JP2002259345A - Method/device for authentication for preventing unauthorized use of physical feature data, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a method/device for authentication for preventing complete faking by rejecting data inputted for authentication though the third party tries to illegally obtain and use data inputted by a normal user for authentication and to provide a program. SOLUTION: The device has a registered data storage part 13 for storing registered data prepared based on the physical features of the user, a registered data collation part 11 which collates authentication data obtained by reading the physical feature of the user in the case of receiving the authentication request of the user with the registered data, a previous data storage part 14 for storing previous authentication data authenticated in the case of the previous authentication request, a previous data collation part 12 for collating the inputted authentication data with the previous authentication data, and a judging means 15 for authenticating the data when the collating result of the part 11 is coincident and the collating result of the part 12 is not coincident to the authentication request of the user.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication method, an authentication device, and a program for preventing unauthorized use of physical characteristic data, and more particularly to a technique for securely authenticating a user by comparing physical characteristic data of a user. And a technology for rejecting authentication even if a third party attempts to illegally obtain and use physical characteristic data.

[0002]

2. Description of the Related Art Conventionally, as a method of authenticating an individual with the person based on physical characteristics, a fingerprint, a voiceprint, an iris pattern, a retinal blood vessel pattern, a signature, and the like of the individual are registered in advance as registration data. It is known that there is a method of authenticating a person by collating and determining data input at the time of authentication with registered data.

[0003] As a collation and judgment method, a method of extracting characteristic points from registered data and comparing the characteristic points with corresponding input data is used. It is known to The reason why it is not a simple method such as perfect match or not is that the human body is not rigid but deforms little by little,
This is because it is slightly different depending on the physical condition of the day. Voices are particularly susceptible to change, and fingers and palms can be susceptible to minor scratches.

Also, the coordinate position and the like when a fingerprint or the like is actually read should change little by little with each input, and the characteristic points are collated in consideration of the deviation of the coordinate position. Thus, it cannot usually happen that the input data completely matches the data input in the past.

[0005]

However, in the conventional method, the authentication is performed only by comparing the registered data with the input data, so that the information which enables a legitimate user to authenticate the input device is left. For example, if a fingerprint leaves a mark on the input device due to sebum, etc., a person trying to impersonate a legitimate authenticator will be incorrectly authenticated by using the mark. There was a point.

In the case where registered data of a legitimate user or previous or past input data is leaked or stolen,
There is a problem in that a third party can impersonate a legitimate user by using this as data for authenticating the user.

[0007] An object of the present invention is to provide an authentication method and an authentication method in which even if a third party illegally obtains and uses data input by an authorized user for authentication, the authentication is rejected and spoofing can be prevented. It is to provide an apparatus and a program.

[0008]

According to a first authentication method of the present invention, when a user authentication request is issued, physical data of the user is read to input authentication data and the authentication data of the user. A first collation procedure for collating registered data created in advance based on physical characteristics, a second collation procedure for collating the input authentication data with the previously input and authenticated authentication data, Authenticating when the first collation result matches and the second collation result does not match, and rejecting the authentication when the first collation result does not match or when the second collation result matches. Having.

According to a second authentication method of the present invention, in the first authentication method, the second collation compares a coordinate position of a corresponding point between the input authentication data and the previously authenticated authentication data. To determine whether they match.

In a third authentication method according to the present invention, when a user authentication request is made, the physical characteristics of the user are read and input based on the authentication data and the physical characteristics of the user. A first collation procedure for collating registered data created in advance, a third collation procedure for collating the input authentication data with previously input and authenticated authentication data, and a first collation result. Authentication when the third collation result does not match, and rejects the authentication when the first collation result does not match or when the third collation result matches.

In a fourth authentication method according to the present invention, when a user authentication request is made, the physical characteristics of the user are read and the authentication data input and the physical characteristics of the user are used. A first collation procedure for collating registered data created in advance, a third collation procedure for collating the input authentication data with a part of authentication data input and authenticated in the past, Authentication is performed when the matching result matches and the third matching result does not match, and the authentication is rejected when the first matching result does not match or when the second matching result matches.

