JP2008165454A - Registration processing guidance device for biometric authentication system and method therefor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide technology for preventing leakage of a biometric characteristics of a user, in a device for collecting biological information for registration. <P>SOLUTION: The biological information registration device collects the biological information expressing the biological characteristics of the user, and registers registration data that serves as the reference for performing identification. The biological information registration device generates guidance information for bringing registration candidate data, sequentially generated as a candidate of the registration data, based on the sequentially collected biological information close to a prescribed request reference, and outputs the guidance information while maintaining peculiar information related to the biological characteristic of the user, only inside the biological information registration device. Generation of the guidance information is performed, according to a knowledge base and collection state information expressing a collection state of the biological information. The knowledge base performs update processing of the estimation probability, based on whether the registration candidate data satisfying the prescribed request reference are acquired. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to authentication for performing identity verification based on biological information representing biological characteristics.

  Biometric authentication technology is used for purposes such as identity verification for financial institutions and entrance / exit management for restricted areas. Particularly in financial institutions, authentication methods using biometric information on veins have been put into practical use and have already begun to spread to users by storing biometric information as template data serving as a reference for authentication in an IC card. The template data is generated by collecting user biometric information. However, the collection of biometric information for generating template data is required to improve the authentication accuracy by increasing the positional accuracy of the collection state, unlike the collection of biometric information at the time of authentication. In order to improve such position accuracy and the like, for example, as disclosed in Patent Document 1, it is also proposed to perform guidance by displaying a part of a user's body.

JP 2006-26427 A

  However, some users do not want to display part of their body. Furthermore, if a part of the user's body is not necessarily personal information, and if information specific to the individual is taken out from the inside of the biometric information collection device, it will lead to such an unexpected outflow of information. There was also a problem. On the other hand, in order to improve the position accuracy of the collection state, appropriate guidance based on the collection state has been desired.

  The present invention has been made to solve the above-described problems, and provides a technique for performing appropriate guidance while preventing leakage of a biological feature of a user in an apparatus for collecting biometric information for registration. For the purpose.

The present invention provides a biometric information registration device that registers biometric information representing a biometric feature of a user and registers registration data serving as a reference for performing identity verification. This biometric information registration device
A biological information collecting unit for sequentially collecting the biological information of the user;
Information indicating a method of changing the collection state, for registering registration candidate data that is sequentially generated as a candidate for the registration data based on the sequentially collected biological information to a predetermined request criterion A guidance information generation unit for generating guidance information;
A guidance information output unit that outputs the guidance information while maintaining unique information related to the biological characteristics of the user only inside the biological information registration device;
A registration data registration unit for registering registration data, which is registration candidate data satisfying the predetermined request criteria, in a predetermined recording medium possessed by the user;
With
The guidance information generation unit
A collection state information generating unit that generates collection state information representing a collection state of the biological information based on the sequentially collected biological information;
A knowledge base storage unit that stores a knowledge base representing a relationship between the collection state information and the guidance information and an estimated probability of the relationship;
An inference unit that generates the guidance information according to the collection state information and the knowledge base;
Including
The inference unit performs an update process of the estimated probability based on whether or not registration candidate data satisfying the predetermined request criterion is acquired within a predetermined time set in advance from the output of the guidance information,
The update process includes a first process for increasing the estimation probability when registration candidate data satisfying the predetermined request criterion is acquired, and a case where registration candidate data satisfying the predetermined request criterion cannot be acquired. Is a process for performing at least one of the second processes for lowering the estimated probability.

  In the biometric information registration device of the present invention, the guidance information is generated based on the knowledge base stored in the biometric information registration device while maintaining the unique information related to the biometric features of the user only inside the biometric information registration device. It is possible to realize fine and appropriate guidance while keeping the user's biological characteristics only in the biological information registration device. As a result, it is possible to easily increase the security level for preventing such leakage, and to reduce the burden on system design (particularly integration of biometric information registration devices into existing systems) and appropriate guidance. Can be achieved.

  Here, “unique information related to a user's biological characteristics” means not only the biological information of the user but also information unique to the user such as a visible image of a finger or a hand. On the other hand, registration data is data generated from information extracted from biometric information representing a user's biometric characteristics, and means data registered for use as a reference for authentication for identity verification. To do.

In the biometric information registration device,
The knowledge base may be configured not to include the unique information. In this way, since the unique information does not remain in the biometric information registration apparatus after registration of registration data, the security level for preventing leakage of personal information can be further increased.

The present invention further provides a biometric registration system. This biometric registration system
A biometric registration system that registers biometric information representing a biometric feature of a user and registers registration data as a reference for performing identity verification,
The biometric information registration device;
A biometric registration management device connected to the biometric information registration device;
With
The biometric information registration device outputs the guidance information to the biometric registration management device,
The biometric registration management device may perform guidance including image display using symbols according to the guidance information, or may perform guidance by voice registered in advance.

