JP2009134343A - Biometrics device and biometrics system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To surely prevent biological information registered in a test mode from leaking to the outside. <P>SOLUTION: This biometrics device is provided with: a reading means 14 for reading biological information; a storage means 9 for storing the biological information; and a personal identification means 12 for performing personal identification by comparing the biological information read by the reading means 14 with the biological information stored in the storage means 9. The storage means 9 is provided with: at least a first storage area 15 for storing the biological information of a user and a second storage area 16 for storing the biological information of an inspector who performs pre-shipping operation confirmation. The personal identification means 12 is able to execute a normal mode for performing personal identification by comparing the biological information read by the reading means 14 with the biological information stored in the first storage area 15 and a test mode for performing personal identification by comparing the biological information read by the reading means 14 with the biological information stored in the second storage area 16. In this case, it is not possible to perform access to the second storage area 16 in the normal mode. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a biometric authentication device and a biometric authentication system.

  Conventionally, when registering / deleting biometric information as a biometric authentication device, a switch for registering / deleting biometric information is invalidated if the captured data does not match the data registered in the memory Is known (see, for example, Patent Document 1).

  By the way, the biometric authentication device is adopted in a vehicle or the like, and an operation check test is performed before being shipped from a factory. In this case, the inspector who performs the test registers the biometric information, performs a series of operation checks, and then deletes the registered biometric information.

JP-A-2005-262

  However, in the conventional biometric authentication device, once registered, the biometric information needs to be manually deleted after the test is completed. In addition, if the user forgets to delete the data, unauthorized inspection by the inspector becomes possible and personal information of the inspector may be leaked.

  Therefore, an object of the present invention is to provide a biometric authentication apparatus and a biometric authentication system that can reliably prevent the biometric information registered in the test mode from flowing out.

As a means for solving the above problems, the present invention provides:
Biometric authentication device
Reading means for reading biological information;
Storage means for storing biological information;
A personal authentication unit that compares the biometric information read by the reading unit with the biometric information stored in the storage unit to perform personal authentication;
And a configuration with
The storage means includes at least a first storage area for storing user biometric information and a second storage area for storing biometric information of an inspector who performs an operation check before shipment,
The personal authentication means is
A normal mode for performing personal authentication by comparing the biometric information read by the reading means with the biometric information stored in the first storage area;
A test mode for performing personal authentication by comparing the biometric information read by the reading means with the biometric information stored in the second storage area;
Is possible and
In the normal mode, the second storage area cannot be accessed.

  With this configuration, in the normal mode, the biometric information used in the test mode cannot be accessed, and even if the biometric information used in the test mode remains, it does not flow out to the outside.

  It is preferable that the personal authentication means automatically executes a delete mode for deleting the biometric information stored in the second storage area at least when executing the normal mode.

Further, the present invention provides a means for solving the above-described problems,
Biometric authentication system
A biometric authentication device configured to execute the normal mode and the test mode;
A control unit that executes predetermined processing set in advance;
And a configuration with
The storage means of the biometric authentication device stores biometric information and identification information in association with each other in the first storage area and the second storage area,
The control unit is
A second storage means comprising a third storage area for storing identification information stored in the first storage area, and a fourth storage area for storing identification information stored in the second storage area;
When the collated biometric information is the biometric information stored in the storage means by the personal authentication means of the biometric authentication device, the identification information associated with the biometric information is the identification information stored in the second storage means, Second personal authentication means for executing the predetermined processing;
With
The second personal authentication means collates the identification information stored in the third storage area of the second storage means during execution of the normal mode, and the fourth of the second storage means during execution of the test mode. The identification information stored in the storage area is collated.

Further, the present invention provides a means for solving the above-described problems,
In addition to the normal mode and the test mode, a biometric authentication device configured to execute the deletion mode;
A control unit;
With
The control unit is
A second storage means comprising a third storage area for storing identification information stored in the first storage area, and a fourth storage area for storing identification information stored in the second storage area;
The identification information stored in the fourth storage area together with the personal authentication means of the biometric authentication apparatus when executing the delete mode for deleting the biometric information stored in the second storage area at least when executing the normal mode A second personal authentication means for deleting
It is equipped with.

