JP2010250475A - Biometric device and biometric system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a biometric device with convenience and security. <P>SOLUTION: (1) A fingerprint sensor 111 reads the fingerprint data of a user, and a fingerprint authentication device 200 collates read fingerprint data 101 with registration data. When the collation rate (matching rate) of the read fingerprint data 101 with the registration data is equal to or more than an authentication threshold, the fingerprint authentication device 200 authenticates that the user is a legal user. (2) When the collation rate is less than an authentication threshold, the fingerprint authentication device 200 determines the number of digits "N" of a password whose input has been requested according to the collation rate. The number of digits "N" whose input has been requested becomes smaller according as the collation rate is closer to the authentication threshold. A user inputs leading N digits of the password to a touch panel 112, and the fingerprint authentication device 200 compares an input password 102 with the leading N digits of the registration password. (3) When the password of N digits is matched, the fingerprint authentication device 200 authenticates that the user is a legal user. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a biometric authentication device and a biometric authentication system used for, for example, management of entrance / exit.

  In the conventional fingerprint collation device, the read fingerprint data is analyzed, the features of the fingerprint are extracted, and feature point data is created. A matching rate (matching rate) between the feature point data and the pre-registered fingerprint data is calculated, and if the data matching rate is larger than a predetermined threshold, the person is determined. That is, it is determined that the read fingerprint data matches the fingerprint data registered in advance.

If the fingerprint to be verified is in a poor state, a personal identification number is input, and the input personal identification number is compared with a personal identification number registered in advance.
Then, an action such as display of the determination result is executed.

Patent Document 1 discloses a fingerprint collation apparatus provided with the following means.
Feature point extraction means for extracting feature points of a fingerprint detected as an image. Collating means for collating the feature point of the fingerprint extracted by the feature point extracting means with the feature point of the registered fingerprint searched by the personal identification number, and outputting an identification determination when the two match. Feature point counting means for counting feature points from the output of the feature point extracting means when the registered fingerprint retrieved by the password is an invalid fingerprint. Comparison means for outputting an abnormality in the number of feature points when the feature point value deviates from a predetermined range value set in advance.
The fingerprint collation device issues an approval output via either the identification determination output by the collation determination means or the forced identification determination output by the feature point abnormality determination.
In other words, the fingerprint collation device determines whether or not the person is the person based on the combination of the personal identification number and the fingerprint state.

JP-A-9-147104 (FIG. 1, paragraph [0037])

  The conventional fingerprint collation device has a case in which fingerprint collation is performed using a personal identification number, so that there is a problem that security is lowered.

  An object of the present invention is to make a biometric authentication device have both convenience and security, for example.

The biometric authentication device of the present invention is
A registrant information storage unit that stores biometric information of a registrant as registered biometric information and stores a character string that identifies the registrant as a registered character string;
A biometric information input unit that inputs biometric information of the user as input biometric information from the input device;
A verification rate calculation unit that calculates a matching rate between the input biometric information input to the biometric information input unit and the registered biometric information stored in the registrant information storage unit using a CPU (Central Processing Unit) as a verification rate; ,
Based on the collation rate calculated by the collation rate calculation unit, the character string to be compared with the character string for identifying the user among the character strings included in the registered character string stored in the registrant information storage unit A comparison character number determination unit that determines the number of characters as a comparison character number using a CPU;
An identification character string input unit that inputs a character string that is a character string that identifies the user and includes a character having a comparison character number determined by the comparison character number determination unit from an input device;
An identification character string determination unit that determines, using a CPU, whether the input character string input to the identification character string input unit matches the character string included in the registered character string stored in the registrant information storage unit; ,
A user authentication unit that authenticates that the user is the registrant when the identification character string determination unit determines that the input character string matches a character string included in the registered character string; .

  According to the present invention, for example, the biometric authentication device responds to the convenience that the user has to input the identification character string by the number of characters corresponding to the biometric information collation rate, and the biometric information collation rate and the collation rate. It is possible to combine security with authenticating a user based on an identification character string of the number of characters.

1 is a schematic diagram of a fingerprint authentication system 100 according to Embodiment 1. FIG. FIG. 3 is a functional configuration diagram of fingerprint authentication apparatus 200 in the first embodiment. The figure which shows the registrant management table 291 and the code number digit number threshold value table 292 in Embodiment 1. FIG. 5 is a flowchart showing a fingerprint authentication method of fingerprint authentication apparatus 200 in the first embodiment. 6 is an operation flow of the fingerprint authentication system 100 according to the first embodiment. FIG. 4 is a functional configuration diagram of fingerprint authentication apparatus 200 in a second embodiment. The figure which shows the registrant management table 291B and password number digit number threshold value table 292B in Embodiment 2. FIG. 9 is a flowchart showing a fingerprint authentication method in Embodiment 2. The operation | movement flow of the fingerprint authentication system 100 in Embodiment 2. FIG. The figure which shows the registrant management table 291B and password number digit number threshold value table 292B in Embodiment 3. 10 is a flowchart illustrating a fingerprint authentication method according to Embodiment 3.

Embodiment 1 FIG.
A biometric authentication system that authenticates a user based on biometric information (for example, fingerprint data) and an identification character string (for example, a password) will be described.

FIG. 1 is a schematic diagram of a fingerprint authentication system 100 according to the first embodiment.
A fingerprint authentication system 100 (an example of a biometric authentication system) according to Embodiment 1 will be described below with reference to FIG.

