JP2005122480A - Id card system and identification method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To validly use biometric identification information acquired by devices whose types or versions are different in order to highly precisely perform personal identification. <P>SOLUTION: In an ID card system 100 for performing personal identification by using BM information, image data and feature dot data acquired as the BM information are stored in a BM filing device by making the type information of BM input devices 20a to 20b which have acquired the BM information be attached to the header. The feature dot data at the acquisition of data are compared with feature dot data at the collation for performing personal identification, and when the feature dot data are not coincident with each other, the type information attached to the feature dot data at the acquisition of data is compared so that whether or not the BM input device is made to correspond to the BM collating device can be decided. Then, when the BM input device is not made to correspond to the BM collating device, image data are acquired from the BM filing device, and personal identification is carried out on the basis of the image data at the acquisition of data. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an ID card system and an authentication method for creating ID cards such as employee ID cards and various licenses.

  Recently, ID cards such as employee ID cards and various licenses using a non-volatile data memory composed of an EEPROM or the like, and an IC card having an IC chip having a CPU for controlling them have become widespread ( For example, see Patent Document 1 or Patent Document 2). On this ID card, face photos and personal information (ID number, address, name, age, affiliation, etc.) are printed directly on the surface of a paper or plastic card, and a data memory (hereinafter referred to as a data memory) built into the card. , Abbreviated as “Built-in memory”), digital face photographs and personal information are recorded.

  In recent years, when an ID card is issued, biometrics information (Biometrics Date) is recorded as personal information, and based on this biometric information, personal authentication of the ID card holder has been performed. The biometric authentication information includes, for example, fingerprints, irises, retinas, vein patterns on the back of the hand, palm prints, facial features, voice prints, or genetic information DNA. These biometric authentication information has strength against environmental changes. doing.

  For example, when performing personal authentication using a fingerprint among the biometric authentication information described above, first, image processing of the fingerprint presented at the time of registration is performed to extract feature point data. Then, the fingerprint feature point data is stored together with the fingerprint image to register the fingerprint. Further, image processing of a fingerprint presented at the time of authentication is performed, and feature point data is extracted. Then, the registered feature point data of the fingerprint and the feature point data of the presented fingerprint are collated to determine whether the person is the ID card owner or another person.

  On the other hand, in the ID card system described above, it is possible to form a system on the same floor or between remote locations by connecting various devices to a network such as the Internet with the recent development of communication technology. That is, in an ID card system, a registration device for registering biometric authentication information, a verification device for performing personal authentication based on biometric authentication information, a face image photographing device for photographing a face image printed on an ID card, and an ID card A plurality of devices such as an ID card issuing device, a filing device that accumulates biometric authentication information and face images, and a host computer that manages these devices in an integrated manner are connected via a network.

Therefore, when issuing an ID card, it is necessary to check whether the applicant (ID card owner) is the person himself / herself each time processing is performed in each device. Therefore, personal authentication is performed based on the biometric authentication information to prevent impersonation in the ID card issuing process.
JP 2000-207616 A JP 2002-86969 A

  However, in the above-described conventional ID card system, there are cases in which devices scattered in various places are different in model, and different in version even if they are of the same model. For example, when biometric authentication information is acquired by a registration device of a different model, features that are extracted even under the same acquisition conditions due to differences in standards, image processing methods, and feature point data extraction methods of the registration device Point data may be different. In other words, since there is no compatibility between devices, there is a problem that even if biometric authentication information collected from the same person, the feature point data extracted for each device differs and accurate personal authentication cannot be performed.

  In addition, since ID cards are usually renewed after a period of about 1 to 5 years, if a system is changed or a system is changed due to device deterioration during this period, a new model and an old model The situation is different in how data is handled. That is, there is a problem that the personal authentication cannot be performed accurately because the image processing method of the acquired biometric authentication information and the feature point data extraction method are different.

  An object of the present invention is to provide an ID card system and an authentication method capable of accurately performing personal authentication by effectively using biometric authentication information acquired by apparatuses of different models and versions.

In order to solve the above problem, the invention according to claim 1
In an ID card system including an input device that acquires biometric authentication information and a verification device that performs personal authentication based on the biometric authentication information,
The input device is:
Obtaining means for obtaining biometric authentication information;
Ancillary means for attaching information related to the input device to the biometric authentication information acquired by the acquisition means;
It is characterized by having.

