JP2009015500A - Identity authentication device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve convenience of a user by providing an ATM 3 having an identification function even without transmitting finger vein information via a communication line when failing in finger vein authentication. <P>SOLUTION: The ATM 3 has: a finger vein authentication device 7 reading finger vein information of a user as read finger vein information; and a control part 9 identifying the user based on previously registered registration finger vein information and the read finger vein information, transmitting a one-time secret code number to a previously registered cellphone 6 when the user is identified by the authentication, receiving the one-time secret code number input by the user in an input part 11, and authenticating whether one-time secret code information received in the input part 11 accords with the transmitted one-time secret code information or not. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a personal authentication device that performs personal authentication processing using, for example, an automatic cash payment device or an automatic cash transaction device used in a financial institution.

Conventionally, an automatic transaction apparatus in a financial institution or the like performs personal authentication by inputting a personal identification number or the like at the time of transaction.
In recent years, crimes due to fraudulent use or counterfeiting of magnetic cards have frequently occurred, and with the increasing security needs for these crimes, the use of personal authentication using biometric authentication technology is increasing. Examples of biometric authentication targets include hand and finger vein patterns, fingerprints, irises, and faces.

  This biometric authentication can prevent unauthorized use due to impersonation of others, and has a great effect on crimes such as unauthorized use of cash cards. On the other hand, the biometric authentication may become invalid depending on an individual's physical condition, secular change, and information collection conditions. Biometric authentication cannot be executed even when authentication fails due to a failure of an automatic transaction apparatus or the like. In biometric authentication, when authentication fails, it is difficult to determine whether the user is the same person as the registered person or a different person.

  On the other hand, as a publicly known example of the identity verification means at the time of authentication failure, the biometric authentication information of the user and the medium is transmitted to the examiner terminal through the communication line, and the examiner visually verifies both information to determine the identity. A user verification system has been proposed (see Patent Document 1).

  In this way, the user verification system transmits authentication information to a remote location through a communication line, and the examiner at the remote location determines whether or not the user is a registrant so that the identity can be confirmed when authentication fails. ing.

However, in this user verification system, when the biometric information itself cannot be acquired correctly, the judgment by the examiner becomes impossible and the identity cannot be confirmed.
In addition, this user verification system transmits personal biometric information to the examiner's terminal through a communication line, so there is a risk that it will be stored or used for purposes other than the intended purpose. It is not suitable for actual operation from the viewpoint.

  Nonetheless, in a society where ATMs and other automated transaction devices are widely pervasive and can be used as a matter of course, it is a problem that if a user fails to authenticate himself / herself, it is a problem that transactions can be made on the spot. It is necessary to provide some means.

JP 2002-251380 A JP 2003-123126 A

  In view of the above-described problems, the present invention provides a personal authentication device that can perform personal authentication without transmitting biometric information via a communication line when biometric authentication fails, and improves user convenience. For the purpose.

  The present invention includes a biometric information reading unit that reads biometric information of a user as read biometric information, a personal authentication unit that authenticates whether or not the user is authentic based on pre-registered registered biometric information and the read biometric information, When it is determined that the user is not the person by the authentication by the person authentication means, the emergency password information transmitting means for transmitting the emergency password information to the pre-registered mobile terminal and the input of the emergency password information by the user are accepted. A personal authentication device comprising: input means; and emergency password information authentication means for authenticating whether or not the emergency password information received by the input means matches the emergency password information transmitted by the emergency password information transmitting means It is characterized by being.

  According to the present invention, even when the personal authentication fails in the personal authentication device, the emergency password is communicated to the user's portable terminal, and the user can be authenticated using the emergency password.

An embodiment of the present invention will be described below with reference to the drawings.
FIG. 1 shows a configuration diagram of a personal authentication system A according to the present embodiment, and FIG. 2 shows a block diagram of the personal authentication system A.

An ATM 3 is connected to the host computer 1 via the communication line 2. User 4 operates this ATM3 and carries out a transaction.
A user 4 carries an IC card 5 as an information storage medium storing the user's account information and the person's finger vein information as registered biometric information, and a mobile phone 6 as a mobile terminal.

  As shown in FIG. 2, the host computer 1 includes a storage unit 21 that stores data, a control unit 23 that performs various controls, and a communication unit 25 that performs communication.

The ATM 3 is a finger vein authentication device 7 as a biometric information reading means for authenticating a person using a finger vein as biometric information, and an IC card reader that reads user account information and finger vein information from an IC card 5 possessed by the user. 8. A control unit 9 for performing various controls, an input unit 11 as input means for receiving an input of a personal identification number, a display unit 12 for displaying a guidance screen, and a communication unit 13 for communicating with the host computer 1 are provided. .
The mobile phone 6 displays on the screen an input unit 31 that accepts input of characters and numbers, a control unit 33 that performs various controls, a communication unit 35 that performs communication such as transmission / reception of e-mail, and the received emergency code number. And a display unit 36.

