JP2005309668A - Biometrics data acquisition device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve the reliability to certification by enabling, at the time of acquiring biometrics data of a user, to confirm that the biometrics data are of the user himself/herself. <P>SOLUTION: When data of a surface image of an identification card of a subject M or a card owned thereby are inputted through a scanner 24, or when card data read from a card through a card reader 25, personal data of the user are extracted, in a control part 11, from the surface image data or the card data as certification data to be added to certification facial image data. In the control part 11, facial image data contained in the certification data are converted to BM data, and the BM data are collated with BM data of the certification facial data to determine the identity of the subject M. When the identity is determined, the certification data are added to the certification facial image data by writing of the input certification data to a header area of the certification facial image data or the like, and stored in a storage part 16. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a biometric data acquisition apparatus that acquires biometric data (referred to as biometric data) used to perform personal authentication of a user.

In recent years, biometric authentication based on facial images, fingerprints, pupil irises, voiceprints, and the like has been realized due to improvements in authentication technology. For example, as an authentication method when reading and outputting personal data from a magnetic card or IC card on which personal data is recorded, biometric authentication data for authenticating the identity of the card owner is recorded on the card together with the personal data. In addition, a technique is disclosed in which biometric authentication data recorded on this card and preregistered biometric authentication data are compared and matched to authenticate that they are the same person and permit the output of personal data. (For example, refer to Patent Document 1).
JP 2000-207616 A

  However, there is no guarantee that the biometric data used for this authentication really belongs to the user himself / herself, and when acquiring biometric data, another person may impersonate and register as a cardholder. It was considered that the reliability of authentication could not be secured.

  An object of the present invention is to make it possible to confirm that the biometric authentication data belongs to the user when acquiring the biometric authentication data of the user, and to improve the reliability of authentication.

The invention described in claim 1
An acquisition means for acquiring user biometric data;
Guarantee data input means for inputting guarantee data to guarantee that the acquired biometric authentication data belongs to the user himself,
Control means for adding the inputted guarantee data to the acquired biometric authentication data;
A biometric data acquisition apparatus comprising:

The invention according to claim 2 is the biometric data acquisition device according to claim 1,
The warranty data includes user personal data,
Comprising personal data input means for inputting personal data of the user;
The control means collates the personal data of the user included in the guarantee data with the personal data input by the personal data input means, and adds the guarantee data to the biometric data if they match. It is characterized by.

The invention according to claim 3 is the biometric data acquisition device according to claim 1,
The warranty data includes user face image data,
A photographing unit for photographing the user and generating user face image data;
The control means collates the user's face image data included in the guarantee data with the face image data generated by the photographing means, and adds the guarantee data to the biometric authentication data if they match. It is characterized by.

The invention according to claim 4 is the biometric data acquisition device according to any one of claims 1 to 3,
The control means determines the reliability of the guarantee data based on the data type of the guarantee data, and adds the determined reliability data to the biometric authentication data to which the guarantee data is added. To do.

  According to the first aspect of the present invention, when the biometric authentication data of the user is acquired, the guarantee data is added to the biometric authentication data, so that the reliability of the biometric authentication data used for authentication can be improved. it can. Therefore, the reliability of the authentication itself can be improved.

  According to the second aspect of the present invention, when the guarantee data is added to the biometric authentication data, the personal data included in the guarantee data is compared with the personal data input by the user, and only when they match. Since the guarantee data is added, the reliability of the guarantee data can be ensured, and the reliability of the biometric authentication data can be further improved.

  According to the third aspect of the present invention, when adding the guarantee data to the biometric authentication data, the face image data included in the guarantee data and the face image data obtained by photographing the user are collated, Since the guarantee data is added only when they match, the reliability of the guarantee data can be ensured, and the reliability of the biometric authentication data can be further improved.

  According to the fourth aspect of the present invention, since the reliability of the guarantee data is determined and the reliability data is added to the biometric authentication data, the reliability of the guarantee data can be determined from the reliability data. .

