JP2007011710A - Authentication device and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent spoofing data authentication by a third person posing as a user to fraudulently acquire the authentication data of the authorized user. <P>SOLUTION: This authentication device comprises an iris input device 20 including an input means 21 for obtaining authentication data, and a communication means 22 connected to a network 40 to communicate information; and an authentication determining means 10 comprising an input-output means 11 connected to the network 40 to transmit and receive information, a registered data holding means 12 storing registered data, an input condition control means 13 controlling input conditions or output data of the iris input device 20, a multiple-times data incorporation control means 14 instructing multiple times of authentication data incorporation, a comparing means 15 comparing each of authentication data which is input multiple times, with the registered data, an authentication data holding means 16 holding each of authentication data, and a determining means 17 determining authentication from the correlative degree of the authentication data and registered data obtained by the comparing means 15. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an authentication apparatus and an authentication method for preventing spoofed data authentication in which a third party illegally obtained authentication data of a legitimate user.

  Conventionally, as a method of authenticating an individual with his / her physical characteristics, the user's iris pattern, fingerprint, voiceprint, retinal blood vessel pattern, etc. are registered in advance as registration data, and the data entered during authentication and the registration data It is known that there is a method for verifying the identity and authenticating the identity.

  As a method of collation and determination, for example, in an authentication method using an iris pattern as authentication information, iris code information indicating the feature of the iris pattern is registered in advance in the registration data database for each user. The registration data of the iris code is obtained by executing an operation for extracting features such as shade changes from the user's iris image by a process using orthogonal transformation such as a wavelet filter. It is generally known to determine whether or not the user is the person based on the degree of correlation indicating the degree of similarity between the input data and the registered data. The reason why this judgment method is not a simple judgment method is whether the human body is not a rigid body, it is slightly deformed little by little, slightly different depending on the physical condition of the day, or imaging in terms of iris code This is because an error may occur depending on the position, environment, brightness, and the like at which the device images the iris. In particular, the voice is susceptible to changes, and the fingers and palms are susceptible to minute scratches.

In such circumstances, an authentication device that reduces the possibility of unauthorized use is disclosed in order to solve the problems that occur when authentication using physical features is used especially for authentication via a network (for example, patents). Reference 1). Also disclosed is an authentication method, an authentication apparatus, and a program that can reject the spoofing and prevent spoofing even if a third party illegally uses data entered by authorized users for authentication. (For example, refer to Patent Document 2).
JP 2001-333059 A JP 2002-259345 A

  As a common matter of Patent Document 1 and Patent Document 2, when physical feature input data such as an iris code or registration data that is input for authentication is stolen, a person who is not the user is a user. As a countermeasure against impersonation, the input data matches or has a very high correlation with the registered data, and compared to the past data, if it almost matches, authentication is rejected to prevent unauthorized use due to impersonation Was. Further, in Patent Document 1, since the input data does not match each time as described above, it is possible to prevent spoofing even if the physical feature data is stolen by holding the input data for each authentication.

  FIG. 3 is a flowchart for explaining an example of authentication processing of a conventional authentication technique. The authentication device receives the authentication data together with the unlock request and user identification information (processing step S70). Based on the received user identification information, corresponding registration data is extracted and collated with the received authentication data (processing step S72). The collation result is received, the collation result with the registered data is judged (processing step S74), and if the judgment result is coincident (YES), all the corresponding history data is extracted and received based on the received user identification information. Each authentication data is collated (processing step S76). The collation result is received, the collation result with the registered data is determined (processing step S74), and if it does not match (NO), the authentication is rejected (processing step S84). The collation result is notified as coincidence (YES) if at least one history data coincides with the authentication data. If the determination result of the comparison with the history data in the processing step S78 matches (YES), the authentication is rejected (processing step S84), and if it does not match (NO), the authentication is confirmed and the input authentication data is registered. The storage is updated (processing step S80), and an unlocking instruction is transmitted (processing step S82). Thereafter, the series of processing is terminated.

