JP2005115583A - User authentication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To realize a user authentication system which has low management cost of a user, and high security and privacy. <P>SOLUTION: In registering a manager, a manager registration terminal 100 generates a public key (Pa) and a private key (Sa) 134; acquires biology information on the manager and creates a template; generates a digital signature to a combination of the public key (Pa) and a template; creates manager authentication data 117 to send them to an authentication device 110; and sends the private key (Sa) to a management token 130. The authentication device 110 receives the manager authentication data 117 and saves them. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a user authentication system using a combination of a token and biometric information.

  For example, a technique described in Patent Document 1 is known as a technique that uses authentication in which a token and biometric information are combined for login to a computer system. In this technique, the token acquires the fingerprint information of the user, compares it with the template stored in the token, and transmits the user ID and password to the computer system when the verification is successful.

  Moreover, there is a technique described in Patent Document 2 as a technique for authenticating using a user's biometric information when providing a service to a user terminal. In this technology, biometric information input by a user from a biometric information input device connected to a user terminal is transmitted to a Web server that provides services to a legitimate user, and the Web server transmits the received biometric information to an authentication server. Send. The authentication server centrally manages user templates, authenticates the user by collating the received biometric information with the registered biometric information, and transmits the authentication result to the Web server.

Japanese Patent Laid-Open No. 11-25246

JP 2000-92046 A

  Authentication techniques using personal belongings (tokens) or passwords may cause unauthorized users to be authenticated when tokens are stolen or passwords are estimated, which is a security problem. Therefore, authentication based on personal biometric information such as fingerprints (biometric authentication) is effective.

  However, the accuracy of biometric authentication is not 100%, and others can be accepted by mistake. It is also known that biometric information such as fingerprints can be forged relatively easily. It is therefore necessary to combine tokens and passwords with biometric authentication. In particular, the combination of token and biometric authentication has the advantage of high convenience and safety.

  When tokens and biometric authentication are combined, biometric information sensors can be added to the protected side, such as doors, or to the token side, but they are highly resistant to temperature, humidity, vibration, etc. When durability is required, it is necessary to add to the token side.

  As an authentication technique in which a sensor is added to a token in this way and the token and biometric information are combined, there is a technique described in Patent Document 1 described above. However, since this technique stores the user's template in the token, it is necessary to re-register the template when changing the correspondence between the user and the token. Moreover, since this technique performs registration of biometric information by the user himself / herself, it cannot prevent others from illegally registering his / her biometric information.

  Further, the technique described in Patent Document 2 has a privacy problem because the authentication server collectively manages user templates, and the management cost for safely managing the templates increases. In addition, when used for a door lock of a car, the communication between the car and the authentication server may be impossible geographically, and in this case, the user cannot be authenticated.

  In order to prevent unauthorized registration of biometric information, the administrator needs to confirm the correspondence between the user and the token at the time of registration. Furthermore, it is important to prevent unauthorized impersonation of the administrator.

  Also, when managing a large number of users' templates, it is necessary to ensure privacy and prevent security degradation due to template leakage.

  An object of the present invention is to realize user management with high security, simple and low cost by combining a token and biometric authentication.

  In order to solve the above problems, the present invention provides a biometric information acquisition function, a communication function, an administrator registration terminal having registered terminal identification information, a biometric information matching function, a communication function, and an authentication having authentication apparatus identification information. In a user authentication system comprising a device, a biometric information acquisition function, a communication function, a management token having management token identification information, a biometric information acquisition function, a communication function, and a user token having user token identification information, When registering an administrator of the system, the administrator registration terminal acquires the biometric information of the administrator, creates administrator identification information, and transmits the administrator identification information to the authentication device. Receiving and storing information, the management token obtains the biometric information of the administrator, and then when the administrator registers or updates the user of the system, the authentication device Confirming the identification information of the token, the management token acquires the biometric information of the administrator and transmits it to the authentication device, the authentication device receives the biometric information, matches the administrator identification information, and matches The management token acquires user biometric information and transmits it to the authentication device, the authentication device receives the biometric information, creates and stores user identification information, and then the user uses the system. When the user token acquires the biometric information of the user and transmits the biometric information to the authentication device, the authentication device receives the biometric information, compares it with the user identification information, and if it matches, as a legitimate user A user authentication system characterized by authentication is provided.

