JP2004086442A - Personal identification unit, its method and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a personal identification unit, its method and an authentication method which permit identification by a identification source even if biological data of biological characteristic required by the identification source can not be acquired. <P>SOLUTION: A memory 42 of an IC 3 stores voice pattern data for collation and handwriting data acquired from a person previously. A collation part 43 collates user's voice pattern data detected with a microphone 31-1 with the voice pattern data for collation. A control part 44, if it acknowledges the authenticity of the user on the basis of the collation result, makes the handwriting data read from the memory 42 to be transmitted to a server device through a communication part 34. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a personal verification apparatus used for performing personal verification using personal biometric data such as a fingerprint and a voiceprint, and a method and an authentication method thereof.
[0002]
[Prior art]
For example, when logging in to a server device via a network, personal authentication as to whether or not the user is authorized may be performed using an IC (Integrated Circuit) card or the like.
In recent years, such a personal authentication system using an IC card, for example, transmits the biometric data detected by the biometric data detecting means of the terminal device to the server device, and the server device pre-registers the biometric data received from the terminal device with The personal authentication is performed by collating the stored biometric data for verification of the individual.
In such a personal authentication system, for example, a fingerprint of a person is constituted by a large number of ridges, and is made use of the characteristics of biometric data that a person is immovable throughout life and different from everyone, and a voiceprint is different from everyone. Perform personal authentication.
[0003]
[Problems to be solved by the invention]
In the personal authentication system described above, the server device may request biometric data of predetermined biometric characteristics such as a fingerprint and a voiceprint.
However, depending on the function of the terminal device, it may not be possible to detect the biological data of the biological characteristics requested by the server device. In that case, there is a problem that the individual cannot receive the service provided by the server device.
For example, when the terminal device is a mobile phone device, the mobile phone device has a microphone, so that biometric data of voice can be obtained, but since it does not have a tablet, handwriting data cannot be obtained. Therefore, when the server device performs personal verification using only handwriting data, the service provided by the server device cannot be received.
In addition, some individuals may not be able to acquire biometric data of biometric characteristics required by the server device due to their physical reasons.
[0004]
The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a personal verification device and a method thereof that enable verification by the verification source even when biometric data of the biometric characteristics required by the verification source cannot be obtained. To provide an authentication method.
[0005]
[Means for Solving the Problems]
In order to achieve the above object, a personal verification apparatus according to a first aspect of the present invention includes a storage unit for storing verification biometric data and first biometric data previously acquired from an individual, and a biometric data detection unit. Collating means for collating the second biometric data of the individual with the biometric data for collation, determining the validity of the individual based on the result of the collation, and determining that the individual is valid And control means for reading out the first biometric data from the storage means and transmitting the first biometric data to the verification source of the individual.
[0006]
The operation of the personal verification device of the first invention is as follows.
The collation unit collates the second biometric data of the individual detected by the biometric data detection unit with the biometric data for comparison read from the storage unit.
Then, the control means determines the legitimacy of the individual based on the result of the collation.
Then, the control unit controls the first biometric data to be read from the storage unit and transmitted to the verification source of the individual on condition that the individual is determined to be valid.
[0007]
Further, in the personal verification device of the first invention, preferably, the control unit performs the verification on the second biometric data detected by the biometric data detection unit when the first mode is designated. Control to transmit the original, if the second mode is specified, determine the legitimacy of the individual based on the result of the collation, on the condition that the individual is determined to be legitimate, The first biometric data is read from the storage means for transmission to the verification source.
In addition, the personal verification device of the first invention preferably further includes a communication unit that communicates with the verification source, and the control unit transmits the first biometric data read from the storage unit to the communication unit. The transmission is controlled to be transmitted to the transmission source via the means.
[0008]
The personal verification device of the first invention preferably further includes the biometric data detecting means.
In the personal verification device of the first invention, preferably, the first biometric data and the second biometric data are data indicating different biometric characteristics of the individual.
