JP2011059749A - Biometric system, portable terminal, semiconductor element, and information processing server - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a biometric system, a semiconductor element, a portable terminal and an information processing server for improving convenience while maintaining security. <P>SOLUTION: The biometric system is provided with: a first portable terminal, a second portable terminal and an information processing server. Each of the first portable terminal and the second portable terminal is provided with a biometric function, and the information processing server is provided with a memory for storing reliability information showing the reliability of biometric in the first portable terminal and the second portable terminal. When receiving a biometric result showing the result of biometric from the first portable terminal, the information processing server provides a service according to the received biometric result and the reliability information stored in the memory. When receiving approval information showing that the biometric in the first portable terminal has been approved by the second portable terminal from the first portable terminal or the second portable terminal, the information processing server increases the reliability of the first portable terminal according to the reliability of the second portable terminal. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a technique for performing biometric authentication.

  2. Description of the Related Art Conventionally, as a means for identifying a person when performing financial transactions or entering / exiting management using an information device such as a computer, it is common to confirm information that can be known only to the person such as a password or a password. However, this conventional identity verification method has a drawback that impersonation is easy when a password or password is stolen by another person. Thus, in recent years, biometric authentication using biometric information that is difficult for other people to steal, such as fingerprints, irises, and finger veins, and that differs for each individual, has attracted attention.

  For example, in Patent Document 1, when the biometric information of a person is recorded in advance on an IC card and the biometric information acquired using a sensor is input, the biometric information recorded in the IC card and the input biometric information And confirming whether or not the person is the person.

JP 2001-344213 A

  In order to perform biometric authentication, it is necessary to register the biometric information of the person in the IC card as biometric registration data. If the biometric information of another person can be easily registered as biometric registration data, impersonation is performed. Will be possible. For this reason, when performing identity verification using biometric authentication for services that require high security such as financial transactions, the user goes to the window provided by the service provider, the service provider is in person and the user is the user. After confirming this, a system is adopted in which the biometric information of the user is registered in an IC card or the like. However, if the registration process for biometric authentication must be performed in person at the window, it may be inconvenient for some users and biometric registration for improving security may not be promoted.

  An object of the present invention is to provide a biometric authentication system, a semiconductor element, a portable terminal, and an information processing server that can improve convenience while maintaining security.

  The biometric authentication system according to the present invention includes a first portable terminal, a second portable terminal, and an information processing server. The first portable terminal and the second portable terminal have a biometric authentication function, and the information processing server stores reliability information indicating the reliability of biometric authentication in the first portable terminal and the second portable terminal. A memory for storing is provided. When the information processing server receives a biometric authentication result indicating the result of biometric authentication from the first portable terminal, the information processing server provides a service according to the received biometric authentication result and the reliability information stored in the memory. . Further, the information processing server receives approval information indicating that biometric authentication in the first mobile terminal has been approved by the second mobile terminal from the first mobile terminal or the second mobile terminal. Then, the reliability of the first portable terminal is increased according to the reliability of the second portable terminal.

  According to the present invention, it is possible to provide a biometric authentication system, a portable terminal, a semiconductor element, and an information processing server that can improve convenience while maintaining security.

1 is a configuration example of a biometric authentication system for performing biometric authentication. It is an example of a signature key data management table. It is an example of a user reliability management table. It is an example of a reliability provision rate table. It is a structural example of the data which a portable terminal transmits to an information processing server. It is an example of the biometrics authentication process flow performed between an IC chip and a portable terminal. It is an example of the verification processing flow performed with an information processing server. It is an example of the outline composition of approval processing, and the composition of the data which a portable terminal transmits to an information processing server. It is an example of the approval process flow performed between the applicant side and the approver side. It is an example of the screen which a portable terminal displays. It is an example of the screen which a portable terminal displays. It is an example of the biometrics authentication processing flow performed with an information processing server. 1 is a configuration example of a biometric authentication system for performing biometric authentication.

  FIG. 1 is a diagram illustrating a configuration example of a biometric authentication system that performs biometric authentication. The IC chip 100, which is a semiconductor element, has a function of storing biometric information data, which is data related to biometric information such as a user's fingerprint pattern and vein pattern, and performing biometric authentication. The mobile terminal 200 acquires biometric information of the user and performs biometric authentication by communicating with the IC chip 100. In the example of FIG. 1, the IC chip 100 is built in the mobile terminal 200, but the present invention is not limited to this, and it may be removable from the mobile terminal like an IC card. The mobile terminal 200 is, for example, a mobile phone, a PDA, or a PC.