  This prevents unauthorized registration / update of the administrator and the user and realizes high security user authentication. In addition, the registration / update of the user by the administrator and the authentication operation by the user are performed using only the token, so that an authentication system with low cost and high convenience can be realized.

  The present invention performs registration of an administrator by a store, etc., and registration / update of a user by an administrator in a system for authenticating access authority based on biometric information when a user accesses a protection target such as an automobile. Therefore, secure user authentication with low operation management cost is realized. The registration / update of the user by the administrator and the authentication operation by the user are performed using only a portable token, so that it is possible to realize an authentication system with low cost and high convenience. Since the administrator and the user are authenticated by the combination of the token and biometric information they possess, high security is ensured. In addition, by installing a biometric information sensor not on an authentication device but on a token carried by a user, it can be applied to user authentication for automobiles and the like that require strict durability.

  Hereinafter, a first embodiment of the present invention will be described using an automobile user authentication system as an example.

FIG. 1 shows the configuration of the user authentication system system of this embodiment. This embodiment is installed in a vehicle to authenticate a car user, such as a manager registration terminal 100 operated by a dealer or the like to register a car manager (usually the owner) and the family of the owner. Authentication device 110, a management token 130 used by an administrator to register a user, and a user token 140 used for authentication when the user uses a car. The administrator registration terminal 100 and the authentication device 110, the management token 130 and the authentication device 110, and the user token 140 and the authentication device 110 perform direct communication or communication via a public network such as the Internet, respectively.
The administrator registration terminal 100 includes a fingerprint sensor 101, an electronic signature function 102, a communication function 103, and a storage device 105. The storage device 105 stores a secret key (Sm) 104.

  The authentication device 110 includes an encryption processing function 111, a fingerprint verification function 112, a communication function 113, a GPS function 114, a display 120, a storage device 115, a public key (Pm) 116, and an initial registration flag 119. The The storage device 115 stores administrator authentication data 117 and user authentication data 118. The administrator authentication data 117 includes an administrator's public key (Pa), an administrator's biometric information template, and an electronic signature for guaranteeing the integrity of the administrator authentication data 117. The user authentication data 118 includes a user public key (Pu), a user biometric information template, and an electronic signature for ensuring the integrity of the user authentication data. It is assumed that the public key (Pm) 116 is paired with the secret key (Sm) 104 and stored in advance in the authentication device 110 when the automobile is sold. It is assumed that the initial registration flag is set to 0 when the vehicle is shipped from the factory.

  The management token 130 includes a fingerprint sensor 131, an encryption processing function 132, a communication function 133, and a storage device 135. The storage device 135 stores a secret key (Sa) 134. The secret key (Sa) 134 is paired with the public key (Pa) of the administrator authentication data 117. The management token 130 is handed over to the administrator from a dealer or the like when the car is sold, or when the administrator already owns a token having an equivalent function, only the secret key (Sa) is transferred to the administrator's token. Store. The management token 130 may be a mobile terminal such as a mobile phone or a PDA. The management token 130 incorporates a power source such as a rechargeable battery.

  The user token 140 includes a fingerprint sensor 141, an encryption processing function 142, a communication function 143, and a storage device 146. The storage device 146 stores a secret key (Su) 144 and a public key (Pu) 145. The secret key (Su) 144 and the public key (Pu) 145 make a pair and are generated in advance and stored in the user token 140. When a user token is sold, an appropriate number (for example, the number of users) is handed over to the manager or user from the dealer, etc., or when the user already has a token with an equivalent function, Tokens may be used. The user token 140 may be a mobile terminal such as a mobile phone or a PDA. The user token 140 incorporates a power source such as a rechargeable battery.