  According to the present invention, the storage areas used in the normal mode and the test mode are made different. In the normal mode, the storage areas used in the test mode cannot be accessed, so that the biological information of the examiner can be surely leaked. It becomes possible to prevent.

  Embodiments according to the present invention will be described below with reference to the accompanying drawings.

  FIG. 1 shows a biometric authentication system according to this embodiment. This biometric authentication system is employed in a vehicle and includes a biometric authentication device 1 and a smart entry control unit 2 (hereinafter, the control unit is abbreviated as C / U). The smart entry C / U2 is connected to a door open / close switch 3 (door open / close SW), a door lock C / U4, an electric steering lock 5 (electric STL), an engine C / U6, a start switch 7 (start SW), and the like. ing.

  As illustrated in FIG. 2, the biometric authentication device 1 includes an imaging unit 8 (reading unit), a first storage unit 9 (storage unit), a first power supply unit 10, a first communication unit 11, and a first control unit 12. (Personal authentication means).

  The imaging unit 8 includes an infrared irradiation unit 13 and a camera unit 14. The infrared irradiation unit 13 includes a plurality of LEDs for irradiating infrared rays, and these LEDs are irradiated with near infrared rays so that a finger vein pattern can be read by the camera unit 14. The camera unit 14 includes a CCD (Charge Coupled Device) camera, a CMOS (Complementary Metal-Oxide Semiconductor) camera, and the like, and reads a vein pattern from a finger irradiated with near infrared rays.

  The first storage unit 9 includes a first storage area 15 and a second storage area 16. In the first storage area 15, biometric authentication information (here, finger vein pattern) of a user who is permitted to use the vehicle and ID (identification) data that is identification information are used in the normal mode. It is stored in association. In the second storage area 16, biometric authentication information and ID data used in the test mode are stored in association with each other. Further, the first storage unit 9 stores a control program for executing an authentication process described later. The first power supply unit 10 supplies power to the imaging unit 8, the first storage unit 9, the first communication unit 11, and the first control unit 12.

  The 1st communication part 11 is for performing transmission / reception of data between smart entry C / U2, and can employ | adopt both a wire communication and a radio | wireless. Here, the connectors are wired. The first communication unit 11 transmits the result of the personal authentication process performed by the first control unit 12 to the smart entry C / U2.

  The first control unit 12 compares the biometric authentication information captured by the camera unit 14 of the imaging unit 8 with the biometric authentication information stored in the first storage unit 9 to thereby perform biometric authentication as described later. Execute the process. The vein pattern is digitized by image processing, and compared with the biometric information registered in the first storage unit 9 (also digitized), it is determined whether the vein pattern is of a registered person.

  The digitization of the vein pattern is performed as follows. That is, near-infrared rays applied to the finger are easily absorbed by reduced hemoglobin flowing through veins in the blood after carrying oxygen. For this reason, the image is dark for the veins and bright for the portions other than the veins. Therefore, the brightness at each part is converted into numerical data of “0” or “1” by the binary system.

  The smart entry C / U2 (control unit) includes an input / output unit 17, a second storage unit 18 (second storage unit), a second power supply unit 19, a second communication unit 20, and a second control unit 21 (second control unit). 2 personal authentication means).

  The input / output unit 17 accepts output signals from the door opening / closing SW3, door lock C / U4, electric STL5, engine C / U6, start SW7, remote controller 22 (smart entry device), etc. 6. A control signal is transmitted to the electric STL 5 to perform a predetermined operation.

  The door opening / closing SW3 outputs an on / off signal when the door is opened / closed. The door lock C / U 4 drives and controls an actuator of a door lock device provided on the door of the vehicle to lock and unlock the door. The electric STL 5 prevents the vehicle from being stolen by locking and unlocking the steering shaft. Here, the internal motor is driven and controlled based on a control signal from the smart entry C / U2, and the steering shaft is locked and unlocked. The engine C / U 6 controls engine start, stop, and operation. The start SW 7 is a switch for starting the engine, and is installed in the vicinity of the steering wheel in the vehicle.

