JP2007257101A - Technique for switching biometric authentication card - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a card switching technique capable of preventing spoofing in switching a biometric authentication card while keeping a procedure from becoming complex. <P>SOLUTION: A card switching device 10 includes: an old card delivery part 122 for receiving an old card Co from a user; a vein sensor part 140 for detecting a palm vein pattern as the user's biophysical quantity; and a main control part 110 for performing control to issue a new card Cn if the identity between the palm vein pattern detected and a template recorded on the old card Co is confirmed. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to biometric authentication (biometrics) technology, and in particular, a card for switching an authentication card for biometric authentication in which a biometric feature (template) indicating a biometric feature of a user is recorded from an old card to a new card. It relates to switching technology.

  Known biometric authentication techniques use biometric information such as vein patterns, fingerprint patterns, retina patterns, iris patterns, and voiceprint patterns. As a biometric authentication method, from the viewpoint of personal information protection and management cost, there is a method in which a template is managed by a user by issuing an authentication card on which the template is recorded to the user. In order to prevent impersonation by others who are not users, for example, when a new authentication card for biometric authentication is issued at a financial institution, the person in charge of the financial institution verifies the identity of the person such as a driver's license or passport. Is used to confirm the identity of the user. The following Patent Document 1 discloses a biometric authentication technique using an authentication card.

JP 2002-24536 A

  While biometric authentication cards need to be periodically switched to new cards from the perspective of preventing unauthorized use and malfunction, the conventional biometric authentication technology is sufficient for switching biometric authentication cards. No serious consideration has been made. In particular, when switching an authentication card for biometric authentication, it becomes a problem to prevent impersonation by another person while avoiding complicated procedure processing.

  In view of the above-described problems, an object of the present invention is to provide a card switching technique capable of preventing impersonation by another person while suppressing complication of procedure processing when switching an authentication card for biometric authentication. .

  In order to solve the above-described problems, a card switching device according to the present invention is a card switching device that switches an authentication card for biometric authentication in which a template indicating a biometric feature of a user is recorded from an old card to a new card. The same between the old card receiving unit that receives the old card from the user, the biosensor unit that detects the biophysical quantity of the user, the detected biophysical quantity, and the template recorded on the received old card And a card issuing unit that issues a new card when the presence of the identity is confirmed. According to this card switching device, since a new card is issued through biometric authentication using an old card, impersonation by another person can be prevented while suppressing complication of procedure processing. The types of biometric information used for biometric authentication include vein patterns, fingerprint patterns, retinal patterns, iris patterns, and voiceprint patterns, as well as various biometric information such as palm pattern, face pattern, signature, ear shape, and DNA. Can be adopted. Further, the authentication card may be an IC card incorporating an IC (Integrated Circuit) memory.

  The card switching device described above can also take the following forms. For example, the card issuing unit may include a template creating unit that creates a new template from the detected biophysical quantity, and a template recording unit that records the new template on the issued new card. Thereby, since the template of the authentication card can be updated in response to the change of the biometric information due to the user's physical condition, the authentication accuracy in biometric authentication using the authentication card can be improved.

  The card issuing unit may include a template copying unit that copies a template recorded on the received old card to a new card to be issued. As a result, it is possible to further simplify the procedural process for switching authentication cards.

  In addition, the card issuing unit has the sameness between the template recorded on the received old card, the template recorded on the received old card, and the template recorded on the issued new card. A template confirmation unit that confirms the existence and an issue prohibition unit that prohibits the issuance of a new card when the identity between the templates of the old and new cards is not confirmed may be included. This can enhance prevention of impersonation by another person before and after switching of authentication cards.

  The card issuing unit may include a template destruction unit that destroys a template recorded on the received old card in an unreadable manner. Thereby, it is possible to prevent the template recorded on the old card from being used illegally. The destruction of the template recorded on the old card may be physical destruction by cutting or incinerating the old card, or overwriting random data in the recording area of the old card where the template is recorded. The destruction may be due to the destruction by deleting the template from the old card in software.

