JP2010079633A - Biological information authentication system and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a biological information authentication system and method that provide higher security to prevent illegal access even if biological information is falsified or altered. <P>SOLUTION: The biological information authentication system and method providing higher security can be provided which are capable of preventing illegal access by performing authentication using not only biological information that can be read in everyday life or can be falsified or altered, but also angle information, which is a registrant's knowledge information. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a security system, and more particularly, to a biometric information authentication system and a biometric information authentication method for inputting biometric information of a person to be authenticated and determining whether or not it matches biometric information registered in advance. Is.

  Conventionally, when entering or leaving a security area or when entering or leaving money at a bank ATM, the individual's biometric information is entered to determine whether it matches the registered biometric information. There is known a biometric authentication system that permits access to only those that have been identified and authenticated.

As such a biometric information authentication system, for example, a user's biometric information recorded in a door management device in advance and biometric information input at the time of entering or leaving the room are checked to prevent unauthorized entry into the management area. It is well known that a user's biometric information is stored in a server and the biometric information input in a client is collated by the server to prevent unauthorized access to the computer system.
JP 09-198501 A Japanese Patent Laid-Open No. 10-124668

  However, in the conventional biometric information authentication system, for example, the biometric information itself is forged by copying a fingerprint or the stored biometric information of the user can be improperly impersonated. There is a problem that it ends up.

  The present invention has been made in order to solve the above-described problems, and the object of the present invention is higher than that of being able to prevent unauthorized access even when biometric information is forged or altered. It is to provide a biometric information authentication system and a biometric information authentication method to which security is imparted.

  In order to solve the above-described problems, the present invention provides a biometric information reading unit that reads biometric information of a person to be authenticated, a storage unit that stores a combination of biometric information and angle information of a registrant in advance, A biometric information authentication system comprising: a determination means for determining whether the person to be authenticated is the registrant from information and a combination of stored biometric information and angle information; is there.

  According to the present invention, the determination means determines whether the read biological information matches the stored biological information, and calculates angle information of the read biological information based on the stored biological information. Then, it is determined whether or not the calculated angle information matches the stored biometric information, and if both match, the person to be authenticated is authenticated as the registrant. This is a biometric authentication system.

  In addition, the present invention provides a biometric information reading unit that reads biometric information of a person to be authenticated, a storage unit that stores biometric information of a registrant with an angle in advance, stored biometric information, and read biometric information And a judging means for judging whether or not the person to be authenticated is a registrant from angle information inputted separately, and a biometric information authentication system.

  According to the present invention, the determination unit rotates the read biological information based on angle information separately input, and the rotated biological information matches the stored biological information with an angle. The biometric information authentication system is characterized in that it is determined that the person to be authenticated is the registrant.

  The present invention is the biometric information authentication system, wherein the biometric information is fingerprint information, finger vein, palm vein, and face information.

  Further, the present invention is the biometric information authentication system characterized in that the storage means stores a plurality of angle information corresponding to one piece of biometric information in order.

  The present invention is also the biometric information authentication system characterized in that at least the biometric information reading means is provided in a portable communication medium.

  Since the present invention is configured as described above, the following effects can be obtained.

  That is, according to the present invention, in the conventional biometric information authentication technology, only the determination of whether or not the biometric information matches is made by determining not only the biometric information but also the angle information. By authenticating with two types of information: information and knowledge information called angle information that the registrant knows, biometric information authentication technology can be given a higher level of security.

  Hereinafter, a biometric authentication system according to an embodiment of the present invention will be described with reference to the drawings. In the following embodiments, an example in which fingerprint information is used as biometric information is shown, but biometric information in the present invention is not limited to this, and veins, irises, faces, and other biometric information are used. Also good.

