JP2002358488A - Portable terminal, and method and program for individual authentication - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a portable terminal which disables a person other than the user oneself from using the terminal even in an existent system performing individual authentication by using authentication information other than biological feature information, eliminates the need to report individual's biological feature information to the outside, and prevents the biological feature information from flowing out. SOLUTION: This terminal is equipped with an IC card communication means 19 which communicates with an IC card 20 stored with global individual authentication information, a fingerprint read means 18 (biological feature information read means) which reads human fingerprint information (biological feature information), a tamperproof device 17 (biological feature information registering means) where the information is previously registered as local individual authentication information, and a control means 13 which performs control for allowing the IC card 20 to be used when fingerprint information newly read by the fingerprint read means 18 is already registered in the tamperproof device 17.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a portable telephone, PHS (Personal Handy-phone System) that can use an IC card.
m) Terminals, other mobile terminals, and personal authentication methods, and more particularly, to mobile terminals and personal authentication methods in which personal authentication is performed and only registered users use an IC card.

[0002]

2. Description of the Related Art Conventionally, in a system for operating a terminal using an IC card, when confirming that the person who intends to operate the terminal is a person, generally, a photograph, a personal identification number,
Verification was done using signatures, etc., and forgery and spoofing were possible.

On the other hand, there is a method in which biological characteristic information such as a fingerprint is registered in advance, and the biological characteristic information read from a person who intends to use the terminal is compared with the biological characteristic information registered in advance. Such a matching method using biometric feature information is certainly effective, but many current systems do not have a matching function using such biometric feature information. In addition, a system for matching biometric feature information registers biometric feature information in advance in, for example, a service provider database, transmits biometric feature information input via a sensor at a terminal to a service provider, The provider was referencing the database and collating. Alternatively, when distributing the IC card to the user, the biological characteristic information is registered in the IC card in advance, and the biological characteristic information input via the sensor is compared with the biological characteristic information registered in the IC card in advance. Was supposed to.

[0004]

However, such a conventional personal authentication method has a problem that countermeasures against forgery and impersonation are not easy in the case of using no biometric feature information.

In the case of a method of performing authentication based on biometric feature information, biometric feature information of a user must be registered in a database or an IC card in advance, and a new system for performing a registration procedure and a new system are required. There was a problem that operation was required. In addition, since the biometric feature information exists outside the range managed by the user, there is a privacy problem. In particular, since the biometric feature information is unique to the user, it cannot be changed like a password, and if the biometric feature information of the user leaks out, the operation of the system will stop. A situation occurs in which you cannot go. Therefore, there is a problem that it is necessary to construct a dedicated management function and a robust security operation system in order to prevent leakage of biometric characteristic information. In addition, when there are a plurality of services for performing individual authentication by different methods, there is a problem that it is necessary to have individual users register biometric characteristic information for each service used by the user. Further, a sensor for reading biometric characteristic information must be provided for each terminal that operates using an IC card, and there is a problem that the cost is high because many sensors are required.

The present invention has been made in order to solve such a problem. Even in an existing system in which personal authentication is performed using authentication information other than biological characteristic information,
A portable terminal that can prevent the use of the terminal by anyone other than the user himself, does not need to notify the individual's biometric characteristic information to the outside, and can prevent leakage of the biometric characteristic information, personal authentication Provide a method and personal authentication program.

[0007]

A portable terminal according to the present invention comprises: an IC card communication means for communicating with an IC card storing global personal authentication information; a biometric characteristic information reading means for reading biometric characteristic information of a person. A biometric feature information registration unit that pre-registers the biometric feature information as local personal authentication information; and biometric feature information newly read by the biometric feature information reading unit is registered in the biometric feature information registration unit. And a control means for controlling the use of the IC card when it has been performed. With this configuration, even in an existing system in which personal authentication is performed using authentication information other than biometric characteristic information, it is possible to ensure that only the user himself / herself cannot use the terminal, There is no need to notify the biological characteristic information to the outside, and the leakage of the biological characteristic information can be prevented.