[0012] The fifth authentication method of the present invention is the third or fourth authentication method.
In the authentication method, the third collation is performed by comparing the input authentication data with the coordinate position of a corresponding point of the past authentication data to be collated, and determining at least one of the past authentication data. It is characterized in that when they match, the matching result is determined to be a match.

A sixth authentication method according to the present invention comprises the first to fifth authentication methods.
Wherein the physical feature is a fingerprint, a palm print, an iris pattern, a retinal blood vessel pattern, or a voice print.

A first authentication device of the present invention includes a registration data storage unit for storing registration data created based on a physical characteristic of a user, and a registration data storage unit for storing the user's body when receiving a user authentication request. A registration data collating unit for collating the input data with the authentication data input and reading the registration data, a previous data storage unit for storing the previous authentication data authenticated by the previous authentication request, and the input authentication When the comparison result of the previous data collation unit that compares the data with the previous authentication data matches the collation result of the registered data collation unit with respect to the user authentication request, and the collation result of the previous data collation unit does not match. A determination unit for performing authentication.

In a second authentication apparatus according to the present invention, in the first authentication apparatus, the last data collating unit performs collation by comparing the input authentication data with the coordinate position of a corresponding point of the previous authentication data. It is characterized by doing.

[0016] The third authentication device of the present invention comprises the first or second authentication device.
In the authentication device of (1), when a matching result of the previous data matching unit matches, a warning is sent to a predetermined destination.

According to a fourth aspect of the present invention, there is provided a registration data storage unit for storing registration data created based on a physical characteristic of a user, and a registration data storage unit for storing the user's body when receiving a user authentication request. A registration data collating unit for collating the registered data with the authentication data read by inputting a characteristic feature, a history data storage unit for accumulating and storing past authentication data authenticated by a past authentication request, A history data collating unit that collates the obtained authentication data with all of the past authentication data stored in the history data storage unit, and a collation result of the registered data collating unit matches a user authentication request,
A determination unit that authenticates when the comparison result of the history data comparison unit does not match.

A fifth authentication apparatus according to the present invention includes a registration data storage unit for storing registration data created based on the physical characteristics of the user, and a registration data storage unit for storing the user's body when receiving a user authentication request. A registration data collating unit for collating the registered data with the authentication data read by inputting a characteristic feature, a history data storage unit for accumulating and storing past authentication data authenticated by a past authentication request, A history data collating unit that collates the obtained authentication data with a part of the past authentication data stored in the history data storage unit, and a collation result of the registration data collating unit matches a user authentication request. ,
A determination unit that authenticates when the comparison result of the history data comparison unit does not match.

The sixth authentication device according to the present invention is provided with a fourth or fifth authentication device.
In the authentication device, the history data matching unit compares the input authentication data with the coordinate position of a corresponding point of the past authentication data, and checks if at least one of the past authentication data matches. It is characterized in that the result is determined to be coincident.

A seventh authentication apparatus according to the present invention comprises a fourth, fifth,
Alternatively, in the sixth authentication device, when a matching result of the history data matching unit matches, a warning is notified to a predetermined notification destination.

According to an eighth authentication apparatus of the present invention, the first to seventh authentication apparatuses
Wherein the physical feature is a fingerprint, palm print, iris pattern, retinal blood vessel pattern, or voice print.

According to a first program of the present invention, when a user authentication request is made, the physical characteristics of the user are read and the authentication data input and the physical characteristics of the user are determined in advance. A first collation procedure for collating the created registration data, a second collation procedure for collating the input authentication data with authentication data previously input and authenticated, and a first collation result. The computer in the case where the authentication is not performed and the second collation result is not matched, and the authentication is rejected if the first collation result is not matched or the second collation result is matched. Let it run.

According to a second program of the present invention, in the first program, the second collating step compares the coordinate positions of the corresponding points of the inputted authentication data with the previously authenticated authentication data. Or not to determine whether they match.

According to a third program of the present invention, when a user authentication request is made, the physical characteristics of the user are read and the authentication data input and the physical characteristics of the user are determined in advance. A first collation procedure for collating the created registration data, a third collation procedure for collating the input authentication data with authentication data previously input and authenticated,
If the collation results match and the third collation result does not match, authentication is performed. If the first collation result does not match or if the third collation result matches, authentication is determined to be rejected. And let the computer perform the steps.