FIG. 1 is a diagram illustrating an example of a configuration of a biometric information authentication system according to the present invention.
The biometric information authentication system shown in FIG. 1 includes an authentication device and a server connected thereto, the biometric information reading unit is included in the authentication device, and the storage unit and the determination unit are included in the server. It should be noted that both or either of the storage means and the determination means may be included in the authentication apparatus itself, or there may be a configuration in which there is no server and only the authentication apparatus includes the biometric information reading means, the storage means, and the determination means. The biometric information authentication system according to the present invention is not limited to this embodiment.

  The biometric information reading means is means for reading the biometric information of the user. Specifically, when the biometric information is fingerprint information, it is a fingerprint authentication sensor, and the biometric information is face information. In this case, a sensor corresponding to each biological information used for authentication, such as a CCD camera.

  The storage means is means for storing in advance biometric information registered by a user who uses this biometric information authentication system and corresponding angle information. In addition, the angle information may be registered in a plurality of orders with respect to one piece of biometric information. For example, in the case of fingerprint authentication, the order may be determined by changing not only one finger but also the kind of finger. You may register more than one. By doing so, security can be further improved.

  The determination means determines whether or not the person to be authenticated is the registrant from the read biological information and the combination of the stored biological information and angle information. As a determination method, first, it is determined whether or not the stored biometric information matches the biometric information read from the person to be authenticated. The angle information is calculated from the stored biometric information, it is determined whether the calculated angle information matches the stored angle information, and the person to be authenticated is registered if the angle information matches. The method of authenticating as being. Moreover, you may perform determination of biometric information and angle information simultaneously.

  It should be noted that a plurality of angle information is ordered and registered with respect to one piece of biometric information, and the biometric information is input a plurality of times at the time of authentication, and only when all the angle information matches is determined to be a registrant. For example, security may be further improved.

  FIG. 2 is a diagram showing an appearance of an authentication device used in the biometric information authentication system shown in FIG. The authentication device has a sensor having biometric information reading means.

  In the case of a fingerprint sensor, there are a line type that sequentially acquires fingerprints while performing a line scan and an area type that acquires the entire fingerprint at once. Among them, a thermal type, a capacitance type, a pressure-sensitive type, etc. Various methods can be adopted and are not particularly limited. Further, in order to make it easier for the user to understand the angle when inputting fingerprint information, a scale indicating the angle may be provided. Alternatively, a rotation mechanism may be provided in the sensor so that the sensor itself can be rotated. The sensor may be rotated manually. For example, when the user inputs angle information using a separately provided touch panel display or a numeric keypad (not shown), the sensor may be automatically rotated. good.

  The authentication device may have a separate display. When the user authenticates the user using the biometric information authentication system of the present invention, the display displays the authentication result and the like according to the installation purpose of each biometric information authentication system. For example, in the case of a system for authenticating visitors, if the user is judged to be an officially registered visitor, a notification that permission to enter will be granted, otherwise that entry will not be permitted. Make a notification. The notification of the authentication result to the user may be performed by separately providing functions such as voice, opening / closing of a gate, lighting of a lamp, etc. without using a display.

  In addition, the authentication device may be provided with a sensing function that turns on the power when a person approaches. Also good. Further, when the biometric information cannot be read normally, the user may be requested to input biometric information again.

  Next, the operation of the biometric authentication system according to the present invention will be described in detail with reference to FIG.

  The user of the biometric information authentication system registers fingerprint information and corresponding angle information in advance. Registration can be done by storing the finger straight and storing the angle information separately as a numerical value, or by first registering with the finger straight and entering the angle again and entering the angle information from there. The calculated value may be stored.

  At the time of authentication, the user inputs fingerprint information at an angle. When the user touches the sensor, the fingerprint information is read. Then, the read fingerprint information is transmitted from the authentication device to the server via the network. Here, an assist function may be provided so that fingerprint information can be read accurately. The assist function refers to, for example, when the position where the finger is placed is slightly shifted, when it is pointed out to the user, or when the finger is extremely wet or dry. This is a function that prompts the user to properly read the fingerprint information.

