JP2003346098A - Personal identification system and method and terminal device for personal identification - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a personal identification system making the input of individual identification information easier, while enabling personal identification to be made with high security. <P>SOLUTION: The personal identification system uses a card terminal device 2 and an IC card 3. The IC card 3 stores individual identification information needed to use the card, and encrypted information obtained by encrypting this individual identification information using feature data extracted from a card owner's biological information. The card terminal device 2 has a CPU 21 and a biological information acquiring part 27. The CPU 21 extracts the feature data from the user's biological information acquired by the biological information acquiring part 27, reads via a card I/F 25 the encrypted information stored in the IC card 3, decrypts the encrypted information using the feature data included in the user's biological information, inputs the decrypted information obtained by the decryption to the IC card 3, and determines if the user is the owner by collating information within the card. <P>COPYRIGHT: (C)2004,JPO

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal authentication system for performing personal authentication (identification) using biological information, a personal authentication method, and a personal authentication terminal device.

[0002]

2. Description of the Related Art In recent years, one of the methods for securely holding personal information required for secure information exchange is to store the personal information in an IC card such as a smart card. There are various types of IC cards depending on their functions, applications, and configurations. One of the functions expected of an IC card and an information processing system using the same is to use confidential information (encryption of data and generation and verification of an electronic signature) to non-card holders (third parties). This is a personal authentication function to prevent leakage of electronic information and unauthorized use of cards.

[0003] The personal authentication function is used to receive some service using a portable storage medium such as an IC card.
This is a function to confirm the authenticity of the partner who actually wants to receive the service. In the case of an IC card, the user who uses the IC card (hereinafter referred to as “user”) is the original card holder (the user). ). As a general method of personal authentication, "personal identification information determined by the owner himself and stored in the card" is compared with "personal identification information entered by the user", and only when they match, the card is owned. There is a way to recognize as a person.

Conventionally, a magnetic tape type card (hereinafter referred to as "magnetic card") has "personal identification information determined by the owner himself".
The (password) is recorded in the magnetic card without being encrypted, and furthermore, there is no mechanism for preventing the information from being read from the magnetic card. As a specific example, an automatic payment terminal (ATM or the like) of a financial institution reads personal identification information from a magnetic card, and compares the read personal identification information with the personal identification information input by a user. Performs personal authentication (identification).
For this reason, a malicious person can use a commercially available magnetic card reader.
By using a / writer, it is easy to perform "acquisition of personal identification information stored in a card" and "copy of a card". Such a situation is reported recently as "spoofing"
It is a cause of increasing card crimes such as cash withdrawal and purchase of goods.

On the other hand, in a smart card, which is one of the IC cards, the personal identification information (PIN; Pe)
The verification of rsonal identification numbers is performed inside the card, and the reading of personal identification information from outside the card is prevented by software or hardware on the smart card. For this reason, leakage of confidential information (secret key data including personal identification information) is prevented, and as a result, execution of a card crime by “spoofing” is virtually impossible.

[0006]

However, in the above-described smart card, although it is possible to prevent the leakage of confidential information in the card, the card holder stores personal identification information and uses it when using the card. The situation in which personal identification information must be entered is similar to that for a magnetic card. For this reason, the following is a concern in the security of the confidential information and the convenience of the user.

That is, it is possible to set complicated personal identification information on a smart card by determining personal identification information (PIN) by appropriately combining numbers, alphabetic characters, symbols, etc. When it is set, it becomes difficult to remember this personal identification information, and there is a concern that even if it is once remembered, it is easily forgotten. Further, if complicated and long personal identification information is set, it is expected that the input operation of the personal identification information is inconvenient or the input fails. For this reason, it is expected that the same personal identification information (personal identification number, password, etc.) as the magnetic card and the like that are used in daily life will be set as the personal identification information of the smart card. Also,
It is also anticipated that a third party may be made aware of the personal identification information by, for example, seeing the operation (such as the movement of a finger) when inputting the personal identification information.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-described problems. An object of the present invention is to eliminate the troublesome input of personal identification information and to perform personal authentication with high security. A personal authentication system, a personal authentication method, and a personal authentication terminal device are provided.

[0009]

The personal authentication system according to the present invention is a personal authentication system using a portable storage medium and a personal authentication terminal device, wherein the portable storage medium is a portable storage medium. Personal identification information required for the use of the medium, and encrypted information obtained by encrypting the personal identification information using feature data extracted from the biometric information of the owner of the portable storage medium, The personal authentication terminal device is an acquiring unit that acquires biometric information of a user who uses the portable storage medium, and an extracting unit that extracts feature data from the biometric information of the user acquired by the acquiring unit.
Reading means for reading the encrypted information stored in the portable storage medium; and decrypting the encrypted information read by the reading means using the characteristic data of the biometric information of the user extracted by the extracting means. Decryption means, and decryption information obtained by decryption by the decryption means are input to the portable storage medium, and the decryption information and the personal identification information are collated inside the portable storage medium. And means for confirming whether or not the user is the owner.