  The information processing server 500 receives the biometric authentication result executed by the mobile terminal 200 and the IC chip 100 via the communication network 400 such as the Internet, and provides a predetermined service to the mobile terminal 200 based on the received biometric authentication result. To do. As the predetermined service, for example, providing a financial transaction service by mobile banking can be considered.

  Next, the internal configuration of the IC chip 100 will be described. The communication unit 101 has a function of communicating with the mobile terminal 200 and uses, for example, contact communication for an IC card defined by ISO / IEC 7816, which is an international standard. The memory 102 has a function of storing programs and data held by the IC chip 100, and includes a nonvolatile semiconductor memory such as a ROM (Read Only Memory), an EEPROM (Electrical Erasable Programmable Read Only Memory), or a RAM (Random Access Memory). ) And other volatile semiconductor memories. The arithmetic processing unit 103 controls the entire IC chip 100. For example, when a control command is received by the communication unit 101, the arithmetic processing unit 103 performs processing according to the received control command based on a program stored in the memory 102, and sends a corresponding response via the communication unit 101. Execute processing to send to the outside.

  Next, the internal configuration of the mobile terminal 200 will be described. The IC chip communication unit 201 has a function of communicating with the IC chip 100, and uses, for example, contact communication for an IC card defined by ISO / IEC 7816, which is an international standard. The memory 202 stores a program and data for controlling the mobile terminal 200, and includes a hard disk, a semiconductor memory, and the like. The biometric information sensor 203 has a function of reading the biometric information of the user. As biometric information, for example, a fingerprint pattern or a finger vein pattern is read. The proximity wireless communication unit 204 has a function of performing wireless communication with an external device in proximity. For example, NFC (Near Field Communication) defined by the international standard ISO / IEC 18092 and non-contact IC card communication defined by ISO / IEC 14443 are used.

  The mobile terminal communication unit 205 has a function of performing wireless communication with the wireless communication base station 300. For example, wide area wireless communication for mobile phones and wireless communication based on wireless LAN are performed. The portable terminal 200 communicates with the information processing server 500 via the wireless communication base station 300 and the communication network 400 using the portable terminal communication unit 205. The wireless communication base station 300 is, for example, a mobile phone wireless base station. The communication network 400 uses a communication network owned by a mobile phone operator or a public communication network such as the Internet.

  The input unit 206 enables a user to input necessary information to the mobile terminal 200, and is configured using, for example, a keyboard or a touch panel. The display unit 207 outputs visual information such as images and characters or audio information to the user, and is composed of, for example, a liquid crystal display or a speaker.

  The arithmetic processing unit 208 controls the entire portable terminal 200, and performs biometric authentication processing using the IC chip 100 and wireless communication processing with an external device based on a program stored in the memory 202.

  Next, the internal configuration of the information processing server 500 will be described. The communication unit 501 has a function of communicating with the mobile terminal 200 via the communication network 400.

  The memory 502 stores programs and data for controlling the information processing server 500, and includes a hard disk, a semiconductor memory, and the like. The arithmetic processing unit 503 controls the entire information processing server 500, and performs processing related to biometric authentication and information processing related to a predetermined service using biometric authentication based on programs and data stored in the memory 502.

  Next, programs and data stored in the memory 102 of the IC chip 100 will be described. The biometric authentication program 111 is a program used to execute biometric authentication processing using the IC chip 100.

  The biometric registration data 112 is biometric information of the user himself / herself registered in the IC chip 100. In this example, the user can store the biometric information of the user acquired using the biometric information sensor 203 of the mobile terminal 200 in the IC chip 100 as the biometric registration data 112 without going to the service window.

  The user identification number 113 is a number for identifying a user who owns the IC chip 100 and uses a service using biometric authentication. For example, when the identity verification by biometric authentication using the IC chip 100 is used for the mobile banking service, it is conceivable to use the user account number as the user identification number 113. In this example, the user identification number 113 is used, but not limited to the number, other information for identifying the user may be used.

  The authentication key data 114 is key data used for mutual authentication and encrypted communication with an external device. The authentication key data 114 may be key data of a common key cryptosystem or key data of a public key cryptosystem.

The signature key data 115 is key data for generating a digital signature for the biometric authentication result executed by the IC chip 100. Here, the digital signature is signature information for certifying that predetermined data is valid and not falsified. Digital signatures are generally generated and verified using public key cryptography.
The digital signature is generated by an encryption process using key data for generating a digital signature. Also, verification is performed by cryptographic processing using key data for digital signature verification. If the verification of the digital signature is successful, it can be proved that the target data is valid and has not been altered. It is also possible to guarantee data validity and detect falsification using a common key cryptosystem. Therefore, the signature key data 115 may be common key encryption key data or public key encryption key data.