  The determination unit of the server first rotates the inputted fingerprint information as appropriate, and collates with the fingerprint information registered in the storage unit of the server. Alternatively, collation may be performed by rotating registered fingerprint information. If the fingerprint information matches, the angle information when the fingerprint information matches is calculated, and if the calculated angle information matches the angle information corresponding to the registered fingerprint information, the server selects the user. It is determined that the user is a valid registrant, and the determination result is transmitted to the authentication device. On the other hand, if the fingerprint information and / or its angle does not match the registered information, the server determines that the user is not a valid registrant and sends the determination result to the authentication device. Send. When the authentication device receives the determination result from the server, the authentication device performs a certain operation determined according to the authentication purpose of the authentication device.

  In addition, when a plurality of angle information is registered in order for one piece of biological information, it is determined that the biological information and the angle information coincide with each other when the first piece of biological information is input. On the other hand, it is required to set the operation so that biometric information is requested to be input at the second angle, and the user is determined as a valid registrant when it is determined that all the angle information matches the order.

  Or, if an error occurs in the first input of biometric information, when the user inputs key information such as a registered password using the touch panel or numeric keypad, the second biometric information is entered. If the second biometric information and the angle information match, the operation may be set so that the user is determined as a valid registrant. At this time, changing the type of finger, for example, using the index finger for the first time and the middle finger for the second time is convenient when the authentication rate of a specific finger is poor.

  As a method for determining whether or not the fingerprint information matches, there are known methods such as a pattern matching method and a minutia method, and any method may be used in the present invention. In addition, the threshold value for determining how much they match each other may be set as appropriate in consideration of the high level of security for the purpose for which the authentication system is provided.

  As a specific means of calculating the angle of the input fingerprint information from the registered fingerprint information, in the case of the pattern matching method, at the time of registration, the fingerprint information is input with the finger straight, and the angle information is separately registered. When authenticating, rotate the image of one of the fingerprint information while searching for a location where the entered fingerprint information matches the registered fingerprint information. Find the angle.

  In the case of the minutiae system, since the feature points of the fingerprint are stored, when registering, the finger is read straight and the angle is registered separately. There is a method of calculating by comparing the angle of the line connecting the points with that of the inputted fingerprint information. The method shown here is an example of an authentication method, and it is possible to calculate the angle information of the input fingerprint information by comparing the input fingerprint information with the registered fingerprint information. If there is, it is not limited to the method described above. Further, the threshold value that the angle information is considered to match may be set as appropriate depending on the level of security required for the authentication apparatus.

  Here, when there are a plurality of users such as an authentication apparatus installed at the entrance of an apartment, etc., it is necessary to perform 1: n authentication. In this case, a plurality of users' biometric information and corresponding angle information are stored in the database, and the input biometric information and angle information are authenticated as a plurality of stored information. If there is one that is determined to match, it is determined that the user is a valid registrant. The authentication may be performed all at the same time or at an arbitrary number at the same time, or one at a time. However, considering the processing speed, time, etc., the number of pieces of information that can be registered may be limited.

  Further, instead of storing the angle information and the biological information as corresponding individual information, the biological information with an angle may be stored. In this case, when inputting biometric information at the time of authentication, it is input in a straight state, angle information is input separately using a touch panel, a numeric keypad, etc., and the input biometric information in a straight state is input to the input angle information. It is only necessary to rotate the biometric information based on the information and collate the rotated biometric information with the stored biometric information with an angle.

FIG. 4 is a diagram showing another example of the configuration of the biometric information authentication system of the present invention.
The biometric information authentication system shown in FIG. 4 includes a portable communication medium and a reader / writer that can communicate with the portable communication medium. The fingerprint information reading means and the storage means are the portable communication medium, and the determination means is the reader / writer. Is provided. The reader / writer may be connected to a server via a network.

  By incorporating a portable communication medium into the system as in this embodiment, there is no need to perform the 1: n authentication as described above. Although limited and the accuracy of authentication is reduced, by allowing each registrant to have a portable communication medium, it is possible to always perform accurate authentication quickly with 1: 1 authentication.