In this personal authentication system, as a function of the personal authentication terminal device, the biometric information of the user is obtained by the obtaining means, and the characteristic data is extracted from the obtained biometric information of the user by the extracting means. .
Further, the encrypted information stored in the portable storage medium is read by the reading means, and the read encrypted information is decrypted by the decrypting means using the characteristic data of the biometric information of the user. Further, the decryption information obtained by the decryption is input to the portable storage medium by the confirmation means, and the decryption information and the personal identification information are collated inside the portable storage medium, so that the user can determine the owner. Is checked. Thus, the user using the portable storage medium can receive personal authentication by collating personal identification information only by presenting his / her biometric information.

The personal authentication method according to the present invention is a personal authentication method using a portable storage medium and a personal authentication terminal device, wherein personal identification information required for using the portable storage medium and the personal identification information are used. Registering, in the portable storage medium, encrypted information obtained by encrypting the personal identification information using characteristic data extracted from biometric information of the owner of the portable storage medium; and using the portable storage medium. Acquiring the biometric information of the user, extracting the characteristic data from the acquired biometric information of the user, reading the encrypted information stored in the portable storage medium, and converting the read encrypted information to the Decoding using the characteristic data of the user's biometric information, and inputting the decoding information obtained by the decoding to the portable storage medium,
Checking the decryption information and the personal identification information inside the portable storage medium to determine whether the user is the owner.

In this personal authentication method, after the personal identification information and the encrypted information are registered in the portable storage medium, the user using the portable storage medium only needs to present his / her own biometric information, It is possible to receive personal authentication by collation of identification information. That is, when the user presents his / her biometric information, the encrypted information read from the portable storage medium is decrypted using the feature data extracted from the user's biometric information. Then, the decryption information obtained by the decryption is input to the portable storage medium, and the decryption information and the encrypted information are collated inside the portable storage medium, so that the user can be the owner (own person). It is checked whether there is.

The personal authentication terminal device according to the present invention uses the personal identification information necessary for using the portable storage medium and the characteristic data extracted from the biometric information of the owner of the portable storage medium. Reading means for reading the encrypted information from a portable storage medium storing encrypted information obtained by encrypting personal identification information; obtaining means for obtaining biometric information of a user who uses the portable storage medium; Extracting means for extracting characteristic data from the biometric information of the user obtained by the obtaining means; and decrypting the encrypted information read by the reading means using the characteristic data of the biometric information of the user extracted by the extracting means. Decoding means for decoding, and decoding information obtained by decoding by the decoding means, are input to the portable storage medium, and the decoding information is stored in the portable storage medium. By collating the personal identification information, in which and a confirmation means for the user to confirm whether it is the owner.

In the personal authentication terminal device, the user's biometric information is obtained by the obtaining means, and the characteristic data is extracted from the obtained user's biometric information by the extracting means. Further, the encrypted information stored in the portable storage medium is read by the reading means, and the read encrypted information is decrypted by the decrypting means using the characteristic data of the biometric information of the user. Further, the decryption information obtained by the decryption is input to the portable storage medium by the confirmation means, and the decryption information and the personal identification information are collated inside the portable storage medium, so that the user can determine the owner. Is checked. Thus, the user using the portable storage medium can receive personal authentication by collating personal identification information only by presenting his / her biometric information.

[0015]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments of the present invention when an IC card such as a smart card is used as a portable storage medium will be described in detail with reference to the drawings. The portable storage medium need not be a card-type storage medium such as an IC card as long as it is easy to handle and carry.

FIG. 1 is a block diagram showing a configuration example of an information processing system according to an embodiment of the present invention. The illustrated information processing system includes a host device 1 and a card terminal device 2.
And an IC card (card-type portable storage medium) 3. Host device 1 and card terminal device 2
Are connected by wire. As a specific connection method between the host device 1 and the card terminal device 2, an RS-232C connection, an IEEE-1284 connection, a PS / 2 connection used for connection of a keyboard and a mouse, a PCMCIA card interface connection, and the like can be used. it can.

The card terminal device 2 and the IC card 3 realize the personal authentication system and the personal authentication method according to the present invention, and each connection terminal (contact) existing on the IC card 3 and the corresponding card The connection is established by contact with the protruding connection terminals of the terminal device 2. The physical characteristics and terminal positions of the connection between the card terminal device 2 and the IC card 3 in the present embodiment are based on ISO / IEC 7816.
-1, ISO / IEC7816-2 project and JIS X 6303 equivalent to the standard
Follow the plan. In addition, electrical signals, transmission protocols, commands, and the like exchanged between the card terminal device 2 and the IC card 3 are also in accordance with ISO / IEC7816-3 standard, ISO / I
Complies with EC DIS7816-4 standard, JIS X 6304 standard and JIS X 6306 standard.

The host device 1 performs various processing using the IC card 3 (for example, cash transfer, transfer, withdrawal, balance inquiry processing at a financial institution, use of pay contents on the Internet, use of an expressway, etc.). , Charging processing related to the provision of services such as printing services and information distribution services, collection processing of membership fees at member stores, provision of services at public facilities and related charging processing, fee processing, etc.).

