JP2007280405A - Individual authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To surely perform individual authentication for an operation wherein the transaction is allowed only to the identified person in pension payment, etc. <P>SOLUTION: An automatic teller machine 1 is provided with a fingerprint scanner 7. When a user 2 inserts a card 9, fingerprint data stored therein is read and collated with fingerprints of the user 2. When the user 2 is identified as a result of this collation, an input PIN code and a registered PIN code are collated for individual identification. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

The present invention relates to a personal authentication method using fingerprint data and a personal identification code for personal identification processing.

  In order to reduce the burden on the counter business of financial institutions, automatic transaction devices operated by customers are widely used. This apparatus automatically executes a transaction when a customer selects a transaction type and inserts a cash card, a passbook, or the like. Such automatic transaction devices (ATMs) are widely used not only for bank deposits and savings transactions, but also for cash handling such as pension payments. Traditionally, pension payment operations have been performed in such a way that a customer submits an identification card for identification at a financial institution, and an attendant verifies it.

By the way, the following problems to be solved occur when trying to perform the above-mentioned operations such as pension payment using an automatic transaction apparatus.
When using an automatic transaction apparatus to withdraw a deposit, a customer inserts a cash card into the automatic transaction apparatus and inputs a personal identification code. This personal identification code is usually composed of a combination of about four numbers, and is not necessarily secure in terms of safety. In addition, anyone other than the person can operate it if they know the password. As a general rule, only the principal can receive the pension payment, and it is necessary to provide not only input of a personal identification code but also an identification function to the automatic transaction apparatus.

The present invention adopts the following configuration in order to solve the above points.
<Configuration 1>
The fingerprint data is read from the user by the fingerprint reading unit, the read fingerprint data and the registered fingerprint data are collated by the collating unit to determine whether or not the user is the user, and the password is inputted from the user by the input unit. A method of authenticating a person, wherein when the user is determined to be a principal, the identification code and the registered personal identification code are collated by a collation unit to determine whether or not the user is the principal .

<Configuration 2>
Allowing the user to input a personal identification code using the input unit; collating the input personal identification code with the registered personal identification code using a code verification unit to determine whether the user is the person himself / herself; reading the fingerprint from the user A person who reads fingerprint data by a unit, and when the user is determined to be the person, the collation unit compares the read fingerprint data with the registered fingerprint data to determine whether the user is the person Authentication method.

  Since the personal authentication is performed again on the other side after performing the personal authentication on one of the fingerprint data and the personal identification code, the previous authentication is not wasted and the probability of the subsequent authentication failure can be reduced.

Hereinafter, embodiments of the present invention will be described using specific examples.
<Specific example 1>
FIG. 1 is a block diagram of the apparatus of the first specific example.
The automatic transaction apparatus 1 shown in the figure is installed in a financial institution such as a bank, and includes a card entrance 3, a passbook entrance 4, a cash entrance 5, an operation panel 6, and the like. Furthermore, in this specific example, a fingerprint scanner 7 is provided on the front panel of the automatic transaction apparatus 1.
The automatic transaction apparatus 1 is an apparatus used by a user 2 for deposit / withdrawal transactions of deposits and savings in a financial institution or the like. In this specific example, this apparatus is used for, for example, pension payment.

  The automatic transaction apparatus 1 includes a card reading unit 11 that reads data stored in the card 9 inserted by the user 2 and a fingerprint reading unit 12 connected to the output side of the fingerprint scanner 7. The unit 13 and the transaction control unit 14 are provided. The card 9 is composed of an IC card, for example, and has an integrated memory embedded therein. In this, fingerprint data of the user 2 registered in advance is stored. The card reading unit 11 is a part having a function of reading the fingerprint data by mounting the card 9 and accessing the storage area of the memory. The fingerprint scanner 7 is a part that reads the image data when the user 2 puts the corresponding finger or palm, and performs predetermined data processing to obtain fingerprint data. Fingerprint data acquisition methods have been well known and will not be described in detail, but the content of fingerprint data is obtained by scanning a particular finger or palm pattern in an appropriate direction. This is digitally encoded data corresponding to the shadow.