Next, the operation of the user authentication system in this embodiment will be described in detail.
FIG. 2 shows a registration process procedure and data flow of a car manager at the time of car sales.
The administrator registration terminal 100 generates a pair of the public key (Pa) and the secret key (Sa) 134, and transmits the secret key (Sa) 134 to the management token 130 (step 200). If the public key (Pa) and the secret key (Sa) are stored in advance in the management token 130, the administrator registration terminal 100 may receive the public key (Pa) from the management token 130 instead of step 200.
The management token 130 securely stores the secret key (Sa) 134 in a tamper-resistant area or the like (step 205).

The administrator registration terminal 100 acquires the administrator's fingerprint data using the fingerprint sensor 101 (step 210).
The administrator registration terminal 100 creates a template from the fingerprint data (step 215). The template may be fingerprint image data or data obtained by extracting a feature amount from a fingerprint image.
The administrator registration terminal 100 generates an electronic signature for the public key (Pa) and the template using the secret key (Sm) 104 (step 220). In this way, the dealer guarantees the integrity of the public key / template pair. The public key (Pa), the template, and the electronic signature are collected as administrator authentication data 117.
The administrator registration terminal 100 transmits administrator authentication data 117 to the authentication device 110 (step 225).
The authentication device 110 checks whether the initial registration flag 119 is 0 (step 230).
If the initial registration flag 119 is not 0, the authentication device 110 displays an error message and interrupts the processing (step 245).

The authentication device 110 registers the administrator authentication data 117 in the storage device 115 (step 235).
The authentication device 110 sets the initial registration flag to 1 (step 240).
The authentication device 110 displays an administrator registration success message (step 250).
By using the initial registration flag 119, the administrator can be registered only once after the factory shipment. As a result, it is possible to prevent the dealer from rewriting the manager illegally after the automobile is sold, and to correctly delegate the management right of the automobile from the dealer to the purchaser.

FIG. 3 shows a processing procedure and data flow when an administrator registers a car user.
The management token 130 transmits a registration request to the authentication device 110 (step 300).
The authentication device 110 receives the registration request, acquires the position information of the vehicle by the GPS function 114, and confirms that it is in the permitted position (for example, the owner's home) (step 305). If it is not in the permitted position, it is regarded as an illegal registration request and the process is interrupted.
The authentication device 110 authenticates the management token 130, and interrupts the authentication process if the management token 130 is not valid (step 310). The authentication can be realized by the authentication device 110 and the management token 130 performing a challenge and response process using the public key (Pa) of the administrator authentication data 117 and the secret key (Sa) 134.

If the validity of the management token 130 is confirmed, an encryption session is started between the authentication device 110 and the management token 130 (step 310).
If the authenticity of the management token 130 cannot be confirmed in step 310, the authentication device 110 displays an error message and interrupts processing (step 365).
The management token 130 acquires the fingerprint data of the administrator and transmits it to the authentication device 110 (step 320).
The authentication device 110 receives the fingerprint data and compares it with the template of the administrator authentication data 117 (step 325).
The authentication device 110 displays an error message when the fingerprints are not matched as a result of collation in step 325, and interrupts the processing (step 365).

The management token 130 acquires the fingerprint data of the user that the administrator intends to register and transmits it to the authentication device 110 (step 330).
The authentication device 110 receives the fingerprint data and creates a template (step 335). Since the fingerprint data is acquired by the management token 130, it is possible to prevent an unauthorized user from registering a fingerprint template that is not intended by the administrator.
The user token 140 acquires the user's fingerprint data and transmits it to the authentication device 110 together with the public key (Pu) 145 (step 340).
The authentication device 110 receives the fingerprint data and the public key (Pu) 145, and compares the fingerprint data with the template created in step 335. (Step 350).