According to a fourth program of the present invention, when a user authentication request is issued, the physical characteristics of the user are read and the authentication data input and the physical characteristics of the user are determined in advance. A first collation procedure for collating the created registration data, a third collation procedure for collating the input authentication data with a part of the authentication data input and authenticated in the past, and a first collation A step of performing authentication when the result matches and the third collation result does not match, and rejecting the authentication when the first collation result does not match or when the third collation result matches; On a computer.

According to a fifth program of the present invention, in the third or fourth program, the third collation procedure comprises the steps of: inputting the authentication data and corresponding points of the past authentication data to be collated; Are compared, and if at least one of the past authentication data matches, the matching result is determined to be a match.

[0027]

Next, a first embodiment of the present invention will be described in detail with reference to the drawings. FIG. 1 is a block diagram showing the configuration of the first embodiment of the present invention,
The authentication using a fingerprint will be described as an example. However, the present invention is not limited to the fingerprint, and the present invention can be similarly applied to a case other than the fingerprint. The authentication device 10 can be widely applied to systems other than the system shown in FIG.

In FIG. 1, the authentication device 10 and the fingerprint input device 2
0 and the lock control device 25 are connected via a network 29. When the user enters a specific place, the fingerprint of the user is authenticated by the authentication device 10, and when the authentication is successful, the lock control device 25 is This unlocks the entrance at a specific location. The authentication device 10, the fingerprint input device 20, and the lock control device 25 may be connected by a dedicated communication path.

The fingerprint input device 20 includes a fingerprint reading unit 21
To read the user's fingerprint and send it to the authentication device 10 via the communication unit 22 as authentication data. Fingerprint reading is performed by the user operating a predetermined switch,
At this time, the unlock request is also sent to the authentication device 10. When using a physical feature other than a fingerprint, an input device corresponding thereto may be placed instead of the fingerprint input device 20, and the subsequent collation procedure and the like become the same.

Although not shown, the authentication device 10 is an information processing device having a processor and a storage means. The authentication device 10 is connected to the network 29 to transmit and receive information. Registration data storage unit 13 for storing registration data created by reading a fingerprint of a user
A previous data storage unit 14 for storing the authentication data input when the user entered last time as the previous data, a registration data matching unit 11 for checking the registered data with the input authentication data, A previous data collating unit 12 for collating with the authentication data thus obtained, and a determining unit 15 are included.

The registration data collation unit 11 is a program for executing a procedure for comparing the input authentication data with the registration data registered in the registration data storage unit 13 to determine whether they match. Information for identifying a user is input from the fingerprint input device 20 in addition to the authentication data, and registration data corresponding to the user identification information is stored in the registration data storage unit 13.
And collation. The user identification information may be in the form of key input by the user or in the form of reading a magnetic card or IC card individually possessed by the user. Will be prepared.

Although the form in which the user identification information is not input may be used, in this case, it is necessary to compare with all the registered data registered in the registered data storage unit 13 for collation. In this embodiment, the fingerprint input device 20 does not require any special means for reading the user identification information,
It takes a long time to obtain the matching result. Although the present invention is not limited to any one of them, a mode for inputting user identification information will be described below.

The method of comparison and collation has already been put into practical use, and is not particularly limited. Since the registered data and the input authentication data do not completely match due to the nature of physical characteristics, a method is used in which feature points are extracted and collated based on whether or not they match a predetermined criterion or more. .

Also, the coordinate position of the fingerprint when read by the input device should slightly differ depending on the position where the user places his / her finger. For this reason, it is usually impossible that the coordinate position completely matches the previous time. Previous data collation unit 1
No. 2 performs collation focusing on this point.

The previous data collating unit 12 compares the coordinate position of the characteristic point of the previous data extracted from the previous data storage unit 14 with the coordinate position of the characteristic point of the input authentication data, and determines whether or not they completely match. This is a program that executes the collation procedure. Actually, in the case where the error and the like of the fingerprint reading unit 21 are considered, a case where they match within a certain error range is determined to be a perfect match.