FIG. 3 is a flowchart showing the flow of the authentication operation part in the transaction operation of the user 4 among the operations executed by the control unit 9 of the ATM 3.
First, the user 4 starts an operation of a payment transaction of a deposit at the ATM 3, for example, and selects “payment” of the transaction type from the screen of the ATM 3.
Then, the IC card 5 of the account to be paid is inserted into the card insertion slot of the IC card reader 8 (step S1).

  The control unit 9 prompts the user 4 to place the finger on the finger vein authentication device 7 and perform an authentication operation based on the screen guidance of the display unit 12 (step S2). When a finger 4 authenticating operation is executed by the user 4 placing the designated finger on the finger vein authentication device 7 at the input unit 31, the control unit 9 functions as a personal authentication unit, and reads by the finger vein authentication device 7. The matching between the finger vein information (read biometric information) and the finger vein information (registered biometric information) stored in the IC card 5 read by the IC card reader 8 is checked (step S3).

  As a result of the determination, if the identity authentication is successful (step S3: success), the transaction is continued, and the process proceeds to the next process such as payment amount input (step S4).

  As a result of the determination, if the personal authentication has failed (step S3: failure), the control unit 9 notifies the user 4 that the personal authentication has failed through screen guidance displayed on the display unit 12, and the emergency The user is prompted to perform a one-time password issuing request operation for issuing a one-time password valid only for the current transaction as the security code and the one-time password information (step S5).

  When the user 4 performs a one-time password issuing request operation, the control unit 9 functions as an emergency password information transmitting means and a one-time password information issuing means, and issues a one-time password number to the host computer 1 through the communication line 2. Is transmitted (step S6), and the host computer 1 is issued a one-time password to be transmitted to the mobile phone 6.

  When the host computer 1 receives a message requesting the issuance of a one-time password, the host computer 1 generates a one-time password that can be used only for the transaction, and sends the communication unit 25 to the mail address of the mobile phone 6 registered in advance. Send by. It is assumed that the pre-registered mail address is the mail address of the mobile phone 6 carried by four users.

The host computer 1 may receive the identification information such as account information stored in the IC card 5 from the ATM 3 and extract the mail address of the mobile phone 6 corresponding to the identification information. Alternatively, the mail address of the mobile phone 6 may be stored in the IC card 5 and the ATM 3 may transmit the mail address to the host computer 1.
The mobile phone 6 that has received the one-time personal identification number transmitted from the center host computer 1 displays the received one-time personal identification number on the display unit 36 according to the operation input of the input unit 31 by the user 4. Thus, the user recognizes a one-time password that can be used only for the transaction.

  The control unit 9 accepts a personal authentication operation using a fixed password as the fixed password information of the user registered in advance and a one-time password that is received by the mobile phone 6 and is valid only once, and performs the user authentication. (Step S7).

  The control unit 9 functions as an emergency password information authenticating unit, and makes a personal authentication determination based on the content of the personal authentication operation (step S8). In this identity authentication determination, the number “fixed password + one-time password” obtained by connecting the fixed password entered at the input unit 11 and the one-time password is the fixed password registered in the host computer 1. If it matches with the number “fixed password + one-time password” to which the one-time password is connected, it is determined to be successful, and if it does not match, it is determined to be failed.

  Note that the determination method is not limited to this, and it is determined whether or not the fixed passwords match and whether or not the one-time passwords match. However, if they do not match, the configuration may be such that the failure is determined.

If the identity authentication is successful as a result of the determination (step S8: success), the process proceeds to step S4 to continue the transaction, and the process proceeds to the next process such as payment amount input.
As a result of the determination, when the personal authentication fails (step S8: failure), the control unit 9 determines that the transaction is illegal and ends the transaction.

  With the above configuration and operation, even when the user 4 fails in biometric authentication for some reason, the one-time PIN is notified on the spot, and the user can continue to make transactions on the spot. .

  In this case, since the biometric information of the four users is not transmitted via the communication line, the risk of leaking the biometric information can be eliminated.

  Since the one-time PIN used for authentication is sent to the mobile phone 6 carried by the user, only the user is notified. Therefore, even if another person tries to execute a transaction due to theft, forgery or impersonation of the card. It is impossible to know the above-mentioned password, and unauthorized use by others can be prevented.

  Furthermore, by using the user's own personal identification number input operation together, it is possible to prevent unauthorized use when the mobile phone 6 is also stolen together with the IC card.

  In the above embodiment, the user authentication is performed by the input operation of the fixed password + one-time password. However, when the one-time password issuance request operation is performed, the four users are requested to input the fixed password. This may prevent unauthorized operation by a third party.