  In the present embodiment, the present invention is applied to a photography apparatus that acquires facial image data of a user by photographing as biometric authentication data, and the acquired facial image data is that of the subject (user). In order to guarantee that there is, an example will be described in which personal data read and input from the photographer's identification is added as guarantee data to the face image data.

  Here, the biometric authentication data is biometric information that can be acquired from the user's biometric data, and is data that can be used for personal authentication. For example, the biometric authentication data includes the user's face, fingerprint, palmprint, voiceprint, and pupil. Examples include biological data such as irises, vein patterns, and gene information, and BM (BioMetorics) data generated by extracting feature points for authentication based on these biological data.

First, the configuration will be described.
FIG. 1 shows an internal perspective view of a photography apparatus 1 in the present embodiment.
As shown in FIG. 1, the photography apparatus 1 is formed in a box shape, and an outlet 17a for taking out a printed photograph is provided on the outer wall thereof. A chair C for the photographed person M is installed in the box (hereinafter referred to as a photographing room) so as to be able to move up and down. A device 15, an input device 14 for inputting an operation instruction, a detection sensor 13 for detecting that the subject M has entered the photographing room, and a cashier 23 for adjusting the photographing fee are installed. In addition, lighting strobes 26 are provided on the inner wall of the photographing room above, on the front, on the back, and below the subject M, respectively.

FIG. 2 shows an internal configuration of the photography apparatus 1.
As shown in FIG. 2, the photography apparatus 1 includes a control unit 11, a camera 12, a detection sensor 13, an input device 14, a display device 15, a storage unit 16, a printer 17, a communication device 18, a biometric data acquisition device 19, I. / O unit 21, speaker 22, cashier 23, scanner 24, card reader 25, and strobe 26.

  Further, the photography apparatus 1 is configured to be able to communicate with the server 30 via the communication device 18. The server 30 creates a database (DB) 31 by managing the biometric authentication data (the biometric authentication data will be described later) transmitted from the photography apparatus 1 and manages input / output of data in the DB 31. .

Hereinafter, each part of the photographic device 1 will be described.
The control unit 11 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), and the like. The system program stored in the storage unit 16 and the face image acquisition processing program according to the present invention (see FIGS. 3 and 4). Are read out and expanded in the RAM, and the operation of each unit is centrally controlled according to the program.

  In the face image acquisition process, the operation of the strobe 26 and the camera 12 is controlled to take a face image of the person M to be photographed. When face image data generated by the camera 12 (hereinafter referred to as authentication face image data) is acquired as biometric authentication data, or when user biometric data is acquired by the biometric data acquisition device 19, the authentication face is obtained. Conversion processing of image data or biometric data to BM data is performed. The BM data is feature point data obtained by extracting feature points necessary for authentication from face image data or biometric data. For example, in the case of face image data, position data, density data, color data, and the like of each part such as eyes, nose, mouth, etc., which are facial features, are obtained and used as BM data. In the case of biometric data such as fingerprints and voiceprints, the number of fingerprint vertices and their position data are obtained for fingerprints, and data such as frequency bands are obtained for voiceprints as BM data. By collating and authenticating using such BM data, for example, personal authentication can be performed more easily and quickly than when collating using face image data itself. That is, the control unit 11 can acquire face image data, other biometric data, or BM data thereof as biometric authentication data.

  The data of the photographed person M's identity card and the card face image of the cards owned by the photographed person are input via the scanner 24, or the data read from the card via the card reader 25 (this is called card data). Is input, the personal data of the user is extracted from the ticket image data or card data as guarantee data to be added to the authentication face image data. Here, the guarantee data is data for guaranteeing that the biometric data acquired from the user belongs to the user himself / herself. For example, the user's name, address, date of birth, organization name Personal data that can identify the user, such as a credit card number and bank account number, and user face image data are applicable.