The judging section 15 receives the collation results of the registered data collating section 11 and the previous data collating section 12, and if the result of the registered data collating section 11 is identical and the result of the previous data collating section 12 is inconsistent. This is a program that executes a procedure for determining to authenticate. The determination unit 15 transmits an unlock instruction to the locking control device 25 via the input / output unit 16 when the authentication is successful, but when the result of the data collation unit 12 matches the previous time, it is determined that an unauthorized operation has been performed. Judge and reject authentication,
Instead of transmitting the unlock instruction, a warning notification or an alarm may be issued.

The lock control device 25 is a device for controlling a lock means provided at an entrance to a specific place. The lock control device 25 unlocks according to an instruction from the authentication device 10 and locks automatically after the user enters. .

Next, the operation of the first embodiment of the present invention will be described with reference to the drawings. FIG. 2 is a flowchart showing an authentication execution procedure of the authentication device 10 according to the embodiment of the present invention. Prior to the execution of the procedure of the flowchart of FIG. 2, fingerprint data of each user who is permitted to enter a specific place is created as registration data in association with user identification information, and registered in the registration data storage unit 13. .

First, when the user attempts to enter a specific place, the user inputs user identification information to the fingerprint input device 20 to read the user's fingerprint, and performs an unlock request operation. The fingerprint input device 20 transmits the authentication data obtained by reading the input fingerprint, the user identification information, and the unlock request to the input / output unit 16 of the authentication device 10 via the communication unit 22.

The authentication device 10 receives the authentication data together with the unlock request and the user identification information, notifies the user identification information and the authentication data to the registered data collation unit 11 and the previous data collation unit 12, and determines the unlock request. The notification is sent to the unit 15 (S31).

Based on the received user identification information, the registered data collating unit 11 retrieves the corresponding registered data from the registered data storage unit 13 and collates it with the received authentication data, and notifies the judgment unit 15 of the result (S32). The previous data collating unit 12 retrieves the previous data corresponding to the received user identification information from the previous data storage unit 14 against the authentication data received and notifies the result to the determining unit 15 (S
34). However, at the time of the first authentication, the previous data storage unit 1
Since no previous data corresponding to No. 4 is registered, no collation is performed and the collation result is determined to be inconsistent.

In the collation in step S34, the coordinate positions of the characteristic points of the authentication data are compared with each other for collation. In addition, the brightness and color of the background may be added for the comparison.
In the case of a voice print, the pitch of the voice or the sound behind the voice simultaneously may be considered as the comparison target. Regarding the comparison method, the coordinate position is an example, and another method may be used.

The judging unit 15 receives the collation results from the registered data collating unit 11 and the previous data collating unit 12, judges the collation result with the registered data (S33), and rejects the authentication if they do not match (S38). If the result of the determination in step S33 is a match, the result of the previous comparison by the data comparison unit 12 is determined (S35). If the result of the comparison with the previous data in step S35 matches, the authentication is rejected (S38). If the results do not match, the authentication is confirmed and the contents of the previous data storage unit 14 are updated with the input authentication data ( S36), and transmits an unlock instruction to the lock control device 25 (S37).

When the authentication is confirmed, the lock control device 25 receives the unlock instruction, unlocks the key at the entrance of the specific place under control, and allows the user to enter the specific place. it can. In addition, even if a legitimate user enters, authentication may be rejected due to dirty fingers etc.
The determination unit 15 transmits to the fingerprint input device 20 that the authentication has been rejected, and notifies the fingerprint input device 2 that the authentication has failed.
0 should notify the user. When the user knows that the authentication has been rejected, he removes the dirt from his finger and performs the authentication operation again.
If the fingerprint is read correctly, you can enter.

As described above, in the first embodiment of the present invention, it is attempted to improperly obtain the previous authentication data input by the authorized user and read it to impersonate the authorized user. Also, although the matching with the registered data matches, the authentication can be rejected because it matches the previous data.

For example, in an apparatus for reading a fingerprint, a finger is pressed against a glass surface to read the fingerprint. At this time, the fingerprint may remain on the glass surface due to the sebum of the user on the finger. If a third party attempts to enter immediately afterwards, the third party can operate without touching the finger if the third party knows the user identification information of the user who has just entered or has a card or the like. Although the same authentication data can be obtained, even in this case, the authentication can be rejected by collation with the previous data.

