JP2012238126A - Ic card with fingerprint authentication - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an IC card with fingerprint authentication for protecting the authorized owner of an IC card without imposing any labor on a troublesome operation.SOLUTION: The IC card with fingerprint authentication including a fingerprint reading sensor 7 is configured to accumulate a power to be supplied from a reader in an electricity accumulation circuit 11, and to monitor the output voltage of the electricity accumulation circuit 11 by a voltage detection circuit 12, and to, when the output voltage reaches a predetermined value, discharge electricity to a CMPU 4 for device control and an AMPU 6 for fingerprint processing, and to execute fingerprint authentication, and to, only when it is confirmed that the owner of the IC card is authorized according as fingerprint authentication is successful, enable transmission/reception between itself and the reader, and to disable transmission/reception between itself and the reader after the lapse of an authentication exemption time, and to turn off the discharge of electricity to the CMPU 4 for device control and the AMPU 6 for fingerprint processing.

Description

  The present invention is widely used for settlement of bank cards, credit cards, electronic money cards, transportation pass cards for restricting boarding / exiting with high value-added functions, etc., as well as employee keys with car keys and key functions. The present invention also relates to an IC card with fingerprint authentication that is used as a transaction means or an access control means on a daily basis.

  IC cards that are carried by the person on a daily basis as a means of settlement, transaction, and access control increase in added value due to an increase in services, while confirming whether the owner is a legitimate person (who has authority to use) In addition to the confirmation / certification method based on having the IC card, the determination method is limited to providing a signature, providing a personal identification number, confirming a face photo printed on the card, and the like. Under these circumstances, a battery is installed in the IC card, a password required to access a specific site via the Internet is calculated in the card, and a display is provided to display it on the card. The “one-time password card” has started to be put into practical use (Non-patent Document 1). In the case of this “one-time password card”, since it is a technology related to authentication between a terminal on the Internet and a server, it can be expected to be used only within a limited range. As for illegal use of IC cards, which have become more widespread, there is a newly forged card in which a personal information including the personal information in the card and a personal identification number can be easily read by a third party using a technique called “skimming”. There are many crimes that are illegally used. In connection with this “skimming”, the damage caused by a malicious third party “spoofing” a legitimate owner has become serious.

  From the request for countermeasures against “skimming” and “spoofing”, the invention of an IC card with a fingerprint authentication function equipped with a fingerprint sensor is disclosed in “Patent Document 1”. In the present invention, an IC card protection method invention against an unauthorized reader is disclosed as a countermeasure against “skimming” in particular, but for users who are expected to occur when using the IC card with fingerprint authentication. There is no specific description regarding the consideration for the increase in the operational burden, that is, convenience.

On the other hand, according to “Non-Patent Document 2” as an example of presentation at the prototype stage, a swipe-type (rubbed finger) fingerprint line sensor is mounted on a card shape having a thickness of 2 mm. However, when this line sensor type fingerprint reading sensor is used in an IC card, it is necessary to hold the card with one hand and rub one finger of the other hand against the sensor. The convenience that the IC card can be used simply by holding the IC card and placing it on a predetermined reader is greatly impaired. Moreover, it is designed to require the user to press a switch provided on the card at the start of fingerprint authentication, that is, at the start of fingerprint reading, and the operation of the user is extremely complicated.

Japanese Patent Application 2008-300003 JP 49-40825

"One-time password card" example http://www.dnp.co.jp/news/1228918_2482.html “Prototype of IC card with fingerprint authentication with line sensor” http://www.validustech.com/index.cfm

  In order to protect the legitimate owner of an IC card from the damage caused by a malicious third party “spoofing” the legitimate owner, the IC card is equipped with a fingerprint identity verification function and a new identity verification It is intended to realize an operation in which the IC card can be operated with only one hand and the use of the service can be received as in the conventional usage method without causing troublesome operation burden for the user due to the installation of the function. .