  Then, the control unit 11 converts the face image data included in the guarantee data into BM data, and compares the BM data with the BM data of the authentication face image data to determine whether or not they are the same person. . If the person is the same person, the guarantee data is added to the face image data by writing the input guarantee data into the header area of the authentication face image data, and stored in the storage unit 16. At this time, the data type of the guarantee data is determined, and the reliability of the guarantee data according to the data type is determined based on the reliability table (the reliability table will be described later) of the storage unit 16. Here, the data type refers to the type of identification card or card that is the source of the guarantee data, the type of contents of the guarantee data, and the like. Then, the data of the determined reliability is written and added to the header area of the authentication face image data to which the guarantee data is added.

  Thereafter, the control unit 11 encrypts the face image data to which the guarantee data and the reliability data thereof are added and the BM data, and transmits the encrypted data to the server 30 via the communication device 18. When the transmission is completed normally, the face image data, BM data, guarantee data, etc. of the subject M stored in the storage unit 16 are deleted from the storage unit 16. That is, the control means can be realized by the cooperation of the face image acquisition processing program and the control unit 11.

  The camera 12 is an imaging unit including an optical lens, an optical sensor such as a CCD (Charge Coupled Device), an A / D (Analog / Digital) conversion unit, and the like, and a subject image input via the optical lens at the time of shooting. Is subjected to photoelectric conversion by an optical sensor to generate an image signal (analog). Then, digital image data is obtained from the analog image signal by the A / D conversion unit, and the digital image data is output to the control unit 11. Note that a digital video camera or the like capable of recording moving images and still images may be applied as the camera 12. That is, the camera 12 can realize an acquisition unit that acquires face image data that is biometric authentication data.

  The detection sensor 13 is an optical sensor or the like that detects that a user has entered the photographing room of the photographing apparatus 1, and outputs a detection signal to the control unit 11.

  The input device 14 includes a touch panel integrated with the display device 15, a photo type selection switch (hereinafter referred to as SW) for selecting a photo type, a shooting SW for instructing start of shooting, and a shot image. Various function keys such as a print SW for instructing print output are provided, and an operation signal corresponding to the operated key is output to the control unit 11. That is, the user's personal data can be input via the input device 14, and a personal data input means can be realized.

  The display device 15 is a display unit that includes an LCD (Liquid Crystal Display) or the like, and in accordance with a control signal from the control unit 11, a guide screen for explaining a photographing procedure, a selection screen for selecting a photo type, and the like Various operation screens, face image data of the subject M photographed by the camera 12, and the like are displayed.

  The storage unit 16 is input via various control programs such as a system program and a face image acquisition processing program, authentication face image data taken in the face image acquisition process, its BM data, the scanner 24, and the card reader 25. The data processed by each program such as the guaranteed data is stored. In addition, the storage unit 16 stores a reliability table in which the reliability for the data type of the guarantee data is determined. The reliability table shows, for example, the status in which the guarantee data is read, such as reliability A rank if the data type of the guarantee data is a license, reliability B rank if it is a student card, reliability C rank if it is a credit card, etc. The reliability is ranked in advance according to the type of evidence.

  The printer 17 performs print output based on the image data input from the control unit 11. As a printing method of the printer 17, a sublimation type thermal transfer method in which an image is formed by sublimation and transfer of a coloring material will be described. However, recording is performed by applying heat by superimposing a recording medium and an image receiving material. A melt transfer recording method in which an image is formed by transferring a recording layer of a medium to an image receiving layer of an image receiving material may be applied, or an electrophotographic method, an inkjet method, or other printing methods may be used. Moreover, a silver salt photographic image may be formed.

  The communication device 18 is a communication means including a communication interface such as a network interface card and a modem, and exchanges information with the server 30 on the communication network N. For example, the authentication face image data to which the guarantee data and its reliability data are added, the BM data, and the like are transferred to the server 30 for image registration.