  However, in the conventional authentication technique, input data is held and compared every time authentication is performed in order to prevent spoofing, so the amount of data becomes enormous due to the accumulation of past data. An enormous amount of storage devices will be required. This also increases the authentication time. Patent Document 1 proposes deleting old data in order not to increase its storage area, but this reduces the effect of preventing spoofing. In addition, only by holding and comparing past input data, if the registration is performed in different authentication devices in order to perform authentication in the ATM authentication of bank A and bank B in the future, from the system of bank A It is possible to steal the physical characteristic data and impersonate the bank B system, and the application range to utilize the effect for preventing impersonation is limited. Furthermore, when information registered in a different authentication device is stolen, past data cannot be used. Also, leaving the registration data on the server side is a security issue, so there is a system that puts the registration data in the IC card and compares it with the input data. In that case, in the system with the registration data in the IC card Past data cannot be stored, or even if it can, all data cannot be retained. Therefore, it becomes very difficult to hold past input data, which is not realistic.

  In the above conventional authentication technology, input data is held and compared every time authentication is performed in order to prevent spoofing, so that the scope of application for utilizing the effect for preventing spoofing is limited. Become. In addition, leaving registration data on the server side is a security issue, so there are systems that store registration data in IC cards and compare them with input data. It was difficult.

  The present invention has been made to solve such problems. Even if a third party illegally obtains data entered by an authorized user for authentication and tries to use it, the authentication is rejected. An object of the present invention is to provide an authentication device and an authentication method capable of preventing impersonation.

  The authentication device according to the present invention is an authentication device for authenticating a user himself / herself based on authentication data input by reading a user's physical characteristics, and when the user's authentication request is made, the authentication data is collected. Controlled by the input condition control means, the input condition control means for controlling the input conditions when the authentication data is taken in, the holding means for holding the user authentication information as registration data, and the input condition control means Comparison means for comparing the authentication data fetched from the input means with the registration data held in the holding means to obtain a correlation between the authentication data and the registration data, and the authentication over a plurality of times. Data is taken into the input means, and an authentication determination is made based on the degree of correlation output from the comparison means and the degree of correlation between each of the authentication data taken a plurality of times according to the control content of the input condition control means Has a configuration in which a Cormorant determining means.

  When the determination means has a low correlation obtained by the comparison means when the authentication data is changed by the input condition control means, and the authentication data is not changed by the input condition control means, the comparison means When the degree of correlation obtained by (1) is high, it can be determined that the user corresponds to the registered data.

  In addition, when the determination unit does not match the authentication data that is not changed by the input condition control unit that is captured a plurality of times, and the correlation between the authentication data and the registration data is high, the registration data It can be determined that the user corresponds to.

  This configuration does not require a storage area for accumulating past authentication data, and authentication is performed with an authentication device in which authentication data and registration data are handled in different authentication devices or when there is registration data in the IC card. When impersonating, spoofing can be prevented.

  In the authentication apparatus of the present invention, the input condition control means changes at least one of the plurality of authentication data taken in by the input means.

  This makes it possible to easily detect impersonation even when intentionally spoofed authentication data is continuously input from the network, even if it is entered in consideration of changes in the authentication data, further reducing unauthorized use due to impersonation. can do.

  In the authentication apparatus of the present invention, the input condition control means changes the authentication data at a random timing.

  This makes it possible to easily detect impersonation even when intentionally spoofed authentication data is continuously input from the network, even if it is entered in consideration of changes in the authentication data, further reducing unauthorized use due to impersonation. can do.

  In the authentication apparatus according to the present invention, the input condition control unit changes the number of times the authentication data is taken in for each authentication of the user himself / herself.

  As a result, when spoofed authentication data is input a plurality of times, it becomes easier to detect impersonation, and unauthorized use due to impersonation can be reduced.

  According to the authentication device and the authentication method of the present invention, a storage area for storing past authentication data is not required, and authentication data and registration data are handled in a plurality of different authentication devices, or registration data in an IC card. Even when authenticating with such an authentication device, spoofing can be prevented and the possibility of unauthorized use can be reduced more than before.

  Hereinafter, an authentication apparatus according to an embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram illustrating an example of an authentication apparatus according to the present embodiment. In FIG. 1, the authentication device according to the embodiment of the present invention performs authentication by using an iris and unlocks the lock. The authentication using the iris will be described as an example, but the present invention is not limited to the iris, but other than the iris. For example, the present invention can be similarly applied to techniques using human characteristics such as a face, palm print, fingerprint, retinal blood vessel pattern, voice print, and kinematic characteristics such as handwriting, writing pressure, and writing speed. Moreover, the authentication determination means 10 can be widely applied besides the system for unlocking shown in FIG.

