JP3622515B2 - Authentication medium, authentication medium issuing device, and authentication device - Google Patents

Description

[0001]
[Technical field to which the invention belongs]
The present invention relates to an authentication medium, an authentication medium issuing apparatus, and an authentication apparatus that can authenticate an individual in a settlement such as finance / distribution.
[0002]
[Prior art]
Conventionally, since high security is required in the settlement field such as finance / distribution in the above example, authentication of the person who executes the process is also required to have high reliability.
For example, the application side that performs the above-described settlement processing includes a biometric sensor (which includes a fingerprint reader and a CCD array) that reads a user's fingerprint, and a storage unit that stores user fingerprint information registered in advance. When the user performs a settlement process, the user's fingerprint is read by a biometric sensor, and compared with the fingerprint information stored in the storage means so that it is determined to be the same, thereby authenticating the person. can do.
[0003]
When configured in this way, it is necessary for the application side to store biometric information (for example, fingerprint information) of all users to be operated in the storage means, which has a problem that the storage capacity is extremely increased. .
[0004]
[Problems to be solved by the invention]
According to the present invention, the user's biometric information is recorded on a recording medium such as an IC card or shim chip (SIM chip) owned by the user and is made to be owned by the user. The purpose is to provide an authentication medium that can authenticate a highly reliable person.
[0005]
Furthermore, even if the reading performance of the biometric sensor provided on each application side varies, good identity authentication can be performed, and further, identity authentication can be performed according to the security level set for each application. An object of the present invention is to provide an authentication medium that can increase the security of the application by allowing the application to move when the personal authentication is obtained, and can prevent the abuse of the authentication medium.
It is another object of the present invention to provide an authentication medium issuing device that can issue an authentication medium that achieves the above-described object.
It is still another object of the present invention to provide an authentication apparatus capable of authenticating a person using an authentication medium that achieves the aforementioned object.
[0006]
[Means for Solving the Problems]
The invention according to claim 1 of the present invention isUser'sBiometric information can be readRecording sectionInPre-recordShiReading the biometric information recorded in the recording unit, comparing the read biometric information with the acquired biometric information, and authenticating the userAuthentication mediumIn addition, a plurality of verification threshold values are stored corresponding to a plurality of security levels, and the corresponding verification threshold values can be read out according to the security level determined for each target requiring user authentication.It is an authentication medium.
[0007]
The invention according to claim 2 of the present invention is combined with the configuration of the invention according to claim 1,Equipped with a destructive means that makes it impossible to read recorded information when authentication is not possibleIt is an authentication medium.
[0008]
Claims of the invention3The invention described in claim 1Or 2An apparatus for issuing an authentication medium, the authentication mediumRecording sectionA recording means for recording information on the recording medium, a reading means for reading the biometric information, and a biometric information read by the reading means by the recording means.Recording sectionAnd an authentication medium issuing device comprising a control means for recording control.
[0009]
Claims of the invention4The invention described is the above claim.3In conjunction with the structure of the described invention,Multiple matching thresholds corresponding to multiple security levelsInput means to input and input by the input meansMatching the matching threshold with the security level of matching authentication using biometric informationIt is an authentication medium issuing device provided with the control means which carries out recording control by the recording means.
[0010]
Claims of the invention5The invention described in claim 1Or 2Accept authentication media to authenticate usersJudgmentAnd an authentication mediumStored in the recording sectionFirst reading means for reading information; and second reading means for reading user biometric information;And a security set for each target requiring user authentication read from the authentication medium. Based on the matching threshold corresponding toAuthentication medium read by first reading meansIs recorded in the recording section ofThe biometric information is compared with the user's biometric information read by the second reading means to identify the user.AuthenticationIt is an authentication apparatus provided with the determination means to determine.
[0011]
[Operation and effect of the invention]
According to the authentication medium of the present invention, biometric information represented by fingerprints, voiceprints, retinal prints, facial features, etc. can be recorded and read on a recording medium represented by a readable IC card, SIM chip or the like. Since the authentication medium is configured as described above, it is not necessary for the application side to store the biometric information of all the users who are the operation targets in the storage means, and the storage capacity on the application side can be extremely small. In addition, one authentication medium can be used for example with banks, credit companies, post offices, other financial institutions, and other institutions that require authentication.saidIt can be used for multiple applications in different industries and has convenience.
