JP2016143281A - Biometric authentication system and biometric authentication method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To achieve a biometric authentication technology capable of reducing an other person acceptance ratio while reducing an identical person rejection ratio.SOLUTION: An information acquisition device 20 is configured to acquire biological information changing with time of a user 2 as detection biological information, and to periodically transmit the detection biological information as well as identification information to an information management device 40, and to, when communicating with an authentication device 30, transmit the current detection biological information as well as the identification information. The information management device 40 is configured to generate biological information for collation including information indicating the secular change of the detection biological information on the basis of the received detection biological information. The authentication device 30 is configured to, when receiving the detection biological information and the identification information from the information acquisition device 20, receive the biological information for collation associated with the received identification information from the information management device 40, and to collate the detection biological information received from the information acquisition device 20 with the biological information for collation received from the information management device 40 for performing personal authentication.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a biometric authentication system and a biometric authentication method for performing personal authentication using biometric information of a user.

  As a biometric authentication system as described above, one described in JP2013-244292A (Patent Document 1) is known. In Patent Document 1, in order to solve the problem that the accuracy of authentication decreases when performing personal authentication using biometric information that tends to change over time, it is difficult to be subject to changes over time such as body fat mass and muscle mass. A technique for performing personal authentication using biometric information is described.

JP2013-244292A (paragraphs 0004-0009 etc.)

  However, in the technique described in Patent Document 1, when the user who has registered biometric information and the user who is the subject of biometric authentication are the same person, the probability that personal authentication is not established (personal rejection rate) is calculated. Although it can be reduced, it is not easy to reduce the probability (other person acceptance rate) of erroneously authenticating a user having biometric information similar to the registered biometric information as the user.

  Therefore, it is desired to realize a biometric authentication technique that can reduce the false acceptance rate while reducing the false rejection rate.

  In view of the above, the characteristic configuration of the biometric authentication system that performs the personal authentication using the biometric information of the user includes a biometric sensor, an information acquisition device that is worn or carried by the user, and the information acquisition device directly. An authentication device capable of communication; and an information management device capable of communicating with the information acquisition device and the authentication device via a communication network, wherein the information acquisition device uses the biometric sensor and Is obtained as detected biometric information, and the detected biometric information is periodically transmitted to the information management apparatus together with identification information, and is acquired using the biometric sensor when communicating with the authentication apparatus. The present detected biometric information is transmitted to the authentication device together with the identification information, and the information management device is configured to transmit the previous detected biometric information based on the detected biometric information received from the information acquisition device. Generating verification biometric information including information representing a change in detected biometric information over time, managing the biometric information in association with the detected biometric information that is generated from the verification biometric information, and managing the authentication biometric information; When receiving the detected biometric information and the identification information from the information acquisition apparatus, the apparatus communicates with the information management apparatus and associates the biometric information for verification associated with the identification information received from the information acquisition apparatus Is received from the information management device, and the personal authentication is performed by comparing the detected biometric information received from the information acquisition device with the biometric information for verification received from the information management device.

  The technical features of the biometric authentication system in view of the above are also applicable to a biometric authentication method, and such a method is also disclosed in the present specification.

  In that case, the characteristic configuration of the biometric authentication method includes a biometric sensor, an information acquisition device that is worn or carried by a user, an authentication device that can directly communicate with the information acquisition device, and the information via a communication network. In a biometric authentication system comprising an acquisition device and an information management device communicable with the authentication device, a biometric authentication method for performing personal authentication using the biometric information of the user, wherein the information acquisition device A first transmission step of acquiring biometric information that changes over time of the user as detected biometric information using a biometric sensor, and periodically transmitting the detected biometric information together with identification information to the information management device; Based on the detected biometric information received from the information acquisition device, the management device generates biometric information for verification including information representing a change over time of the detected biometric information, A storage step of storing the biometric information for collation in association with the identification information received together with the detected biometric information, and the current detection biometric acquired by the information acquisition device using the biometric sensor A second transmission step of transmitting information to the authentication device together with the identification information; and when the authentication device receives the detected biometric information and the identification information from the information acquisition device, communicates with the information management device. The biometric information for collation associated with the identification information received from the information acquisition device is received from the information management device, the detected biometric information received from the information acquisition device, and the information received from the information management device And an authentication step for performing the personal authentication by comparing biometric information for verification.

According to these characteristic configurations, the verification biometric information that is collated with the current detection biometric information of the user when performing personal authentication includes the detection biometric information of the user that is periodically transmitted to the information management device. Information representing the change over time of the detected biological information generated based on the information is included. Therefore, although the detected biometric information used for personal authentication is biometric information that changes over time, the identity rejection rate can be reduced by performing personal authentication using information on temporal changes included in the biometric information for verification. Can be achieved. In addition, even if there is another person with similar biological information at a certain moment, it is unlikely that there is another person who is similar to the change of biological information. By performing authentication, it is possible to reduce the acceptance rate of others.
As described above, according to the above-described characteristic configuration, it is possible to realize a biometric authentication technique capable of reducing the false acceptance rate while reducing the false rejection rate.

