JP2008262267A - Personal authentication system and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a biometrics authentication system and its authentication method having resistance against personation. <P>SOLUTION: Third authentication information which is indicating relative positional relationship between both sides and is obtained by combining information extracted from a finger print which is biometrics and information extracted from artifact metrics attached to a nail, and is used as a personal identification value. Since the third authentication information is decided in random when a person to be authenticated attaches the artifact metrics to the nail, it is difficult to artificially reproduce the third authentication information from two pieces of information thereby attack of personation can be suitably rejected even if both of finger print data and artifact metrics data are stolen. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a personal authentication technique, and more particularly to a biometric authentication technique having impersonation resistance.

  Conventionally, various studies have been made on personal authentication technology, and typical examples include memory authentication performed using information such as user IDs and passwords that only the person can know, and only the person himself / herself. There was an ownership verification using an occupant such as an IC card on the assumption that it cannot be held. However, in memory authentication and ownership authentication, there is a problem that the so-called impersonation risk due to the authentication information or possession being stolen or forged by a malicious third party cannot be completely eliminated. there were.

  In view of this point, in recent years, various studies have been made on so-called biometric authentication that automatically confirms the identity of the person using biometric information unique to the person, and among them, a system that incorporates fingerprint authentication technology Has begun to be adopted in a wide range of fields. In biometric authentication, biometric information such as fingerprints is inseparable from the person in nature, so there is no need to worry about forgetting or losing authentication information. Is convenient in that it does not need to be carried separately. In addition, biometric information such as fingerprints has been considered to have almost no possibility of being stolen or counterfeited, and the vulnerability of biometric authentication is low compared to that of other memory authentication and ownership authentication. It was thought. Recently, however, it has been reported that a malicious third party obtains information on a user's fingerprint from the residual fingerprint and artificially reproduces a model finger or the like based on this information. In this case, the persistence of biometric information, which was an advantage as authentication information, becomes an obstacle in the operation of the system. In other words, the user cannot naturally update the innate and invariant biometric information, so the user must be removed from the security system or the entire system must be redesigned for only that user. Forced.

Japanese Patent Laying-Open No. 2001-351047 (Patent Document 1) discloses a personal authentication method that obtains an authentication result with high accuracy by combining biometric authentication using biometric information such as fingerprints with storage authentication and ownership authentication. . However, in this method, the convenience of the biometric authentication described above that there is no need to carry authentication information separately is lost, and impersonation of individual authentication information is still possible. In this regard, Japanese Patent Application Laid-Open No. 2006-40109 (Patent Document 2) has a wireless IC chip in which index information of biometric information is recorded on a user's nail, biometric information such as a fingerprint, and wireless IC chip. A method of authenticating an individual in a short time by using two pieces of authentication information called index information recorded in the document is disclosed. The method disclosed in Patent Document 2 does not require the matching of both the biometric information and the index information as a necessary condition. However, when configured in this manner, the biometric authentication is compared with Patent Document 1. However, it is still possible to impersonate each piece of authentication information. That is, when a plurality of other arbitrary authentication information is combined with biometric information, as long as spoofing of each authentication information is possible, a potential threat to security and system operability still remains.
JP 2001-351507 A JP 2006-40109 A

  The present invention has been made in view of the above problems in the prior art, and an object of the present invention is to provide a biometric authentication system having impersonation resistance and an authentication method thereof.

  As a result of earnestly examining a new authentication technology that can provide an effective countermeasure against a potential threat caused by impersonation while maintaining the convenience of biometric authentication, the present inventor has found out from conventional biometrics and artifact metrics. As a result, it has been found that a new hybrid type biometric authentication having impersonation resistance can be realized by newly synthesizing and using composite authentication information that is difficult to reproduce artificially. It was.

  That is, according to the present invention, there is provided a method for performing personal authentication, in which an artifact metric is affixed to a fingernail of a person to be authenticated and extracted from information extracted from the fingerprint of the finger and the artifact metric. There is provided a method of registering third information indicating a relative positional relationship of information as an identification value of the person to be authenticated and verifying the person by collating the third information. In the present invention, the artifact metric may include a random pattern, and the information indicating the relative positional relationship includes a relative positional relationship between the feature point of the fingerprint and the centroid position of the random pattern. It can be information to show.