  The collation unit 13 is a part that receives the outputs of the card reading unit 11 and the fingerprint reading unit 12, compares the fingerprint data input from each, and outputs the matching degree as a result. The transaction control unit 14 starts a transaction when the verification unit 13 recognizes the user 2 as the owner of the card 9 as a result of the fingerprint data verification. The content of the transaction is, for example, the content of providing a corresponding pension to the user 2. After the identity verification process is completed, the user 2 operates the operation panel 6 to execute a transaction such as annuity payment. The transaction control unit 14 is connected to the host computer 20, searches a transaction database stored in the host computer 20, confirms the content of the transaction for the user 2, and performs a predetermined operation.

  When a customer intends to receive pension payment, first, the card 9 is inserted into the card entrance / exit 3 of the automatic transaction apparatus 1. Then, the designated finger is pressed against the fingerprint scanner 7. As a result, the fingerprint scanner 7 acquires the fingerprint of the user 2. The fingerprint reading unit 12 generates fingerprint data from the acquired fingerprint. The card inserted into the automatic transaction apparatus 1 is set in the card reading unit 11. Then, fingerprint data registered in advance from the memory 9A of the card 9 is read. The output of the card reading unit 11 and the output of the fingerprint reading unit 12 are sent to the collation unit 13 where fingerprint data is collated. If the matching results match, the user 2 is confirmed as the owner of the card 9. Then, the transaction control unit 14 starts a pension payment transaction. If the fingerprint data does not match, the pension payment transaction is rejected.

<Effect of specific example 1>
According to the first specific example, since the fingerprint data registered in the card inserted by the customer and the fingerprint data collected from the customer's own finger are collated and a transaction such as annuity payment is executed based on the result, the customer Can be surely recognized as the owner of the card.
Therefore, the specific example 1 can be widely used for safely and reliably operating the automatic transaction apparatus 1 for various transactions that do not allow transactions to persons other than the principal.

<Specific example 2>
FIG. 2 is a system block diagram of the second specific example.
The system shown in the figure is configured such that the automatic transaction apparatus 1 is connected to a host computer 20 via a communication line 10 and identity verification is performed on the host computer 20 side. As in the case of the first specific example, the automatic transaction apparatus 1 is provided with a fingerprint scanner 7 together with the operation panel 6. The output of the fingerprint scanner 7 is configured to be input to the communication control unit 15 via the fingerprint reading unit 12. On the other hand, the host computer 20 is provided with a control unit 21, a transaction database 22, a fingerprint database 23, an identity confirmation processing unit 24, a password code holding unit 25, a fingerprint collation unit 26, and a communication control unit 27. The communication control unit 27 is connected to the fingerprint data registration device 30 while being connected to the communication control unit 15 of the automatic transaction apparatus 1 via the communication line 10. The host computer 20 is controlled by the control unit 21. The host computer 20 includes a transaction database 22 in which various data such as bank deposit and savings data and pension payment data are stored.

  In the fingerprint database 23, fingerprints of users who perform pension payment processing using any automatic transaction apparatus connected to the host computer 20 via the communication line 10 are registered in advance. This fingerprint registration processing is performed, for example, by the fingerprint data registration device 30 or the like arranged at various places. The fingerprint data registration device 30 is a device that acquires an image of a user's finger or palm in advance, generates predetermined fingerprint data, and sends it to the host computer 20 via the communication line 10. The personal identification code holding unit 25 is a memory for temporarily storing the personal identification code input by the user using the automatic transaction apparatus 1 and using it for personal identification. The principal confirmation processing unit 24 and the fingerprint collation unit 26 operate as follows to confirm that the user 2 is the person who receives the pension payment.

