JP2007041759A - Personal authentication device and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a personal authentication device for achieving high speed and high accuracy while preventing lowering the operability of a user. <P>SOLUTION: Biological characteristic data are stored in association with an identification number in a biological characteristic storing means, and an identification number is acquired from identification equipment by an identification number acquiring means, and the biological characteristic extraction data of a person are acquired by a personal biological characteristic extraction data acquiring means, and the stored biological characteristic data corresponding to the identification number are selected by a biological characteristic data selecting means, and the personal biological characteristic extraction data are collated with the selected biological characteristic data by an identification means, so that identity can be decided. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a personal authentication device and a personal authentication method using an identification device and biometric information.

  In recent years, research and development of personal authentication technology using biometric information has been actively conducted. Examples of biometric information to be used include fingerprints, irises, faces, voices, and veins.

  In personal authentication using biometric information, the user enters his / her identification number to clearly identify who he is, and then collates his / her biometric information with registered biometric information. Then, there is a 1-to-N collation in which one's own biometric information is collated with the biometric information of all registrants without entering his own identification number.

  The one-to-one verification has a problem that the convenience of the user is lower than that of the one-to-N verification because the user has to input his / her identification number.

  On the other hand, in the 1-to-N verification, the number of verifications increases in proportion to the number of registered people, so that there is a problem that the authentication time becomes long and the waiting time of the user becomes long.

  The use of an IC card can be considered as one of the methods for simultaneously solving the problems of these two methods of “decrease in convenience” and “increase in waiting time”.

  By storing the identification number of the user in the IC card, the identification number is read when the IC card is held over the personal authentication device, and convenience is improved as compared with the input of the identification number by hand. However, even in this method, since the user holds the IC card over the apparatus, the convenience is inferior compared with the case where the identification number is not input.

  Further, Patent Document 1 and Patent Document 2 are methods for storing an identification number of a user and a part of biometric information in an IC card and authenticating an individual.

  In patent document 1, the division data which is a part of dividing the biometric information of the authorized user and the ID unique to the biometric information of the authorized user are recorded on the IC card, and the remaining biometric information and ID are registered in the sensor device. This prevents the leakage of biometric information and improves security. However, this method has a problem in terms of improving convenience because the user needs to insert an IC card into the IC card reader / writer.

  In Patent Document 2, registration data related to biometric information of a legitimate user is stored in a mobile device (IC card), and collation processing is distributed to the mobile device and the computer, which is high without centrally managing biometric information. It is to ensure safety. However, this method also has a problem in terms of improving convenience because an action of holding the portable device (IC card) over the reader / writer occurs.

  Patent Document 3 includes a biometric authentication unit that performs biometric authentication using features on the body to be authenticated, and a medium issuing unit that issues an authentication medium when the result of the biometric authentication is positive. A second authentication device comprising: an authentication device; a medium authentication unit that authenticates an authentication target using the authentication medium; and a device control unit that permits use of the device in accordance with a result of authentication by the authentication medium. A biometric authentication combined authentication system is described.

JP 2002-351844 A JP 2005-18128 A JP 2005-44252 A

  It is an object of the present invention to provide a personal authentication device using biometric information, in which a user simply inputs biometric information without entering his / her identification number, authentication time is fast, convenience is high, and high authentication accuracy. It is to provide a personal authentication apparatus and a personal authentication method for realizing the above.

  The present invention relates to a personal authentication device that performs biometric authentication using biometric features, a storage unit that stores biometric feature data extracted in association with an identification number, and an identification number acquisition unit that acquires an identification number from an identification device Personal biometric feature extraction data acquisition means for extracting and acquiring biometric feature data from the biometric information, biometric feature data selection means for selecting stored biometric feature data corresponding to the identification number, and personal biometric feature extraction data. A personal authentication device is provided, comprising: an identity determination unit that collates selected biometric feature data to determine identity, and an output unit that outputs an identity determination result.

