JP2008117338A - Individual authentication method and individual authentication system using voice communication - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To perform remote authentication to an authentication system using bioinformation, and to pass authentication to an agent of the person himself/herself if necessary. <P>SOLUTION: In this individual authentication method using a cellphone, reproduced voice information transmitted from a first cellphone at a first point and received by a second cellphone at a second point is acquired by an individual authentication system at the second point, and the individual authentication system analyzes speech content from the voice information. Upon confirming that the speech content coincide with the content of a speech request, voice information is identified to acquire individual bioinformation, and individual confirmation processing is performed to determine success in authentication when in agreement. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a personal authentication method and a personal authentication system, and more particularly to a remote personal authentication method and a personal authentication system using a voice communication device.

Conventionally, as a technique for performing personal authentication using a mobile phone and using software with usage authority on a personal computer (personal computer), there is a technique described in Patent Document 1.
In Patent Document 1, conventionally, when using software with authority to use on a personal computer, it is only possible to use it on a personal computer at your seat, you cannot use a personal computer regardless of where you are going, and there is a space for placing a personal computer. Since many people carry mobile phones almost every day in order to solve the problem of requiring a lot, it is not only the use of the phone but by strengthening the authentication function, the safety when the mobile phone is lost Mobile phone equipped with personal identification function by personal identification number authentication, voice authentication, retina authentication, or fingerprint authentication for the purpose of improving the convenience of computer software. The software license is identified by the mobile phone identification function and stored in the memory of the mobile phone. Performing the execution of the software by paying the software, or it is disclosed that the execution of the software by software stored in memory in the computer.

JP 2001-273135 A

  The technology related to authentication, including Patent Document 1, is basically based on the premise that the registered person directly performs the procedure for authentication, and the person himself / herself performs the work after the authentication is completed. Conventional authentication methods and devices take into account situations in which the registered person cannot perform the authentication procedure, and the agent performs the work or the work after the authentication is completed on behalf of the person. It was not a thing. In advanced authentication systems that have recently attracted attention as a technology for improving security, biometric information such as fingerprints and voiceprints is used as an authentication key. Therefore, the biometric information that is the authentication key cannot be separated from the principal and cannot be deposited with the agent. As a result, there is a problem that the authentication process cannot be performed when the agent cannot pass the authentication and the registered person cannot go to the front of the authentication system.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to make it possible to use a system employing authentication based on biometric information with high security even for people who cannot go to the front of the authentication system. .

In order to solve the above problems, in the present invention, using a voiceprint as an authentication key, adopting voice authentication as an authentication method, and allowing the authentication system to recognize the voice of the person to be authenticated by voice communication, Resolve effectively. By adopting such means, authentication can be performed even if the person is remote from the authentication system.
The voice authentication using the voice communication mentioned above, even if the person to be authenticated is away from the place where the authentication system is located, the agent and the agent perform voice communication by going to the authentication system instead, Authentication processing can be performed via the agent. Therefore, in the present invention, if the agent is in front of the authentication system and the agent can communicate with the person to be authenticated, the authentication process is performed normally. Also, even if the agent passes the authentication, the authentication process can be performed normally if the agent is in front of the authentication system in a situation where the agent can communicate with the person to be authenticated.

According to the present invention, since voice authentication is performed by voice communication when authentication is performed, it is not necessary for the person having the authentication key to go to the front of the authentication system, and the burden of movement of the person can be eliminated.
Also, if the agent wants to pass authentication, if the voice communication with the person who has the authentication key is possible, use the authentication key without meeting the person directly and without accompanying the person before the authentication system. be able to.
As described above, it is more convenient than conventional authentication, and the effect of the present invention is great.

Embodiments of the present invention will be described below. In addition, the same symbol in FIGS. 1-8 shall display the same thing or a similar thing.
First, a general example of an authentication service as the background of the present invention will be described with reference to FIGS.

Figure 1 shows a typical example of an authentication service.
When the authentication service is used, the authentication service is composed of a person 1 who receives the authentication service, identification information (ID) 2 for identifying the person 1 from a third party, an authentication key 3 held by the person 1, and an authentication system 4. The authentication system 4 includes a sensor 5 that acquires the information of the identification information 2 and the authentication key 3, an authentication processing device 6 that acquires the information of the identification information 2 and the authentication key 3 from the sensor 5 and confirms the normality of the authentication key 3, and authentication It comprises an authentication database 7 in which information for confirming the normality of the key 3 is stored, and a determination result output device 8 for notifying the person of the determination result. The authentication database 7 includes an authentication information table 7-1, and the authentication data 7-2 can be searched from the identification information 2.
The identification information 2 is a card or character string containing information that can be determined to be different from a third party, and the authentication key 3 is generally a password, but recently, biometric information such as fingerprints and voiceprints is used. Something that is difficult to replicate is used.