In this second specific example, the identity verification can be performed even when the user 2 does not have a card or the like.
First, the user 2 operates the automatic transaction apparatus 1 and performs a fingerprint reading operation as described above. Further, the user 2 inputs a password using the operation panel 6. The fingerprint reading unit 12 generates predetermined fingerprint data from the acquired fingerprint image data and sends it to the communication control unit 15. In addition, the password code input by the user 2 is also sent to the communication control unit 15. Then, the fingerprint code and the password code are input to the communication control unit 27 of the host computer 20 via the communication line 10.

  In the host computer 20, the code code is stored in the code code holding unit 25, while the fingerprint collation unit 26 receives the fingerprint data and searches the fingerprint database 23 to find matching fingerprint data. When a large number of fingerprint data is stored in the fingerprint database 23, it may take a long processing time to refer to all of the fingerprint data for collation. Therefore, for example, each fingerprint data is stored in correspondence with the password, and the fingerprint data to be collated is narrowed down using the password stored in the password holding unit 25 as a key. Even if there are very few users who use the same personal identification code, the collation target is narrowed down and fingerprint data can be collated quickly. In this way, the other personal identification data stored together with the fingerprint data is extracted from the fingerprint database 23 and sent to the personal identification processing unit 24. The identity verification processing unit 24 refers to the transaction database 22, reads the data of the corresponding user, verifies the personal identification code and the like, and confirms the identity. When such a confirmation process is completed, a response is transmitted from the host computer 20 to the automatic transaction apparatus 1 side together with necessary transaction data. Thereby, in the automatic transaction apparatus 1, the pension supply processing for the user 2 is started. If the person is not recognized, the annuity transaction is rejected.

<Effect of specific example 2>
In addition to fingerprint verification, it is possible to perform identification processing with higher accuracy by inputting a personal identification code, and to secure safety for transactions such as pension payment transactions. In addition, since the fingerprint database is stored on the host side, the security and certainty of the fingerprint database are increased. In addition, the user 2 will start the pension payment transaction in advance and the procedure for checking the fingerprint data after selecting whether or not the person is eligible for the pension payment by inputting the password. By adopting, it is possible to eliminate useless fingerprint collation processing on the host side. In addition, the user does not need a card, and simple transactions are possible.

<Specific example 3>
FIG. 3 is a block diagram of the system of the third specific example.
This apparatus performs fingerprint verification on the automatic transaction apparatus side. On the other hand, the fingerprint database is provided on the host computer side. Therefore, fingerprint data is transferred from the host computer side to the automatic transaction apparatus side based on the account number, and fingerprint verification is performed.

  Specifically, this system includes a control unit 21, a transaction database 22, a fingerprint database 23, a fingerprint database search unit 29, and a communication control unit 27 on the host computer 20 side. Further, on the automatic transaction apparatus 1 side, a card reading unit 11, a fingerprint reading unit 12, a verification unit 13, a communication control unit 15, and a transaction control unit 16 are provided. The configuration of the control unit 21, the transaction database 22, the fingerprint database 23, the communication control unit 27, and the like on the host computer 20 side is substantially the same as that described in the specific example 2. In this example, the fingerprint database 23 has a structure in which fingerprint data is stored in association with the account number. That is, fingerprint data of a user who owns an account corresponding to each account number is stored corresponding to the account number. The fingerprint database search unit 29 is a part that searches the fingerprint database 23 based on the account number received from the automatic transaction apparatus to obtain corresponding fingerprint data. The fingerprint data is sent back to the automatic transaction apparatus side via the communication control unit 27.

