JP2002297550A - Personal identification support system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To obtain a personal identification support system which is capable of providing advice so as to perform personal identification based on input of biological information by an appropriate method. SOLUTION: In a user utilization terminal 20, when the personal identification based on input of the biological information using a personal identification device 21 is not successful, a personal identification support device 10 replies an appropriate advice on the basis of input biological information when having failed in the personal identification. The service-user using the user utilization terminal 20 performs the personal identification again according to the advice.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal identification support system for giving appropriate advice so that personal identification can be performed more reliably when using a service for performing personal identification based on biological information.

[0002]

2. Description of the Related Art In recent years, it has become more familiar to receive electronic commerce and various other services from personal computers and portable terminals via networks such as the Internet. Here, in particular, in order to receive services related to payment of money such as online shopping and services related to privacy, it is often necessary to register as a member, and input of a user name and password is often required at the time of registration.

[0003] Thus, the service providing side requests the input of the user name and the password every time the user accesses, and confirms that he / she is the person himself / herself. Here, since the user name is normally displayed on the screen without being kept secret, the password alone is ultimately used as information that only the user can know. However,
This password is composed of at most a few digits of alphanumeric symbols, and the risk of being stolen by a third party is extremely high.

[0004] Therefore, biometrics authentication has attracted attention as a means for more secure identity verification. Biometrics authentication is a method of identifying a user based on biometric information unique to an individual, such as a fingerprint, iris, palm shape, voice, and handwriting. Therefore, when inputting biometric information, it is impossible for anyone other than the person to execute it.
Authentication with higher security is realized.

[0005] However, such biometrics authentication is not without its problems at all. If the person is the person, the person is not recognized as the person (denial rejected), or if the person is another person, the person becomes the person. Not a few cases have been accepted (accepted by others, spoofing). In addition, these identification mistakes are in a trade-off relationship with each other. If the acceptance of others is minimized for the purpose of introducing user authentication using biometric information, the probability of denial of the individual will increase, and security will increase. However, a situation arises in which the person is difficult to be recognized as the person.

[0006] Here, as a situation in which a person is rejected, for example, in the case of fingerprint authentication, it is often the case that the finger placement or the finger condition is poor. Here, the poor placement of the finger means that fingerprints must be registered in advance in fingerprint authentication, and the position and angle of the finger at the time of registration and when actually trying to use it are significantly different. Say. The bad state of the finger means that the fingerprint is thin, the finger is dry, the finger is wet, the finger is injured, and the like.

However, since a general user does not know such a characteristic at the time of authentication, how can the user be easily identified as a person? Why didn't you identify yourself? I didn't understand it, and repeated the same mistakes (rejection of identity) many times. In the end, I was often dissatisfied with biometrics authentication and stopped using it.

Conventionally, when using a personal identification device that enables biometrics authentication, if the problem that the user authentication does not work as described above occurs, the person in charge of the personal identification device maker, particularly, A person who is familiar with the method of using the personal identification device, the outline of the identification method, and the causes of the failures that are likely to occur has come to advise the user directly.

[0009]

However, according to the method of receiving advice from the person in charge of the personal identification device manufacturer, it is difficult for the user to immediately obtain advice to deal with the problem. There is a problem that the user or the maker must bear the labor cost and the business trip cost, and the cost is too high.

[0010] The present invention has been made to solve the above problems, and when a user is not recognized as an individual by personal identification, "Why failed?""What is the possibility of success?" And the like, to obtain an individual identification support system that can give appropriate advice via a network without the intervention of a person in charge.

If the personal identification is not successful, the user is confirmed by another means and the user is allowed to use the desired service. Further, the user is confirmed by another means. It is an object of the present invention to obtain a personal identification support system that acquires and manages biometric information read when a failure has occurred, in order to prevent trouble later when performing the operation.

[0012]

Means for Solving the Problems The above-mentioned problems are solved,
In order to achieve the object, in the personal identification support system according to the present invention, in the personal identification support system including a personal identification support device and a terminal device connected via a communication line, the personal identification support device Receiving the biometric information from the terminal device, analyzing the situation at the time of input of the biometric information from the received biometric information, from the advice information stored in advance, extract and return advice information corresponding to the analysis result, The terminal device includes personal identification means for performing personal identification based on the input biometric information, and transmits the biometric information input at the time of the identification to the personal identification support device when the identification by the personal identification means is not successful. Then, when the advice information is received, the advice information is presented.