[0009]
A personal verification method according to a second aspect of the present invention is a personal verification method performed by a personal verification apparatus that holds biometric data for verification and first biometric data obtained in advance from an individual, and is detected by a biometric data detection unit. The second biometric data of the individual and the collation biometric data are collated, and the validity of the individual is determined based on the result of the collation, provided that the individual is determined to be valid, Transmitting the first biometric data to the verification source of the individual;
[0010]
An authentication method according to a third aspect of the present invention is an authentication method for performing personal authentication using a terminal device holding first biometric data and biometric data for comparison previously obtained from an individual, and the terminal device, wherein the terminal device Detects the second biometric data of the individual, the terminal device collates the second biometric data with the biometric data for collation, and the terminal device sets the individual based on a result of the collation. When the validity is recognized, the first biometric data is transmitted to the authentication device, and the authentication device performs verification using the first biometric data to authenticate the individual.
[0011]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, an authentication system according to an embodiment of the present invention will be described.
FIG. 1 is a diagram illustrating an authentication system 1 according to the present embodiment.
In the authentication system 1 shown in FIG. 1, for example, the mobile phone device 5_1 accesses the server devices 2 and 52 in a state where the IC card 4 is mounted, and the validity is recognized through personal authentication by the server devices 2 and 52. Then, the user logs in to the server devices 2 and 52 to receive the service provided by the server device 2.
The IC card 4 is, for example, a SIM (Subscriber Identity Module) card.
Here, the server device 2 corresponds to the verification source and the authentication device of the present invention.
The IC 3 corresponds to the personal verification device of the present invention.
[0012]
The authentication system 1 detects the user's handwriting when the mobile phone device 5_1 logs in (accesses) to the server device 2 that performs personal authentication by collating the characteristic data of the handwriting of the user (individual). When the tablet is not provided and the microphone 31_1 for detecting the voiceprint is provided, the IC 3 uses the feature data extracted from the voiceprint data of the user detected by the microphone 31_1 and the feature data of the user's voiceprint stored in advance. The feature data of the user is collated with the collation feature data, and the feature data of the handwriting of the user stored in advance is transmitted to the server device 2 via the mobile phone device 5_1 on condition that they match.
The server device 2 authenticates the user by comparing the characteristic data of the handwriting of the user received from the mobile phone device 5_1 with the matching characteristic data of the handwriting of the user stored in advance.
[0013]
When the mobile phone device 5_1 logs in to the server device 52, the authentication system 1 transmits to the server device 52 the user's voiceprint feature data detected by the microphone 31_1 of the mobile phone device 5_1.
The server device 52 authenticates the user by comparing the feature data of the voiceprint of the user received from the mobile phone device 5_1 with the matching feature data of the voiceprint of the user stored in advance.
[0014]
Hereinafter, each component shown in FIG. 1 will be described.
[Server device 2]
For example, upon receiving an access request from the mobile phone device 5_1, the server device 2 requests the mobile phone device 5_1 for characteristic data of the handwriting of the user.
The server device 2 stores feature data for collation of handwriting of a user registered in advance.
When the server device 2 receives the handwriting feature data from the mobile phone device 5_1, the server device 2 checks the feature data against the previously stored handwriting matching feature data and determines that they match. Then, the login by the mobile phone device 5_1 is accepted, and a predetermined service is provided to the user via the mobile phone device 5_1.
On the other hand, when the server device 2 determines that the two do not match as a result of the above-mentioned collation, the server device 2 notifies the mobile phone device 5_1 of the fact.
[0015]
[Server 52]
For example, upon receiving an access request from the mobile phone device 5_1, the server device 52 requests the mobile phone device 5_1 for characteristic data of the voiceprint of the user.
The server device 52 stores the feature data for collation of the voiceprint of the user registered in advance.
When the server device 52 receives the voiceprint feature data from the mobile phone device 5_1, the server device 52 compares the feature data with the previously stored voiceprint verification feature data and determines that they match. Then, the login by the mobile phone device 5_1 is accepted, and a predetermined service is provided to the user via the mobile phone device 5_1.