  The card reader 11 provided on the automatic transaction apparatus 1 side is an apparatus that reads the magnetic stripe of the card inserted by the user 2 from the card entrance 3 and obtains an account number. This account number is sent to the host computer 20 via the communication control unit 15. The configuration and operation of the fingerprint reading unit 12 are the same as those described so far. The read result is sent to the collation unit 13. The collation unit 13 collates the fingerprint data sent from the host computer 20 via the communication control unit 15 and the output of the fingerprint reading unit 12 to confirm whether the user 2 is the owner of the card 9 or not. It is. The confirmation result is output toward the transaction control unit 16. The transaction control unit 16 is configured to transmit a password code and transaction data received in accordance with the operation of the user 2 to the host computer 20 via the communication control unit 15. The transaction data is received on the host computer 20 side, and the control unit 21 is configured to execute a predetermined transaction while referring to the transaction database 22.

Hereinafter, the operation of this system will be described more specifically.
First, the user 2 operates the operation panel 6 of the automatic transaction apparatus 1 to select the type of transaction. Next, the user 2 inserts the card 9 into the card entrance 3. The card reading unit 11 reads the account number from the card 9 and transfers it to the host computer 20 via the communication control unit 15. In addition, each signal transferred through the communication line 10 is assigned a code in the order of transmission and reception, such as S1 to S4. On the host computer 20 side, when the account number is received, the fingerprint database search unit 29 refers to the fingerprint database 23 and reads the fingerprint data corresponding to the account number. This fingerprint data is returned to the automatic transaction apparatus side via the communication control unit 27. The collation unit 13 receives this fingerprint data. When the fingerprint data is transferred from the host computer 20, a message requesting the user 2 to collect fingerprints is displayed on the operation panel 6 under the control of the fingerprint reading unit 12. The user 2 puts a finger or palm on the fingerprint scanner 7. The fingerprint reading unit 12 reads the fingerprint of the user 2 in this way. The output is sent to the collation unit 13. The verification unit 13 compares the output of the fingerprint reading unit 12 with the fingerprint data transferred from the host computer 20 to determine whether the user 2 is the person holding the card 9.

  If the account number recorded on the card 9 is a number that does not actually exist, the corresponding fingerprint data cannot be read from the fingerprint database 23. Therefore, in such a case, the user 2 is notified that the transaction cannot be made without waiting for the operation of the collation unit 13. On the other hand, when the collation unit 13 determines that the user 2 is the owner of the card 9, the result is notified to the transaction control unit 16, and various transaction data are input by the user 2. The input transaction data is transmitted to the host computer 20 via the communication control unit 15 again together with the password entered by the user. The control unit 21 of the host computer 20 receives the transaction data, collates the password, and then executes a certain transaction process while referring to the transaction database 22. When the transaction ends normally, the transaction result is notified to the automatic transaction apparatus. This result is displayed on the operation panel 6 via the transaction control unit 16, and the transaction ends.

<Effect of specific example 3>
According to the above configuration, since the fingerprint database 23 is stored on the host computer 20 side, centralized management of fingerprint data is possible. In addition, since fingerprint verification is performed on the automatic transaction apparatus side, the burden on the host computer is reduced. Furthermore, since the fingerprint data corresponding to the account number is collated with the fingerprint actually obtained from the user, the collation process is performed in a shorter time compared with the case of collating with all fingerprint data in the fingerprint database. Is called.
In addition to these, if a transaction is started and a password is further input from the user 2, and the transaction database 22 is referenced using the password in the control unit 21, the password is further verified for collation of fingerprint data. Since processing called code verification is performed, security is further increased. Whether only fingerprint verification or password verification is performed may be determined according to required security.

<Specific Example 4>
FIG. 4 shows a block diagram of the system of the fourth specific example.
In specific example 3, identity verification by fingerprint verification is performed on the automatic transaction apparatus side, and identity verification using a personal identification code is further performed on the host computer 20 side as necessary. The identity verification using the personal identification code may be performed prior to the identity verification based on fingerprint verification. This specific example 4 is a system configured for this purpose.