  The authentication device 110 displays an error message and interrupts the processing if the result of collating the fingerprints in step 350 does not match (step 365). Alternatively, a message for prompting the fingerprint input may be displayed again, and waiting for the fingerprint data to be transmitted from the user token. In step 335, the authentication device 110 receives the user's fingerprint data from the management token 130 and creates a template. Then, the authentication device 110 receives the user's fingerprint data from the user token 140. If the fingerprint data cannot be received from the user token 140, the registration process is interrupted, so that unauthorized registration can be prevented more reliably.

The authentication device 110 transmits the public key (Pu) and the template created in step 335 as a pair to the management token 130. The management token 130 generates an electronic signature for this data using a secret key (Sa) and transmits it to the authentication device 110. The authentication device 110 collects the received electronic signature, public key (Pu), and template to create user authentication data 118 (step 355).
The authentication device 110 registers the user authentication data 118 in the storage device 115. (Step 360).
As a result of the above processing, the user registration is permitted only when the administrator authorized by the dealer uses the management token issued from the dealer. Further, it is not necessary to request user registration from a store or the like, and no user registration terminal is required. Thus, according to the present invention, high security and simple user management can be realized.

  The administrator can be updated by the same processing as described above. In this case, by providing a switch in the management token 130 or the authentication device 110, the user registration mode and the administrator update mode can be switched. By updating the administrator, it is possible to transfer the management right when the car is used for sale.

FIG. 4 shows a user authentication processing procedure and data flow when unlocking a car door or starting an engine.
The user token 140 transmits an authentication request to the authentication device 110 (step 400).
The authentication device 110 authenticates the user token 140. If the authentication fails, the user authentication process is interrupted (step 410). The authentication of the token can be realized by performing a challenge and response process between the authentication device 110 and the user token 140 using the public key (Pu) of the user authentication data 118 and the secret key (Su) 144.
When the validity of the user token 140 is confirmed, an encryption session is started between the user token 140 and the authentication device 110 (step 412).
The user token 140 acquires the fingerprint data of the user and transmits it to the authentication device 110 (step 415).

The authentication device 110 receives the fingerprint data and compares it with the template of the user authentication data 118 (step 420). If the fingerprints match, the door is unlocked and the engine is allowed to start.
In the above processing, the management token 130 may be used instead of the user token. In this case, the registration mode and the authentication mode can be switched by providing a switch in the management token 130 or the authentication device 110.
By the above processing, the car can be used only when the registered user uses the registered user token. Thus, the present invention realizes user authentication with high security.

When biometric authentication such as fingerprint is used for unlocking a door of an automobile, it is necessary to install a sensor in the vehicle, but it is difficult to realize durability against high temperature, low temperature, rain, vibration, and the like. Since this invention installs a sensor in the token which a user carries, this problem can be avoided.
In the above embodiment, when the authentication device 110 authenticates the management token 120 and the user token 130, the challenge and response process based on the public key encryption is used. However, each token holds unique identification information one by one. Alternatively, the token may be authenticated by being transmitted to the authentication device 110 at the time of authentication and compared with the registered identification information.
Hereinafter, for the second embodiment of the present invention, a vehicle user authentication system in the case where a plurality of drivers (users) and a plurality of vehicles belong to one company or sales office such as a taxi or a transportation business is taken as an example. explain. In this case, it is necessary to dynamically manage the association between the user and the vehicle at a company or sales office.

FIG. 5 shows the configuration of the driver authentication system of this embodiment. This embodiment includes a management terminal 500 that manages association between a user and a vehicle, an authentication device 510 that is mounted on the vehicle and authenticates the user, and a user token 520 that is carried by the user and used for authentication. The The management terminal 500, the authentication device 510, and the user token 520 perform direct communication or communication via a public line network such as the Internet in a wireless or wired manner.
The management terminal 500 includes an encryption processing function 501, a communication function 502, a database 503, and a secret key (Sa) 504. The database 503 manages user authentication data 506 and vehicle authentication data 507. The user authentication data 506 includes a user public key (Pu), a user biometric information template, an expiration date, and an electronic signature that guarantees the integrity of the user authentication data. The vehicle authentication data includes a vehicle ID, a vehicle public key (Pd), and an electronic signature that guarantees the integrity of the vehicle authentication data. The management terminal 500 manages user authentication data of all users who may use any vehicle.