  Although not shown, the memory 102 may store other application programs in addition to the biometric authentication program 111, such as a program for performing financial transactions such as credit settlement. The memory 102 may store an IC chip operating system that manages application programs to be executed. For example, MULTOS (registered trademark) or Java (registered trademark) Card may be used as the operating system for the IC chip.

  Next, programs and data stored in the memory 502 of the information processing server 500 will be described. The control program 511 is a program used for controlling the information processing server 500. The signature key data management table 512 is a table that allows a user of a service using biometric authentication to search for signature key data stored in the IC chip. An example of the signature key data management table 512 is shown in FIG. The signature key data management table 512 shown in FIG. 2 stores the user identification number of each user and the signature key data in association with each other.

  The user reliability management table 513 is a table that manages the reliability of biometric authentication performed by each user. In this example, the user's biometric information can be registered in the IC chip 100 in a non-face-to-face manner without the user having to go to a window. Even if it has been done, it is required to provide a mechanism for suppressing unauthorized use. For this reason, the information processing server 500 sets the reliability of each user for biometric authentication in the user reliability management table 513, and provides a service provided according to the set reliability even if the biometric authentication is successful. To limit. Specifically, when the information processing server 500 receives a notification of newly registering biometric information from the mobile terminal 200, the user reliability management is performed using the lowest value as the initial value as the reliability of the newly registered user. Set in table 513. In such a state where the user's reliability is low, a service requiring high security is not provided. Thus, security can be maintained even when biometric information is registered in a non-face-to-face manner.

  However, there is a problem that the convenience of the user is hindered if the service provided in this way is limited. Therefore, in this example, the validity of biometric authentication performed by the first user using the mobile terminal 200A is approved by the second user using the mobile terminal 200B, and the information processing server 500 receives the authentication result. The reliability of the first user can be increased based on the reliability of the second user. Here, in the following description, the second user who approves the validity of biometric authentication is called an approver, and the user identification number of the approver is called an approver identification number. In addition, the first user who receives approval of the validity of biometric authentication is called an applicant, and the user identification number of the applicant is called an applicant identification number.

  Specifically, the applicant performs biometric authentication with the mobile terminal 200A, and transmits an approval request together with the biometric authentication result to the approver's mobile terminal 200B through the proximity wireless communication unit 204. When the mobile terminal 200B receives the biometric authentication result, the approver confirms whether the applicant in front of the user is the principal, and approves the validity of the biometric authentication using the input unit 206. When approved by the approver, the mobile terminal 200B transmits the approval result to the mobile terminal 200A by proximity wireless communication, and the mobile terminal 200A transmits the received approval result to the information processing server 500 by the mobile terminal communication unit 205. When the information processing server 500 receives the approval result, the information processing server 500 increases the reliability of the applicant according to the reliability and the reliability grant rate of the approver.

  Thus, by increasing the reliability by the approval, it is possible to increase the services that can be used by the applicant while maintaining security, and to improve the convenience for the user. For example, even if one member of the family registers biometric information face-to-face at a counter such as a bank, and this person approves, even if another person registers biometric information without going to the counter , Can improve the services available.

  Here, since the approval needs to be performed in front of the person, the approval process is allowed to be executed only when the mobile terminal 200A and the mobile terminal 200B are communicating by proximity wireless communication. Control is made so that processing is stopped when communication is performed in other than the above. Details of the processing will be described later with reference to FIGS.

  In addition, the reliability that the approver can grant to the applicant is not uniform, and the reliability given to the applicant is changed according to the reliability grant rate set in the reliability grant rate table 514. . FIG. 4 shows an example of the reliability grant rate table 514. In this example, the reliability grant rate is stored in association with the user identification number of each user. For example, since the reliability grant rate for the user with the user identification number “111111” is 20%, the applicant must be given a trustworthiness level that corresponds to 20% of the trust level set for this user. Can be granted. For example, when biometric information is registered at a window or when the registration period is long, the grant rate is set to be high, and changes according to the registration status and usage status.

  An example of the user reliability management table 513 is shown in FIG. The user reliability management table 513 shown in FIG. 3 stores the approver identification number and the reliability in association with the user identification number of each user. In this example, the user with the user identification number “111111” has just registered biometric information in a non-face-to-face relationship, the approver has not yet been registered, and the reliability is the lowest “0”. Yes. For the user with the user identification number “222222”, the approver with the identification number “333333” is registered, and the reliability is “1”. An approver with the identification number “444444” is registered for the user with the user identification number “333333”, and the reliability is “5”. The user with the user identification number “444444” has a reliability of “10”. The user reliability management table 513 shown in FIG. 3 is configured such that a maximum of three approver identification numbers can be associated with the user identification number of each user. A number of approver identification numbers may be associated with each other.