It is a schematic diagram which shows the concept of the biometric authentication system which concerns on embodiment of this invention. 1 is a block diagram showing a schematic configuration of a biometric authentication system according to an embodiment of the present invention. It is a figure which shows the example of the change of the index value contained in each of biometric information for collation, and detection biometric information. It is a flowchart which shows a part of procedure of the biometrics authentication process which concerns on embodiment of this invention. It is a flowchart which shows another one part procedure of the biometrics authentication process which concerns on embodiment of this invention.

  An embodiment of a biometric authentication system according to the present invention will be described with reference to the drawings. Here, as shown in FIG. 1, a case where the biometric authentication system according to the present invention is applied to a biometric authentication system for a vehicle that authenticates the user 2 of the vehicle 3 will be described as an example. That is, in the biometric authentication system 1 according to the present embodiment, the user 2 (authentication target person) is a user (driver, owner, etc.) of the vehicle 3, and the use target by the user 2 is the vehicle 3. It is. Then, on the condition that the personal authentication of the user 2 is established, for example, the door lock or unlocking of the vehicle 3 is performed, or the operation for driving the vehicle 3 (for example, starting of the internal combustion engine) is performed. Allowed.

1. Configuration of Biometric Authentication System The biometric authentication system 1 is a system that performs personal authentication using the biometric information of the user 2. As shown in FIGS. 1 and 2, the biometric authentication system 1 includes an information acquisition device 20, an authentication device 30, and an information management device 40. The authentication device 30 is configured to be able to directly communicate with the information acquisition device 20, and the information management device 40 is configured to be able to communicate with the information acquisition device 20 and the authentication device 30 via the communication network 4 (for example, the Internet). . The information management device 40 functions as a server or a cloud server. The “apparatus” is not limited to one integrated hardware, and one “apparatus” may be configured by a plurality of hardware that can communicate with each other and are separated from each other. For example, as will be described later, the information acquisition device 20 includes the first biological sensor 11 and the information transmission unit 28, but the information transmission unit 28 is a device separated from the first biological sensor 11, and the first biological sensor 11. (For example, a portable terminal carried by the user 2). In FIG. 1, the information acquisition device 20 and the authentication device 30 are not shown, but in order to facilitate the understanding of the invention, the reference numeral “20” indicating the information acquisition device is used for mounting or carrying the information acquisition device. The reference numeral “2” indicating the person is enclosed in parentheses, and the reference numeral “30” indicating the authentication apparatus is enclosed in parentheses after the reference numeral “3” indicating the vehicle including the authentication apparatus.

  Each of the information acquisition device 20, the authentication device 30, and the information management device 40 includes one or more arithmetic processing devices such as a CPU (Central Processing Unit), and also includes a RAM (Random Access Memory) and a ROM (Read Only Memory). And a storage device that can be referred to by the arithmetic processing unit. And each apparatus of the information acquisition apparatus 20, the authentication apparatus 30, and the information management apparatus 40 performs the program memorize | stored in the memory | storage device with which each was provided. The plurality of functional units included in the biometric authentication system 1 are divided into an information acquisition device 20, an authentication device 30, and an information management device 40 as shown in FIG. Each functional unit of the biometric authentication system 1 is configured to be able to exchange information with each other by communication via an intra-device communication network, or communication between devices directly or via the communication network 4. In addition, each function unit of the biometric authentication system 1 includes a program stored in a storage device of a device provided with the function unit, hardware such as an arithmetic circuit provided separately in the device provided with the function unit, or Consists of both of them.

  As shown in FIG. 2, the information acquisition device 20 includes a first biological sensor 11. The information acquisition device 20 is worn or carried by the user 2. That is, the information acquisition device 20 is worn by the user 2 as a whole, or is carried by the user 2, or a part of the device (for example, a portion including the first biosensor 11) is used. The remaining part of the apparatus is carried by the user 2 while being worn by the user 2. The first biological sensor 11 is a sensor that detects biological information of the user 2 that changes over time. Here, the “change” is a change according to the biological state of the user 2 such as a health state (physical condition, presence or absence of injury or illness) and a psychological state (mental state). That is, the “change” here means a change in the characteristics of the biological information. For example, when the biological information is waveform information that changes periodically, such as pulse wave information, the feature amount (amplitude and period of the waveform). Etc.). The biological information (detected biological information) to be detected by the first biological sensor 11 is, for example, body temperature, heart rate, pulse rate (or pulse wave), sweating volume, respiratory rate, blood flow volume, blood component (for example, blood glucose level) , White blood cell count, platelet count, salinity concentration, etc.), sweat components (eg, salinity concentration, etc.), and electrocardiogram waveform. The first biological sensor 11 is, for example, a wearable sensor that is always worn on the body (for example, wrist) of the user 2. In the present embodiment, the first biosensor 11 corresponds to a “biosensor” in the present invention.