  According to the present invention, in the personal authentication method by the personal authentication device that performs biometric authentication using biometric features, the biometric feature data extracted in association with the identification number is stored in the storage means for storing the biometric feature data. The identification number acquisition unit acquires the identification number from the identification device, the personal biometric feature extraction data acquisition unit acquires the personal biometric feature extraction data, and the biometric feature data selection unit stores the stored biometric corresponding to the identification number. Select feature data, store the biometric feature extraction data with the identity biometric feature extraction means, match the selected biometric feature data, determine identity, and output the identity determination result using the output means A personal authentication method is provided.

  According to the present invention, even when a large number of users are registered in a personal authentication device based on biometric information, it is possible to reduce the act of inputting biometric information, achieve high speed, good convenience, and high recognition accuracy. A personal authentication device can be provided.

  A personal authentication device that performs biometric authentication using biometric features according to an embodiment of the present invention includes a storage unit that stores biometric feature data extracted in association with an identification number, and an identification number obtained from an identification device. Number acquisition means, personal biometric feature extraction data acquisition means for acquiring biometric feature extraction data from biometric information, biometric feature data selection means for selecting stored biometric feature data corresponding to an identification number, and personal biometric feature extraction data The identification device and the identification number acquisition means, and an identity determination means for comparing the selected biometric feature data and determining the identity, and an output means for outputting the identity determination result. Are connected by communication means, and are configured to acquire an identification number when the identification device is placed in the vicinity of the identification number acquisition means.

Further, the output means outputs the result authenticated by the display device or the identity determination to a transmission means that permits use of the device.
Further, the identification device is an RFID or a mobile phone.

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of a personal authentication apparatus according to an embodiment of the present invention. In FIG. 1, a personal authentication device 100 includes an identification number acquisition unit 1, a biometric information acquisition unit 2, a biometric feature extraction unit 3, a storage unit 4 that stores biometric feature data, and an identification number provided with a communication unit 21. Calculation means 14 including biometric feature data selection means 20 for selecting biometric feature data from biometric feature data stored in acquisition means 11, biometric information acquisition means 12, personal biometric feature extraction data acquisition means 13, storage means 4, collating means It comprises an identity determination means 15 for determining identity and an output means 16. The personal authentication device 100 is associated with an identification device 19 provided with a communication means 22, a display device (display unit) 17, and various devices 18 that utilize output signals from the output means 16.

  In FIG. 1, the identification number acquisition means 1, the identification number acquisition means 11, the biometric information acquisition means 2, the biometric information acquisition means 12, the biometric feature extraction means 3, which are shown as separate bodies according to the function according to the time of use, The principal biometric feature extraction data acquisition means 13 can be handled as the same means.

  The identification number acquisition means 1 and 11 are means for acquiring the user identification number from the identification device 19 carried by the user, and can be realized by using, for example, a wireless IC tag (RFID) or an RFID reader as the identification device. Communication means 21 and 22 are configured by the wireless IC tag and the RFID reader antenna.

  The biometric information acquisition means 2 and 12 are means for acquiring biometric information of the user (person), and can be realized by using, for example, a finger or a palm vein sensor or a fingerprint sensor.

  The biometric feature extraction means 3 and the personal biometric feature extraction data acquisition means 13 are means for extracting biometric feature data indicating individual characteristics from the biometric information of the user acquired by the biometric information acquisition means 2 and 12, and if it is a vein The minutiae is extracted if it is a blood vessel pattern or fingerprint that is a feature of a vein.

  The calculation means 14 includes means for selecting a biometric feature associated with the identification number stored in the storage means 4 using the user identification number, that is, biometric feature data selection means 20.

  The storage (registration) means 4 is means for registering a user identification number, finger ID (hand ID), extracted biometric feature data, and the like in a storage medium, and can be realized by using a RAM or a file.

  The identity determination means 15 including the matching means is extracted from the user identification number, the finger ID (hand ID), the biometric feature data, and the inputted biometric information for matching stored in the storage means 4. It is a means for collating other feature data. Based on the collation value representing the degree of similarity calculated by the collation, it is possible to identify whether the collator is the principal or another person (identity determination). The larger the collation value, the more similar, that is, the greater the identity.

