JP2007141113A - Ic card having biometrics authentication function and ic card program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an IC card capable of changing processing content of biometrics authentication based on failure ratio of the biometrics authentication such as fingerprint authentication. <P>SOLUTION: A fingerprint authentication command 10 provided to the IC card 1 is the one for attaining the fingerprint authentication for matching authenticated fingerprint information 201 transmitted from a terminal with reference fingerprint information 101. The fingerprint authentication command 10 stores history of fingerprint authentication results in fingerprint authentication history information 102 whenever the fingerprint authentication is performed. In addition, the fingerprint authentication command 10 refers to the failure ratio calculated from the fingerprint authentication history information 102, updates reference fingerprint information 101 when the failure ratio becomes request level information 103 or more and stops the fingerprint authentication when the failure ratio becomes stop level information 104 or more. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an IC card and an IC card program having a biometric authentication function for authenticating a user by using biometric information that is a physical feature of the user, and more particularly, considering the authentication performance of biometric authentication. Related to the technology that operates.

  In a system using an IC card, user authentication is often required to confirm the legitimacy of a user using the system before providing a service to the user. For example, an ATM installed in a bank requires a user to authenticate a PIN (Personal Identification Number) before performing a transaction such as payout.

However, since the PIN is generally a four-digit number, there is a possibility that the IC card can be used illegally when the IC card is stolen by looking at the PIN or guessing the PIN from the user's personal information. There is.
For this reason, in recent years, systems that require higher security such as financial transactions are increasingly using biometric authentication methods that authenticate users by using user biometric information such as fingerprints, voiceprints, and irises. .

  In the biometric authentication method using an IC card, the user's biometric information is stored in the IC card in advance, and the user's biometric information read on the system side and the biometric information stored in the IC card are stored in the IC card. By verifying inside the card, the user who uses the IC card is authenticated.

  As biometric information used for authentication, information unique to each user such as fingerprints and hand veins is used. However, system changes due to changes in biometric information over time (for example, fingertip wounds and changes due to aging) In some cases, the biometric information of the user read on the side and the biometric information stored in the IC card fail to collate, and biometric authentication fails.

  In order to avoid such a case, in Patent Document 1 and Patent Document 2, a plurality of user authentication means including biometric authentication are provided, and the user authentication means are combined so as to satisfy the required authentication performance. And a user authentication system that authenticates a user using different biometric authentication.

However, if a user authentication system using an IC card is provided with a plurality of biometric authentication means, it is necessary to store a plurality of pieces of biometric information in the IC card, so that the memory capacity is much smaller than that of the server. Not suitable for IC cards.
In the above-described technique, information (for example, failure rate) indicating authentication performance when a user is authenticated by each user authentication unit is stored in the server, and thus this information cannot be used in other systems. There is also a problem.

Therefore, the present applicant has already disclosed an IC card capable of promptly notifying that the authentication performance of biometric authentication is deteriorated due to secular change or the like in Patent Document 3, and authenticating user authentication in a plurality of systems. It is possible to use the performance.
JP 2003-186836 A JP 2004-152045 A Japanese Patent Application No. 2005-184684

  However, in the invention disclosed in Patent Document 3 described above, a history of biometric authentication results (success / failure) is held in the IC card, and the failure rate of biometric authentication calculated from this history is a set value. This is an invention for notifying the terminal device of the fact that the failure rate exceeds the set value, and is not a technology that the IC card itself can use.

  For example, the cause of the failure rate exceeding a certain set value is that a third party other than a legitimate user may be misusing the IC card. It is significant in terms of security that the card itself stops the function of biometric authentication.

  In addition, when biometric authentication performance deteriorates due to secular change or environmental change, the user needs to update the biometric information stored in the IC card, so when the failure rate exceeds a certain set value If the IC card itself can update the biometric information, the convenience for the user can be improved.

  Therefore, in view of the above-described problems, the present invention utilizes the biometric authentication failure rate such as stopping the biometric authentication function when the biometric authentication failure rate exceeds a set value. It is an object of the present invention to provide an IC card and an IC card program that can change authentication processing.