The fingerprint authentication system 100 includes a fingerprint authentication terminal 110 including a fingerprint sensor 111 (an example of a biometric reading device) and a touch panel display (hereinafter referred to as “touch panel 112”) (an example of a character string input device). And a fingerprint authentication device 200 (an example of a biometric authentication device) that authenticates the user based on the fingerprint data and the password entered on the touch panel 112.
Hereinafter, the fingerprint data read by the fingerprint sensor 111 is referred to as “read fingerprint data 101”, and the password entered on the touch panel 112 is referred to as “input password 102”.

(1) The user places his / her finger on the fingerprint sensor 111 for authentication, the fingerprint sensor 111 reads fingerprint data from the user's finger, and the fingerprint authentication device 200 compares the read fingerprint data 101 with the registered data. When the collation rate (match rate) between the read fingerprint data 101 and the registered data is high (collation OK), the fingerprint authentication device 200 authenticates that the user is a valid user.

(2) When the collation rate between the read fingerprint data 101 and the registered data is low (collation NG), the fingerprint authentication device 200 designates the input number of digits “N” for the code number based on the collation rate, and the user The number “N” digits are input from the touch panel 112, and the fingerprint authentication apparatus 200 collates the input code number 102 with the registered number.

(3) When the input code number 102 is included in the registration number (verification OK), the fingerprint authentication apparatus 200 authenticates that the user is a valid user.

FIG. 2 is a functional configuration diagram of fingerprint authentication apparatus 200 in the first embodiment.
A functional configuration of fingerprint authentication apparatus 200 according to Embodiment 1 will be described below with reference to FIG.

  The fingerprint authentication apparatus 200 includes a fingerprint data input unit 210 (an example of a biometric information input unit), a feature information extraction unit 220, a fingerprint collation / determination unit 230, a PIN number input unit 240 (an example of an identification character string input unit), a user An authentication unit 250 and an authentication device storage unit 290 (an example of a registrant information storage unit) are provided.

The authentication device storage unit 290 is a storage device that stores data used in the fingerprint authentication device 200.
The registrant management table 291 and the password number digit number threshold table 292 are examples of data stored in the authentication device storage unit 290.

FIG. 3 is a diagram showing a registrant management table 291 and a password number digit number threshold table 292 according to the first embodiment.
The registrant management table 291 and password number digit number threshold table 292 in Embodiment 1 will be described below with reference to FIG.

  The registrant management table 291 and the password number digit number threshold table 292 are stored in the authentication device storage unit 290 in advance.

The registrant management table 291 shows the “user ID”, “feature information”, and “password” of the registrant (authorized user). “User ID”, “characteristic information”, and “password” are information for identifying the same registrant.
In the “feature information”, an address of a storage area in which feature information extracted from the registrant's fingerprint data is stored is set. The feature information is information indicating the feature of the fingerprint.
In the “password”, an 8-digit password that identifies the registrant is set.

Hereinafter, the information set in the “feature information” in the registrant management table 291 is referred to as “registered feature information 291a”, and the number set in the “password” in the registrant management table 291 is referred to as “registered password 291b”. .
Hereinafter, description will be made assuming that the registered feature information 291a indicates the feature information itself.

The code number digit number threshold table 292 indicates “code number digit number” corresponding to “collation rate”.
A predetermined collation rate is set in the “collation rate”. The collation rate means the coincidence rate between the feature information extracted from the fingerprint data read by the user and the registered feature information 291a.
In the “number of digits of the code number”, the number of digits of the code number to be input by the user is set. The number of digits of the code number is small when the collation rate is high and large when the collation rate is low.

In the password number digit number threshold table 292 of FIG. 3, when the collation rate is “71% or more and 80% or less”, the user is required to input a four-digit password, and when the collation rate is “61% or more and 70% or less” Indicates that the user is required to input the password with all digits (8 digits). Values after the decimal point shall be rounded down or rounded up.
The password number threshold table 292 authenticates the user as a registrant when the collation rate is “81% or higher”, and identifies the user as a registrant when the collation rate is “60% or lower”. It indicates that there is no authentication.

The authentication device storage unit 290 stores a fingerprint collation threshold value “81%” in advance as a collation rate threshold value for authenticating that the user is a registrant.
In addition, it is assumed that the fingerprint verification lower limit “60%” is recorded in the authentication device storage unit 290 in advance as a threshold for a verification rate for not authenticating that the user is a registrant.

  Returning to FIG. 2, the functional configuration of the fingerprint authentication device 200 will be described.

  The fingerprint data input unit 210 inputs user fingerprint data from the fingerprint authentication terminal 110 (an example of an input device) as read fingerprint data 101 (an example of input biometric information).

  The feature information extraction unit 220 extracts feature information (an example of biometric information) indicating the features of the user's fingerprint from the read fingerprint data 101 as extracted feature information 201.

  The fingerprint verification / determination unit 230 includes a fingerprint verification unit 231 (an example of a verification rate calculation unit), a fingerprint verification result determination unit 232, a password number digit number determination unit 233 (comparison character number determination unit), and a password number determination unit 234 (identification characters). An example of a column determination unit).

  The fingerprint matching unit 231 uses a CPU (Central Processing Unit) with a matching rate (an example of the amount of matching) between the extracted feature information 201 (an example of input biometric information) and registered feature information 291a (an example of registered biometric information) as a matching rate 202. Calculate using.

