JP2011253326A - Biometric authentication server, and biometric authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a biometric authentication server with authentication accuracy secured while suppressing an increase of processing time.SOLUTION: In a registrant DB 23, for each registrant and for each of a plurality of fingers, biological information of each finger and registrant information including type classification of the biological information of each finger is stored. A biometric authentication server 2 accepts input of the biological information read from any finger of a user by an ATM 3. The biometric authentication server 2 also directs to the ATM 3 the finger whose biological information is read. The biometric authentication server 2 determines the type classification of the biological information received from the ATM 3 and narrows registrants and obtains the corresponding registrants from among registrants whose registrant information is stored in the registrant DB 23. And the biometric authentication server 2 authenticates the user by verifying the biological information of the user with the biological information of each narrowed registrant when the number of narrowed registrants becomes equal to or less than a predetermined number.

Description

  The present invention relates to a biometric authentication server that authenticates a user by biometric authentication using biometric information of a user's finger, and a biometric authentication system to which the biometric authentication server is applied.

  Conventionally, biometric authentication has been used in various fields. As is well known, biometric authentication is to authenticate whether an authentication target is a registrant using biometric information such as finger veins, fingerprints, palm prints, and irises. Specifically, the biometric information read from the person to be authenticated is compared with the biometric information of the registered registrant, and whether or not the person to be authenticated is the registrant is authenticated based on the similarity. The registrant has registered biometric information.

  For example, in a financial institution, at the time of a transaction with an automatic teller machine (hereinafter referred to as ATM), authentication by biometric authentication is performed to determine whether the user (authenticated person) is the account opener (registrant himself). It is carried out. Specifically, the biometric information of a registrant recorded on a cash card (hereinafter simply referred to as a card) is compared with the biometric information read by the user, and the user is the account opener. Whether you are authenticating.

  In recent years, there has been a demand for the development of an ATM that can perform transaction processing without using a medium such as a card for the purpose of improving the convenience of the user. For example, Patent Document 1 describes a configuration in which a transaction target account is specified and a user is authenticated by biometric authentication. The biometric information of the registrant who is the account opener is registered in the center.

JP 2007-323116 A

  However, when a transaction target account is specified only by biometric information, the biometric information of the user must be collated with the biometric information of all registrants registered in the center. On the other hand, many financial institutions have millions to tens of millions of opened accounts. Therefore, it takes a lot of time to match the biometric information of users with the biometric information of millions to tens of millions of registrants and specify the account (account for transaction) opened by the user. In short, there is a problem that the convenience for the user is lowered.

  In addition, the increase in the number of persons (registrants) who collate biometric information increases the acceptance rate of others in biometric authentication (rate of authenticating others as registrants). If the similarity of the biometric information that authenticates that the person is the registrant is increased in order to suppress this other person acceptance rate, the person exclusion rate (rate that authenticates the person who is not the registrant) increases. That is, it becomes difficult to ensure sufficient authentication accuracy.

  An object of the present invention is to provide a biometric authentication server that ensures authentication accuracy and suppresses an increase in processing time.

  Moreover, this invention is providing the transaction processing system to which this biometrics server is applied.

  The biometric authentication server of the present invention is configured as follows in order to solve the above-described problems and achieve the object.

  In this configuration, the storage unit stores, for each registrant, registrant information including the biometric information of each finger and the type classification of the biometric information of each finger for a plurality of fingers of the registrant. The biometric information of the finger is a known finger vein or fingerprint. The type classification classifies the biological information into about several types (for example, about three types) according to its shape and the like. The biometric information receiving means accepts input of biometric information read from any finger of the user on which the biometric information reading unit is placed. Further, the instructing unit instructs the biometric information reading unit about the type of finger that reads the biometric information.

  The type classification narrowing means instructs the biometric information reading unit to specify the type of finger for reading the biometric information by the instruction means, and determines the type classification of the biometric information received from the biometric information reading unit by the biometric information receiving means. The storage means narrows down corresponding registrants from the registrants storing the registrant information. That is, the corresponding registrants are narrowed down by the type classification of the biometric information. Then, the authentication means repeats the type classification narrowing means one or more times, and when the number of registrants narrowed down is equal to or less than a predetermined number, the narrowed registrants are stored in the storage means. The biometric information is compared with the biometric information of the user received from the biometric information reading unit by the biometric information receiving means, and the user is authenticated.