  The information acquisition device 20 acquires biometric information that changes over time of the user 2 as detected biometric information using the first biometric sensor 11. Then, the information acquisition device 20 periodically transmits the detected biological information together with the identification information to the information management device 40, and when communicating with the authentication device 30, the current acquisition acquired using the first biological sensor 11. The detected biological information is transmitted to the authentication device 30 together with the identification information. That is, as illustrated in FIG. 2, the information acquisition apparatus 20 includes a detection biological information acquisition unit 21 that is a functional unit that acquires detection biological information that is biological information of the user 2 detected by the first biological sensor 11, and information And an information transmission unit 28 which is a functional unit that performs the above communication. The information transmission unit 28 has a function of periodically transmitting the detected biological information together with the identification information to the information management apparatus 40 and a function of transmitting the current detected biological information to the authentication apparatus 30 together with the identification information. Here, “periodic” means repeating at intervals, and is a concept including a case where the occurrence interval is not constant. For example, the interval may be different depending on the communication environment and the usage status of the information acquisition device 20 (the usage status of the wearable device). The “identification information” is information (ID information) unique to the user 2 or the information acquisition device 20 and is information (for example, code information) for identifying the user 2 or the information acquisition device 20. When the information acquisition device 20 is worn or carried by a plurality of users 2, it is preferable that the identification information is information unique to the users 2. It is good also as a structure which performs a part or all communication in the inside of the information acquisition apparatus 20 using the biometric communication which uses the biological body of the user 2 as a communication medium. In the present embodiment, the information transmission unit 28 also has a function of receiving information from external devices such as the information management device 40 and the authentication device 30. And the information transmission part 28 is comprised so that the request information transmitted from the authentication apparatus 30 in order to request | require detection biometric information and identification information may be received. In the present embodiment, the authentication device 30 provided in the vehicle 3 is, for example, when the user 2 performs an operation to open or close the door of the vehicle 3 or the vehicle 3 of the user 2 or the information acquisition device 20. The request information is transmitted to the information acquisition device 20 when the approach to is detected based on the position information or the detection information of the proximity sensor.

  The information transmission unit 28 controls a wireless communication device (not shown) provided in the information acquisition device 20 to communicate with the information management device 40 and the authentication device 30. The information transmission unit 28 may include this wireless communication device. This wireless communication device has a function for performing communication with the information management device 40 via a communication network 4 constructed using, for example, a mobile phone network or a wireless local area network (LAN) (long-distance wireless communication). Function) and a function (short-range wireless communication function) for performing direct communication with the authentication device 30 using, for example, Bluetooth (registered trademark) communication, infrared communication, or the like. For example, the wireless communication device provided in the portable terminal (device constituting the information acquisition device 20) carried by the user 2 can be configured to be a wireless communication device to be controlled by the information transmission unit 28. In this case, a configuration in which the first biosensor 11 is provided in the portable terminal, or a configuration in which a part or all of the functional units of the information acquisition device 20 are provided in the portable terminal in addition to the first biosensor 11 may be employed. it can. When the first biological sensor 11 is a wearable sensor worn by the user 2, a configuration in which a wireless communication device to be controlled by the information transmission unit 28 is provided integrally with the wearable sensor, or the information transmission unit 28. In addition to the wireless communication device to be controlled by the above, a part or all of the functional units of the information acquisition device 20 may be integrated with the wearable sensor.

  In the present embodiment, the biometric authentication system 1 includes a second biometric sensor 12 that is a sensor that detects stable biometric information. The stable biological information is stable biological information that is less changed with time than the biological information (detected biological information) detected by the first biological sensor 11. The biological information (stable biological information) to be detected by the second biological sensor 12 is information such as average body temperature, voiceprint, fingerprint, vein pattern, iris pattern, and the like. These pieces of information are biological information in which changes with time of features can be ignored over a relatively long period of time. Note that the stable biological information is one of a plurality of pieces of information described above as an example of the detected biological information (for example, information on an electrocardiogram waveform) under the condition that the change with time is small compared to the detected biological information. Is also possible. In the present embodiment, the second biological sensor 12 is provided in the information acquisition device 20. For example, the second biological sensor 12 can be a wearable sensor that is worn by the user 2. In addition, the second biosensor 12 may be provided in a mobile terminal that is carried by the user 2. In the present embodiment, the second biosensor 12 corresponds to the “additional biosensor” in the present invention.

  In the present embodiment, the information acquisition device 20 acquires the stable biological information of the user 2 using the second biological sensor 12. That is, as shown in FIG. 2, the information acquisition device 20 includes a stable biological information acquisition unit 22 that is a functional unit that acquires the stable biological information of the user 2 detected by the second biological sensor 12. When communicating with the authentication device 30, the information acquisition device 20 transmits the current stable biological information acquired using the second biological sensor 12 to the authentication device 30 together with the current detected biological information and identification information. . In this example, the information transmission unit 28 transmits the stable biological information together with the detected biological information and the identification information to the authentication device 30.

