JP2011165102A - Biometrics authentication system and portable terminal - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a biometrics authentication system which can perform biometrics authentication processing under high security while protecting biological information of a user, and a portable terminal. <P>SOLUTION: The authentication system includes the portable terminal, an IC chip mountable on the portable terminal, which performs collation processing using a biological information pattern preliminarily stored in a memory, and an image processing server. The portable terminal transmits biological image data taken by an imaging means to the image processing server. The image processing server generates a biological information pattern from the received biological image data, and transmits the generated biological information pattern to the portable terminal. The portable terminal transmits the received biological information pattern to the IC chip mounted thereon. The IC chip performs the collation processing by use of the biological information stored in the memory and the received biological information pattern, and transmits the collation result to the portable terminal. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a technique for performing biometric authentication.

  2. Description of the Related Art Conventionally, as a means for identifying a person when performing financial transactions or entering / exiting management using an information device such as a computer, it is common to confirm information that can be known only to the person such as a password or a password. However, this conventional identity verification method has a drawback that impersonation is easy when a password or password is stolen by another person. Thus, in recent years, biometric authentication using biometric information that is difficult for other people to steal, such as fingerprints, irises, and finger veins, and that differs for each individual, has attracted attention.

  For example, in Patent Document 1, biometric information of a verifier is acquired using a sensor, a biometric information pattern obtained by patterning the acquired biometric information by predetermined image processing is input to an IC card, and recorded in advance on the IC card. It is described that the biometric information pattern of the person who is doing this is collated to confirm whether or not the person is the person. Since the IC card is extremely difficult to illegally read and alter internal information, it is possible to safely manage the biometric information pattern of the user.

  In recent years, with the downsizing of sensors that acquire biometric information, it has become possible to perform biometric authentication by mounting a small sensor on a mobile phone. For example, it is conceivable to perform identity verification necessary for financial transactions such as mobile banking by biometric authentication using a small sensor mounted on a mobile phone.

JP 2001-344213 A

  Biometric authentication performed as identity verification for financial transactions such as mobile banking requires high security, and must be strictly managed so that biometric information patterns are not illegally used.

  When image processing for generating a biometric information pattern and biometric information pattern matching processing are executed using a CPU and a memory in a mobile phone, the biometric information pattern leaks due to fraudulent analysis of the mobile phone, etc. May be significantly reduced.

  Accordingly, an object of the present invention is to provide a biometric authentication system and a portable terminal that can protect a user's biometric information pattern and perform biometric authentication processing with high security.

  A biometric authentication system according to the present invention includes a portable terminal, an IC chip that can be attached to the portable terminal and performs a matching process using a biometric information pattern stored in advance in a memory, and an image processing server. The portable terminal transmits the biological image data captured by the imaging unit to the image processing server. The image processing server generates a biological information pattern from the received biological image data, and transmits the generated biological information pattern to the mobile terminal. The portable terminal transmits the received biometric information pattern to the mounted IC chip, and the IC chip performs a verification process using the biometric information pattern stored in the memory and the received biometric information pattern, and transmits the verification result to the mobile terminal. To do.

  ADVANTAGE OF THE INVENTION According to this invention, a biometric authentication system and a portable terminal which can protect a user's biometric information pattern and can perform a biometric authentication process under high security can be provided.

It is the figure which showed the structural example of the biometrics authentication system. It is the figure which showed the example of an initialization flow of a biometrics authentication process. It is the figure which showed the example of the detailed flow of a biometrics authentication process. It is the figure which showed the structural example of the biometrics authentication system. It is the figure which showed the example of an initialization flow of a biometrics authentication process.

  FIG. 1 is a diagram illustrating a configuration example of a biometric authentication system.

  The portable terminal 10 acquires biometric information of a user using the biometric authentication module 20 that is a semiconductor element, and performs biometric authentication by communicating with the IC chip 30 that is a semiconductor element. The mobile terminal 10 is, for example, a mobile phone, a PDA, or a PC. FIG. 1 shows a state in which the biometric authentication module 20 and the IC chip 30 are built in the mobile terminal 10. Thus, by adopting a configuration in which the biometric authentication module 20 and the IC chip 30 are mounted, a biometric authentication function can be easily provided to an existing portable terminal.