  In addition, the card issuing unit includes an additional sensor unit that detects another biophysical quantity that is different from the detected biophysical quantity, an additional creating unit that creates another template from biometric information based on the detected other biophysical quantity, It is good also as including the additional recording part which records another template on the issued new card. As a result, in order to improve the accuracy of biometric authentication, when moving from an existing biometric authentication system to a successor biometric authentication system that combines other biometric authentication technologies, a new biometric authentication system is available. A card can be issued.

  In addition, it further includes a raw card receiving unit that receives a raw card with no template recorded from the user, and the card issuing unit includes a new card preparation unit that prepares the received raw card as a new card to be issued. It is also good. As a result, the authentication card can be switched in the card switching device even when the identity verification is performed through the procedure of mailing the raw card to be a new card to the user.

  In addition, a raw card storage unit that stores a raw card in which no template is recorded in advance is provided, and the card issuing unit includes a new card preparation unit that prepares the stored raw card as a new card to be issued. It's also good. As a result, it is possible to further simplify the procedural process for switching authentication cards.

  Moreover, the form of this invention is not restricted to the form of a card switching apparatus, for example, the cash automatic transaction apparatus which performs the transaction processing regarding the cash transaction using an authentication card, and the card which switches an authentication card from an old card to a new card It is also possible to apply the switching method, a program for causing a computer to realize a function of switching an authentication card from an old card to a new card, and a recording medium on which the program is recorded so as to be readable by the computer. Further, the present invention is not limited to the above-described embodiments, and it is needless to say that the present invention can be implemented in various forms without departing from the spirit of the present invention.

  In order to further clarify the configuration and operation of the present invention described above, a card switching device to which the present invention is applied will be described below.

A. First embodiment:
A-1. Card switching device configuration:
FIG. 1 is an explanatory diagram showing an external configuration of the card switching device 10. FIG. 2 is an explanatory diagram functionally showing the configuration of the card switching device 10. The card switching device 10 is a device that switches an authentication card for biometric authentication from an old card Co to a new card Cn. In the present embodiment, the card switching device 10 is a dedicated device that is installed at a financial institution and handles authentication card switching processing by the user. In the present embodiment, the authentication card switched by the card switching device 10 is an IC card incorporating an IC (Integrated Circuit) memory (not shown), and biometric authentication is performed in an automatic teller machine (ATM) installed in a financial institution. Used for technology authentication. In the authentication card of this embodiment, a template indicating the characteristics of the palm vein pattern of the user who is a customer of the financial institution is recorded.

  1 and 2 includes a main control unit 110 that controls each unit of the card switching device 10, an old card transfer unit 122 that transfers an old card Co to and from a user, and a main control unit. Based on an instruction from 110, a new card interface unit (old card I / F unit) 120 that exchanges information with the old card Co held in the old card delivery unit 122 and a new user A new card interface section (new card exchange section 132) that exchanges information with the new card delivery section 132 that delivers the card Cn and the new card Cn held in the new card delivery section 132 based on an instruction from the main control section 110. A card I / F unit) 130 and a vein sensor unit 140 that detects a palm vein pattern as a biophysical quantity of the user. In the present embodiment, the card switching device 10 includes a touch panel 192 that displays an image and receives an operation from the user, and a speaker 194 that outputs sound as a user interface for exchanging information with the user. Prepare.

  The main control unit 110 of the card switching device 10 includes a central processing unit (hereinafter referred to as CPU), a read only memory (hereinafter referred to as ROM), a random access memory (hereinafter referred to as ROM), and a RAM. In addition to an operating system (OS), various application software (Application Software) is installed. In the present embodiment, various functions realized by the main control unit 110 are realized by arithmetic processing of a CPU based on software. Details of the operation of the main control unit 110 will be described later.

  The old card I / F unit 120 and the new card I / F unit 130 of the card switching device 10 are each provided with an IC card reader / writer that reads and writes information from and into an IC chip built in the authentication card. In the present embodiment, the old card I / F unit 120 and the new card I / F unit 130 encrypt information to be exchanged with the authentication card, thereby preventing information leakage and tampering. The vein sensor unit 140 of the card switching device 10 includes a blood vessel pattern infrared CCD camera that captures a user's palm vein pattern.

B. Operation of the card switching device 10:
FIG. 3 is a flowchart showing card switching processing executed by the main control unit 110 of the card switching device 10. In the present embodiment, the main control unit 110 starts the card switching process of FIG. 3 based on an input from the user via the touch panel 192.

