JP2010044588A - Authentication device, authentication system, authentication method, program therefor, and recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent authenticating precision from being deteriorated even when authentication information configured of biological information is changed in an authentication system using biological information. <P>SOLUTION: This authentication device 10 is provided with: a biological information input part 111 for accepting the input of multiple pieces of biological information of registration candidates; a synthetic function generation part 121 for generating synthetic functions; a synthetic image generation part 122 for generating a synthetic image obtained by synthesizing the multiple pieces of biological information of the registration candidates by using the synthetic functions; a storage part 13 for storing the generated synthetic image; and a collation part 124 for, when receiving an authentication request including the synthetic image obtained by synthesizing the multiple pieces of biological information of persons to be authenticated from terminal equipment 20, collating the synthetic image with the synthetic image of the storage part 13. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an authentication technique using biometric information.

  In recent years, an authentication technique called biometrics using biometric information has been developed and used for authentication of ATMs (Automatic Teller Machines) of banks. This byte metric uses invariance of biometric information. However, when biometric information is stolen by some method, there is a problem that it cannot be changed unlike a password or the like.

In order to solve these problems, a technique called cancelable biometorics is currently being developed (Non-Patent Document 1). In this technique, an image representing biometric information is divided and rearranged, or distortion is applied to the image, and the deformed biometric information is used as authentication information. For example, in a system including an authentication server (authentication device) and a terminal device that transmits authentication information to the authentication server, when the biometric information used for authentication is to be changed, the authentication device transforms the biometric information by the method described above. And register. In the terminal device, the biometric information of the person to be authenticated is read, and the read biometric information is transformed by the same method as the authentication device. When the authentication device receives the deformed biometric information from the terminal device, the authentication device determines authentication OK / NG depending on whether the biometric information is the same as the deformed biometric information.
Rotha, N., Connel, J., Bolle, RM, Chikkerur, S .: "Cancelable Biometrics: A Case Study in fingerprints," The 18th International Conference on Pattern Recognition, VOL.4, pp.370-373 (2006) .

  However, the above-mentioned cancelable biometorics does not always provide the same deformation every time, and there is a problem that the authentication accuracy of the person to be authenticated in the authentication device is not high. In view of the above, an object of the present invention is to solve the above-described problems and not to lower authentication accuracy even when biometric information used for authentication is changed.

  In order to solve the above-described problem, the invention described in claim 1 includes a biometric information input unit that receives input of a plurality of biometric information of a registrant, a synthesis function generation unit that generates a synthesis function, and a synthesis function generation unit. Using the generated composite function, a composite image generation unit that generates a composite image by combining a plurality of biometric information of the registrant, a matching information registration unit that stores the generated composite image in the storage unit, and stores the composite image When the authentication request including the composite image synthesized from the biometric information of the person to be authenticated is received from the storage unit and the terminal device, the composite image and the composite image of the storage unit are collated, and the collation result Is provided with a verification unit that transmits to the terminal device.

  An authentication system according to claim 5 is an authentication including the authentication device according to any one of claims 1 to 4 and a terminal device that transmits an authentication request including a composite image to the authentication device. The terminal device is used when a second biometric information input unit that receives input of a plurality of biometric information of a person to be authenticated and a composite image generation unit of the authentication device generate a composite image of a registrant. A combination function storage unit that stores the same combination function as the combination function, and a plurality of biometrics of the person to be authenticated input via the second biological information input unit with reference to the combination function stored in the combination function storage unit And a second composite image generation unit configured to generate a composite image of information and transmit an authentication request including the generated composite image to the authentication apparatus.

  The invention according to claim 9 is an authentication method in an authentication system including an authentication device and a terminal device that transmits an authentication request including a composite image to the authentication device, wherein the authentication device includes a plurality of biometrics of registrants. A step of receiving an input of information, a step of generating a composite function, a step of generating a composite image by combining the generated biometric information of the registrant using the generated composite function, and a storage unit for storing the generated composite image And a step in which the terminal device accepts input of a plurality of pieces of biometric information of the person to be authenticated, and a composition that is the same as the composition function used when the authentication device generates a composite image of the person to be authenticated. A step of generating a composite image of a plurality of pieces of biometric information of the input person to be authenticated with reference to a composite function storing the function, and a step of transmitting an authentication request including the generated composite image to the authentication device. When the authentication device receives an authentication request including the composite image from the terminal device, the authentication device collates the composite image with the composite image in the storage unit and outputs the collation result. The authentication method is as follows.