The card terminal device 2 has an interface function with the IC card 3 as a portable storage medium, and corresponds to the personal authentication terminal device of the present invention. The card terminal device 2 includes a CPU (Central Processing Unit) 21, a ROM (Read-Only Memory) 22,
It comprises an AM (Random Access Memory) 23, a host interface (host I / F) 24, a card interface (card I / F) 25, an operation display unit 26, and a biological information acquisition unit 27. .

According to a program stored in the ROM 22, the CPU 21 uses a memory area of the RAM 23 in which data can be stored and read out, controls communication with the host interface 24 and the card interface 25, and controls the operation display unit 26 and the biological information. It controls the acquisition unit 27 and performs arithmetic processing for data encryption processing (encryption / decryption) based on a common key encryption method (secret key encryption method).

The host interface 24 is connected to the CPU 2
In accordance with communication control and data transmission / reception requests from the host device 1, data is exchanged with the host device 1. The card interface 25 exchanges data with the IC card 3 in accordance with the above-mentioned standard group in response to a communication control or a data transmission / reception request from the CPU 21. Operation display unit 2
Reference numeral 6 is for providing information by turning on or blinking an LED (Light Emitting Diode), displaying a character string on a liquid crystal display, and receiving input by detecting a switch press in response to a display request or an input reception request from the CPU 21. It is.

The biometric information acquiring section 27 acquires biometric information of the owner of the IC card 3 and the user who uses the IC card 3 in accordance with an information acquisition request from the CPU 21. Biological information is unique information that depends on the physical characteristics and characteristics of human beings, and biometrics
Also called information. Specific examples of the biometric information include a face, palm shape, palm print, fingerprint, finger shape, finger blood vessel pattern (vein pattern), iris and retina of the pupil, voice, keystroke, handwriting, and the like. In the present embodiment, a fingerprint is adopted as biometric information. A fingerprint is a fine linear concavo-convex pattern on a human fingertip. The lines forming the protrusions of this uneven pattern are called ridges, and the pattern has the characteristic that they are uniform for all and life-long.

On the other hand, the biological information acquisition unit 27
A fingerprint is read optically or electrically (electrostatically) by a fingerprint sensor unit described later. Then, the CPU 21 extracts feature data (secret key data) for encryption processing from features indicated by the fingerprint information pattern acquired by the biometric information acquisition unit 27. The characteristics of the fingerprint can be represented by, for example, the position (coordinates), type, direction, and the like of the branch point or the end point following the ridge line from the image information of the fingerprint optically read. Also,
In addition, the features of the fingerprint can be represented by, for example, the positions where the ridges intersect, the center position of the fingerprint, the coordinates of the fingerprint delta, and the direction of the fingerprint ridge. Such fingerprint features are extracted as feature data (bit strings) encoded according to a certain rule. The extraction of the feature data is performed by the CPU 21.

By the way, when the face is adopted as the biometric information, the features can be represented by the positions and shapes of the eyes, the mouth and the nose, and when the palm shape is adopted, the width, thickness and finger of the palm are adopted. The feature can be represented by the length or the like. When the iris is adopted, the feature can be represented by a muscle pattern for adjusting the pupil opening, and when the retina is adopted, the feature can be represented by a capillary pattern. Furthermore, when voice is adopted, the feature can be represented by a spectrum envelope, pitch, pronunciation level, utterance speed, and the like, and when handwriting is adopted, the feature can be represented by stroke order, writing speed, writing pressure, and the like. . In particular, in personal authentication, a fingerprint, retina, iris, voice, and the like can be suitably used.

The IC card 3 includes a CPU 31 and a ROM 3
2, a RAM 33, and a host interface (host I / F) 34. CPU31
According to a program stored in the ROM 32, a memory area of the RAM 33 capable of storing and reading data is used to control communication with the host interface 34, store and read data to and from the RAM 33,
Further, it performs collation processing, response processing, and the like corresponding to a confirmation request for personal identification information (hereinafter, also referred to as a PIN). The personal identification information in this case is composed of a character string using alphabets, numbers, symbols, and the like, such as a personal identification number and a password used for general identification.

FIG. 2 is a diagram showing a specific example of the external appearance of the card terminal device 2. As shown in the figure, the card terminal device 2
As the operation display unit 26, a liquid crystal display 26A, an LED 26
B and a push button switch section 26C, and further includes a card mounting section 25A and a fingerprint sensor section 27A.

The liquid crystal display 26A includes a push button switch 26
A character string input in C or a character string (message) prepared in advance for operation guidance is displayed. LE
D26B is subjected to display control (lighting, blinking, etc.) in order to clearly indicate the position where the fingertip is pressed on the fingerprint sensor unit 27A, and is formed in a downward triangle so as to indicate the position of the fingerprint sensor unit 27A. . The push button switch section 26C is for the user operating the card terminal device 2 to input various information. This push button switch section 26C includes:
As an example, an alphanumeric input switch, an alphanumeric input changeover switch, an alphabetic uppercase / lowercase changeover switch, a correction switch, an input switch, and the like are provided.