  Next, FIG. 5 shows a data configuration example when the mobile terminal 200 transmits a biometric authentication result to the information processing server 500. As shown in FIG. 5, the mobile terminal 200 transmits biometric authentication result notification data 610 and digital signature data 620 to the information processing server 500. The biometric authentication result notification data 610 includes a user identification number of a user who has performed biometric authentication and a biometric authentication result indicating success or failure of biometric authentication. Digital signature data 620 is a digital signature for biometric authentication result notification data 610. The digital signature data 620 is generated using the signature key data 115 inside the IC chip 100.

  Next, an example of biometric authentication processing performed between the IC chip 100 and the mobile terminal 200 will be described with reference to FIG. The following processing is executed by the arithmetic processing unit 103 and the arithmetic processing unit 208 based on programs stored in the memory 102 and the memory 202, respectively.

  The portable terminal 200 acquires the user's biometric information using the biometric information sensor 203, and transmits the acquired biometric information to the IC chip 100 as biometric matching data (step S10). When receiving the biometric verification data from the portable terminal 200, the IC chip 100 performs biometric authentication by performing verification processing with the biometric registration data 112 held in the memory 102, and the biometric authentication result notification data 610 is obtained from the biometric authentication result. Is generated (step S11). Here, the collation process calculates the similarity or mismatch between the biometric registration data and the biometric collation data using a specific algorithm, and compares the calculation result with a preset reference value (threshold). Make a decision.

  The IC chip 100 generates a digital signature 620 for the biometric authentication result notification data 610 using the signature key data 115, and transmits it to the portable terminal 200 together with the biometric authentication result notification data 610 (step S12). Here, the digital signature 620 is generated using a public key cryptosystem such as RSA cryptography. Alternatively, MAC (Message Authentication Code), which is an authentication code for detecting unauthorized tampering, may be used as the digital signature 620 using a common key cryptosystem.

  Then, the portable terminal 200 transmits the biometric authentication result notification data 610 and the digital signature 620 received from the IC chip to the information processing server 500 (step S13).

  Next, an example of a biometric authentication result verification process performed by the information processing server 500 will be described with reference to FIG. The following processing is executed by the arithmetic processing unit 503 based on a program stored in the memory 502.

  When the information processing server 500 receives the biometric authentication result notification data 610 and the digital signature 620 from the portable terminal 200 that has performed biometric authentication, the information processing server 500 uses the user identification number included in the biometric authentication result notification data 610 as a search key as a signature key. The corresponding signature key data is retrieved from the data management table 512 (step S21).

  The information processing server 500 verifies the digital signature 620 using the retrieved signature key data and confirms the validity of the biometric authentication result notification data 610 (step S22). Specifically, a result of performing predetermined arithmetic processing or encryption processing using signature key data on a part of biometric authentication result notification data 610, and encryption using predetermined arithmetic processing or signature key data for digital signature 620 If the results of processing match, it is considered that the digital signature 620 has been successfully verified. If the verification of the digital signature 620 fails, the process is interrupted, and if the verification of the digital signature 620 is successful, the process proceeds to step S23. In step S23, the information processing server 500 confirms the success or failure of the biometric authentication result included in the biometric authentication result notification data 610.

  If the biometric authentication result is unsuccessful, the verification process of the biometric authentication result by the information processing server 500 ends in error. On the other hand, if the biometric authentication result is successful, the process proceeds to step S24. In step S24, the information processing server 500 searches for the user's reliability from the user reliability management table 513 using the user identification number included in the biometric authentication result notification data 610 as a search key.

  Then, the information processing server 500 provides a predetermined information processing service to the mobile terminal 200 based on the retrieved reliability value (step S25). For example, even if the biometric authentication is successful, if the user's reliability does not reach a predetermined value, a service such as a mobile banking service that requires strict identity verification is not provided. Specifically, for example, when a request for providing a predetermined service is received together with the biometric authentication result notification data 610 and the like from the portable terminal 200 in step S21, information indicating whether or not the service can be provided is displayed in step S25. If it can be provided, service provision is started. Alternatively, when a request for providing a list of services is received without receiving a request for providing a predetermined service from the mobile terminal 200 in step S21, information indicating a service that can be provided is sent to the mobile terminal 200 in step S25. Send.