In FIG. 1, the fingerprint input device 20 is shown as an input device. However, in addition to a fingerprint, a voice, palm, iris, retina, or signature is input.
It is also possible to easily realize a system in which the registered data for authentication registered in advance and the previously input data are similarly recorded and collated.

Next, a second embodiment of the present invention will be described. FIG. 3 is a block diagram showing the configuration of the second embodiment. In the authentication device 40, the history data created by associating the input authentication data with the user identification information is stored in the history data storage unit 42, and the input authentication data is collated with the registration data collation unit 11 for matching. The feature is that it is collated with the history data extracted from the history data collation unit 41, which is a different part from the first embodiment.

In the second embodiment, the history data collating unit 4
Components other than 1 and the history data storage unit 42 assigned the same numbers as those in FIG. 1 are the same as those in the first embodiment, so that the description of the configuration is omitted, and the operation of the second embodiment is omitted. Give an explanation. FIG. 4 shows an authentication device 40 according to the second embodiment.
5 is a flowchart showing a procedure for executing the authentication.

Similar to the operation of the first embodiment, prior to execution of the procedure of the flowchart of FIG. 4, fingerprint data of a user who is permitted to enter a specific place is registered in association with user identification information. Data is created and registered in the registration data storage unit 13.

First, when a user tries to enter a specific place, the user inputs user identification information into the fingerprint input device 20 to read the user's fingerprint, and performs an unlock request operation. The fingerprint input device 20 transmits the authentication data obtained by reading the input fingerprint, the user identification information, and the unlock request to the input / output unit 16 of the authentication device 10 via the communication unit 22.

The authentication device 10 receives the authentication data together with the unlock request and the user identification information, notifies the user identification information and the authentication data to the registration data collating unit 11 and the history data collating unit 41, and determines the unlock request. The notification is made to the unit 15 (S51).

The registered data collating unit 11 retrieves the corresponding registered data from the registered data storage unit 13 based on the received user identification information, collates the received registered data with the received authentication data, and notifies the judgment unit 15 of the result (S52). The history data matching unit 41 fetches all the corresponding history data from the history data storage unit 42 based on the received user identification information and collates them with the received authentication data, and notifies the determination unit 15 of the result (S54). However, since the corresponding history data is not registered in the history data storage unit 42 at the time of the first authentication, the collation is not performed and the collation result is not matched.

In the collation in step S54, collation is performed by comparing the coordinate positions of the characteristic points of the authentication data. However, other information may be used as in the first embodiment. The collation in step S54 is performed in the history data storage unit 42.
Is compared with the input authentication data for all of the history data recorded in the history data. However, in order to shorten the collation time, a part of the history data recorded in the history data storage unit 42 is extracted and collated. Good. The matching result of the history data matching unit 41 indicates that at least one piece of history data matching the authentication data is present.
If there is more than one, it is notified to the determination unit 15 as a match.

The judging unit 15 receives the collation result from the registered data collating unit 11 and the history data collating unit 41, judges the collation result with the registered data (S53), and rejects the authentication if they do not match (S58). If the determination results in step S53 match, the matching result of the history data matching unit 41 is determined (S55). If the result of the comparison with the history data in step S55 is a match, the authentication is rejected (S58). If not, the authentication is confirmed and the input authentication data is registered in the history data storage unit 42 (S56). Then, an unlock instruction is transmitted to the lock control device 25 (S57).

When the authentication is confirmed, the lock control device 25 receives the unlock instruction, unlocks the key at the entrance of the specific place under control, and allows the user to enter the specific place. it can. Further, similarly to the first embodiment, when the authentication is rejected, the user is notified of the rejection of the authentication via the fingerprint input device 20 to urge the authorized user to perform the operation again.

As described above, in the second embodiment of the present invention, similarly to the first embodiment, a third party illegally obtains authentication data input by a legitimate user, and gives the third party authentication data. Even if an attempt is made to impersonate, the history data collating unit 41 can judge this as improper and reject the authentication.

Step S3 of the first or second embodiment
In step 5 or step S55, if the previous or past authentication data and the current authentication data match, there is a high possibility that a third party has been tampered with. By notifying a predetermined system administrator or security organization of a warning, it is possible to help prevent and detect crime.

