JP2007148478A - Individual confirmation device and non-contact ic card - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a individual confirmation device and an IC card for making it unnecessary to preliminarily register information for specifying an individual with high precision such as biometrics information and personal information (or card information) in a database managed by the others. <P>SOLUTION: An IC card body is made to store biometrics information and password information. In using the IC card, the biometrics information is directly read from a user oneself, and the user oneself is made to directly input a password. Then, the biometrics information and password information read from the IC card main body are compared with the biometrics information directly read from the user oneself and password information input by the user oneself so that it is possible to confirm and authenticate the user oneself. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a technique that can identify a person with extremely high accuracy using a password and biometric authentication information.

  Recent development of IC chip technology is remarkable, and a large storage capacity has been developed. Also, the technology using this has been improved in all fields. For example, a number of contactless identity verification systems in which an IC chip is embedded in the card body have been developed. However, in the conventional identity verification system using an IC card, most of the methods for confirming whether or not the user is an identity by entering an ID, which is a password or personal information, has been stolen. Increasing use of passwords by deciphering them based on their birth date and phone number is increasing.

  Therefore, conventionally, a method for identifying the person with high accuracy from biological information as shown in Patent Document 1 and Patent Document 2, a so-called biometric authentication technique has been developed. Biological information for identifying a person is information such as a fingerprint, a voice print, a handwriting, a vein print, face authentication, and an iris (retinal pattern), which are all different from person to person.

The technique described in Patent Document 1 divides an IC chip of an IC card into a personal information storage unit and a biometric information storage unit, and directly reads biometric authentication information read from the IC card and the person himself / herself. The biometric authentication information is compared, and the personal information read from the IC card is compared with the personal information read from the personal information database of the server computer.
Then, only when the comparison result of the biometric authentication information and the comparison result of the personal information coincide with each other, the person is authenticated.

In addition, the technique described in Patent Document 2 previously stores, in a database, card information of each contactless IC card and fingerprint information of the true owner of the IC card as registered card information and registered fingerprint information. I am trying to register.
In use, when the user of the non-contact type IC card holds the IC card over the non-contact type reader / writer and touches the IC card fingerprint input means with the fingertip, the fingerprint information is read into the IC card, and the fingerprint Information is read together with card information by a server via a non-contact type reader / writer. The server confirms whether or not the card information is registered as registered information, and authenticates the IC card. If authenticated, the server checks whether or not the fingerprint information is registered as registered fingerprint information. Authentication is performed.
JP 2003-228705 A JP 2004-348478 A

  However, in the technique of Patent Document 1, it is not necessary to register biometric authentication information in advance in a database, but personal information must be registered. Therefore, it is necessary for hospitals, banks, etc. to store personal information in a database, handling it with strict care, and strictly conducting firewalls etc. in terms of security, never illegally from inside and outside It was necessary to take measures to prevent intrusion.

  In the technique of Patent Document 2, fingerprint biometric authentication information and card information must be registered in a database in advance. Therefore, in this Patent Document 2, in addition to the case of Patent Document 1, it is necessary to register biometric authentication information in the database as well, and the handling and security problems on the user side such as hospitals and banks are remarkable. Met.

  The present invention has been improved and removed in view of the above-mentioned problems, such as biometric authentication information such as biometric information that can identify an individual and a database in which another person manages personal information (or card information), etc. We will provide an identity verification device and IC card that do not need to be registered in advance.

  In order to solve the above problems, the means of claim 1 adopted by the present invention reads the biometric information directly from the IC card body provided with the biometric authentication information storage unit and the password information storage unit, and the user himself / herself. A biometric authentication information input unit for inputting, a password information input unit for a user to directly input a password, a biometric authentication information reading unit for reading biometric authentication information from the IC card body, and a biometric authentication of the IC card body A biometric authentication information comparison unit that compares biometric authentication information read from the information storage unit with the user's own biometric authentication information input from the biometric authentication information input unit, and read from the password information storage unit of the IC card body A password information comparison unit that compares the password information with the password information input from the password information input unit; An identification device, characterized in that on the basis of a comparison result of the information comparison unit, and password information comparison part configured in an authentication unit for performing authentication.