  1st invention which solves the subject mentioned above is an IC card used in combination with a terminal device which authenticates a user using a user's biometric information, and the IC card was read by the terminal device Reference biometric information that is collated with terminal biometric information that is user biometric information is stored, and the IC card is a bio that collates the terminal biometric information transmitted from the terminal device with the reference biometric information. A biometrics authentication command that is a means for executing metrics authentication, wherein the biometrics authentication command stores an authentication result history of matching between the terminal biometric information transmitted from the terminal device and the reference biometric information Has history information and is calculated from the authentication history information. Based on the failure rate information indicating the failure rate of the biometric authentication command to be, and changes the process to be executed.

  Further, the second invention is the IC card according to the first invention, wherein the biometric authentication command provided in the IC card collates the terminal biometric information with the reference biometric information. When the failure rate information calculated from the authentication history information is a value equal to or higher than a predetermined first level, and the terminal biometric information and the reference biometric information are successfully verified. The reference biometric information stored in the IC card is updated to the terminal biometric information used for collation.

  Furthermore, the third invention is the IC card according to the second invention, wherein the biometrics authentication command provided in the IC card has the failure rate information calculated from the authentication history information in advance. The failure rate information is included in response data to be transmitted to the terminal device when the value is equal to or greater than the predetermined first level.

  Furthermore, a fourth invention is the IC card according to any one of the first to third inventions, wherein the biometrics authentication command collates the terminal biometric information with the reference biometric information. If the failure rate information calculated from the authentication history information is a value equal to or higher than a predetermined second level, the collation between the terminal biometric information and the reference biometric information is stopped. The process which performs is performed.

  Further, the fifth invention is the IC card according to the fourth invention, wherein the failure rate information calculated from the authentication history information is predetermined in the biometrics authentication command provided in the IC card. The failure rate information is included in response data transmitted to the terminal device when the value is equal to or higher than the second level.

Furthermore, the sixth invention is an IC card program incorporated in an IC card used in combination with a terminal device that authenticates the user using the biometric information of the user, the IC card program comprising:
Receiving terminal biometric information which is user biometric information read by the terminal device;
Collating the received terminal biometric information with the reference biometric information stored in the IC card, and storing a history of biometric authentication results;
Calculating failure rate information indicating a failure rate of user authentication from a history of biometric authentication results stored in the IC card;
The calculated failure rate information is compared with a predetermined first level value, the calculated failure rate information is a value greater than or equal to the first level, and the terminal biometric information and the reference bio When the verification of the metrics information is successful, the reference biometric information stored in the IC card is updated to the terminal biometric information used for verification,
It is characterized by including.

Furthermore, the seventh invention is an IC card program incorporated in an IC card used in combination with a terminal device that authenticates the user using the biometric information of the user, the IC card program comprising:
Calculating the failure rate information indicating a failure rate of user authentication from a history of matching results;
When the calculated failure rate information is compared with a predetermined second level value, and the calculated failure rate information is a value equal to or higher than the second level,
Stopping collating the terminal biometric information with the reference biometric information;
It is characterized by including.

  According to the present invention described above, the failure rate information for biometric authentication is calculated from the history storing the biometric authentication result, and the calculated failure rate information is referred to when performing biometric authentication. The process of biometric authentication can be changed based on the failure rate information.

  Furthermore, when the failure rate information is a value equal to or higher than a predetermined first level and the terminal biometric information and the reference biometric information are successfully verified, the failure rate information is stored in the IC card. By executing the process of updating the reference biometric information to the terminal biometric information used for collation, when the authentication performance of biometric authentication deteriorates due to aging or environmental changes, the IC card itself Metric information can be automatically updated, and user convenience can be improved.

  Further, when the failure rate information is a value equal to or higher than a predetermined second level, a legitimate user can be obtained by executing a process of stopping the matching between the terminal biometric information and the reference biometric information. When there is a possibility that a third party other than the above is misusing the IC card, the biometric authentication can be stopped.