  When the authentication service is used, the person 1 owns the identification information 2 and the authentication key 3 and makes the sensor 5 recognize the identification information 2 and the authentication key 3. The sensor 5 that has recognized the identification information 2 and the authentication key 3 transfers the contents to the authentication processing device 6. Upon receiving the identification information 2 and the authentication key 3, the authentication processing device 6 uses the identification information 2 to request authentication data 7-2 for the principal 1 from the authentication database 7. The authentication database 7 retrieves the authentication data 7-2 of the principal 1 on the authentication table 7-1 from the identification information 2 received from the authentication processing device 6, and returns the authentication data 7-2 to the authentication processing device 6. Upon receiving the authentication data 7-2, the authentication processing device 6 performs an authentication process using the authentication key 3 and the authentication data 7-2. As a result of performing the authentication process, when it is determined that the authentication is normal, the authentication processing device 6 notifies the determination result output device 8 in order to notify the person 1 that the authentication has been normally completed. The determination result output device 8 that has been notified of the normal end notifies the person 1 of that by voice, video, lamp, or the like. By confirming the operation of the determination result output device 8, the person 1 understands that the authentication is permitted.

FIG. 2 shows an example in which a third party such as a proxy performs an authentication process using the authentication method shown in FIG.
In such a case, the principal 1 deposits the identification information 2 and the authentication key 3 in the agent 9, and can have the agent 9 perform the authentication process by having the agent 9 go to the front of the authentication system 4. It was.
However, advanced authentication systems that have recently been used use biometric information such as fingerprints and voiceprints as authentication keys. Next, an example of performing authentication processing using biometric information is shown in FIG. The biometric information 2a such as the fingerprint or voiceprint of the person 1 is used as an authentication key. Therefore, the biometric information 2 a that is an authentication key cannot be separated from the principal 1 and cannot be deposited with the agent 3. As a result, the authentication key 2 cannot be passed to the agent 4 as shown in FIG. 2 and the authentication cannot be passed, and it is necessary for the person 1 to go before the authentication system 4. For this reason, if it is not possible to go to the front of the authentication system 4 for the convenience of the person 1, the authentication process cannot be performed.

  Next, voice authentication using voice communication according to the present embodiment will be described in more detail with reference to the embodiment of the invention shown in the drawings. Therefore, a highly convenient authentication system that allows a third party such as an agent to perform authentication processing instead of using biometric information by adopting voiceprints for biometric information and using voice communication. It is to provide. Next, voice authentication using voice communication according to the embodiment of the present invention will be described in more detail with reference to the embodiment of the invention shown in the drawings. As an embodiment of the present invention, a cash withdrawal from a bank counter (cash dispenser) in an authentication system using voice communication by an agent will be described as an example.

An example of an embodiment of the present invention is shown in FIG.
An example of the embodiment is a principal 1 having a bank account, an agent 9 heading to the bank instead of the principal 1, a voice communication device 10 for the principal 1 to perform voice communication with the agent 9, and an agent 2 being the principal 1. A voice communication device 11 for voice communication, a voice 3b as an authentication key of the principal 1, a card 2a in which identification information of the principal 1 is stored, a bank counter that performs operations such as cash withdrawal with the agent 1 by voice or video 12 and a voice authentication system 4-1 that performs voice authentication via the bank window 12.
The person 1 cannot go out because of illness, poor physical condition, old age, and the like. In that situation, cash is required. At that time, the principal 1 deposits his / her card 1 in the agent 9 and requests cash withdrawal. Upon receiving the request, the agent 9 has the card 6 and the voice communication device 11 and goes to the bank counter 12. After the agent 2 has gone to the bank counter 12, the voice communication device 11 and the voice communication device 10 of the person 1 can make voice communication.

FIG. 5 shows a sequence of voice authentication processing performed between the principal 1, the voice communication device 10, the voice communication device 11, the agent 9, the bank counter 12, and the voice authentication system 4-1.
FIG. 6 shows a message used between the voice authentication system and the bank window.
The agent 9 makes an authentication request 51 by depositing the card 6 at the bank window 12. Upon receiving the authentication request 51, the bank counter 12 reads the identification information of the person 1 from the card 6, and transmits an authentication request 52 including the identification information to the voice authentication system 4-1. The voice authentication system 4-1 that has received the authentication request 52 sends the remark request 53 including the identification information of the person 1 and the content that the person 1 speaks to the bank window 12 in order to start the authentication process. The speech request 53 includes content to be spoken by the person, but the content is changed every time authentication is performed in order to cope with an unauthorized authentication process such as voice recording, so that the same content is not used twice. To do. The bank counter 12 that has received the speech request 53 transmits the speech request 54 to the agent 9 so as to speak the content requested by the voice authentication system 4-1 using video, voice, or the like. The agent 9 that has received the message request 54 transmits the message request 54 to the voice communication device 11 of the agent 9. Further, when the bank counter 12 transmits the speech request 54 by voice, the speech request 54 can be transmitted directly to the voice communication device 11 of the agent 9 without going through the agent 9. The voice communication device 11 that has received the speech request 54 transmits the speech request 55 to the voice communication device 10 of the person 1 using voice communication. The voice communication device 10 that has received the speech request 55 transmits the speech request 56 to the person 1. Upon receipt of the speech request 56, the principal 1 transmits the speech having the content of the speech request 56 as a speech response 57 to the voice communication device 58 of the principal 1. The voice communication device 10 that has received the voice response 57 transmits the voice response 58 to the voice communication device 11 using voice communication. The voice communication device 11 of the agent 9 that has received the speech response 58 transmits the speech response 59 to the bank window 12 by voice. The bank counter 12 that has received the speech response 59 informs the voice authentication system 4-1 as a speech response 60. The speech response 60 includes the identification information of the person 1 and voice information. Upon receiving the speech response 60, the voice authentication system 4-1 performs a confirmation process 61 to confirm that the content of the speech matches the voiceprint.

