JP2003162705A - Ic card authentication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an IC card for executing a fingerprint data collating operation only at the time of authentication. <P>SOLUTION: This system is constituted of an IC card having a fingerprint reading part for recognizing the fingerprints of the touching fingers of a user, a data storing part for registering and preserving fingerprints for specifying an authentic owner, a collating part for judging whether or not the fingerprints recognized by the fingerprint authenticating part are matched with the fingerprints of the authentic owner registered in the data storing part, and for outputting a judgement signal indicating the result, a collation instruction signal inputting part for inputting a collation instruction signal, and for instructing the collating part to execute the collating operation, and a judgement signal outputting part for outputting the judgement signal to be outputted by the collating part. Also, this system is constituted of a card reader having a collation instruction signal outputting part for outputting the collation instruction signal to instruct the collating operation to the collation instruction signal inputting part and a judgement signal inputting part for inputting the judgement signal to be outputted by the judgement signal outputting part. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card authentication system used for personal identification and the like.

[0002]

2. Description of the Related Art Conventionally, individual identification such as identification of a driver's license or ID card, expedients for using assets such as credit cards, permission to enter a specific area such as a building, lock of a car or house, etc. IC cards are used in various fields as personal authentication means in various fields that require security. At that time, in order to determine whether the user is the genuine owner, it is common to inquire about the personal identification number, etc. that only the person can know, but it may be illegally used because it is detected by another person. There is. In response to this, an IC card for collating fingerprint information is presented so that only the user himself can use it.

[0003]

Unlike a conventional card that stores authentication information such as a personal identification number as a magnetic record, those sensor circuits are driven in order to obtain user's fingerprint information using an image sensor or the like. Power must also be considered. Regarding this, it is conceivable that power is supplied from the authentication device at the time of authentication, but there is a problem in that a power supply terminal must be provided on the card side. desirable. Therefore, normally do not activate the circuit,
Proposals have been made to activate the circuit only during verification. For example, Japanese Patent Laid-Open No. 2000-123143 and Japanese Patent Laid-Open No. 11-19069 are provided with a biometric sensor and a pressure-sensitive sensor in the fingerprint collating unit, and the collation operation is performed when they react. However, when it is operated by the trigger as described above, it is considered that it is easily operated even at the time of authentication. An object of the present invention is to provide an IC card authentication system using an IC card that performs a fingerprint data collating operation only at the time of authentication.

[0004]

In order to solve the above problems, in the present invention, a fingerprint reading unit for recognizing a fingerprint of a finger of a user who has touched and a fingerprint for identifying an authentic owner are registered and stored. The data storage unit, a collation unit that determines whether the fingerprint recognized by the fingerprint authentication unit matches the fingerprint of the genuine owner registered in the data storage unit, and outputs a determination signal indicating the result, and the collation unit. An IC card having a collation instruction signal input unit for inputting an instruction signal and instructing the collation unit to perform a collation operation, and a discrimination signal output unit for outputting the discrimination signal output from the collation unit, and a collation instruction signal input unit A collation instruction signal output unit for outputting a collation instruction signal for instructing the collation operation,
And a card reader having a discrimination signal input unit for inputting the discrimination signal output from the discrimination signal output unit.

In the IC card authentication system having the above structure,
When the user authenticates the IC card with respect to the card reader, the verification instruction signal transmitting unit included in the card reader outputs the verification instruction signal to the verification instruction signal input unit included in the card, and the verification instruction signal is output. The input unit instructs the matching unit to determine whether the fingerprint of the user acquired by the fingerprint reading unit and the fingerprint data of the genuine owner registered in the data storage unit match based on the input of the matching instruction signal. Then, the collating unit performs the matching determination according to the instruction and outputs the determination result. According to this structure, the collation operation is performed only when the collation instruction signal is input to the collation instruction signal input section, so that it is possible to prevent an unnecessary collation operation during normal times and to prevent consumption of the power supply built into the card. it can.

The IC card authentication system can also be configured as follows. A fingerprint reading unit that recognizes the fingerprint of the touched user's finger, a fingerprint data output unit that outputs the fingerprint data acquired by the fingerprint reading unit, and a collation instruction signal are input to instruct the collation unit to perform a fingerprint collation operation. A verification instruction signal input unit, a verification instruction signal output unit for outputting a verification instruction signal for instructing a fingerprint reading operation to the verification instruction signal input unit, and a fingerprint for identifying a true owner. The data storage unit to be saved and the fingerprint data output from the fingerprint data output unit are acquired, and it is determined whether or not the fingerprint data and the fingerprint of the genuine owner registered in the data storage unit match, and the matching result is obtained. And a card reader having a collating unit for outputting a discrimination signal indicating.