  By doing in this way, since the authentication device performs verification using authentication information using a composite image without distortion or deformation, even when verification (authentication) is performed using the existing authentication technology in the verification unit The authentication accuracy can be prevented from deteriorating. Also, since new authentication information can be created infinitely by changing the synthesis function in the authentication device and the terminal device, new authentication information can be easily prepared even when the authentication information has to be changed. be able to. Note that this composition function may be prepared for each registrant (authenticated person), or a common function may be prepared for all registrants (authenticated persons).

  The invention according to claim 2 is the authentication apparatus according to claim 1, wherein when the composite image generation unit generates a composite image using a composite function, each piece of biological information to be combined is displayed at an arbitrary composite ratio. It is characterized by combining.

  By doing so, the authentication device can synthesize the composite image at a composite ratio desired by the administrator or the like, so that even if biometric information is stolen, a third party illegally obtains this composite image. Difficult to create.

  According to a third aspect of the present invention, in the authentication apparatus according to the first or second aspect, the synthesis function is a function indicating a synthesis ratio for each region of the biological information.

  In this way, the authentication device can set the composition ratio for each area of the biometric information when generating the composite image, so that even if the biometric information is stolen, a third party illegally obtains this composite image. Difficult to create.

  According to a fourth aspect of the present invention, in the authentication device according to any one of the first to third aspects, the plurality of pieces of biometric information include fingerprint image data, iris image data, and vein image data of the person to be authenticated. It is characterized by being either or a combination thereof.

  By doing in this way, the authentication device can generate a composite image by combining various biological information. This makes it difficult for a third party to create authentication information illegally. The biometric information here is image data such as face, ear, retina, palm print, palm shape, finger shape, or a combination thereof, as long as it represents the biometric characteristics of the registrant (authenticated person). May be.

  The invention described in claim 6 is an authentication system including the authentication device according to any one of claims 1 to 4 and a terminal device that transmits an authentication request including a composite image to the authentication device. The terminal device includes a second biometric information input unit that receives input of a plurality of biometric information of the person to be authenticated and a composite function used when the composite image generation unit of the authentication device generates a composite image of the registrant. A composite function storage unit that stores the same composite function and a composite function stored in the composite function storage unit, and a plurality of pieces of biometric information of the person to be authenticated input via the second biometric information input unit And a second composite image generation unit configured to generate an image and transmit an authentication request including the generated composite image to the authentication apparatus.

  By doing in this way, even when the authentication function is changed in the authentication device (that is, when the composite image is changed), and in the authenticated person's terminal device, the combined image of the registrant stored in the authentication device The same composite image can be generated.

  The invention according to claim 7 is an authentication system including a biometric information synthesizing device, an authentication device, and a terminal device that transmits an authentication request to the authentication device, and the biometric information synthesizing device includes a plurality of registrants. Using a biometric information input unit that receives biometric information input, a synthesis function generation unit that generates a synthesis function, and a synthesis function generated by the synthesis function generation unit, a synthesized image obtained by synthesizing a plurality of biometric information of registrants. A composite image generation unit that generates and transmits the composite image to the authentication device. The authentication device includes a verification information registration unit that stores the composite image generated by the biometric information synthesis device in the storage unit, and a storage unit that stores the composite image. When an authentication request including a composite image synthesized from a plurality of pieces of biometric information of the person to be authenticated is received from the terminal device, the composite image and the composite image of the storage unit are collated, and the collation result is Send to The terminal device includes a second biometric information input unit that accepts input of a plurality of pieces of biometric information of the person to be authenticated, and a composite image generation unit of the biometric information synthesizer generates a composite image of the registrant. A plurality of authentication subjects input via the second biometric information input unit using a synthesis function storage unit that stores the same synthesis function as the synthesis function used at the time and a synthesis function stored in the synthesis function storage unit And a second composite image generation unit for generating an authentication request including the generated composite image and transmitting the authentication request to the authentication apparatus.