The authentication device 510 includes an encryption processing function 511, a fingerprint collation function 512, a communication function 513, and a storage device 514. The storage device 514 stores a secret key (Sd) 515 of the authentication device 510, a public key (Pa) 516 of the management terminal 500, and user authentication data 506. The secret key (Sa) 504 and the public key (Pa) 516 form a pair, and correspond to one management terminal one by one. The secret key (Sd) 515 and the public key (Pd) 505 form a pair and correspond to one authentication device 510, that is, one vehicle.
The user token 520 includes a fingerprint sensor 521, an encryption processing function 522, a communication function 523, and a storage device 527. The storage device 527 stores a secret key (Su) 524, a public key (Pu) 525, an encryption key 526, a public key (Pa) 516 of the management terminal 500, and vehicle authentication data 507. The secret key (Su) 524 and the public key (Pu) 525 make a pair. One user token 520 is owned by each user. The user token 520 may be a dedicated device specialized for the user authentication system of the present embodiment, or may be a mobile terminal having a general function such as a mobile phone or a PDA.

Next, the operation of the user authentication system in this embodiment will be described in detail.
FIG. 6 shows a processing procedure and data flow when a user belonging to a company or sales office is registered in the system.
The management terminal 500 transmits a fingerprint request to the user token 520 owned by the registration target user (step 600).
The user token 520 acquires the fingerprint data of the user (step 605).
User token 520 creates a template from fingerprint data (step 610). The template may be fingerprint image data itself or may be a feature value extracted.
The user token 520 encrypts the template using the encryption key 526 and transmits it to the management terminal 500 together with the public key (Pu) 525 (step 615).

The management terminal 500 generates an electronic signature using the private key (Sa) for the public key (Pu) 525, the expiration date of the template, and the encrypted template (step 620). As a result, the management terminal 500 guarantees the integrity of the pair of the public key (Pu) 525 and the template.
The management terminal 500 adds the public key (Pu) 525, the expiration date, the encryption template, and the electronic signature to the database 503 as user authentication data 506 (step 625).
As described above, the management terminal 500 manages the fingerprint information of all users, but since the fingerprint template is encrypted in the user token 520 managed by the user and then passed to the management terminal 500, the privacy of the user is protected. Is done. Also, when the user authentication data 506 managed by the management terminal 500 is leaked due to hacking or internal crime, the security of the fingerprint template is ensured. For this reason, the management cost can be reduced.

FIG. 7 shows a processing procedure and a data flow when associating individual users with individual vehicles (authentication devices) so that each user can use only authorized vehicles.
The management terminal 500 and the authentication device 510 confirm each other's validity by mutual authentication. If mutual authentication fails, the process is interrupted (step 700). Mutual authentication can be realized by performing a challenge and response process using a pair of a public key (Pa) 516 and a secret key (Sa) 504 and a pair of a public key (Pd) 505 and a secret key (Sd) 515.
If the mutual authentication is successful, an encryption session is started between the management terminal 500 and the authentication device 510 (step 705).
The management terminal 500 transmits user authentication data 506 of the user who should be given permission to use the vehicle in which the authentication device 510 is mounted to the authentication device 510 (step 710).
The authentication device 510 receives the user authentication data 506 and stores it in the storage device 514 (step 715).
The management terminal 500 transmits the vehicle authentication data 507 of the authentication device 510 to the user token 520 (step 720).
The user token 520 receives the vehicle authentication data 507 and stores it in the storage device 527 (step 725).