  In FIG. 1, the authentication determination unit 10, the iris input device 20, and the lock control unit 30 are connected by a network 40, and when the user enters a specific place, the authentication determination unit 10 performs authentication processing on the user's iris. When the authentication is successful, the lock control means 30 unlocks the entrance of the specific place. The authentication determination unit 10, the iris input device 20, and the lock control unit 30 may be connected by a dedicated communication path.

  The iris input device 20 reads the user's iris with the input means 21 and sends it as authentication data to the authentication determination means 10 via the communication means 22. When using a physical feature other than the iris, an input unit corresponding to the physical feature may be placed in place of the iris input device 20, and the subsequent matching procedure and the like are the same.

  The authentication determination means 10 is connected to the network 40, and input / output means 11 for transmitting / receiving information, and registration data holding for storing registration data created by reading the iris of a user permitted to enter a specific place Means 12, input condition control means 13 for controlling the input condition of the iris input device 20 or the output data of the iris input device 20, and a plurality of times for instructing the iris input device 20 to acquire a plurality of authentication data. For each of the data fetch control means 14 and the authentication data input a plurality of times, the comparison means 15 for comparing the registration data held in the registration data holding means 12 and each of the authentication data input a plurality of times The authentication data holding means 16 to be used and the plurality of authentication data held in the authentication data holding means 16 are used to obtain the degree of correlation between the plurality of authentication data. Consisting of a correlation of the authentication data and the registration data obtained and the determination means 17 performs authentication judgment in.

  Here, for example, a specific example will be described in the case where the number of multiple acquisitions in one authentication is limited to three. The iris input device 20 fetches the authentication data three times since the fetching instruction is issued three times by the data fetch control means 14 a plurality of times. It is assumed that the input condition control means 13 performs control to correctly fetch the authentication data in the first and third times out of the three fetches, but change to pseudo-authentication data in the second time. The input condition control unit 13 may change at least one of the plurality of authentication data captured by the data capture control unit 14 a plurality of times. As a method for changing to the pseudo authentication data, the iris input device 20 replaces the original authentication data with the pseudo authentication data, or, if the input means 21 is a video camera, operates the video signal processing parameters to change the gain. It is conceivable to change the shutter speed.

  The comparison means 15 compares the authentication data sent three times with the registration data in the registration holding data 12 and obtains the degree of correlation. As a method of obtaining the correlation degree, the registration data and the authentication data do not completely match due to the property of physical characteristics. Therefore, the degree of coincidence calculated according to the inter-code distance between the registration data and the authentication data is a predetermined threshold value. If it is above, the degree of correlation is high. Naturally, the authentication data sent for the second time is pseudo-authentication data in this case, and the degree of correlation with the registration data is low. Note that the upper limit equal to or higher than a predetermined threshold is limited in the degree of coincidence obtained according to the inter-code distance between the registration data and the authentication data.

  The authentication data holding means 16 stores the authentication data for processing the authentication data sent three times later. The determination unit 17 determines whether the user is the user from the correlation information between the authentication data for three times output from the comparison unit 15 and the registration data and the authentication data for the three times stored in the authentication data holding unit 16. If the authentication is successful, the lock control means 30 unlocks it. In this way, for example, the pseudo authentication data is not included when the authentication data impersonated via the network is included, so the degree of correlation between the authentication data for three times and the registration data is high. If the user corresponding to the registered data authenticates, the degree of correlation between the first authentication data, the third authentication data, and the registration data is high, and the second authentication data and registration Correlation with data is low, and correct authentication can be performed if the user is the user. When the authentication data is changed by the input condition control means 13, the determination means 17 has a low degree of correlation obtained by the comparison means 15, and when the authentication data is not changed by the input condition control means 13, the correlation obtained by the comparison means 15 When the degree is high, it is determined that the user corresponds to the registered data. In addition, the determination unit 17 uses the corresponding registration data when the authentication data that has not been changed by the input condition control unit 13 that has been captured a plurality of times do not match, and the degree of correlation between the authentication data and the registration data is high. It is determined that it is a person. In the comparison between the authentication data and the registration data as reference data, the determination range may be limited by limiting the upper threshold.