According to the personal authentication method of the present invention, the biometric feature information of a person is read and registered in the biometric feature information registration means as local personal authentication information in advance, and a new biometric feature information is used before using global personal authentication information. When the personal characteristic information is read and registered in the biometric characteristic information registration means, use of the global personal authentication information is permitted. Further, the personal authentication program of the present invention has a configuration for causing a computer to execute the personal authentication method. With this configuration, even in an existing system in which personal authentication is performed using authentication information other than biometric characteristic information, it is possible to ensure that only the user himself / herself cannot use the terminal, There is no need to notify the biological characteristic information to the outside, and the leakage of the biological characteristic information can be prevented.

[0009]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram showing an embodiment of a portable terminal according to the present invention. FIG. 2 is a front view showing the embodiment of the portable terminal according to the present invention. FIG. 3 is a side view showing an embodiment of the portable terminal according to the present invention. In the present embodiment, the mobile terminal is a mobile phone, and a fingerprint is used as ecological feature information for identifying a person.

In FIG. 1, FIG. 2 and FIG. 3, a mobile phone 10 (portable terminal) includes an operation unit 11 and a display unit 12.
, Control means 13, wireless communication means 14, antenna 1
5, a storage unit 16, a tamper-resistant device 17 (biological characteristic information registering unit), a fingerprint reading unit 18 (biological characteristic information reading unit), and an IC card communication unit 19 for communicating with an IC card 20.

The operation means 11 is for the user to operate. The display means 12 is for displaying to a user. The control means 13 comprises a microcomputer (computer) for executing the personal authentication program of the present invention, and controls each means of the mobile phone 10. The wireless communication means 14 connects to a mobile communication network via an antenna 15. The storage unit 16 stores the personal authentication program of the present invention in advance. The tamper-resistant device 17 registers the fingerprint information read by the fingerprint reading unit 18 in advance as local personal authentication information, and compares the fingerprint information newly read by the fingerprint reading unit 18 with the previously registered fingerprint information. Note that the tamper-resistant device 17 is an independent device having a function of preventing registered contents from being taken out from the outside. The fingerprint reading unit 18 reads a fingerprint as biometric characteristic information of a person, and the fingerprint reading sensor 1 for a user to perform a fingerprint input operation.
8a and a fingerprint reading control unit 18b for controlling fingerprint scanning
Having. The IC card communication means 19 communicates with an IC card 20 storing global personal authentication information.

Here, the personal authentication information stored in the IC card 20 is global authentication information necessary for externally identifying a user or a portable terminal. In the present embodiment, this global authentication information is
Is output to the mobile communication network via. On the other hand, the fingerprint information registered in the tamper-resistant device is local personal authentication information used only in the mobile terminal 10 and never output to the outside of the mobile terminal 10. The control unit 13 of the mobile phone 10 controls the use of the IC card 20 storing the global authentication information only when the fingerprint information newly read by the fingerprint reading unit 18 is registered in the tamper-resistant device 17. I do.

The operation of the mobile phone 10 according to the present embodiment having the above-described configuration will be described. FIG. 4 is a flowchart schematically showing an embodiment of the personal authentication method according to the present invention. As shown in FIG. 4, the mobile phone 10 in FIG. 1 first reads fingerprint information by the fingerprint reading means 18 and registers the read fingerprint information in the tamper-resistant device 17 in advance as local personal authentication information (S1). ). Then, an IC card 2 recording global personal authentication information
Before using 0, the fingerprint information is newly read by the fingerprint reading means 18, and only when the read fingerprint information is registered in the tamper-resistant device 17, the use permission information is transmitted to the IC card 20 under the control of the control means 13. Register (S2). When the IC card 20 is actually used, the IC card 20 is enabled once only based on the use permission information (S3). Hereinafter, each step (S1, S
2 and S3) will be described in detail.