  In this way, based on guidance information that does not include unique information related to the user's biological characteristics, guidance using symbols that do not include such unique information or pre-registered voice can be performed.

In the biometric registration system,
The biometric information registration device outputs a knowledge base that does not include the specific information to the biometric registration management device,
The biometric registration management device may include a rule editor unit that receives the knowledge base, edits the knowledge base, and registers the edited knowledge base in the biometric information registration device. .

  In this way, the knowledge base can be edited without outputting the specific information from the biometric information registration device. Here, “output knowledge base from which unique information has been deleted” refers to a configuration in which specific information is deleted from the knowledge base and output to the outside, and a knowledge base that does not include specific information from the beginning is output to the outside. Includes both. When the knowledge base includes specific information, it is preferable that the specific information is encrypted so that it cannot be reproduced.

  Note that the present invention is not limited to a biometric information registration device but a biometric authentication device or biometric authentication method having a biometric information registration function, or an automatic payment machine (financial transaction device) or room entry management equipped with such a biometric registration device The system can be realized in various other modes.

Hereinafter, embodiments of the present invention will be described in the following order based on examples.
A. Configuration of the biometric information registration system 10 in the embodiment of the present invention:
B. Biometric information registration process in the embodiment of the present invention:
C. Modification:

A. Configuration of the biometric information registration system 10 in the embodiment of the present invention:
FIG. 1 is an explanatory diagram showing a configuration of a biometric information registration system 10 according to an embodiment of the present invention. The biometric information registration system 10 includes a finger vein authentication device 100 and a store terminal 200. The biometric information registration system 10 can register biometric registration data (hereinafter referred to as “template data”) used for finger vein authentication in the IC card 300 possessed by the user. The IC card 300 includes an IC card application 310 that can store a finger vein authentication application program and template data. In this embodiment, the finger vein authentication device 100 functions as a “biological information registration device” in the claims.

  The finger vein authentication device 100 includes an imaging unit 120, an IC card RW unit 130, a communication interface 160, a guidance information generation unit 140, a guidance instruction unit 150, and a control unit 110 that controls them. . The imaging unit 120 captures an image of a finger vein using near-infrared transmitted light. The IC card RW unit 130 registers the template data in the IC card application 310 included in the IC card 300 owned by the user. The communication interface 160 functions as a communication interface with the store terminal 200.

  The guidance information generation unit 140 is configured as an expert system including an inference engine 142 and a knowledge database 144. As general-purpose expert system construction tools, many tools such as ESHELL (trademark) have been developed and are available. Furthermore, C language-based programs that operate on various OSs are also widespread. Here, the “knowledge database 144” corresponds to the “knowledge base” in the claims.

B. Biometric information registration process in the embodiment of the present invention:
FIG. 2 is a flowchart showing a procedure of template data registration processing in the embodiment of the present invention. In step S <b> 100, the finger vein authentication device 100 starts imaging by the imaging unit 120. Imaging is performed sequentially, for example, at a maximum rate of 0.1 seconds.

  FIG. 3 is an explanatory diagram showing the appearance of the biometric information registration apparatus 100 according to the embodiment of the present invention. The biometric information registration device 100 is provided with a finger guide 100G for appropriately acquiring biometric information of finger veins. The user's hand Th is arranged so that the tip of the middle finger of the hand Th is in contact with the finger guide 100G. Although not shown, the imaging unit 120 is disposed below the middle finger. FIG. 3 also shows a guidance instruction unit 150 as a speaker that outputs a pre-registered voice guidance.

  In step S200, the control unit 110 executes imaging data check. The contents of the check are out-of-focus and contrast in each area of the captured image. If the focus and contrast satisfy a predetermined standard in the entire area of the captured image, the process proceeds to step S300. On the other hand, if the focus or contrast does not satisfy the predetermined standard in at least a part of the captured image, the process proceeds to step S400.

  In step S400, the guidance information generation unit 140 executes guidance processing. The guidance process is a process for executing guidance for satisfying a predetermined standard for the focus and contrast in the entire region of the captured image.

  FIG. 4 is a flowchart showing a procedure of guidance processing in the embodiment of the present invention. In step S410, the guidance information generation unit 140 executes a collection state information generation process. The collection state information generation process is a process for generating information representing a collection state of biological information based on image information collected by the imaging unit 120. For example, when the contrast is low in a region corresponding to the vicinity of the finger joint of the captured image, for example, text information “low contrast at the position of the joint portion” is generated.

  In step S420, the inference engine 142 of the guidance information generation unit 140 executes an inference process. The inference processing is processing for estimating the state by searching the knowledge database 144 according to the text information “low contrast at the position of the joint portion”.