[0012]
Furthermore, as attribute information of biometric information,A plurality of verification threshold values are stored corresponding to a plurality of security levels, and the corresponding verification threshold values can be read out according to the security level determined for each target requiring user authentication.Therefore, collation corresponding to the security level on the application side can be performed, which is convenient.
[0013]
In addition, if authentication is not obtained even after executing the authentication process,threeIn this case, by making the recorded information unreadable by the destruction means, the security of the authentication medium can be improved, and it becomes a countermeasure against forgery.
[0014]
Further, the authentication medium issuing device can issue an authentication medium that exhibits the effects described above, and the authentication device can perform authentication processing of the authentication medium that exhibits the effects described above. Either medium issuing device or authentication deviceon the other handCan also serve as mutual functions.
[0015]
【Example】
An embodiment of the present invention will be described below with reference to the drawings.
The drawing shows an authentication card and an authentication device. In FIG. 1, the authentication device 10 displays an insertion slot 12 into which the authentication card 11 is inserted, and a display with a touch panel for inputting operation information and other information. And a biometric sensor 14 composed of a CCD array for reading an operator's fingerprint, and the authentication device 10 is connected to a host device such as a personal computer (not shown) to Driving applications.
[0016]
The above-mentioned authentication card 11 is formed of an IC card, in which the personal information of the owner and the fingerprint information of the owner and other necessary information are recorded as biometric information.
[0017]
When such an authentication card 11 is inserted into the insertion slot 12 of the authentication device 10, the card information is read by an internal IC card reader, and then the finger registered by the authentication card holder is placed on the upper surface of the biometric sensor 14. The fingerprint is read and the read fingerprint information is compared with the fingerprint information recorded on the authentication card 11. When the fingerprint match is determined, the person is authenticated.
In addition, if the personal authentication is obtained, the operation of a predetermined application of the personal computer connected to the authentication device 10 is permitted. Alternatively, the terminal connected to the authentication device 10 is activated.
[0018]
FIG. 2 is a control circuit block diagram of the authentication device 10 described above. The CPU 20 drives and controls each circuit device in accordance with a program stored in the ROM 21, and a RAM 22 configured by a flash RAM stores data necessary for the operation. To do. The touch panel 23 performs touch input corresponding to the display on the display device 13, and the IC card reader 24 stores card data with respect to the authentication card 11 configured by the IC card provided and inserted in the insertion slot 12. Read / write. The contact output terminal 25 outputs the result of the personal authentication to a device connected thereto, for example, an automatic transaction processing device. The host interface circuit 26 is connected to a host personal computer (PC) to send and receive data. Further, the personal computer (PC) described above serves as an input means for card data necessary for personal information such as personal information when the authentication device 10 is used as an issuing device for the authentication card 11.
[0019]
FIG. 3 shows a control circuit block diagram of the above-described authentication card 11. The CPU 30 drives and controls each circuit device based on the program and setting data stored in the ROM 31, and the RAM 32 constituted by the flash RAM is necessary for the operation. In addition to storing data, card data is stored. Note that the CPU 30, ROM 31, and RAM 32 are configured by one chip. The IC contact 33 is connected to the IC card reader 15 of the authentication device 10.
[0020]
The fuse ROM 34 has a function of electrically destroying (blowning) an electric circuit. The ROM 34 stores a vector address for starting a program when the power is turned on. Therefore, when the circuit of the fuse ROM 34 is destroyed. The program cannot be started, and as a result, the card data can be protected without being read illegally, and the security of the authentication card is enhanced.
[0021]
The fuse ROM write control circuit 35 is a circuit for supplying site power to the fuse ROM 34 and destroying the ROM 34, and is controlled by the CPU 30.
[0022]
FIG. 4 shows card data recorded in the flash RAM 32 of the authentication card 11 described above, and the card data is composed of three files: a master file, an authentication file, and a personal file.
[0023]
The above-mentioned master file is an issuer key and is information such as a code number indicating the issuer. When this issuer key is not determined to be appropriate at the time of collation, reading / writing of the authentication file is not allowed.