  Based on the detected biometric information received from the information acquisition device 20, the information management device 40 generates biometric information for verification that includes information representing changes over time in the detected biometric information, and generates the biometric information for verification. It manages in association with the identification information received together with the detected biometric information. That is, as shown in FIG. 2, the information management device 40 includes an information transmitting / receiving unit 48 that is a functional unit that performs information communication, a biometric information generating unit 42 that is a functional unit that generates biometric information for verification, And a biometric information management unit 41 that is a functional unit that manages biometric information for verification. The information transmitting / receiving unit 48 has a function of receiving detected biometric information and identification information from the information acquisition device 20, a function of receiving identification information from the authentication device 30, and biometric information for collation (more stable biometric information in the present embodiment). And a function of transmitting to the authentication device 30. The information transmission / reception unit 48 controls a communication device (not shown) provided in the information management device 40 and performs communication with the information acquisition device 20 and the authentication device 30 via the communication network 4. The information transmitting / receiving unit 48 including this communication device may be used. Further, the information management device 40 includes a storage device 49 for storing the biometric information for verification generated by the biometric information generation unit for verification 42. The storage device 49 includes, as a hardware configuration, a storage medium that can store and rewrite information, such as a hard disk and a flash memory.

  As described above, the information acquisition device 20 periodically transmits the detected biological information together with the identification information to the information management device 40. The transmission timing is, for example, a timing for each predetermined time interval, or a timing set by time. The detected biological information (hereinafter referred to as “one detected biological information data”) transmitted from the information acquisition device 20 to the information management device 40 at each transmission timing includes a period from the previous transmission to the present (hereinafter referred to as “ The detected biological information detected using the first biological sensor 11 is included in the “target period”. Even if the detected biological information data is data within a predetermined period (period included in the target period) including the temporal change of the detected biological information, instantaneous data that does not include the temporal change (that is, It may be detected biological information detected at one point in time within the target period. Even in the latter case, the information acquisition device 20 periodically transmits the detected biological information to the information management device 40, so that the information on the temporal change of the detected biological information is transmitted to the information management device 40. Then, the information management device 40 (verification biometric information generation unit 42) generates verification biometric information including information representing the change over time of the detected biometric information. For example, when the detected biometric information is information whose features are represented by index values, the biometric information for verification is information that represents a change in the index values over time continuously or discretely. The information management apparatus 40 reflects the biometric information for verification so as to reflect at least the content of the detected biometric information received last from the detected biometric information received from the information acquisition apparatus 20 before the generation time of the biometric information for verification. Is generated. Further, even when the information management device 40 generates the verification generation information every time the detection biometric information is received from the information acquisition device 20, the information management device 40 receives the detection biometric information from the information acquisition device 20 a plurality of times. Then, the generation information for verification may be generated.

  The information management apparatus 40 (biological information management unit 41) generates the generated biometric information for verification from the information acquisition apparatus 20 together with the detected biometric information of the generation source (detected biometric information from which the biometric information for verification is generated). The biometric information for verification is managed in association with the identification information by storing it in the storage device 49 in association with the received identification information. In the present embodiment, the information management device 40 is further configured to manage the stable biometric information of the user 2 acquired in advance in association with the identification information. The stable biological information managed by the information management device 40 is the same type of information as the stable biological information to be detected by the second biological sensor 12. The stable biological information managed by the information management device 40 may be stable biological information detected by the second biological sensor 12 or stable biological information detected by a sensor different from the second biological sensor 12. . In the present embodiment, since the second biosensor 12 is provided in the information acquisition device 20, the stable biometric information detected by the second biosensor 12 is transmitted from the information acquisition device 20 to the information management device 40 together with the identification information. The information management apparatus 40 can manage the stable biological information.

  When the authentication device 30 receives the detected biometric information and the identification information from the information acquisition device 20, the authentication device 30 communicates with the information management device 40 to obtain the verification biometric information associated with the identification information received from the information acquisition device 20. Received from the management device 40. Then, the authentication device 30 performs personal authentication by comparing the detected biometric information received from the information acquisition device 20 with the biometric information for verification received from the information management device 40. That is, as shown in FIG. 2, the authentication device 30 includes an information transmitting / receiving unit 38 that is a functional unit that performs information communication, and a biometric information matching unit 31 that is a functional unit that performs personal authentication. The information transmission / reception unit 38 includes a function for receiving detected biometric information and identification information from the information acquisition device 20 and request information for requesting verification biometric information (information including identification information received from the information acquisition device 20). 40 and a function of receiving biometric information for collation (more stable biometric information in the present embodiment) from the information management device 40. The information acquisition device 20 transmits the detected biometric information and the identification information to the authentication device 30 when an authentication start condition that is a condition for starting the personal authentication that is determined in advance is satisfied. In the present embodiment, the authentication start condition is satisfied when the information acquisition device 20 receives from the authentication device 30 request information for requesting detected biometric information and identification information. Further, when the information management device 40 receives the request information for requesting the biometric information for verification from the authentication device 30, the biometric information for verification associated with the identification information included in the request information (in the present embodiment, more stable). Biometric information) is transmitted to the authentication device 30. The information transmission / reception unit 38 controls a wireless communication device (not shown) provided in the authentication device 30 to communicate with the information acquisition device 20 and the information management device 40. The information transmission / reception unit 38 may include this wireless communication device. This wireless communication apparatus has a function for performing communication with the information management apparatus 40 via the communication network 4 (long-distance wireless communication function) and a function for performing direct communication with the information acquisition apparatus 20. (Short-range wireless communication function).