FIG. 5 is a flowchart showing the details of fingerprint information registration (S1 in FIG. 4). In FIG. 5, first,
The user performs a fingerprint information registration start operation using the operation unit 11 (S11). When the fingerprint information registration start operation is performed, the control unit 13 checks whether fingerprint information can be registered in the tamper-resistant device 17 (S12). Specifically, the control unit 13 issues a fingerprint information registration request to the tamper-resistant device 17, and when the fingerprint information has not been registered, notifies the control unit 13 that the fingerprint information can be registered. If the fingerprint information can be registered, the display means 12 displays the start of fingerprint information input and prompts the user to input fingerprint information in response to an instruction from the control means 13 (S13).
The user performs a fingerprint information input operation, and reads the fingerprint reading means 18.
Reads fingerprint information from the user (S14). next,
Fingerprint information is registered in the tamper-resistant device 17 according to an instruction from the control means 13 (S15). Specifically, when the reading of the fingerprint information is completed, the control means 13 notifies the read fingerprint information to the tamper-resistant device 17 and instructs the tamper-resistant device 17 to register the fingerprint information. Is the fingerprint reading means 18
The fingerprint information read by the tamper-resistant device 17 is used as collation data that does not respond to external reading.
Is stored in a non-volatile memory inside the device, and notifies the controller 13 of the completion of fingerprint information registration. Next, in response to an instruction from the control means 13, the display means 12 displays the completion of fingerprint information registration (S16).

FIG. 6 shows registration of use permission information (S2 in FIG. 4).
6 is a flowchart showing details of the process. In FIG. 6, first, the user mounts the IC card 20 on the mobile phone 10 and performs a use permission information registration start operation by the operation means 11 (S21). When the use permission information registration start operation is performed, the IC card communication unit 19 transmits initialization data for enabling the use permission information to be registered to the IC card 20 (S22). Also, according to an instruction from the control means 13,
The display means 12 displays the start of fingerprint information input and prompts the user to input fingerprint information (S23). The user performs a fingerprint information input operation, and the fingerprint reading means 18 reads the fingerprint information from the user (S24). Next, in response to an instruction from the control means 13, the tamper-resistant device 17 collates the fingerprint information (S25). Specifically, when the reading of the fingerprint information is completed, the control means 13 notifies the read fingerprint information to the tamper-resistant device 17 and instructs the tamper-resistant device 17 to collate the fingerprint information. The fingerprint information read by the fingerprint reading means 18 is compared with fingerprint information registered in advance in the tamper-resistant device 17, and the fingerprint information read by the fingerprint reading means 18 is used by the user of the mobile phone 10. It is determined whether or not it is. If it is the fingerprint information of the user himself, the use permission information is registered in the IC card (S2).
6). Specifically, according to an instruction from the control means 13,
The IC card communication means 19 transmits the use permission information to the IC card 2
0, the IC card 20 registers the use permission information in the nonvolatile memory inside the IC card 20, and the IC card communication means 19 receives the use permission information registration completion from the IC card 20. Next, in response to an instruction from the control unit 13, the display unit 12 displays the completion of the use permission information registration (S2).
7).

FIG. 7 shows an IC card use permission (S in FIG. 4).
It is a flowchart which shows the detail of 3). In FIG. 7, first, the user mounts the IC card 20 to be used on the mobile phone 10 and performs an IC card use permission start operation by the operation means 11 (S31). When the IC card use permission start operation is performed, the display unit 12 displays the start of fingerprint information input and prompts the user to input fingerprint information in accordance with an instruction from the control unit 13 (S32). The user performs a fingerprint information input operation, and the fingerprint reading means 18 reads the fingerprint information from the user (S33). Next, control means 1
In response to the instruction from 3, the tamper-resistant device 17 collates the fingerprint information (S34). Specifically, when the reading of the fingerprint information is completed, the control unit 13 notifies the read fingerprint information to the tamper-resistant device 17 and instructs the tamper-resistant device 17 to collate the fingerprint information,
The tamper-resistant device 17 compares the fingerprint information read by the fingerprint reading unit 18 with the fingerprint information registered in advance in the tamper-resistant device 17 and
It is determined whether the fingerprint information read by 8 is the one of the user of the mobile phone 10 or not. If it is the fingerprint information of the user himself, the IC card 20 is made usable (S35). Specifically, in response to an instruction from the control means 13, the IC card communication means 19 issues a permission to use the IC card.
IC card 2 that has transmitted to card 20 and received use permission
0 indicates a usable state, and the IC card communication means 19
Receives the use permission completion from the IC card 20. Next, according to an instruction from the control means 13, the display means 12
Displays the completion of use permission (S36). The IC card thus permitted to be used can be used only once in another device.