  In view of the above circumstances, the present invention is an IC card with fingerprint authentication which operates by transmitting power to and from a reader by supplying electric power through electromagnetic induction from a magnetic field generated by the reader. Is equipped with a fingerprint reading sensor, and further controls a device control CMPU for controlling transmission and reception with a reader, fingerprint authentication of a read fingerprint, fingerprint processing AMPU exempted from fingerprint authentication for a predetermined time after successful fingerprint authentication, and storage A voltage detection circuit for monitoring an output voltage from the circuit and the storage circuit, storing the supplied power with the storage circuit, monitoring an output voltage of the storage circuit with the voltage detection circuit, and the output voltage being a predetermined value At the time of reaching the above, the device control CMPU and the fingerprint processing AMPU are discharged, fingerprint authentication is performed, and only when it is confirmed that the device is a legitimate owner by successful fingerprint authentication, The transmission / reception is enabled, the transmission / reception with the reader is disabled after the authentication exemption time has elapsed, and the discharge to the device control CMPU and the fingerprint processing AMPU is turned off. An IC card with fingerprint authentication is proposed.

Specifically, a flat sensor for reading a fingerprint is mounted at an eccentric position on the surface of the IC card, that is, a position where a finger can be held and the card is held, and a finger corresponding to the fingerprint to be read by the flat sensor is placed. The IC card is placed and held in contact with a predetermined non-contact IC card reader, and power is supplied through electromagnetic induction by the magnetic field generated by the reader, and power is supplied to the storage circuit provided in the IC card. The output voltage indicating the storage capacity is monitored by the voltage detection circuit, and when the output voltage is confirmed to reach the predetermined voltage value, the fingerprint of the finger placed on the fingerprint sensor is automatically Starts scanning and automatically enables (validates) the functions for the available services of the IC card after identity verification is completed by collation with the registered fingerprint information concealed in the IC card. To starts measuring the exemption from authentication time, after automatically disable the function for exempted time after the service defined (disabled), the control MPU to the standby state (OFF state). Non-contact type IC that can automatically execute the processing cycle when the IC card approaches the magnetic field of the card reader again by the storage circuit and the voltage detection circuit connected to the antenna coil mounted on the IC card. The card is provided.

In the present invention, in the case of a contact type IC card having external terminals (8 terminals) mounted on the surface of the IC card, the IC card is inserted into a reader in the same manner, and power is supplied through two contacts in the 8 terminals. After receiving the supply and automatically reading the fingerprint of the finger placed on the fingerprint sensor and completing a series of authentication operations, the function for the available service of the IC card is enabled. After the internal storage circuit or rechargeable battery has reached a certain capacity sufficient to measure the exemption time for authentication, the IC card is enabled after the function for the available service is enabled. Can be taken out from the reader, start measuring the exemption time, and automatically disable (disable) the IC card function after the specified exemption time elapses There is provided a contact type IC card.

  According to the present invention, by mounting a personal identification function using a fingerprint on an IC card, the malicious owner can protect the legitimate owner of the IC card from damage caused by “spoofing” the legitimate owner. At the same time, it is possible to operate the IC card with only one hand and receive the use of the service without worrying about the trouble for the user due to the installation of a new identity verification function.

FIG. 1 is a perspective view showing a non-contact IC card equipped with a fingerprint reading sensor of the present invention. FIG. 2 is a block diagram of a non-contact IC card equipped with the fingerprint reading sensor of the present invention. FIG. 3 is a block diagram of a commonly used CMPU 4 4 (a), 4 (b), 4 (c), and 4 (d) are diagrams between the card reader 30 in the non-contact IC card, the storage circuit / voltage detection circuit 13, CMPU 4 and AMPU 6 according to the embodiment of the present invention. Flow chart showing state transition, (e) is a graph showing changes in the detection voltage value of the voltage detection circuit in (a) FIG. 5 is a perspective view showing a contact IC card and a card reader equipped with the fingerprint reading sensor of the present invention.

  An IC card with fingerprint authentication operating by supplying power via electromagnetic induction from a magnetic field generated by a reader and thereby transmitting and receiving to and from the reader, the IC card comprising a fingerprint reading sensor; CMPU for device control for controlling transmission / reception with a reader, fingerprint authentication of a read fingerprint, fingerprint processing AMPU exempted from fingerprint authentication for a predetermined time after successful fingerprint authentication, a storage circuit, and an output voltage from the storage circuit A voltage detection circuit for monitoring the power supply, storing the supplied power in the power storage circuit, monitoring the output voltage of the power storage circuit with the voltage detection circuit, and for controlling the device when the output voltage reaches a predetermined value. Discharge to CMPU and fingerprint processing AMPU, perform fingerprint authentication, and enable transmission / reception to / from reader only when it is confirmed that it is a valid owner by successful fingerprint authentication In both cases, the IC card with fingerprint authentication is characterized in that transmission / reception with the reader is disabled after the authentication exemption time has elapsed, and discharge to the device control CMPU and fingerprint processing AMPU is turned off. .