  Note that FIG. 1 is an example. For example, the biometric authentication module 20 and / or the IC chip 30 may be communicated with the portable terminal 10 by proximity communication or the like without being incorporated in the portable terminal 10. Also good. However, in order to improve security, it is desirable to use the biometric authentication module 20 or the like mounted inside the mobile terminal 10. Further, the biometric authentication module 20 may be integrally configured as a part of the mobile terminal 10.

  The biometric authentication module 20 has a function of photographing a user's finger vein or fingerprint and acquiring biometric image data. The biometric authentication module 20 is configured by a one-chip LSI, for example.

  The IC chip 30 has a function of storing biometric information patterns such as user fingerprint patterns and vein patterns in advance and performing biometric authentication. In the example of FIG. 1, the IC chip 30 is built in the mobile terminal 10, but the invention is not limited to this, and it may be detachable from the mobile terminal like an IC card. For example, it is realized using an IC card that records subscriber information and phone numbers of mobile phones called SIM (Subscriber Identity Module Card) cards, UIM (User Identity Module) cards, or USIM (Universal Subscriber Identity Module) cards. May be.

  The biometric authentication server 70 receives the biometric authentication result executed by the IC chip 30 from the portable terminal 10 via the communication network 50 such as the Internet, and performs predetermined information processing on the portable terminal 10 based on the received biometric authentication result. Provide service. As the predetermined information processing service, for example, providing a financial transaction service by mobile banking can be considered.

  The image processing server 60 receives the biometric image data acquired by the biometric authentication module 20 from the portable terminal 10 via the communication network 50, and performs biometric information on the received biometric image data by performing predetermined image processing. A pattern is generated, and the generated biometric information pattern is transmitted to the mobile terminal 10. Next, the internal configuration of the mobile terminal 10 will be described. The communication unit 101 communicates with the biometric authentication module 20 to transmit / receive various data. The communication unit 102 has a function of communicating with the IC chip 30 and uses, for example, contact communication for an IC card defined by ISO / IEC7816 which is an international standard. The wireless communication unit 103 transmits / receives various data to / from the image processing server 60 and the biometric authentication server 70 via the wireless base station 40. For example, wireless communication is performed based on a wireless communication method such as LTE, HSPA, EV-DO, WiMAX. The user input unit 104 enables a user to input necessary information to the mobile terminal 10 and is configured using, for example, a keyboard or a touch panel. The user output unit 105 outputs visual information such as images and characters or audio information to the user, and is constituted by, for example, a liquid crystal display or a speaker. The memory 106 stores a program and data for controlling the mobile terminal 10 and is composed of a hard disk, a semiconductor memory, or the like. The mobile terminal control unit 107 controls the entire mobile terminal 10, and transmits a control command to the biometric authentication module 20 and the IC chip 30 based on a program stored in the memory 106 and a wireless communication process with an external device. To implement.

  Next, the internal configuration of the biometric authentication module 20 will be described. The communication unit 201 communicates with the mobile terminal 10 to transmit / receive various data. The memory 202 is composed of a semiconductor memory or the like, and stores a control program executed by the CPU 25, captured biometric image data, and an image processing master key 210. The image processing master key 210 is data used when generating an image processing work key for encrypting the acquired biometric image data. The image processing master key 210 may be key data of a common key encryption method or key data of a public key encryption method. The light source 203 emits light necessary for photographing the finger vein and fingerprint of the user. For example, when photographing a finger vein, it is necessary to irradiate the finger with infrared rays, and an infrared LED is used as the light source 203. The imaging element 204 is an element that converts light collected through a lens or the like into an electrical signal, images a finger vein or the like, and outputs biological image data. For the imaging element 204, for example, a CCD or a CMOS is used. The CPU 205 controls the entire biometric authentication module 20, and controls biometric image data acquisition processing, biometric image data encryption processing, and communication processing with the mobile terminal 10 based on a program stored in the memory 202.

