JP2019192093A - IC card - Google Patents

Abstract

To provide an IC card which enables highly accurate and secure personal authentication of a user.SOLUTION: An IC card according to an embodiment including an IC module which communicates with a terminal device to execute processing comprises a rectangular body, a first acquisition part and a second acquisition part. The first acquisition part is buried in the body to acquire fingerprint information from a finger of a user. The second acquisition part is buried in a different position from the first acquisition part of the body to acquire fingerprint information from a different finger from the finger from which the first acquisition part acquires the fingerprint information.SELECTED DRAWING: Figure 1

Description

  Embodiments described herein relate generally to an IC card.

In general, an IC card including a biometric sensor that performs personal authentication using fingerprint information of a user who uses the IC card has begun to spread. However, in order to use a fingerprint sensor for a mass-produced IC card, an inexpensive fingerprint sensor must be used in view of its spread. Moreover, since the fingerprint sensor is embedded in an IC card having a thickness of about 1 mm, it must be downsized. Along with this, there has been a problem that the accuracy of personal authentication by the fingerprint sensor is low.

JP 2009-129252 A

The problem to be solved by the present invention is to provide an IC card that can accurately and securely perform user authentication.

The IC card of the embodiment is an IC card having an IC module that communicates with a terminal device and executes processing, and includes a rectangular main body, a first acquisition unit, and a second acquisition unit. The first acquisition unit is embedded in the main body and acquires fingerprint information from a user's finger. The second acquisition unit is embedded in a position different from the first acquisition unit of the main body, and acquires fingerprint information from a finger different from the finger from which the first acquisition unit has acquired fingerprint information.

The block diagram which shows an example of a structure of the IC card which concerns on embodiment. The block diagram which shows an example of the hardware constitutions of the IC card which concerns on embodiment. The block diagram which shows an example of a function structure of the IC card which concerns on embodiment. Schematic which shows the position which embeds two acquisition parts on the surface of the IC card which concerns on embodiment. Schematic which shows the 1st modification in the embedding position of the two acquisition parts which concern on embodiment. Schematic which shows the 2nd modification in the embedding position of the two acquisition parts which concern on embodiment. Schematic which shows the 3rd modification in the embedding position of the two acquisition parts which concern on embodiment.

Hereinafter, an IC card according to an embodiment will be described with reference to the drawings. In the following explanation,
The IC card according to the embodiment is described as a contact type IC card, but may be a non-contact type IC card.

First, the configuration of the IC card 1 will be described with reference to FIG. FIG. 1 is a diagram illustrating an example of a configuration of an IC card 1 according to the embodiment. The IC card 1 is formed, for example, by mounting an IC module 10 on a plastic rectangular card base PT (an example of a card body).
That is, the IC card 1 includes an IC module 10, a first acquisition unit 50a, a second acquisition unit 50b, a verification processor (verification Pr in the figure) 60, and a card base PT in which these are embedded. . Further, the IC card 1 is connected to the external terminal device 10 via the contact portion 15.
0 can be communicated. In addition, about the 1st acquisition part 50a and the 2nd acquisition part 50b, when it is not necessary to distinguish both, it acquires the acquisition part 50 suitably.

The IC card 1 sends, for example, a command (processing request) transmitted by the terminal device 100,
A process (command process) is received according to the received command received via the contact unit 15. Then, the IC card 1 transmits a response (processing response) that is an execution result of the command processing to the terminal device 100 via the contact unit 15. The terminal device 100 is a device that communicates with the IC card 1 and includes, for example, a reader / writer device.

The IC module 10 includes a contact portion 15 and an IC chip 20. The IC module 10 is, for example, a COT (Chip On) in which a plurality of IC modules 10 are arranged on a tape.
Tape) is a module that is traded in the form.

The IC module 10 authenticates the user by comparing the fingerprint information of the user acquired by the acquisition unit 50 with the fingerprint information stored in the IC module 10, and outputs the authentication result to the terminal device 100. To do.

The acquisition unit 50 includes a fingerprint sensor that acquires fingerprint information from a user's finger. The acquisition unit 50 includes a first acquisition unit 50a and a second acquisition unit 50b. The first acquisition unit 50a and the second
The acquisition unit 50b may be the same fingerprint sensor or may be different in performance and size. In the present embodiment, the first acquisition unit 50a and the second acquisition unit 50b are arranged physically independently of each other.

The contact portion 15 has terminals for various signals necessary for the operation of the IC card 1. Here, the terminals of various signals include a terminal supplied with a power supply voltage, a clock signal, a reset signal and the like from the terminal device 100 and a serial data input / output terminal (SIO terminal) for communicating with the terminal device 100. .