A method for realizing an IC card with fingerprint authentication according to the present invention and its principle will be described below with reference to the drawings.
FIG. 1 shows a state where the right thumb is placed on the fingerprint reading sensor 7 provided in the IC card 1 so that the fingerprint can be read and the IC card 1 is held between the index finger of the same right hand. FIG. In FIG. 1, an IC card with fingerprint authentication according to the present invention includes an antenna coil 2 mounted on a normal non-contact IC card, an external terminal (hereinafter referred to as 8 terminals) 3, a CMPU for IC card control processing ( Card Micro Processor Unit) 4, an indicator 5 indicating the state of the IC card, and a processor (hereinafter referred to as AMPU) 6 responsible for fingerprint authentication processing control. Also, in the ISO 7816 international standard, as shown in the figure, the width of 54 mm, the vertical length of 85.6 mm, and the thickness of 0.8 mm are defined as the dimensions of the IC card.

  In the IC card with fingerprint authentication according to the present invention, for example, the IC card is sandwiched between the thumb and forefinger, and the thumb fingerprint is automatically read while being held with only the right hand and being applied to a predetermined card reader. The service can be used after confirming the identity by fingerprint authentication and confirming that the user is not the owner himself / herself. As a means for this, the attachment position of the fingerprint reading sensor 7 is arranged at an eccentric position shifted from the center of the IC card. In other words, when holding the IC card between two fingers, in the case of a small hand, depending on the position of the sensor, it may occur that the end of the card hits and it may be difficult to apply the finger to the sensor. It is clear from the previous card dimensions. On the other hand, as a merit of placing the fingerprint reading sensor IC in the eccentric position, there is a requirement regarding the strength of the IC card, and the predetermined “dynamic bending strength of the IC card” (JIS X 6305 / 6.1), “dynamic twist” When considering "characteristics" (JIS X 6305 / 6.2) and "characteristics against warping" (JIS X 6301 / 8.11), the maximum bending stress occurs on the center line or on the diagonal near the center, and the IC at that position It is easy to avoid the chip being detached from the card body or cracking. (See “Patent Document 2”)

Next, for example, according to the present invention, a means for automatically reading the fingerprint of the thumb, confirming the identity by fingerprint authentication, and enabling the use of the service after confirming the identity of the owner without making the user aware of it. The configuration of the IC card with fingerprint authentication will be described with reference to FIG.
The CMPU 4 in FIG. 2 is directly connected to the antenna coil 2 as shown in FIG. 1, and transmits and receives data between the card reader and the IC card from the magnetic field generated by the card reader through electromagnetic induction electromotive force. I do. FIG. 3 shows a block diagram of a general non-contact IC card. Inductive electromotive force is generated by an RF interface 58 and an RF-UART (Universal Asynchronous Receiver Transmitter) 57, and is in charge of rectification, modulation, demodulation, and amplification. Here, it should be noted that the control CPU 56 that controls the CMPU 4 operates with a DC power source supplied from the outside other than that generated by electromagnetic induction electromotive force from the magnetic field generated from the card reader.

  Returning to FIG. 2, the power source is stored in the power storage circuit 11 from the antenna coil 2, the stored power is monitored by the voltage detection circuit 12, and after reaching a predetermined power value, the AMPU 6 and CMPU 4 are started. “Startup” here may be a return operation from a state of being in a power saving mode (so-called sleep mode) instead of ON / OFF.

  4A, 4B, 4C and 4D, a flow chart showing the state transition of the card reader 30, the storage circuit / voltage detection circuit 13, CMPU 4 and AMPU 6 and the power consumption in the IC card, that is, the voltage value of the voltage detection circuit. This will be described in more detail with reference to FIG. When the IC card is applied to a card reader 30 that generates a magnetic field, electric power is supplied by electromagnetic induction and power storage in the power storage circuit 11 begins 14. The voltage detection circuit 12 that monitors the output voltage from the storage circuit 15 turns on the switch that discharges the power stored in the storage circuit to the CMPU 4 and AMPU 6 when the output voltage reaches a predetermined value, and starts discharging. Each is activated (16).