  The remote controller 22 is used for locking and unlocking a vehicle door. That is, when the user gets into the vehicle and touches the door handle is detected by a touch sensor (not shown) provided on the door handle, and an ON signal is output from the touch sensor, a request signal is sent from the smart entry C / U2. Sent. The remote controller 22 receives this request signal and transmits an identification signal registered in advance. The smart entry C / U2 outputs an unlock instruction signal to the door lock C / U4 based on this identification signal, and the door is unlocked.

  The second storage unit 18 is used in the normal mode, a third storage area 23 for storing ID data of a user who is permitted to use the vehicle, and a fourth storage area for storing ID data used in the test mode. And a storage area 24.

  The second power supply unit 19 supplies power to the input / output unit 17, the second storage unit 18, the second communication unit 20, and the second control unit 21.

  The second communication unit 20 transmits / receives data to / from the first communication unit 11 of the biometric authentication device 1. Here, a connector is used. A power-on signal, a test mode start signal, and the like are transmitted from the second communication unit 20 to the first communication unit 11, and ID data, a verification result, and the like are received from the first communication unit 11.

  When the biometric authentication device 1 determines that the biometric authentication is stored biometric information, the second control unit 21 stores ID data, which is identification information associated with the biometric information, in the second storage unit 18. The door lock C / U4, the electric STL5, and the engine C / U6 are driven and controlled based on input signals from the door opening / closing SW3, the start SW, and the like.

  Next, the operation of the biometric authentication system will be described.

  First, before shipping from the factory, biometric authentication information is provisionally registered in the temporary registration mode (FIG. 3) as to whether or not to operate properly, and the test mode (FIGS. 4 and 5) is executed.

(Temporary registration mode)
The temporary registration mode is started in a factory by connecting a vehicle state confirmation terminal to a vehicle and selecting a temporary registration button from a menu screen displayed on the display.

  The smart entry C / U2 outputs a temporary registration mode start signal indicating the start of the temporary registration mode to the biometric authentication device 1 (step S1).

  The biometric authentication device 1 starts the temporary registration mode by receiving a temporary registration mode start signal (step S11), and accepts input of biometric authentication information. When the vein pattern of the finger of the examiner who performs the test is read by the imaging unit 8 and biometric authentication information is input (step S12), the first control unit 12 binarizes the biometric authentication information and further converts it. Encryption is performed (step S13). Further, ID data is associated with the input biometric authentication information (step S14), and both are stored in the second storage area 16 of the first storage unit 9 (step S15). When the registration is completed in this way, the stored ID data is transmitted to the smart entry C / U2 (step S16).

  The smart entry C / U2 receives the ID data transmitted from the biometric authentication device 1 (step S2), stores it in the fourth storage area 24 of the second storage unit 18 (step S3), and sets an erasure timer (step S3). Step S4).

  As described above, in the temporary registration mode, the biometric authentication information of the examiner who performs the test is stored in the second storage area 16 of the first storage unit 9 of the biometric authentication device 1. At the same time as the storage, unique ID data is associated and stored in the fourth storage area 24 of the second storage unit 18 of the smart entry C / U2.

(Test mode)
As in the temporary registration mode, the test mode is started in the factory by connecting a vehicle state confirmation terminal to the vehicle and selecting a test mode button from a menu screen displayed on the display. Hereinafter, the test mode will be described with reference to FIGS.

  The smart entry C / U2 outputs a power-on signal for turning on the power to the biometric authentication device 1 (step S21). Further, a test mode start signal for starting the test mode is output (step S22).

  The biometric authentication device 1 is turned on based on a power-on signal from the smart entry C / U 2 to initialize data (step S31), and starts a test mode based on a test mode start signal (step S32).

