinafter, the operation of the above service will be described. Upon receiving and storing the authentication log, the authentication log storage / management unit 12 checks the authentication result and records the number of failures / successes. At this time, if the total number of failures exceeds a preset number, an update request message is transmitted to the information terminal 4.

The authentication log management device 3 provides a service for switching the type of the information terminal 4 depending on the situation. Hereinafter, a specific operation will be described. The personal information management unit 11 manages a plurality of terminals as the information terminals 4, and the terminal to be authenticated determines in advance which terminal to use preferentially. Normally, the personal information management unit 11 selects the information terminal 4 having the highest priority.

However, if the notification to the information terminal 4 fails several times, the next information terminal 4 is selected according to the priority.
When the notification to all the information terminals 4 to be finally selected has failed, the notification is performed using the existing communication means such as mailing.
Furthermore, when the authentication result is rejected, the authentication device 1 outputs the authentication result to the authentication log management device 3, and switches the authentication method to another method such as inputting a password.

Embodiment 2 The configuration of the authentication log management system according to Embodiment 2 of the present invention will be described with reference to FIG. The second embodiment is different from the first embodiment in that the person to be authenticated cannot use the information terminal. That is, the authentication log management device does not use electronic means as a means for transmitting the authentication log to the user.

Next, the operation of the second embodiment of the present invention will be described.

The authentication device 1 performs authentication using biometric information, and transmits an authentication log to the authentication log management device 3 using an authentication log notification message. Upon receiving the authentication log notification message, the authentication log management device 3 accumulates the authentication log,
The personal information management unit 11 searches for user information using the user ID in the authentication log, and transmits the authentication log to the person to be authenticated.

However, since the person to be authenticated cannot use the information terminal, the authentication log management device 3 records the authentication log on a recording medium such as paper and sends it to the user's address.
Upon receiving the medium on which the authentication log is recorded, the person to be authenticated checks the authentication log.

Also, the authentication log management device 3 charges when transmission to the address of the user is completed. Alternatively, the charge may be made once when the authentication log management device 3 receives the authentication log information from the authentication device 1, and further charged when the delivery to the user's address is completed. Alternatively, the usage fee for a certain period may be a fixed amount.

[0046]

As described above, according to the present invention, since the user himself / herself can know the biometric information used for authentication and the authentication result by means other than the authentication means, the user can receive the biometric information authentication log. Has the advantageous effect of serving another authentication role. That is, by receiving the authentication log information, the user can check the authentication result, and can take a measure according to the result. For example, if the authentication is successful even though another person has performed authentication, a correction can be offered to a company that provides a biometric authentication service. At this time, it is assured that the user is the person who owns the authentication log via the authentication log management service.

The authentication log accumulation / management unit counts the number of failures in the authentication result, and notifies the person to be authenticated when the number of failures exceeds a certain number. You can know.

Also, the authentication log management device provides a service for switching the type of information terminal depending on the situation, so that the communication means changes according to the situation, so that the authentication log can be delivered to the person more reliably.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of an authentication log management system according to a first embodiment of the present invention;

FIG. 2 is a diagram showing an example of an authentication log.

FIG. 3 is a diagram showing an example of an authentication ID.

FIG. 4 is a flowchart of an authentication log management service processing.

FIG. 5 is an authentication log management service sequence diagram.

FIG. 6 is a configuration diagram of an authentication log management system according to a second embodiment of the present invention.

FIG. 7 is a configuration diagram of a conventional authentication method using biometric information.

[Explanation of symbols]

 Reference Signs List 1 authentication device 2 network 3 authentication log management device 4 information terminal 6 person to be authenticated 11 personal information management unit 12 authentication log accumulation / management unit

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Shin Yamada 3-10-1, Higashi-Mita, Tama-ku, Kawasaki City, Kanagawa Prefecture Inside Matsushita Giken Co., Ltd. (72) Inventor Hiroshi Koyama 3-chome, Higashi-Mita, Tama-ku, Kawasaki City, Kanagawa Prefecture No. 10 No. 1 Matsushita Giken Co., Ltd. F term (reference) 5B085 AC14 AE23 AE25 5K067 AA30 AA32 AA35 BB04 DD17 HH22 HH23

Claims (16)

[Claims] 1. An authentication device which receives biometric information input for performing authentication using biometric information and authentication results from one or more authentication devices that perform personal authentication using biometric information as authentication log information via a network. Storing and managing authentication log information and notifying a user who is to be authenticated of the authentication log information from the user ID of the authentication log information, to provide a biometric information authentication log management service providing method. 2. The authentication log information includes personal information, a user ID,
2. The authentication system according to claim 1, comprising at least one of an authentication ID, an authentication time, an authentication location, input biometric information used for authentication, registered biometric information, and an authentication result.
The method for providing a biometric information authentication log management service described in the above. 3. The biometric information authentication log management service providing method according to claim 1, wherein the authentication log information is obtained from one of a mobile phone and a mobile terminal. 4. The method according to claim 1, wherein the biometric information is a face. 5. The biometric information authentication log management service providing method according to claim 1, wherein when the authentication result fails, the user is notified in real time. 6. The biometric information authentication log management service according to claim 1, wherein the number of failures in the authentication result is counted, and when the count exceeds an arbitrary count, the user to be authenticated is notified. Method. 7. When transmitting the authentication log to a user,
The biometric information authentication log management service according to any one of claims 1 to 6, wherein the user to be authenticated is notified using a communication unit different from the unit that has received the authentication log. Method. 8. The biometric information authentication log management method according to claim 1, wherein a fee is charged each time the user to be authenticated is notified or a fixed amount is charged. 9. The authentication log information obtained from one or more authentication devices that perform authentication using biometric information and authentication log information consisting of biometric information used for authentication and obtained via a network. Authentication log management and storage unit for managing the personal information to be authenticated from the user ID of the authentication log information, and personal information management for notifying the user to be authenticated of the authentication log information And a biometric information authentication log management device. 10. An authentication device which performs authentication using biometric information, and outputs an authentication result obtained by performing authentication using biometric information and authentication log information including biometric information used for authentication, and an authentication device obtained via a network. User from the authentication log information
An authentication log management device that searches for user information using an ID and notifies the corresponding user of authentication log information, and an information terminal that receives authentication log information from the authentication log management device via a network. Characteristic biometric authentication log management system. 11. The authentication log information includes personal information, user I
11. The method according to claim 10, comprising at least one of: D, an authentication ID, a time at which authentication was performed, a place at which authentication was performed, input biometric information used for authentication, registered biometric information, and an authentication result. Biometric authentication log management system. 12. The biometric information authentication log management system according to claim 10, wherein the information terminal is one of a mobile terminal, a facsimile, a personal computer, a set-top box, a mobile phone, and a fixed phone. 13. The biometric information authentication log management system according to claim 10, wherein the authentication device is one of a mobile terminal and a mobile phone. 14. The biometric information authentication log according to claim 10, wherein when the authentication result is rejected, the authentication device outputs the authentication result to an authentication log management device and switches an authentication method. Management system. 15. The biometric information authentication log management system according to claim 10, wherein the notification of the authentication log information is sent to an information terminal installed at the address of the person to be authenticated. 16. The method according to claim 1, wherein a fixed amount is charged each time the user to be authenticated is notified.
16. The biometric information authentication log management system according to any one of 0 to 15.