  When importing authentication data multiple times, whether or not the authentication data is processed is arbitrarily determined, and there is a high correlation between the unprocessed authentication data, and the processed authentication data is not processed. If the correlation between the authentication data is low and the correlation between the registered data registered for comparative approval and the unprocessed authentication data is high, it is determined that the user corresponds to the registered data. You can do it.

  As described above, in the first embodiment of the present invention, even if authentication data is obtained illegally and this data is used to impersonate a user, the second authentication data is intentionally changed to pseudo authentication data. Authentication can be rejected as long as it is not inserted.

  In the present embodiment, the number of times the data acquisition control unit 14 takes multiple times is defined as three times, and the number of times of pseudo-authentication data insertion is defined as the second of the three times. (How many times the pseudo data is inserted) and the number of times may be randomly generated using a random number generator or the like. Impersonation becomes more difficult by randomly changing the number of acquisitions and acquisition conditions. Furthermore, with respect to one authentication of the user himself / herself, the number of times authentication data is taken may change each time authentication is performed.

  In this way, even if pseudo-authentication data is intentionally created, spoofing becomes more difficult. Further, by changing the imaging condition for each acquisition of authentication data a plurality of times, the same code is less likely to be generated and spoofing is more difficult. Impersonation data can be deliberately entered by changing the pseudo-authentication data timing, but it will be retried by rejecting authentication, so if the number of retries exceeds the specified number of times, temporary use will be suspended, etc. Correspondence becomes possible.

  In the present embodiment, the number of times the data acquisition control means 14 is acquired is defined as three times, and the number of times of pseudo-authentication data insertion is defined as the second of the three times. May be randomly determined using a random number generator or the like. By making the number of data captures multiple, it is possible to check the variation in data that cannot be obtained by spoofing. In this way, even if pseudo-authentication data is intentionally created, spoofing becomes more difficult. Although spoofed data can be deliberately entered by changing the number of authentication data transmissions, it will be retried by rejecting authentication, so if the number of retries exceeds the specified number of times, temporary use will be suspended, etc. Correspondence becomes possible. By making both the number of acquisitions of the multiple-time data acquisition control unit 14 and the above-described pseudo authentication data insertion timing and number of times random, a stronger impersonation prevention effect can be obtained.

  In the present embodiment, the determination unit 17 may obtain the degree of coincidence between correct authentication data that is not pseudo authentication data. In this way, when the authentication data obtained illegally is mechanically continuously input, the determination means 17 can compare the plurality of authentication data and reject the authentication when they completely match. In FIG. 1, the iris input device 20 is shown as an input unit. However, in addition to the iris pattern, a unit for inputting a face, palm print, fingerprint, retinal blood vessel pattern, voice print, and handwriting is registered in advance by the authentication determination unit 10. It is also possible to easily realize a system that collates with the registered data for authentication.

  As described above, the authentication apparatus of FIG. 1 authenticates with an authentication apparatus in which authentication data and registration data are handled in a plurality of different authentication apparatuses or there is registration data in an IC card even if there is no past data accumulation. In this case, it is possible to prevent impersonation by preventing spoofing.

  FIG. 2 is a flowchart for explaining an example of the authentication process of the authentication device of the present invention. First, the process is started, the user's iris is read by the input means 21 of the input device 20, the authentication data is transmitted via the communication means 22, and the authentication determination means 10 performs data reception processing as the first reception authentication data. (Processing step 50). Next, the first verification process is performed on the received authentication data and the registration data held by the registration data holding unit 12 (processing step 52). Next, a first storage process of identity information indicating physical characteristics of the received authentication data input data and registration data is executed (processing step 54). Next, the input means 21 reads the biological body characteristics of the user, transmits them from the communication means 22, and receives and processes them as the second input authentication data (processing step 56). Next, a second verification process is performed on the received authentication data and the registration data held by the registration data holding unit 12 (processing step 58). Next, a second storage process of identity information indicating the physical characteristics of the received authentication data input data and registration data is executed (processing step 60). Next, a collation operation is performed from the identity information indicating the unique physical characteristics of the first input data and registration data and the identity information indicating the physical characteristics of the second input data and registration data (processing step 62). Next, as a result of the collation operation, it is determined whether or not the identity information indicating both physical characteristics can be approved (processing step 64). If the identity information can be approved (YES), information for unlocking is transmitted (processing step 66). If the identity information cannot be approved (NO), information for authentication rejection is transmitted (processing step 68). Thereafter, the series of processing is terminated.