The invention according to claim 2 is the ID card system according to claim 1,
The verification device is
Obtaining means for obtaining biometric authentication information obtained by the obtaining means of the input device;
Determining means for determining whether or not the biometric authentication information is information that can be used for personal authentication based on information relating to the input device attached to the biometric authentication information;
It is characterized by having.

The invention according to claim 3 is the ID card system according to claim 1,
In the input device,
The acquisition means generates feature point data from the biometric authentication information,
The incidental means accompanies the feature point data with information related to the input device,
A filing device is provided that stores at least one of biometric authentication information acquired by the acquisition unit and feature point data generated by the acquisition unit.

The invention according to claim 4 is the ID card system according to any one of claims 1 to 3,
In the verification device,
The acquisition means acquires feature point data generated by the input device,
The determination means determines whether the feature point data is information that can be used for personal authentication based on information about the input device attached to the feature point data,
The acquisition means acquires biometric authentication information from the filing device when the feature point data is not information that can be used for personal authentication.

The invention according to claim 5 is the ID card system according to claim 4,
In the input device,
The assigning means attaches information about the input device including algorithm information used when generating feature point data from biometric authentication information to the feature point data;
In the verification device,
The discriminating unit discriminates whether or not the feature point data is information that can be used for personal authentication based on the algorithm information.

The invention according to claim 6 is the ID card system according to claim 3,
In the input device,
The supplementary means supplements the biometric information acquired by the acquisition means with information related to the type of the biometric information,
The filing device includes:
Storage means for storing a plurality of types of biometric authentication information;
Management means for managing biometric authentication information for each type of biometric authentication information based on information on the type of biometric authentication information;
It is characterized by having.

The invention according to claim 7 is the ID card system according to claim 3,
In the input device,
The supplementary means supplements the biometric information acquired by the acquisition means with information related to the type of the biometric information,
The filing device includes:
The information processing apparatus includes a storage unit that stores biometric authentication information for each type of biometric authentication information based on information on the type of biometric authentication information.

The invention according to claim 8 is the ID card system according to any one of claims 3, 6 or 7,
Obtaining means for obtaining biometric authentication information from the filing device;
And an issuing device including recording means for recording the biometric authentication information in a built-in memory of the ID card.

The invention according to claim 9 is the ID card system according to claim 6 or 7,
It has a host computer that manages personal information,
The host computer
The image processing apparatus includes a storage unit that stores biometric authentication information and / or feature point data that are not stored in the filing device.

The invention according to claim 10 is:
In an authentication method in an ID card system including an input device that acquires biometric authentication information and a verification device that performs personal authentication based on the biometric information,
Obtaining biometric authentication information;
Adding the information related to the input device to the acquired biometric authentication information;
It is characterized by including.

The invention according to claim 11 is the authentication method according to claim 10,
Determining whether or not the biometric information is information that can be used for personal authentication based on information related to the input device attached to the biometric information;
It is characterized by including.

The invention according to claim 12 is the authentication method according to claim 10 or 11,
Generating feature point data from biometric authentication information by the input device;
Attaching the information about the input device to the feature point data;
Storing at least one of biometric authentication information acquired by the input device and feature point data generated by the input device;
It is characterized by including.

The invention according to claim 13 is the authentication method according to any one of claims 10 to 12,
Determining whether or not the feature point data is personally identifiable information based on information about the input device attached to the feature point data;
Obtaining the stored biometric authentication information when the feature point data is not information usable for personal authentication.

According to the invention of claim 14, in the authentication method of claim 13,
Attaching the information about the input device including the algorithm information used when generating the feature point data from the biometric authentication information to the feature point data;
Determining whether the feature point data is information that can be used for personal authentication based on the algorithm information; and
It is characterized by including.

The invention according to claim 15 is the authentication method according to claim 12,
Attaching the information related to the type of the biometric authentication information to the biometric authentication information;
Storing a plurality of types of biometric information;
Managing biometric information for each type of biometric information based on information about the type of biometric information;
It is characterized by including.

The invention according to claim 16 is the authentication method according to claim 12,
Attaching the information related to the type of the biometric authentication information to the acquired biometric authentication information;
Storing biometric information for each type of biometric information, based on information about the type of biometric information;
It is characterized by including.

The invention according to claim 17 is the authentication method according to any one of claims 12, 15 or 16,
Obtaining the stored biometric authentication information;
Recording the biometric authentication information in the built-in memory of the ID card;
It is characterized by including.