On the host computer 20 side, a control unit 21, a transaction database 22, a fingerprint database 23, an identity verification processing unit 24, a fingerprint database search unit 29, and a communication control unit 27 are provided. Portions other than the identity verification processing unit 24 are not different from the configuration of the host computer of the specific example 3 shown in FIG.
The identity verification processing unit 24 refers to the transaction database 22 using the account number and password received from the automatic transaction apparatus in the manner described later, and first performs identity verification. When it is confirmed that the user is the person himself / herself, the result is notified to the fingerprint database search unit 29. After receiving the notification from the identity verification processing unit 24, the fingerprint database search unit 29 searches the fingerprint database 23, reads fingerprint data corresponding to the account number, and transmits it to the automatic transaction apparatus side. Further, on the automatic transaction apparatus 1 side, a card reading unit 11, a fingerprint reading unit 12, a collation unit 13, a communication control unit 15, and a transaction control unit 16 similar to those in FIG. 3 are provided.

The system having the above configuration operates as follows.
First, the user 2 operates the operation panel 6 as before, and selects the type of transaction. Then, when the card 9 is inserted into the card entrance 3, the card reading unit 11 reads the account number from the magnetic stripe of the card 9 and transmits it to the host computer 20 via the communication control unit 15. On the other hand, the transaction control unit 16 displays on the operation panel 6 a request for input of a password. Corresponding to this, the user 2 operates the operation panel 6 and inputs a personal identification code. This password is also transmitted to the host computer 20 via the communication control unit 15. On the host computer 20 side, when the account number and password are received, the personal identification processing unit 24 accepts them and refers to the transaction database 22. As a result, it is determined whether there is a legitimate user with the corresponding password of the corresponding account number.

  Thus, when the identity verification process using the password is performed, the result is sent to the fingerprint database search unit 29. The fingerprint database search unit 29 reads the fingerprint data corresponding to the account number from the fingerprint database 23 only when the identity is determined by the identity verification using the personal identification code. The fingerprint data is transmitted to the automatic transaction apparatus side via the communication control unit 27. This fingerprint data is received by the verification unit 13 on the automatic transaction apparatus 1 side. The fingerprint reading unit 12 reads a fingerprint from the user 2 in the same procedure as described above, and outputs it to the collation unit 13. The collation unit 13 collates the fingerprint of the user 2 with the fingerprint data transmitted from the host computer side, and notifies the transaction control unit 16 of the fact when the user is identified. Thereby, the transaction control unit 16 accepts the transaction of the user 2 and then executes the transaction.

<Effect of specific example 4>
According to the above processing, the fingerprint database can be held on the host computer 20 side as in the third specific example. Also, identity verification by fingerprint verification can be executed on the automatic transaction apparatus side.
On the other hand, in this specific example, the identity of the host computer is verified in advance using the account number and password, and only when the identity is confirmed, the corresponding fingerprint data is searched from the fingerprint database, Send to. Therefore, when the transaction is rejected by the personal identification code, the subsequent operation such as fingerprint collation is not required and the operation is simplified. Further, since the fingerprint data is transmitted through the communication line 10 only when there is no doubt about the person, it is useful for reducing the traffic on the communication line 10.

It is a block diagram of the apparatus of the specific example 1. FIG. 10 is a system block diagram of a specific example 2; It is a block diagram of the system of the specific example 3. It is a block diagram of the system of the specific example 4.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Automatic transaction apparatus 2 User 7 Fingerprint scanner 9 Card 11 Card reading part 12 Fingerprint reading part 13 Collation part

Claims (2)

Reading fingerprint data from the user by the fingerprint reader,
Collating the read fingerprint data with the registered fingerprint data by a collation unit to determine whether or not the user is the user;
Allowing the user to input a password using an input unit;
When the user is determined to be the principal, the collation unit compares the input code and the registered code to determine whether the user is the person,
A personal authentication method. Allowing the user to enter a password using the input section;
Collating the input code and the registered code by a code verification unit to determine whether the user is the user;
Reading fingerprint data from the user by a fingerprint reading unit;
When the user is determined to be the person, the read fingerprint data and the registered fingerprint data are collated by a collation unit to determine whether the user is the person,
A personal authentication method.

Images