From here, the IC card according to the present invention will be described in detail with reference to the drawings. FIG. 1 shows an example of a system using an IC card according to the present invention.
In the system shown in FIG. 1, biometric information (here, fingerprint information) of a user who uses the terminal device 2 is read by the fingerprint sensor 20 of the terminal device 2, and the user has the fingerprint information read by the fingerprint sensor 20. The IC card 1 to be verified is used.

  The IC card 1 possessed by the user is provided with a fingerprint authentication function for authenticating the user by collating the fingerprint information transmitted from the terminal device 2 with the fingerprint information stored in advance in the IC card 2. Using the fingerprint information transmitted from the terminal device 2, the fingerprint authentication result history is stored every time fingerprint authentication is performed.

  Then, the IC card 1 automatically receives new fingerprint information when the performance of fingerprint authentication deteriorates due to secular change, that is, when the failure rate calculated from the history of fingerprint authentication results exceeds a predetermined value. To register or stop the fingerprint authentication function.

When fingerprint authentication performance deteriorates due to aging, etc., that is, when the fingerprint authentication failure rate has improved, the fingerprint information is automatically updated so that the user's convenience is not burdened. Can be secured.
Also, by stopping the fingerprint authentication function when the performance of fingerprint authentication is degraded, when there is a possibility that a third party other than a legitimate user has illegally used the IC card, Can be prevented.

  FIG. 2 is a hardware structure diagram of the IC chip 11 mounted on the IC card 1. The IC chip 11 includes a central processing unit 110 (hereinafter referred to as “CPU”), a read-only memory 111 (hereinafter referred to as “ROM”), and an EEPROM 113 (Electrically Erasable Programmable Read-Only Memory) as rewritable memory. Random access memory 112 (hereinafter referred to as RAM) as a volatile memory, an I / O circuit 114 for communicating data with an external terminal (not shown), and the like are connected to the BUS 115.

  The present invention does not limit the specifications of the IC chip 11, and an IC chip having specifications suitable for the application of the IC card 1 can be selected. For example, the capacities of the ROM 111 and the EEPROM 113 are not limited, and the rewritable memory may be a memory other than the EEPROM such as a ferroelectric memory or a flash memory. The IC chip 11 may include other devices (not shown) such as a timer circuit, a cryptographic operation circuit, or a coprocessor circuit.

In FIG. 1, an IC card 1 is a card in which an IC chip 11 is embedded in a plastic card having the same size as a cash card or a credit card. In this embodiment, the IC card 1 is a contact IC card. The IC card 1 has a built-in antenna coil and wirelessly communicates with the terminal device 2 wirelessly, or a dual interface IC that has two communication functions of contact data communication and contactless data communication. It may be a card.
Furthermore, the IC card 1 may be in the form of a SIM (Subscriber Identity Module) that is used by being incorporated in a mobile phone or a USB reader / writer.

  FIG. 3 is a software block diagram of the IC card 1 according to the present invention. As shown in FIG. 3, the IC card 1 has a fingerprint authentication command 10 for authenticating a user who collates the fingerprint information of the user read by the fingerprint sensor 20 of the terminal device 2 as a program for operating the CPU 110 of the IC chip 11. As the information used by the fingerprint authentication command 10, the fingerprint authentication history information 102 storing the reference fingerprint information 101 as a template of the fingerprint information of the user holding the IC card 1 and the history of the fingerprint authentication result by the fingerprint authentication command 10. In addition, update level information 103 and stop level information 104 referred to when managing the fingerprint authentication function are stored.

As shown in FIG. 3, the fingerprint authentication command 10 provided in the IC card 1 is a program that operates on an operating system mounted on the IC card 1.
The fingerprint authentication command 10 is reference fingerprint information 101 that is user fingerprint information stored in the IC card 1 and user fingerprint information that is read by the fingerprint sensor 20 of the terminal device 2 and transmitted to the IC card 1. The fingerprint authentication result is stored in the fingerprint authentication history information 102 every time the fingerprint authentication is executed by means for realizing the fingerprint authentication for authenticating the user by collating with the authentication fingerprint information 201.