  The invention according to claim 10 is an authentication method in an authentication system including a biometric information synthesizer, an authentication device, and a terminal device that transmits an authentication request to the authentication device, wherein the biometric information synthesizer is a registrant. A step of receiving a plurality of pieces of biometric information input, a step of generating a composite function, and using the generated composite function, a composite image obtained by combining the plurality of biometric information of the registrant is generated and transmitted to the authentication device. And a step of executing a step of storing the composite image generated by the biometric information synthesizing device in the storage unit, and a step of receiving the input of a plurality of pieces of biometric information of the person to be authenticated; In the biometric information synthesizing apparatus, the synthesized image of a plurality of pieces of biometric information of the authenticated person input using the same synthesis function synthesis function as the synthesis function used when generating the synthesized image of the registrant. A step of generating and a step of transmitting an authentication request including the generated composite image to the authentication device, wherein the authentication device includes a composite image synthesized from a plurality of pieces of biometric information of the person to be authenticated from the terminal device. When the authentication request is received, the composite image and the composite image in the storage unit are collated, and the collation result is transmitted to the terminal device.

  By doing in this way, an authentication system is realizable by the combination of the authentication apparatus which authenticates (collates) with the existing authentication technique, and a biometric information synthesizer. Moreover, when an authentication system is comprised with a some authentication apparatus, you may make it share a biometric information synthesis apparatus with these authentication apparatuses.

  The invention according to claim 8 is the authentication system according to claim 7, wherein the biometric information input unit of the biometric information synthesizer receives a request for changing the synthesized image and the input of a plurality of biometric information of the registrant. The synthesized image generation unit generates a new synthesized image by synthesizing a plurality of biometric information of the registrant using the new synthesized function generated by the synthesized function generating unit, transmits the synthesized image to the authentication device, and creates a new synthesized function. Is transmitted to the terminal device of the registrant, the verification information registration unit of the authentication device stores the transmitted new composite image in the storage unit, and the second composite image generation unit of the terminal device transmits the transmitted new A composite image of a plurality of pieces of biometric information of the person to be authenticated is generated with reference to a composite function, and an authentication request including the generated composite image is transmitted to the authentication device.

  Thus, when the composite image of the registrant is changed in the authentication device of the authentication system, the composite image of the registrant stored in the authentication device correspondingly in the terminal device of the person to be authenticated The same composite image can be generated.

  The invention described in claim 11 is an authentication program for causing a computer to function as the authentication device described in any one of claims 1 to 4.

  According to such a program, a general computer can be caused to function as the authentication apparatus according to any one of claims 1 to 4.

  The invention described in claim 12 is a computer-readable recording medium storing the authentication program according to claim 11.

  By doing so, the authentication program according to claim 11 can be installed in the computer via the recording medium, and can function as the authentication apparatus according to any one of claims 1 to 4.

  According to the present invention, in the authentication device, even when the biometric information used for the authentication process is changed, the authentication accuracy can be prevented from being lowered. In addition, since the authentication device can easily change the authentication information, more secure authentication processing can be realized.

  Hereinafter, the best mode for carrying out the present invention (hereinafter referred to as an embodiment) will be described.

  First, a composite image used as authentication information by the authentication apparatus according to the present embodiment will be briefly described with reference to FIG. Here, as the biometric information, the iris image (image data) of the left eye of the registrant (authenticated person) and the iris image of the right eye are used, and a synthesis function that averages these iris images is used as a synthesis function. The case of using will be described as an example. FIG. 1 is a diagram illustrating a composite image generated by the authentication device according to the present embodiment.

  The image indicated by reference numeral 101 in FIG. 1 is the iris image of the right eye of the registrant (authenticated person), and the image indicated by reference numeral 102 is the iris image of the left eye of the registrant (authenticated person). From these images, the authentication device generates an averaged iris image indicated by reference numeral 103 as a composite image. Then, the authentication device stores the composite image generated in this way in the storage unit. Since the terminal device also has the same composite function as the authentication device, the composite function is generated from the biometric information of the person to be authenticated using the composite function. When the authentication device receives an authentication request including the composite image from the terminal device of the user to be authenticated, the authentication device collates the composite image stored in the storage unit of the authentication device and performs authentication processing of the user to be authenticated. .

  As indicated by reference numeral 103, it can be seen that the composite image generated by the authentication device (and the terminal device) is an image different from the iris image of the right eye and the iris image of the left eye. Therefore, highly secure authentication can be performed by performing authentication using such a composite image. Further, since image synthesis using this synthesis function does not add distortion or deformation to the image itself, high authentication accuracy can be ensured even when authentication technology based on conventional iris images is used.