  FIG. 5 is an explanatory diagram illustrating an example of the knowledge database 144 according to the embodiment of this invention. The rightmost column shows the record number of the database. This knowledge database can be edited such as adding or deleting records by the branch terminal 200. In this example, the “sales office terminal 200” functions as the “rule editor unit” in the claims.

The column “collection status information” indicates the relationship between each record and the collection status information. For example, if the collection state information generated by the guidance information generation unit 140 is “low contrast at the position of the joint part”, records with record numbers 3 to 5 are searched. The records with the record numbers 3 to 5 are “the state where the joint part is floating” (estimated probability 60%), “the state where the whole is floating” (estimated probability 30%), This is a record for estimating a state with an estimated probability of 10%.

  The inference engine 142 further selects a record with a higher priority from the records with the record numbers 3 to 5. The priority order is an order determined according to the burden on the user in order to reduce the burden on the user. The smaller the user's burden, the higher priority is determined. In this example, the record with the record number 3 with the high estimation rate is selected from the record numbers 3 and 4 with the priority “1”. In this way, the inference engine 142 determines the guidance content to “stretch your finger straight”. In response to this determination, the control unit 110 causes the guidance instruction unit 150 to output a voice guidance “Please straighten your finger” with a pre-registered voice (step S430).

  Imaging by the imaging unit 120 is sequentially performed at a maximum rate of 0.1 seconds, and the focus and contrast satisfy a predetermined standard in the entire area of the captured image within a predetermined time. In that case, the process proceeds to step S300 (FIG. 2). On the other hand, when the predetermined criteria are not satisfied and the collection state information does not change, the record with the record number 4 having the same priority and the next highest estimation probability is selected. As a result, the voice guidance “Please lightly touch the sampling machine with your entire finger” is performed. Furthermore, when the collection state information changes, voice guidance corresponding to the change is performed. Such a history is temporarily stored in a memory (not shown) inside the finger vein authentication device 100.

  In step S300, the guidance information generation unit 140 executes an authentication logic process. The authentication logic process is a process for verifying validity by sequentially generating template candidate data that is a candidate for template data based on the collected biometric information. The validity is verified based on, for example, the mutual similarity of the template candidate data in each region of the captured image. As a result of the verification, if the mutual similarity exceeds a predetermined threshold in all the regions of the captured image, the process proceeds to step S500. On the other hand, if the mutual similarity does not exceed a predetermined threshold in a partial area of the captured image, the process proceeds to step S400. In step S400, “contrast” is replaced with “similarity”, and the processing in steps S100 to S400 is executed in the same manner as described above.

  In step S500, the control unit 110 controls the IC card RW unit 130 to register the template candidate data that achieves the highest mutual similarity as the template data in the IC card 300 that the user has.

  In step S600, the guidance information generation unit 140 updates the content of the knowledge database 144 based on the history temporarily stored in the memory. For example, in the above example, “Please keep your finger straight” (Record No. 3), the problem is not solved. “Please touch the entire finger lightly to the sampling machine” (Record No. 4) If “collection OK” is reached within a predetermined time of the guidance, for example, the estimated probability of record number 3 is reduced to 59% and the estimated probability of record number 4 is increased to 31%. . In response to the completion of the update of the content of the knowledge database 144, the guidance information generation unit 140 securely deletes the history and unique information temporarily stored in the memory.

  As described above, in this embodiment, it is possible to realize the collection of template data that improves the authentication accuracy by notifying the guidance of the collection state of the biological information in real time. Furthermore, since the user's unique information can be kept only inside the finger vein authentication device 100, only the finger vein authentication device 100 needs to consider the prevention of leakage of the biometric features of the user. As a result, it is possible to easily increase the security level for preventing the leakage of information unique to individuals, and to greatly reduce the burden on system design from such a viewpoint.

C. Variation:
As mentioned above, although several embodiment of this invention was described, this invention is not limited to such embodiment at all, and implementation in various aspects is possible within the range which does not deviate from the summary. It is. For example, the following modifications are possible.

C-1. In the above embodiment, finger vein biometric information is collected, but the present invention is widely applied to biometric information representing human biometric features such as palm vein biometric information, fingerprint biometric information, and iris biometric information. Can be applied.

C-2. In the above embodiment, the guidance is executed only with the captured image. However, for example, it may be configured to improve the estimation accuracy of the collection state by sensing the finger position with a touch sensor or imaging the finger position with a visible camera. good. When imaging the position of a finger with a visible camera, information unique to the user, such as image information captured by the visible camera and contour information of the finger generated from the image information, is “user's biometric features”. It is included in “specific information on As described above, the “unique information related to the biological characteristics of the user” in the claims is not limited to the biological information to be collected, and widely includes specific information related to the biological characteristics of the user.