According to the present invention, even when the personal identification by inputting the biometric information is not successful in the terminal device, the personal identification support device can perform the operation based on the biometric information input when the personal identification has failed. Since an appropriate advice is returned, the service user using the terminal device can perform personal identification again based on the advice.

In the personal identification support system according to the next invention, the personal identification support system comprises a personal identification support device, a terminal device, and a service providing server connected via a communication line. The support device receives the biological information from the terminal device, analyzes the state at the time of inputting the biological information from the received biological information, and extracts advice information corresponding to the analysis result from the advice information stored in advance. Reply, when receiving a personal identification request notification from the service providing server, transmitting a personal information input request notification requesting input of predetermined personal information to the terminal device, when receiving personal information from the terminal device Then, the received personal information is compared with the pre-registered personal information, and if the two match, the service usage server is notified to the service providing server. The terminal device transmits a permission notification, and the terminal device includes personal identification means for performing personal identification based on the input biometric information, and performs identification by the personal identification means when receiving a personal identification request notification from the service providing server. The personal identification result notification is transmitted to the service providing server when the identification is successful, and the biometric information input at the time of the identification is transmitted to the personal identification support device when the identification is not successful, and the advice information is transmitted. When the personal information input request notification is received, the personal information notification request is transmitted to the service providing server in response to a user operation, and the personal information input request notification is received when the personal information input request notification is received. Inputting information, transmitting the input personal information to the personal identification support device, the service providing server And providing various services, transmitting the personal identification request notification to the terminal device when providing the service to the terminal device, providing the service when receiving the personal identification result notification, providing the service, The personal identification request notification is transmitted to the personal identification support device when the personal identification notification is received, and a service is provided to the terminal device when the service use permission notification is received.

[0015] According to the present invention, other personal information that can identify the service user even when the personal identification is still not successful despite following the advice given from the personal identification support device. By inputting, the identity of the user can be proved to the service providing server.

[0016] In the personal identification support system according to the next invention, in the above invention, the personal identification support device, when receiving the personal identification request notification from the service providing server, sends the predetermined personal identification information to the terminal device. A personal information input request notification for inputting information and biometric information is transmitted, and when personal information and biometric information are received from the terminal device, the received personal information is compared with pre-registered personal information. In the case of a match, a service use permission notification is transmitted to the service providing server, and the received biometric information is stored, and the terminal device indicates the personal information input request notification when the personal information input request notification is received. The personal information and the biological information are input, the input personal information and the biological information are transmitted to the personal identification support device, and the personal information is input in response to a user operation. And acquiring the biometric information stored in the support device.

According to the present invention, by requesting the service user simultaneously with the biometric information together with the personal information, even if the service is illegally provided by the transmission of the personal information by a third party. By confirming the biological information stored in the personal identification support device, the situation can be known.

[0018]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the personal identification support system according to the present invention will be described below in detail with reference to the drawings. The present invention is not limited by the embodiment.

Embodiment 1 First, a personal identification support system according to the first embodiment will be described. FIG. 1 is a block diagram illustrating a schematic configuration of the personal identification support system according to the first embodiment. In FIG. 1, the personal identification support system according to the first embodiment includes a personal identification support device 10.
, A user use terminal 20, and a service providing server 30, which are communicably connected via a network (not shown) such as the Internet.

The personal identification support apparatus 10 includes a biological information situation analysis unit 11 for specifying appropriate advice from the received biological information analysis data, and an advice database 12 in which various pieces of advice information are stored. The user use terminal 20 has the same configuration as a mobile terminal such as a mobile phone or a personal computer, and particularly includes a personal identification device 21 for performing personal identification by inputting biometric information. The service providing server 30 is a so-called general computer system similar to a Web server on the Internet, for example.
Provides various services such as online shopping.

The operation of the personal identification support system according to the first embodiment will be described below. First, the service user uses the user terminal 20 to select a service to be used, such as online shopping or music distribution, and requests the service providing server 30 to use the service.