The IC chip 20 is, for example, an LSI (Large Scal) such as a one-chip microprocessor.
e Integration). In addition, the verification processor 60 includes the acquisition unit 50 and the IC module 1.
0 is electrically connected.

As described above, the IC card 1 communicates with the terminal device 100 and executes various transactions. For example, when the IC card 1 is used as a credit card, it is possible to execute a settlement process by performing user authentication with a fingerprint. In addition, by providing the first acquisition unit 50a and the second acquisition unit 50b, the user authentication of the user can be performed with high accuracy and securely.

FIG. 2 is a diagram illustrating an example of a hardware configuration of the IC card 1 according to the embodiment. FIG.
As shown in FIG. 1, the IC card 1 includes an IC module 10 including a contact portion 15 and an IC chip 20. The IC chip 20 includes a communication unit 24, a CPU 25,
ROM (Read Only Memory) 26, RAM (Random Access Memory) 27, and EEPROM
An OM (Electrically Erasable Programmable ROM) 28 is provided. These components are connected via an internal bus BS1.

The communication unit 24 is, for example, a UART (Universal Asynchronous Receiver Transmitter), and performs serial data communication with the terminal device 100 via the SIO terminal described above. The communication unit 24 converts the serial data signal received via the SIO terminal into parallel converted data (
For example, 1-byte data) is output to the internal bus BS1. Further, the communication unit 24 serially converts the data acquired via the internal bus BS1 and transmits the terminal device 10 via the SIO terminal.
Output to 0. For example, the communication unit 24 receives a command from the terminal device 100 via the SIO terminal. In addition, the communication unit 24 transmits a response to the terminal device 100 via the SIO terminal.

The ROM 26 is a non-volatile memory such as a mask ROM, for example. ROM 26 is I
A program for executing various processes of the C card 1 and data such as a command table are stored.

The RAM 27 is a volatile memory such as SRAM (Static RAM), for example. RAM2
7 temporarily stores data used when various processes of the IC card 1 are performed.

The EEPROM 28 is, for example, an electrically rewritable nonvolatile memory. EEP
The ROM 28 stores various data used by the IC card 1. The EEPROM 28 stores information used for various services (applications) using the IC card 1, for example.

The CPU 25 executes various programs of the IC card 1 by executing a program stored in the storage unit 40 including the ROM 26 and the RAM 27. For example, the CPU 25 executes command processing according to the command received by the communication unit 24 via the contact unit 15.

Furthermore, a verification processor 60 is connected to the internal bus BS1. Verification processor 6
0 includes, for example, a CPU and a program memory. The verification processor 60 is connected to the acquisition unit 50 through a dedicated line or the like, and can detect whether or not the acquisition unit 50 is in a state where the fingerprint information can be acquired (energized state). For example, when the acquisition unit 50 is a fingerprint sensor, when the user's finger touches the fingerprint sensor and the fingerprint sensor is energized, the verification processor 60 determines that the fingerprint sensor can acquire fingerprint information. To do. The fingerprint sensor is a capacitance type, thermal type,
The fingerprint information of the user is acquired by any one method such as an optical type. The verification processor 60 may be configured integrally with the IC module 10, or the IC module 10 may have the function of the verification processor 60.

FIG. 3 is a functional configuration diagram of the IC card 1 in the embodiment. The IC card 1 includes, for example, the above-described communication unit 24, acquisition unit 50, processing unit 30, and storage unit 40.

The processing unit 30 includes, for example, a command processing unit 34 and a fingerprint information matching unit 32. The command processing unit 34 and the fingerprint information matching unit 32 are realized by the CPU 25 executing the program 44 stored in the storage unit 40, for example.

In the storage unit 40, first fingerprint information 46a, second fingerprint information 46b, and a program 44 are stored in advance. Note that the first fingerprint information 46a and the second fingerprint information 46b are referred to as fingerprint information 46 for convenience when it is not necessary to distinguish between the two. The fingerprint information 46 stored in advance in the storage unit 40 is information used for user authentication, for example, IC
When the card 1 is issued, the fingerprint information 46 is acquired from the user and stored in the storage unit 40. Depending on the type of the IC card 1, the fingerprint information 46 may be stored in the storage unit 40 after issuance.

The fingerprint information 46 stored in the storage unit 40 is information to be collated with the fingerprint information acquired by the acquisition unit 50, for example, information obtained by using the geometric pattern of the fingerprint shape pattern acquired by the acquisition unit 50, or Information converted into some feature amount, or a combination thereof.