  When starting the card switching process of FIG. 3, the main control unit 110 requests the user to insert the old card Co into the old card delivery unit 122 through the touch panel 192 and the speaker 194, and the old card delivery unit 122. Is received from the user (step S110).

  After that, the main control unit 110 requests the user to hold the user's palm over the vein sensor unit 140 through the touch panel 192 and the speaker 194, and the user's palm vein pattern is used as the user's biophysical quantity. Detection is performed by the vein sensor unit 140 (step S120).

  Thereafter, the main control unit 110 confirms the existence of identity between the palm vein pattern detected by the vein sensor unit 140 and the template recorded on the old card Co received by the old card delivery unit 122 ( Step S130). In this embodiment, the detected palm vein pattern is compared with the template based on the feature amount such as the position of the blood vessel branch point in the palm vein pattern, the branch angle of the blood vessel branch point, and the blood vessel length between the blood vessel branch points. The presence or absence of identity is determined according to the degree of similarity.

  In the present embodiment, the main control unit 110 matches the palm vein pattern detected by the vein sensor unit 140 with the template read from the old card Co via the old card I / F unit 120, so that the identity exists. It is determined whether or not it is a user. As another embodiment, the main control unit 110 transfers the palm vein pattern detected by the vein sensor unit 140 to the old card Co, and displays the collation result determined by the application program incorporated in the old card Co. It may be determined whether or not there is identity by receiving from Co.

  When there is no identity between the palm vein pattern detected by the vein sensor unit 140 and the template recorded in the old card Co received by the old card delivery unit 122, that is, it is determined that the user is not the user himself / herself. In this case (step S130), the main control unit 110 returns the old card Co to the user by discharging the old card Co from the old card delivery unit 122 (step S137), and then the card switching process of FIG. Exit.

  On the other hand, if it is determined that the user is the user himself (step S130), the main control unit 110 uses the touch panel 192 and the speaker 194 to prepare a raw card in which no template is recorded as a new card Cn. The user is requested to insert a new card Cn in which no is recorded in the new card delivery unit 132, and the new card Cn inserted in the new card delivery unit 132 is received from the user (step S140). In the present embodiment, the new card Cn in which no template is recorded is an authentication card mailed in advance from a financial institution to a user who has an old card Co that is about to expire.

  After receiving the new card Cn (step S140), the main control unit 110 creates a new template based on the palm vein pattern detected by the vein sensor unit 140 for comparison with the template of the old card Co (step S140). S150), the created new template is recorded on the new card Cn by the new card I / F unit 130 (step S155). As another embodiment, the main control unit 110 may detect the palm vein pattern again with the vein sensor unit 140 in order to create a new template.

  The main control unit 110 records the new template on the new card Cn (step S155), and then the presence of the identity between the template recorded on the old card Co and the template recorded on the new card Cn. That is, it is confirmed that the template of the old card Co and the template of the new card Cn are created from the biophysical quantities of the same person (step S160).

  If there is no identity between the template of the old card Co and the template of the new card Cn (step S160), the main control unit 110 issues a new card Cn in which a template whose identity cannot be confirmed is recorded. Prohibit (step S165), and start again from the process of creating a new template (step S150).

  On the other hand, when there is identity between the template of the old card Co and the template of the new card Cn (step S160), the main control unit 110 randomly selects a recording area in which the template of the old card Co is recorded. By overwriting the data, the template of the old card Co is irreversibly destroyed (step S170).

  After that, the main control unit 110 returns the old card Co to the user by discharging the old card Co in which the template is destroyed, and discharges the new card Cn in which the template is recorded from the new card delivery unit 132. Thus, after the new card Cn is issued to the user (step S180), the card switching process of FIG. 3 is terminated.

  According to the card switching device 10 in the first embodiment described above, since the new card Cn is issued after the biometric authentication using the old card Co (step S130) (step S180), the procedure processing becomes complicated. It is possible to prevent impersonation by another person while suppressing. Also, since the newly created template is recorded on the new card Cn (steps S150 and S155), the authentication card template can be updated in response to changes in biometric information due to the user's physical condition. The authentication accuracy in biometric authentication using an authentication card can be improved. Further, when there is no identity between the template of the old card Co and the template of the new card Cn, the issuance of the new card Cn is prohibited (step S165). Prevention can be strengthened. Further, when the new card Cn is issued, the template of the old card Co is destroyed (step S170), so that the template recorded on the old card Co can be prevented from being used illegally.