  In the test mode, first, finger detection is performed by the imaging unit 8 (step S33). For finger detection, a sensor for detecting the finger may be provided separately, or determination may be made based on whether or not the camera unit 14 can shoot. If a finger is detected (step S34: YES), the camera unit 14 performs imaging (step S35). If no finger is detected (step S34: NO), finger detection is continued for 30 seconds (step S34). S33) If still not detected, the authentication mode is terminated.

  The vein pattern imaged by the camera unit 14 is subjected to image processing by the first control unit 12 (step S37). As described above, the image processing is performed by converting each part (for each segment) into numerical data “0” or “1” based on the brightness of the captured vein pattern. Based on the obtained result, the biometric authentication information stored in the second storage area 16 of the first storage unit 9 is collated (step S38). The result (verification result) obtained by the collation and the ID data associated with the corresponding biometric authentication information are transmitted to the smart entry C / U2 (step S39).

  In the smart entry C / U2, whether or not the collation result transmitted from the biometric authentication device 1 is appropriate, that is, the imaged finger vein pattern is stored in the second storage area 16 of the first storage unit 9. Is determined (step S23). If it is not stored, the test mode is terminated, and if it is stored, it is confirmed whether or not the ID data matches the ID data stored in the fourth storage area 24 (step S24). Then, in response to the ID data, a control signal is output to each device such as a mirror, a seat, and a steering (step S25). When the start SW 7 is turned on (step S26), an STL release signal is transmitted to the electric STL 5 (step S27).

  In the electric STL5, the steering lock state is released based on the STL release signal to enter the unlock state (step S51). Then, an unlock signal is transmitted to the smart entry C / U2 and the engine C / U6 (step S52).

  In smart entry C / U2, the unlock signal from electric STL5 is confirmed (step S28), and ID data is transmitted to engine C / U6 (step S29).

  Engine C / U6 confirms the unlock signal from electric STL5 (step S61), and based on this unlock signal and the ID data from smart entry C / U2, whether or not the steering is unlocked. It is determined whether the ID data is appropriate (step S62). If either condition is not satisfied, the test mode is terminated, and if both conditions are satisfied, the engine is started (step S63). Then, an engine start signal is transmitted to the smart entry C / U2 (step S64).

  In the smart entry C / U2, the engine start signal transmitted from the engine C / U6 is confirmed (step S30), and the series of test modes ends.

  As described above, in the test mode, if verification is performed by reading the biometric authentication information temporarily registered by the biometric authentication device 1, each device of the vehicle can be automatically operated sequentially, and whether there is any problem. It becomes possible to inspect about.

(General mode)
The smart entry C / U2 always initializes the data after activation as shown in the flowchart of FIG. 6 (step S71) and executes the following processing every 10 msec (step S72).

  That is, the input / output unit 17 receives output signals from the door lock C / U4, the electric steering lock 5, the engine C / U6, the start SW, and the like (step S73). Based on the received signal, the mode determination / transition unit executes the corresponding mode (step S74), and the input / output unit 17 applies the corresponding device (door lock C / U4, electric STL5, engine C / U6, etc.). A control signal is output to (step S75). For example, if a signal indicating that the door has changed from an open state to a closed state is input from the door opening / closing SW 3, the normal mode (mode for starting the engine) is executed, and a control signal is sent to the engine C / U 6. Output.

  In the series of processes, the erasure timer is decremented every 10 msec (step S76), and when the erasure timer becomes 0 (step S77), a test data erasure signal is transmitted to the biometric authentication device 1 (step S78). Further, all the ID data stored in the fourth storage area 24 of the second storage unit 18 are deleted (step S79).

  The biometric authentication device 1 starts the test data erasure process by receiving the test data erasure signal (step S81), and all the data (the biometric authentication information and the ID stored in the second storage area 16 of the first storage unit 9). Data) is deleted (step S82).

(Normal mode)
Processing (normal mode) when the user gets on the vehicle and starts the engine will be described with reference to the flowcharts of FIGS.