  As described above, the authentication device and authentication method of the present invention do not require a storage area for storing past authentication data as in the conventional example, and authentication data and registration data are stored in a plurality of different authentication devices. There is an advantage that spoofing can be prevented even when it is handled or when authentication is performed by an authentication device having registration data in the IC card. Moreover, it has the effect of reducing the possibility of unauthorized use more than before, and is useful as an authentication device that approves whether or not the user is the user himself / herself.

  Note that the present invention is not limited to the above-described embodiment, and it is obvious that the embodiment can be appropriately changed within the scope of the technical idea of the present invention.

  The authentication device and authentication method of the present invention do not require a storage area for storing past authentication data as in the conventional example, and the authentication data and registration data are handled in a plurality of different authentication devices. It is possible to prevent spoofing even when authenticating with an authentication device that has registered data in it, and it has the effect of greatly reducing the possibility of unauthorized use compared to the conventional technology. It is useful as an authentication device that approves whether or not.

It is a block diagram which shows an example of the authentication apparatus of this embodiment. It is a flowchart explaining an example of the authentication process of the authentication apparatus of this invention. It is a flowchart explaining an example of the authentication process of the conventional authentication apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Authentication determination means 11 Input / output means 12 Registration data holding means 13 Input condition control means 14 Multiple times data acquisition control means 15 Comparison means 16 Authentication data holding means 17 Determination means 20 Iris input device 21 Input means 22 Communication means 30 Locking control Means 40 Network 100 Authentication device

Claims (8)

  In an authentication apparatus for authenticating a user himself / herself based on authentication data input by reading a user's physical characteristics, input means for acquiring the authentication data and input conditions for acquiring the authentication data are controlled Input condition control means, holding means for holding user authentication information as registration data, comparison means for comparing the authentication data with the registration data and obtaining a correlation between the authentication data and the registration data The authentication data is taken into the input means a plurality of times, and the correlation degree output from the comparison means and the correlation degree of each authentication data taken a plurality of times according to the control content of the input condition control means An authentication apparatus comprising: determination means for performing authentication determination from   The authentication apparatus according to claim 1, wherein the input condition control unit changes at least one of the plurality of authentication data taken in by the input unit.   The authentication apparatus according to claim 2, wherein the input condition control means changes the authentication data at random.   The degree of correlation obtained by the comparison means when the authentication means is changed by the input condition control means is low, and the authentication means is obtained by the comparison means when the authentication data is not changed by the input condition control means. 4. The authentication apparatus according to claim 2, wherein when the degree of correlation is high, it is determined that the user corresponds to the registered data.   The determination means corresponds to the registration data when each of the plurality of authentication data that has not been changed by the input condition control means does not match and the degree of correlation between the authentication data and the registration data is high. 5. The authentication apparatus according to claim 2, wherein the authentication apparatus is determined to be a user.   6. The input condition control means according to any one of claims 1 to 5, wherein the number of times the authentication data is taken is changed each time authentication is performed for one authentication of the user himself / herself. Authentication device.   In the authentication method that authenticates the user based on the authentication data input by reading the physical characteristics of the user, the authentication data captured multiple times does not match and is registered for comparative approval. An authentication method comprising: determining that the user corresponds to the registered data when the correlation with the registered data is high.   In the authentication method that authenticates the user himself / herself based on the authentication data input by reading the physical characteristics of the user, whether or not to process the authentication data is arbitrarily selected when the authentication data is captured multiple times The correlation between unprocessed authentication data is high, and the correlation between processed authentication data and unprocessed authentication data is low. An authentication method characterized by determining that the user corresponds to the registered data when the correlation with the unprocessed authentication data is high.

Images