The command processing unit 34 executes various command processing (command processing) in response to a command (processing request) received from the terminal device 100 via the communication unit 24. In addition, the command processing unit 34 sends a response that is a result of the command processing to the terminal device 10 via the communication unit 24.
Send to 0. The command processing unit 34 relates to command processing that is a condition for successful collation (successful identity authentication), which will be described later, when authentication success notification is given from the fingerprint information collation unit 32, that is, a secure area in the storage unit 40. If access to is permitted, the process proceeds.

The fingerprint information collation unit 32 collates the fingerprint information acquired by the acquisition unit 50 with the fingerprint information 46 stored in advance in the storage unit 40, and determines that the personal authentication is successful when the collation is successful. Successful personal authentication by the fingerprint information collation unit 32 means that, for example, either the fingerprint information acquired by the first acquisition unit 50a or the first fingerprint information 46a or the second fingerprint information 46b stored in advance in the storage unit 40 A value indicating the degree of coincidence with the other fingerprint information 46 in which the value indicating the degree of coincidence with one of the fingerprint information acquired by the second acquisition unit 50b is stored in the storage unit 40 in advance. Is greater than or equal to the threshold. That is, the success of the personal authentication means that the fingerprint information acquired from the two fingers of the user and the two fingerprint information 46 stored in advance in the storage unit 40 substantially match.

In order to perform more secure personal authentication, the fingerprint information acquired by the first acquisition unit 50a can only be compared with the first fingerprint information 46a stored in advance in the storage unit 40, and the second information The fingerprint information acquired by the acquisition unit 50 b is the second fingerprint information 4 stored in advance in the storage unit 40.
It is possible to collate only with 6b. That is, the position of the acquisition unit 50 and the fingerprint information 46 may be stored in association with each other. For example, when the first fingerprint information 46a stores the user's middle finger information and the second fingerprint information 46b stores the user's index finger information, the user acquires the index finger fingerprint information from the first acquisition unit 50a. Even if the second acquisition unit 50b acquires the fingerprint information of the middle finger, the personal authentication is not successful.

When collation by the fingerprint information collation unit 32 is successful, that is, when the personal authentication is successful, the storage unit 40
In this state, access to a secure area is permitted, and a predetermined process can be executed. In the present embodiment, the processing unit 30 has the fingerprint information matching unit 32, but the matching processor 60 may have the fingerprint information matching unit 32.

Next, the embedding positions of the two acquisition units 50 will be described with reference to FIG. FIG. 4 is a schematic diagram showing a position where two acquisition units 50 are embedded in the surface of the IC card 1. In the figure, (a) shows the front surface of the IC card 1, and (b) shows the back surface of the IC card 1. In the present embodiment, the surface on which the contact portion 15 of the IC module 10 is visible is described as the surface.
Also, the alternate long and short dash line in the figure indicates the center line of the IC card, and the broken line indicates the hidden line of the IC module 10 or the acquisition unit 50. Furthermore, the intersection of the two center lines indicates the approximate center of the IC card.

As shown in FIG. 4, the first acquisition unit 50a and the second acquisition unit 50b are embedded in the surface of the IC card. The second acquisition unit 50b is embedded at a position different from that of the first acquisition unit 50a. For example, the second acquisition unit 50b is embedded so as to acquire fingerprint information from a finger different from the finger from which the first acquisition unit 50a has acquired fingerprint information.

In addition, as shown in FIG. 4, the 1st acquisition part 50a and the 2nd acquisition part 50b are rectangular-shaped IC.
The card 1 may be embedded so as to be located on the opposite side of the IC module across the center line along the long side direction through the approximate center in the short side direction.

By positioning the two acquisition units 50 on the opposite side of the IC module across the center line along the long side direction through the approximate center in the short side direction of the IC card 1, the contact unit 15 becomes the terminal device 10.
Even in a state where the IC card 1 is inserted into the terminal device 100 so as to contact 0, the acquisition unit 5
If 0 is exposed from the terminal device 100, it is possible to acquire fingerprint information from the user and execute identity authentication.

Next, modified examples of the two acquisition units 50 at the embedded position will be described with reference to FIGS. 5 to 7. 5 to 7, the description of the same parts as in FIG. 4 will be omitted as appropriate.

FIG. 5 is a schematic diagram illustrating a first modification at the embedded position of the two acquisition units 50. First
In the modified example, the first acquisition unit 50a and the second acquisition unit 50b are embedded on the back surface opposite to the surface of the IC card in which the IC module is embedded.