In this case, since the fingerprint information of the genuine owner is not stored in the card but is stored in the card reader side, the fingerprint information and the personal information of the registrant can be collectively managed. Further, in this case, the fingerprint information is output from the IC card to the card reader, but the information may be encoded and encoded to simplify the transmission. In that case, needless to say, the fingerprint information stored on the card reader side also stores simplified data by the same method. Note that the entire IC card authentication system may include a server for storing fingerprint information, and the fingerprint information may not be stored in the card reader but may be downloaded at the time of matching.

It is also conceivable to provide a means for informing the result of the collation. That is, the IC card may be provided with a warning sound generating means, and a warning sound may be generated when the discrimination signal output from the collation result output unit indicates that the user and the true owner do not match. Alternatively, a warning sound or warning message generating means is provided in the card reader, and a warning sound or warning message is generated when the discrimination signal output from the collation result output unit indicates the disagreement between the user and the true owner. be able to. As a result, it is possible to clearly and promptly notify the unauthorized use or misuse.

[0009]

BEST MODE FOR CARRYING OUT THE INVENTION An embodiment of a room entrance / exit management system using an IC card authentication system of the present invention will be described below with reference to the drawings. FIG. 1 is a front view of the IC card 1, a sectional view taken along the line AA of the front view, and a block diagram. IC card 1
Is provided with a CCD image sensor 2, a CPU 4, a collation instruction signal input section 5, a discrimination result output section 6, and a speaker 7. The IC card 1 is formed by pressing both sides of a core sheet with oversheets 8. In the core sheet, the CCD image sensor 2, the CPU 4, the collation instruction signal input unit 5, the discrimination result output unit 6 and the speaker 7 are fitted in the holes provided corresponding to their sizes. The voids in the holes are filled with a sealing resin having good thermal characteristics. The oversheet 8 covers the surface of the IC card 1 except for the sensor surface of the CCD image sensor 2. In addition, information such as the owner's name and issue number is written on the plastic pedestal by engraving.

The CCD image sensor 2 obtains the data of the fingerprint pressed on the sensor surface and performs variable threshold processing to binarize it. The fingerprint information of the genuine owner is C when registering the card.
It is acquired by the CD image sensor 2 and is stored in the storage unit 3 as such binary data together with the content information of the card. A PROM is used as the storage unit 3, and the fingerprint information of the genuine owner acquired at the time of card registration cannot be rewritten thereafter. The CPU 4 has a work area, and compares the fingerprint data of the user acquired by the CCD image sensor 2 with the fingerprint data of the genuine owner stored in the storage unit 3 in the work area. Collation instruction signal input section 5
Has a voltage-driven switching element, and when a voltage is applied as a collation instruction signal input, the collation instruction signal is amplified and the CCD image sensor 2, the fingerprint data storage unit 3, the CPU 4, and the discrimination result output unit 6 are amplified. Output to The discrimination result output unit 6 outputs to the authentication information input unit 12 of the card reader 10 via the terminal 6a of the discrimination result output unit 6 based on the result of the fingerprint collation determination of the CPU 4. If the user and the genuine owner match, a sound indicating confirmation is generated from the speaker 7, and if they do not match, a warning sound is generated from the speaker 7.

In fingerprint collation, it is considered that the CCD image sensor 2 is not recognized by the same pressing force at the same position at the time of registration and at the time of authentication. Therefore, in collation of two fingerprint data, the outlines are similar. Then, the other is rotated with respect to one. After that, a part of one image is extracted, and the images are moved so as to be matched or approximated to each part of the other image data so as to be collated. Regarding verification, the identification evaluation is performed in the first verification, and thereafter, the identification evaluation of both images is performed each time a minute parallel movement or rotational movement is performed, and when the degree of identification increases, the reference position is updated to that position. The above operation is repeated, and the matching is completed when the two images match or reach the most approximate position. When the two fingerprint data have a predetermined identification rate or more by this matching operation, it is evaluated that they match.