  In addition, in the case of a transaction using a one-time personal identification number due to authentication failure, the transaction limit or possible transaction type may be limited. Thereby, the risk by an unauthorized transaction can be reduced.

  In addition, once authentication fails and a transaction is made using a one-time PIN, the authenticity of the registered biometric information is questionable, so that subsequent transactions cannot be performed without re-registering the biometric data. You may comprise. In this case, when the host computer 1 issues the one-time password, it is good to store in the storage unit 21 that the transaction is prohibited from the next time. The ATM 3 may be configured to inquire the host computer 1 whether or not the transaction is possible at an appropriate timing such as at the start of the transaction, and to display on the display unit 12 that re-registration of biometric information is necessary if the transaction is prohibited. . Thereby, the precision of biometric authentication can be improved. Further, it is possible to prohibit the emergency one-time password from being used regularly by the user.

  Further, the number of times that the personal authentication by the one-time password is allowed may be limited. In this case, each time a transaction using the one-time password is executed, the number of transactions using the one-time password, the date and time, and the like may be registered in the storage unit 21 of the host computer 1. Then, the ATM 3 determines whether the transaction can be executed at an appropriate timing such as when the transaction is executed or when biometric authentication fails, or whether the transaction can be permitted by the personal authentication using the one-time password. Please contact us.

Moreover, you may make it the structure which the control part 9 of ATM3 displays the guidance which prompts re-registration of finger vein information on the display part 12 at the time of the transaction using a one-time PIN.
Thereby, the risk by an unauthorized transaction can be reduced.

  Further, by registering a family e-mail address, an application in which the family uses the biometric authentication IC card is possible. However, since this method deviates from the original meaning of biometric authentication that only a person can authenticate, it is preferable to operate within the scope of rules that should be restricted.

  In addition, the one-time password is configured to be transmitted to the mail address of the user's mobile phone 6. However, the present invention is not limited to this, and Bluetooth (registered trademark) by wireless communication means that notifies by infrared communication by infrared communication means. The wireless communication may be used for notification, or a caller may be used to make a call and a voice output unit may be used to notify by an automatic voice announcement.

  In addition, the transmission method of the one-time password may be arbitrarily selected by the user from a plurality of notification methods such as mail, infrared communication, wireless communication, and call. In this case, before step S5, a selection screen for selecting a notification method may be displayed on the display unit 12 of the ATM 3, and the user may select one of the notification methods using the input unit 11 functioning as a selection input unit. The communication method may be transmitted to the host computer 1 when the one-time password issuance request is issued in step S6. The host computer 1 may communicate the one-time password with the mobile phone 6 by the received communication method. In the case of mail or call, the host computer 1 may notify the mobile phone 6 of the one-time password directly or via a separate server. In the case of infrared communication or wireless communication, a one-time password may be transmitted to ATM3. The control unit 9 of the ATM 3 that has received this one-time PIN is assigned to the mobile phone 6 using the infrared communication means or the wireless communication means as the communication means based on the selected communication method (infrared communication or wireless communication). What is necessary is just to transmit a time PIN. With this configuration, the user can arbitrarily select a transmission path for the one-time password. In the case of notifying the one-time personal identification number by infrared communication or wireless communication, it is assumed that the mobile phone 6 possessed by the user is provided with infrared communication means or wireless communication means.

  The present invention is not limited only to the configuration of the above-described embodiment, and many embodiments can be obtained.

The block diagram of a personal authentication system. The block diagram of a personal authentication system. The flowchart of the authentication operation part which the control part of ATM performs.

Explanation of symbols

DESCRIPTION OF SYMBOLS 3 ... ATM, 6 ... Mobile phone, 7 ... Finger vein authentication apparatus, 9 ... Control part, 11 ... Input part

Claims (3)

Biometric information reading means for reading user biometric information as read biometric information;
Identity authentication means for authenticating whether or not the subject is the identity based on the pre-registered registered biometric information and the read biometric information;
Emergency password information transmitting means for transmitting emergency password information to a pre-registered mobile terminal when it is determined that the person is not authenticated by the authentication by the person authentication means;
An input means for accepting input of emergency password information by the user;
A personal authentication apparatus comprising emergency password information authenticating means for authenticating whether or not the emergency password information received by the input means matches the emergency password information transmitted by the emergency password information transmitting means. A one-time password information issuing means for issuing one-time password information that is valid only for one-time authentication as the emergency password information;
The input means is configured to receive input of fixed password information registered in advance from a user,
2. The personal authentication apparatus according to claim 1, wherein the emergency password information authenticating means is configured to authenticate using both the one-time password information and the fixed password information as the emergency password information. The emergency password information transmitting means is composed of a plurality of communication means having different communication paths,
3. The personal authentication apparatus according to claim 1, further comprising selection input means for allowing selection of which of the plurality of communication means is used to transmit the emergency password.

Images