  In this way, the corresponding registrants are narrowed down according to the type classification of the biometric information, and only the registrants who have been narrowed down authenticate the user by collating the biometric information, so that it is possible to ensure authentication accuracy and processing time Can be shortened.

  In addition, since the instruction unit instructs the biological information reading unit to specify the type of finger that reads the biological information, the user places the specified type of finger on the biological information reading unit in accordance with this instruction. Just do it. Therefore, the user's operation does not become complicated, and it is not necessary for the user to memorize the order of fingers that cause the biological information reading unit to read the biological information.

  Further, if the number of registered registrants does not become equal to or less than the predetermined number even if the type classification narrowing means is repeated a predetermined number of times, it is stored in the storage means for each registrant narrowed down at this time. It is good also as a structure which authenticates the said biometric information by collating the biometric information with the biometric information of the user which the biometric information reception means received from the said biometric information reading unit. Thereby, the type classification narrowing means is not repeated indefinitely.

  Further, the registrants may be divided into a plurality of groups, registrant information is stored in the storage means, and the registrants belonging to the group designated by the narrowing means may be narrowed down. In this case, the user may input the group to which the user belongs at the time of authentication.

  Further, the biometric information reading order determining means is configured so that the type classification narrowing means is changed to the biometric information reading unit by the instruction means based on the number of persons by type in each finger of the registrant whose storage means stores the registrant information. On the other hand, the order of the fingers for reading the biometric information to be instructed may be determined.

  In this case, the order of the fingers that read the biometric information that the type classification narrowing means instructs to the biometric information reading unit with the instruction means may be the order that is arranged from the finger with the smallest maximum number of people by type classification.

  Further, if the registrant is divided into a plurality of groups and the registrant information is stored in the storage means, the biometric information that the type classification narrowing means instructs the biometric information reading unit by the instruction means for each group. What is necessary is just to determine the order of the finger which reads.

  According to the present invention, authentication accuracy in biometric authentication can be ensured and an increase in processing time can be suppressed.

It is the schematic which shows the structure of a transaction processing system. It is a block diagram which shows the structure of the principal part of a biometric authentication server. It is a figure which shows a registrant database. It is a figure which shows registrant information. It is a figure which shows the classification pattern of a finger vein. It is a figure which shows the structure of the principal part of ATM. It is a flowchart which shows operation | movement of a biometric information registration terminal. It is a flowchart which shows operation | movement of a biometrics authentication server. It is a flowchart which shows operation | movement of ATM. It is a flowchart which shows operation | movement of a biometrics authentication server. It is a figure which shows the example of a display screen of ATM. It is a figure which shows the example of a display screen of ATM. It is a figure which shows the example of a display screen of ATM. It is a figure which shows the example of a display screen of ATM. It is a figure which shows the example of a display screen of ATM.

  Hereinafter, a biometric authentication server according to an embodiment of the present invention and a biometric authentication system to which the biometric authentication server is applied will be described.

  Here, a transaction processing system that processes various transactions such as a deposit transaction and a withdrawal transaction for an account opened in a financial institution will be described as an example.

  FIG. 1 is a schematic diagram showing a configuration of a transaction processing system to which a biometric authentication system according to an embodiment of the present invention is applied. This transaction processing system is a system for processing various transactions such as a deposit transaction and a withdrawal transaction for an account opened in a financial institution. The transaction processing system includes a host device 1, a biometric authentication server 2, an automatic teller machine 3 (hereinafter referred to as ATM 3), and a biometric information registration terminal 4.

  The host device 1 manages an account opened in a financial institution. The biometric authentication server 2 authenticates the user of ATM3. The biometric information registration terminal 4 registers registrant information including the biometric information of the user (account opener) to the biometric authentication server 2. Here, a person who registers registrant information in the biometric authentication server 2 is referred to as a registrant. In other words, a person who has not registered registrant information in the biometric authentication server 2 is an unregistered person even if it is an account opener. Details of the registrant information will be described later. The ATM 3 processes various transactions such as a deposit transaction and a withdrawal transaction for an opened account in accordance with a user input operation.