  According to the present invention, in an ID card system that performs personal authentication based on biometric authentication information, information related to an input device that has acquired biometric authentication information is attached to the biometric authentication information. It is possible to quickly determine whether it is caused by the input device that acquired the biometric authentication information or by the ID card holder. Thereby, the accuracy of personal authentication can be improved. Further, since information related to the input device is attached to the biometric authentication information, the biometric authentication information can be used in an appropriate form based on the information related to the input device.

  Hereinafter, embodiments of the present invention will be described in detail with reference to FIGS. However, the scope of the invention is not limited to the illustrated examples.

First, the configuration of the present embodiment will be described.
FIG. 1 is a diagram showing a system configuration of an ID card system 100 in the present embodiment. As shown in FIG. 1, the ID card system 100 includes a registration terminal 10, BM (Biometrics) input devices 20a to 20b, BM filing devices 30a to 30b, BM collation devices 40a to 40b, a face image photographing device 50, and a face image. The BM conversion devices 60 a to 60 b, the face image filing device 70, the card printer 80, the issuing terminal 90, and the like are configured such that each device can transmit and receive data via the network N.

  The host computer 1 has a function as a server that manages the ID card system 100 in an integrated manner, and includes a database (not shown) that manages data transmitted and received in the ID card system 100. The host computer 1 receives the applicant's personal information and ID number transmitted from the registration terminal 10, and stores each information in association with each other in the database. The host computer 1 transmits the requested applicant's personal information and ID number to the card printer 80 in response to a request from the card printer 80 and the issuing terminal 90.

  The registration terminal 10 is a terminal operated by an operator who accepts an application form. The registration terminal 10 is an apparatus that inputs personal information related to the applicant based on the description of the application form and issues an ID number corresponding to the personal information. is there. Further, the registration terminal 10 transmits the input personal information to the host computer 1 in association with the ID number.

  The BM input device 20a is installed in the vicinity of the registration terminal 10, and for example, biometric authentication information (hereinafter referred to as “DNA fingerprint information”) such as the applicant's fingerprint, iris, vein pattern on the back of the hand, palm print, facial feature, voice print, or genetic information DNA. This is a device for inputting “BM information”. In the present embodiment, the BM input device 20a includes a fingerprint sensor, and acquires the applicant's fingerprint as BM information.

  The BM input device 20a acquires fingerprint image data input from the applicant, performs image processing on the fingerprint image data, and extracts feature point data. Then, the model information of the BM input device 20a is attached to the header of the fingerprint image data and the feature point data, and is transmitted to the filing device 30a in association with the identification information for identifying the applicant. Here, the identification information for identifying the applicant is information for uniquely determining the applicant, for example, information such as the applicant's name, ID number, address, and telephone number. To do. In the present embodiment, an ID number is used as the identification information of the applicant. In addition, information indicating the type of BM information (for example, fingerprint, iris, voiceprint, etc.) is attached to the image data and feature point data.

  The BM filing device 30a receives fingerprint image data and feature point data as BM information from the BM input device 20a, and stores and manages the received feature point data and image data based on the ID number and the type of BM information. . Further, the BM filing device 30a extracts fingerprint feature point data in response to a request from the BM collation devices 40a to 40b and the card printer 80, and the fingerprint identification data is sent to the BM collation devices 40a to 40b, the card printer 80, or the issuing terminal 90. Image data or feature point data is transmitted.

  The BM verification device 40a is a device that performs personal authentication of the applicant based on the BM information input from the applicant and the BM information acquired from the BM filing device 30a. In the present embodiment, the BM matching device 40a includes a fingerprint sensor and uses a fingerprint as BM information. The BM matching device 40a extracts feature point data from fingerprint image data acquired from the applicant, and compares the feature point data with the fingerprint feature point data received from the filing device 30a to perform personal authentication. If the feature point data does not match and personal authentication cannot be performed, the BM verification device acquires fingerprint image data from the filing device 30a and compares the fingerprint image data acquired from the applicant with personal authentication. Do.

  The BM input device 20b is installed in the vicinity of the face image photographing device 50 and inputs, for example, BM information such as the applicant's fingerprint, iris, vein pattern on the back of the hand, palm print, facial features, voice print, or gene information DNA. It is a device to do. In the present embodiment, the BM input device 20a includes an iris sensor, and acquires the applicant's iris as BM information.

  The BM input device 20b acquires iris image data acquired from the applicant, performs image processing on the image data, and extracts feature point data. Then, the model information of the BM input device 20b is attached to the header of the iris image data and the extracted feature point data, and is transmitted to the filing device 30b in association with the ID number.