On the other hand, the card mounting section 25A constitutes a part of the card interface 25 described above, and is provided on one side of the card terminal device 2. An elongated card insertion slot (not shown) corresponding to the size of the IC card 3 is formed in the card mounting section 25A, and the IC card 3 can be inserted into and removed from the card insertion slot (detachable). ing. The fingerprint sensor unit 27A is a part where a fingertip is actually pressed, and has a sensor function of reading a fingerprint of the pressed fingertip. This fingerprint sensor unit 27A
Constitutes a main part of the biological information acquisition unit 27 described above.

Next, in the information processing system according to the embodiment of the present invention, the processing operation of the personal authentication system realized by using the card terminal device 2 and the IC card 3 will be described.

FIG. 3 is a flowchart showing a processing procedure of the card terminal device 2 when a card is issued (at the time of contract). The processing of the illustrated card terminal device 2 is executed (starts processing) only when a preset input condition is satisfied in a state where the IC card 3 is inserted (mounted) in the card mounting section 25A. . The input conditions in this case include, for example, a case where a specific command is input from the host device 1 via the host interface 24, or a case where a specific push button switch which is the push button switch unit 26C of the operation display unit 26 continues for a certain period of time. Is pressed,
Alternatively, a case where a plurality of push-button switches are simultaneously pressed may be considered. At the time of issuing the card, the registration of the PIN with respect to the IC card 3 is performed according to the following processing before the use of the IC card 3.

First, the CPU 21 accepts a PIN entered by the owner (contractor) on the operation display section 26 (step S1). In this step S1, the CP
U21 displays the liquid crystal display 26A on the operation display unit 26.
String (e.g., "Enter the authentication code to be stored,
Finally, press [INPUT] "), and wait for an input from the push button switch unit 26C.
When an authentication code is input by a switch operation performed by the owner, the CPU 21 stores the input authentication code as a PIN in the RAM 23. The PIN stored in the RAM 23 is determined by the owner according to his / her own request, and is composed of an alphabetic character, a numeral, or a character string obtained by combining them. The input operation of the PIN at the push button switch section 26C may be performed by an operator of the company that issued the IC card 3 instead of the owner. Further, a character string constituting the PIN may be combined with a symbol.

Next, the CPU 21 sets the biological information acquisition unit 27
Is used to acquire the fingerprint information of the owner (step S
2). In this step S2, the CPU 21 instructs the operation display unit 26 to display a character string (for example, "Place your finger on the fingerprint sensor unit") on the liquid crystal display 26A, and instructs the owner to While prompting the presentation of the fingerprint, the LED 26B is instructed to blink in order to clearly indicate the position where the finger is to be placed, and the fingerprint sensor 27A is instructed to shift to the input standby state. Then, the fingerprint sensor unit 27 is actually
When a finger is placed on A, the fingerprint is
7A, the fingerprint information obtained thereby is stored in the RAM 23.

After that, the CPU 21 encrypts the PIN using the fingerprint information of the owner obtained earlier (step S3). In step S3, the CPU 21 instructs the operation display unit 26 to display a character string (for example, "Please wait a moment" or the like) on the liquid crystal display 26C, and informs the owner that processing is in a waiting state. And instruct the LED 26B to stop blinking. And CP
U21 extracts the characteristic data from the fingerprint information stored in the RAM 23, and uses this characteristic data as a secret key.
The PIN stored in the AM 23 is encrypted. Further, the CPU 21 determines the PIN obtained by the above encryption.
(Encryption information) is stored in the RAM 23.

Next, the CPU 21 sends an unencrypted original PIN (hereinafter also referred to as an unencrypted PIN) and an encrypted PIN (hereinafter also referred to as an encrypted PIN) to the IC card 3. Write (step S4). In step S4, the CPU 21 generates a command for instructing file creation using the non-encrypted PIN stored in the RAM 23 as data and a command for instructing file creation using the encrypted PIN also stored in the RAM 23 as data. Then, these commands are transmitted to the IC card 3 via the card interface 25 together with the non-encrypted PIN and the encrypted PIN which are the data to be written, thereby writing the PIN to the IC card 3.

Thus, inside the IC card 3, a data file of the non-encrypted PIN and a data file of the encrypted PIN are created in the RAM 33 in accordance with the instruction of the CPU 31 based on the analysis result of the command sent from the card terminal device 2. And each data file has an unencrypted PIN
And the encrypted PIN are stored. Of the unencrypted PIN and the encrypted PIN stored in the IC card 3 in this manner, the unencrypted PIN is data that cannot be read from the outside, and the encrypted PIN is data that can be read from the outside. That is, even if an attempt is made to read the non-encrypted PIN stored in the RAM 33 of the IC card 3 using the card terminal device 2I or another device (such as a card reader), this reading is performed by software or hardware on the card. Is prevented. That is, the non-encrypted P
After storing the IN, the IC card 3 itself has a function of preventing reading of the unencrypted PIN so that the unencrypted PIN is not taken out of the card.