[0024]
The aforementioned master file is composed of three small files of administrator information, administrator PIN (password), and administrator terminal key. The management information includes an authentication unit number (authentication device number), a management terminal number, a collation level, It consists of collation score, position information, and number of reading errors.
[0025]
The above-mentioned authentication unit number indicates the machine number of the authentication apparatus 10 and the machine number recorded in the ROM of the control unit of the authentication apparatus 10 is recorded.
The management terminal number indicates the machine number of the terminal that can be operated, and the machine number recorded in the program of the host computer is recorded.
The collation level indicates a set value of a threshold level when the biometric sensor 14 reads a fingerprint, and the collation level can be set for each authentication device 10.
The matching score indicates the number of feature points of the fingerprint.
The position information is the X. The coordinate value of Y is shown and is used for alignment of fingerprint information when the biometric sensor 14 reads and collates the fingerprint.
The number of reading mistakes is a count value obtained by counting the authentication NG results. If there are more than a predetermined number of NGs, the authentication card 11 is electrically destroyed and disabled.
[0026]
The administrator PIN (password) indicates the password of the user being managed, the administrator terminal key indicates information that allows the operation of the terminal, and the above-described administrator PIN and this administrator terminal key are specific. Reading / writing personal files is not allowed when no relationship is indicated.
[0027]
The aforementioned personal file consists of two small files, a personal information key and a bio key.
The personal information key is information that becomes a key at the time of collation, and when the suitability is not determined, reading / writing of the next personal information is not allowed. In addition, as personal information, a type indicating the user or operator, name, ID code, age, date of birth, address, telephone number, company name, etc. are recorded.
The biokey is information that becomes a key at the time of collation. When the suitability is not determined, reading / writing of information on the next biometric information is not allowed. In addition, information indicating the characteristics of a fingerprint is recorded as biometric information, and a matching level and a matching score are recorded as attribute data of the fingerprint.
Note that the biometric information described above includes, in addition to fingerprints, characteristic portions that can identify individuals, such as voice prints, retinal prints, facial features, and palm prints.
[0028]
In addition, as information not disclosed in FIG. 4, security levels are set for various applications in multiple stages, for example, levels 1, 2, and 3, and a matching score of 90% or more is correspondingly set. If you set collation, 80% -90% collation, 70% -80% collation, etc.SecurityAuthentication can be obtained in correspondence with.
[0029]
Next, the processing operation of the authentication device 10 will be described.
The authentication device 10 has a function of issuing an authentication card 11. The authentication card 11 is issued by a staff member. At the time of issuance, a personal computer (PC) is connected to the authentication device 10 and necessary card data is transmitted from the PC. Is input.
[0030]
The processing of the CPU 20 of the authentication device 10 for issuing the above authentication card 11 will be described with reference to the flowchart of FIG.
An operator authentication card 11 and a registration password are given in advance to an attendant (operator). When the attendant inputs a password from the touch panel 23 of the display unit 13, the input of the password is guided and displayed on the display unit 13. When compared with the password stored in the RAM 22 in advance, the input is requested again when they do not match, and when they match, the process proceeds to the next step (steps n1 and n2).
[0031]
In the next step, insertion of the operator's authentication card 11 is guided and displayed on the display 13, and when the operator's authentication card 11 is inserted into the insertion slot 12 based on this display, the IC contact 33 is connected to the IC card reader 24. And the card data is read by the IC card reader 24 to check the card data, that is, the issuer key, the administrator PIN, the administrator terminal key, the personal information key, the bio key, etc. are checked, When the suitability is recognized, the display 13 displays a guidance for reading the biometric information of the operator, and when the clerk puts a predetermined finger on the biometric sensor 14 to read the fingerprint, the fingerprint information is taken in. The biometric information set in the card data is checked based on the matching level and matching score of the attribute data. It is determined (step n3, n4).
[0032]
If the above-described fingerprint information collation determination matches or the feature value (collation score) of the predetermined value matches, the operator is authenticated, and the user is allowed to issue the authentication card 11 ( Step n5).
[0033]
When the clerk is allowed to issue the user authentication card 11, the clerk needs the files shown in FIG. 4 in order to create card data by the personal computer (PC) connected to the authentication device 10. Items are input from the keyboard (input means), and then the user authentication card 11 (IC card) is inserted into the insertion slot 12 (steps n6 and n7).