  Next, the internal configuration of the IC chip 30 will be described. The communication unit 301 has a function of communicating with the mobile terminal 10 and uses, for example, contact communication for IC card defined by ISO / IEC7816 which is an international standard. The memory 302 has a function of storing data such as a biometric authentication processing program executed by the CPU 303 and a biometric registration pattern 301, and a nonvolatile semiconductor such as a ROM (Read Only Memory) and an EEPROM (Electrical Erasable Programmable Read Only Memory). It is composed of a volatile semiconductor memory such as a memory or RAM (Random Access Memory). The CPU 303 controls the entire IC chip 30. For example, when a control command is received from the portable terminal 10 by the communication unit 301, the CPU 303 performs processing according to the received control command based on a program stored in the memory 302 and sends a corresponding response via the communication unit 301. Control to send in.

  Next, data stored in the memory 302 of the IC chip 30 will be described. The biometric registration pattern 310 is a biometric information pattern of the user himself / herself, and is registered in advance in the memory 302 at, for example, a bank that performs financial transactions or a facility that performs entrance / exit management. The user information 311 is various data for identifying a user so that the user can enjoy a predetermined service. For example, an account number or a credit number is used. The verification processing master key 312 is key data used when generating a verification processing work key for decrypting the biometric information pattern encrypted by the image processing server 60. The verification processing master key 312 may be key data of a common key encryption method or key data of a public key encryption method. The signature generation key 313 is key data for generating a digital signature for the result of the biometric authentication process executed by the IC chip 30. Here, the digital signature is information for proving that predetermined data is valid and has not been altered. Digital signatures are generally generated and verified using a public key cryptosystem, but it is also possible to guarantee data validity and detect tampering using a common key cryptosystem. For this reason, the signature generation key 313 may be key data of a common key cryptosystem or key data of a public key cryptosystem.

  Next, the internal configuration of the image processing server 60 will be described. The communication unit 601 has a function of communicating with the mobile terminal 10 via the communication network 50. The memory 602 stores data such as a control program executed by the CPU 603 and an image processing master key 610, and includes a hard disk, a semiconductor memory, and the like. The memory 602 stores an image processing master key 610 and a verification processing master key 612. The image processing master key 610 is key data used when generating an image processing work key for decrypting the biometric image data encrypted by the biometric authentication module 20, and corresponds to the image processing master key 210. It is. The verification processing master key 612 is key data used when generating a verification processing work key for encrypting and protecting the biometric information pattern generated by the image processing server 60, and corresponds to the verification processing master key 312. is there. The CPU 603 controls the entire image processing server 60 and performs a biometric information pattern generation process based on a program stored in the memory 602.

  Next, the internal configuration of the biometric authentication server 70 will be described. The communication unit 701 has a function of communicating with the mobile terminal 10 via the communication network 50. The memory 702 stores a control program executed by the CPU 703, data such as a signature verification key 710 and a user information table 711, and is configured from a hard disk, a semiconductor memory, or the like.

  Here, the signature verification key 710 is key data used to verify the digital signature for the biometric authentication result received from the mobile terminal 10. Digital signatures are generally generated and verified using a public key cryptosystem, but it is also possible to guarantee data validity and detect tampering using a common key cryptosystem. For this reason, the signature verification key 710 may be key data of a common key encryption method or key data of a public key encryption method. The user information table 711 is a table that manages various types of data for identifying users who perform identity verification using biometric authentication. For example, the account number and credit number of each user are stored.

  The CPU 703 controls the biometric authentication server 70 as a whole, and performs processing related to verification of biometric authentication results and information processing related to provision of a predetermined service using biometric authentication based on a program stored in the memory 702.

  An initialization flow of biometric authentication processing will be described with reference to FIG.

  The mobile terminal 10 establishes a communication connection between the biometric authentication server 70 and the image processing server 60 (S101, S102).

  The mobile terminal 10 establishes a communication connection with the image processing server 60, and then performs mutual authentication for confirming the mutual validity between the biometric authentication module 20 and the image processing server 60, and subsequent encryption communication. A control command is transmitted to the biometric authentication module 20 and the image processing server 60 so as to share the image processing work key to be used (S103).

The biometric authentication module 20 and the image processing server 60 perform mutual authentication processing when receiving a control command from the mobile terminal 10. The mutual authentication process is performed by, for example, a challenge / response authentication method using a random number encrypted with the image processing master key 210.