FIG. 8 shows a user authentication processing procedure and data flow when the door of the automobile is unlocked or the engine is started.
User token 520 transmits an authentication request to authentication device 510 (step 800).
Authentication device 510 and user token 520 confirm each other's validity by mutual authentication. If mutual authentication fails, the process is interrupted (step 805). Mutual authentication uses a pair of public key (Pu) and private key (Su) 524 of user authentication data 506, and a pair of public key (Pd) and private key (Sd) 515 of vehicle authentication data 507, and challenges and responses This can be realized by processing.
If the mutual authentication is successful, the authentication device 510 and the user token 520 start an encryption session (step 810).
The authentication device 510 verifies that the user authentication data 506 has not been tampered with using the public key (Pa) 516, confirms the expiration date of the template, and the verification has failed or the expiration date has expired. If so, the process is interrupted (step 812).
The user token 520 transmits the encryption key 526 to the authentication device 510 (step 815).
The authentication device 510 receives the encryption key 526 and uses it to decrypt the template of the user authentication data 506 (step 820).
The user token 520 acquires the user's fingerprint data and transmits it to the authentication device 510 (step 825).

The authentication device 510 receives the fingerprint data and compares it with the template decrypted in step 820 (step 830). If the fingerprints match, the door is unlocked and the engine is allowed to start.
The authentication device 510 deletes the decrypted template and the received encryption key 526 regardless of the fingerprint match / mismatch (step 835).
As described above, according to the present invention, it is possible to easily change the association between a vehicle and a user in a system in which a plurality of users such as a vehicle use a plurality of users and authenticate the use authority using biometric information. Therefore, the operation cost can be reduced, and privacy can be protected and security can be enhanced by encrypting and managing the biometric information of the user.

  According to the embodiment of the present invention, in a system in which a plurality of users access a plurality of protection targets and the access authority is authenticated by biometric information, user management that protects the privacy of the user is realized at low cost. Specifically, at the time of user registration, biometric information is acquired using a token possessed by the user, encrypted in the token, and passed to the management terminal as a template. The management terminal assigns each user's template to each protection target. Assign to Since the management terminal can centrally manage user templates, the user access authority can be easily set or changed. Further, the template is encrypted and the encryption key is stored in a token managed by the user, so that the privacy of the user can be protected and the management cost of the template in the management terminal can be reduced.

It is a block diagram which shows 1st embodiment of the user authentication system of this invention. It is a flowchart which shows the administrator registration process in the embodiment. It is a flowchart which shows the user registration process in the embodiment. It is a flowchart which shows the user authentication process in the embodiment. It is a block diagram which shows 2nd embodiment of the personal authentication system of this invention. It is a flowchart which shows the user registration process in the embodiment. It is a flowchart which shows the process of matching of the user and vehicle in the embodiment. It is a flowchart which shows the user authentication process in the embodiment.

Explanation of symbols

100 Administrator authentication terminal
101 fingerprint sensor
102 Signature function
103 Communication function
104 Private key (Sm)
105 Storage device
110 Authentication device
111 Cryptographic processing function
112 Fingerprint verification function
113 Communication function
114 GPS function
115 Storage device
116 Public key (Pm)
117 Administrator authentication data
118 User authentication data
119 Initial registration flag
130 Management token
131 fingerprint sensor
132 Cryptographic processing function
133 Communication function
134 Secret Key (Sa)
135 Storage device
140 User token
141 fingerprint sensor
142 Cryptographic processing function
143 Communication function
144 Secret key (Su)
145 Public Key (Pu)
146 storage device
500 management terminal
501 Cryptographic processing function
502 Communication function
503 database
504 Secret key (Sa)
506 User authentication data
507 Vehicle authentication data
510 Authentication device
511 Encryption processing function
512 fingerprint verification function
513 Communication function
514 storage device
515 Private key (Sd)
516 Public key (Pa)
520 user token
521 fingerprint sensor
522 Cryptographic processing function
523 communication function
524 Secret key (Su)
525 Public Key (Pu)
526 encryption key
527 storage devices

Claims (7)