As shown in FIG. 2, the card reader 10
Has a slit groove 13 in the outer shape of a substantially rectangular parallelepiped. The slit groove 13 is formed slightly wider than the thickness of the IC card 1 to be authenticated. The card reader 10 is provided with an instruction signal generation unit 11, an authentication information input unit 12, a CPU 14, a storage unit 15 and a speaker 16. The instruction signal generation unit 11 and the authentication information input unit 12 have terminal portions 11a and 12
a is provided so as to face the slit groove 13, and a signal can be exchanged with the IC card 1 from that surface. The storage unit 15 stores the card content information of the card user to be collated. The CPU 14 is connected to the authentication information input unit 12, the storage unit 15, and the speaker 16, and collates the card content information input from the authentication information input unit 12 during IC card authentication with the card content information in the storage unit 16. The speaker 16 reproduces the entry permission message when the collation result of the CPU 14 indicates that entry is permitted, and reproduces the rejection message when the entry is not permitted.

FIG. 4 is a flow chart showing the process of authentication by the IC card authentication system 20 of this embodiment. FIG. 4 shows a flow of operations of the IC card 1 and the card reader 10. When the card user authenticates, the CCD image sensor 2 as shown in FIG.
While touching the sliding end 1a of the IC card 1 with the bottom portion 13a of the slit groove 13 with the finger (the thumb of the right hand in this example) having the fingerprint information registered on, contacting the bottom end 13a of the slit groove 13 toward the other end 13c. Let it pass. The verification instruction signal input unit 5 and the discrimination result output unit 6 are formed at different distances from the lower edge (sliding end 1a) of the card, and the instruction signal generation unit 11 and the authentication information input unit 12 are slit correspondingly. They are arranged at substantially the same distance from the bottom portion 13a of the groove 13. This prevents the collation instruction signal and the authentication information from misidentifying each other's signals.

When the IC card 1 moves along the above trajectory, the collation instruction signal input unit 5 passes through a position facing the instruction signal generation unit 11. The instruction signal generator constantly generates a weak electric field as a signal output (S11), and the voltage change caused by the electric field becomes the verification instruction signal (), and the switching element of the verification instruction signal input unit 5 operates. The fingerprint collation operation is started (S1). Based on the input of the fingerprint collation instruction signal, the CCD image sensor 2 projects light from a light projecting section on the side of the light receiving section onto the sensor surface, and the light receiving section receives the reflected light and acquires a fingerprint on the sensor. Go. The acquired fingerprint data is output to the CPU 4 after being subjected to variable threshold value processing for binarizing the average density of the neighborhood area as a threshold value for each pixel. Further, the terminal 6a of the discrimination result output unit 6 is activated.

In S2, the CPU 4 acquires the fingerprint data, reads the binary data of the fingerprint of the genuine owner stored in the data storage unit 3 (S3), and compares the binary data in the work area (S4). . The determination result output unit 6 outputs according to the result. If they do not match, the signal is output to the speaker 7 (S8) and a warning sound is generated (S8).
9). If they match, the data storage unit 3 to the IC card 1
The content information of is read and the pattern of the digital signal is output from the terminal 6a (S5). In addition, the counter is operated at the same time when the pattern output of the digital signal is started (S6), and the counter value becomes a predetermined value (S7; Y) until S2-
The signal pattern output () is continued by repeating S5.

When the IC card 1 moves along the slit groove 13 from the opening ends 13b to 13c, the discrimination result output unit 6 and the authentication information input unit 12 face each other. When the authentication information input unit acquires the digital signal pattern () indicating the content information of the IC card output by the determination result output unit (S12: Y), the card reader is stored in the code indicated by the signal pattern and the storage unit 15. The authentication operation is performed by collating with the entered room permitter code (S13). If applicable, the entry permission message is reproduced from the speaker 16 and the entry door (not shown) is unlocked. If it does not correspond, the message that the entry is not permitted is reproduced from the speaker 16 and the unlocking is not performed.

As described above, since the circuit is not operated except during the authentication, the power supply in the card is not consumed, and therefore, the situation where the authentication is impossible due to the power failure during the use can be avoided.

It is also conceivable to store the fingerprint registration information on the card reader side without mounting the fingerprint registration information on the IC card. FIG. 6 is a block diagram showing this configuration.
In the IC card authentication system 30 of this embodiment, the fingerprint data acquired by the CCD image sensor 32 is transferred to the fingerprint data by the CPU 34 based on the input of the collation instruction signal from the signal generation section 41 to the instruction signal input section 35. The converted code is output after being converted into a simplified code corresponding to the above, and is output from the terminal of the discrimination result output unit 36 to the fingerprint data input unit 42. The storage unit 45 of the card reader 40 stores the fingerprint data of the genuine user created by the same procedure,
The CPU 44 reads this and compares it with the fingerprint data input to the fingerprint data input unit 42. After that, if the verification results are in agreement, the entry permission message is reproduced from the speaker 46 and the entry door (not shown) is unlocked. If they do not match, the message that the entry is not permitted is played and the unlocking is not performed.