  Next, FIG. 8 shows an outline configuration of the approval process and a data configuration example transmitted to the information processing server 500. The mobile terminals 200A and 200B have the same configuration as the mobile terminal 200 described with reference to FIG. The IC chips 100A and 100B have the same configuration as the IC chip 100 described in FIG.

  The mobile terminal 200A performs biometric authentication of the applicant and transmits a biometric authentication result to the mobile terminal 200B by proximity wireless communication. When the approval by the approver is input, the biometric authentication result approval data 630 and the digital signature data 640 are transmitted from the mobile terminal 200B to the mobile terminal 200A by proximity wireless communication. The portable terminal 200A transmits the received data to the information processing server 500 through the portable terminal communication unit 205.

  Here, the biometric authentication result approval data 630 includes an approver identification number, an applicant identification number, and a biometric authentication result indicating success or failure of biometric authentication. The approver identification number is an identification number of a user who approves the validity of biometric authentication, and is stored in the IC chip 100B. The applicant identification number is the user identification number of the applicant and is stored in the IC chip 100A. Digital signature data 640 is a digital signature for biometric authentication result approval data 630. The digital signature data 640 is generated using the signature key data inside the IC chip 100B. In this example, the signature key data generated by the IC chip 100B is transmitted, but in addition to this, the signature key data generated by the IC chip 100A may also be transmitted.

  The information processing server 500 can verify that the biometric authentication result approval data 630 is correct by verifying the digital signature data 640.

  Next, an example of a biometric authentication approval process flow performed between the applicant side and the approver side will be described with reference to FIG.

  First, as in S10 of FIG. 6, the mobile terminal 200A acquires biometric information in order to perform biometric authentication of the applicant, and transmits the acquired biometric information to the IC chip 100A. Then, similar to S11 and S12 in FIG. 6, when receiving the biometric verification data, the IC chip 100A performs biometric authentication by performing verification processing with the biometric registration data 112 held in the memory 102, and the biometric authentication result. From this, biometric authentication result notification data 610 is generated (step S31).

  Using the proximity communication function of the portable terminal 200A and the portable terminal 200B, the mutual authentication for verifying the mutual validity between the IC chip 100A and the IC chip 100B, and the sharing process of the session key used in the subsequent encrypted communication Perform (step S32). Here, mutual authentication and session key sharing processing are executed using authentication key data held by the IC chip 100A and the IC chip 100B. The authentication key data may be based on a common key cryptosystem or may be based on a public key cryptosystem. The session key is temporary key data generated using authentication key data and different data such as a random number each time. Note that the mutual authentication may be performed by confirming that subsequent encrypted communication using the session key does not fail (can be correctly encrypted / decrypted) without performing the mutual authentication in advance.

  The IC chip 100A encrypts the biometric authentication result notification data 610 generated in step S31 with the session key and outputs it to the mobile terminal 200A, and the mobile terminal 200A transmits it to the mobile terminal 200B by proximity communication (step S33). . Here, the IC chip 100A performs encryption processing after adding tampering detection data for detecting tampering to the biometric authentication result notification data 610. For example, falsification detection data is generated by a CRC (Cyclic Redundancy Check) or a MAC (Message Authentication Code) using a common key cryptosystem.

  When mobile terminal 200B receives biometric authentication result notification data 610 by proximity communication, it performs biometric authentication of the approver using IC chip 100B (step S34). When the approver's biometric authentication fails, the mobile terminal 200B interrupts the approval process. On the other hand, when the biometric authentication of the approver is successful, the portable terminal 200B transmits the biometric authentication result notification data 610 encrypted with the session key to the IC chip 100B (step S35). The IC chip 100B decrypts the biometric authentication result notification data 610 encrypted using the session key and checks the falsification detection data to confirm that no falsification has occurred. Then, the biometric authentication result included in the biometric authentication result notification data 610 is transmitted to the mobile terminal 200B (step S36). If the decryption process of the biometric authentication result notification data 610 fails due to detection of alteration or the like, the IC chip 100B interrupts the approval process. Also, when the biometric authentication result included in the biometric authentication result notification data 610 indicates “failure”, the mobile terminal 200B interrupts the approval process.

  When the mobile terminal 200B confirms that the biometric authentication of the applicant and the approver is successful, the mobile terminal 200B displays a screen for approving the biometric authentication result of the applicant on the display unit 207, and the approver can Ask for input. When approval / disapproval is input from the approver via input unit 206, portable terminal 200B transmits approval / disapproval to IC chip 100B (step S37).