The fingerprint collation result determination unit 232 compares the collation rate 202 calculated by the fingerprint collation unit 231 with the fingerprint collation threshold value and the fingerprint collation lower limit value.
When the collation rate 202 is equal to or higher than the fingerprint collation threshold, the fingerprint collation result determination unit 232 outputs the fingerprint collation result 204 indicating “collation OK” to the user authentication unit 250.
When the collation rate 202 is equal to or lower than the fingerprint collation lower limit value, the fingerprint collation result determination unit 232 outputs the fingerprint collation result 204 indicating “collation NG” to the user authentication unit 250.

When the collation rate 202 is less than the predetermined value, the personal identification number digit number determination unit 233 determines the user's personal identification number from the character string included in the registered personal identification number 291b (an example of the registered character string) based on the collation rate 202. The number of digits to be compared is determined using the CPU as the input request digit number “N” (an example of the number of comparison characters).
The personal identification number digit number determination unit 233 causes the fingerprint authentication terminal 110 to display guidance (messages such as characters, images, and voices) that prompts the user to input an N-digit number included in the personal identification number.

  The personal identification number input unit 240 inputs an N-digit number included in the user personal identification number from the fingerprint authentication terminal 110 as the input personal identification number 102 (an example of an input character string).

  The personal identification number determination unit 234 matches the input personal identification number 102 (an example of the input character string) input to the personal identification number input unit 240 with the N-digit number included in the registered personal identification number 291b (an example of the registered character string). Or using the CPU, and outputs the determination result to the fingerprint collation result determination unit 232 as the personal identification number determination result 203.

When the password verification result 203 indicates that the input password 102 matches the N-digit number included in the registered password 291b, the fingerprint verification result determination unit 232 uses the fingerprint verification result 204 indicating “verification OK” to the user. The data is output to the authentication unit 250.
When the password verification result 203 indicates that the input password 102 does not match the N-digit number included in the registered password 291b, the fingerprint verification result determination unit 232 uses the fingerprint verification result 204 indicating “verification NG”. The data is output to the authentication unit 250.

When the fingerprint verification result 204 output by the fingerprint verification result determination unit 232 indicates “verification OK”, the user authentication unit 250 authenticates that the user is a registrant as follows.
For example, the user authentication unit 250 outputs the authentication result 209 to the fingerprint authentication terminal 110 and displays the authentication result 209 on the touch panel 112.
For example, the user authentication unit 250 performs a predetermined process (for example, unlocking a door locked with an electric lock).

  The fingerprint authentication device 200 includes a CPU (also referred to as a microprocessor or a microcomputer) and a storage device (for example, ROM and RAM) (not shown).

  The storage device stores an OS (operating system), a program group, and a file group.

  The program group includes a program that executes a function described as “unit” in the embodiment. The program is read and executed by the CPU. That is, the program causes the computer to function as “to part” and causes the computer to execute the procedure and method of “to part”.

  The file group includes various data (input, output, determination result, calculation result, processing result, etc.) used in “˜unit” described in the embodiment.

  In the embodiment, arrows included in the configuration diagrams and flowcharts mainly indicate input and output of data and signals.

  In the embodiment, what is described as “to part” may be “to circuit”, “to device”, “to device”, or “to step”, “to procedure”, and “to processing”. That is, what is described as “to part” may be implemented by any of firmware, software, hardware, or a combination thereof.

FIG. 4 is a flowchart showing the fingerprint authentication method of fingerprint authentication apparatus 200 in the first embodiment.
A fingerprint authentication method of fingerprint authentication apparatus 200 in the first embodiment will be described below with reference to FIG.

  Each “˜unit” of the fingerprint authentication device 200 executes processing described below using a CPU.

  First, an outline of the fingerprint authentication method will be described.

The fingerprint data input unit 210 inputs the read fingerprint data 101 (S110), the feature information extraction unit 220 extracts feature information from the read fingerprint data 101 (S120), and the fingerprint collation unit 231 registers the extracted feature information 201 as registered feature information. It collates with 291a (S130).
When the collation result of the extracted feature information 201 is “OK” (S131), the user authentication unit 250 authenticates that the user is a registrant (S162).
When the collation result of the extracted feature information 201 is “NG” (S131), the user authentication unit 250 does not authenticate that the user is a registrant (S163).
When the collation result of the extracted feature information 201 is neither “OK” nor “collation NG” (S131 “hold”), the collation rate 202 determines the input number of digits “N” for the password based on the collation rate 202 ( S140).
The personal identification number input unit 240 inputs the personal identification number (N digits) (S150), and the personal identification number determination unit 234 compares the input personal identification number 102 with the registered personal identification number 291b (N digits) (S160).
When the comparison result of the input personal identification number 102 is “match” (S161), the user authentication unit 250 authenticates that the user is a registrant (S162).
When the comparison result of the input personal identification number 102 is “mismatch” (S161), the user authentication unit 250 does not authenticate that the user is a registrant (S163).

  Next, details of the fingerprint authentication method will be described.