  Further, according to the present invention, the feature point of the fingerprint and the centroid position of the random pattern can be coordinated in a common XY coordinate system to extract information indicating the relative positional relationship, and the common The coordinate axis of the XY coordinate system can be the direction in which the fingernail of the person to be authenticated extends.

  According to another configuration of the present invention, there is provided a system for performing personal authentication of a person to be authenticated by attaching an artifact metric to a fingernail, wherein information extracted from the fingerprint of the finger and the artifact metric are used. A sensor unit that simultaneously acquires extracted information, a processing unit that synthesizes third information indicating a relative positional relationship between information extracted from the fingerprint and information extracted from the artifact metric, There is provided a system including a registered authentication information storage unit that stores third information as an identification value of the person to be authenticated. In the present invention, the artifact metric may include a random pattern, and the information indicating the relative positional relationship includes a relative positional relationship between the feature point of the fingerprint and the centroid position of the random pattern. It can be information to show.

  Further, according to the present invention, the feature point of the fingerprint and the centroid position of the random pattern can be coordinated in a common XY coordinate system to extract information indicating the relative positional relationship, and the common The coordinate axis of the XY coordinate system can be the direction in which the fingernail of the person to be authenticated extends.

  As described above, according to the present invention, a novel hybrid biometric authentication system having an impersonation resistance while maintaining the convenience of biometric authentication and an authentication method thereof are provided.

  Hereinafter, the present invention will be described with reference to embodiments shown in the drawings, but the present invention is not limited to the embodiments shown in the drawings. In the drawings shown below, common elements are denoted by the same reference numerals, and description thereof is omitted.

  The hybrid biometric authentication of the present invention is performed by using the fingerprint of the person to be authenticated and the artifact metrics attached to the fingernail of the person to be authenticated. In the present invention, the artifact metric means an artifact having a unique pattern that is difficult to reproduce artificially by utilizing various randomnesses, and this point will be described later. In the present invention, in addition to the information extracted from the fingerprint of the person to be authenticated and the information extracted from the artifact metrics attached to the nail of the person to be authenticated, the third information newly synthesized from the above two information Is the target of the verification, and counters the threat of spoofing. The details will be described below.

  FIG. 1 is a side view showing a sensor unit 10 of a hybrid biometric authentication system (hereinafter referred to as an authentication system) according to an embodiment of the present invention, and FIG. 2 is a top view thereof. The sensor unit 10 of the authentication system according to the present embodiment obtains an image of the first imaging unit 14 for acquiring an image of the nail portion 12a of the finger 12 of the person to be authenticated and an image of the fingerprint portion 12b of the finger 12 of the person to be authenticated. And a second imaging means 16 for obtaining. In this embodiment, the stage further includes a stage 18 for the person to be authenticated to place the finger 12. As shown in FIG. 2, a region R for placing the finger 12 is formed on the stage 18, and the region R is formed by a light transmissive member such as glass. As shown in FIG. 2B, when the finger 12 is placed in the region R, the nail portion 12a of the finger 12 is directly imaged by the imaging means 14 positioned at a position where the region R can be imaged from above. On the other hand, the fingerprint portion 12b of the finger 12 is imaged by the imaging means 16 positioned at a position where the region R can be imaged from below. In the present embodiment, the stage 18 is configured to include an optical system including a mirror or the like inside, and as shown in FIG. 1, the image of the fingerprint portion 12b is transferred to the imaging means 16 via the optical system. It is configured to form an image. As the image pickup means in the present invention, a means capable of converting a picked-up image such as a CCD camera into a digital signal and outputting it can be used.

  As described above, the sensor unit of the hybrid biometric authentication system of the present invention captures the nail part 12a and obtains image information of an artifact metric described later attached to the nail part 12a. It includes a metrics reading unit and a fingerprint reading unit for capturing an image of the fingerprint portion 12b to acquire fingerprint image information. The optical system of the sensor unit in the present invention only needs to be designed so that the image information of the artifact metric and the image information of the fingerprint can be acquired simultaneously, and the optical system is not limited to the above-described embodiment. Absent. For example, as in the sensor unit 20 shown in FIG. 3, in addition to the image of the fingerprint portion 12 b, the image of the nail portion 12 a is connected to one imaging means 24 through an optical system composed of a plurality of mirrors 22. It can also be configured to image.