  Note that the registrant can perform various transactions such as a deposit transaction and a withdrawal transaction for an account established in ATM 3 without using a medium such as a cash card (hereinafter simply referred to as a card) or a bankbook. Regardless of whether you are a registrant or an unregistered person, you can perform various transactions such as deposit transactions and withdrawal transactions for accounts opened at ATM3 by authentication with a known PIN using a card or passbook. . Since transaction processing using a medium such as a card or a passbook is well known, a description thereof is omitted here.

  The host device 1 and the biometric authentication server 2 are installed at the center of a financial institution. The ATM 3 and the biometric information registration terminal 4 are installed in a financial institution store or the like. The host device 1, the biometric authentication server 2, the ATM 3, and the biometric information registration terminal 4 are connected to be communicable with each other via a network (a dedicated line, a LAN, or the like).

  Note that a plurality of ATMs 3 and biometric information registration terminals 4 are connected to the host device 1 and the biometric authentication server 2, respectively. FIG. 1 illustrates one ATM 3 and one biometric information registration terminal 4.

  In this transaction processing system, as described above, a user who is a registrant can perform various transactions for an account opened by himself without using a medium such as a card or a passbook at ATM3. Specifically, the biometric authentication server 2 authenticates that the user of the ATM 3 is a registered person through biometric authentication. The biometric authentication server 2 specifies the account number of the authenticated user (registrant). A user of ATM 3 can make various transactions with the account of the account number specified by the biometric authentication server 2.

  In addition, about the transaction processing by the user of ATM3 which the biometrics authentication server 2 authenticated, the host apparatus 1 processes the transaction determined to be possible for transaction while judging the possibility of the transaction similarly to a well-known system.

  For each account opened in a financial institution, the host device 1 has a personal identification number, an account number, the name of the account holder, the address of the account holder, the phone number of the account holder, a transaction history for the account, a current account Store account management information including balance. The host device 1 manages each account with account management information related to the account. Since account management in the host device 1 is well known, detailed description is omitted here. Further, the host device 1 uses the account management information to determine whether or not a transaction is requested for the transaction requested from the ATM 3 or the like, and processes the transaction determined to be possible.

  FIG. 2 is a block diagram showing the configuration of the main part of the biometric authentication server. The biometric authentication server 2 authenticates whether or not the user of the ATM 3 is a registrant by biometric authentication. Further, for a user who has been authenticated as a registrant, an account opened by the user is specified.

  The biometric authentication server 2 includes a control unit 21, an authentication unit 22, a registrant database 23 (hereinafter referred to as registrant DB 23), and a communication unit 24. The control unit 21 controls the operation of each part of the biometric authentication server 2 main body. The authentication part 22 authenticates whether the user of ATM3 is a registrant. The user authentication referred to here is a process of specifying an account opened by the user based on the user's biometric information (here, finger vein).

  FIG. 3 is a diagram illustrating the configuration of the registrant DB. The registrant DB 23 manages registrants in groups. Grouping is done by the registrant's PIN. That is, users with the same personal identification number belong to the same group. FIG. 3 illustrates a group 1 with a password 1234, a group 2 with a password 5468, and a group N with a password 7634. This personal identification number is a four-digit number, and may be the personal identification number input at the time of card transaction at the well-known ATM3, or may be a number separately determined by the registrant.

  The registrant DB 23 registers, for each group, the registrant information of each registrant belonging to the group and the placement order of the finger determined for the group.