  Next, the configuration of an authentication system including such an authentication device will be described with reference to FIG. FIG. 2 is a block configuration diagram illustrating the configuration of the authentication system according to the present embodiment. As shown in FIG. 2, the authentication system includes an authentication device 10 and a terminal device 20 connected via a network 30 (such as the Internet). In FIG. 2, only one terminal device 20 is connected, but a plurality of terminal devices 20 may be connected.

  The authentication device 10 and the terminal device 20 have the same composite function, and the authentication device 10 generates a composite image from a plurality of pieces of biological information of the person to be authenticated (registrant) using the composite function, and stores the composite image. Stored in the unit 13. When the terminal device 20 receives input of a plurality of pieces of biometric information of the person to be authenticated, the terminal device 20 generates a composite image using this composite function. Then, an authentication request including the generated composite image is transmitted to the authentication device 10. When the authentication device 10 receives the authentication request from the terminal device 20, the authentication device 10 performs authentication of the person to be authenticated (collation with the registered composite image) using the composite image included in the received authentication request, and the authentication is performed. The result (verification result) is returned to this terminal device 20.

  Such an authentication apparatus 10 includes an input unit 11, a processing unit 12, a storage unit 13, and a communication unit 14.

  The input unit 11 includes a biometric information input unit 111 (111A, 111B,..., 111N) that receives input of a plurality of biometric information of the registrant (for example, an iris image and a right eye iris image of the registrant). The means for reading the registrant's biometric information may be provided outside the authentication device 10 or may be provided inside the authentication device 10.

  The processing unit 12 generates a composite image of the registrant and collates it with the composite image of the person to be authenticated. Such a processing unit 12 includes a synthesis function generation unit 121 that generates a synthesis function, a composite image generation unit 122, a collation information registration unit 123, and a collation unit 124.

  The synthesis function generation unit 121 generates a synthesis function (for example, a two-dimensional function f (x, y)) for synthesizing a plurality of biological information. The composition function generated here is preferably different every time.

  The composite image generation unit 122 synthesizes a plurality of input biological information using the composite function generated by the composite function generation unit 121. For example, when the input of the iris image of the left and right eyes of the registrant is received as the biometric information, the composite image generation unit 122 normalizes the position and size with reference to the pupil position. Then, the two-dimensional function f (x, y) generated by the synthesis function generation unit 121 and the function (1-f (x, y)) having the opposite density relation are respectively represented by the left eye iris image and the right eye. Multiply (add) by multiplying the iris image. Then, the superimposed image is output as a composite image. However, the range of the two-dimensional function f (x, y) here is “0 to 1”.

  The collation information registration unit 123 registers the registrant's composite image generated by the composite image generation unit 122 and the composite function used to generate the composite image in the storage unit 13 as verification information.

  When the verification unit 124 receives an authentication request including a composite image (a composite image generated from the biometric information of the person to be authenticated) from the terminal device 20 via the communication unit 14, the verification unit 124 registers the composite image and the storage unit 13. The synthesized image is collated. Then, the verification result is transmitted via the communication unit 14 to the terminal device 20 that is the transmission source of this authentication request.

  The matching of the synthesized image in the matching unit 124 is performed using an existing iris matching algorithm using a gabor filter or the like if the synthesized image is a synthesized iris image. For example, for the iris image, the matching unit 124 first detects the iris and pupil by an arc detection method such as edge detection and Hough transform using this iris matching algorithm. Then, the matching unit 124 divides the detected iris into a lattice shape based on concentric circles, and performs a convolution operation of the gabor filter for each cell. Then, the frequency response obtained by this calculation is treated as a feature vector, and the similarity is calculated by the Hamming distance with the feature vector in the registered composite image (for details, see J. Daugman, “How Iris Rocognition Works,” IEEE Trans . See Circuits and Systems for Video Technology, Vol. 14, No. 1, pp. 21-30). If the similarity between the composite images collated here exceeds a predetermined threshold, the collation unit 124 determines that the composite image is a composite image obtained by combining the biometric information of the registrant.

  The storage unit 13 stores collation information including the composite image generated by the composite image generation unit 122. As shown in FIG. 2, the collation information may include a synthesis function used for generating a composite image. Information on this synthesis function can be rewritten via the input unit 11.

  The communication unit 14 is a communication interface for performing data transmission / reception with the terminal device 20 via the network 30. The communication unit 14 receives an authentication request including a composite image from the terminal device 20, and transmits a verification result of the composite image to the terminal device 20.