In this case, although not shown, it is sufficient to provide a procedure for the determination unit 15 to report a warning message to the manager or the security agency via the network 29 and a means for storing the report destination. The report destination may be a monitoring device installed in a place where the manager is resident or a device installed in a contracted security agency. If the manager is near the authentication device 10 or the authentication device 40, the authentication device A message may be displayed on the display device of the authentication device 10 or the authentication device 40, or an alarm device may be incorporated to emit an alarm sound.

The fingerprint input device 20 may be provided with an alarm means to emit an alarm sound to repel a third party who has attempted fraud, or to attach a camera near the entrance to the suspicious third person.
The person may be photographed and recorded. In addition, in the case where there is such a fraud in the authentication data sent by e-commerce or the like, it is also possible to record information such as the address of the transmission source in the storage means in the authentication device 10 or 40 to prevent crime.
Useful for investigations.

In FIGS. 1 and 3, the lock control system has been described as an example of the use of the authentication device 10 or 40. In addition, for example, the lock control system is connected to a public line network or the Internet via the network 29. It is clear that fingerprint data can be received from a remote device and authenticated to confirm the identity of the user and be incorporated into a system that more securely executes e-commerce and online shopping. It can be easily understood that the invention can be applied.

In particular, when performing authentication by connecting to the Internet or the like, since the input authentication data flows on an open communication channel, there are many chances that a third party can illegally obtain the authentication data. Even if a third party obtains this illegally and tries to execute a commercial transaction, etc. by impersonating the person, the present invention can detect spoofing by collating with the previous data or history data, enabling more reliable authentication. I do.

[0063]

As described above, according to the present invention, even if a third party illegally obtains and uses authentication data input by a legitimate user for authentication, the authentication data is authenticated last time or in the past. By comparing with authentication data, there is a remarkable effect that authentication can be rejected and spoofing can be prevented.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a first exemplary embodiment of the present invention.

FIG. 2 is a flowchart showing a procedure according to the first embodiment of the present invention.

FIG. 3 is a block diagram showing a configuration of a second exemplary embodiment of the present invention.

FIG. 4 is a flowchart showing a procedure according to a second embodiment of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Authentication apparatus 11 Registration data collation part 12 Previous data collation part 13 Registration data storage part 14 Previous data storage part 15 Judgment part 16 Input / output part 20 Fingerprint input device 21 Fingerprint reading part 22 Communication part 25 Lock control device 29 Network 40 Authentication device 41 history data collating unit 42 history data storage unit

Claims (19)