<S110>
A user who wants to receive authentication places his finger on the fingerprint sensor 111 of the fingerprint authentication terminal 110.
The fingerprint sensor 111 of the fingerprint authentication terminal 110 captures an image of the user's finger and outputs image data obtained by the image capture to the fingerprint authentication apparatus 200 as read fingerprint data 101.
The fingerprint data input unit 210 inputs the read fingerprint data 101 output from the fingerprint authentication terminal 110 and inputs the input read fingerprint data 101 to the feature information extraction unit 220.
After S110, the process proceeds to S120.

<S120>
The feature information extraction unit 220 performs image processing on the read fingerprint data 101 and extracts feature information indicating the features of the user's fingerprint as the extracted feature information 201. The feature information extraction unit 220 extracts the extracted feature information 201 from the read fingerprint data 101 using a conventional method for extracting feature information from fingerprint data.
The feature information extraction unit 220 inputs the extracted feature information 201 to the fingerprint collation unit 231.
After S120, the process proceeds to S130.

<S130>
The fingerprint collation unit 231 collates (compares) the extracted feature information 201 with each registered feature information 291a in order, and calculates a collation rate (match rate) between the extracted feature information 201 and each registered feature information 291a. However, when the collation rate is a value equal to or higher than a predetermined fingerprint collation threshold (for example, 80%), the fingerprint collation unit 231 stops collation even if the registered feature information 291a that does not collate with the extracted feature information 201 remains. It doesn't matter.

The fingerprint collation unit 231 inputs the collation rate indicating the largest value among the calculated collation rates and the user ID corresponding to the collation rate to the fingerprint collation result determination unit 232.
Hereinafter, the collation rate input from the fingerprint collation unit 231 to the fingerprint collation result determination unit 232 is referred to as “collation rate 202”, and the user ID corresponding to the collation rate 202 is referred to as “target user ID”.
The user ID (target user ID) corresponding to the collation rate 202 is the user ID corresponding to the registered feature information 291a collated with the extracted feature information 201 when the collation rate 202 is calculated (set value in the registrant management table 291). That is.

  After S130, the process proceeds to S131.

<S131>
The fingerprint verification result determination unit 232 compares the verification rate 202 with a fingerprint verification threshold value.
When the collation rate 202 is less than the fingerprint collation threshold value, the fingerprint collation result determination unit 232 compares the collation rate 202 with the fingerprint collation lower limit value.
When the collation rate 202 is a value between the fingerprint collation threshold value and the fingerprint collation lower limit value, the fingerprint collation result determination unit 232 inputs the collation rate 202 and the target user ID to the personal identification number digit number determination unit 233.
If the verification rate 202 is greater than or equal to the fingerprint verification threshold (OK), the process proceeds to S162.
When the collation rate 202 is equal to or lower than the fingerprint collation lower limit value (NG), the process proceeds to S163.
When the collation rate 202 is a value between the fingerprint collation threshold value and the fingerprint collation lower limit value (pending), the process proceeds to S140.

<S140>
The code number digit number determination unit 233 determines the input request digit number “N” corresponding to the verification rate 202 based on the code number digit number threshold table 292.
For example, when the collation rate is “75%”, the code number digit number determination unit 233 refers to the code number digit number threshold value table 292 shown in FIG. 3 and determines “4 digits” as the input request digit number.
Further, for example, when the collation rate is “65%”, the personal identification number digit number determination unit 233 determines “8 digits” as the input request digit number.

  The personal identification number digit number determination unit 233 outputs a command for displaying a personal identification number input guidance requesting the user to input the first N digits of the personal identification number to the fingerprint authentication terminal 110, and the fingerprint authentication terminal 110 receives the personal identification number input guidance. Is displayed on the touch panel 112. The password input guidance is display information including a password input request digit number “N” and a button for inputting the password, and is stored in advance in the storage device of the fingerprint authentication terminal 110. The input request for the first N digits of the personal identification number may be output by voice.

The personal identification number digit number determination unit 233 inputs the input request digit number “N” and the target user ID to the personal identification number determination unit 234.
After S140, the process proceeds to S150.

<S150>
The user inputs the first N digits of the password from the touch panel 112 in accordance with the password input guidance displayed on the fingerprint authentication terminal 110.
The fingerprint authentication terminal 110 outputs the N-digit password entered from the touch panel 112 to the fingerprint authentication apparatus 200 as the input password 102.
The personal identification number input unit 240 of the fingerprint authentication device 200 inputs the input personal identification number 102 output from the fingerprint authentication terminal 110 and inputs the input personal identification number 102 to the personal identification number determination unit 234.
After S150, the process proceeds to S160.

  In S150, the personal identification number determination unit 234 activates a timer that sets a predetermined time as the input time of the personal identification number. If the input code number 102 is not input from the code number input unit 240 before the timer times out, the code number determination unit 234 inputs the code number determination result 203 indicating “mismatch” to the fingerprint verification result determination unit 232. Then, the process proceeds to S163. Illustration of this processing flow is omitted.

<S160>
The personal identification number determination unit 234 acquires the registered personal identification number 291 b corresponding to the target user ID from the registrant management table 291.
The personal identification number determination unit 234 compares the input personal identification number 102 with the first N digits of the registered personal identification number 291b. For example, when the input request digit number is four digits, the personal identification number determination unit 234 compares the input personal identification number 102 with the first four digits of the registered personal identification number 291b.
After S160, the process proceeds to S161.