  In FIG. 4, a non-contact IC card is taken as an example of the portable communication medium. However, the portable communication medium in the present invention is a portable computer equipped with a non-contact IC card and tag, a contact IC card and tag, and a SIM card. A terminal is also included, and the present invention is not limited to this.

  The non-contact IC card includes a communication unit that performs non-contact communication with a reader / writer, a sensor for reading fingerprint information, and an IC chip. Further, in order to make the angle easy to understand when the user inputs fingerprint information, a scale indicating the angle may be provided as appropriate. In the case of fingerprint authentication, there are line types that sequentially acquire fingerprints while performing line scans, and area types that acquire entire fingerprints at once. Among them, there are various methods such as thermal type, electrostatic capacity type, and pressure type. It can be employed and is not particularly limited. Note that a rotation mechanism may be provided in the sensor so that the sensor itself can be rotated. Alternatively, the reader / writer may be provided with a scale indicating the angle, and the user may be prompted to place the non-contact IC card at the corresponding angle according to the scale, or the non-contact IC card may be inserted and rotated. It is also possible to provide a mechanism that can

  FIG. 5 is a block diagram showing a hardware configuration of the non-contact IC card shown in FIG. The IC chip is composed of a ROM, a RAM, and an EEPROM for each CPU. Here, the EEPROM is a non-volatile rewritable memory that stores fingerprint information of the owner of the contactless IC card and its angle. In addition, information for identifying the owner, for example, personal information such as the owner ID and the owner name may be stored. The ROM is a memory in which a program that defines the operation of the non-contact IC card is stored. Note that a program for defining the operation of the non-contact IC card may be stored in the EEOROM. The RAM is a working memory that temporarily stores data. The CPU controls the operation of the non-contact IC card using the RAM based on the program stored in the ROM or the EEPROM. Here, the CPU mainly registers biometric information and its angle information and communicates with the reader / writer. .

  In FIG. 5, Vcc represents a power source, GND represents a ground, RST represents a reset, and I / O represents a communication (input / output) terminal. Further, a coprocessor (not shown) for assisting the operation of the CPU may be incorporated, and in this case, a high-level authentication operation using data encryption, decryption, compression, decompression, or the like becomes possible.

  Next, the operation of the biometric authentication system according to the present invention will be described in detail with reference to FIG.

  A user of the biometric authentication system registers fingerprint information and an angle corresponding to the fingerprint information in advance on the non-contact IC card, and holds the non-contact IC card over the reader / writer. When the reader / writer and the non-contact IC card enter the communication range, the reader / writer and the non-contact IC card are in a communication state, and the reader / writer requests to provide fingerprint information and its angle information stored in the non-contact IC card. To do. The reader / writer requests the user to input fingerprint information. This request may be made by providing a separate display on the reader / writer and displaying characters or pictures on it, or by voice. Here, the operation in which the reader / writer requests the fingerprint information and its angle to the non-contact IC card and the operation to request the user to input the fingerprint information are performed at the same time even if they are performed in reverse. It may be broken.

  When receiving the provision request from the reader / writer, the non-contact IC card transmits the fingerprint information stored in the storage unit and the angle information thereof to the reader / writer.

  When the user inputs fingerprint information to the sensor, the input fingerprint information is transmitted to the reader / writer. Here, the authentication apparatus may have a function of requesting the user to input the fingerprint information again when the fingerprint cannot be read normally. The determination unit of the reader / writer compares the input fingerprint information with the fingerprint information registered in the IC card, calculates angle information when they match, and registers the calculated angle information. If the angle information matches, it is determined that the user is a valid owner of the non-contact IC card. When both or one of the fingerprint information and the angle do not match, it is determined that the user is not a valid owner of the non-contact IC card.