  The activated CMPU 4 does not execute data transmission / reception processing with the card reader that is normally performed, and remains in a command waiting state from the AMPU 6 (40).

  On the other hand, the activated AMPU 6 reads the fingerprint of the finger placed on the fingerprint reading sensor 7 (62), extracts feature information of the thumb fingerprint from the fingerprint image collected by the AMPU 6, and extracts the feature information and the inside of the AMPU 6 The fingerprint collation (63) is performed to compare with the registered fingerprint data (42) of the IC card owner that is concealed by the user. When the fingerprint collation 63 confirms that the IC card is a legitimate IC card owner, the AMPU 6 transmits 65 an enable command for permitting data transmission / reception with the card reader 30 to the CMPU 4. In response to this enable command, the CMPU 4 starts data transmission / reception (32) with the card reader 30 in order to provide a service which is an original function of the IC card. One AMPU 6 starts an authentication exemption time measurement operation (66) immediately after sending an enable command to the CMPU 4 (65). The value of this authentication exemption time also has a different value depending on the type of IC card or the type of service used, so it may be kept secret in the AMPU 6.

  As seen in FIG. 4e in which the state transition inside the IC card with fingerprint authentication described above corresponds to the change in power consumption, that is, the change in the value of the detection voltage monitored by the voltage detection circuit 12, AMPU 6 and CMPU 4 are in the standby mode (OFF In the state), power storage in the power storage circuit proceeds and the detection voltage of the voltage detection circuit increases. When this voltage value reaches the reference value V0, AMPU 6 and CMPU 4 are activated, so that power is released from the power storage circuit, and the detection voltage starts to drop according to the amount of power.

The time at this time is indicated by T1. When the fingerprint authentication processing (62, 63) in the AMPU 6 is completed, an enable command is transmitted from the AMPU 6 to the CMPU 4 (65), and data transmission / reception (32) between the card reader 30 and the CMPU 4 starts, the detection voltage drops. Increases further.
On the other hand, the AMPU 6 performs a measurement process of an exemption time for authentication with a small processing load.

When this exemption time has passed, AMPU 6 sends a disable command to CMPU 4 (67), the discharge switch from the storage circuit is turned OFF (68), the processing of the two MPUs is stopped, and the drop in the detection voltage stops. . Since the power storage proceeds from this time shown as T2, the detection voltage starts to rise again. It should be noted that the detection voltage decreases during the T1 and T2 processing cycles, but the storage circuit continues to be charged during this time.

When the identity verification determination process 64 fails, the discharge switch from the power storage circuit is quickly turned OFF (68), the processing of the two MPUs 4 and AMPU 6 is stopped and enters a standby state (OFF state). Return to process (15). In this case, since the voltage drop also stops at a stage before time T2, the next processing cycle starts earlier. Of course, the reference voltage V0 corresponding to the power consumption allowed up to a plurality of identity verification actions may be set in consideration of the case where one fingerprint reading fails due to unforeseen reasons.

Here, the power storage circuit 11 is roughly composed of a rectifier circuit and a power storage device. By using a super capacitor (or an electric double layer capacitor) or the like as the power storage device, the processing cycle can be realized in a few seconds. The reference value V0 used in the voltage detection circuit 12 is calculated from the value obtained by empirically obtaining in advance the power consumed in the processing cycle of the IC card with fingerprint authentication. A secondary battery or a disposable primary battery may be used as the power storage circuit.

In the case of the contact type IC card 1, as shown in FIG. 5, two of the eight terminals 3 are also defined in the international standard of ISO 7816 for power supply. That is, in the case of the contact IC card 1, since power is supplied when it is inserted into a predetermined card reader, the action of inserting / removing into / from the card reader plays a role of the fingerprint authentication switch operation. .

However, even in the case of the contact IC card 1, it is necessary to manage the state of power storage in the power storage circuit by the voltage detection circuit. In other words, the counter function for measuring the time for exemption of authentication at the time when the contact IC card is permitted to be removed from the card reader and the power for the control processing related thereto are required. In practice, the power for this is negligible. Therefore, in the case of a contact type IC card, a secondary battery or a disposable primary battery may be used as a power storage circuit.