  When receiving the approval of the applicant's biometric authentication result from the portable terminal 200B, the IC chip 100B generates the biometric authentication result approval data 630 from the biometric authentication result notification data 610 and the approver's identification number (step S38). ). The IC chip 100B generates a digital signature 640 for the biometric authentication result data 630 generated in step S38 using the signature key data 115, and transmits the digital signature 640 together with the biometric authentication result approval data 630 to the portable terminal 200B (step S39). When receiving the biometric authentication result approval data 630 and the digital signature 640, the portable terminal 200B transmits these data to the portable terminal 200A using proximity communication (step S40).

  When receiving the biometric authentication result approval data 630 and the digital signature 640, the portable terminal 200A transmits these data to the information processing server 500 (step S41).

  The process illustrated in FIG. 9 is an example. For example, the mobile terminal 200B transmits the biometric authentication result approval data 630 and the digital signature 640 directly to the information processing server 500 without transmitting to the mobile terminal 200A. Also good.

  Next, FIG. 10 shows an example of a screen displayed on the mobile terminal 200A when performing the biometric authentication approval process. In this example, it is assumed that finger vein authentication or fingerprint authentication is performed as biometric authentication performed by the mobile terminal. Further, NFC is used as the proximity communication performed by the mobile terminal 200A and the mobile terminal 200B, for example. When NFC is used, since the communication distance is as short as about 5 to 10 cm, it is possible to start the proximity communication by bringing the mobile terminals close to each other so as to overlap each other.

  First, the mobile terminal 200A displays a screen 1001 in order to perform biometric authentication of the applicant. The screen 1001 displays a text such as “Place your finger” to notify the applicant that biometric authentication is to be executed. In addition, a cancel button is displayed to cancel biometric authentication. When the applicant selects the cancel button, the mobile terminal 200A interrupts the biometric authentication approval process. When the mobile terminal 200A detects that the applicant places a finger on the biometric information sensor, the mobile terminal 200A displays a screen 1002 indicating that biometric authentication is being executed.

  When the applicant's biometric authentication is successful, the portable terminal 200A displays a screen 1003 and allows the applicant to select whether or not the biometric authentication result notification data 610 can be transmitted. A screen 1003 displays a send button and a cancel button. When the applicant selects the cancel button, the mobile terminal 200A interrupts the biometric authentication approval process.

  When the applicant selects the transmission button, a screen 1004 is displayed to start the proximity communication with the approver's mobile terminal 200B, and prompts the applicant to bring the mobile terminal 200A and the mobile terminal 200B closer to each other. The mobile terminal 200A starts proximity communication with the mobile terminal 200B, and transmits the encrypted biometric authentication result notification data 610 to the mobile terminal 200B, and then displays the screen 1005. When a cancel button is displayed on the screen 1005 and the cancel button is selected by the applicant, the mobile terminal 200A transmits an interrupt request to the mobile terminal 200B, and interrupts the biometric authentication approval process. After that, when the mobile terminal 200A receives the biometric authentication result approval data 630 and the digital signature 640 from the mobile terminal 200B by using proximity communication, the mobile terminal 200A transmits these data to the information processing server. Until the approval completion notification is received from the information processing server 500, the display of the screen 1005 is continued to notify the applicant that the approval process is being performed. When an approval completion notification is received from the information processing server 500, a screen 1006 is displayed to notify the applicant that biometric authentication has been approved.

  Next, FIG. 11 shows an example of a screen displayed by the mobile terminal 200B when performing biometric authentication approval processing. Also in this example, it is assumed that finger vein authentication or fingerprint authentication is performed as biometric authentication performed by the mobile terminal. Further, NFC is used as the proximity communication performed by the mobile terminal 200A operated by the applicant and the mobile terminal 200B operated by the approver.

  When the mobile terminal 200B receives the encrypted biometric authentication result notification data 610 from the mobile terminal 200A, the mobile terminal 200B displays the screen 2001 and makes the approver determine to verify these data. The screen 2001 displays a verification button and a cancel button. When the approver selects the cancel button on the screen 2001, the mobile terminal 200B interrupts the biometric authentication approval process. When the approver selects the verification button on the screen 2001, the mobile terminal 200B displays the screen 2002 in order to perform biometric authentication of the approver. The screen 2002 displays a text such as “Place your finger” to notify the approver that biometric authentication will be performed. At this time, in order to cancel the biometric authentication, if a cancel button is displayed and the approver selects the cancel button on the screen 2002, the portable terminal 200B ends the biometric authentication approval process.