  As shown in FIG. 4, the registrant information includes an account number, an account holder name, a right index finger classification pattern, a right middle finger classification pattern, a right ring finger classification pattern, a left index finger classification pattern, and a left middle finger classification pattern. The left ring finger classification pattern, the right middle finger finger vein data, the right ring finger finger vein data, the left index finger finger vein data, the left middle finger finger vein data, and the left ring finger finger vein data. Each registrant registers finger vein data and classification patterns for the six fingers of the right hand index finger, right hand middle finger, right hand ring finger, left hand index finger, left hand middle finger, and left hand ring finger. The finger vein data is data indicating the user's finger vein read by the finger vein reading unit. The classification pattern is a code (A, B, or C) that indicates the classification pattern that the finger vein of the user is most similar among a plurality of predetermined classification patterns. Here, there are three types of classification patterns: pattern A, pattern B, and pattern C shown in FIG. Pattern A is a vein pattern that descends to the right. Pattern B is a substantially straight vein pattern. Pattern C is a vein pattern that descends to the left.

  Also, the finger placement order is determined according to the variation in the number of people in the classification pattern of each finger of the registrant belonging to the group. The process for determining the finger placement order will be described later.

  The communication unit 24 controls communication with the host device 1, ATM 3, biometric information registration terminal 4, and the like.

  FIG. 6 is a diagram showing the configuration of the main part of the ATM. The ATM 3 includes a main control unit 31, a display / operation unit 32, a bill processing unit 33, a coin processing unit 34, a card / detail processing unit 35, a passbook processing unit 36, a biological information reading unit 37, And a communication unit 38. The main control unit 31 controls the operation of each part of the ATM3 main body.

  The display / operation unit 32 includes a display provided on the front surface of the main body, a touch panel pasted on the screen of the display, and the like. The display / operation unit 32 displays an operation guidance screen for the user on the display. In addition, the display / operation unit 32 detects a user's input operation related to a personal identification number and transaction details (transaction type, deposit / withdrawal amount, etc.) by detecting the pressed position of the touch panel.

  The banknote processing unit 33 processes the deposit / withdrawal banknote. A bill deposit / withdrawal port for storing deposit / withdrawal bills is provided on the front of the main body. The banknote deposit / withdrawal port is provided with a shutter. Moreover, the banknote depositing / withdrawing port is provided with a partition plate for distinguishing storage locations of deposited banknotes, withdrawn banknotes, and returned banknotes. The banknote processing unit 33 restricts the insertion and removal of banknotes from the banknote deposit / withdrawal port by opening and closing the shutter.

  The coin processing unit 34 conveys coins along a coin conveyance path formed between a coin deposit / withdrawal port provided on the front surface of the main body and a coin cartridge housed inside the main body. Moreover, the coin process part 34 has a coin identification part which identifies a money type and authenticity for every coin currently conveyed along a coin conveyance path.

  The card / detail processing unit 35 takes in the card inserted in the card insertion slot provided on the front of the main body, and stores the card information (financial institution number, store number, account number, etc.) recorded in the magnetic stripe of this card. Read or rewrite card information. If the inserted card is an IC card, the data recorded on the IC chip of the card is read or rewritten as necessary. Further, the card / detail processing unit 35 includes a printing unit that prints transaction contents on the specification. The card / specification processing unit 35 discharges the specification printed with the transaction contents to the specification discharge port provided on the front face of the main body.

  The passbook processing unit 36 has a printing unit (not shown) that takes in a passbook inserted into a passbook insertion port provided on the front of the main body and prints a transaction history with respect to the passbook. In addition, the passbook processing unit 36 is recorded on a page turning mechanism for turning over the page of the imported passbook, a bar code reader for reading a bar code indicating a page number printed on the passbook, and a magnetic stripe attached to the passbook. It also has a magnetic head or the like that reads the bankbook information (financial institution number, store number, account number, etc.).

  The biometric information reading unit 37 has a finger vein reading unit (not shown) provided on the front surface of the main body. The finger vein reading unit reads the finger vein from the placed user's finger. Furthermore, the communication unit 38 controls communication with the host device 1, the biometric authentication server 2, the biometric information registration terminal 4, and the like.

  The biometric information registration terminal 4 is an information processing apparatus configured by a personal computer, and is connected to a finger vein reading unit that reads a user's finger vein as biometric information.

  Next, the operation of this transaction processing system will be described.