  The biometric information matching unit 31 includes a matching biometric information acquisition unit 32 that is a functional unit that acquires biometric information for verification received by the information transmission / reception unit 38 from the information management device 40, and the information transmission / reception unit 38 receives from the information acquisition device 20. And a detected biological information acquisition unit 33 that is a functional unit for acquiring the detected biological information. Then, the authentication device 30 (biological information collation unit 31) collates the detected biometric information received from the information acquisition device 20 with the biometric information for collation received from the information management device 40 to perform personal authentication. In the present embodiment, the authentication device 30 is provided in the vehicle 3, and the authentication device 30 is an ECU (Electronic Control Unit) or the like when the collation is successful as a result of the collation (when the personal authentication is established). An authentication establishment signal is transmitted to the control device of the vehicle 3. The control device for the vehicle 3 performs, for example, a control for locking or unlocking the door lock of the vehicle 3 on the condition that the authentication establishment signal is received, or an operation for running the vehicle 3 (for example, an internal combustion engine). Control to switch to a state in which the start of the operation is permitted.

  For example, when the authentication device 30 performs personal authentication, the similarity of the tendency of change in index value (change over time) between the same kind of indices included in each of the detected biometric information and the biometric information for verification is Based on at least one of the continuity of the index values, the detected biometric information and the biometric information for collation can be collated. Hereinafter, a specific description will be given with reference to FIG. Each of FIG. 3A and FIG. 3B shows an example of change over time of the same kind of index value included in each of the detected biological information and the matching biological information. The time t1 on the time axis (t) is the end time of the time range in which the index value changes with time by the biometric information for verification, and the time t2 on the time axis (t) is after the time t1. And the start time of the time range in which the index value changes with time by the detected biological information. When the detected biological information is instantaneous data that does not include a change with time, the time t2 is the time when the detected biological information is detected by the first biological sensor 11. The time t2 basically matches the start time of personal authentication.

  In this case, the similarity in the tendency of the change in the index value between the same type of indices included in each of the detected biometric information and the biometric information for verification is the differential coefficient of the index value included in the biometric information for verification at time t1. It can be determined based on the difference between a1 (slope) and the differential coefficient a2 (slope) of the index value included in the detected biological information at time t2. For example, when the absolute value of the difference is equal to or less than a predetermined threshold, it can be determined that the tendency of change in the index value is similar. In addition, the continuity of the index values between the same type of indices included in each of the detected biological information and the matching biological information is the value b1 of the index value included in the matching biological information at time t1, and the detected biological information. Can be determined based on the difference between the index value included in the value b2 at the time t2. For example, when the absolute value of the difference is equal to or less than a predetermined threshold value, it can be determined that the index value is continuous. For example, when it is determined that the change tendency of the index value is similar, it is determined that the matching between the detected biological information and the matching biological information is successful, or the index value is determined to be continuous. Detected when it is determined that the matching between the detected biometric information and the biometric information for verification is successful, or when the index value change trend is similar and the index value is continuous. It can be set as the structure which determines with collation with biometric information and biometric information for collation succeeding.

  In addition, when the difference between the time t1 and the time t2 is such that the temporal change of the detected biological information between the time t1 and the time t2 cannot be ignored, the differential coefficient a1 and the value b1 at the time t1 are not The differential coefficient a1 and the value b1 of the index value at the time t2 are predicted from the information on the temporal change of the index value represented by the biometric information for verification (the tendency of the change before the time t1), and are represented by the detected biological information. It can also be set as the structure compared with the differential coefficient a2 and the value b2 of an index value.