  FIG. 4 is a block diagram showing a device configuration of the authentication system of the present invention. As shown in FIG. 4, the authentication system of the present invention includes a sensor unit 36 including a fingerprint reading unit 32 and an artifact metric reading unit 34, fingerprint information output from the fingerprint reading unit 32, and an artifact metric reading unit 34. The processing unit 38 is composed of a personal computer for inputting artifact metric information output from the personal computer and performs predetermined information processing, and a database for storing authentication information unique to the person to be authenticated. And a registered authentication information storage unit 40. In the processing unit 38 of the present invention, after the third authentication information unique to the person to be authenticated is newly synthesized from the fingerprint information and the artifact metric information output from the sensor unit 36, the registered authentication information Collation with authentication information registered in advance in the storage unit 40 is performed. The authentication system of the present invention has been described above with a focus on the device configuration. Next, the mechanism of the authentication system of the present invention will be described in detail below.

  First, the algorithm for personal authentication in the present invention will be described below. The algorithm for personal authentication in the present invention includes three processes: fingerprint information processing, artifact metric information processing, and third authentication information synthesis processing. Hereinafter, each processing will be described. In the following description in the text, the block diagram shown in FIG. 4 is referred to as necessary.

  In the fingerprint information processing, fingerprint feature points (maneuvers) are extracted using a minutia method often used as a conventional fingerprint authentication algorithm, and this is used as a template. As feature points of the fingerprint, ridge end points, branch points, and the like can be employed. Specifically, the processing unit 38 extracts the feature points after performing smoothing, binarization, and thinning processing on the fingerprint image information input from the fingerprint reading unit 32 of the sensor unit 36. To do. FIG. 5 is a diagram showing feature points extracted from image information of a fingerprint. The crosses indicated in FIG. 5 indicate branch points of ridges adopted as feature points. In the processing unit 38, the feature points of the fingerprint such as the branch points are coordinated in the XY coordinate system, and the coordinate values are stored as position information.

  Next, processing of artifact metrics information will be described below with reference to artifact metrics 41 illustrated in FIG. The artifact metric 41 is formed as a circular seal 44 provided with a unique random pattern 42 that is difficult to reproduce artificially by randomly dispersing and adhering paint or the like. It is configured so that it can be attached easily. In the processing unit 38 described above, the binarization and labeling processing is performed on the image information of the random pattern 42 in the image information input from the artifact metrics reading unit 34 of the sensor unit 36, and then the center of gravity position is detected. Is called. Next, the detected barycentric position is coordinated in the XY coordinate system common to the feature points of the fingerprint, and the coordinate value is stored as position information. Note that the artifact metrics in the present invention are not limited to the image pattern as shown in FIG. 6, but include unique information that is difficult to reproduce artificially, and the XY coordinate system. Any position information can be used as long as it can be derived. Moreover, it is not necessarily required to be a seal, and a random pattern can be directly transferred to the nail. In actual operation, for example, use a paint that is not visible under normal visible light but emits light only under special lighting such as black light. Thus, it is preferable to design the artifact metrics.

  Finally, the third authentication information composition process will be described. In the third authentication information composition process, the information indicates the relative positional relationship between the position information of the feature points of the fingerprint and the position information of the random pattern 42 stored in the processing unit 38 in the above-described procedure. Third authentication information is synthesized. Specifically, in the XY coordinate system common to both shown in FIG. 7, information on the intersection of the horizontal line passing through the center of gravity of the random pattern 42 and the Y axis, and the horizontal line passing through the fingerprint feature point indicated by x And the Y coordinate value of the center of gravity of the random pattern 42 and the Y coordinate value of the feature point of the fingerprint are extracted as third authentication information, and this value is registered and authenticated in advance as a person specific value. Register in the information storage unit 40. In addition, if the longitudinal direction of the finger, that is, the direction in which the nail extends is specified from the input image information from the sensor unit 36 and this direction is defined as the X direction, the XY coordinates in the third authentication information combining process are defined. Even if the nail lengthens and the X coordinate value of the center of gravity position of the random pattern 42 changes with time, the Y coordinate value as the third authentication information used as the identification value is hardly affected by the nail elongation. Therefore, it is preferable. That is, in the present invention, it is preferable that the coordinate axis direction of any one of the above-described XY coordinates is a direction in which the nail of the person to be authenticated extends. However, the Y coordinate value of the center of gravity of the random pattern 42 and the Y coordinate value of the feature point of the fingerprint described above are merely examples of the third authentication information, and the third authentication information in the present invention is the above-described example. The information is not limited to the above-described embodiment, and any information may be used as long as the information indicates the relative positional relationship between the information extracted from the fingerprint simultaneously acquired by the sensor unit 36 and the information extracted from the artifact metric. The above has described the algorithm for personal authentication in the present invention. Next, how the authentication system of the present invention counters an impersonation attack will be described below with reference to the flowchart shown in FIG. explain.