  First, processing related to registration of registrant information in the biometric authentication server 2 will be described. By registering the registrant information in the biometric authentication server 2, the user can perform various transactions at the ATM 3 without using a medium such as a passbook or a card. In other words, a user who has not registered the registrant information in the biometric authentication server 2 cannot perform various transactions using the ATM 3 without using a medium such as a passbook or a card.

  The user performs an operation related to registration of registrant information in the biometric authentication server 2 at the biometric information registration terminal 4. This process is performed among the biometric information registration terminal 4, the host device 1, and the biometric authentication server 2. FIG. 7 is a flowchart showing the operation of the biometric information registration terminal. FIG. 8 is a flowchart showing the operation of the biometric authentication server.

  The user performs an input operation related to a registration request for registrant information at the biometric information registration terminal 4. Specifically, an account number and a personal identification number are input, and an input operation related to a registration request for registrant information is performed. The biometric information registration terminal 4 receives an input operation related to a registration request for registrant information (s1), and transmits a registration request for registrant information including the account number and the password received this time to the host device 1 (s2). .

  The host device 1 determines whether the account number and the PIN number included in the registration request transmitted from the biometric information registration terminal 4 are appropriate. Specifically, the host device 1 determines whether an account with the account number included in the registration request transmitted from the biometric information registration terminal 4 has been opened, and if this is an opened account, It is determined using the account management information whether or not the personal identification number included in the transmitted registration request is appropriate. That is, the host device 1 authenticates whether or not the user who operates the biometric information registration terminal 4 that has transmitted the registration request this time is the account opener himself / herself by the personal identification number. When the host device 1 authenticates that the user operating the biometric information registration terminal 4 is the account opener, the host device 1 transmits a registration permission to the biometric information registration terminal 4. On the other hand, if it is not possible to authenticate that the person is an account opener, registration rejection is transmitted to the biometric information registration terminal 4. When transmitting the registration permission to the biometric information registration terminal 4, the host device 1 also transmits the account number, password, and account holder name included in the registration request transmitted this time.

  When receiving the registration permission from the host device 1 (s3), the biometric information registration terminal 4 performs the processing after s4. On the other hand, the biometric information registration terminal 4 ends this process when receiving a registration non-permission from the host device 1.

  When receiving the registration permission from the host device 1, the biometric information registration terminal 4 transmits a registration application for registrant information including the name of the account holder, the account number, and the password to the biometric authentication server 2 (s4).

  When the biometric authentication server 2 receives a registration application for registrant information from the biometric information registration terminal 4 (s11), it returns a finger vein transmission request to the biometric information registration terminal 4 (s12).

  When the biometric information registration terminal 4 receives a finger vein transmission request from the biometric authentication server 2 (s5), the user's right index finger, right middle finger, right middle finger, left index finger, left middle finger, left ring finger, and about the six fingers The finger veins are sequentially read (s6). As described above, the finger vein reading unit is connected to the biometric information registration terminal 4. The user places the right index finger, the right middle finger, the right ring finger, the left index finger, the left middle finger, and the left ring finger in this order in the finger vein reading unit, and reads the finger vein of each finger. The biometric information registration terminal 4 transmits the finger veins of the read user's six fingers (right index finger, right middle finger, right ring finger, left index finger, left middle finger, left ring finger) to the biometric authentication server 2 (s7).

  When receiving the finger vein of each finger of the user from the biometric information registration terminal 4 (s13), the biometric authentication server 2 determines the finger vein classification pattern for each finger of the user (s14). In s14, it is determined whether the finger vein classification pattern of each finger is the pattern A, B, or C shown in FIG.

  The biometric authentication server 2 creates registrant information shown in FIG. 4 (s15). In s15, the name of the account holder received in s11, the account number, and the personal identification number, the finger vein of each finger of the user received from the biometric information registration terminal 4 in s13, and each finger of the user determined in s14 Create registrant information including classification patterns. The biometric authentication server 2 determines the group to which the user belongs based on the personal identification number received in s11 (s16), and adds the registrant information created in s15 to the group (s17). In s17, the registrant information created this time is additionally registered in the corresponding group registered in the registrant DB 23 (the group determined in s16). The biometric authentication server 2 notifies the biometric information registration terminal 4 of the registration completion of the registrant information (s18).