  The biometric data acquisition device 19 is an acquisition unit that acquires biometric data of a user as biometric authentication data. For example, the fingerprint of the user, the iris of the pupil, the vein pattern of the back of the hand, the palm print, the face image, the voice print, the gene information, etc. To obtain biometric data. In the present embodiment, it is assumed that the biometric data acquisition device 19 includes a fingerprint sensor and acquires user fingerprint data. The fingerprint sensor is composed of a photoelectric conversion element such as a linear CCD image sensor or a linear CMOS image sensor, and converts a one-dimensional image of the fingerprint formed on the light receiving surface of the sensor into fingerprint image data. The fingerprint image data (biometric data) acquired in this way is output to the control unit 11 and converted into BM data by the control unit 11. In addition, it is good also as a structure which does not acquire biometric data itself but acquires BM data into which biometric data was converted.

  The I / O unit 21 is an interface that mediates the exchange of information between the control unit 11 and the speaker 22, the cashier 23, the scanner 24, the card reader 25, and the strobe 26. 22, the cashier 23, the scanner 24, the card reader 25, and the strobe 26.

  The speaker 22 outputs an audio signal for the guide announcement input from the control unit 11 via the I / O unit 21.

  The cashier 23 is a cash registering machine provided with a coin and banknote deposit port, a change refund port, and the like. The cashier 23 detects the amount deposited from the deposit port, calculates the amount of change, discharges coins or banknotes for the calculated change amount to the refund port, and performs fee settlement.

  For example, the scanner 24 reads and inputs various face images such as license cards, credit cards, Juki cards, insurance cards, employee ID cards, student ID cards, etc. Then, the ticket image data is output to the control unit 11 as guarantee data. That is, the scanner 24 functions as a guarantee data input unit.

  The card reader 25 reads and inputs data recorded on, for example, a magnetic card provided with a magnetic recording tape, an IC card provided with an IC memory, etc., and is used for credit cards, bank cash cards, membership card cards. The user's personal data recorded on various cards owned by the user, such as employee ID cards, are read and input. The card reader 25 outputs the data read from the card and input to the control unit 11 as guarantee data. That is, the scanner 24 functions as a guarantee data input unit.

  The strobe 26 illuminates the subject M at the time of shooting, and emits light at the light emission timing and light emission level instructed from the control unit 11.

Next, the operation in the present embodiment will be described.
FIG. 3 and FIG. 4 are flowcharts for explaining the face image acquisition process executed by the photography apparatus 1. 3 and 4, step number S indicates an operation processing process of the photographic apparatus 1, and step number A indicates a work process performed by the user, that is, the subject M.

  In the face image photographing process shown in FIG. 3, first, when a user enters the photographing room and the user is detected by the detection sensor 13 (step S1), a guide screen is displayed on the display device 15 (step S2). ). At the same time, the announcement sound relating to the photographing guide is output from the speaker 22.

  Next, when the user inserts a fee into the cashier 23 (step A1), the amount of money deposited in the cashier 23 is checked (step S3), and a selection screen for selecting a photo type is displayed on the display device 15. Is done. When the user depresses the photo type selection SW corresponding to the desired photo type on this selection screen (step A2), the fee is settled according to the photo type selected by the cashier 23, and the change is returned to the refund slot. (Step S4). Here, the following description will be given on the assumption that a menu that uses an ID photo as an authentication image is selected as a photo type.

  When the fee is settled, a shooting guide screen is displayed on the display device 15, and guidance is given to press the shooting SW at a desired timing. When the user presses the photographing SW (step A3), the strobe 26 is emitted and photographing is performed by the camera 12, and face image data generated by the camera 12 is acquired (step S5).

  Next, the acquired face image data is checked to determine whether the face image data is data that can be used for authentication (step S6). For example, whether the face is facing the front based on a face template prepared in advance, whether the size and position of the face are within the standard based on the distance from the outer frame of the face image to the face, etc. Etc. are judged. If it is determined as a result of the check that the image cannot be used as an authentication image (step S6; NG), the process returns to step S5, and photographing is performed again.