By embedding the two acquisition units 50 on the back surface of the IC card 1, the two acquisition units 50 can easily be located in the blind spots of others other than the user and monitoring cameras, and which finger was used. It is possible to hide. Further, since the finger is applied, the position and angle of the wrist become natural, and the IC card 1 is easy to use.

Furthermore, the first acquisition unit 50a and the second acquisition unit 50b pass through the approximate center in the short side direction of the rectangular IC card 1 and sandwich the center line along the long side direction on the opposite side of the IC module. You may embed so that it may be located.

With this arrangement, even when the IC card 1 is inserted into the terminal device 100 so that the contact unit 15 contacts the terminal device 100, fingerprint information can be obtained from the user and identity authentication can be performed. Further, since the finger is applied, the position and angle of the wrist become natural, and the IC card 1 is easy to use.

FIG. 6 is a schematic diagram illustrating a second modification example in the embedded position of the two acquisition units 50. Second
In the modified example, one of the first acquisition unit 50a and the second acquisition unit 50b is embedded in the front surface, and the other is embedded in the back surface.

With this arrangement, when placing a finger on the two acquisition units 50, that is, when trying to place a finger on the front and back surfaces, it is difficult to photograph the fingerprints of both fingers, and there is a risk of fingerprint information being stolen. It is possible to distribute the fingerprint information on the front surface and the fingerprint information on the back surface. Further, since the finger is applied, the position and angle of the wrist become natural, and the IC card 1 is easy to use.

FIG. 7 is a schematic diagram illustrating a third modification example in the embedded position of the two acquisition units 50. In addition, the broken line in FIG. 7 is a reference line indicating a hidden line of the IC module 10 or the acquisition unit 50 or an extended line of the outline of the first acquisition unit 50a or the second acquisition unit 50b embedded in the surface.

In the second modification, one of the first acquisition unit 50a and the second acquisition unit 50b is embedded in the front surface, the other is embedded in the back surface, and the first acquisition unit 50a and the second acquisition unit 50 b has a portion that overlaps along a direction substantially perpendicular to the surface of the IC card 1. Note that FIG.
The overlapping parts in are hatched with diagonal lines for easy understanding and marked with a W symbol.

With this arrangement, the two fingerprint information is separated into the front and back surfaces, so the risk of fingerprint information being stolen can be distributed, and personal authentication can be easily performed in a natural posture with an IC card. Is possible.

According to the IC card 1 in the embodiment or the modification described above, by providing two acquisition units 50, it is possible to improve the recognition accuracy of fingerprint information, and execute transactions more securely and easily. It is possible.

In addition, the processing in the IC card 1 of the above-described embodiment or the modification can be executed by some software. For this reason, the above-described processing can be easily realized only by installing and executing these programs on the IC card 1 through a computer-readable storage medium storing some programs for executing the above-described processing procedures. For example, the IC card 1 can download the program via a network, store the downloaded program, and complete the installation of the program. Alternatively, the IC card 1 can read the program from the information storage medium, store the read program, and complete the installation of the program.

Although several embodiments of the present invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the scope of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are included in the invention described in the claims and the equivalents thereof.

1 card 10 module 15 contact section 20 chip 24 communication section 28 EEPROM
30 processing unit 32 fingerprint information matching unit 34 command processing unit 40 storage unit 44 program 46 fingerprint information 46a first fingerprint information 46b second fingerprint information 50 acquisition unit 50a first acquisition unit 50b second acquisition unit 60 verification processor 100 Terminal device BS1 Internal bus Pr Verification PT Card base material

Claims (5)

An IC card having an IC module that communicates with a terminal device and executes processing,
A rectangular body;
A first acquisition unit embedded in the main body and acquiring fingerprint information from a user's finger;
A second acquisition unit that is embedded in a position different from the first acquisition unit of the main body and that acquires fingerprint information from a finger different from the finger from which the first acquisition unit has acquired fingerprint information;
IC card equipped with. The first acquisition unit and the second acquisition unit are:
I pass through the approximate center of the rectangular IC card 1 in the short side direction and the center line along the long side direction.
Located on the opposite side of the C module,
The IC card according to claim 1. The first acquisition unit and the second acquisition unit are:
Embedded in the back surface opposite to the front surface of the main body in which the IC module is embedded;
The IC card according to claim 1 or 2. Either one of the first acquisition unit and the second acquisition unit is embedded in the surface of the main body in which the IC module is embedded, and the other is embedded in the back surface opposite to the surface.
The IC card according to claim 1 or 2. The first acquisition unit and the second acquisition unit have portions that overlap along a direction substantially perpendicular to the surface of the main body.
The IC card according to claim 4.

Images