  The BM filing device 30b receives iris image data and feature point data as BM information from the BM input device 20b, and stores the received iris image data and feature point data based on the ID number and the type of BM information. to manage. In addition, the BM filing device 30a transmits iris image data or feature point data in response to a request from the BM collation devices 40a to 40b, the card printer 80, or the issuing terminal 90.

  The face image photographing device 50 includes a camera or the like and photographs a face image of an applicant who creates an ID card. The face image photographing device 50 photographs the applicant and performs image processing of the photographed face image. Then, the face image data subjected to the image processing is transmitted to the face image BM conversion device 60a and the face image filing device 70 in association with the ID number.

  The face image BM conversion device 60a extracts feature point data from the face image data received from the face image photographing device 50. Then, the feature point data of the extracted face image is transmitted to the face image filing device 70 in association with the ID number.

  The face image filing device 70 receives face image data associated with the ID number from the face image photographing device 50 and also receives feature point data of the face image associated with the ID number from the face image BM conversion device 60. To do. Based on the ID number, feature point data and face image data of the face image are stored and managed. Further, the face image filing device 70 transmits face image feature point data in response to a request from the face image BM conversion device 60b, and also transmits face image data in response to a card printer request.

  The card printer 80 includes a printing device and the like, and receives personal information from the host computer 1 and receives an ID number and a face image from the A branch host 2a or the photographing devices 41a to 43a. Then, the ID number included in the received personal information is matched with the ID number attached to the face image, and the ID card on which the personal information and the face image are described is printed and created.

  The BM verification device 40b is a device that performs personal authentication of the applicant based on the BM information input from the applicant and the BM information acquired from the BM filing device 30b. In the present embodiment, it is assumed that the BM matching device 40a includes an iris sensor and uses an iris as BM information. The BM matching device 40b extracts feature point data from the iris image data acquired from the applicant and performs personal authentication by comparing with the feature point data of the iris received from the filing device 30b. If the feature point data do not match and personal authentication cannot be performed, the BM matching device 40b acquires iris image data from the filing device 30b and compares the iris image data acquired from the applicant with personal authentication. I do.

  The issuing terminal 90 includes a reader / writer, personal information and ID number from the host computer 1, fingerprint feature point data from the BM filing device 30a, iris feature point data from the BM filing device 30b, and face image filing device 70 to face. The image data is received and each received information is recorded in the built-in memory of the ID card.

  Next, among the devices constituting the ID card system 100, devices characteristic of the present invention will be described in detail.

  FIG. 2 is a block diagram showing a functional configuration of the BM input device 20a. As shown in FIG. 2, the BM collation apparatus 20a includes a CPU 21a, an input unit 22a, a display unit 23a, a communication unit 24a, a RAM 25a, a fingerprint sensor 26a, a storage unit 27a, and the like, and each unit is connected by a bus 28a. .

  The CPU 21a is a program specified from various programs corresponding to the BM input device 20a recorded in the storage unit 27a, various instructions input from the input unit 22a, and data input from the communication unit 24a or the fingerprint sensor 26a. Is expanded in the work area of the RAM 25a. Then, various processes are executed in accordance with the program according to the input instruction or input data, and the processing results are stored in a predetermined area of the RAM 25a and displayed on the display unit 23a.

  The input unit 22a includes a keyboard having cursor keys, numeric input keys, and various function keys, and outputs a pressing signal corresponding to the key pressed on the keyboard to the CPU 21a. In addition, the input unit 22a includes a pointing device such as a mouse or a touch panel, an OCR (Optical Character Reader) device that optically reads an ID card or an ID number printed on an ID card application, and a magnetic field of an ID card as necessary. Various other input devices such as a reader / writer (R / W) device that reads an ID number, image information, or the like stored in a stripe or a semiconductor memory may be provided.

  The display unit 23a includes a display screen formed by a CRT (Cathode Ray Tube), an LCD (Liquid Crystal Display), or the like, and is input via the input unit 22a, the communication unit 24a, and the fingerprint sensor 26a in accordance with the control of the CPU 21a. Display data is displayed on the screen.

  The input unit 24a is an interface that can be connected to a transmission medium connected to a network such as a LAN or a WAN. The communication unit 24a is configured by a modem, a terminal adapter, or the like, and performs control for communicating with an external device via a communication line such as a telephone line, an ISDN line, a wireless communication line, a dedicated line, or a CATV line.

  The RAM 25a forms a work area for temporarily storing various programs executed by the CPU 21a, data processed by these various programs, and the like.