  The terminal device 20 holds the same composite function as the composite function used by the authentication device 10 for generating the composite image. And this terminal device 20 will generate | occur | produce a synthesized image using this synthetic | combination function, if the input of several biometric information of a to-be-authenticated person is received. Then, the terminal device 20 transmits an authentication request including this composite image to the authentication device 10 via the network 30. Such a terminal device 20 includes an input unit 21, a processing unit 22, a storage unit 23, and a communication unit 24.

  The input unit 21 includes a biometric information input unit 211 (211A, 211B,..., 211N) that accepts input of biometric information (for example, left and right iris images) of the person to be authenticated. The biometric information input unit 211 receives an input of biometric information of a registrant read by an external device, like the biometric information input unit 111 of the authentication device 10 described above.

  The processing unit 22 uses the composite function stored in the storage unit 23 to generate a composite image (second composite image generation unit) 221 that generates a composite image from a plurality of pieces of biological information input via the input unit 21. Is provided. Since the function of the composite image generation unit 221 is the same as that of the composite image generation unit 122 of the authentication device 10 described above, description thereof is omitted. Further, when the processing unit 22 receives a new synthesis function from the authentication device 10, the processing unit 22 replaces the synthesis function stored in the storage unit 23 with the new synthesis function.

  The storage unit (composite function storage unit) 23 stores a composite function used by the composite image generation unit 221 to generate a composite image. This composite function is the same as the composite function held by the authentication device 10. This synthesis function may be input via the input unit 21, input from the authentication device 10 via the communication unit 24, or read into the terminal device 20 via the storage medium. May be.

  The output unit 25 outputs the processing result obtained by the processing unit 22 to an external device or the like. For example, the collation result received from the authentication device 10 and the processing result by the authentication device 10 are output to an external device such as a liquid crystal monitor.

  The authentication device 10 and the terminal device 20 are realized by a computer that can transmit and receive data via the network 30. The input units 11 and 21 and the output unit 25 are composed of input / output interfaces. The processing units 12 and 22 are realized by a program execution process by a CPU (Central Processing Unit) included in each device, a dedicated circuit, or the like. Further, the storage units 13 and 23 are configured by a storage medium such as a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), and a flash memory. When the functions of the authentication device 10 and the terminal device 20 are realized by program execution processing, the storage unit 13 of the authentication device 10 and the storage unit 23 of the terminal device 20 are programs for realizing the functions of the respective devices. Is stored.

  Next, the operation procedure of the authentication system of FIG. 2 will be described using FIG. 3 with reference to FIG. FIG. 3 is a flowchart showing an operation procedure of the authentication system of FIG. Here, the same synthesis function as the synthesis function of the authentication device 10 is stored in the storage unit 23 of the terminal device 20 of FIG.

  First, the authentication device 10 in FIG. 2 accepts input of a plurality of biometric information of a registrant from the biometric information input unit 111 (S1). Next, the composite function generator 121 generates a composite function, and the composite image generator 122 generates a composite image using this composite function (S2). And the collation information registration part 123 registers this synthesized image in the memory | storage part 13 as collation information (S3).

  Thereafter, the terminal device 20 receives input of a plurality of pieces of biometric information of the person to be authenticated from the biometric information input unit 111 (S4). Then, the composite image generation unit 221 generates a composite image of a plurality of input biological information using the composite function stored in the storage unit 23 (S5). Next, the terminal device 20 transmits an authentication request including this composite image to the authentication device 10 via the network 30 via the communication unit 24 (S6).

  The collation unit 124 of the authentication apparatus 10 that has received such an authentication request performs a collation process between the composite image included in the received authentication request and the composite image stored in the storage unit 13 (S7). For example, if the biometric information is an iris image, the matching process is performed using an iris matching algorithm using a gabor filter or the like. And the collation part 124 transmits this collation result to the terminal device 20 via the network 30 by the communication part 14 (S8).

  In addition, when changing the composite image registered in the memory | storage part 13 of the authentication apparatus 10, the input of several biometric information of a registrant is received from the biometric information input part 111 similarly to S1. Then, the composite function generation unit 121 generates a new composite function, and the composite image generation unit 122 generates a new composite image using the new composite function, and converts the composite image included in the collation information into this composite image. Replace with a new composite image.

  Then, the authentication device 10 sends the composite function (new composite function) used for generating the new composite image to the terminal device 20 via the network 30 or by another means. Then, the terminal device 20 stores the new synthesis function in the storage unit 23. Thereafter, the terminal device 20 generates a composite image of a plurality of pieces of biometric information of the person to be authenticated using this new composite function, and transmits an authentication request including the generated composite image to the authentication device 10.