  The means of claim 2 employed by the present invention is a non-contact type IC card having an IC chip provided with a storage unit for biometric authentication information and a storage unit for password information.

In the invention of claim 1, biometric authentication information and password information are stored in the IC card main body, and the biometric information is directly read from the user himself / herself and the password is directly given to the user himself / herself. It is made to input. Then, authentication is performed by comparing the biometric authentication information and password information read from the IC card body with the biometric authentication information read directly from the user himself / herself and the password information input by the user himself / herself. .
With such an authentication method, there is no need for a user such as a hospital or bank to register biometric authentication information or personal information (or card information) in advance and manage it as a database. You can verify your identity below.

  The invention of claim 2 is the technology of the IC card used in the invention of claim 1, in which biometric authentication information and password information are stored.

  Hereinafter, the configuration of the present invention will be described with reference to a personal identification device according to an embodiment shown in the drawings. FIG. 1 is a block diagram of an IC card 1 according to an embodiment of the present invention, and FIG. 2 is a block diagram showing the overall configuration of an identity verification device 5. As shown, the IC card 1 has an IC chip 2 embedded in the main body. The IC chip 2 uses the password information storage unit 3 in which the password information is stored and the biological features (body information) such as fingerprint, handwriting, vein pattern, face authentication, iris (retinal pattern), palm pattern, and voice pattern. There is provided a biometric authentication information storage unit 4 in which biometric authentication information, which is information for specifying, is stored. This IC card is carried by the user and managed under the user's own responsibility.

  The identity verification device 5 has an IC card insertion unit 6, a biometric authentication information input unit 9, and a password input unit 10 as external input means. The IC card insertion unit 6 functions as an insertion slot for the IC card 1. The biometric information input unit 9 is, for example, for reading a fingerprint directly from the user himself / herself, generating biometric information from the read fingerprint, and inputting the biometric information to the biometric information comparison unit 11. A method in which a fingerprint reader or the like is externally connected is employed. On the other hand, the password information input unit 10 is integrally incorporated in the identity verification apparatus main body by a numeric keypad method or a touch panel method.

  Inside the identity verification device 5, a biometric authentication information reading unit 7, a password information reading unit 8, a biometric authentication information comparison unit 11, a password information comparison unit 12, and an authentication unit 13 are provided. The biometric information reading unit 7 reads biometric information from the IC card 1 inserted in the IC card insertion unit 6. Similarly, the password information reading unit 8 reads password information from the IC card 1 inserted into the IC card insertion unit 6.

  The biometric information comparison unit 11 compares the biometric information read from the IC card 1 by the biometric information information unit 7 with the biometric information of the person read directly from the biometric information input unit 9 such as a fingerprint reader. . The password information comparison unit 12 compares the password information read from the IC card 1 by the password information reading unit 8 with the password information input by the user from the touch panel or the like. The authentication unit 13 makes a determination based on the comparison result of the biometric authentication information comparison unit 11 and the comparison result of the password information comparison unit 12, and authenticates the identity only when both comparison results match. .

  Next, the operation | movement aspect of the identification apparatus 5 is demonstrated with reference to FIG.1 and FIG.2. First, the password of the user is stored in the password information storage unit 3 of the IC card 1 by a reader / writer (not shown). Similarly, biometric information such as the fingerprint of the user is stored in the biometric information storage unit 4 of the IC card 1. The IC card 1 is carried by the user himself / herself and managed under self-responsibility.