  The fingerprint sensor 26a is composed of a photoelectric conversion element such as a linear CCD image sensor or a linear CMOS image sensor. The fingerprint sensor 26a uses a one-dimensional fingerprint image formed on a light receiving surface (not shown) as an electrical signal from the one-dimensional fingerprint signal. Convert to image data.

  The storage unit 27a has a recording medium (not shown) in which programs, data, and the like are stored in advance, and this recording medium is configured by a magnetic or optical recording medium or a semiconductor memory. This recording medium is fixedly attached to the storage unit 27a or is detachably mounted. This recording medium is processed by a system program, various processing programs corresponding to the system, and various processing programs. Store the data. The program is stored in the form of computer readable program code, and the CPU 21a sequentially executes operations according to the program code.

  Next, FIG. 3 is a block diagram showing a functional configuration of the BM input device 20b. As shown in FIG. 3, the BM input device 20b includes a CPU 21b, an input unit 22b, a display unit 23b, a communication unit 24b, a RAM 25b, an iris sensor 26b, a storage unit 27b, and the like, and each unit is connected by a bus 28b. . Since the BM input device 20b has substantially the same configuration as the BM input device 20a described above, the same parts are denoted by the same reference numerals, and detailed description thereof is omitted.

  The iris sensor 26b is composed of an optical lens made of glass or plastic and an optical sensor such as a CCD or a CMOS, and outputs an iris image input through the optical lens as iris image data.

  Further, since the BM matching device 40a has substantially the same configuration as the BM input device 20a described above, the same parts are denoted by the same reference numerals, and detailed illustration and description thereof are omitted. In other words, the BM verification device 40a includes a CPU 41a, an input unit 42a, a display unit 43a, a communication unit 44a, a RAM 45a, a fingerprint sensor 46a, a storage unit 47a, and the like, and each unit is connected by a bus 48a.

  Further, since the BM matching device 40b has substantially the same configuration as the BM input device 20b described above, the same parts are denoted by the same reference numerals, and detailed illustration and description are omitted. That is, the BM collation device 40b includes a CPU 41b, an input unit 42b, a display unit 43b, a communication unit 44b, a RAM 45b, a fingerprint sensor 46b, a storage unit 47b, and the like, and each unit is connected by a bus 48b.

  FIG. 4 is a block diagram illustrating a functional configuration of the issuing terminal 90. As shown in FIG. 4, the issuing terminal 90 includes a CPU 91, an input unit 92, a display unit 93, a communication unit 94, a RAM 95, a reader / writer 96, a storage unit 97, and the like. ing. In addition, since it is the structure substantially the same as BM input device 20a mentioned above, the code | symbol of the same row is attached | subjected about the same part, and detailed description is abbreviate | omitted.

  The reader / writer 96 includes an antenna, a transmission / reception circuit, a control circuit, an I / F unit, etc., and supplies and communicates power to the ID card by electromagnetic induction, and transmits data to the internal memory of the ID card. Read or write.

Next, the operation of the present embodiment will be described.
A program for realizing each function described in the flowcharts of FIGS. 5 to 7 shown below is in the form of readable program code, the storage unit 26a of the BM input device 20a, and the storage unit 47a of the BM collation device 40a. Or it is stored in the memory | storage part 97 of the issuing terminal 90, and CPU21a, CPU41a, or CPU91 performs the operation | movement according to this program code sequentially. It is also possible to execute operations peculiar to this embodiment by using programs / data supplied from a CD-ROM, DVD-ROM or the like (not shown).

  Since the BM input devices 20a to 20b perform substantially the same processing, the BM input device 20a will be described below as a representative. In addition, since the BM matching devices 40a to 40b perform substantially the same processing, the BM input device 40a will be described as a representative below.

  First, BM information acquisition processing for acquiring the applicant's BM information on the premise of personal authentication using the BM information will be described. FIG. 3 is a flowchart showing BM information acquisition processing executed by the CPU 21a of the BM input device 20a. As shown in FIG. 3, the CPU 21a inputs the applicant's ID number issued from the registration terminal 10 from the input unit 22a (step S1), and inputs the applicant's fingerprint from the fingerprint sensor 26a. Image data is acquired (step S2).

  Next, the CPU 21a extracts feature point data from the acquired fingerprint image data according to a predetermined algorithm (step S3). Further, the CPU 21a acquires the model information of the own device (step S4), and attaches the model information as supplementary information to the header of the fingerprint image data and the feature point data, respectively (step S5). Then, the CPU 21a associates the ID number with the fingerprint image data and the feature point data and transmits them to the BM filing device 30a (step S6), and ends the BM information acquisition process.