  The person to be authenticated who uses the authentication system of the present invention first attaches the artificial metric to any fingernail and then puts the finger on the sensor unit 36 to register the user specific value in the registered authentication information storage unit 40. It is a premise to do. The authentication system of the present invention uses three pieces of authentication information as the person identification value. That is, information on fingerprints as biometrics, information on artificial metrics, and the above-described third authentication information. In the present invention, it is more preferable to register these three person-specific values together with, for example, password input by the person.

  After the authentication system is activated based on a predetermined start condition (step 100), fingerprint information is acquired by the fingerprint reading unit 32 (step 102), and the acquired information and the registered authentication information storage unit 40 are preliminarily stored as a person-specific value. Collation with the registered fingerprint information is performed (step 104). Here, the authentication performed in steps 102 to 104 only needs to be performed using a conventional general fingerprint authentication technique, and a plurality of feature points described above with reference to FIG. A highly accurate method such as a minutia relation method in which numbers are added as information can be appropriately selected. If the result of the collation in step 104 is a mismatch, that fact is output (step 106), and the authentication system ends the process (step 108). If the acquired fingerprint data match in step 104, then the artifact metrics information is acquired by the artifact metrics reading unit 34 (step 110), and the acquired information and the registered authentication information storage unit 40 are identified in advance. Collation with the artifact metric information registered as a value is performed (step 112). Here, the authentication performed in steps 110 to 112 may be any method using a conventional authentication method using artifact metrics, and a highly accurate method can be selected as appropriate. If the result of the collation in step 112 is a mismatch, a message to that effect is output (step 106), and the authentication system ends the process (step 108). The processing flow described above is a conventional authentication technique. However, in such a configuration, the case where only one of fingerprint information or artifact metric information is stolen can be countered, but fingerprint information and It will be understood that if both artifact metric information is stolen, impersonation cannot be countered and the authentication system is passed. Therefore, in the present invention, when the collation matches in both the fingerprint and the artifact metric, the third authentication information is continuously synthesized by the procedure described above with reference to FIG. 7 (step 114), and the synthesized data and the registration authentication are obtained. Collation with the third authentication information registered in advance in the data storage unit 40 as the user specific value is performed (step 116). If the result of the collation in step 116 is a mismatch, that fact is output (step 106), and the authentication system ends the process (step 108). On the other hand, if they match, personal authentication is performed and a message to that effect is output (step 118). In the present invention, the latest position information synthesized in step 114 is registered in the registered authentication information storage unit 40 every time the user is authenticated in consideration of the nail elongation over time. 3 is preferably updated as registration information of the authentication information (step 120).

  As described above, the third authentication information in the present invention indicates the relative positional relationship between the information extracted from the fingerprint and the information extracted from the artifact metric, and the positional relationship is the person to be authenticated. However, when affixing the artifact metrics to the nail, the factors such as the affixing position and angle and the three-dimensional shape of the finger to be affixed are determined randomly. Therefore, even if both fingerprint data and artifact metric data can be stolen, it is difficult to reproduce the above-mentioned third authentication information from the two pieces of information. Can be eliminated.

  As described above, the authentication system of the present invention effectively eliminates attacks by spoofing from a malicious third party while maintaining the convenience of one-action identity verification as in the conventional fingerprint authentication system. can do. Because of its high convenience, the authentication system of the present invention can be applied to places with extremely high frequency of use such as entrance management.

  Hereinafter, although the authentication system of the present invention will be described more specifically using examples, the present invention is not limited to the examples described later.