<S161>
When the input code number 102 matches the first N digits of the registered code number 291 b, the code number determination unit 234 inputs the code number determination result 203 indicating “match” to the fingerprint verification result determination unit 232.
If the input code number 102 and the first N digits of the registered code number 291 b do not match, the code number determination unit 234 inputs the code number determination result 203 indicating “mismatch” to the fingerprint verification result determination unit 232.
If the input code number 102 matches the first N digits of the registered code number 291b, the process proceeds to S162.
If the input code number 102 does not match the first N digits of the registered code number 291b, the process proceeds to S163.

<S162>
When the collation rate 202 is equal to or higher than the fingerprint collation threshold (S131 “OK”), or when the personal identification number determination result 203 indicating “match” is input from the personal identification number determination unit 234 (S161 “ The fingerprint verification result 204 indicating “match”) and “verification OK” is input to the user authentication unit 250.
When the input fingerprint verification result 204 indicates “verification OK”, the user authentication unit 250 outputs an authentication result 209 “authentication OK” indicating that the user is authenticated as a registrant to the fingerprint authentication terminal 110. To do. The fingerprint authentication terminal 110 inputs the authentication result 209 output from the user authentication unit 250 and displays the authentication result 209 on the touch panel 112.
Further, the user authentication unit 250 performs a predetermined process (for example, unlocking a door locked with an electric lock).
By S162, the fingerprint authentication method ends.

<S163>
The fingerprint collation result determination unit 232 receives the code number determination result 203 indicating “non-match” from the code number determination unit 234 when the collation rate 202 is equal to or lower than the fingerprint collation lower limit (S131 “NG”) (S161). “No match”, time-out at S150), and the fingerprint verification result 204 indicating “verification NG” is input to the user authentication unit 250.
When the input fingerprint verification result 204 indicates “verification NG”, the user authentication unit 250 outputs an authentication result 209 “authentication NG” indicating that the user is not authenticated as a registrant to the fingerprint authentication terminal 110. To do. The fingerprint authentication terminal 110 inputs the authentication result 209 output from the user authentication unit 250 and displays the authentication result 209 on the input personal identification number 102.
By S163, the fingerprint authentication method ends.

FIG. 5 is an operation flow of fingerprint authentication system 100 in the first embodiment.
The operation of fingerprint authentication system 100 in the first embodiment will be described below with reference to FIG.

  The fingerprint sensor 111 of the fingerprint authentication terminal 110 reads the user's fingerprint (S210).

  When the collation rate between the read fingerprint information and the registered fingerprint information is “81% or more” (S220 “OK”), the user is authenticated as a valid user.

When the collation rate is “71% or more and 80% or less” (S230 “OK”), the user is prompted to input the first four digits of the password (S231).
If the input password (4 digits) matches the first 4 digits of the registered password (S232 “match”), the user is authenticated as a valid user (authentication OK).
If the input password (4 digits) does not match the first 4 digits of the registered password (S232 “NG”), the user is not authenticated as an authorized user (authentication NG).

When the collation rate is “61% or more and 70% or less” (S240 “OK”), the user is prompted to input a personal identification number (8 digits) (S241).
When the input password (8 digits) matches the registered password (8 digits) (S242 “match”), the user is authenticated as an authorized user (authentication OK).
If the entered password (8 digits) does not match the registered password (8 digits) (S242 “NG”), the user is not authenticated as a valid user (authentication NG).

  When the collation rate is “60% or less” (S240 “NG”), the user is not authenticated as a valid user (authentication NG).

  In the first embodiment, for example, the following fingerprint authentication system has been described.

The fingerprint authentication system is operated by inputting a personal identification number.
In the case of authentication NG with a fingerprint, by inputting a few digits (for example, 1234 of the first 4 digits) of a personal identification number (for example, 1234678) that satisfies a certain collation rate, the fingerprint + the first 4 digits of the password Verification of the number (1234) is realized. Thereby, the operativity at the time of collation can be improved. Convenience and security can be achieved by changing the number of digits according to the verification rate.
In other words, when the person's fingerprint is collated, it is as close as possible to the person, but when the collation rate is less than the threshold, the person is additionally verified with a several-digit password, and the person is determined. The operability can be improved by making the number of digits of the password entered for each verification rate variable.

In the first embodiment, “fingerprint” is an example of a living body that identifies a user, and “fingerprint” may be replaced with another living body such as “finger vein” or “iris”.
The “password” is an example of identification information for identifying a user, and the “password” may be replaced with other identification information such as “password” or “ID”.

In the first embodiment, the code number digit number determination unit 233 displays the guidance for inputting the first N digits of the code number on the fingerprint authentication terminal 110, but the guidance for inputting the last N digits of the code number is provided in the fingerprint authentication terminal. 110 may be displayed. In this case, the personal identification number determination unit 234 compares the input personal identification number 102 with the last N digits of the registered personal identification number 291b.
The password number digit number determination unit 233 may display guidance on the fingerprint authentication terminal 110 for inputting consecutive N-digit numbers (not limited to the first N digits or the last N digits) included in the password. In this case, the personal identification number determination unit 234 determines whether or not the input personal identification number 102 matches the consecutive N-digit number included in the registered personal identification number 291b.

Embodiment 2. FIG.
A description will be given of a mode in which the collation digit number of the personal identification number is determined based on the collation rate (matching ratio) of the fingerprint data and the number of input of the personal identification number.
Also, a mode for prompting the change of the password according to the number of times the password is input will be described.
Hereinafter, items different from the first embodiment will be mainly described. Matters whose description is omitted are the same as those in the first embodiment.