  When receiving the registration completion (s8), the biometric information registration terminal 4 ends this process.

  On the other hand, the biometric authentication server 2 notifies the biometric information registration terminal 4 of the registration completion of the registrant information in s18, and then updates the placement order of the fingers on the group to which the registrant information is added this time (s19). ), This process is terminated.

  In s19, the number of persons in each classification pattern is calculated for each finger for all registrants (registrants having the same personal identification number) registered in the group (the group to which registrant information is added this time). That is, for each of the six fingers of the right index finger, right middle finger, right ring finger, left index finger, left middle finger, and left ring finger, the number of pattern A, the number of pattern B, and the number of pattern C for each registrant belonging to the group. Is calculated.

  An example in which there are 27 registrants belonging to the group is shown below.

Right index finger-Pattern A: 16 people, Pattern B: 3 people, Pattern C: 8 people Middle right finger-Pattern A: 13 people, Pattern B: 10 people, Pattern C: 4 people Right ring finger-Pattern A: 4 people, Pattern B: 14 people, Pattern C: 9 people Left index finger-Pattern A: 18 people, Pattern B: 1 person, Pattern C: 8 people Middle left finger-Pattern A: 10 people, Pattern B: 13 people, Pattern C: 4 people Left ring finger-Pattern A: 5 people, Pattern B: 12 people, Pattern C: 10 people Next, the biometric authentication server 2 extracts a classification pattern having the maximum number of people for each finger and the number of people. In the above example,
Right index finger-Pattern A: 16 people Middle right finger-Pattern A: 13 people Right ring finger-Pattern B: 14 people Left index finger-Pattern A: 18 people Middle left finger-Pattern B: 13 people Left ring finger-Pattern B: Extract 12 people To do.

The biometric authentication server 2 updates the order of the fingers with a small number of people extracted here as the finger placement order. In the above example,
The order of left ring finger → right middle finger → left middle finger → right ring finger → right index finger → left index finger is updated as the placement order of the fingers.

  For the fingers with the same number of people, the placement order may be determined according to a predetermined condition. For example, when the number of people is the same, the finger placement order is determined giving priority to the right hand. If the fingers are the same, the priority order is the index finger, middle finger, and ring finger. This condition is appropriately determined and is not particularly limited to the condition shown here.

  Next, transaction processing in ATM3 will be described. In this ATM3, the user can perform various transactions such as a deposit transaction and a withdrawal transaction using a card and a passbook as in the past. Since transaction processing using a card or a passbook is well known, description thereof is omitted here.

  Hereinafter, transaction processing when the user does not use a medium such as a card or a passbook will be described. FIG. 9 is a flowchart showing the operation of ATM. FIG. 10 is a flowchart showing the operation of the biometric authentication server.

  The user selects the type of transaction using the display / operation unit 32 of the ATM 3. The ATM 3 displays a guidance screen shown in FIG. 11 on the display / operation unit 32. When the type of transaction is selected by the user (s31), the ATM 3 displays the password input screen shown in FIG. 12 on the display / operation unit 32 (s32). The user inputs the personal identification number according to this guidance. The ATM 3 transmits the input password to the biometric authentication server 2 (s33, s34).

  When receiving the personal identification number from the ATM 3 (s51), the biometric authentication server 2 sets the corresponding personal identification number group registered in the registrant DB 23 as an authentication target group (s52). For example, in the example shown in FIG. 3, when the password transmitted from ATM 3 is “1234”, group 1 is set as the authentication target group, and the password transmitted from ATM 3 is “7634”. If it is, the group N is set as the authentication target group. In this way, the biometric authentication server 2 narrows down corresponding registrants based on the password.

  The biometric authentication server 2 reads the placement order of the fingers associated with the authentication target group set in s52 (s53). The biometric authentication server 2 sets the value N of the counter that counts the number of fingers that have read the biometric information to 1 (s54). The biometric authentication server 2 instructs the ATM 3 to read the biometric information related to the type of finger whose placement order is Nth (s55).