  By doing in this way, even if the authentication device 10 changes the composite image that is the collation information (authentication information), the terminal device 20 also transmits the composite image after the change. Collation can be performed using the composite image after the change. Here, the composite image generated by the authentication device 10 and the terminal device 20 does not add distortion or deformation to the original image of biological information. Therefore, even when an existing authentication technique is used in the authentication apparatus 10, there is no possibility that the authentication accuracy will be reduced.

  It should be noted that such a combination of a plurality of pieces of biological information uses two iris images on the left and right sides of the registrant (authenticated person), but is not limited to this. For example, three or more types of biometric information of the same type may be combined, such as combining the fingerprints of three fingers of the left and right hands of a registrant (authenticated person). Alternatively, a combination of a plurality of different types of biological information such as a combination of an iris and a fingerprint may be used.

  Furthermore, the composition ratio when combining the plurality of pieces of biological information may be different for each piece of biological information, and the composition ratio may be different for each region of biological information to be synthesized. May be. For example, the left eye iris image may be combined at a ratio of 10% for the left eye iris image and 90% for the right eye iris image. In addition, the left-eye iris image is 10%, the right-eye iris image is 90%, and the left-eye iris image is 50% and the right-eye iris image is 50% for the predetermined regions of the left and right eye iris images. % May be used. In this way, even when biometric information is stolen, it is possible to prevent a third party from generating the same composite image illegally.

  In addition, when biometric information is combined to generate a composite image in this way, or when the composition ratio of each biometric information is changed for each region of biological information, the region and the composition for each region are combined. The ratio is set as the synthesis function described above.

  Further, the authentication device 10 mainly performs authentication processing, and the subsequent processing may be performed by another device or the like. When the authentication target is determined to be the registrant by the authentication processing, Processing (for example, processing based on a predetermined application) may be executed, and the processing result may be transmitted to the terminal device 20.

  In the above-described embodiment, the generation of the composite image using the plurality of biometric information of the registrant is performed by the authentication device 10, but may be performed by the terminal device 20. That is, the terminal device 20 includes a synthesis function generation unit 121, generates a composite image of a plurality of biometric information of the registrant using the synthesis function generated by the synthesis function generation unit 121, and transmits this to the authentication device 10. To do. Then, the authentication device 10 registers the composite image in the storage unit 13 as the composite image of the registrant. Thereafter, when an authentication request including a composite image is received from the terminal device 20, collation with the composite image in the storage unit 13 is performed. In this way, authentication processing using a composite image of biological information can also be executed. Note that the terminal device that accepts input of a plurality of biometric information of the registrant and the terminal device that accepts input of the biometric information of the person to be authenticated may be the same terminal device or different terminal devices.

  The biometric information synthesis performed by the authentication device 10 in the authentication system of FIG. 2 may be performed by another device. FIG. 4 is a block diagram illustrating the configuration of the authentication system according to this embodiment. The authentication system shown in FIG. 4 includes a biometric information synthesizing device 40 that synthesizes biometric information, which has been performed by the authentication device 10 shown in FIG. 2, and an authentication device that collates the synthesized image of the registrant and the synthesized image of the person to be authenticated. 10A and the terminal device 20 are comprised. Constituent elements similar to those of the above-described embodiment are denoted by the same reference numerals and description thereof is omitted.

  The biological information synthesizer 40 includes an input unit 41, a processing unit 42, and a communication unit 44. The input unit 41 includes a biological information input unit 111 (111A to 111N). In addition, the processing unit 42 includes a synthesis function generation unit 121 and a synthesis image generation unit 122. Further, the authentication device 10 </ b> A includes a processing unit 12, a storage unit 13, and a communication unit 14. The processing unit 12 includes a collation information registration unit 123 and a collation unit 124. When the biometric information input unit 111 (111A to 111N) of the input unit 41 of the biometric information synthesizing device 40 receives the input of a plurality of biometric information of the registrant, the biometric information generation unit 121 generates a composite function and generates a composite image. The production | generation part 122 produces | generates a synthesized image from several biological information using this synthetic | combination function. Then, the composite image is transmitted to the authentication device 10A via the communication unit 44. 10 A of authentication apparatuses store the synthesized image transmitted from the biometric information synthesis apparatus 40 in the memory | storage part 13 as collation information. Thereafter, when receiving the authentication request from the terminal device 20, the authentication device 10 </ b> A includes the composite image of the person to be authenticated included in the authentication request by the verification unit 124 and the composite image of the registrant stored in the storage unit 13. The verification result is transmitted to the terminal device 20 via the communication unit 14.