  If the authentication processing is successful, the image processing server 60 and the biometric authentication module 20 perform image processing work key sharing processing using the image processing master keys 610 and 210 and different data such as random numbers each time. For example, the biometric authentication module 20 generates an image processing work key using the image processing master key 210 and a random number, encrypts the generated image processing work key with the image processing master key 210, and the mobile terminal 10, the wireless base station 40, etc. To the image processing server 60. Upon receiving the encrypted image processing work key, the image processing server 60 decrypts it with the image processing master key 610. Thereby, the image processing server 60 can share the image processing work key generated by the biometric authentication module 20.

  Thus, in this example, since the image processing work key is generated without performing the encryption process using the image processing master key itself, and the encryption process is performed using this work key, the image processing master key is The risk of leakage can be reduced. In addition, since the image processing work key is temporary key data generated every time a communication connection is established, security can be improved compared to the case where encryption processing is performed using the same key data. .

  In addition, when the image processing master key corresponding to the biometric authentication module 20 and the image processing server 60 is not stored, the image processing work key is not shared and the encryption communication fails. For this reason, the mutual authentication may be performed by confirming that encryption communication using the image processing work key does not fail (correct encryption / decryption) without performing mutual authentication in advance.

  Next, the portable terminal 10 and the image processing server 60 and the IC chip 30 perform mutual authentication and a collation processing work key sharing process used in subsequent cryptographic communication between the image processing server 60 and the IC chip 30. A control command is transmitted to 30 (S104).

When the IC chip 30 and the image processing server 60 receive a control command from the portable terminal 10, they perform mutual authentication processing. The mutual authentication process is performed by, for example, a challenge / response authentication method using a random number encrypted with the verification process master key 312.

  If mutual authentication is successful, the image processing server 60 and the IC chip 30 perform collation processing work key sharing processing using collation processing master keys 312 and 612 and different data such as random numbers each time. In the collation process work key sharing process, as in the image processing work key sharing process, one apparatus encrypts and transmits the generated collation process work key using the collation process master key, and the other apparatus It may be shared by decrypting using the verification processing master key, or may be shared using other methods.

  Similar to the encryption processing using the image processing work key, security can be improved by using the generated verification processing work key. Further, when the verification processing master key corresponding to the IC chip 30 and the image processing server 60 is not stored, the verification processing work key is not shared and the encryption communication fails, so the mutual authentication processing is omitted. You may do it.

  After processing S103 and S104, biometric authentication processing is performed (S105).

  Note that FIG. 2 is an example, and the processing order of S101 and S102, and S103 and S104 may be changed and executed.

  Next, a detailed flow of the biometric authentication process (S105) will be described with reference to FIG.

  First, biometric image data of a user is acquired using the biometric authentication module 20 (S201). For example, a finger vein or a fingerprint is photographed, and the obtained biometric image data is temporarily stored in the memory 202. Next, the CPU 205 encrypts the biometric image data stored in the memory 202 using the image processing work key shared with the image processing server 60, and outputs it to the portable terminal 10 via the communication unit 201 (S202).

  The portable terminal 10 transmits the biological image data received by the communication unit 101 to the image processing server 60 via the wireless communication unit 103 (S203).

  The image processing server 60 acquires biometric image data via the communication unit 601. Since this data is encrypted by the biometric authentication module 20, the CPU 603 decrypts it using the image processing work key shared with the biometric authentication module 20 (S204). The CPU 603 generates a biological information pattern by performing predetermined image processing on the decoded biological image data (S205). Then, the CPU 603 encrypts the generated biometric information pattern using the collation processing work key shared with the IC chip 30 and transmits it to the portable terminal 10 via the communication unit 601 (S206).

  The portable terminal 10 transmits the biometric information pattern received via the wireless communication unit 103 to the IC chip 30 via the communication unit 102 (S207). The CPU 303 temporarily stores the biometric information pattern acquired via the communication unit 301 in the memory 302 and then decrypts it using the image processing work key shared with the image processing server 60 (S208).