  In the smart entry C / U2, if a signal indicating that the door has changed from the open state to the closed state is input from the door opening / closing SW3 (step S91), the biometric authentication device 1 is turned on. A power-on signal is output (step S92), and an authentication mode activation signal is output (step S93).

  The biometric authentication device 1 initializes data based on the power-on signal from the smart entry C / U2 (step S111), and determines whether the authentication mode is set (step S112). If the authentication mode activation signal is input from the smart entry C / U, the processing in the authentication mode is started, and if not, it is determined whether or not the registration mode is set (step S113). If a registration button (not shown) is operated, a registration mode for storing biometric information in the first storage unit 9 is executed in the same manner as the temporary registration mode. If it is not the registration mode, the normal mode is terminated.

  In the authentication mode, first, finger detection is performed as to whether or not a finger can be imaged by the camera unit 14 of the imaging unit 8 (step S114). If a finger is detected (step S115: YES), imaging by the camera unit 14 is performed (step S116). If no finger is detected (step S115: NO), finger detection is continued for 30 seconds (step S117). If it is still not detected, the authentication mode is terminated.

  The vein pattern imaged by the camera unit 14 is subjected to image processing by the first control unit 12 (step S118). In the image processing, as described above, each part (for each segment) is converted into numerical data “0” or “1” based on the brightness of the captured vein pattern. Based on the obtained result, the biometric authentication information stored in the first storage area 15 of the first storage unit 9 is collated (step S119). Then, the result obtained by the collation (collation result) and the ID data associated with the corresponding biometric authentication information are transmitted to the smart entry C / U2 (step S120).

  In the smart entry C / U2, whether or not the collation result transmitted from the biometric authentication device 1 is appropriate, that is, the imaged finger vein pattern is stored in the second storage area 16 of the first storage unit 9. Is determined (step S94). If it is not stored, the normal mode is terminated, and if it is stored, it is confirmed whether or not the ID data matches the ID data stored in the third storage area 23 (step S95). Then, in response to the ID data, a control signal is output to each device such as a mirror, a seat, and a steering (step S96). When the start SW 7 is turned on (step S97), an STL release signal is transmitted to the electric STL 5 (step S98).

  In the electric STL5, the steering lock state is released based on the STL release signal to enter the unlock state (step S121). Then, an unlock signal is transmitted to the smart entry C / U2 and the engine C / U6 (step S122).

  In smart entry C / U2, the unlock signal from electric STL5 is confirmed (step S99), and ID data is transmitted to engine C / U6 (step S100).

  Engine C / U6 confirms the unlock signal from electric STL5 (step S131), and based on this unlock signal and the ID data from smart entry C / U2, whether or not the steering is unlocked. It is determined whether the ID data is appropriate (step S132). If either condition is not satisfied, the normal mode is terminated, and if both conditions are satisfied, the engine is started (step S133). Then, an engine start signal is transmitted to the smart entry C / U2 (step S134).

  In the smart entry C / U2, the engine start signal transmitted from the engine C / U6 is confirmed (step S101), and the processing in the series of normal modes is terminated.

  As described above, in the normal mode, basically the same processing as in the test mode is executed, but the storage area accessed in the authentication process is the first storage area 15 in the first storage section 9 and the second storage section 18 in the second storage section 18. This is the third storage area 23. In other words, the second storage area 16 of the first storage unit 9 and the fourth storage area 24 of the second storage unit 18 used in the test mode are programmed so as not to be accessed. Therefore, even if the data has failed to be erased and remains in the second storage area 16 and the fourth storage area 24, it is impossible to execute processing such as the release of the steering lock using these data. .

  Note that the biometric authentication device and the biometric authentication system of the present invention are not limited to the configuration of the above-described embodiment, and various modifications are possible. For example, in the above-described embodiment, each process is executed using the two control units 12 and 21, but each process may be executed by one control unit. Further, for example, in the embodiment, the deletion mode control for deleting the biometric information stored in the second storage area 16 is performed on the smart entry C / U2 side, but the biometric authentication device 1 side performs the control. It may be. In this case, the biometric information stored in the second storage area 16 may be deleted when the test mode is completed.