[0034]
Next, reading of the biometric information of the user (user) is guided and displayed on the display 13, and when the user puts a predetermined finger on the biometric sensor 14 to read the fingerprint, the fingerprint information is captured, Based on the collation level and collation score of the set attribute data, the fingerprint feature quantity is read (step n8).
[0035]
When the user's fingerprint information is confirmed together with the attribute data in this way, the card data is completed together with the necessary items inputted in advance, and the card data is written into the authentication card 11 by the IC card reader 24. The user authentication card 11 is completed (step n9).
[0036]
Thereafter, it is determined whether or not the next user authentication card 11 has been issued. If there is a next issuance, the process returns to step n6, and if not, the issuance process is terminated (step n10).
[0037]
Next, the processing of the CPU 20 of the authentication device 10 when changing the card data of the user authentication card 11 that has already been issued by the authentication device 10 will be described with reference to the flowchart of FIG.
An operator authentication card 11 and a password for change are given in advance to an attendant (operator). When the attendant inputs a password from the touch panel 23 of the display unit 13, the input of the password is guided and displayed on the display unit 13. When compared with the password stored in the RAM 22 in advance, the input is requested again when they do not match, and when they match, the process proceeds to the next step (steps n11 and n12).
[0038]
In the next step, insertion of the operator's authentication card 11 is guided and displayed on the display 13, and when the operator's authentication card 11 is inserted into the insertion slot 12 based on this display, the card data is read by the IC card reader 24. Card data is checked.
[0039]
That is, the issuer key, the administrator PIN, the administrator terminal key, the personal information key, the bio key, and the like are checked. When the fingerprint is read by placing a predetermined finger on the biometric sensor 14, the fingerprint information is captured, and the biometric information set in the card data is based on the matching level and the matching score of the attribute data. Then, it is determined by collation (steps n13 and n14).
[0040]
The operator is authenticated when the above-described fingerprint information collation is determined to be coincident or the feature value (collation score) of the predetermined value is coincident, so that the operator is allowed to change the card data of the user authentication card 11. (Step n15).
[0041]
If the change operation of the user authentication card 11 by the attendant is permitted, then the user authentication card 11 (IC card) is inserted into the insertion slot 12 (step n16). The inserted authentication card 11 is read by the IC cart reader 24 and displayed on a display device of a personal computer (PC), and the individual whose card owner has been changed from the keyboard (input means) of the personal computer (PC). Information is modified and modified by the operator. For example, the cardholder's age change, address change, telephone number change, company name change, and other changes that are changed are corrected (step n17)..
Next, it is determined whether or not the cardholder's fingerprint is also changed (step n18). If there is a change, the reading of the user's (user's) biometric information is guided and displayed on the display 13. When the fingerprint to be read is placed on the biometric sensor 14 and the fingerprint is read, the fingerprint information is taken in, and the feature quantity of the fingerprint is read based on the set collation level and collation score of the attribute data (step n19). .
[0042]
When the user's fingerprint information is confirmed together with the attribute data in this way, the card data is completed together with the necessary items to which the changed items have been input first, and this card data is written on the authentication card 11 by the IC card reader 24. The change process of the user authentication card 11 is completed (step n20).
[0043]
Thereafter, it is determined whether or not there is a next change operation of the user authentication card 11, and if there is a next change operation, the process returns to step n16, and if not, the process is terminated (step n21).
[0044]
Next, the verification process of the personal authentication of the user authentication card 11 by the CPU 20 of the authentication device 10 will be described with reference to the flowchart of FIG.
An operator authentication card 11 and a verification password are given in advance to an attendant (operator). When the attendant inputs a password from the touch panel 23 of the display unit 13, the password input is displayed on the display unit 13. When compared with the password stored in the RAM 22 in advance, the input is requested again when they do not match, and when they match, the process proceeds to the next step (steps n31 and n32).
[0045]
In the next step, insertion of the operator's authentication card 11 is guided and displayed on the display 13, and when the operator's authentication card 11 is inserted into the insertion slot 12 based on this display, the card data is read by the IC card reader 24. Card data is checked.