  Next, referring to FIG. 4, a verification process for performing personal authentication using BM information will be described. FIG. 4 is a flowchart illustrating a collation process executed by the CPU 41a of the BM collation apparatus 40a. As shown in FIG. 4, the CPU 41a inputs the ID number of the applicant who performs personal authentication from the input unit 42a (step S11), and inputs the fingerprint of the applicant through the fingerprint sensor 46a, thereby obtaining the fingerprint image data. Obtain (step S12).

  Next, the CPU 21a extracts feature point data from the acquired fingerprint image data according to a predetermined algorithm (step S13). In addition, the CPU 21a transmits an instruction request for feature point data to the BM filing device 30a together with the input ID number of the applicant (step S14), and receives feature point data corresponding to the ID number from the BM filing device 30a. (Step S14).

  Then, the CPU 21a compares the feature point data acquired in step S13 with the feature point data received in step S15 (step S16), and performs personal authentication of the applicant. Here, when the feature point data match (step S17; YES), the CPU 41a determines that the personal authentication is successful, ends the collation process, and proceeds to the next process.

  On the other hand, if the feature point data does not match (step S17; NO), the CPU 21a acquires model information from the header of the feature point data received from the BM filing device 30a (step S18), and the BM input device 20a. It is determined whether or not the model or version of the BM verification device 20a is compatible (step S19).

  Here, when the models and versions of the BM input device 20a and the BM collation device 40a are compatible (step S19; YES), the CPU 41a determines that the personal authentication has failed and displays an authentication error message. This is displayed on the unit 43a, and the verification process is terminated.

  On the other hand, if the models or versions of the BM input device 20a and the BM collation device 40a are not compatible (step S19; NO), the CPU 41a sends a request instruction for fingerprint image data together with the applicant's ID number to the BM filing device. It transmits to 30a (step S20).

  Next, the CPU 41a receives fingerprint image data corresponding to the ID number from the BM filing device 30a (step S21), and extracts feature point data from the received fingerprint image data (step S22). Then, the feature point data extracted in step S13 and the feature point data extracted in step S21 are compared to determine whether or not the feature point data match (step S23).

  If the feature point data do not match (step S23; NO), the CPU 21a determines that the personal authentication has failed, and displays an authentication error message on the display unit 43a (step S24). On the other hand, when the feature point data match (step S23; YES), the PCU 21a determines that the personal authentication is successful, ends the collation process, and proceeds to the next process.

  Next, an ID card creation process for creating an ID card will be described with reference to FIG. FIG. 5 is a flowchart showing an ID card creation process executed by the CPU 91 of the issuing terminal 90. It is assumed that the ID card created here uses personal information and a face image printed on the surface of the ID card by the card printer 80 as preprocessing.

  As shown in FIG. 5, the CPU 91 inputs the applicant's ID number (step S31), and transmits an instruction request for personal information to the host computer 1 together with the input ID number of the applicant (step S32). Then, personal information corresponding to the ID number is received from the host computer (step S33).

  In addition, the CPU 91 transmits a feature point data request instruction together with the applicant's ID number to the BM filing device 30a (step S34), and receives feature point data corresponding to the ID number from the BM filing device 30a (step S34). S35). Here, in the feature point data, it is assumed that model information is attached to the header. When a plurality of BM information is used, a plurality of feature point data is received from each BM filing device.

  Further, the CPU 91 transmits a face image data request instruction together with the applicant's ID number to the face image filing device 70 (step S36), and receives feature point data corresponding to the ID number from the face image filing device 70. (Step S37).

  Then, when the ID card is inserted (step S38), the CPU 91 controls the reader / writer 96 to store the ID number, personal information, feature point data, and face image data in the built-in memory of the ID card (step S38). S39). When the information recording is completed, the CPU 91 ends the ID card creation process.

  As described above, in the ID card system that performs personal authentication using the BM information, the model information of the BM input devices 20a to 20b that acquired the BM information is included in the header of the image data and feature point data acquired as the BM information. Attached and stored in the BM filing device. On the other hand, if the feature point data does not match when comparing the feature point data at the time of data acquisition with the feature point data at the time of collation, if the feature point data does not match, the model information attached to the feature point data at the time of data acquisition is compared. Then, it is determined whether or not the BM input device is compatible with the BM collation device. If the BM input device does not correspond to the BM collation device, image data is acquired from the BM filing device, and personal authentication is performed based on the image data at the time of data acquisition.