With the above processing, the card terminal device 2 can use the card terminal device 2 alone and the IC card 3 with the non-encryption PIN determined by the owner, without using other external devices. An encrypted PIN encrypted using the characteristic data of the fingerprint information of the owner can be stored (registered).

FIG. 4 is a flowchart showing the processing operation of the information processing system (mainly the card terminal device 2) when using the card. First, the CPU 21 of the card terminal device 2
Monitors the state of insertion / removal of the IC card 3 with respect to the card mounting section 25A by confirming the state of the card interface 25 (step S11). When detecting that the IC card 3 has been inserted, the CPU 21
After performing a predetermined authentication process (details will be described later) (step S
12) Based on the authentication result, it is determined whether the user who uses the IC card 3 is the owner (step S13). If the CPU 21 determines that the user is the owner, the CPU 21 performs an arbitrary process (step S1).
4) If it is determined that the user is not the owner, all processing is terminated at that time.

In step S14, the card terminal device 2 notifies the host device 1 that the card has been inserted by a valid card holder. This notification is
U21 is performed via the host interface 24. Upon receiving the notification from the card terminal device 2, the host device 1
An arbitrary process (for example, a billing process or the like) using the confidential information stored inside the C card 3 is executed.

FIG. 5 is a flowchart showing the procedure of the authentication process (the process of step S12) by the card terminal device 2. First, the CPU 21 of the card terminal device 2
It is checked whether an encrypted PIN exists inside the card 3 (step S21). In step S21, the CPU 21 accesses the IC card 3 via the card interface 25, and
It is checked whether or not a file storing the encrypted PIN exists in 33. The encrypted PIN indicates a PIN encrypted using the characteristic data of the biological information of the owner (fingerprint in this embodiment) as described above. Inside the IC card 3, various types of information are stored as files as in a general file system. Therefore, the existence of the encrypted PIN can be confirmed by checking the existence of the file corresponding to the encrypted PIN.

When it is determined that the encrypted PIN exists inside the IC card 3, the process proceeds to step S22, and when it is determined that the encrypted PIN does not exist, the process proceeds to step S25. In step S25, the CPU 21 instructs the operation display unit 26 to display a character string (for example, "Please input an authentication code to be stored, and finally press [input]" on the liquid crystal display 26A). At the same time, an instruction is received to accept input from the push button switch unit 26C of the operation input unit 26.
When the user operates the push button switch 26C to input a PIN in accordance with the display of the character string on the liquid crystal display 26A, the input PIN (hereinafter referred to as input PIN) is input.
Is acquired by the CPU 21.

The processes in steps S21 and S25 are designed so that the IC card 3 in which the encrypted PIN is not stored can be handled without any problem. That is, in order to store the encrypted PIN in the IC card 3, it is necessary to present the fingerprint by the owner (contractor) at the time of issuing the card, but if the presentation of the fingerprint is refused or the finger is damaged or lost, If the fingerprint cannot be presented, the PI determined by the owner
There may be a case where only N (unencrypted PIN) is stored in the IC card 3, and the IC card 3 can be used even in such a case.

On the other hand, in step S22, the CPU 2
1 reads the encrypted PIN stored in the file corresponding to the encrypted PIN in the IC card 3 via the card interface 25. Next, the CPU 21 instructs the operation display unit 26 to display a character string (for example, "Place your finger on the fingerprint sensor unit") on the liquid crystal display 26A, and presents a fingerprint to the user. The LED 26B is instructed to blink to clarify the position where the finger is put, and the fingerprint sensor 27
A is instructed to shift to the input standby state. And
When the finger is actually put on the fingerprint sensor 27A, the fingerprint is read by the fingerprint sensor 27A, and the fingerprint information obtained by this is stored in the RAM 23 (step S23).

When the acquisition of the fingerprint information is completed, C
The PU 21 is provided with a liquid crystal display 26
The user instructs A to display a character string (for example, "Please wait a moment") to notify the user that the processing is in a waiting state, and instructs the LED 26B to stop blinking. Further, the CPU 21 extracts the characteristic data of the fingerprint information read by the fingerprint sensor unit 27A of the biometric information acquisition unit 27, and decrypts the encrypted PIN read in step S22 using the extracted characteristic data as a secret key. (Step S24). The PIN obtained by this decoding becomes the decoding information. The PIN thus decrypted (hereinafter, decrypted PIN) is used for PIN verification in the authentication processing.

Thereafter, the CPU 21 checks the decryption PIN (decryption information) obtained by the decryption in step S24 or the input PIN received in step S25 as the collation target P.
As the IN, the collation target PIN is input to the IC card 3, and the collation target PIN and the non-encrypted PIN are collated inside the IC card 3 to confirm whether the user is the owner (step S1). S26). In step S26, the CPU 21 transmits to the IC card 3 a command requesting personal identification by collating PINs using the PIN to be collated, and then receives a response (collation result) from the IC card 3 to the command. Command transmission and response reception are performed by the card interface 25.
Done through.