The output means 16 is a means for outputting the identity determination result to the display device 17 or various devices 18.
The display device 17 is means for displaying the identity determination result on the screen. This can be realized by using a display.

FIG. 2 shows an example of data stored in the storage unit 4.
The first line in FIG. 2 is an item name indicating the user identification number, finger ID, and biometric feature data. The second line is a specific example, in which information of an identification number of 1, a finger ID of 1, and biometric feature data of blood vessel pattern a1 is stored. In the third row, the identification number is 2, the finger ID is 1, and the biometric feature data is blood vessel pattern b1 information. Here, the finger ID is set so as to be uniquely determined as, for example, a right index finger if it is 1, and a middle finger of the right hand if it is 2. In this example, the finger vein is taken as an example, and the finger ID is used. However, the same applies to other biological information (such as fingerprints, hand veins, and irises).

  In FIG. 1, the identification number acquisition unit 1 acquires the user's identification number, and then the biological information acquisition unit 2 acquires the user's biological information. The biometric feature extraction unit 3 extracts a biometric feature from the biometric information and stores it in the storage unit 4 as biometric feature data. As a result, the identification number of the user and the extracted biometric feature data are associated with each other and stored in the storage unit 4.

  When the user having the identification device 19 approaches the identification number acquisition unit 11 when performing personal identification, the identification number of the user stored in the identification device by the operation of the communication units 21 and 22 (the identification number is set for easy understanding). Used, but in a sense that includes identification information).

  Next, the biometric information acquisition means 12 acquires the user's biometric information, and the principal biometric feature extraction data acquisition means 13 acquires the user's principal biometric feature extraction data based on the biometric information.

  The computing unit 14 receives the identification number acquired by the identification number acquiring unit 11 and selects biometric feature data associated with the identification number from the storage unit 4 to prepare data for collation. If no verification data is found, a display signal to that effect is output.

  The stored biometric feature data, that is, registered biometric feature data associated with the selected identification number is collated by the identity judging means 15 to make identity judgment. In this case, matching is also performed for the coincidence of both identification numbers.

  The identity determination result determined by the identity determination means 15 is output from the output means 16 to the display device 17 and displayed, and a part of the output is output to various devices (means) 18 for use.

  As described above, according to the apparatus configuration shown in FIG. 1, the identification number (that is, identification information) is automatically acquired from the identification number acquisition unit 11 by the communication units 21 and 22 using radio. The user performs a single collation by performing one operation for obtaining biometric information, and stores the identification number and the biometric feature data in association with each other. It becomes an approximation to 1 and enables quick collation.

  In the example of FIG. 2, the identification number of the identification device owned by the user (for example, employee badge or chest badge with RFID) is 1, the finger ID to be registered is 1, and the biometric feature data is the blood vessel pattern a1 of the finger or hand. A registration procedure of personal authentication processing in this case will be described.

A registration procedure for personal authentication processing will be described with reference to FIG.
First, in step S100, the identification number acquisition unit checks whether the identification device is in the vicinity of the personal authentication device. If not, the identification device is waiting to be checked. If there is, the identification number is automatically acquired from the identification device in step S110.

  Next, in step S120, the biometric information of the user is acquired by the biometric information acquisition unit from the finger or hand input by the user to the personal authentication device. In the case of a finger, an ID indicating which finger is input is also acquired.

  Next, in step S130, the biometric feature data is extracted from the biometric information by the biometric feature extracting means, and the extracted biometric feature data is obtained.

  Finally, in step S140, the identification number, finger ID, extracted biometric feature data, etc. acquired by the registration means are registered in the storage means.

Next, an authentication procedure for personal authentication processing will be described with reference to FIG.
First, in step S200, the identification number acquisition means checks whether the identification device carried by the user is in the vicinity of the personal authentication device. If not, the identification device is waiting to be checked. If yes, an identification number is automatically acquired from the identification device in step S210.