  In the present embodiment, the authentication device 30 acquires the current stable biometric information of the user 2 detected by the second biometric sensor 12 when performing personal authentication, and communicates with the information management device 40 to acquire information. The stable biological information associated with the identification information received from the device 20 is received from the information management device 40. In the present embodiment, the second biological sensor 12 is provided in the information acquisition device 20, and when the information acquisition device 20 communicates with the authentication device 30, in addition to the current detection biological information and identification information, The biometric information is transmitted to the authentication device 30. That is, in this embodiment, the authentication device 30 receives the current stable biometric information from the information acquisition device 20. In the present embodiment, the information management device 40 is configured to also transmit stable biometric information when transmitting the biometric information for verification to the authentication device 30. Then, in addition to the verification of the detected biometric information and the biometric information for verification, the authentication device 30 adds the current stable biometric information of the user 2 detected by the second biometric sensor 12 and the stable biometric received from the information management device 40. Also collates with information. That is, in this embodiment, the biometric information matching unit 31 includes a stable biometric information acquisition unit 34 that acquires stable biometric information in addition to the biometric information acquisition unit 32 and the detection biometric information acquisition unit 33. The stable biological information acquisition unit 34 acquires the stable biological information received by the authentication device 30 from the information management device 40 and the stable biological information received by the authentication device 30 from the information acquisition device 20. Then, the authentication device 30 (biological information matching unit 31) matches the degree of coincidence between the current stable biological information of the user 2 detected by the second biological sensor 12 and the stable biological information received from the information management device 40 (for example, Based on the index value coincidence between the same type of indices), it is determined that the collation is successful when the coincidence is equal to or greater than a predetermined threshold. In the present embodiment, the authentication device 30 successfully collates the detected biometric information received from the information acquisition device 20 with the biometric information for verification received from the information management device 40, and the user detected by the second biosensor 12 If the current stable biometric information of No. 2 and the stable biometric information received from the information management apparatus 40 have been successfully verified, it is determined that the user 2 has been authenticated.

  In addition, when it is set as the structure in which the 1st biological sensor 11 detects multiple types of biological information (detected biological information), or the structure in which the several 1st biological sensor 11 is provided in the information acquisition apparatus 20, the information acquisition apparatus 20 When collating the detected biometric information received from the information management apparatus 40 with the biometric information for verification received from the information management apparatus 40, a plurality of verifications may be performed for each type of detected biometric information. Further, when the detected biological information includes a plurality of types of indices (indexes representing characteristics), when collating the detected biological information received from the information acquisition device 20 with the matching biological information received from the information management device 40, A plurality of collations may be performed for each index included in the detected biological information. When a plurality of collations are performed in this way, it is determined that the collation has succeeded as a whole when the ratio of successful collations for the plurality of collation results and the number of successful collations are equal to or greater than a predetermined threshold. It can be configured. Similarly, the stable biometric information can be configured to perform a plurality of verifications for each type of stable biometric information or to perform a plurality of verifications for each index included in the stable biometric information.

2. Processing Procedure of Biometric Authentication Method Next, a processing procedure of the biometric authentication method executed in the biometric authentication system 1 according to the present embodiment will be described with reference to FIGS. 4 and 5. 4 shows a processing procedure executed by the information acquisition device 20 and the information management device 40, and FIG. 5 shows a processing procedure executed by the authentication device 30.

  As shown in FIG. 4, when the transmission timing of the detected biological information from the information acquisition device 20 to the information management device 40 arrives (step # 01: Yes), the information acquisition device 20 uses the first biological sensor 11. The acquired detected biological information is transmitted to the information management apparatus 40 together with the identification information (step # 02). Thereby, the information management device 40 receives the detected biological information. Note that, as a result of the processing in step # 02 being executed each time a positive determination is made in step # 01, transmission of detected biological information from the information acquisition device 20 to the information management device 40 is performed periodically. In the present embodiment, the processes of steps # 01 to # 02 correspond to the “first transmission step” in the present invention. And the information management apparatus 40 produces | generates the biometric information for collation based on the detection biometric information received from the information acquisition apparatus 20, and it uses the identification information received with the detection biometric information used as the origin which produces | generates the said biometric information for collation. The biometric information for collation is stored in association (step # 03). In the present embodiment, the process of step # 03 corresponds to the “storage step” in the present invention. On the other hand, when the transmission timing of the detected biological information from the information acquisition device 20 to the authentication device 30 arrives (step # 01: No, step # 04: Yes), the information acquisition device 20 acquires the first biological sensor 11. The current detected biometric information is transmitted to the authentication device 30 together with the identification information (step # 05). In the present embodiment, the information acquisition device 20 also transmits the current stable biological information acquired using the second biological sensor 12 to the authentication device 30 in the process of step # 05. In the present embodiment, the timing when the above-described authentication start condition is satisfied is the transmission timing of the detected biometric information from the information acquisition device 20 to the authentication device 30. In the present embodiment, the process of step # 05 corresponds to the “second transmission step” in the present invention.