B. Second embodiment:
The configuration of the card switching device 10 in the second embodiment is the same as that of the first embodiment. FIG. 4 is a flowchart showing card switching processing executed by the main control unit 110 of the card switching device 10 in the second embodiment. The operation of the card switching device 10 of the second embodiment is the same as that of the first embodiment, except that the template recorded on the old card Co is copied to the new card Cn (step S250). After receiving the new card Cn (step S140), the main control unit 110 of the card switching device 10 reads the template read from the old card Co through the old card I / F unit 120 through the new card I / F unit 130. Write to Cn (step S250). As a result, it is possible to prevent impersonation by another person while suppressing complication of the procedure processing when switching authentication cards, and further simplify the procedure processing.

C. Third embodiment:
FIG. 5 is an explanatory diagram functionally showing the configuration of the card switching device 30 in the third embodiment. The configuration of the card switching device 30 in the third embodiment includes a main control unit 310 instead of the main control unit 110 in the first embodiment, and a fingerprint sensor unit 350 that detects a fingerprint pattern as a user's biophysical quantity. Is the same as that of the card switching apparatus 10 in the first embodiment except that it is further provided. In this embodiment, the fingerprint sensor unit 350 is an optical fingerprint sensor having a CCD camera that captures light reflected on the finger, but a capacitive fingerprint sensor that detects unevenness of the fingerprint based on the difference in capacitor capacitance. Alternatively, various fingerprint sensors such as an ultrasonic fingerprint sensor using ultrasonic waves may be used.

  FIG. 6 is a flowchart showing a card switching process executed by the main control unit 310 of the card switching device 30 in the third embodiment. The operation of the card switching device 30 of the third embodiment is the same as that of the first embodiment except that an additional template is recorded on the new card Cn (steps S350 to S355).

  When there is an identity between the old card Co template and the new card Cn template (step S160), the main control unit 310 of the card switching device 30 passes the touch panel 192 and the speaker 194 through the fingerprint sensor unit 350. The user is requested to hold the user's finger over and the fingerprint sensor unit 350 detects the user's fingerprint pattern as the biophysical quantity of the user (step S350).

  After that, the main control unit 310 creates an additional template based on the fingerprint pattern detected by the fingerprint sensor unit 350 (step S352), and records the created additional template on the new card Cn by the new card I / F unit 130. (Step S355).

  According to the card switching device 30 in the third embodiment described above, it is possible to prevent impersonation by another person while suppressing complication of procedure processing when switching authentication cards, and also the authentication accuracy of biometric authentication. In order to improve the existing biometric authentication system, a new card Cn corresponding to the succeeding biometric authentication system can be issued.

D. Fourth embodiment:
FIG. 7 is an explanatory diagram functionally showing the configuration of the card switching device 40 in the fourth embodiment. The configuration of the card switching device 40 according to the fourth embodiment includes a main control unit 410 instead of the main control unit 110 according to the first embodiment, and a raw card storage that stores in advance a raw card on which no template is recorded. The card switching device 10 is the same as the card switching device 10 in the first embodiment except that the unit 430 is further provided. In the present embodiment, the raw card storage unit 430 of the card switching device 40 is replenished with a raw card from the outside of the card switching device 40 by an administrator of the card switching device 40 and is based on an instruction from the main control unit 410. The raw card can be embossed with characters such as account numbers and user names.

  FIG. 8 is a flowchart showing card switching processing executed by the main control unit 410 of the card switching device 40 in the fourth embodiment. The operation of the card switching device 40 of the fourth embodiment is the same as that of the first embodiment except that a raw card issued as a new card Cn is prepared by feeding out from the raw card storage unit 430 (step S430). is there. When the main control unit 410 of the card switching device 40 determines that the user is the user himself (step S130), the raw card storage unit 430 prepares a raw card with no template recorded as the new card Cn. Are transferred to the new card delivery unit 132 (step S430). In this embodiment, the raw card conveyed from the raw card storage unit 430 to the new card delivery unit 132 is embossed in the raw card storage unit 430 in the same manner as the old card.