  Next, in step S220, the blood vessel pattern a1 which is the biometric feature data extracted by the user corresponding to the identification number 1 is selected from the biometric feature data of each user registered in the storage means.

  Next, in step S230, the biometric information is acquired by the biometric information acquisition unit from the finger corresponding to the finger ID1 input to the personal authentication device by the user who is trying to authenticate.

  Next, in step S240, the blood vessel pattern A1, which is biometric feature data, is extracted from the biometric information of the user who is trying to authenticate by the biometric feature extraction data acquisition unit.

  Next, in step S250, the collation means collates the blood vessel pattern a1 which is the biometric feature data selected from among those registered in step S220 with the blood vessel pattern A1 which is the biometric feature data extracted in step S240, and calculates a collation value. To do. For example, assume that the collation value is calculated as 90.

  Next, in step S260, it is determined whether the person is the other person or not by using the collation value 90 and the person determination threshold. For example, if the identity determination threshold is 80, in this case, the collation value is 90, so that the identity is authenticated.

  Next, in step S270, “authenticated” is displayed from the collation result by the display means. Or, use the verification results on various devices.

  By the above processing, it is possible to provide a personal authentication device that allows a user to input biometric information without inputting his / her identification number, provides quick authentication, is convenient, and achieves high recognition accuracy. it can.

  In the above description, the finger vein is taken as an example of biometric information, but it can also be applied to fingerprints, hand veins, and the like.

  As described above, in the personal authentication device using biometric information in which a large number of users are registered, the authentication time is fast, the convenience of the user can be improved, and high authentication accuracy can be realized. A large personal authentication device is provided.

It is a block diagram which shows the structure of the personal authentication apparatus which concerns on one Example of this invention. It is a figure which shows the example of a storage means. It is a flowchart which shows the registration procedure of a personal authentication apparatus. It is a flowchart which shows the authentication procedure of a personal authentication apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1,11 ... Identification number acquisition means, 2,12 ... Biometric information acquisition means, 3 ... Biometric feature extraction means, 4 ... Storage means (memory | storage device), 13 ... Personal biometric feature extraction data acquisition means, 14 ... Calculation means, 15 ... identity determining means, 16 ... output means, 17 ... display device (display unit), 18 ... various devices (means), 19 ... identification device, 21, 22 ... communication means, 100 ... personal authentication device.

Claims (6)

In a personal authentication device that performs biometric authentication using biometric features,
Storage means for storing biometric feature data extracted in association with an identification number;
An identification number acquisition means for acquiring an identification number from the identification device;
A biometric feature extraction data acquisition unit for acquiring biometric feature data from biometric information;
Biometric feature data selection means for selecting stored biometric feature data corresponding to the identification number;
It comprises identity determination means for comparing identity biometric feature extraction data with stored and selected biometric feature data to determine identity, and output means for outputting identity determination results. Personal authentication device.   2. The identification device according to claim 1, wherein the identification device and the identification number acquisition unit are connected by a communication unit, and an identification number is acquired when the identification device is placed in the vicinity of the identification number acquisition unit. Personal authentication device.   The personal authentication device according to claim 1, wherein the output unit outputs a result of authentication by the display device or identity determination to a transmission unit that permits use of the device.   2. The personal authentication apparatus according to claim 1, wherein the identification device is an RFID or a portable device. In a personal authentication method by a personal authentication device that performs biometric authentication using biometric features,
In the storage means for storing the biometric feature data, the biometric feature data extracted in association with the identification number is stored,
The identification number acquisition means acquires the identification number from the identification device,
The principal biometric feature extraction data acquisition means acquires the principal biometric feature extraction data,
The stored biometric feature data corresponding to the identification number is selected by the biometric feature data selection means, and the identity biometric feature extraction data is stored and compared with the selected biometric feature data by the identity determination means. Determine
A personal authentication method, wherein the identity determination result is output by an output means. 6. The personal authentication method according to claim 5, wherein when the identification device carried by the person approaches the identification number acquisition unit, the identification number is acquired via a communication unit.

Images