  Next, when the user himself / herself is a doctor at the hospital and logs in to a dedicated personal computer, or when a researcher at the laboratory enters a research facility where entry / exit is strictly controlled, the user must be identified. A case of authentication will be described. First, the user himself / herself inserts the IC card 1 into the IC card insertion portion 6 of the identity verification device 5. When the IC card 1 is inserted, in the identity verification device 5, the biometric information reading unit 7 reads biometric information such as a fingerprint from the biometric information storage unit 4 of the IC card 1 and uses this information as a biometric information comparison unit. 11 to send. Similarly, the password information reading unit 8 reads password information from the password information storage unit 3 of the IC card 1 and transmits it to the password information comparison unit 12.

  On the other hand, the user presses the finger relating to the fingerprint registered in the biometric information storage unit 4 of the IC card 1 into the biometric information input unit 9 such as a fingerprint reader connected as an external connection device of the identification device 5. Predict the user's own biometric authentication information directly. The input unit 9 generates raw biometric authentication information from the read fingerprint information and the like. The generated biometric information is transmitted to the biometric information comparison unit 11. The biometric authentication information comparison unit 11 compares the biometric authentication information directly acquired from the user himself / herself with the registered biometric authentication information read from the IC card 1, and the two biometric authentication information matches. In such a case, the fact that the biometric authentication information matches is transmitted to the authentication unit 13.

  In addition, the user inputs a password from the password information input unit 10 such as a touch panel integrally attached to the identity verification device 5. The input unit 10 transmits the input password information to the password information comparison unit 12. The password information comparison unit 12 compares the password information directly input by the user and the registered password information read from the IC card 1, and if the two password information matches, the password information comparison unit 12 It sends information that the information matches.

  The authentication unit 13 indicates that the signal indicating that the biometric information transmitted from the biometric information comparison unit 11 matches the password information transmitted from the password information comparison unit 12. Only when a signal is obtained, it is authenticated that the information in the IC card 1 is correct. That is, it is confirmed that the holder of the IC card 1 is the user. As a result, it is possible to perform high-precision personal authentication under the self-management of the user himself / herself without the user side having an enormous database.

  By the way, the present invention is not limited to the above-described embodiment, but is a field that requires high-precision personal authentication, for example, a medical institution such as a hospital, a cashing service field in a financial institution such as a bank, and a laboratory. It can be applied in a wide range of fields, such as entrance / exit management for important facilities. As biometric authentication information, in addition to fingerprints, information for identifying individuals based on biological characteristics (physical information) such as handwriting, vein prints, face authentication, iris (retinal pattern), palm print, and voice print can be applied. is there.

It is a block diagram which concerns on one embodiment of this invention and shows the structure of an IC card. 1 is a block diagram illustrating an overall configuration of a system according to an embodiment of the present invention. FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... IC card, 2 ... IC chip, 3 ... Password information storage part, 4 ... Biometric authentication information storage part, 5 ... Identity verification apparatus, 6 ... IC card insertion part, 7 ... Biometric information reading part, 8 ... Password information Reading unit, 9 ... biometric authentication information input unit, 10 ... password information input unit, 11 ... biometric authentication information comparison unit, 12 ... password information comparison unit, 13 ... authentication unit

Claims (2)

An IC card body provided with a biometric authentication information storage unit and password information storage unit, a biometric authentication information input unit that directly reads and inputs biometric authentication information from the user, and the user inputs the password directly. Password information input unit, biometric authentication information reading unit that reads biometric information from the IC card body, biometric information read from the biometric information storage unit of the IC card body, and input from the biometric information input unit The biometric authentication information comparison unit that compares the biometric authentication information of the user who has been made, and the password information read from the password information storage unit of the IC card body and the password information input from the password information input unit are compared Based on the comparison results of the password information comparison unit and these biometric authentication information comparison unit and password information comparison unit Identification apparatus characterized in that it is constituted by an authentication unit which performs testimony. A non-contact type IC card having an IC chip provided with a storage unit for biometric authentication information and a storage unit for password information.

Images