  The CPU 303 performs collation processing using the decrypted biometric information pattern and the biometric registration pattern 310 stored in advance in the memory 302 (S209). The collation process calculates the similarity or disagreement between two patterns using a specific algorithm, and compares the calculation result with a preset reference value (threshold value). It is determined whether it is a thing. The CPU 303 generates a message including the collation determination result and the user information 311 and generates a digital signature for the generated message using the signature generation key 313 (S210). Then, the message including the collation determination result and the user information 311 and the digital signature are output to the mobile terminal 10 via the communication unit 301 (S211). Here, the digital signature is generated using a public key cryptosystem such as RSA cryptography. Alternatively, a common key cryptosystem may be used, and a MAC (Message Authentication Code) that is an authentication code for detecting unauthorized tampering may be used as a digital signature.

  When the portable terminal 10 receives information such as the collation determination result from the IC chip 30, it transmits the received information to the biometric authentication server 70 via the wireless communication unit 103 together with request information for requesting provision of a predetermined service (S212). .

  When receiving the information from the mobile terminal 10, the biometric authentication server 70 confirms the user information 311 and verifies the digital signature. The user information 311 is confirmed by confirming that the user information 311 is included in the user information table 711. The verification of the digital signature is performed by performing predetermined calculation processing or encryption processing using the signature verification key 710 on a part of the message including the collation determination result and the user information 311 and predetermined calculation on the digital signature. If the results of the process or the cryptographic process using the signature verification key 710 match, it is determined that the verification of the digital signature is successful. If it is determined that the user information 311 has been successfully verified and the digital signature has been verified, the corresponding user is determined to be valid, and a predetermined information processing service (such as payment processing) is provided to the mobile terminal 10. .

  It is necessary to take security measures to prevent data related to biometric authentication from leaking outside. For this reason, it is conceivable to perform processing in the IC chip 30 with high security, but there is a problem that the processing load becomes large and the authentication processing takes time. In particular, image processing for generating a biometric information pattern from biometric image data uses a lot of complicated arithmetic processing, and therefore requires a larger processing load than other processing performed by biometric authentication, and requires a lot of memory.

  In this example, paying attention to this point, as described above, since processing such as collation processing is performed in the IC chip 30 and image processing is performed in the image processing server 60, the processing load on the IC chip 30 is reduced. Security can be ensured. In addition, the biometric authentication module 20 does not perform image processing for generating a biometric information pattern, but only performs imaging and encryption processing of biometric image data. Therefore, the size of the memory 202 may not be large, and the CPU 205 High image processing performance is not necessary. Therefore, the biometric authentication module 20 can be realized with a simple configuration, and it is possible to reduce the component cost of the mobile terminal without lowering the security.

  In the example of FIG. 1, both the image processing master key and the verification processing master key are stored in the image processing server 60. Therefore, as shown in FIG. 2, it is necessary to perform device authentication and work key sharing processing using a public line via the communication network 50 such as the Internet and the wireless base station 40 twice in S102 and S103. Therefore, in order to reduce the risk of using a public line, for example, as shown in FIG. 4, only the verification processing master key 612 is stored in the memory 602 of the image processing server 60, and the image processing master key 610 is stored in the IC. It is desirable to store in the memory 302 of the chip 30. As a result, as shown in the example of FIG. 5, S303, which is an image processing work key sharing process, can be performed by communication within the mobile terminal 10, and security can be improved.

  In the case of the example of FIG. 5, the IC chip 30 encrypts the image processing work key generated in S303 using the collation processing work key generated in S104, and transmits it to the portable terminal 10 (S306). The portable terminal 10 transmits the encrypted image processing work key to the image processing server 60 (S307). The image processing server 60 decrypts the received image processing work key with the collation processing work key (S308).

  In the above processing flow, the biometric authentication module 20 performs image processing work key sharing processing with the IC chip 30, and the IC chip 30 encrypts and transmits the image processing work key to the image processing server 60. In addition, since the image processing work key sharing process performed between the biometric authentication module 20 and the IC chip 30 can be performed before the communication with the image processing server 60 is started, the time required for the biometric authentication process is reduced. It becomes possible to shorten.

  In the above example, only one mobile terminal is shown in the system. However, the present invention is not limited to this, and a plurality of mobile terminals may be included. In this case, the image processing server 60 and the biometric authentication server 70 communicate with a plurality of portable terminals and execute processing requested by each portable terminal.