On the other hand, on the IC card 3 receiving the command from the card terminal device 2, the CPU 31 confirms whether the user is the original card owner.
Checks the non-encrypted PIN stored in the IC card 3 with the verification target PIN sent from the card terminal device 2 to check whether they match. And C
The PU 31 responds with positive data indicating that the collation target PIN and the non-encrypted PIN match, and responds with negative data indicating that they do not match. As a result, the card terminal device 2 can determine whether the user is the owner or not, based on whether the response from the IC card 3 is positive data or negative data.

Here, if the PIN to be verified input to the IC card 3 is a decryption PIN, and the fingerprint information obtained in step S23 is that of the card owner, the characteristic data of the fingerprint information is , Is the same as the characteristic data used in encrypting the PIN when issuing the card. Therefore, the decrypted PIN obtained when decrypting the encrypted PIN matches the non-encrypted PIN stored in the IC card 3. On the other hand, if the fingerprint information obtained in step S23 is other than that of the card owner, that is, that of a third party, the characteristic data of the fingerprint information is the characteristic data used in encrypting the PIN at the time of issuing the card. Will be different. Therefore, the encryption PIN
Will be different from the non-encryption PIN stored in the IC card 3.

With the above processing, the user using the IC card 3 does not need to input the PIN each time,
Just by presenting your own fingerprint, you can automatically receive personal authentication using a PIN. As a result, even if the card owner forgets the PIN determined by himself, the IC card 3 can be used without any problem. In addition, since the cardholder does not need to input the PIN, there is no possibility of inputting the PIN, and there is no possibility that the input operation of the PIN is stolen by a malicious third party.

Further, the unencrypted PIN registered (stored) in the IC card 3 is not read out of the card once registered, so that even if the card is lost, Can prevent the unencrypted PIN from being known. Furthermore, since the fingerprint information of the user is used for the encryption process, and the actual personal authentication process is performed by collating the PIN, it is easy to apply to an existing personal authentication system or personal authentication device. Also, in the case of performing personal authentication by collating biometric information such as fingerprint information, it is necessary to register and accumulate the biometric information of the cardholder in the IC card 3 or a database in advance. Although the amount of data is enormous, the use of biometric information for PIN encryption as described above reduces the amount of data for authentication processing, and also allows for easy and quick data verification. Becomes possible.

In the above-described embodiment, the card terminal device 2 having the liquid crystal display 26A, the LED 26B, and the push button switch 26C has been exemplified as the operation display unit 26, but other than this, for example, the operation display unit 26 As
As shown in FIG. 6, even the card terminal device 2 having only the liquid crystal display 26A and the LED 26B and not having the push button switch unit uses the IC card 3 in which the unencrypted PIN and the encrypted PIN are stored in advance. Thus, the same authentication processing as described above can be performed.

Generally, in a smart card, an upper limit is set on the number of times an incorrect PIN is entered into a smart card so that a PIN cannot be searched for by brute force, and an incorrect PIN is input beyond the upper limit. If
At that time, a method of restricting the use of the card function is adopted. The unauthorized PIN is a PIN that does not match the PIN (unencrypted PIN stored in the card) determined by the card holder at the time of registration (at the time of issuing the card).

On the other hand, in the personal authentication process using the card terminal device 2, the biometric information of the same user is necessarily read and acquired uniformly depending on the sensor installation environment of the biometric information acquisition unit 27, the state of the user, and the like. Not necessarily.
Therefore, in some cases, even if the encrypted PIN is decrypted with the characteristic data of the cardholder's biometric information, the decrypted PIN obtained by the decryption may be input to the smart card as an incorrect PIN. . If an incorrect PIN is repeatedly entered in such a situation, the number of times the PIN is entered may exceed the upper limit and the use of the card function may be restricted.

Therefore, in another embodiment of the present invention, the card terminal device 2 is provided with the following processing function.

FIG. 7 is a flowchart showing a processing procedure of the card terminal device 2 when a card is issued (at the time of contract). The processing of the illustrated card terminal device 2 is executed only when the preset input condition is satisfied in a state where the IC card 3 is inserted (mounted) in the card mounting section 25A, similarly to the above-described embodiment ( Processing is started).

First, the CPU 21 receives the PIN input by the owner (contractor) on the operation display unit 26 (step S31), and then obtains the fingerprint information of the owner using the biometric information obtaining unit 27. (Step S32). The processing of steps S31 and S32 is performed in the same manner as the processing of steps S1 and S2 shown in FIG.

Next, the CPU 21 encrypts the PIN using the fingerprint information of the owner obtained earlier,
Using the fingerprint information, a predetermined data string for verification is encrypted (step S32). PIN encryption is
This is performed in the same manner as in step S3 shown in FIG. The encryption of the verification data string is performed by encrypting a data string prepared in advance for verification (arbitrarily settable) using characteristic data (private key) extracted from the fingerprint information of the owner acquired earlier. This is done by:

Next, the CPU 21 writes, in the IC card 3, an encrypted data string obtained by encrypting the verification data, in addition to the non-encrypted PIN and the encrypted PIN (step S34). Each data (unencrypted PIN,
The writing of the encrypted PIN (encrypted data string) is performed in the same manner as in the previous embodiment. Thereby, each data of the non-encrypted PIN, the encrypted PIN, and the encrypted data string can be stored (registered) in the IC card 3.