  In addition, the fingerprint authentication command 10 calculates a failure rate of fingerprint authentication from the fingerprint authentication history information 102, and is executed by the fingerprint authentication command 10 itself based on the calculated failure rate, the update level information 103, and the stop level information 104. It has a function to change the processing.

  The update level information 103 referred to when managing the fingerprint authentication function is information indicating a failure rate when it is determined that the reference fingerprint information 101 stored in the IC card 1 needs to be updated. The level information 104 is information indicating a failure rate when it is determined that it is necessary to stop the execution of the fingerprint authentication command 10 provided in the IC card 1.

  FIG. 4 is a diagram for explaining the setting states of the update level information 103 and the stop level information 104. As shown in FIG. 4, the value of the stop level information 104 is set to a value larger than the value of the update level information 103.

If the failure rate calculated from the fingerprint authentication history information 102 is the update level information 103 or more and the stop level information 104 or less, the fingerprint authentication command 10 recognizes that the user authentication performance using the fingerprint information has deteriorated. Attempts to update the reference fingerprint information 101 to improve the authentication performance.
If the failure rate is equal to or higher than the stop level information 104, the fingerprint authentication command 10 prevents unauthorized use because a third party other than a legitimate user may use the IC card 1 illegally. Cancel fingerprint authentication accordingly.

  From here, a series of operations of the fingerprint authentication command 10 provided in the IC card 1 will be described. FIG. 5 is a flowchart showing a series of operations of the fingerprint authentication command 10.

  The first step S10 of this series of operations is a step in which the IC card 1 is activated by the terminal device 2. In this step, the terminal device 2 activates the IC card 1 in accordance with, for example, a procedure described in the ISO 7816 standard, and the IC card 1 returns an ATR (Answer To Reset) to the terminal device 2. Communication of the IC card 1 is started.

  The next step S11 is a step in which the IC card 1 receives the command APDU of the fingerprint authentication command 10 from the terminal device 2. In this step, the fingerprint information of the user is read by the fingerprint sensor 21 of the terminal device 2, and the command APDU of the fingerprint authentication command 10 including the authentication fingerprint information 201 is transmitted from the terminal device 2 to the IC card 1.

  The next step S12 is a step in which the fingerprint authentication command 10 is executed and the fingerprint information of the user is collated. In this step, from the commands stored in the IC card 1, the program code indicated by the command identifier received in step S11, that is, the program code of the fingerprint authentication command is executed.

The next step S13 is a step in which the process is branched based on the failure rate calculated from the fingerprint authentication history information 102 stored in the IC card 1. The fingerprint authentication command 10 calculates a failure rate from the fingerprint authentication history information 102. If the failure rate is equal to or higher than the stop level information 104, the fingerprint authentication process is stopped and the response data is changed to data indicating the stop of fingerprint authentication. Set and proceed to step S19.
If the failure rate is less than the stop level information 104, the process proceeds to step S14.

  Step S14 is a step of verifying the user by collating the fingerprint information of the user. The fingerprint authentication command 10 authenticates the user by comparing the authentication fingerprint information 201 received from the terminal device 2 with the reference fingerprint information 101 stored in the IC card 1 according to a predetermined procedure.

  The next step S15 is a step in which the IC card 1 updates the fingerprint authentication history information 102 in accordance with the success or failure of the fingerprint authentication command 10 in step S12. The contents processed by the fingerprint authentication command 10 in this step will be described later.

In the next step S16, the process is branched based on the failure rate calculated from the fingerprint authentication history information 102 updated in step S15. The fingerprint authentication command 10 calculates a failure rate from the fingerprint authentication history information 102 updated in step S15. If the failure rate is less than the update level information 103, the response data is set to data indicating success or failure of fingerprint authentication. Then, the process proceeds to step S19.
If the failure rate is equal to or higher than the update level information 103, the process proceeds to step S17.

The next step S17 is a step in which the process branches based on the success or failure of the fingerprint authentication executed in step S14. If the fingerprint authentication is successful in step S14, the process proceeds to step S18.
If fingerprint authentication fails in step S14, the data indicating failure of fingerprint authentication and the failure rate calculated in step S16 are included in the response data, and the process proceeds to step S19.