  On the other hand, if it is determined as a result of the check that the acquired face image data can be used as an authentication image (step S6; OK), the authentication face image data is converted into BM data (step S6). S7). When the conversion is completed, the BM data is checked, and it is determined whether the BM data is data that can be used for authentication (step S8). For example, it is determined whether or not the data is missing, whether or not all feature points have been extracted and converted. As a result of the check, if it is determined that the BM data cannot be used (step S8; NG), an error message notifying the re-shooting is displayed because a BM data conversion error has occurred on the display device 15, and in step S5 Returning to the process, the image is taken again.

  On the other hand, if it is determined as a result of the check that the BM data of the authentication face image data is data that can be used for authentication (step S8; OK), the identification card is set in the scanner 24, or the card that you own is a card. Guidance is provided to set the reader 25, and the process proceeds to step S9 shown in FIG. When the user sets the identification card in the scanner 24 or the card is set in the card reader 25 (step A4), the photograph device 1 reads and inputs the card image of the identification card by the scanner 24. Alternatively, the card data recorded on the card is read and input by the card reader 25, and personal data is extracted as guarantee data from the input ticket image data or card data. That is, guarantee data is input (step S9). At this time, if the face image of the user is affixed on the ID card or card, the face image is also read and input as guarantee data. In the present embodiment, the following description will be given on the assumption that face image data is also read and input.

  When guarantee data is input, the reliability of the guarantee data is determined according to the input data type (step S10). For example, the country's licenses and passports are ranked as the most reliable rank A, and those issued by specific organizations such as student IDs and employee ID cards are ranked as the next most reliable rank B. Credit cards that are not used as IDs but have a certain level of reliability may be determined according to the type of ID or card from which the guarantee data is read, such as being determined as rank C, or as guarantee data If the input data is personal data with high privacy such as the user's name, address, date of birth, etc., the personal data such as the credit number of the user and the name of the institution belongs to the rank A with the highest reliability. Then, it is good also as determining according to the content of guarantee data, such as rank B with the next highest reliability.

  When the reliability for the guarantee data is determined, the face image data included in the guarantee data is extracted, and the face image data is converted into BM data (step S11). Next, the face image data BM data included in the guarantee data and the authentication face image data BM data are collated, and the face image data person included in the guarantee data and the authentication face image data person (photographed) It is determined whether or not the person M) is the same person (step S12). If the BM data does not match and it is determined that the person is a different person (step S12; different person), a message notifying that an authentication error has occurred is displayed on the display device 15 (step S13), and the process of step S9 Returning to, guidance is given to set the ID again.

  On the other hand, if the BM data match and are determined to be the same person (step S12; same person), the input guarantee data and its reliability data are added to the authentication face image data and stored in the storage unit 16. Stored and saved (step S14).

FIG. 5 shows a conceptual diagram of face image data to which guarantee data is added. As shown in FIG. 5, guarantee data d1 and reliability data d2 are included in the header area of face image data p obtained as biometric authentication data. Has been written. The guarantee data is, for example, personal data such as name, address, date of birth, etc., and the reliability data d2 is, for example, a rank code (“A” rank in the figure) ranking the reliability. In addition, as shown in FIG. 5, data d3 indicating the data type of the guarantee data read and input (for example, the type of identification such as a license or the contents of the data) may be written.

  When the customer presses the print SW (step A5), the photograph photographing apparatus 1 reads the authentication face image data from the storage unit 16, and prints the ID photo by the printer 17 based on the authentication face image data. Output is performed (step S15). When the ID photo print is discharged to the outlet 17a (step S16), the subject M receives the ID photo print discharged to the outlet 17a (step A6).

  Next, the face image data, the BM data, the guarantee data added to the face image data, and the reliability data stored in the storage unit 16 are encrypted (step S17) and transmitted to the server 30. (Step S18). In the server 30, each data received from the photography apparatus 1 is converted into a database and stored in the DB 31. In the photographic device 1, when the transmission of each data is completed normally, the authentication face image data to which the guarantee data and the reliability data thereof are added and the BM data are deleted from the storage unit 16 (step S19). This process is terminated.