  According to the card switching device 40 in the fourth embodiment described above, it is possible to prevent impersonation by another person while suppressing the complexity of the procedure processing when switching the authentication card, and further simplify the procedure processing. Can be

E. Fifth embodiment:
FIG. 9 is an explanatory diagram functionally showing the configuration of the card switching device 50 in the fifth embodiment. The configuration of the card switching device 50 in the fifth embodiment is provided with a main control unit 510 instead of the main control unit 110 of the first embodiment, and when the new card Cn is issued, the old card Co is physically The card switching device 10 is the same as the card switching device 10 in the first embodiment except that an old card shredding unit 520 for shredding is further provided. When there is an identity between the template of the old card Co and the template of the new card Cn (step S160), the main control unit 510 of the card switching device 50 stores the old card held in the old card delivery unit 122. The card Co is transported to the old card shredder 520, and the old card Co is cut by the old card shredder 520 with such a fineness that the IC chip is physically destroyed (step S170). As a result, it is possible to prevent impersonation by another person while suppressing the complexity of procedure processing when switching authentication cards, and to ensure that the template recorded on the old card Co is used illegally. Can be prevented.

F. Other embodiments:
As mentioned above, although embodiment of this invention was described, this invention is not limited to such embodiment at all, Of course, it can implement with various forms within the range which does not deviate from the meaning of this invention. is there. For example, the card switching device may be incorporated into an automatic teller machine (ATM).

  FIG. 10 is an explanatory diagram showing an external configuration of the automatic teller machine 60. As shown in FIG. The automatic cash transaction apparatus 60 includes a deposit process for depositing a bank account, a withdrawal process for performing a withdrawal procedure from a bank account, a balance inquiry process for querying an account balance, and a bank account as a series of transaction processes relating to cash. Various processes such as a transfer process for performing the transfer procedure are performed. The automatic teller machine 60 uses a main control part 610 that controls each part of the automatic teller machine 60, a card mechanism part 620 that transfers and exchanges information about an authentication card including the old card Co and the new card Cn, A vein sensor unit 640 that detects a palm vein pattern as a person's biophysical quantity, a touch panel 692 that displays an image and receives an operation from the user, a speaker 694 that outputs sound, and a transfer and entry of a bankbook A bankbook mechanism unit 670 to perform, a statement slip mechanism unit 672 that issues a transaction statement slip filled with transaction information, a bill mechanism unit 682 that handles bills to be deposited and withdrawn, and a coin mechanism unit 684 that handles coins to be deposited and withdrawn. With. The main control unit 610 of the automatic cash transaction apparatus 60 of the present embodiment is similar to the card switching process of FIG. 3, the card mechanism unit 620, the vein sensor unit 640, the touch panel 692, and the speaker 694 used for a series of transaction processes related to cash. Switch authentication cards using. Further, at least one of the second to fifth card switching devices may be incorporated in the automatic teller machine 60.

  In this embodiment, a palm vein pattern and a fingerprint pattern are used as the user's biometric information. However, in addition to a retina pattern, an iris pattern, and a voiceprint pattern, there are various types such as a palm shape, a face pattern, a signature, an ear shape, and DNA. The biometric information may be used. Further, in the third embodiment, instead of issuing the raw card having the additional template recorded as the new card Cn, the old card Co having the additional template recorded may be issued as the new card Cn.