Step S18 is a step of updating the reference fingerprint information 101 stored in the IC card 1. In this step, the fingerprint authentication command 10 updates the reference fingerprint information 101 stored in the IC card 1 to the value of the authentication fingerprint information 201 used for the fingerprint authentication in step S14, and initializes the fingerprint authentication history information 102. .
Then, the data indicating the success of fingerprint authentication and the failure rate calculated in step S16 are included in the response data, and the process proceeds to step S19.

  Step S19 is a step of returning the response data of any one of Step S13, Step S16, Step S17 or Step S18 to the terminal device 2 as a response APDU. As described above, if the failure rate is equal to or higher than the update level information 103, this response APDU includes the failure rate of fingerprint authentication.

  FIG. 6 is a flowchart showing a detailed procedure for updating the fingerprint authentication history information 102 in step S15 of FIG. 5, and FIG. 7 is a diagram for explaining the fingerprint authentication history information 102 at the time of update.

  FIG. 7A illustrates the fingerprint authentication history information 102 before being updated. As shown in FIG. 7A, in the present embodiment, the fingerprint authentication history information 102 is composed of information of 2 octets. In FIG. 7A, the first bit of the fingerprint authentication history information 102 indicates the success or failure of the previous fingerprint authentication command, and the 32nd bit indicates the success or failure of the previous fingerprint authentication command.

  Further, “1” of each bit of the fingerprint authentication history information 102 indicates a verification failure, and “0” indicates a verification success. For example, “1” in the second bit in FIG. 6A means that the previous fingerprint authentication command has failed.

  The first step S20 of the operation for updating the fingerprint authentication history information is a step of bit-shifting the fingerprint authentication history information 102 in order to set the collation result performed in step S14 of FIG. In this step, the fingerprint authentication command 10 copies the value of the fingerprint authentication history information 102 stored in the EEPROM 113 to a bit operable memory such as the register of the CPU 110 or the RAM 112, and the fingerprint authentication history information copied to the bit operable memory. 102 is bit-shifted in the direction of deleting the oldest history.

  FIG. 7B is a diagram for explaining fingerprint authentication history information that is copied to a bit-operable memory and bit-shifted. As shown in FIG. 7B, the fingerprint authentication command 10 erases the bit indicating the oldest history (here, the 32nd bit) of the fingerprint authentication history information 102 copied to the bit operable memory. In FIG. 7B, the fingerprint authentication history information 102 in FIG. 7A is shifted to the right by 1 bit.

  The next step S21 is a step in which the process branches depending on the success or failure of the fingerprint authentication in step S14 of FIG. In step S21, if the fingerprint authentication command 10 is successful, the process proceeds to step S22. If the fingerprint authentication command 10 is unsuccessful, the process proceeds to step S23.

Step S22 executed when the fingerprint authentication command 10 is successful is a step of writing a value of “0” in the first bit of the fingerprint authentication history information 102 after the bit shift in step S20.
Then, as shown in FIG. 7C, after the value “0” is written in the first bit of the fingerprint authentication history information 102 bit-shifted in step S20, the fingerprint authentication history information 102 stored in the EEPROM 113 is written. Is overwritten on the value of the fingerprint authentication history information 102 updated on the memory capable of bit manipulation, and the operation of updating the fingerprint authentication history information 102 is completed.

  Step S23 executed when the fingerprint authentication command fails is a step of writing a value of “1” into the first bit of the fingerprint authentication history information 102 bit-shifted in step S20. Then, as shown in FIG. 7D, after the value “1” is written in the first bit of the fingerprint authentication history information 102 bit-shifted in step S20, the fingerprint authentication history information stored in the EEPROM 113 is written. The operation of updating the fingerprint authentication history information 102 by overwriting the value of the fingerprint authentication history information 102 updated on the bit operable memory 102 is completed.