  As illustrated in FIG. 5, the authentication device 30 communicates with the information management device 40 and receives information from the information acquisition device 20 when the detected biological information and the identification information are received from the information acquisition device 20 (step # 10: Yes). The biometric information for verification associated with the received identification information is received from the information management device 40 (step # 11), the detected biometric information received from the information acquisition device 20, and the biometric information for verification received from the information management device 40 Are verified (step # 12). In the present embodiment, the processes of steps # 10 to # 12 correspond to the “authentication step” in the present invention. In the present embodiment, an affirmative determination is made in step # 10 in FIG. 5 in response to the execution of the process in step # 05 in FIG. In the present embodiment, the authentication device 30 also receives from the information management device 40 stable biological information associated with the identification information received from the information acquisition device 20 in the process of step # 11. In addition, in the processing of step # 12, the authentication device 30 includes the second biosensor 12 in addition to the verification of the detected biometric information received from the information acquisition device 20 and the biometric information for verification received from the information management device 40. The user authentication is also performed by comparing the detected stable biometric information of the user 2 and the stable biometric information received from the information management device 40.

3. Other Embodiments Other embodiments according to the present invention will be described. Note that the configurations disclosed in the following embodiments can be applied in combination with the configurations disclosed in other embodiments as long as no contradiction arises.

(1) In the above embodiment, the configuration in which the information acquisition device 20 includes the second biosensor 12 has been described as an example. However, the embodiment of the present invention is not limited to this, and the second biosensor 12 is provided in a device provided in an object to be used by the user 2 such as the authentication device 30 (the vehicle 3 in the example of the above embodiment). It can also be configured. In this case, the stable biometric information of the user 2 is acquired in advance using the second biometric sensor 12 or the like and registered in the information management device 40, and when performing personal authentication, the second biosensor 12 It can be set as the structure which acquires the user's 2 stable biological information now. Further, the biometric authentication system 1 may be configured not to include the second biometric sensor 12. In this case, the authentication apparatus 30 is configured to authenticate the person only by collating the detected biometric information received from the information acquisition apparatus 20 and the biometric information for verification received from the information management apparatus 40, or received from the information acquisition apparatus 20. In addition to the verification of the detected biometric information and the biometric information for verification received from the information management device 40, it is also possible to perform the personal authentication by verifying information other than the biometric information such as password authentication. In the example of the above-described embodiment, the personal authentication may be performed by collating information other than the biometric information.

(2) In the above embodiment, the case where the biometric authentication system according to the present invention is applied to a biometric authentication system for vehicles has been described as an example. However, the embodiment of the present invention is not limited to this, and the biometric authentication system according to the present invention is applied to a device other than the vehicle 3 that is used by the user 2 (for example, a personal computer, an automatic teller machine of a financial institution). It can also be applied to a biometric authentication system such as a building entrance / exit management device.

(3) The allocation of each function unit of the information acquisition device 20, the authentication device 30, and the information management device 40 shown in the above embodiment is merely an example, and a plurality of function units may be combined or one function It is also possible to further divide the parts.

(4) Regarding other configurations, it should be understood that the embodiments disclosed herein are merely examples in all respects. Accordingly, those skilled in the art can make various modifications as appropriate without departing from the spirit of the present disclosure.

4). Outline of Embodiment of the Present Invention The embodiment of the present invention described above has at least the following configuration.
A biometric authentication system (1) for performing personal authentication using biometric information of a user (2), comprising a biometric sensor (11), and an information acquisition device (20) mounted or carried by the user (2) ), An authentication device (30) capable of directly communicating with the information acquisition device (20), and information management capable of communication with the information acquisition device (20) and the authentication device (30) via a communication network (4) Device (40), wherein the information acquisition device (20) acquires biological information that changes over time of the user (2) as detected biological information using the biological sensor (11), and The detected biometric information is periodically transmitted to the information management device (40) together with the identification information, and when communicating with the authentication device (30), the current detection obtained using the biometric sensor (11) The biometric information is the identification information. And the information management device (40) transmits information representing a change over time of the detected biological information based on the detected biological information received from the information acquisition device (20). The biometric information for verification including is generated and managed in association with the identification information received together with the detected biometric information from which the biometric information for verification is generated. The authentication device (30) When the identification information is received from the information acquisition device (20), the biometric body for verification associated with the identification information received from the information acquisition device (20) by communicating with the information management device (40) The detected biometric information received from the information management device (40) and received from the information acquisition device (20) and the biometric information for verification received from the information management device (40) Matches performs the identity authentication.

According to such a configuration, the biometric information for collation that is collated with the current detected biometric information of the user when performing personal authentication includes the detected biometric information of the user that is periodically transmitted to the information management device. Information representing the change over time of the detected biological information generated based on the information is included. Therefore, although the detected biometric information used for personal authentication is biometric information that changes over time, the identity rejection rate can be reduced by performing personal authentication using information on temporal changes included in the biometric information for verification. Can be achieved. In addition, even if there is another person with similar biological information at a certain moment, it is unlikely that there is another person who is similar to the change of biological information. By performing authentication, it is possible to reduce the acceptance rate of others.
As described above, according to the above-described configuration, it is possible to realize a biometric authentication technique that can reduce the false acceptance rate while reducing the false rejection rate.