[0046]
That is, the issuer key, the administrator PIN, the administrator terminal key, the personal information key, the bio key, and the like are checked. When the fingerprint is read by placing a predetermined finger on the biometric sensor 14, the fingerprint information is taken in, and the biometric information set in the card data is based on the matching level and the matching score of the attribute data. Then, it is determined by collation (steps n33 and n34).
[0047]
The operator is authenticated when the matching of the fingerprint information described above is matched or the feature value (matching score) of the predetermined value is matched, so that the verification operation of the user authentication card 11 by the operator is permitted. (Step n35).
[0048]
Authentication card 11 for user by staffCollationIf the operation is permitted, the user authentication card 11 is then inserted into the insertion slot 12 (step n36). The inserted authentication card 11 is read by the IC cart reader 24 and displayed on a display device of a personal computer (PC). Next, the display device 13 displays a guide for reading the biometric information of the user (user), When the user puts a predetermined finger on the biometric sensor 14 to read the fingerprint, the fingerprint information is taken in and the fingerprint feature amount is read based on the set collation level and collation score of the attribute data (step) n37).
[0049]
Next, the biometric information recorded on the authentication card 11 and the biometric information based on the fingerprint of the user read by the sensor 14 are collated based on the collation level and collation score (step n38). The person authentication is obtained, and the authentication output is output from the contact output terminal 25 (see FIG. 2) (step n39). This output activates a terminal connected thereto, such as an automatic transaction processing device.
[0050]
If no match is determined in step n38 described above, the process returns to step n36 and the collation operation is repeated again. As a result, the fuse ROM 34 (see FIG. 3) of the authentication card 11 is destroyed, and the authentication card 11 cannot be used.
[0051]
Further, when the authentication verification process as described above continues, the process returns to the above-described step n36, but when there is no authentication verification process, the process ends (step n40).
[0052]
Next, the processing operation of the CPU 20 that performs data setting processing necessary for starting up the authentication device 10 will be described with reference to the flowchart of FIG.
An operator authentication card 11 and a setting password are given in advance to an attendant (operator). When the attendant inputs a password from the touch panel 23 of the display unit 13, the input of the password is guided and displayed on the display unit 13. When compared with the password stored in the RAM 22 in advance, the input is requested again when they do not match, and when they match, the process proceeds to the next step (steps n41 and n42).
[0053]
In the next step, insertion of the operator's authentication card 11 is guided and displayed on the display 13, and when the operator's authentication card 11 is inserted into the insertion slot 12 based on this display, the card data is read by the IC card reader 24. Card data is checked.
[0054]
That is, the issuer key, the administrator PIN, the administrator terminal key, the personal information key, the bio key, and the like are checked. When the fingerprint is read by placing a predetermined finger on the biometric sensor 14, the fingerprint information is taken in, and the biometric information set in the card data is based on the matching level and the matching score of the attribute data. Then, it is determined by collation (steps n43 and n44).
[0055]
If the above-described fingerprint information collation is determined to be coincident or a feature value (collation score) of a predetermined value is coincident, the operator is authenticated, and the setting operation by the operator is permitted (step n45).
[0056]
If the setting operation by the staff is permitted, then a setting screen is displayed on the display device of the personal computer (PC), and setting data is input by the keyboard (steps n46, 47). This setting data is, for example, each password for registration, change, verification, and setting, date, application card, automatic change flag, change processing flag, and other necessary data.
[0057]
When the input and editing of the setting data are completed, the setting data is updated to a higher-level device, and the setting process ends (steps n48, 49, 50).
[0058]
According to the authentication card 11 shown in the above-described embodiment, the biometric information based on the fingerprint is recorded on the readable IC card so that it can be read out. It is not necessary to store and store biometric information of all target users in the storage means, and the storage capacity on the application side can be extremely small. In addition, one authentication card 11 is connected to, for example, a bank, a credit company, a post office, other financial institutions, and other institutions requiring authentication.saidIt can be used for multiple applications in different industries and has convenience.
[0059]
Further, as attribute information of biometric information, for example, a collation level in which a threshold level of the sensor 14 that reads biometric information is set, or the number of feature points that serve as a reference value when the biometric information is collated is determined. If the set verification score is recorded, the verification accuracy can be adjusted even if there is a variation in the reading accuracy of the sensor 14 for matching the biometric information, or even if there is some variation in the reading state on the user side. This makes it possible to read the information required for verification, and even if there are multiple authentication devices, verification can be performed under the same conditions, and even if the user is the person himself, authentication is not possible due to a problem on the machine side. Is prevented.