  According to the present invention, a legitimate owner of an IC card can be protected from damage caused by a malicious third party “spoofing” a legitimate owner, and the use of having a personal identification function is provided. The user can operate the IC card with only one hand as in the conventional usage method, and can receive the service without causing troublesome operation burden for the user.

DESCRIPTION OF SYMBOLS 1 ... Non-contact IC card of this invention 2 ... Antenna coil 3 ... External terminal (8 terminals)
4 ... CMPU
5 ... Indicator 6 ... AMPU
7. Fingerprint reading sensor IC
DESCRIPTION OF SYMBOLS 11 ... Power storage circuit 12 ... Voltage detection circuit 51 ... Dedicated ROM in CMPU
52. User ROM and RAM in CMPU
53 ... Cryptographic processing module 54 in the CMPU ... EEPROM in the CMPU
55... I / O device 56 in the CMPU... CPU for controlling the CMPU
57 ... RFUART in CMPU
58 ... RF interface V0 in CMPU ... Reference voltage T1 of voltage detection circuit ... Time when detection voltage value of voltage detection circuit reaches reference value T2 ... Time when CMPU and AMPU enter standby state (OFF state)

Claims (8)

  An IC card with fingerprint authentication operating by supplying power via electromagnetic induction from a magnetic field generated by a reader and thereby transmitting and receiving to and from the reader, the IC card comprising a fingerprint reading sensor; CMPU for device control for controlling transmission / reception with a reader, fingerprint authentication of a read fingerprint, fingerprint processing AMPU exempted from fingerprint authentication for a predetermined time after successful fingerprint authentication, a storage circuit, and an output voltage from the storage circuit A voltage detection circuit for monitoring the power supply, storing the supplied power in the power storage circuit, monitoring the output voltage of the power storage circuit with the voltage detection circuit, and for controlling the device when the output voltage reaches a predetermined value. Discharge to CMPU and fingerprint processing AMPU, perform fingerprint authentication, and enable transmission / reception to / from reader only when it is confirmed that it is a valid owner by successful fingerprint authentication In both cases, the IC card with fingerprint authentication is characterized in that transmission / reception with the reader is disabled after the authentication exemption time has elapsed, and discharge to the device control CMPU and fingerprint processing AMPU is turned off. . 2. The fingerprint authentication according to claim 1, wherein the storage circuit includes a rectifier circuit, and the voltage detection circuit is configured by combining a comparator circuit and a switching circuit between the output voltage from the storage circuit and a predetermined voltage value (reference voltage). IC card. When there is no power supply necessary for driving an internal voltage detection circuit and no power supply from an IC card reader, the power supply is received from a battery provided in the IC card. Item 1. An IC card with fingerprint authentication according to item 1. A rechargeable secondary battery is mounted without mounting a disposable primary battery whose use period is limited as a battery in claim 3, and the secondary battery can be charged from a reader. Item 1. An IC card with fingerprint authentication according to item 1. 5. With fingerprint authentication according to claim 1, wherein the secondary battery according to claim 4 can be charged from an external terminal (8 terminals) provided in a normal contact IC card or a dedicated power supply terminal. IC card.   When the IC card is a contact IC card, the contact IC card is inserted into a predetermined reader, supplied with power from an external terminal (8 terminals) provided in the IC card, and provided in the IC card. Accumulating electricity in the electricity storage circuit and automatically reading the fingerprint of the finger placed on the fingerprint sensor, and comparing the read fingerprint information with the fingerprint information of the cardholder concealed inside the IC card After confirming that the power storage circuit provided inside the IC card has reached a predetermined capacity sufficient to measure the exemption time for authentication, enable the function for the available services of the IC card. (Valid), the IC card can be taken out from the reader, and after being taken out from the reader, switching to power supply from the power storage circuit is made and the IC card is used after the exemption time has elapsed. Fingerprint authentication with IC card, characterized in that it automatically disables the function for possible service (disabled).   7. The fingerprint authentication according to claim 1, wherein the fingerprint sensor is a flat sensor in order to automatically read a fingerprint of a finger placed on the fingerprint sensor. IC card. The IC card with fingerprint authentication according to any one of claims 1 to 6, wherein a fingerprint sensor is mounted at an eccentric position where the finger is placed so that the IC card is held between fingers and the fingerprint of the finger can be read.

Images