FIG. 6 is a functional configuration diagram of fingerprint authentication apparatus 200 in the second embodiment.
A functional configuration of fingerprint authentication apparatus 200 in the second embodiment will be described below with reference to FIG.

  The fingerprint authentication device 200 includes a personal identification number management unit 260 (an example of an identification character string input unit and a guidance output unit) instead of the personal identification number input unit 240 described in the first embodiment (see FIG. 2).

The personal identification number management unit 260 inputs the input personal identification number 102 from the fingerprint authentication terminal 110 and counts the number of times the input personal identification number 102 is input.
When the input number of the counted input password 102 reaches a predetermined value, the password management unit 260 outputs a guidance prompting the change of the registered password 291b using the fingerprint authentication terminal 110.

  The personal identification number digit number determination unit 233 determines the input request digit number “N” based on the verification rate 202 and the number of times the input personal identification number 102 is input.

FIG. 7 is a diagram showing a registrant management table 291B and a password number digit number threshold table 292B according to the second embodiment.
The authentication device storage unit 290 stores a registrant management table 291B and a password number digit number threshold table 292B as shown in FIG.

The registrant management table 291 </ b> B indicates “number of input of a personal identification number” in addition to the information described in the first embodiment (see FIG. 3).
The code number digit number threshold table 292B indicates “code number digit number” corresponding to “collation rate” and “number of code number input”. The number of digits of the personal identification number is small when the verification rate is high or the number of input of the personal identification number is small, and often when the verification rate is low or the number of input of the personal identification number is large.

  It is assumed that a change guidance threshold “100 times” is recorded in advance in the authentication device storage unit 290 as a threshold for the number of times a password is entered to urge the registered password 291 b to be changed.

FIG. 8 is a flowchart illustrating the fingerprint authentication method according to the second embodiment.
A fingerprint authentication method according to the second embodiment will be described below with reference to FIG.

  In the fingerprint authentication method according to the second embodiment, S141 is executed instead of S140 described in the first embodiment (see FIG. 4), and S151 to S153 are executed instead of S150.

<S110 to S130>
As in the first embodiment, the fingerprint data input unit 210 inputs the read fingerprint data 101 (S110), the feature information extraction unit 220 extracts feature information from the read fingerprint data 101 (S120), and the fingerprint collation unit 231 extracts it. The feature information 201 is collated with the registered feature information 291a (S130).
After S110 to S130, the process proceeds to S131.

<S131>
Similar to the first embodiment, fingerprint collation result determination unit 232 compares collation rate 202 with a fingerprint collation threshold value and a fingerprint collation lower limit value, and collation rate 202 is a value between the fingerprint collation threshold value and the fingerprint collation lower limit value. In this case, the collation rate 202 and the target user ID are input to the code number digit number determination unit 233.
If the verification rate 202 is greater than or equal to the fingerprint verification threshold (OK), the process proceeds to S162.
When the collation rate 202 is equal to or lower than the fingerprint collation lower limit value (NG), the process proceeds to S163.
When the collation rate 202 is a value between the fingerprint collation threshold value and the fingerprint collation lower limit value (pending), the process proceeds to S141.

<S141>
The personal identification number digit number determination unit 233 identifies the personal identification number input count corresponding to the target user ID based on the registrant management table 291B, and the verification rate 202 and the personal identification number input count based on the personal identification number digit threshold table 292B. The input request digit number “N” corresponding to is determined.

For example, when the target user ID is “A” and the verification rate is “75%”, the personal identification number digit number determination unit 233 refers to the registrant management table 291B and the personal identification number digit number threshold table 292B shown in FIG. , “15” is specified as the number of input of the personal identification number, and “4 digits” is determined as the input request digit number.
Also, for example, when the target user ID is “B” and the verification rate is “75%”, the password number digit number determining unit 233 specifies “65” as the number of times the password is input, and requests to input “8 digits”. Decide on the number of digits.
Also, for example, when the target user ID is “C” and the verification rate is “65%”, the password number digit number determination unit 233 specifies “45” as the number of times the password is input, and requests to input “8 digits”. Decide on the number of digits.

The password number digit number determination unit 233 causes the fingerprint authentication terminal 110 to display a password number input guidance requesting input of the first N digits of the password number, as in S140 of the first embodiment.
The personal identification number digit number determination unit 233 inputs the input request digit number “N” and the target user ID to the personal identification number determination unit 234, and inputs the target user ID to the personal identification number management unit 260.
After S141, the process proceeds to S151.

<S151>
The password management unit 260 inputs the input password 102 from the fingerprint authentication terminal 110, as in S150 of the first embodiment.
When the input code number 102 is input, the code number management unit 260 adds “1” to the number of input of the code number corresponding to the target user ID in the registrant management table 291B.
After S151, the process proceeds to S152.

  In S151, as in S150 of the first embodiment, the personal identification number determination unit 234 activates the timer, and if the input personal identification number 102 is not input before the time-out, the personal identification number determination result 203 indicating “mismatch” is printed as a fingerprint. The result is input to the verification result determination unit 232. Thereafter, the process proceeds to S163. Illustration of this processing flow is omitted.