  When the ATM 3 receives an instruction to read biometric information from the biometric authentication server 2 (s35), the biometric information reading unit 37 reads the biometric information of the type of finger designated this time (s36). At this time. The ATM 3 displays the guidance screen shown in FIG. 13 on the display / operation unit 32 and informs the user of the type of finger that causes the user to read the finger vein, that is, the type of finger placed on the biological information reading unit 37. The user places the instructed finger on the finger vein reading unit of the biological information reading unit 37 according to the guidance screen. The ATM 3 transmits the finger vein read by the finger vein reading unit to the biometric authentication server 2 (s37).

  When receiving the finger vein transmitted from the ATM 3 (s56), the biometric authentication server 2 determines the finger vein classification pattern (s57). Based on the determined classification pattern, the biometric authentication server 2 further narrows down the corresponding registrants from the registrants belonging to the authentication target group set in s52 (s58). In addition, the biometric authentication server 2 increments the value N of the counter that counts the number of fingers that have read the biometric information by one (s59).

  The biometric authentication server 2 determines whether or not the number of registrants narrowed down in s58 is equal to or smaller than a predetermined number (s60). The biometric authentication server 2 determines whether or not N has reached a predetermined value (for example, N = 4) if the number of people narrowed down is not less than the predetermined number (s61). If the biometric authentication server 2 determines that N has not reached the predetermined value in s61, it returns to s55 and repeats the above-described processing.

  In this way, the biometric authentication server 2 repeats the determination based on the finger vein classification pattern and narrows down the registrants.

  Further, when the biometric authentication server 2 determines that the number of registrants narrowed down in s60 is equal to or less than the predetermined number, or determines that N has reached a predetermined value in s61, the placement order Is returned to the ATM 3 to read the biometric information relating to the Nth type of finger (s62). The process related to s62 is the same as the process related to s55.

  Every time the ATM 3 receives a biometric information reading instruction from the biometric authentication server 2 in s35, it repeats the processes in s36 and s37 described above.

  When the biometric authentication server 2 receives the finger vein transmitted from the ATM 3 in s63, the biometric authentication server 2 compares the finger vein received this time for each registrant narrowed down at this time, and performs an authentication process for identifying the user of the ATM 3 (S64). In s64, the registrant whose similarity with the finger vein data received this time is equal to or greater than a predetermined value and the maximum is authenticated as a user. Further, if there is no registrant whose similarity to the finger vein received this time is equal to or greater than a predetermined value, it is authenticated that the user is not an appropriate user (not a registrant).

  The biometric authentication server 2 transmits the authentication result in s64 to the ATM 3 (s65), and ends this process. When the biometric authentication server 2 can authenticate that the user of the ATM 3 is any registrant, the biometric authentication server 2 transmits an authentication result including the name and account number of the registrant to the ATM 3.

  When the ATM 3 receives the authentication result from the biometric authentication server 2 (s38), the ATM 3 displays the authentication result on the display / operation unit 32 (s39). When the ATM 3 is authenticated as one of the registrants, the display / operation unit 32 displays the guidance screen shown in FIG. 14 to notify the user that the authentication has been successful. On the other hand, if the user is not authenticated even if it is any registrant, the display / operation unit 32 displays the guidance screen shown in FIG. 15 to notify the user that the authentication has failed and perform this processing. Exit.

  When the authentication with the biometric authentication server 2 is successful, the ATM 3 notifies the host device 1 of the account number, user name, password, etc. notified from the biometric authentication server 2 (s40, s41). . Thereafter, transaction processing is performed between the ATM 3 and the host device 1. The transaction process between the ATM 3 and the host apparatus 1 is the same process as when a medium such as a known card is used, and thus the description thereof is omitted here.

  In this way, ATM3 users can make transactions with established accounts without using a medium such as a card or bankbook.

  In addition, since the number of registrants who actually collate biometric information is narrowed down using a personal identification number or finger vein classification pattern, an increase in processing time can be suppressed, and sufficient authentication accuracy can be secured.

  Further, in the narrowing down of the number of registrants who actually collate biometric information using the finger vein classification pattern, the order of the types of fingers used is the above-described order, so that the narrowing down can be performed efficiently.