  The authentication system shown in FIG. 1 was produced and the operation experiment of this system was conducted. The operation experiment was performed by attaching the artifact metrics shown in FIG. 6 to the fingernail of the subject. FIG. 9 is a diagram showing image information acquired by the sensor unit, FIG. 9A shows an image of a fingerprint portion acquired by the fingerprint reading unit 32, and FIG. 9B shows an artifact metric. The image of the nail | claw part where the artifact metric acquired by the reading part 34 was stuck is shown. FIG. 10 is a diagram showing information that has undergone predetermined image processing by the processing unit 38, FIG. 10 (a) shows fingerprint information after image processing, and FIG. 10 (b) shows information after image processing. A random pattern of artifact metrics is shown. As a result of trying authentication 10 times in this system under the above-mentioned conditions, as shown in Table 1 below, personal authentication was successful in all trials.

  Next, assuming that both fingerprints and artifact metrics were stolen, the impersonation resistance of this system was verified. As for fingerprints and artificial metrics, the experiments were performed using the same artificial metrics as those used in the above-described operation experiment, assuming that they were precisely reproduced. That is, the artificial object metrics were reattached to the registrant's own finger three times, and each of them was set as impersonation 2A, 3A, 4A. As a result of 10 attempts of authentication for each impersonation state, as shown in Table 2 below, the third authentication information does not match for all of the 10 attempts for impersonation of impersonation 2A, 3A, 4A. Was eliminated.

  As described above, according to the present invention, a novel hybrid biometric authentication system and authentication method thereof having spoofing resistance while maintaining the convenience of biometric authentication are provided. The personal authentication system and method of the present invention are expected to contribute to the improvement of impersonation resistance by being additionally applied to an existing fingerprint authentication system.

The side view which shows the sensor part of the authentication system of this invention. The top view which shows the sensor part of the authentication system of this invention. The figure which shows the sensor part of the authentication system of this invention. The block diagram which shows the apparatus structure of the authentication system of this invention. The figure which shows the feature point extracted from the image information of the fingerprint. The figure which shows an artifact metric. The figure which shows the feature point of the random pattern and fingerprint in XY coordinate system. The figure which shows the authentication flowchart of this invention. The figure which shows the image information acquired by the sensor part. The figure which shows the information which passed through the predetermined | prescribed image process by the process part.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Sensor part, 12 ... Finger, 14 ... 1st imaging means, 16 ... 2nd imaging means, 18 ... Stage, 20 ... Sensor part, 22 ... Mirror, 24 ... Imaging means, 32 ... Fingerprint reading part, 34 ... Artifact Metrics Reading Unit, 36 ... Sensor Unit, 38 ... Processing Unit, 40 ... Registration Authentication Information Storage Unit, 41 ... Artifact Metrics, 42 ... Random Pattern, 44 ... Seal

Claims (10)

A method for performing personal authentication,
Attach artifact metrics to the fingernails of the person being authenticated,
Registering third information indicating a relative positional relationship between information extracted from the fingerprint of the finger and information extracted from the artifact metrics as an identification value of the person to be authenticated;
A method of verifying the identity by collating the third information.   The method of claim 1, wherein the artifact metric comprises a random pattern.   The method according to claim 2, wherein the information indicating the relative positional relationship is information indicating a relative positional relationship between a feature point of the fingerprint and a centroid position of the random pattern.   The method according to claim 3, wherein the feature points of the fingerprint and the centroid position of the random pattern are coordinated in a common XY coordinate system to extract information indicating the relative positional relationship.   The method according to claim 4, wherein the coordinate axis of the common XY coordinate system is a direction in which a fingernail of the authentication subject extends. A system for performing personal authentication of a person to be authenticated who has attached artifact metrics to a fingernail,
A sensor unit for simultaneously acquiring information extracted from the fingerprint of the finger and information extracted from the artifact metrics;
A processing unit that combines third information indicating a relative positional relationship between information extracted from the fingerprint and information extracted from the artifact metrics;
A registration authentication information storage unit that stores the third information as an identification value of the person to be authenticated.   The system of claim 6, wherein the artifact metric includes a random pattern.   The system according to claim 7, wherein the information indicating the relative positional relationship is information indicating a relative positional relationship between a feature point of the fingerprint and a centroid position of the random pattern.   The system according to claim 8, wherein information indicating the relative positional relationship is extracted by converting the feature points of the fingerprint and the centroid position of the random pattern in a common XY coordinate system.   The system according to claim 9, wherein the coordinate axis of the common XY coordinate system is a direction in which a fingernail of the person to be authenticated extends.

Images