The output from the discrimination result output unit 36 to the authentication information input unit 42 may be performed as binary data without being coded. In that case, similar binary data may be stored in the data stored in the storage unit 45 of the card reader 10.

With such a configuration, the information of the authorized persons can be collectively managed on the management side, and the fingerprint data of the IC card can be prevented from being destroyed or tampered with.
It is also possible to reduce the cost of the entire authentication system including the card.

In this embodiment, the application to the entrance / exit management system has been shown, but of course the present invention is not limited to this, and it can be applied to a driver's license, a credit card, a card key of a house or an automobile, etc. Is. Also,
For example, as shown in FIG. 5, the IC card 1 does not pass through the vertical groove, but the opening 1 of the card reader 10 with the finger placed on the CCD image sensor 2 of the IC card 1.
The IC card 1 may be inserted into the card 3. In this case, the CCD image sensor 2 is arranged near the center rear edge of the IC card 1 so that it can be easily held by a finger. In this way, after the IC card 1 is inserted and authentication is performed, it is easy to read and update the content information stored in the storage unit 3 while being in contact with the innermost portion. Therefore, when using a credit card or the like, it is possible to easily perform personal authentication by fingerprint collation and continuous use thereof. It can also be used near the front panel of an automobile as an authentication system that also serves as a key card for starting the engine.

Even when used for these purposes, the circuit is not operated except during the authentication, so that the power supply in the card is not consumed, and therefore the situation where the authentication is impossible due to the power failure during use is avoided. You can

[Brief description of drawings]

FIG. 1 is a front view of an IC card.

FIG. 2 is a partially cutaway perspective view and a block diagram of a card reader.

FIG. 3 is an operation explanatory view showing an authentication operation of an IC card.

FIG. 4 is a flowchart showing a processing flow of an IC card and a card reader in an authentication operation.

FIG. 5 is a diagram showing a modified example in which an IC card is inserted into a card reader for authentication and an authentication operation in that case.

FIG. 6 is a block diagram showing a configuration of an IC card and a card reader when the fingerprint data of the genuine owner is stored on the card reader side.

[Explanation of symbols]

1 IC card 2 CCD image sensor 3 storage 4 CPU 5 Collation instruction signal input section 6 Discrimination result output section 10 card reader 11 Instruction signal generator 12 Authentication information input section

Claims (4)

[Claims] 1. A fingerprint reading unit that recognizes a fingerprint of a finger of a user who has touched, a data storage unit that registers and saves a fingerprint that identifies an authentic owner, and a fingerprint recognized by the fingerprint authentication unit is the data. A collation unit that determines whether or not it matches the fingerprint of the genuine owner registered in the storage unit and outputs the result, and a collation unit that instructs the collation unit to perform a collation operation based on the input of a collation instruction signal. An IC card having an instruction signal input unit and a discrimination signal output unit for outputting a discrimination signal indicating the collation result discriminated by the collation unit; and a collation instruction signal for instructing the collation instruction signal input unit to perform a collation operation. An IC card authentication system comprising: a card reader having a collation instruction signal output unit for outputting and a discrimination signal input unit for inputting a discrimination signal output by the discrimination signal output unit. 2. A fingerprint reading unit for recognizing a fingerprint of a user's finger touching, a fingerprint data output unit for outputting the fingerprint data acquired by the fingerprint reading unit, and a reading instruction signal as input.
An IC card having a collation instruction signal input unit for instructing the collation unit to perform a fingerprint reading operation; and a collation instruction signal output unit for outputting a collation instruction signal to instruct the fingerprint instruction operation to the collation instruction signal input unit; A data storage unit that registers and saves a fingerprint that identifies the genuine owner,
Obtaining fingerprint data output from the fingerprint data output unit,
A card reader having a collating unit that discriminates whether or not the fingerprint data and the fingerprint of the genuine owner registered in the data storage unit coincide with each other and outputs a discrimination signal indicating the collation result. An IC card authentication system characterized by being performed. 3. The IC card comprises a warning sound generating means,
The IC card authentication system according to claim 1, wherein when the discrimination signal output by the collation result output unit is acquired and it indicates that the user and the true owner do not match, a warning sound is generated. 4. The card reader is provided with a warning sound or warning message generating means, and when the discrimination signal input to the discrimination signal input section indicates disagreement between the user and the true owner,
The IC card authentication system according to claim 1, wherein a warning sound or a warning message is generated.