According to this embodiment, the fingerprint information of the user is read and registered in the tamper-resistant device as local personal authentication information in advance, and before the IC card in which the global personal authentication information is registered is used. When the fingerprint information is newly read and registered in the read tamper-resistant device, the use of an IC card in which global personal authentication information is registered is permitted. Even in the case of an existing authentication system, it is possible to ensure that only the user himself / herself cannot use the terminal, and there is no need to notify the individual's biometric feature information to the outside. Outflow can be prevented.

In the above description, an example has been described in which the portable terminal is a portable telephone. However, the present invention is not limited to this, and the portable terminal may be a PHS, a PDA, or another portable terminal. .

In the above description, an example has been described in which a fingerprint is read as biometric feature information for authentication.
The present invention is not limited to this.
It may be an iris, a handprint, a voiceprint, or other biological characteristic information.

The IC card is a contact IC card,
Or a non-contact IC card.

[0022]

According to the present invention, even in an existing system in which personal authentication is performed using authentication information other than biometric characteristic information, it is possible to ensure that only the user himself / herself cannot use the terminal. It is possible to provide a mobile terminal, personal authentication information, and a personal authentication program which have excellent effects of being able to prevent the leakage of the biological characteristic information without having to notify the individual's biological characteristic information to the outside. it can.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an embodiment of a portable terminal according to the present invention.

FIG. 2 is a front view showing an embodiment of the portable terminal according to the present invention.

FIG. 3 is a side view showing the embodiment of the portable terminal according to the present invention.

FIG. 4 is a flowchart showing an outline of an embodiment of a personal authentication method according to the present invention.

FIG. 5 is a flowchart showing details of fingerprint information registration in the embodiment of the personal authentication method according to the present invention.

FIG. 6 is a flowchart showing details of registration of use permission information in the embodiment of the personal authentication method according to the present invention.

FIG. 7 is a flowchart showing details of permission to use an IC card in the embodiment of the personal authentication method according to the present invention.

[Explanation of symbols]

Reference Signs List 10 mobile phone (mobile terminal) 11 operating means 12 display means 13 control means (computer) 14 wireless communication means 15 antenna 16 storage means 17 tamper-resistant device (biological feature information registration means) 18 fingerprint reading means (biometric feature information reading) Means) 18a Fingerprint reading sensor 18b Fingerprint reading control unit 19 IC card communication means 20 IC card

Claims (3)

[Claims] Claims: 1. An information storage device storing global personal authentication information.
IC card communication means for communicating with the C card, biometric feature information reading means for reading biometric feature information of a person, biometric feature information registration means for pre-registering the biometric feature information as local personal authentication information, When the biological characteristic information newly read by the biological characteristic information reading means is registered in the biological characteristic information registration means,
Control means for controlling use of the card. 2. The biometric feature information of a person is read and registered in advance in biometric feature information registration means as local personal authentication information, and the biometric feature information is newly read before using global personal authentication information. A personal authentication method, wherein the use of the global personal authentication information is permitted when the personal authentication information is registered in the biometric characteristic information registration means. 3. A personal authentication program for causing a computer to execute the personal authentication method according to claim 2.