  In addition, the embodiment of the present invention further includes an additional biosensor (12) that detects stable biometric information that is stable biometric information that is less changed over time than the detected biometric information. 40) manages the biometric information of the user (2) acquired in advance in association with the identification information, and the authentication device (30) performs the authentication of the person when the additional biosensor (12 ) Detects the current stable biological information of the user (2) detected by the information management device (40), and acquires the stable biological information associated with the identification information received from the information acquisition device (20). ) And the current stable biological information of the user (2) detected by the additional biological sensor (12), in addition to the verification of the detected biological information and the verification biological information, and the information management apparatus It is preferable to also perform collation with the stable biological information received from the 40).

  According to this configuration, in addition to the successful verification of the detected biometric information and the biometric information for verification, the verification of stable biometric information with less change over time compared to the detected biological information Since it can be set as a requirement, it becomes possible to further reduce the acceptance rate of others while keeping the rejection rate of the principal low.

  In the embodiment of the present invention, when the authentication device (30) performs the personal authentication, the index value between the same types of indices included in each of the detected biometric information and the biometric information for verification is used. It is preferable to collate the detected biometric information with the biometric information for collation based on at least one of the similarity of the change tendency and the continuity of the index value.

  According to this configuration, it is possible to appropriately determine the relationship between the same kind of index values included in each of the detected biometric information and the biometric information for verification and perform collation between the detected biometric information and the biometric information for verification. it can.

  Various technical features of the biometric authentication system described above can also be applied to a biometric authentication method.

  INDUSTRIAL APPLICABILITY The present invention can be used for a biometric authentication system and a biometric authentication method for performing personal authentication using user biometric information.

1: Biometric authentication system 2: User 4: Communication network 11: First biosensor (biosensor)
12: Second biosensor (additional biosensor)
20: Information acquisition device 30: Authentication device 40: Information management device

Claims (4)

A biometric authentication system that performs user authentication using biometric information of a user,
An information acquisition device comprising a biosensor and worn or carried by the user;
An authentication device capable of directly communicating with the information acquisition device;
An information management device capable of communicating with the information acquisition device and the authentication device via a communication network,
The information acquisition device acquires biological information that changes over time of the user as detected biological information using the biological sensor, and periodically transmits the detected biological information together with identification information to the information management device. When communicating with the authentication device, the current detection biometric information acquired using the biometric sensor is transmitted to the authentication device together with the identification information.
The information management device generates biometric information for verification including information representing a change with time of the detected biometric information based on the detected biometric information received from the information acquisition device, and generates the biometric information for verification. Manage in association with the identification information received together with the original detected biological information,
When the authentication device receives the detected biological information and the identification information from the information acquisition device, the authentication device communicates with the information management device and relates to the identification information received from the information acquisition device. A biometric authentication system that receives biometric information from the information management apparatus, collates the detected biometric information received from the information acquisition apparatus with the biometric information for verification received from the information management apparatus, and performs the personal authentication. An additional biosensor for detecting stable biometric information, which is stable biometric information with little change over time compared to the detected biometric information,
The information management device manages the stable biometric information of the user acquired in advance in association with the identification information,
The authentication device acquires the current stable biometric information of the user detected by the additional biometric sensor when performing the identity authentication, and is associated with the identification information received from the information acquisition device. The stable biological information is received from the information management device, and in addition to the verification of the detected biological information and the verification biological information, the current stable biological information of the user detected by the additional biological sensor, and the information The biometric authentication system according to claim 1, wherein collation with the stable biometric information received from a management device is also performed.   When the authentication apparatus performs the identity authentication, the similarity of the index value change tendency and the index value continuity between the same kind of indices included in the detected biometric information and the biometric information for verification are respectively determined. The biometric authentication system according to claim 1 or 2, wherein collation of the detected biometric information and the biometric information for verification is performed based on at least one of sex. An information acquisition device comprising a biosensor and worn or carried by a user;
An authentication device capable of directly communicating with the information acquisition device;
In a biometric authentication system comprising the information acquisition device and the information management device capable of communicating with the authentication device via a communication network, a biometric authentication method for performing personal authentication using the biometric information of the user,
The information acquisition device acquires biological information that changes over time of the user as detected biological information using the biological sensor, and periodically transmits the detected biological information together with identification information to the information management device. A transmission step;
Based on the detected biometric information received from the information acquisition device, the information management device generates biometric information for verification including information representing a change over time of the detected biometric information, and generates the biometric information for verification. Storing in association with the identification information received together with the original detected biological information;
A second transmission step in which the information acquisition device transmits the current detection biometric information acquired using the biometric sensor to the authentication device together with the identification information;
When the authentication device receives the detected biometric information and the identification information from the information acquisition device, the authentication device communicates with the information management device and relates to the identification information received from the information acquisition device An authentication step of receiving biometric information from the information management device and verifying the identity by comparing the detected biometric information received from the information acquisition device with the biometric information for verification received from the information management device; A biometric authentication method comprising:

Images