DESCRIPTION OF SYMBOLS 10 Mobile terminal 20 Biometric module 30 IC chip 40 Wireless base station 50 Communication network 60 Image processing server 70 Biometric authentication server 101 Communication part
102 communication unit 103 wireless communication unit 104 user input unit 105 user output unit
106 Memory 107 Mobile terminal control unit
201 Communication unit
202 memory
203 Light source
204 Image sensor
205 CPU
301 Communication unit
302 Memory 303 CPU

Claims (7)

A biometric authentication system having a mobile terminal, an IC chip, and an image processing server,
The portable terminal includes a photographing unit that captures biometric image data of a user, a first communication unit that communicates with the image processing server via a wireless base station, a mounting unit that mounts the IC chip, Second communication means for transmitting and receiving data to and from the IC chip attached to the attachment means,
The IC chip includes a first memory that preliminarily stores a biometric information pattern used for authentication, a third communication unit that communicates with the second communication unit, and biometric information stored in the first memory. Processing means for performing a matching process using the pattern and data received by the third communication means,
The image processing server generates a biometric information pattern obtained by extracting a feature amount from biometric image data received by the fourth communication unit and the fourth communication unit that communicate with the mobile terminal via a radio base station. Generating means,
When the biological image data of the user of the portable terminal is captured by the imaging unit, the biological image data is transmitted to the image processing server by the first communication unit,
When the biometric image data transmitted from the portable terminal is received by the fourth communication unit, the image processing server generates a biometric information pattern by the generation unit using the received biometric image data, and the fourth processing unit Transmitting the biological information pattern generated by the communication means to the portable terminal;
When the portable terminal receives the biological information pattern by the first communication unit, the portable terminal transmits the biological information pattern to the IC chip by the second communication unit,
When the IC chip receives the biometric information pattern by the third communication unit, the IC chip uses the biometric information pattern stored in the first memory and the biometric information pattern received by the third communication unit. A biometric authentication system characterized in that a verification process is performed by a means, and a result of the verification process by the processing means is transmitted to the portable terminal by the third communication means. A biometric authentication system having a portable terminal, a first information processing server, and a second information processing server,
The portable terminal includes a first semiconductor element that captures biometric image data of a user, a memory that stores a biometric information pattern obtained by extracting feature values from the biometric image data by predetermined image processing, and a biometric stored in the memory. A second semiconductor element having a processing means for performing a matching process using the information pattern,
The first information processing server receives biological image data captured by the first semiconductor element, performs predetermined image processing on the received biological image data, generates a biological information pattern, and generates the generated biological information Transmitting an information pattern to the second semiconductor element;
The second semiconductor element performs collation processing related to biometric authentication by using the received biometric information pattern and the biometric information pattern stored in the memory, and calculates a collation determination result by the processing unit. Transmitting the determination result to the second information processing server;
The biometric authentication system, wherein the second information processing server provides a predetermined service to the mobile terminal based on the received collation determination result. The first semiconductor element shares a first work key for encrypting data with the first information processing server, and uses the first work key for captured biometric image data. Encrypted
The biometric authentication system according to claim 2, wherein the first information processing server receives biometric image data encrypted with the first work key.   The second semiconductor element shares a second work key for encrypting data with the first information processing server, and uses the second work key for the received biometric information pattern. The biometric authentication system according to claim 2, wherein the biometric authentication system is decrypted. A portable terminal capable of wireless communication with an information processing server that performs image processing,
A first semiconductor element for capturing biometric image data of a user;
A memory for storing a biometric information pattern obtained by extracting feature values from the biometric image data by predetermined image processing, and a second semiconductor element having a processing unit for performing a matching process using the biometric information pattern stored in the memory. Prepared,
Transmitting biological image data photographed using the first semiconductor element to the information processing server;
When a biometric information pattern is received from the information processing server, a portable terminal that performs verification processing related to biometric authentication using the second semiconductor element.   The first semiconductor element shares a first work key for encrypting data with the information processing server, and encrypts the biometric image data using the first work key. The portable terminal according to claim 5, wherein the portable terminal performs external output.   The second semiconductor element shares a second work key for encrypting data with the information processing server, and decrypts the received biometric information pattern using the second work key. The mobile terminal according to claim 5, wherein:

Images