  Also, in the authentication system shown in FIG. 4, when it is desired to change the composite image stored in the storage unit 13 of the authentication device 10A, the following processing is executed. That is, first, the biometric information synthesizing device 40 receives the biometric information of the registrant again and generates a new synthesis function by the synthesis function generating unit 121. Then, the composite image generation unit 122 generates a composite image using the new composite function, and transmits the generated composite image to the authentication device 10A via the communication unit 44. 10 A of authentication apparatuses store the synthesized image transmitted from the biometric information synthesis apparatus 40 in the memory | storage part 13 as collation information. In addition, the biometric information synthesizing device 40 transmits the synthesizing function (new synthesizing function) used for generating the synthesized image to the registrant's terminal device 20 via the communication unit 44. And when this terminal device 20 receives the input of the biometric information of the person to be authenticated, a composite image is generated using this new composite function. By doing in this way, even if the composite image of the authentication device 10A is changed, the same composite image as the changed composite image can be generated also in the terminal device 20 of the registrant. When the biometric information synthesizing apparatus 40 generates a new synthesis function in this way, the new synthesis function is transmitted to the authentication apparatus 10A, stored in the verification information of the registrant, and the authentication apparatus 10A. May send this new composite function to the terminal device 20.

  The authentication device 10 and the terminal device 20 according to the present embodiment can be realized by a program for executing the processing as described above, and the program is stored in a computer-readable storage medium (CD-ROM or the like). Can be provided.

It is the figure which illustrated the synthesized image which the authentication apparatus of this Embodiment produces | generates. It is the block block diagram which illustrated the structure of the authentication system of this Embodiment. It is a flowchart which shows the operation | movement procedure of the authentication system of FIG. It is the block block diagram which illustrated the structure of the authentication system of this Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Authentication apparatus 11,21 Input part 12,22 Processing part 13,23 Storage part 14,24 Communication part 20 Terminal apparatus 25 Output part 30 Network 111,211 Biometric information input part 121 Composite function generation part 122,221 Composite image generation part 123 collation information registration unit 124 collation unit

Claims (12)