On the other hand, if the server device 52 determines that the passwords do not match as a result of the comparison, the server device 52 notifies the mobile phone device 5_1 of the fact.
[0016]
[Mobile phone device 5_1]
As shown in FIG. 1, the mobile phone device 5_1 has a communication unit 6_1.
As shown in FIG. 2, the communication unit 6_1 is connected to, for example, a microphone 31_1, a feature extraction unit 32_1, a memory 33, a communication unit 34, and an I / F unit 35 via a bus 30, and exchanges data between them. This is performed via the bus 30.
Note that all or a part of the function of the feature extraction unit 32_1 may be realized by a form in which a program is executed by an arithmetic circuit such as a CPU.
[0017]
The microphone 31_1 detects voiceprint data of a voice uttered by an individual (user).
The feature extraction unit 32_1 executes a predetermined feature extraction program based on the voiceprint data input from the microphone 31_1, and generates feature data obtained by extracting predetermined features of the personal voiceprint.
The communication unit 34 transmits the voiceprint feature data generated by the feature extraction unit 32_1 to the server device 52 when logging in to the server device 52, and transmits the voiceprint feature data from the IC 3 via the I / F unit 35 when logging in to the server device 2. The input characteristic data of the handwriting is transmitted to the server device 2 via the network 10.
The I / F unit 35 exchanges data with the IC 3 while the IC 3 is mounted.
[0018]
[IC3]
As shown in FIG. 2, the IC 3 includes, for example, an I / F unit 41, a memory 42, a collation unit 43, and a control unit 44.
The IC 3 is, for example, a tamper-resistant circuit, and has a configuration in which it is difficult to monitor and acquire internal data and processing from outside.
Here, the memory 42 corresponds to the storage unit of the present invention, the matching unit 43 corresponds to the matching unit of the present invention, and the control unit 44 corresponds to the control unit of the present invention.
[0019]
The I / F unit 41 exchanges data with the I / F unit 35 of the communication unit 6_1 while the IC 3 is set in the communication unit 6_1.
The memory 42 stores, for example, feature data of the handwriting of the user, feature data for collation of the voiceprint, and a program for collation of the voiceprint of the user written at the time of registration and update.
[0020]
When, for example, the voiceprint detection characteristic data is input from the communication unit 6_1 via the I / F unit 41, the verification unit 43 executes the verification program read from the memory 42, and reads out the input detection characteristic data and the input from the memory 42. The matching result is compared with the matching feature data, and the matching result is output to the control unit 44.
[0021]
For example, when the first mode is designated by the user, the control unit 44 transmits the characteristic data of the voiceprint of the user detected by the communication unit 6_1 with the microphone 31_1 and generated by the characteristic extraction unit 32_1 to the communication unit 34. Is transmitted to the server device 52 via the.
When the second mode is designated, the control unit 44 determines that the user is valid and reads out the data from the memory 42 when the result of the comparison by the matching unit 43 indicates a match. Control is performed to transmit the characteristic data of the handwriting of the user to the server device 2 via the I / F unit 35 and the communication unit 34.
The designation of the first mode and the second mode may be performed, for example, by the user operating an operation unit (not shown) of the mobile phone device 5_1, or the mobile phone device 5_1 May be automatically accessed and specified automatically based on the characteristics of the characteristic data requested by the server devices 2 and 52.
[0022]
Hereinafter, an operation example when the mobile phone device 5_1 illustrated in FIG. 1 logs in to the server device 2 in the above-described second mode will be described.
FIG. 3 is a flowchart for explaining the operation example.
Step ST1:
The microphone 31_1 of the communication unit 6_1 in the mobile phone device 5_1 detects voiceprint data of a voice uttered by the user and outputs the voiceprint data to the feature extraction unit 32_1.