FIG. 8 is a flowchart showing a procedure of an authentication process by the card terminal device 2. First, the CPU 21
Checks whether an encrypted data string exists inside the IC card 3 (step S41). This step S
At 41, the CPU 21 accesses the IC card 3 via the card interface 25, and
It is checked whether or not a file for storing the encrypted data string exists in the RAM 33 in the server. The encrypted data sequence refers to a data sequence encrypted using characteristic data of the biological information of the owner as described above.

If it is determined that the encrypted data string exists inside the IC card 3, the process proceeds to step S42, and if it is determined that the encrypted data string does not exist, the process proceeds to step S48. In step S48, the CPU 21 accepts the input PIN input by the user on the operation display unit 26 by the same processing as in step S25 in FIG.

On the other hand, in step S42, the CPU 2
1 reads an encrypted data string stored in the file from the file corresponding to the encrypted data string in the IC card 3 via the card interface 25. Next, the CPU 21 instructs the operation display unit 26 to display a character string (for example, "Place your finger on the fingerprint sensor unit") on the liquid crystal display 26A, and presents a fingerprint to the user. The LED 26B is instructed to blink in order to urge the user and to clearly indicate the position on which the finger is to be placed.
7A is instructed to shift to an input standby state. Then, when the finger is actually put on the fingerprint sensor unit 27A, the fingerprint is read by the fingerprint sensor unit 27A, and the obtained fingerprint information is stored in the RAM 23 (step S43).

When the acquisition of the fingerprint information is completed, C
The PU 21 is provided with a liquid crystal display 26
The user instructs A to display a character string (for example, "Please wait a moment") to notify the user that the processing is in a waiting state, and instructs the LED 26B to stop blinking. Further, the CPU 21 extracts the characteristic data of the fingerprint information read by the fingerprint sensor unit 27A of the biometric information acquisition unit 27, and decrypts the encrypted data string read in step S42 using the extracted characteristic data as a secret key. (Step S44).

Thereafter, the CPU 21 determines whether or not the data string obtained by the decryption in step S44 matches a preset data string for verification (step S45). Proceeding to S46, if it is determined that they do not match, the process ends. If it is determined that the data strings do not match,
The process may be terminated after displaying a guidance message to that effect on the liquid crystal display 26A, or the process may return to step S43 and resume from the acquisition of fingerprint information.

Next, in step S46, the CPU 2
1 reads the encrypted PIN stored in the file corresponding to the encrypted PIN in the IC card 3 via the card interface 25. Next, the CPU 21 instructs the operation display unit 26 to display a character string (for example, "Place your finger on the fingerprint sensor unit") on the liquid crystal display 26A, and presents a fingerprint to the user. The LED 26B is instructed to blink to clarify the position where the finger is put, and the fingerprint sensor 27
A is instructed to shift to the input standby state. And
When the finger is actually put on the fingerprint sensor 27A, the fingerprint is read by the fingerprint sensor 27A, and the fingerprint information obtained by this is stored in the RAM 23 (step S47).

Subsequently, the CPU 21 instructs the operation display section 26 to display a character string (for example, "Please wait a moment" or the like) on the liquid crystal display 26A, and informs the user that the processing is in a waiting state. And instruct the LED 26B to stop blinking. Further, the CPU 21 extracts feature data of the fingerprint information read by the fingerprint sensor unit 27A of the biometric information acquisition unit 27, and decrypts the encrypted PIN read in step S46 using the extracted feature data as a secret key. (Step S47).

Thereafter, the CPU 21 sets the decryption PIN obtained by the decryption in step S47 or the input PIN received in step S48 to the IC card 3 as the collation target PIN. Enter the PIN to be checked inside the IC card 3
By comparing the user with the non-encrypted PIN, it is determined whether the user is the owner (step S49).
The process in step S49 is performed in step S2 in FIG.
6 is performed in the same manner.

With the above processing, the decryption of the encrypted PIN by the CPU 21 (the processing in step S47)
This is performed only when the data sequence obtained by decrypting the encrypted data sequence matches the preset verification data sequence, so that it is possible to prevent an unauthorized PIN from being input to the IC card 3 beforehand. it can. Therefore, even if a situation occurs in which the biometric information (fingerprint information) of the user cannot be read uniformly, there is no possibility that the use of the card function is restricted due to this. Also, even if the fingerprint information is presented to a third party other than the card holder,
Since the PIN cannot be entered into the C card 3, the PIN collation in the IC card 3 can be substantially disallowed.

[0066]

As described above, according to the present invention, a user who uses a portable storage medium automatically presents his / her biometric information without having to input personal identification information. The identification information is input to the portable storage medium, and the personal authentication using the personal identification information can be performed by collation in the portable storage medium. This can eliminate the trouble of inputting the personal identification information and perform the personal authentication with high security.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration example of an information processing system according to an embodiment of the present invention.