In response to the service use request, the service providing server 30 requests the user use terminal 20 to perform authentication by personal identification using predetermined biometric information such as a fingerprint or a face. In response to a personal identification request from the service providing server 30, the service user inputs biometric information using the personal identification device 21 attached to the user use terminal 20, and authenticates the user.

When the personal identification is successful, the success is notified to the service providing server 30, and the service user can use the service only at that stage. In the following description, an example is given in which the personal identification device 21 is a fingerprint scanner that performs fingerprint collation.

Here, if the fingerprint identification, which is the personal identification means, fails, and the individual is authorized to use the service but cannot be proved, the user is automatically or automatically operated by the user. The fingerprint information at that time is transmitted as biometric information analysis data to the personal identification support device 10 via the network.

At this time, the data transmitted to the personal identification support device 10 as the data for analyzing biological information may be, for example, a fingerprint image itself, or the image contrast (how clear a fingerprint image was obtained) may be. May be temporarily processed data such as the amount of positional deviation from fingerprint data registered in advance in the personal identification device 21 or the amount of scratches and wrinkles present in the fingerprint.

In the personal identification support apparatus 10, the biometric information analysis data transmitted from the user use terminal 20 is input to the biometric information situation analysis unit 11, and for example, "fingerprint is blurred" or "fingerprint is crushed" ”,“ The positional deviation from the pre-registered fingerprint data is large (the position of the finger is significantly different from that at the time of registration), and the positional deviation amount is about several millimeters up and down and about several millimeters left and right ”, "Rotational deviation from pre-registered fingerprint data is large (the angle at which the finger is placed differs greatly from that at the time of registration, and the amount of rotational deviation is the number of times left or right)", "Wounds and wrinkles Many "
Analyze and judge situations such as.

Then, the advice database 12 is searched based on the determined result, the service user selects an optimal advice that succeeds in personal identification, and the advice information is returned to the user terminal 20.

Thus, the service user performs personal identification again by the personal identification device 21 according to the advice information transmitted from the personal identification support device 10. If the personal identification succeeds, the service providing server 30 is notified of the fact as described above, and the service user can use the service. Note that the service user can repeat this cycle until the personal identification succeeds.

Here, in the advice database 12, advices for improving the situation and succeeding in personal identification (for example, fingerprint) are stored in accordance with all judgment results output by the biological information situation analysis unit 11. ing.
The advice here is, for example, an instruction such as "slightly moisten the surface of the finger by blowing on the finger" or "pressing a little harder to see" in response to the analysis result of "fingerprint is blurred". In response to the analysis result that "the positional deviation from the fingerprint data registered in advance is large. The positional deviation amount is 3 mm upward," the instruction is "place the image data shifted downward by 3 mm."

As described above, according to the personal identification support system according to the first embodiment, the user use terminal 2
0, even if personal identification by input of biometric information is not successful, the personal identification support device 10 returns appropriate advice based on the biometric information input when the personal identification has failed. Even when the user fails in the personal identification by personal identification, there is no need to repeat trial and error in a meaningless manner, the number of trials until the personal identification is reduced, and the service user can use the service smoothly. The communication between the user terminal 20 and the personal identification support device 10 is encrypted, and security is sufficiently ensured.

Embodiment 2 Next, a personal identification support system according to the second embodiment will be described. FIG.
FIG. 7 is a block diagram illustrating a schematic configuration of a personal identification support system according to a second embodiment; In FIG. 2, portions common to FIG. 1 are denoted by the same reference numerals, and description thereof is omitted. The personal identification support system shown in FIG. 2 differs from FIG. 1 in that the personal identification support device 40 includes a personal identification unit 13 and a personal information database 14.

The operation of the personal identification support system according to the second embodiment will be described below. First, as described in the first embodiment, the service user refers to the advice information transmitted from the personal identification support device 40, and performs personal authentication by the personal identification device 21 using biometric information several times. Try. Here, the personal identification device 2
After several times of failure in the personal identification by the user 1, the service user operates the user use terminal 20 and instructs the service providing server 30 to “identify personally by another personal confirmation” described later.
Is notified.

When the service providing server 30 receives the notification, the service providing server 30 sends the personal identification unit 1 to the personal identification support device 40.
3 transmits an identification request. Personal identification support device 4
0, upon receiving the request for identification from the service providing server 30, the personal identification unit 13 attempts "identification by another identification".