  When the portable terminal 200B detects that the approver places a finger on the biometric information sensor, the portable terminal 200B displays a screen 2003 indicating that biometric authentication is being executed. When the mobile terminal 200B confirms that the biometric authentication of the approver is successful and the biometric authentication result notification data 610 confirms that the biometric authentication of the applicant is successful, the screen 2004 is displayed and the biometric authentication of the applicant is displayed. Let the approver decide whether or not to approve. Screen 2004 displays an approval button and a cancel button. When the approver selects the cancel button on the screen 2004, the mobile terminal 200B interrupts the biometric authentication approval process. When the approver selects the approval button on the screen 2004, the mobile terminal 200B generates the biometric authentication result approval data 630 and the digital signature 640, and transmits the screen 2005 to the mobile terminal 200A by proximity communication. And prompts the approver to bring the mobile terminal 200B and the mobile terminal 200A closer to each other.

Next, an example of the biometric authentication result approval process performed by the information processing server 500 will be described with reference to FIG.
When the information processing server 500 receives the biometric authentication result approval data 630 and the digital signature 640 from the portable terminal, the information processing server 500 uses the approver identification number included in the biometric authentication result approval data 630 as a search key, The signature key data to be searched is searched (step S61). Next, the information processing server 500 verifies the digital signature 640 using the retrieved signature key data and confirms the validity of the biometric authentication result approval data 630 (step S62). If the information processing server 500 fails to verify the digital signature 640, the information processing server 500 interrupts the biometric authentication result approval process. If the information processing server 500 successfully verifies the digital signature 640, the information processing server 500 proceeds to step S63.

  The information processing server 500 confirms the success or failure of the biometric authentication result included in the biometric authentication result approval data 630 (step S63). If the biometric authentication result is unsuccessful, the information processing server 500 interrupts the biometric authentication result approval process. If the biometric authentication result is successful, the information processing server 500 proceeds to step S64.

  The information processing server 500 searches for the reliability of the approver from the user reliability management table 513 using the approver identification number included in the biometric authentication result approval data 630 as a search key (step S64). Then, the information processing server 500 searches the approver's reliability grant rate using the approver identification number included in the biometric authentication result approval data 630 as a search key (step S65). Next, the information processing server 500 searches for the reliability of the approver from the user reliability management table 513 using the applicant identification number included in the biometric authentication result approval data 630 as a search key (step S66).

  The information processing server 500 calculates the new reliability of the applicant (step S67). For example, the reliability is calculated by the following formula: (applicant's new reliability) = (applicant's current reliability) + (approver's reliability) × (approver's reliability grant rate).

The information processing server 500 rewrites the applicant's reliability included in the user reliability management table 513 with the updated value, and associates the approver identification number included in the biometric authentication result approval data 630 with the applicant. (Step S68). Specifically, the applicant's reliability is changed and the approver identification number is additionally registered.
Next, the information processing server 500 transmits to the portable terminal whether or not a series of approval processing has been successful (step S69).

  By using such a process, the applicant can improve the reliability of biometric authentication using biometric information registered in a non-face-to-face manner without going to a specific service window. Since the increase in the applicant's reliability is determined based on the approver's reliability and reliability contribution ratio, the applicant becomes more reliable as the approver who has higher reliability and reliability contribution approval. It becomes possible to improve. In addition, since the applicant's mobile terminal and the approver's mobile terminal communicate using proximity wireless communication, the approver can check the applicant's biometric authentication in person and improve the reliability of the approval process. Become.

In the above description, the mobile terminal 200 has the IC chip 100 built-in, but even if the IC chip 100 is not provided,
For example, as shown in FIG. 13, the biometric registration data 112, the user identification number 113, the authentication key data 114, and the signature key data 115 may be stored in the memory 202 of the portable terminal 200. In the case of the example of FIG. 13, all of the biometric authentication processes described with reference to FIGS. 6 and 9 are executed by the arithmetic processing unit 208 of the mobile terminal 200.

100 ... IC chip, 200 ... mobile terminal, 300 ... wireless communication base station, 400 ... communication network, 500 ... information processing server

Claims (11)