FIG. 2 is a diagram illustrating a specific external example of a card terminal device.

FIG. 3 is a flowchart showing a processing procedure when issuing a card.

FIG. 4 is a flowchart showing a processing procedure when using a card.

FIG. 5 is a flowchart illustrating a procedure of an authentication process.

FIG. 6 is a diagram illustrating another example of the external appearance of the card terminal device.

FIG. 7 is a flowchart showing another processing procedure when issuing a card.

FIG. 8 is a flowchart illustrating another procedure of the authentication process.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Host device, 2 ... Card terminal device, 3 ... IC card, 21, 31 ... CPU, 22, 32 ... ROM, 23,
33: RAM, 24, 34: Host interface,
25 card interface, 25A card mounting section, 26 operation display section, 26A liquid crystal display, 26B
LED, 26C: push button switch unit, 27: biological information acquisition unit, 27A: fingerprint sensor unit

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) H04L 9/32 H04L 9/00 673D F-term (Reference) 2C005 HA02 HB09 JA01 LB32 LB34 MA04 MB08 SA02 SA05 SA06 SA15 5B035 AA14 BB09 BB11 BC01 CA11 5B058 CA02 CA24 KA01 KA02 KA04 KA06 KA12 KA31 KA33 KA37 KA38 5B085 AE02 AE09 AE12 5J104 AA07 AA16 EA04 EA08 EA22 KA01 KA16 KA17 NA05 NA42 NA40 NA42

Claims (7)

[Claims] 1. A personal authentication system using a portable storage medium and a personal authentication terminal device, wherein the portable storage medium includes personal identification information required for using the portable storage medium, The personal identification terminal device stores encryption information obtained by encrypting the personal identification information using characteristic data extracted from biometric information of the owner of the portable storage medium. Acquiring means for acquiring biometric information of a user who uses the method, extracting means for extracting characteristic data from the biometric information of the user acquired by the acquiring means, and reading the encrypted information stored in the portable storage medium Reading means, decoding means for decoding the encrypted information read by the reading means using characteristic data of the biometric information of the user extracted by the extracting means, By inputting the decryption information obtained by the encryption into the portable storage medium and collating the decryption information and the personal identification information inside the portable storage medium, A personal authentication system comprising: a confirmation unit for confirming whether there is a user. 2. The personal authentication according to claim 1, wherein the authentication terminal device includes a registration unit for registering the personal identification information and the encryption information in the portable storage medium. system. 3. A personal authentication method using a portable storage medium and a personal authentication terminal device, comprising: personal identification information required for using the portable storage medium;
Registering, in the portable storage medium, encrypted information obtained by encrypting the personal identification information using characteristic data extracted from biometric information of the owner of the portable storage medium; and using the portable storage medium. Acquiring biometric information of the user performing the extraction, extracting the characteristic data from the acquired biometric information of the user, reading the encrypted information stored in the portable storage medium, and reading the read encrypted information. Decoding using the characteristic data of the biometric information of the user; and inputting the decoding information obtained by the decoding into the portable storage medium, and the decoding information and the decoding inside the portable storage medium. Confirming whether the user is the owner by collating personal identification information with the personal identification information. . 4. Encrypting the personal identification information using personal identification information required for using the portable storage medium and characteristic data extracted from biometric information of the owner of the portable storage medium. From a portable storage medium that stores information and
A reading unit that reads the encrypted information; an obtaining unit that obtains biometric information of a user who uses the portable storage medium; an extracting unit that extracts feature data from the biometric information of the user obtained by the obtaining unit; Decryption means for decrypting the encrypted information read by the read means using characteristic data of the biometric information of the user extracted by the extraction means; and decryption obtained by decryption by the decryption means. Confirmation means for inputting information into the portable storage medium and collating the decrypted information with the personal identification information inside the portable storage medium to confirm whether the user is the owner or not. A personal authentication terminal device comprising: 5. The personal authentication terminal device according to claim 4, further comprising a registration unit for registering the personal identification information and the encrypted information in the portable storage medium. 6. The portable storage medium stores an encrypted data string obtained by encrypting a preset verification data string using characteristic data extracted from the owner's biometric information, Prior to decrypting the encrypted information, the decrypting means extracts the encrypted data string read out from the portable storage medium by the reading means, and extracts the biometric information of the user extracted by the extracting means. 5. The personal authentication according to claim 4, wherein the decryption is performed using the characteristic data, and the encrypted information is decrypted only when the data sequence obtained by the decryption matches the verification data sequence. Terminal device. 7. A receiving means for receiving an input of personal identification information determined by an owner of a portable storage medium; an obtaining means for obtaining biological information of the owner; a living body of the owner obtained by the obtaining means. Extracting means for extracting characteristic data from information; encrypting means for encrypting the personal identification information received by the receiving means using characteristic data of the biological information of the owner extracted by the extracting means; A personal authentication terminal device comprising: a writing unit that writes the personal identification information received by the reception unit and the encrypted information encrypted by the encryption unit to the portable storage medium.