  Therefore, since the model information of the BM input device 20a is attached to the feature point data as supplementary information, the mismatch of the feature point data is caused by a failure of personal authentication or due to incompatibility between devices. It is possible to quickly determine whether to do. As a result, if the feature point data mismatch is due to incompatibility between devices, the image data can be acquired and collation processing can be performed based on the image data at the time of data acquisition. The accuracy of authentication can be improved.

  As a result, for example, even when there is a system change due to secular change or when performing personal authentication between different systems, personal authentication can be performed by using BM information in an appropriate form, A highly versatile system can be provided.

  In addition, by using only feature point data as information for performing personal authentication, authentication processing can be performed based on data with a small capacity. Thereby, the time concerning authentication processing can be reduced and processing efficiency can be improved. Further, since the volume of data transmitted / received between devices can be suppressed, network traffic can be reduced, and time and cost for data transmission / reception can be saved. Alternatively, since the data capacity recorded in the built-in memory of the ID card can be kept small, memory resources can be used effectively.

  In addition, the description in this Embodiment mentioned above is an example of the suitable ID card system 100 which concerns on this invention, and is not limited to this. For example, the case where fingerprints and irises are used as biometric authentication information has been described as an example. However, biometric authentication information is not limited to this, and captured face image data may be used as biometric authentication information. The biometric authentication information can be used.

  In addition, although the model information attached to the image data and the feature point data has been described as including information such as the model or version of the BM input devices 20a to 20b, the model information is not limited thereto. For example, the configuration may include the algorithm information executed by the BM input devices 20a to 20b as the model information. That is, the BM input devices 20a to 20b include information on the algorithm used when extracting the feature point data from the image data in the model information, and is attached to the feature point data. Then, it is determined whether or not the feature point data is generated by an algorithm executable by the device itself. When the feature point data is generated by an algorithm that cannot be executed by the device itself, the BM matching devices 40a to 40b transmit an image data request instruction to the BM filing device 30a together with the applicant's ID number. Acquire data and perform personal authentication.

  Thereby, even if the model or version is compatible, for example, if a program for executing a predetermined algorithm is not stored in the storage unit 47, the failure of personal authentication indicates that the BM verification device 40 It is possible to quickly determine whether it is caused by the applicant or the applicant. Thereby, the accuracy of personal authentication can be improved.

  Further, in the ID card system 100, a plurality of types of biometric authentication information is used for the verification process, and the case where each type of biometric authentication information is stored in the filing devices 40a to 40b has been described as an example. The number of filing devices is not limited to this, and any number can be installed. For example, the ID card system 100 may include one filing device, and a single filing device may store a plurality of types of biometric authentication information. In this case, the filing device manages a plurality of types of biometric authentication information for each type of biometric authentication information based on information on the type of biometric authentication information attached to the biometric authentication information.

  Further, the filing apparatus has been described as a configuration in which image data and feature point data are stored as BM information, but the type of data stored in the filing apparatus is not limited to this. In other words, the filing device may store at least one of image data and feature point data, and the other data may be stored in a host computer.

  In the authentication process executed by the CPU 41a of the collation device 40a, the CPU 41a obtains model information attached to the feature point data when the feature point data does not match, and whether the input device and the collation device are compatible. However, the timing for determining the compatibility is not limited to the above-described example. For example, it may be configured to determine whether or not there is compatibility before determining whether or not feature point data match.

  Further, in the ID card creation process executed by the CPU 91 of the issuing terminal 90, the information recorded in the internal memory by the reader / writer is not limited to the above-described example.

  In addition, the detailed configuration and detailed operation of each device or component constituting the ID card creation system 100 in the present embodiment can be changed as appropriate without departing from the spirit of the present invention.

It is a conceptual diagram which shows the system configuration | structure of the ID card system in embodiment to which this invention is applied. It is a block diagram which shows the functional structure of BM input device 20a shown in FIG. It is a block diagram which shows the functional structure of BM input device 20b shown in FIG. It is a block diagram which shows the functional structure of the issuing terminal 90 shown in FIG. It is a flowchart which shows the BM information acquisition process performed by CPU21a of FIG. It is a flowchart which shows the authentication process performed by CPU41a of BM collation apparatus 40a shown in FIG. It is a flowchart which shows ID card creation processing performed by CPU91 of the issuing terminal 90 shown in FIG.