<S152>
The personal identification number management unit 260 compares the number of times the personal identification number is input corresponding to the target user ID (set value in the registrant management table 291B) with a predetermined change guidance threshold value.
When the number of password input times is less than the change guidance threshold (YES), the password management unit 260 inputs the input password 102 to the password determination unit 234. The process proceeds to S160.
If the number of input of the personal identification number is equal to or greater than the change guidance threshold (NO), the process proceeds to S153.

<S153>
The password management unit 260 outputs a command for displaying a password re-registration guidance prompting the change of the registered password 291 b to the fingerprint authentication terminal 110, and the fingerprint authentication terminal 110 displays the password re-registration guidance on the touch panel 112. The personal identification number re-registration guidance may be output by voice.
After displaying the password re-registration guidance, the password management unit 260 inputs the input password 102 to the password determination unit 234.
After S153, the process proceeds to S160.

<S160 to S163>
As in the first embodiment, the personal identification number determination unit 234 compares the input personal identification number 102 with the first N digits of the registered personal identification number 291b (S160), and based on the comparison result, the personal identification number determination result 203 is compared with the fingerprint verification result determination unit. Input to 232 (S161).
As in the first embodiment, the fingerprint matching result determination unit 232 inputs the fingerprint matching result 204 to the user authentication unit 250, and the user authentication unit 250 displays the authentication result 209 on the fingerprint authentication terminal 110 (S162, S163). .
The fingerprint authentication method ends by S162 or S163.

FIG. 9 is an operation flow of the fingerprint authentication system 100 according to the second embodiment.
The operation of fingerprint authentication system 100 in the second embodiment will be described below with reference to FIG.

  The fingerprint sensor 111 of the fingerprint authentication terminal 110 reads the user's fingerprint (S210).

  When the collation rate between the read fingerprint information and the registered fingerprint information is “81% or more” (S220 “OK”), the user is authenticated as a valid user.

When the collation rate is “71% or more and 80% or less” (S230 “OK”) and the number of times the code number is input is “49 or less” (S233 “NG”), the user receives the first four digits of the code number. An input is prompted (S231), and the number of input of the password is counted up (S234).
If the input password (4 digits) matches the first 4 digits of the registered password (S232 “match”), the user is authenticated as a valid user (authentication OK).
If the input password (4 digits) does not match the first 4 digits of the registered password (S232 “NG”), the user is not authenticated as an authorized user (authentication NG).

  When the collation rate is “61% or more and 80% or less” (S230 “OK” or S240 “OK”) and the number of times the code number is input is “100 or more” (S243), the code number re-registration guidance is displayed. (S244).

When the collation rate is “71% or more and 80% or less” (S230 “OK”) and the code number is “50 or more” (S233), or the collation rate is “61% or more and 70% or less” If there is (S240 “OK”), the user is prompted to enter a password (8 digits) (S241), and the number of times the password is entered is counted up (S245).
When the input password (8 digits) matches the registered password (8 digits) (S242 “match”), the user is authenticated as an authorized user (authentication OK).
If the entered password (8 digits) does not match the registered password (8 digits) (S242 “NG”), the user is not authenticated as a valid user (authentication NG).

  When the collation rate is “60% or less” (S240 “NG”), the user is not authenticated as a valid user (authentication NG).

  In the second embodiment, the fingerprint authentication system has been described that counts the number of input of a personal identification number and issues a guidance that prompts the user to change the personal identification number at a certain number of times or more. Thereby, high security can be realized.

Embodiment 3 FIG.
A description will be given of a mode in which the collation digit number of the password is determined based on the fingerprint data collation rate (match rate) and the period that has passed since the password was registered.
Hereinafter, items different from the second embodiment will be mainly described. Matters whose description is omitted are the same as those in the second embodiment.

  The authentication device storage unit 290 stores a registrant management table 291C and a password number digit number threshold table 292C.

FIG. 10 is a diagram showing a registrant management table 291C and a password number digit number threshold table 292C according to the third embodiment.
The registrant management table 291C includes a “password registration date” indicating the date on which the current registered password 291b is registered, instead of the “number of password input times” in the second embodiment (see FIG. 7). . The "password registration date" is set when the registered password 291b is set for the first time, and is updated when the registered password 291b is updated.
The code number digit number threshold value table 292C indicates “code number digit number” corresponding to the “collation rate” and the “code number use period”.

  It is assumed that the change guidance threshold “60 days” is recorded in advance in the authentication device storage unit 290 as a threshold for the password usage period for urging the registered password 291b to be changed.

  Other configurations are the same as those of the second embodiment.

FIG. 11 is a flowchart illustrating the fingerprint authentication method according to the third embodiment.
A fingerprint authentication method according to Embodiment 3 will be described below with reference to FIG.

  In the fingerprint authentication method according to the third embodiment, S142 is executed instead of S141 described in the second embodiment (see FIG. 11), and S154 and S155 are executed instead of S151 and S152.

  Hereinafter, S142, S154, and S155 will be described, and descriptions of other processes will be omitted.

<S142>
The personal identification number digit number determination unit 233 calculates a period that has elapsed since the registration personal identification number 291b corresponding to the target user ID is set based on the registrant management table 291C as the personal identification number usage period.
The personal identification number digit number determination unit 233 determines the input request digit number “N” corresponding to the verification rate 202 and the personal identification number use period based on the personal identification number digit threshold table 292C.