  As described above, in this embodiment, the example in which the guarantee data is added to the face image data as the biometric authentication data has been described. However, the guarantee data is added to the biometric data acquired by the biometric data acquisition device 19 as the biometric authentication data. In this case, the same processing is performed, and after the reliability of the guarantee data is confirmed by collation of the face image, the guarantee data input is added to the acquired biometric data.

  As described above, according to the present embodiment, authentication data for guaranteeing that the face image is the subject person M is added to the face image data acquired by photographing as biometric authentication data. As a result, it is possible to improve the reliability of the face image data used for the authentication. As a result, the reliability of the authentication can be improved.

  Further, when adding guarantee data, the face image data included in the guarantee data is compared with the face image data acquired by photographing, and the acquired face is found only when it is determined that they are the same person as a result of the comparison. Since the guarantee data is added to the image data, it is possible to add the guarantee data to the face image data after confirming that the guarantee data is the user's own guarantee data, and the reliability of the face image data used for authentication Can be further enhanced.

  Furthermore, since the reliability is determined according to the data type of the guarantee data, and the data of the determined reliability is added to the face image data together with the guarantee data, the reliability guaranteed by the guarantee data can be determined. .

  Further, when authentication face image data, BM data, guarantee data, etc. are transmitted to the server 30 and registration is normally performed in the server 30, the authentication face image data stored in the storage unit 16 in the photography apparatus 1 is obtained. Since data related to personal privacy such as BM data and guarantee data is deleted, data leakage or the like can be prevented.

  In addition, the description content in this embodiment is a suitable example of the photography apparatus 1 to which this invention is applied, and is not limited to this.

  For example, in the above description, the guarantee data is added only to the face image data. However, the guarantee data and its reliability data are written in the header area of the BM data, and the guarantee data and the reliability data are also added to the BM data. It is good to do.

  In addition, in order to ensure the reliability of the guarantee data, the user's face image data included in the guarantee data is compared with the face image data obtained by photographing as biometric authentication data when the guarantee data is added. However, the present invention is not limited to this, and the user is allowed to input personal data such as name, address, and credit number via the input device 14 separately, and the input personal data and the individual of the user included in the guarantee data The guarantee data may be added to the face image data when they match with the data.

  In addition, the detailed configuration and detailed operation of the photography apparatus 1 in the present embodiment can be changed as appropriate without departing from the spirit of the present invention.

1 is an external view of a photography apparatus 1 in the present embodiment. 1 is a diagram showing an internal configuration of a photographic device 1. FIG. 4 is a flowchart for explaining a face image acquisition process executed by the photography apparatus 1. 4 is a flowchart for explaining a face image acquisition process executed by the photography apparatus 1. It is a conceptual diagram which shows the guarantee data added to the face image data.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Photographing device 11 Control part 12 Camera 13 Detection sensor 14 Input device 15 Display device 16 Storage part 17 Printer 18 Communication apparatus 19 Biometric data acquisition apparatus 21 I / O unit 22 Speaker 23 Cashier 24 Scanner 25 Card reader 26 Strobe 30 Server 31 DB

Claims (4)

An acquisition means for acquiring user biometric data;
Guarantee data input means for inputting guarantee data to guarantee that the acquired biometric authentication data belongs to the user himself,
Control means for adding the inputted guarantee data to the acquired biometric authentication data;
A biometric data acquisition apparatus comprising: The warranty data includes user personal data,
Comprising personal data input means for inputting personal data of the user;
The control means collates the personal data of the user included in the guarantee data with the personal data input by the personal data input means, and adds the guarantee data to the biometric data if they match. The biometric data acquisition apparatus according to claim 1. The warranty data includes user face image data,
A photographing unit for photographing the user and generating user face image data;
The control means collates the user's face image data included in the guarantee data with the face image data generated by the photographing means, and adds the guarantee data to the biometric authentication data if they match. The biometric data acquisition apparatus according to claim 1.   The control means determines the reliability of the guarantee data based on the data type of the guarantee data, and adds the determined reliability data to the biometric authentication data to which the guarantee data is added. The biometric data acquisition device according to any one of claims 1 to 3.

Images