A biometric information acquisition function, a communication function, an administrator registration terminal having registration terminal identification information,
A biometric information matching function, a communication function, an authentication device having authentication device identification information,
A biometric information acquisition function, a communication function, a management token having management token identification information,
A biometric information acquisition function, a communication function, a user token having user token identification information,
In a user authentication system consisting of
When registering the system administrator,
The administrator registration terminal acquires the biometric information of the administrator, creates administrator identification information and transmits it to the authentication device,
The authentication device receives and stores the administrator identification information;
Next, when an administrator registers or updates a user of the system,
The authentication device confirms the identification information of the management token,
The management token acquires the biometric information of the administrator and sends it to the authentication device,
When the authentication device receives the biometric information, collates with the administrator identification information, and matches,
The management token acquires the biometric information of the user and sends it to the authentication device,
The authentication device receives the biometric information, creates and stores user identification information,
Next time the user uses the system,
The user token acquires user's biometric information and transmits it to the authentication device,
The authentication apparatus receives the biometric information, collates with the user identification information, and authenticates as a regular user when they match. When an administrator registers or updates a user of the system,
The authentication device confirms the identification information of the management token,
The management token acquires the biometric information of the administrator and sends it to the authentication device,
When the authentication device receives the biometric information, collates with the administrator identification information, and matches,
The management token acquires the biometric information of the user and sends it to the authentication device,
The authentication device receives the biometric information, creates user identification information,
The user token obtains user biometric information, transmits the biometric information and the user token identification information to the authentication device,
The authentication device receives the biometric information and the user token identification information, collates the biometric information and the user identification information, and stores the user identification information and the user token identification information when they match.
Next time the user uses the system,
The authentication device confirms the identification information of the user token,
The user token acquires user's biometric information and transmits it to the authentication device,
The user authentication system according to claim 1, wherein the authentication device receives the biometric information, collates with the user identification information, and authenticates as a regular user if they match. The authentication device has an initial registration flag initialized in an “unregistered” state,
When registering the system administrator,
The authentication device permits registration of an administrator only when the initial registration flag is “unregistered”, and rewrites the initial registration flag to a “registered” state.
The user authentication system according to claim 1 or 2, characterized in that A management terminal having a communication function and management terminal identification information;
A cryptographic processing function, a biometric information matching function, a communication function, and an authentication device having authentication device identification information;
An encryption processing function, a biometric information acquisition function, a communication function, an encryption key, a user token having user token identification information,
In a user authentication system consisting of
When an administrator temporarily registers a user of the system,
The user token acquires user biometric information, creates user identification information, encrypts the user identification information using the encryption key, and transmits the encrypted user identification information and the user token identification information to the management terminal. And
The management terminal stores the encrypted user identification information and the user token identification information,
When an administrator registers or updates a user of the system,
The authentication device confirms the identification information of the management terminal,
The management terminal transmits the encrypted user identification information and the user token identification information of the specified user to the authentication device,
The authentication device receives and stores the encrypted user identification information and the user token identification information,
Next time the user uses the system,
The user token acquires biometric information of a user, transmits the biometric information and the encryption key to the authentication device,
The authentication device receives the biometric information and the encryption key, uses the encryption key to decrypt the encrypted user identification information, extracts user identification information, collates the user identification information with the biometric information, A user authentication system that authenticates as a regular user if they match, and deletes the user identification information and the encryption key at the end of verification regardless of the verification result. When a user uses the system,
The user token confirms the identification information of the authentication device,
The authentication device confirms the identification information of the user token,
The user token acquires biometric information of a user, transmits the biometric information and the encryption key to the authentication device,
The authentication device receives the biometric information and the encryption key, uses the encryption key to decrypt the encrypted user identification information, extracts user identification information, collates the user identification information with the biometric information, Authenticate as a legitimate user if they match, and delete the user identification information and the encryption key at the end of verification regardless of the verification result;
The user authentication system according to claim 4, wherein: Encrypting the communication between the management token and the previous authentication device and the communication between the user token and the authentication device;
The user authentication system according to claim 5, wherein: The system has a GPS function,
When an administrator registers or updates a user of the system,
Obtaining the location information of the authentication device and permitting registration or updating only when it is in a pre-specified location;
7. The user authentication system according to claim 1, wherein:

Images