  Further, since the processing related to s61 described above is provided, narrowing down by the finger vein classification pattern is not continued indefinitely.

  Note that the present invention is applicable not only to the transaction processing system of the financial institution described above, but also to any system that authenticates the person to be authenticated using biometric information. Further, instead of the finger vein, a fingerprint may be used as biometric information.

DESCRIPTION OF SYMBOLS 1 ... Host apparatus 2 ... Biometric authentication server 3 ... ATM (automated teller machine)
4 ... biometric information registration terminal 21 ... control unit 22 ... authentication unit 23 ... registrant DB (registrant database)
DESCRIPTION OF SYMBOLS 24 ... Communication part 31 ... Main control part 32 ... Operation part 33 ... Banknote processing part 34 ... Coin processing part 35 ... Specification processing part 36 ... Passbook processing part 37 ... Biometric information reading part 38 ... Communication part

Claims (7)

For each registrant, storage means for storing registrant information including the biometric information of each finger and the type classification of the biometric information of each finger for the plurality of fingers of the registrant;
A biometric information receiving unit that receives input of biometric information read from any finger of the placed user by the biometric information reading unit;
Instructing means for instructing the biometric information reading unit the type of finger that reads biometric information;
The instruction means instructs the biological information reading unit of the type of a finger to read the biological information, the biological information receiving means determines the type classification of the biological information received from the biological information reading unit, and the storage means Type classification narrowing means for narrowing down the corresponding registrant from among the registrants that store registrant information,
The type classification narrowing means is repeated one or more times, and when the number of registrants narrowed down is equal to or less than a predetermined number, biometric information stored in the storage means is stored for each narrowed registrant. A biometric authentication server comprising: authentication means for authenticating the user by comparing the biometric information receiving means with the biometric information of the user received from the biometric information reading unit.   Even if the authentication means repeats the type classification narrowing means a predetermined number of times, if the number of registrants who have narrowed down is not less than or equal to the predetermined number of persons, The biometric authentication server according to claim 1, wherein the biometric information stored in the storage unit is compared with the biometric information of the user received by the biometric information receiving unit from the biometric information reading unit, and the user is authenticated. . The storage means divides registrants into a plurality of groups, stores registrant information,
The biometric authentication server according to claim 1, wherein the narrowing down means narrows down registrants belonging to a specified group.   The biometric information that the type classification narrowing unit instructs the biometric information reading unit by the instruction unit based on the number of people by type in each finger of the registrant in which the storage unit stores the registrant information. The biometric authentication server according to claim 1, further comprising biometric information reading order determining means for determining the order of fingers to read the information.   For each group in which the storage unit stores registrant information, the type classification narrowing unit uses the instruction unit to read the biometric information based on the number of registrants belonging to the group by the number of types in each finger. The biometric authentication server according to claim 3, comprising biometric information reading order determining means for determining the order of fingers for reading biometric information instructed to the unit.   The biometric information reading order determining means arranges the order of the fingers that read the biometric information that the type classification narrowing means instructs the biometric information reading unit by the instruction means from the fingers with the smallest maximum number by type classification. The biometric authentication server according to claim 1, which is in order. An authentication device including a biometric information reading unit that reads biometric information from a placed user's finger; and
For each registrant, storage means for storing registrant information including the biometric information of each finger and the type classification of the biometric information of each finger for the plurality of fingers of the registrant;
A biometric information receiving unit that receives input of biometric information read from any finger of the placed user by the biometric information reading unit;
Instructing means for instructing the biometric information reading unit the type of finger that reads biometric information;
The instruction means instructs the biological information reading unit of the type of a finger to read the biological information, the biological information receiving means determines the type classification of the biological information received from the biological information reading unit, and the storage means Type classification narrowing means for narrowing down the corresponding registrant from among the registrants that store registrant information,
The type classification narrowing means is repeated one or more times, and when the number of registrants narrowed down is equal to or less than a predetermined number, biometric information stored in the storage means is stored for each narrowed registrant. A biometric authentication server comprising: authentication means for authenticating the user by comparing the biometric information receiving means with the biometric information of the user received from the biometric information reading unit;
A biometric authentication system.

Images