[0060]
Furthermore, by recording information corresponding to a plurality of security levels as attribute information of biometric information, verification corresponding to the security level on the application side can be performed.
[0061]
Furthermore, if authentication is not obtained even after executing the authentication process,third partyIn this case, by making the recorded information unreadable by the fuse ROM 34 (destructive means), the security of the authentication card 11 can be improved, and it becomes a countermeasure against forgery.
[0062]
Further, the authentication device 10 can issue and authenticate the authentication card 11 having the above-described effects, and a single device can also serve as the authentication medium issuing device and the authentication device.
[0063]
In the above-described embodiment, a fingerprint is shown as biometric information. However, in addition to the fingerprint, the fingerprint may be composed of a feature portion that can identify an individual such as a voice print, a retina print, a facial feature, and a palm print.
[0064]
In the correspondence between the configuration of the present invention and the above-described embodiment,
The authentication medium of the present invention corresponds to the authentication card 11 by the IC card of the embodiment, or the SIM chip,
Similarly,
The destruction means corresponds to a fuse ROM 34, a fuse ROM write control circuit 35, and other means for physically destroying the authentication card 11,
The recording means of the authentication medium issuing device corresponds to the IC card reader 24,
The reading means corresponds to the biometric sensor 14,
The control means corresponds to the CPU 20,
The input means corresponds to the keyboard of a personal computer (PC),
The first reading means of the authentication device corresponds to the IC card reader 24,
The second reading means corresponds to the biometric sensor 14,
The determination means corresponds to the CPU 20,
The present invention can be applied based on the technical idea described in the claims, and is not limited to the configuration of the embodiment.
[Brief description of the drawings]
FIG. 1 is a perspective view of an authentication device and an authentication card.
FIG. 2 is a control circuit block diagram of the authentication apparatus.
FIG. 3 is a control circuit block diagram of an authentication card.
FIG. 4 is an explanatory diagram of card data of an authentication card.
FIG. 5 is a flowchart of authentication card registration processing.
FIG. 6 is a flowchart of authentication card change processing.
FIG. 7 is a flowchart of authentication card authentication verification processing.
FIG. 8 is a flowchart of authentication card setting processing.
[Explanation of symbols]
10. Authentication device
11 ... Authentication card
14 ... Biometric sensor
20 ... CPU of authentication device
24 ... IC card reader
34 ... Fuse ROM
35 ... fuse ROM write control circuit

Claims (5)

Record the user's biometric information in a recordable part in advance ,
The biometric information recorded in the recording unit reads, met authentication medium for authenticating determine user comparison and collation to the biometric information of the user who has acquired the read out the biometric information And
In addition to storing a plurality of matching threshold values corresponding to a plurality of security levels,
An authentication medium , wherein a corresponding verification threshold value can be read out in accordance with a security level determined for each target requiring user authentication. The authentication medium according to claim 1, further comprising a destroying unit that makes it impossible to read the recorded information when the authentication cannot be obtained. An apparatus for issuing an authentication medium according to claim 1 or 2 ,
Recording means for recording information in the recording part of the authentication medium;
Reading means for reading biometric information;
Authentication medium issuing apparatus and control means for recording control on a recording unit of the biometric information authentication medium by the recording means is read by said reading means. Input means for inputting a plurality of collation thresholds corresponding to a plurality of security levels ;
4. The authentication medium issuing apparatus according to claim 3, further comprising a control unit that controls recording by the recording unit so that the verification threshold value input by the input unit corresponds to a security level of verification by biometric information . An apparatus for authenticating determine user accepts the authentication medium according to claim 1 or 2,
First reading means for reading information stored in the recording unit of the authentication medium;
A second reading means for reading user biometric information ;
Based on a verification threshold value corresponding to a security level determined for each target that requests user authentication read from the authentication medium,
Determination means for authenticating the user by comparing the biometric information recorded in the recording unit of the authentication medium read by the first reading means with the biometric information of the user read by the second reading means. And an authentication device.

Images