A biometric authentication system having a first portable terminal, a second portable terminal, and an information processing server,
The first portable terminal and the second portable terminal have a biometric authentication function,
The information processing server includes a memory that stores reliability information indicating reliability of biometric authentication in the first mobile terminal and the second mobile terminal,
When the information processing server receives a biometric authentication result indicating the result of biometric authentication from the first portable terminal, the information processing server provides a service according to the received biometric authentication result and the reliability information stored in the memory. A biometric authentication system.   The information processing server receives approval information indicating that biometric authentication in the first mobile terminal has been approved by the second mobile terminal from the first mobile terminal or the second mobile terminal. The biometric authentication system according to claim 1, wherein the reliability of the first portable terminal is increased according to the reliability of the second portable terminal. A biometric authentication system having a first portable terminal, a second portable terminal, and an information processing server,
The first portable terminal and the second portable terminal have a biometric authentication function,
The information processing server includes a memory that stores reliability information indicating reliability of biometric authentication in the first mobile terminal and the second mobile terminal,
The information processing server receives approval information indicating that biometric authentication in the first mobile terminal has been approved by the second mobile terminal from the first mobile terminal or the second mobile terminal. A biometric authentication system that increases the reliability of the first portable terminal in accordance with the reliability of the second portable terminal.   The first mobile terminal and the second mobile terminal communicate by proximity wireless communication when the second mobile terminal approves biometric authentication in the first mobile terminal. The biometric authentication system according to claim 2 or claim 3. An information processing server for communicating with first and second portable terminals having a biometric authentication function,
A memory for storing reliability information indicating the reliability of biometric authentication in the first portable terminal and the second portable terminal;
When a biometric authentication result indicating a biometric authentication result is received from the first portable terminal, a service is provided according to the received biometric authentication result and reliability information stored in the memory. . An information processing server for communicating with first and second portable terminals having a biometric authentication function,
A memory for storing reliability information indicating the reliability of biometric authentication in the first portable terminal and the second portable terminal;
When the approval information indicating that biometric authentication in the first portable terminal is approved by the second portable terminal is received from the first portable terminal or the second portable terminal, the second portable terminal An information processing server that increases the reliability of the first portable terminal in accordance with the reliability of the terminal. A portable terminal capable of communicating with another terminal having an biometric authentication function and an information processing server,
A biological information sensor capable of acquiring biological information of the user of the mobile terminal;
A memory for registering biometric information of the user of the mobile terminal as biometric registration data;
A biometric authentication processing unit that performs biometric authentication using biometric information acquired by the biometric information sensor and biometric registration data registered in the memory;
When receiving an approval request for biometric authentication in the other terminal from the other terminal, the biometric information sensor acquires biometric information of the user of the portable terminal, and the biometric information acquired and the biometric registered in the memory When biometric authentication is performed using the registration data and the authentication is successful, the mobile terminal user is prompted to approve the other terminal and there is an input to approve the user. A mobile terminal that transmits approval information to the other terminal or the information processing server.   The mobile terminal according to claim 7, wherein communication with the other terminal is performed by proximity wireless communication.   9. A portable terminal, wherein the memory according to claim 7 or 8 is provided in a semiconductor element, and the semiconductor element is detachable from the portable terminal. A portable terminal that performs biometric authentication and performs predetermined information processing by communicating with an information processing server,
A biometric information sensor that acquires biometric information of a user, a first communication unit that communicates wirelessly with the information processing server, a second communication unit that communicates wirelessly with a second portable terminal, and a biological body of the user A first memory for registering information related to information as biometric registration information; a second memory for recording a user identification number that is a number for identifying the user; and an arithmetic processing unit for performing biometric authentication processing,
Using the biometric registration information and biometric information acquired using the biometric information sensor, the arithmetic processing unit performs biometric authentication processing,
If the biometric authentication process is successful, generate biometric authentication result notification data including the biometric authentication process result and the user identification number, and transmit the biometric authentication result notification data to the second portable terminal,
Thereafter, when receiving a biometric authentication result approval data indicating that the biometric authentication result of the first user is approved and a digital signature for the biometric authentication result approval data from the second portable terminal, the biometric authentication result A mobile terminal, wherein approval data and the digital signature are transmitted to an information processing server. A semiconductor element that is mounted on a portable terminal and performs biometric authentication,
A first memory for registering information on biometric information of a user as biometric registration information, a second memory for storing signature key data used for generating a digital signature, and a number for identifying the user A third memory that records a user identification number, a communication unit that communicates with the mobile terminal, and an arithmetic processing unit that performs biometric authentication processing,
When biometric authentication result notification data including a biometric authentication result executed by the second semiconductor element is received by the communication unit, it is acquired using the biometric registration information registered in the first memory and the biometric information sensor. The biometric authentication process is performed by the arithmetic processing unit using the biometric information thus obtained,
When the biometric authentication process is successful and the biometric authentication result included in the biometric authentication result notification data indicates success, biometric authentication result approval data including the user identification number and the biometric authentication result is generated. In addition, a digital signature for the biometric authentication result approval data is generated using the signature key data.

Images