For example, if the current date is “February 28, 2009”, the target user ID is “A”, and the verification rate is “75%”, the password number digit number determination unit 233 displays the registrant shown in FIG. Referring to the management table 291C, the period “28 days” from “February 1, 2009 to February 28, 2009” is calculated as the password usage period, and “4 digits” is determined as the number of input request digits.
Also, for example, if the current date is “March 15, 2009”, the target user ID is “A”, and the verification rate is “75%”, the PIN number digit number determination unit 233 sets “February 2009”. The period “43 days” from “1st to March 15, 2009” is calculated as the password use period, and “8 digits” is determined as the number of input request digits.

The password number digit number determination unit 233 causes the fingerprint authentication terminal 110 to display a password number input guidance requesting input of the first N digits of the password number, as in S140 of the first embodiment.
The code number digit number determination unit 233 inputs the input request digit number “N” and the target user ID to the code number determination unit 234 and inputs the code number use period to the code number management unit 260.
After S142, the process proceeds to S154.

<S154>
The password management unit 260 inputs the input password 102 from the fingerprint authentication terminal 110, as in S150 of the first embodiment.
After S154, the process proceeds to S155.

  In S154, as in S150 of the first embodiment, the personal identification number determination unit 234 activates the timer, and if the input personal identification number 102 is not input before the time-out, the personal identification number determination result 203 indicating “mismatch” is printed as a fingerprint. The result is input to the verification result determination unit 232. Then, the process proceeds to S163. Illustration of this processing flow is omitted.

<S155>
The personal identification number management unit 260 compares the personal identification number usage period input from the personal identification number digit number determination unit 233 with a predetermined change guidance threshold value.
When the password usage period is less than the change guidance threshold (YES), the password management unit 260 inputs the input password 102 into the password determination unit 234. The process proceeds to S160.
If the number of input of the personal identification number is equal to or greater than the change guidance threshold (NO), the process proceeds to S153.

  According to the third embodiment, it is possible to display the guidance for determining the number of input digits of the personal identification number and prompting the change of the personal identification number based on the current usage period of the personal identification number.

  DESCRIPTION OF SYMBOLS 100 Fingerprint authentication system, 101 Reading fingerprint data, 102 Input PIN, 110 Fingerprint authentication terminal, 111 Fingerprint sensor, 112 Touch panel, 200 Fingerprint authentication device, 201 Extraction feature information, 202 Verification rate, 203 PIN determination result, 204 Fingerprint verification Result, 209 Authentication result, 210 Fingerprint data input unit, 220 Feature information extraction unit, 230 Fingerprint verification / determination unit, 231 Fingerprint verification unit, 232 Fingerprint verification result determination unit, 233 PIN number digit determination unit, 234 PIN number determination unit , 240 personal identification number input unit, 250 user authentication unit, 260 personal identification number management unit, 290 authentication device storage unit, 291, 291B, 291C registrant management table, 291a registration characteristic information, 291b registration personal identification number, 292, 292B, 292C Security code digit threshold table.

Claims (7)

A registrant information storage unit that stores biometric information of a registrant as registered biometric information and stores a character string that identifies the registrant as a registered character string;
A biometric information input unit that inputs biometric information of the user as input biometric information from the input device;
A verification rate calculation unit that calculates a matching rate between the input biometric information input to the biometric information input unit and the registered biometric information stored in the registrant information storage unit using a CPU (Central Processing Unit) as a verification rate; ,
Based on the collation rate calculated by the collation rate calculation unit, the character string to be compared with the character string for identifying the user among the character strings included in the registered character string stored in the registrant information storage unit A comparison character number determination unit that determines the number of characters as a comparison character number using a CPU;
An identification character string input unit that inputs a character string that is a character string that identifies the user and includes a character having a comparison character number determined by the comparison character number determination unit from an input device;
An identification character string determination unit that determines, using a CPU, whether the input character string input to the identification character string input unit matches the character string included in the registered character string stored in the registrant information storage unit; ,
A user authentication unit that authenticates that the user is the registrant when the identification character string determination unit determines that the input character string matches the character string included in the registered character string; A biometric authentication device. The user authentication unit includes a case where the collation rate calculated by the collation rate calculation unit is a value equal to or greater than a predetermined value, and a character string included in the input character string and the registered character string by the identification character string determination unit. 2. The biometric authentication device according to claim 1, wherein the user is authenticated as the registrant in each of the cases where it is determined that and match. The identification character string input unit counts the number of times the input character string is input,
The comparison character number determining unit determines the comparison character number based on the collation rate calculated by the collation rate calculation unit and the number of input character strings counted by the identification character string input unit. The biometric authentication apparatus according to claim 1 or 2. The biometric authentication device further includes:
The guidance output part which outputs the guidance which urges | changes the said registration character string when the input frequency of the input character string counted by the said identification character string input part becomes a predetermined value is provided. Biometric authentication device. The identification character string input unit counts the number of times the input character string is input,
The biometric authentication device further includes:
The guidance output part which outputs the guidance which prompts the change of the said registration character string when the frequency | count of input of the input character string counted by the said identification character string input part becomes a predetermined value is provided. The biometric authentication device according to claim 2. The biometric authentication device according to claim 1, wherein the comparison character number determination unit determines the comparison character number based on the verification rate and a period that has elapsed since the registration character string was set. . A biometric reader that is an input device for reading biometric information from a user;
A character string input device which is an input device used for inputting a character string for identifying a user;
A biometric authentication system comprising the biometric authentication device according to claim 1.

Images