2 is an explanatory diagram showing an external configuration of a card switching device 10. FIG. 3 is an explanatory diagram functionally showing the configuration of the card switching device 10. FIG. 4 is a flowchart showing a card switching process executed by a main control unit 110 of the card switching device 10. It is a flowchart which shows the card switching process which the main control part 110 of the card switching apparatus 10 in a 2nd Example performs. It is explanatory drawing which shows the structure of the card switching apparatus 30 in a 3rd Example functionally. It is a flowchart which shows the card switching process which the main control part 310 of the card switching apparatus 30 in a 3rd Example performs. It is explanatory drawing which shows the structure of the card switching apparatus 40 in a 4th Example functionally. It is a flowchart which shows the card switching process which the main control part 410 of the card switching apparatus 40 in a 4th Example performs. It is explanatory drawing which shows the structure of the card switching apparatus 50 in a 5th Example functionally. It is explanatory drawing which shows the external appearance structure of the automatic teller machine 60. FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10, 30, 40, 50, 60 ... Card switching device 110 ... Main control part 120 ... Old card I / F part 122 ... Old card delivery part 130 ... New card I / F part 132 ... New card delivery part 140 ... Vein sensor 192 ... Touch panel 194 ... Speaker 310 ... Main control unit 350 ... Fingerprint sensor unit 410 ... Main control unit 430 ... Raw card storage unit 510 ... Main control unit 520 ... Old card shredding unit 610 ... Main control unit 620 ... Card mechanism unit 640 ... vein sensor unit 670 ... passbook mechanism unit 672 ... statement slip mechanism unit 682 ... bill mechanism unit 684 ... coin mechanism unit 692 ... touch panel 694 ... speaker Cn ... new card Co ... card

Claims (10)

A card switching device for switching an authentication card for biometric authentication in which a template showing a biometric feature of a user is recorded from an old card to a new card,
An old card receiving unit for receiving the old card from the user;
A biosensor unit for detecting the biophysical quantity of the user;
An identity confirmation unit for confirming the existence of identity between the detected biophysical quantity and the template recorded on the received old card;
A card switching device comprising: a card issuing unit that issues the new card when the identity is confirmed. The card switching device according to claim 1,
The card issuing unit
A template creation unit for creating a new template from the detected biophysical quantity;
A card switching device comprising: a template recording unit that records the new template on the issued new card.   2. The card switching device according to claim 1, wherein the card issuing unit includes a template copying unit for copying a template recorded on the received old card to the issued new card. The card switching device according to any one of claims 1 to 3,
The card issuing unit
A template confirmation unit for confirming the presence of identity between the template recorded on the received old card and the template recorded on the issued new card;
A card switching device including: an issuance prohibiting unit that prohibits the issuance of the new card when the identity between the new and old card templates is not confirmed.   5. The card switching device according to claim 1, wherein the card issuing unit includes a template destruction unit that destroys a template recorded on the received old card in an unreadable manner. The card switching device according to any one of claims 1 to 5,
The card issuing unit
An additional sensor unit for detecting another biophysical quantity of a type different from the detected biophysical quantity;
An additional creation unit for creating another template from the biological information based on the other physical physical quantity detected;
A card switching device including: an additional recording unit configured to record the other template on the issued new card. The card switching device according to any one of claims 1 to 6,
And a raw card receiving unit for receiving from the user a raw card in which no template is recorded,
The card issuing unit includes a new card preparation unit that prepares the received raw card as the issued new card. The card switching device according to any one of claims 1 to 6,
Furthermore, a raw card storage unit that stores in advance a raw card in which no template is recorded,
The card switching device according to claim 1, wherein the card issuing unit includes a new card preparation unit that prepares the stored raw card as the new card to be issued. An automatic cash transaction apparatus that performs transaction processing related to cash transactions,
In the transaction process, a transaction authentication unit that authenticates the user using an authentication card in which a template showing a biometric feature of the user is recorded;
A card switching unit for switching the authentication card from the old card to the new card,
The card switching unit
An old card receiving unit for receiving the old card from the user;
A biosensor unit for detecting the biophysical quantity of the user;
An identity confirmation unit for confirming the existence of identity between the detected biophysical quantity and the template recorded on the received old card;
And a card issuing unit that issues the new card when the existence of the identity is confirmed. In an authentication card system that handles an authentication card for biometric authentication in which a template showing a biometric feature of a user is recorded, a card switching method for switching the authentication card from an old card to a new card,
An old card receiving unit of the authentication card system receiving the old card from a user;
A step in which the biometric sensor unit of the authentication card system detects the biophysical quantity of the user;
A step of confirming the existence of identity between the detected biophysical quantity and the template recorded in the received old card, by the identity confirmation unit of the authentication card system;
A card switching method comprising: a card issuing unit of the authentication card system issuing the new card when the identity is confirmed.

Images