  Then, the reader / writer may be set to perform an appropriate operation in accordance with the determination result and the authentication purpose of the biometric information authentication system. Here, for example, if the contactless IC card is an ID card or the like for restricting visitors, if the user is judged to be a legitimate owner, the user should be notified to allow entry. If not, otherwise, the user may be notified that entry is refused, or the user may be requested to input fingerprint information again. In addition, when the contactless IC card is a bank ATM cash card or the like, if the user is determined to be a legitimate owner, it may be notified that the transaction is possible. If not, the user may be notified that the transaction is impossible, or the user may be requested to input the fingerprint information again.

  Here, an assist function may be provided so that fingerprint information can be read accurately. The assist function refers to, for example, when the position where the finger is placed is slightly shifted, when it is pointed out to the user, or when the finger is extremely wet or dry. This is a function that prompts the user to properly read the fingerprint information.

  The fingerprint information and its angle collation method are performed in the same manner as in the case of the biometric information authentication system shown in FIG.

  4 to 6, the fingerprint information reading means and the storage means are provided in the portable communication medium, and the determination means is provided in the reader / writer. However, the storage means and the determination means are portable. It may be provided in either the type communication medium or the reader / writer, or may be provided in a server connected to the reader / writer via a network. The fingerprint information reading means may also be provided in the reader / writer, but it is considered preferable for a user who cares about hygiene to provide it in a personal non-contact IC card.

  When the storage means is provided in a reader / writer or a server connected to the reader / writer via a network, unique information registered in the non-contact IC card that can specify the owner, for example, an owner ID And the biometric information and the angle information are stored in association with each other, and the reader / writer reads the unique information from the non-contact IC card in the authentication process, and registers it from the reader / writer or the storage unit of the server based on this information. What is necessary is just to read biological information and angle information.

  In addition, an embodiment in which the biological information reading unit, the storage unit, and the determination unit are all provided in the portable communication medium is also possible. In this case, when it is determined that the user is a valid owner, An operation setting may be made such that the portable communication medium can be used, that is, enabled, otherwise, the portable communication medium cannot be used.

It is a figure which shows an example of the biometric information authentication system structure in this invention. It is a figure which shows the external appearance of the authentication apparatus shown in FIG. It is a figure explaining operation | movement of the biometric information authentication system shown in FIG. It is a figure which shows another example of the biometric information authentication system structure in this invention. It is a block diagram which shows the hardware constitutions of the non-contact IC card shown in FIG. It is a figure explaining operation | movement of the biometric information authentication system shown in FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Authentication apparatus 2 ... Sensor 3 ... Scale 4 ... Display

Claims (7)

Biometric information reading means for reading the biometric information of the person to be authenticated;
Storage means for storing a combination of biometric information and angle information of the registrant in advance;
Determining means for determining whether or not the person to be authenticated is the registrant based on whether or not the read biometric information matches the stored biometric information using the angle information;
A biometric information authentication system comprising:   The determination means determines whether the read biometric information matches the stored biometric information, calculates angle information of a position where the stored biometric information matches the read biometric information, It is determined whether or not the calculated angle information matches the stored biometric information, and if both match, the person to be authenticated is authenticated as the registrant. The biometric information authentication system according to 1. Biometric information reading means for reading the biometric information of the person to be authenticated;
An input means for the person to be authenticated to input angle information;
Storage means for storing the biometric information of the registrant in advance;
A determination means for determining whether or not the person to be authenticated is a registrant based on whether or not the stored biological information matches the read biological information using the input angle information;
A biometric information authentication system comprising:   The determination means rotates the read biometric information based on the separately input angle information, and when the rotated biometric information matches the stored biometric information, the person to be authenticated The biometric information authentication system according to claim 3, wherein the biometric information authentication system is determined to be a registered person.   The biometric information authentication system according to any one of claims 1 to 4, wherein the biometric information is fingerprint information, finger veins, palm veins, and face information.   6. The biometric information authentication system according to claim 1, wherein the storage unit stores a plurality of angle information corresponding to one piece of biometric information in order.   The biometric information authentication system according to claim 1, wherein at least the biometric information reading unit is provided in a portable communication medium.

Images