Explanation of symbols

1 Host computer 10 Registration terminals 20a to 20b BM input device 21a CPU
22a Input unit 23a Display unit 24a Communication unit 25a RAM
26a fingerprint sensor 27a storage unit 28a bus 30a-30b filing device 40a-40b BM collation device 50 face image photographing device 60 face image BM conversion device 70 face image filing device 80 card printer 90 registration terminal 100 ID card system N network

Claims (17)

In an ID card system including an input device that acquires biometric authentication information and a verification device that performs personal authentication based on the biometric authentication information,
The input device is:
Obtaining means for obtaining biometric authentication information;
Ancillary means for attaching information related to the input device to the biometric authentication information acquired by the acquisition means;
An ID card system comprising: The verification device is
Obtaining means for obtaining biometric authentication information obtained by the input device;
Determining means for determining whether or not the biometric authentication information is information that can be used for personal authentication based on information relating to the input device attached to the biometric authentication information;
The ID card system according to claim 1, further comprising: In the input device,
The acquisition means generates feature point data from the biometric authentication information,
The incidental means accompanies the feature point data with information related to the input device,
The ID card system according to claim 1, further comprising a filing device that stores at least one of biometric authentication information acquired by the acquisition unit and feature point data generated by the acquisition unit. In the verification device,
The acquisition means acquires feature point data generated by the input device,
The determination means determines whether the feature point data is information that can be used for personal authentication based on information about the input device attached to the feature point data,
The ID according to any one of claims 1 to 3, wherein the acquisition unit acquires biometric authentication information from the filing device when the feature point data is not information that can be used for personal authentication. Card system. In the input device,
The auxiliary means attaches to the feature point data information related to the input device including algorithm information used when generating the feature point data from the biometric authentication information,
In the verification device,
5. The ID card system according to claim 4, wherein the determining means determines whether or not the feature point data is information that can be used for personal authentication based on the algorithm information. In the input device,
The supplementary means supplements the biometric information acquired by the acquisition means with information related to the type of the biometric information,
The filing device includes:
Storage means for storing a plurality of types of biometric authentication information;
Management means for managing biometric authentication information for each type of biometric authentication information based on information on the type of biometric authentication information;
The ID card system according to claim 3, further comprising: In the input device,
The supplementary means supplements the biometric information acquired by the acquisition means with information related to the type of the biometric information,
The filing device includes:
4. The ID card system according to claim 3, further comprising storage means for storing biometric authentication information for each type of biometric authentication information based on information relating to the type of biometric authentication information. Obtaining means for obtaining biometric authentication information from the filing device;
The ID card system according to claim 3, further comprising an issuing device including a recording unit that records the biometric authentication information in a built-in memory of the ID card. It has a host computer that manages personal information,
The host computer
The ID card system according to claim 6 or 7, further comprising a storage unit that stores biometric information and / or feature point data that is not stored in the filing device. In an authentication method in an ID card system including an input device that acquires biometric authentication information and a verification device that performs personal authentication based on the biometric information,
Obtaining biometric information of the ID card holder;
Adding the information related to the input device to the acquired biometric authentication information;
An authentication method comprising: Determining whether or not the biometric information is information that can be used for personal authentication based on information related to the input device attached to the biometric information;
The authentication method according to claim 10, further comprising: Generating feature point data from biometric authentication information by the input device;
Attaching the information about the input device to the feature point data;
Storing at least one of biometric authentication information acquired by the input device and feature point data generated by the input device;
The authentication method according to claim 10 or 11, further comprising: Determining whether or not the feature point data is information that can be used for personal authentication based on information about the input device attached to the feature point data;
When the feature point data is not information usable for personal authentication, obtaining the stored biometric authentication information;
The authentication method according to any one of claims 10 to 12, further comprising: Attaching the information about the input device including the algorithm information used when generating the feature point data from the biometric authentication information to the feature point data;
Determining whether the feature point data is information that can be used for personal authentication based on the algorithm information; and
The authentication method according to claim 13, further comprising: Attaching the information related to the type of the biometric authentication information to the biometric authentication information;
Storing a plurality of types of biometric information;
Managing biometric information for each type of biometric information based on information about the type of biometric information;
The authentication method according to claim 12, further comprising: Attaching the information related to the type of the biometric authentication information to the acquired biometric authentication information;
Storing biometric information for each type of biometric information, based on information about the type of biometric information;
The authentication method according to claim 12, further comprising: Obtaining biometric authentication information of the stored ID card holder;
Recording the biometric authentication information in the built-in memory of the ID card;
The authentication method according to claim 12, wherein the authentication method includes:

Images