Here, "identification by other personal confirmation"
For example, a password, a person's birth date or family birth date, a license number, an insurance card number, a home telephone number, etc. 3
This is a method of confirming using personal information other than biometric information, which is difficult for a person to answer (cannot know). In FIG. 2, such information is stored in the personal information database 14.

When requested by the service providing server 30 for “identification by another personal identification”, the personal identification support device 40 randomly selects at least one piece of information from the personal information registered in the personal information database 14 in advance. And read. At the same time, the personal confirmation unit 13 requests the user use terminal 20 to transmit the selected information. Upon receiving the personal information input request from the personal identification support device 40, the user use terminal 20 accurately inputs the requested personal information by the service user.

When receiving the personal information from the user terminal 20, the personal confirmation unit 13
The information read from the personal information database 14 is compared with the information, and only when all the information is correctly matched, the user is determined to be the principal and the service providing server 30 is notified of the service use permission. When the service use permission reaches the service providing server 30, the service user can use the service.

As described above, according to the personal identification support system according to the second embodiment, the personal identification is still not successful despite following the advice given from the personal identification support device 40. Also,
By inputting other personal information that can identify the service user, the identity of the user can be proved, and the service can be used.

Embodiment 3 FIG. Next, a personal identification support system according to the third embodiment will be described. FIG.
FIG. 11 is a block diagram illustrating a schematic configuration of a personal identification support system according to a third embodiment; In FIG. 3, the same reference numerals are given to the same parts as those in FIG. 2, and the description will be omitted. The personal identification support system shown in FIG. 3 differs from FIG. 2 in that the personal identification support device 50 includes a biometric information database 15.

The operation of the personal identification support system according to the third embodiment will be described below. If the service user fails to authenticate himself or herself with the personal identification device 21, he or she first tries personal identification again according to the advice information transmitted from the personal identification support device 50. Identity verification by confirmation ''
The procedure for certifying the identity of the user is described in Embodiment 2.
Is the same as

The third embodiment is characterized in that, when the individual confirmation unit 13 requests the service user to input personal information, he also requests the input of biometric information (for example, a fingerprint or a face) at the same time. . That is, the service user uses the user terminal 20 to input the requested personal information and also input the biological information. At this time, the input biometric information is sent directly to the personal identification support device 50 together with the personal information described above without undergoing the matching process by the personal identification device 21.

Note that the personal identification device 21 is used for personal identification.
And the biometric information transmitted to the personal identification support device 50 may be the same or different. For example, a fingerprint may be used for personal identification, and a face image may be transmitted to the personal identification support device 50.

The personal identification unit 13 of the personal identification support device 50
Stores the transmitted personal information in the personal information database 1
In addition to confirming the identity of the user by comparing with the contents of No. 4, the biometric information transmitted together is stored in the biometric information database 15 together with the date and time, the service user name, the name of the service to be used, and the like.

Accordingly, even if a third party knows the personal information of the service user and the third party impersonates the service user and receives the service,
At a later date, if the service user knows that, by requesting the personal identification support device 50 to view the biometric information stored in the biometric information database 15,
It can prove that a third party has illegally used the service.

As described above, according to the personal identification support system according to the third embodiment, by simultaneously requesting the service user with the personal information as well as the biological information, the impersonation of the third party can be psychologically performed. In addition, we have a means to prove that even if you are impersonated by a third party, so you will need to pay service users unnecessarily, such as service usage fees or e-commerce account settlement. Damage can be prevented.

In the first to third embodiments described above, the case where the personal identification device 21 is a fingerprint scanner that performs fingerprint collation has been described as an example. However, face collation, voice collation, palm shape collation, retinal pattern Matching, iris pattern matching,
Other personal identification means, such as pinna shape verification and signature verification, may be used.

[0046]

As described above, according to the present invention, even if the service user fails to authenticate himself by personal identification, there is no need to repeat trial and error in a meaningless manner.
This has the effect of reducing the number of trials required until personal identification.

According to the next invention, even if the service user does not succeed in the personal identification by the personal identification means no matter how many times the user tries, this can be remedied by another personal identification method, and the service can be smoothly performed. This has the effect that it can be enjoyed.