A biometric information input unit that receives input of a plurality of biometric information of a registrant;
A synthesis function generator for generating a synthesis function;
Using a composite function generated by the composite function generator, a composite image generator that generates a composite image by combining the biometric information of the registrant;
A collation information registration unit for storing the generated composite image in a storage unit;
The storage unit for storing the composite image;
When receiving an authentication request including a composite image synthesized from a plurality of pieces of biometric information of the person to be authenticated from the terminal device, the composite image and the composite image of the storage unit are collated, and the collation result is obtained from the terminal An authentication apparatus comprising: a verification unit that transmits to the apparatus.   The authentication apparatus according to claim 1, wherein when the composite image generation unit generates a composite image using the composite function, the biometric information to be combined is combined at an arbitrary combination ratio.   The authentication apparatus according to claim 1, wherein the synthesis function is a function indicating the synthesis ratio for each area of the biological information.   The plurality of pieces of biological information are any one of fingerprint image data, iris image data, and vein image data of the person to be authenticated, or a combination thereof. The authentication device described. An authentication system including the authentication device according to any one of claims 1 to 4 and a terminal device that transmits an authentication request including the composite image to the authentication device,
The terminal device
A second biometric information input unit that receives input of a plurality of biometric information of the person to be authenticated;
A composite function storage unit that stores the same composite function as the composite function used when the composite image generation unit of the authentication device generates the composite image of the registrant;
With reference to the composite function stored in the composite function storage unit, a composite image of a plurality of pieces of biometric information of the person to be authenticated input via the second biometric information input unit is generated, and the generated composite image is An authentication system comprising: a second composite image generation unit that transmits the authentication request including the authentication request to the authentication device. When the biometric information input unit of the authentication device accepts the change request for the composite image and the input of the biometric information of the registrant,
The synthesized image generation unit generates a new synthesized image obtained by synthesizing a plurality of biological information of the registrant using a new synthesized function generated by the synthesized function generating unit,
The verification information registration unit stores the generated new composite image in a storage unit, transmits the new composite function to the terminal device of the registrant,
The second composite image generation unit of the terminal device generates a composite image of a plurality of pieces of biometric information of the person to be authenticated with reference to the transmitted new composite function, and includes the generated composite image The authentication system according to claim 5, wherein an authentication request is transmitted to the authentication device. An authentication system that includes a biometric information synthesis device, an authentication device, and a terminal device that transmits an authentication request to the authentication device,
The biological information synthesizer is
A biometric information input unit that receives input of a plurality of biometric information of a registrant;
A synthesis function generator for generating a synthesis function;
Using a composite function generated by the composite function generator, and generating a composite image obtained by combining a plurality of biometric information of the registrant, and transmitting the composite image to the authentication device,
The authentication device
A collation information registration unit that stores a composite image generated by the biometric information synthesis device in a storage unit;
The storage unit for storing the composite image;
When receiving an authentication request including a composite image synthesized from a plurality of pieces of biometric information of the person to be authenticated from the terminal device, the composite image and the composite image of the storage unit are collated, and the collation result is obtained from the terminal A verification unit that transmits to the device,
The terminal device
A second biometric information input unit that receives input of a plurality of biometric information of the person to be authenticated;
A composite function storage unit that stores the same composite function as the composite function used when the composite image generation unit of the biometric information synthesis apparatus generates the composite image of the registrant;
Using a composite function stored in the composite function storage unit, a composite image of a plurality of pieces of biometric information of the person to be authenticated input via the second biometric information input unit is generated, and the generated composite image is included. An authentication system comprising: a second composite image generation unit that transmits the authentication request to the authentication device. When the biometric information input unit of the biometric information synthesizer receives a request for changing the composite image and the input of a plurality of biometric information of the registrant,
The synthesized image generation unit generates a new synthesized image obtained by synthesizing a plurality of biometric information of the registrant using the new synthesized function generated by the synthesized function generating unit, and transmits the synthesized image to the authentication device. Sending the new composite function to the terminal device of the registrant;
The verification information registration unit of the authentication apparatus stores the transmitted new composite image in a storage unit,
The second composite image generation unit of the terminal device generates a composite image of a plurality of pieces of biometric information of the person to be authenticated with reference to the transmitted new composite function, and includes the generated composite image The authentication system according to claim 7, wherein an authentication request is transmitted to the authentication device. An authentication method in an authentication system including an authentication device and a terminal device that transmits an authentication request to the authentication device,
The authentication device is
Receiving a plurality of biometric information of the registrant;
Generating a composite function;
Using the generated composite function to generate a composite image by combining a plurality of biometric information of the registrant;
Storing the generated composite image in a storage unit;
The terminal device is
Receiving a plurality of pieces of biometric information of the person to be authenticated;
The authentication device refers to a composite function that stores the same composite function as the composite function used when generating the composite image of the person to be authenticated. A step of generating
Transmitting the authentication request including the generated composite image to the authentication device;
The authentication device
When an authentication request including the composite image is received from the terminal device, the composite image and the composite image in the storage unit are collated, and the collation result is transmitted to the terminal device. Method. An authentication method in an authentication system including a biometric information synthesis device, an authentication device, and a terminal device that transmits an authentication request to the authentication device,
The biological information synthesizer is
Receiving a plurality of biometric information of the registrant;
Generating a composite function;
Using the generated synthesis function to generate a synthesized image obtained by synthesizing a plurality of biometric information of the registrant, and transmitting to the authentication device;
The authentication device is
Executing a step of storing the synthesized image generated by the biometric information synthesizing apparatus in a storage unit;
The terminal device is
Receiving a plurality of pieces of biometric information of the person to be authenticated;
In the biometric information synthesizing apparatus, a synthetic image of the plurality of pieces of biometric information of the input person to be authenticated is generated by using the same synthesis function synthesis function as the synthesis function used when generating the synthetic image of the registrant. Steps,
Transmitting the authentication request including the generated composite image to the authentication device;
The authentication device is
When receiving an authentication request including a composite image composed of a plurality of pieces of biometric information of the person to be authenticated from the terminal device, the composite image and the composite image of the storage unit are collated, and the collation result is An authentication method, comprising: transmitting to the terminal device.   An authentication program for causing a computer to function as the authentication device according to any one of claims 1 to 4. A computer-readable recording medium storing the authentication program according to claim 11.

Images