The contents of the confirmation process 61 are shown in the flowchart of FIG. First, the voice authentication system 4-1 that has received the speech response 60 in the process S <b> 1 acquires speech information from the speech response 60. Next, in step S2, the content of the utterance is acquired from the voice information. After acquiring the message content, it is checked in step S3 whether the message content matches the content requested in the message request. If they match, the voice print information of the person 1 stored in advance in the voice authentication system is acquired from the identification information of the speech response in step S5. After obtaining the voiceprint information, the voiceprint information is obtained from the voice information in step S6, and it is confirmed in step S7 whether the contents match. If they match, it is determined that the authentication is successful, and a determination notification 61 in which the determination result is set to pass is transmitted to the bank window 12 in step S9. If the statement content and the voiceprint do not match, a determination notification 61 in which the determination result is set to fail is transmitted to the bank counter 12 in step S10.
The bank counter 12 that has received the determination notification 61 performs a determination confirmation process 64.

The contents of the determination confirmation process 64 are shown in the flowchart of FIG.
Upon receiving the determination notification 61, the bank window 12 acquires the determination result from the determination notification 61 in step S12. After acquiring the determination result, whether the determination result is acceptable or not is confirmed in step S13. If the determination result is acceptable, the agent 9 is notified in the process 14 that the authentication is successful by the determination notification 62, and the window operation is enabled in the process 15. If the result of the determination notification 61 is unsuccessful, the agent 9 who has received the determination notification 62 of the pass that tells the agent 9 that the authentication has failed in the determination notification 62 and does not allow the operation at the bank counter 12 in the process 16. Makes a cash withdrawal request 63 to the bank window 12. The bank counter 12 that has received the cash withdrawal request 63 can perform a withdrawal process 64 on the agent 9.

  In the case of an authentication system that uses biometric information that cannot be separated from the body in this way, voice (voice print) is used as biometric information, and authentication is passed remotely by using voice communication. A certain agent's certificate can be passed. Therefore, compared with the method shown in FIG. 3, the effect is greater in terms of reducing the burden of movement of the person and convenience.

It is a figure for demonstrating the structural example of an authentication system. It is a figure explaining the relationship between the principal, the agent, and the authentication system when the authentication key can be deposited with the agent. It is a figure explaining the relationship of the principal, the agent, and an authentication system at the time of using biometric information for an authentication key. It is a figure explaining the relationship between the principal, the agent, and the authentication system when voice is used for the authentication key and voice communication is possible between the principal and the agent. It is a figure for demonstrating the Example which performs audio | voice authentication using audio | voice communication. It is a figure for demonstrating the message used between the voice authentication system described in the Example of this invention, and a bank window. It is a flowchart for demonstrating operation | movement of the system in the Example of this invention. It is a flowchart for demonstrating operation | movement of the bank window in the Example of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Principal, 2 ... Identification information, 3 ... Authentication key, 4 ... Authentication system, 5 ... Sensor, 6 ... Authentication processing apparatus, 7 ... Authentication database, 8 * ..Judgment result output device, 9 ... agent, 10, 11 ... voice communication device, 12 ... bank window, 51,52 ... authentication request request, 53, 54, 55, 56 ... Request message, 57, 58, 59, 60 ... Response to speech, 61 ... Confirmation processing of speech content / voiceprint, 62, 63 ... Notification of judgment, 64 ... Confirmation processing of judgment result, 65 ...・ Cash withdrawal request, 66 ... Withdrawal processing

Claims (2)

A personal authentication method using a mobile phone,
Reproduction audio information transmitted from the first mobile phone at the first point and received by the second mobile phone at the second point is acquired by the personal authentication system at the second point, and the personal authentication system Analyzing the content of the speech from the voice information and confirming that the content of the speech matches the content of the speech request, identifying the voice information and obtaining personal biometric information, performing a personal confirmation process, A personal authentication method characterized by accepting authentication if they match. A personal authentication system using a mobile phone,
A first mobile phone at a first location, a second mobile phone at a second location, and a personal authentication system at a second location,
The personal authentication system includes a sensor for recognizing voice, an authentication processing device that performs authentication processing on information recognized by the sensor, the authentication processing device, an authentication database that stores information for authentication, and the authentication processing device. A determination result output device for outputting an authentication determination result in
The voice information transmitted from the mobile phone at the first location and received by the mobile phone at the second location is acquired by the sensor of the personal authentication system at the second location and acquired by the center. The authentication processing device analyzes the content of the message, confirms that the content of the message matches the content of the message request using the data stored in the authentication database, and identifies the voice information. A personal authentication system characterized in that personal biometric information is acquired and personal confirmation processing is performed.

Images