  When calculating the failure rate from the fingerprint authentication history information 102 in step S13 or step S16 of FIG. 5, the number of bits that are “1” in the fingerprint authentication history information 102 is counted with a predetermined algorithm. By doing so, the number of fingerprint authentication failures is counted. Then, by using the function of the CPU 110 and dividing the number of failures by “32”, which is the number of times the fingerprint authentication history is stored, the fingerprint authentication failure rate is calculated.

The figure which showed an example of the IC card system. The hardware structure figure of the IC chip mounted in an IC card. The software block diagram of an IC card. The figure explaining the setting state of update level information and stop level information. The flowchart which showed a series of operation | movement of the fingerprint authentication command. The flowchart which showed the detailed procedure of the operation | movement which updates fingerprint authentication log | history information. The figure explaining the fingerprint authentication log | history information at the time of an update.

Explanation of symbols

1 IC card 11 IC chip 110 CPU, 111 ROM, 112 RAM, 113 EEPROM
10 Fingerprint authentication command 101 Reference fingerprint information 102 Fingerprint authentication history information 103 Request level information 104 Stop level information 2 Terminal device 20 Fingerprint sensor 201 Authentication fingerprint information

Claims (7)

An IC card used in combination with a terminal device that authenticates a user using user biometric information, wherein the IC card is
Reference biometric information to be compared with authentication biometric information that is user biometric information read by the terminal device is stored, and the IC card stores the authentication biometric information and the reference biometric information transmitted from the terminal device. A biometric authentication command that is a means for executing biometric authentication for comparing information, wherein the biometric authentication command is a verification result of the authentication biometric information transmitted from the terminal device and the reference biometric information. An IC card having authentication history information stored therein, and changing processing to be executed based on failure rate information indicating a failure rate of the biometrics authentication command calculated from the authentication history information .   2. The IC card according to claim 1, wherein the biometric authentication command provided in the IC card is calculated from the authentication history information when the authentication biometric information and the reference biometric information are collated. Stored in the IC card when the failure rate information is a value equal to or higher than a predetermined first level and the verification biometric information and the reference biometric information are successfully verified. An IC card that executes a process of updating the reference biometric information to the authentication biometric information used for verification.   3. The IC card according to claim 2, wherein the failure rate information calculated from the authentication history information is equal to or higher than the predetermined first level, in the biometric authentication command provided in the IC card. An IC card characterized in that the failure rate information is included in response data to be transmitted to the terminal device when the value is.   4. The IC card according to claim 1, wherein the biometric authentication command is calculated from the authentication history information before comparing the authentication biometric information and the reference biometric information. 5. When the failure rate information to be performed is a value equal to or higher than a predetermined second level, a process of canceling the verification between the authentication biometric information and the reference biometric information is performed. IC card.   5. The IC card according to claim 4, wherein the biometrics authentication command provided in the IC card has a failure rate information calculated from the authentication history information equal to or higher than the second level. When the value is a value, the failure rate information is included in the response data transmitted to the terminal device. An IC card program incorporated in an IC card used in combination with a terminal device that authenticates the user using user biometrics information, the IC card program comprising:
Receiving authentication biometric information which is user biometric information read by the terminal device;
Collating the received biometric information received with the reference biometric information stored in the IC card, and storing a history of biometric authentication results;
Calculating failure rate information indicating a failure rate of user authentication from a history of biometric authentication results stored in the IC card;
The calculated failure rate information is compared with a predetermined first level value, and the calculated failure rate information is a value equal to or higher than the first level, and the authentication biometric information and the reference bio A step of updating the reference biometric information stored in the IC card to the authentication biometric information used for the verification when the verification of the metrics information is successful;
IC card program characterized by including. An IC card program incorporated in an IC card used in combination with a terminal device that authenticates the user using user biometrics information, the IC card program comprising:
Calculating the failure rate information indicating a failure rate of user authentication from a history of matching results;
When the calculated failure rate information is compared with a predetermined second level value, and the calculated failure rate information is a value equal to or higher than the second level,
Stopping verification of the authentication biometric information and the reference biometric information;
IC card program characterized by including.

Images