It is a block diagram which shows the example which employ | adopted the biometrics system which concerns on this embodiment for the vehicle. It is a block diagram which shows the detail of the smart entry control unit and biometrics authentication apparatus of FIG. It is a flowchart which shows the processing content of the temporary registration mode in the biometric authentication system which concerns on this embodiment. It is a flowchart which shows the processing content of the test mode in the biometric authentication system which concerns on this embodiment. It is a flowchart which shows the processing content of the test mode in the biometric authentication system which concerns on this embodiment. It is a flowchart which shows the processing content of the general mode in the smart entry C / U2 of FIG. It is a flowchart which shows the processing content of the normal mode in the biometric authentication system which concerns on this embodiment. It is a flowchart which shows the processing content of the normal mode in the biometric authentication system which concerns on this embodiment.

Explanation of symbols

1 ... biometric authentication device 2 ... smart entry C / U (control unit)
3 ... Door open / close switch
4 ... Door lock C / U
5 ... Electric STL
6 ... Engine C / U
7 ... Start SW
8 ... Imaging unit (reading means)
9 ... 1st memory | storage part (memory | storage means)
DESCRIPTION OF SYMBOLS 10 ... 1st power supply part 11 ... 1st communication part 12 ... 1st control part (personal authentication means)
DESCRIPTION OF SYMBOLS 13 ... Infrared irradiation part 14 ... Camera part 15 ... 1st memory | storage area 16 ... 2nd memory | storage area 17 ... Input-output part 18 ... 2nd memory | storage part (2nd memory | storage means)
DESCRIPTION OF SYMBOLS 19 ... 2nd power supply part 20 ... 2nd communication part 21 ... 2nd control part (2nd personal authentication means)
22 ... Remote control 23 ... Third storage area 24 ... Fourth storage area

Claims (4)

Reading means for reading biological information;
Storage means for storing biological information;
A personal authentication unit that compares the biometric information read by the reading unit with the biometric information stored in the storage unit to perform personal authentication;
With
The storage means includes at least a first storage area for storing user biometric information and a second storage area for storing biometric information of an inspector who performs an operation check before shipment,
The personal authentication means is
A normal mode for performing personal authentication by comparing the biometric information read by the reading means with the biometric information stored in the first storage area;
A test mode for performing personal authentication by comparing the biometric information read by the reading means with the biometric information stored in the second storage area;
Is possible and
In the normal mode, the biometric authentication device is characterized in that the second storage area cannot be accessed.   The biometric authentication apparatus according to claim 1, wherein the personal authentication unit automatically executes a delete mode for deleting biometric information stored in the second storage area at least when the normal mode is executed. The biometric authentication device according to claim 1,
A control unit that executes predetermined processing set in advance;
With
The storage means of the biometric authentication device stores biometric information and identification information in association with each other in the first storage area and the second storage area,
The control unit is
A second storage means comprising a third storage area for storing identification information stored in the first storage area, and a fourth storage area for storing identification information stored in the second storage area;
When the biometric information collated by the personal authentication unit of the biometric authentication device is the biometric information stored in the storage unit, the identification information associated with the biometric information is the identification information stored in the second storage unit, Second personal authentication means for executing the predetermined processing;
With
The second personal authentication means collates the identification information stored in the third storage area of the second storage means during execution of the normal mode, and the fourth of the second storage means during execution of the test mode. A biometric authentication system characterized by collating identification information stored in a storage area. The biometric authentication device according to claim 2,
A control unit;
With
The control unit is
A second storage means comprising a third storage area for storing identification information stored in the first storage area, and a fourth storage area for storing identification information stored in the second storage area;
The identification information stored in the fourth storage area together with the personal authentication means of the biometric authentication apparatus when executing the delete mode for deleting the biometric information stored in the second storage area at least when executing the normal mode A second personal authentication means for deleting
A biometric authentication system comprising:

Images