Explanatory drawing which shows the structure of the biometric information registration system 10 in the Example of this invention. The flowchart which shows the procedure of the template data registration process in the Example of this invention. Explanatory drawing which shows the external appearance of the biometric information registration apparatus 100 in the Example of this invention. The flowchart which shows the procedure of the guidance process in the Example of this invention. Explanatory drawing which shows an example of the knowledge database 144 in the Example of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Biometric information registration system 100 ... Finger vein authentication apparatus 110, 210 ... Control part 120 ... Imaging part 130 ... Sensor part 150 ... IC card RW part 160 ... Communication interface 200 ... branch terminal 220 ... display unit 230 ... input unit 300 ... IC card 310 ... IC card application

Claims (6)

A biometric information registration device for registering registration data as a reference for collecting biometric information representing a biometric feature of a user and performing identity verification,
A biological information collecting unit for sequentially collecting the biological information of the user;
Information indicating a method of changing the collection state, for registering registration candidate data that is sequentially generated as a candidate for the registration data based on the sequentially collected biological information to a predetermined request criterion A guidance information generation unit for generating guidance information;
A guidance information output unit that outputs the guidance information while maintaining unique information related to the biological characteristics of the user only inside the biological information registration device;
A registration data registration unit for registering registration data, which is registration candidate data satisfying the predetermined request criteria, in a predetermined recording medium possessed by the user;
With
The guidance information generation unit
A collection state information generating unit that generates collection state information representing a collection state of the biological information based on the sequentially collected biological information;
A knowledge base storage unit that stores a knowledge base representing a relationship between the collection state information and the guidance information and an estimated probability of the relationship;
An inference unit that generates the guidance information according to the collection state information and the knowledge base;
Including
The inference unit performs an update process of the estimated probability based on whether or not registration candidate data satisfying the predetermined request criterion is acquired within a predetermined time set in advance from the output of the guidance information,
The update process includes a first process for increasing the estimation probability when registration candidate data satisfying the predetermined request criterion is acquired, and a case where registration candidate data satisfying the predetermined request criterion cannot be acquired. Is a biometric information registration device which is a process for performing at least one of the second processes for reducing the estimated probability. The biometric information registration device according to claim 1,
The knowledge base is a biometric information registration device configured so as not to include the unique information. A biometric registration system that registers biometric information representing a biometric feature of a user and registers registration data as a reference for performing identity verification,
The biometric information registration device according to claim 1 or 2,
A biometric registration management device connected to the biometric information registration device;
With
The biometric information registration device outputs the guidance information to the biometric registration management device,
The biometric registration management device is a biometric registration system that performs guidance including image display using symbols according to the guidance information. A biometric registration system that registers biometric information representing a biometric feature of a user and registers registration data as a reference for performing identity verification,
The biometric information registration device according to claim 1 or 2,
A biometric registration management device connected to the biometric information registration device;
With
The biometric information registration device outputs the guidance information to the biometric registration management device,
The biometric registration management device is a biometric registration system that performs voice guidance that is registered in advance according to the guidance information. The biometric registration system according to any one of claims 1 to 4,
The biometric information registration device outputs a knowledge base that does not include the specific information to the biometric registration management device,
The biometric registration management device includes a rule editor unit that receives the knowledge base, edits the knowledge base, and registers the edited knowledge base in the biometric information registration device. A biometric registration method for registering registration data serving as a reference for collecting biometric information representing a biometric feature of a user and performing identity verification,
A biological information collecting step for sequentially collecting the biological information of the user;
Information indicating a method of changing the collection state, for registering registration candidate data that is sequentially generated as a candidate for the registration data based on the sequentially collected biological information to a predetermined request criterion A guidance information generation step for generating guidance information;
Guidance information output step for outputting the guidance information while maintaining the unique information regarding the biometric features of the user only inside the biometric information registration device;
A registration data registration step of registering registration data, which is registration candidate data satisfying the predetermined request criteria, in a predetermined recording medium possessed by the user;
With
The guidance information generation step includes
A collection state information generating step for generating collection state information representing a collection state of the biological information based on the sequentially collected biological information;
A knowledge base storing step of storing a knowledge base representing a relationship between the collection state information and the guidance information and an estimated probability of the relationship;
An inference step for generating the guidance information according to the collection state information and the knowledge base;
Including
The inference step includes a step of updating the estimated probability based on whether or not registration candidate data satisfying the predetermined request criteria is acquired within a predetermined time set in advance from the output of the guidance information. ,
The update process includes a first process for increasing the estimation probability when registration candidate data satisfying the predetermined request criterion is acquired, and a case where registration candidate data satisfying the predetermined request criterion cannot be acquired. Is a biometric registration method which is a process for performing at least one of the second processes for reducing the estimated probability.

Images