[Claims] 1. An authentication method for authenticating a user himself / herself based on authentication data input by reading a physical characteristic of the user, wherein when the authentication request of the user is made, the input authentication data and A first collation for collating registered data created in advance based on the physical characteristics of the user, and a second collation for collating the input authentication data with authentication data previously input and authenticated. Is performed, authentication is performed when the first collation result matches and the second collation result does not match, and authentication is performed when the first collation result does not match or when the second collation result matches. The authentication method to reject. 2. The method according to claim 1, wherein in the second collation, the input authentication data is compared with a coordinate position of a corresponding point of the previously authenticated authentication data to determine whether or not they match. Item 1. The authentication method according to Item 1. 3. An authentication method for authenticating a user himself / herself based on authentication data read by inputting physical characteristics of the user, wherein when the user requests authentication, the input authentication data and A first collation for collating registered data created in advance based on the physical characteristics of the user and a third collation for collating the input authentication data with previously input and authenticated authentication data are performed. Execute and authenticate if the first collation result matches and the third collation result does not match, reject authentication if the first collation result does not match or if the third collation result matches Authentication method to use. 4. An authentication method for authenticating a user himself / herself based on authentication data read by reading physical characteristics of the user, wherein when the user authentication request is issued, the input authentication data and A first check for checking registered data created in advance based on the physical characteristics of the user, and a second check for checking the input authentication data with a part of authentication data input and authenticated in the past. Perform the collation of 3 and the first
An authentication method in which authentication is performed when the collation results of the first and second collations do not match, and when the first collation result does not match or the second collation result matches, authentication is rejected. 5. The third verification is performed by comparing the input authentication data with the coordinate position of a corresponding point of the past authentication data to be verified, and determining at least one of the past authentication data. 5. The authentication method according to claim 3, wherein the matching result is determined to be a match when the two match. 6. The authentication method according to claim 1, wherein the physical feature is a fingerprint, a palm print, an iris pattern, a retinal blood vessel pattern, or a voice print. 7. A registration data storage unit for storing registration data created based on a physical characteristic of a user, and reading and inputting the physical characteristics of the user when a user authentication request is received. A registration data collating unit that collates authentication data with the registration data, a previous data storage unit that stores previous authentication data authenticated by a previous authentication request, and stores the input authentication data and the previous authentication data. And a previous data collating unit for collating, wherein authentication is performed when the collation result of the registered data collating unit matches a user authentication request and the collation result of the previous data collating unit does not match. Authentication device. 8. The authentication apparatus according to claim 7, wherein the previous data collating unit performs collation by comparing the coordinate position of a point corresponding to the input authentication data with the previous authentication data. 9. The authentication apparatus according to claim 7, wherein a warning is reported to a predetermined report destination when the result of the comparison by the previous data collating unit matches. 10. A registration data storage unit for storing registration data created based on a physical characteristic of a user, and reading and inputting the physical characteristics of the user when a user authentication request is received. A registration data collation unit for collating authentication data with the registration data, a history data storage unit for accumulating and storing past authentication data authenticated by a past authentication request, the input authentication data and the history data A history data collating unit for collating all past authentication data stored in the storage unit, wherein a collation result of the registered data collating unit matches a user authentication request, and An authentication device, wherein authentication is performed when the collation results of the sections do not match. 11. A registration data storage unit for storing registration data created based on a physical characteristic of a user, and when the authentication request of the user is received, the physical characteristic of the user is read and input. A registration data collation unit for collating authentication data with the registration data, a history data storage unit for accumulating and storing past authentication data authenticated by a past authentication request, the input authentication data and the history data A history data matching unit that matches a part of past authentication data stored in a storage unit, wherein a matching result of the registered data matching unit matches a user authentication request, and the history data An authentication device for performing authentication when a collation result of a collation unit does not match. 12. The history data matching unit compares the input authentication data with the coordinate position of a corresponding point of the past authentication data, and checks if at least one of the past authentication data matches. The authentication device according to claim 10, wherein the result is determined to be a match. 13. The authentication apparatus according to claim 10, wherein a warning is reported to a predetermined report destination when the collation results of the history data collating unit match. 14. The authentication apparatus according to claim 7, wherein the physical feature is a fingerprint, a palm print, an iris pattern, a retinal blood vessel pattern, or a voice print. 15. When a user authentication request is issued, authentication data input by reading the physical characteristics of the user and registration data created in advance based on the physical characteristics of the user are stored. A first collation procedure for collating, a second collation procedure for collating the input authentication data with the previously input and authenticated authentication data, and a first collation result matching and a second collation result. Authenticates when the two do not match, and determines that the authentication is rejected when the first collation result does not match or when the second collation result matches. 16. The second collation procedure is characterized in that the input authentication data is compared with the coordinate position of a corresponding point of the previously authenticated authentication data to determine whether or not they match. The program according to claim 15. 17. When a user authentication request is issued, authentication data input by reading the physical characteristics of the user and registered data created in advance based on the physical characteristics of the user are compared. A first collation procedure for collating, a third collation procedure for collating the input authentication data with previously input and authenticated authentication data, wherein the first collation result matches and the third collation result is If the first and second collations do not match, and if the third and third collations match, the computer determines to reject the authentication. 18. When there is a user authentication request, the authentication data input by reading the physical characteristics of the user and the registration data created in advance based on the physical characteristics of the user. A first collation procedure for collating, a third collation procedure for collating the input authentication data with a part of previously input and authenticated authentication data, Authenticates if the collation results do not match,
If the first collation result does not match or if the third collation result matches, a procedure for determining to reject the authentication is executed by the computer. 19. The third verification procedure includes comparing at least one of the past authentication data by comparing the input authentication data with a coordinate position of a corresponding point of the past authentication data to be verified. 19. The computer-readable storage medium according to claim 17, wherein a match is determined as a match when the IDs match.