According to the next invention, by simultaneously requesting the biometric information from the service user, the third party is psychologically hesitated to impersonate the third party, and the third party is not required for the original service user. A means is provided for proving that even if the user is impersonated, the effect of being able to prevent the service user from being unnecessarily suffered from financial damage such as service charges or account settlement in e-commerce etc. Play.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a schematic configuration of a personal identification support system according to a first embodiment;

FIG. 2 is a block diagram illustrating a schematic configuration of a personal identification support system according to a second embodiment;

FIG. 3 is a block diagram illustrating a schematic configuration of a personal identification support system according to a third embodiment;

[Explanation of symbols]

10, 40, 50 personal identification support device, 11 biometric information situation analysis unit, 12 advice database, 13 personal confirmation unit, 14 personal information database, 15 biometric information database, 20 user use terminal, 21 personal identification device, 30 service providing server .

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Nami Hirata, 2-3-2 Marunouchi, Chiyoda-ku, Tokyo Mitsui Electric Co., Ltd. (72) Kentaro Hayashi 2-3-2, Marunouchi, Chiyoda-ku, Tokyo Ryoichi Nishiura (72) Inventor Ryuichi Nishiura 2-3-2 Marunouchi, Chiyoda-ku, Tokyo F-term (reference) 5B017 AA03 BA05 BA09 5B085 AA08 AE25 BA07 BG07 5E501 AA09 AC15 AC37 AC42 BA02 CA02 CC07 CC14 DA15 EA02 FA13 FA14 FA43 5J104 AA07 KA01 KA16 KA17 MA01 NA05 NA43 PA02

Claims (3)

[Claims] 1. A personal identification support system comprising a personal identification support device and a terminal device connected via a communication line, wherein the personal identification support device receives biological information from the terminal device and receives the received biological information. Analyzing the situation at the time of inputting the biometric information from the information, extracting the advice information corresponding to the analysis result from the pre-stored advice information and returning it, the terminal device performs personal identification from the input biometric information. A personal identification means for performing the identification information, when the identification by the personal identification means is not successful, transmits the biometric information input at the time of the identification to the personal identification support device, when receiving the advice information, the advice information A personal identification support system characterized by presenting. 2. A personal identification support system comprising a personal identification support device, a terminal device, and a service providing server connected via a communication line, wherein the personal identification support device receives biological information from the terminal device. Analyzing the situation at the time of inputting the biometric information from the received biometric information, extracting advice information corresponding to the analysis result from the pre-stored advice information and returning the same, and transmitting a personal identification request notification from the service providing server. When receiving a personal information input request notification requesting the input of predetermined personal information to the terminal device, when receiving personal information from the terminal device, the received personal information and personal information registered in advance And when both match, a service use permission notification is transmitted to the service providing server, and the terminal device A personal identification unit for performing personal identification based on the information; performing identification by the personal identification unit when receiving a personal identification request notification from the service providing server; When the identification result notification is transmitted, if the identification is not successful, the biometric information input at the time of the identification is transmitted to the personal identification support device, and when the advice information is received, the advice information is presented, and a user operation is performed. Sends a personal confirmation notification to the service providing server in response to the personal information input request notification when the personal information input request notification is received, and inputs the personal information indicated by the personal information input request notification to the personal identification support. Transmitting to the device, the service providing server provides various services via the communication line, and the terminal The personal identification request notification is transmitted to the terminal device when providing a service to the device, the service is provided when the personal identification result notification is received, and the personal identification support is provided when the personal identification notification is received. The personal identification support system, wherein the personal identification request notification is transmitted to a device, and a service is provided to the terminal device when the service use permission notification is received. 3. The personal identification support device transmits a personal information input request notification requesting input of predetermined personal information and biometric information to the terminal device when receiving the personal identification request notification from the service providing server. Receiving personal information and biometric information from the terminal device, comparing the received personal information with pre-registered personal information, and transmitting a service use permission notification to the service providing server when both match. The terminal device stores the received personal information, and the terminal device inputs the personal information and the biological information indicated by the personal information input request notification when the personal information input request notification is received. The method according to claim 2, wherein information is transmitted to the personal identification support device, and biometric information stored in the personal identification support device is acquired according to a user operation. Personal identification support system of the placement.