[0023]
Step ST2:
The feature extraction unit 32_1 of the communication unit 6_1 executes a predetermined feature extraction program based on the voiceprint data input from the microphone 31_1, and generates voiceprint feature data obtained by extracting predetermined features of the personal voiceprint.
[0024]
Step ST3:
The voiceprint feature data generated in step ST2 is output to the IC 3 via the I / F unit 35 of the communication unit 6_1.
[0025]
Step ST4:
The matching unit 43 of the IC 3 executes the matching program read from the memory 42, and matches the voiceprint feature data input from the communication unit 6_1 via the I / F unit 41 with the voiceprint read from the memory 42 in step ST3. The comparison result is output to the control unit 44 by collating with the use characteristic data.
[0026]
Step ST5:
The control unit 44 of the IC 3 proceeds to the process of step ST6 when the collation result of the collation unit 43 indicates a match, otherwise performs the process of notifying that the user cannot log in to the server device 2 and then performs the process. To end.
[0027]
Step ST6:
The control unit 44 of the IC 3 reads out the characteristic data of the handwriting of the user from the memory 42 and outputs this to the communication unit 6_1 via the I / F unit 41.
[0028]
Step ST7:
The communication unit 34 of the communication unit 6_1 transmits the handwriting characteristic data input from the IC 3 in step ST6 to the server device 2 via the network 10.
[0029]
Step ST8:
If the server device 2 matches the handwriting characteristic data received from the communication unit 6_1 in step ST7 with the matching handwriting characteristic data stored in advance, the mobile phone device The login by 5_1 is accepted, and if they do not match, the login is rejected.
[0030]
When the mobile phone device 5_1 logs in to the server device 52, as described above, the voiceprint feature data obtained from the voiceprint data detected by the microphone 31_1 is transmitted from the mobile phone device 5_1 to the server device 52 for verification. I do.
[0031]
As described above, according to the authentication system 1, it is possible to perform the collation by the server device 2 that performs handwriting authentication using the mobile phone device 5_1 that does not include a tablet or the like for detecting handwriting. Therefore, the user can receive the service provided by the server device 2 using the mobile phone device 5_1.
Further, according to the authentication system 1, the IC 3 performs the collation based on the immutable voiceprint and transmits only the characteristic data of the handwriting that can be changed on the network 10. In this case, security can be ensured by changing the handwriting collation characteristic data held in the server device 2.
In the above-described embodiment, the case where the mobile phone device 5_1 does not include a detection unit such as a tablet for handwriting detection is exemplified. However, even when the detection unit is provided with the detection unit, the detection unit is malfunctioning. The authentication system 1 is also effective when used by a user who cannot detect handwriting for physical reasons.
[0032]
The present invention is not limited to the embodiments described above.
For example, as shown in FIG. 4, the present invention is also applicable to a case where a user logs in to a server device 52 that performs personal authentication using a voiceprint using the PC unit 6_2 and the IC card 54 of the PC 5_2 having the tablet 31_2 and not having the microphone. Is similarly applicable.
In this case, the IC 53 holds a handwriting collation program, user handwriting collation feature data, and voiceprint feature data.
The handwriting data is detected using the tablet 31_2 of the PC 5_2, and the feature data obtained from the handwriting data is output to the IC 53.
Then, in the IC 53, a handwriting collation program is executed, and the handwriting characteristic data input from the PC unit 6_2 is collated with the handwriting collation characteristic data. The feature data of the voiceprint of the user is transmitted to the server device 52 via the unit 6_2.
Then, in the server device 52, personal authentication is performed by comparing the voiceprint characteristic data received from the PC unit 6_2 with the previously stored voiceprint verification characteristic data of the user.
According to the example illustrated in FIG. 4, even when the PC 5_2 does not include a microphone, it is possible to log in to the server device 52 that performs voiceprint authentication using the PC 5_2.
[0033]
For example, in the above-described embodiment, the case where the IC 3 holds one type of living body characteristic data to be transmitted to the server device is illustrated, but the IC 3 has two or more types of living body characteristic data for the user, The two or more types of feature data may be selectively transmitted to the server device according to the characteristics of the feature data requested by the server device.
Further, according to the present invention, the terminal device detects two or more types of biometric data of the user, compares the biometric data with the corresponding matching feature data, and sets the server device only when all the matching results match. The characteristic data of the requested characteristic may be transmitted to the server device.
[0034]
Further, according to the present invention, a process of generating feature data from biometric data such as voiceprint data and handwriting data may be performed in the IC 3.
[0035]
In the above-described embodiment, fingerprint data, handwriting data, and voiceprint data are illustrated as biometric data. However, other biometric data such as personal iris and face image data detected by a camera or the like may be used. Is also good.
[0036]
In addition, the collation performed by the IC 3 may be configured such that the criterion for determining the coincidence is increased and the threshold value of the collation rate is increased, as compared with the collation performed by the server device.
[0037]
Further, the feature data used for matching in the IC 3 and the feature data for matching may be transmitted to the server device 2, and the reliability of the matching by the IC 3 may be determined in the server device 2.
[0038]
【The invention's effect】
Advantageous Effects of Invention According to the present invention, it is possible to provide a personal verification apparatus, a method and an authentication method that enable verification by the verification source even when biometric data of the biometric characteristics required by the verification source cannot be obtained.
[Brief description of the drawings]
FIG. 1 is a diagram for explaining an authentication system according to an embodiment of the present invention.
FIG. 2 is a functional block diagram of a communication unit and an IC shown in FIG. 1;
FIG. 3 is a diagram for explaining an operation example of the authentication system shown in FIG. 1;
FIG. 4 is a diagram for explaining an authentication system according to a modified example of the embodiment of the present invention.
[Explanation of symbols]
3 IC, 4 IC card, 5_1 mobile phone device, 6_1 communication unit, 31_1 microphone, 32_1 feature extracting unit, 33 memory, 34 communication unit, 35 I / F unit, 41 I / F F unit, 42 memory, 43 collating unit, 44 control unit

Claims (7)

Storage means for storing the biometric data for verification and first biometric data obtained in advance from an individual;
Collating means for collating the second biometric data of the individual detected by the biometric data detecting means with the biometric data for collation,
Judging the legitimacy of the individual based on the result of the collation, and reading the first biometric data from the storage means and transmitting it to the collation source of the individual on condition that the individual is judged to be legitimate And a control means for controlling the personal verification. When the first mode is designated, the control means performs control for transmitting the second biometric data detected by the biometric data detection means to the collation source, and the second mode is designated. Has been determined, the legitimacy of the individual is determined based on the result of the verification, and the first biometric data is transmitted to the verification source on condition that the individual is determined to be valid. The personal verification device according to claim 1, wherein the personal verification device is read from the storage unit. Further comprising communication means for communicating with the collation source,
The personal verification apparatus according to claim 1, wherein the control unit controls the first biometric data read from the storage unit to be transmitted to the verification source via the communication unit. The personal verification device according to claim 1, further comprising the biometric data detection unit. The personal verification device according to claim 1, wherein the first biometric data and the second biometric data are data indicating different biometric characteristics of the individual. A personal verification method performed by a personal verification device that holds biometric data for verification and first biometric data obtained in advance from an individual,
Comparing the second biometric data of the individual detected by the biometric data detection means with the biometric data for verification,
Judge the legitimacy of the individual based on the result of the collation,
An individual verification method for transmitting the first biometric data to a verification source of the individual on condition that the individual is determined to be valid. An authentication method for performing personal authentication using a terminal device and an authentication device holding first biometric data and matching biometric data obtained in advance from an individual,
The terminal device detects a second biometric data of the individual,
The terminal device compares the second biometric data with the biometric data for verification,
When the terminal device recognizes the legitimacy of the individual based on the result of the collation, the terminal device transmits the first biometric data to the authentication device,
An authentication method, wherein the authentication device performs authentication using the first biometric data to authenticate the individual.

Images