JP4820593B2 - User authentication method and user authentication system - Google Patents

Description

The present invention relates to authentication methods and authentication system using biometric authentication, particularly, it relates to a user authentication method and authentication system for corresponding to the feature quantity difference of biometric information by the change over time .

  In recent years, biometric authentication using biometric information such as veins, fingerprints, irises, and voiceprints has become widespread as a means for personal authentication. In the personal authentication method using biometric information, biometric information (reference biometric information) is registered in advance, the input biometric information is compared with the reference biometric information, and a similarity is calculated. Based on this similarity It is common to determine whether you are the person.

  Although this biometric information is unique and unique to an individual, the same feature cannot always be extracted, and in particular, the feature may vary due to changes over time. Since the registered reference biometric information is the one at the time of registration, the degree of similarity between the reference biometric information and the input biometric information can be improved even when the characteristics of the biometric information fluctuate due to changes over time, The authentication accuracy may be lowered.

For this reason, in order to cope with the temporal change of the biometric information, it is necessary to update the registered reference biometric information, and a technique for updating the reference biometric information has been developed (for example, see Patent Document 1). ). This patent document 1 discloses a technique for rewriting registered biometric information (reference biometric information) when a predetermined period has elapsed while dealing with differences in the input environment of biometric information.
JP 2002-236665 A (10th and 11th pages)

  However, changes in biometric information over time vary individually. Therefore, if the reference biometric information registered is not rewritten until a predetermined period of time elapses, the rewrite is performed even if the similarity between the current biometric information of the person and the reference biometric information decreases. There may be no. In addition, when updating the reference biometric information, the authentication information itself is changed. Therefore, it is necessary to surely confirm the identity.

The present invention has been made to solve the above-described problems, and its purpose is to efficiently and safely update pre-registered reference biometric information in order to cope with changes in biometric information over time. It is to provide a user authentication method and authentication system.

In order to solve the above problem, the invention described in claim 1 is directed to a recording medium in which a user identifier and reference biometric data are recorded, an authentication device, an update password and a contact address associated with the user identifier. A method of performing personal authentication using a server provided with user data storage means for recording data related to the authentication device, wherein the authentication device generates biometric authentication data based on the acquired biometric data, and Comparing with reference biometric authentication data, calculating the similarity, and the authentication device rejects authentication when the similarity is less than a second reference value, and the similarity is greater than or equal to the second reference value When the alarm information is less than one reference value, the alarm information is recorded, and when the alarm information has been continuously recorded a predetermined number of times or more, the server is notified, and the server updates the generated update password. Recording in the user data storage means, and performing a process of notifying the user contact information of the update password; and the server has received an update request including the update password input by the authentication device In this case, the received update password and the update password of the user data storage means are compared, and if they match, the authentication device is instructed to update reference biometric authentication data, and the authentication device And executing a step of updating the reference biometric data of the recording medium.

  According to a second aspect of the present invention, in the personal authentication method according to the first aspect, biometric authentication data generated based on biometric data is recorded on the recording medium, and the reference biometric authentication data is updated by the authentication device. Using the biometric authentication data generated based on the acquired biometric data and the biometric authentication data recorded on the recording medium, generating reference biometric authentication data and updating the reference biometric authentication data. The gist.

  According to a third aspect of the present invention, in the personal authentication method according to the first or second aspect, the process for notifying the user's contact information of the update password is updated to the user's e-mail address. The main point is to do so by sending an e-mail containing the password for the service.

  According to a fourth aspect of the present invention, there is provided a recording medium in which a user identifier and reference biometric authentication data are recorded, an authentication device, and a user data storage for recording data related to an update password and a contact address in association with the user identifier. A personal authentication system for performing personal authentication using a server provided with means, wherein the authentication device generates biometric authentication data based on the acquired biometric data and compares the biometric authentication data with the reference biometric authentication data of the recording medium. The similarity calculation means for calculating the similarity and the authentication device reject authentication when the similarity is less than a second reference value, and the similarity is greater than or equal to the second reference value and less than the first reference value. In this case, the alarm information is recorded, and when the recording of the alarm information is continuously performed more than a predetermined number of times, the correspondence unit according to the degree of similarity notified to the server and the reference biometric authentication data of the recording medium Reference biometric data updating means for updating, and the server records the generated update password in the user data storage means, and performs a process of notifying the update password to the contact information of the user When the update password notifying unit and the update request including the update password input by the authentication device are received, the received update password and the update password of the user data storage unit are compared and matched. In this case, the gist is provided with reference biometric data update instruction means for instructing the authentication device to update reference biometric data.

  According to a fifth aspect of the present invention, in the personal authentication system according to the fourth aspect, the authentication device further comprises means for recording biometric authentication data generated based on biometric data on the recording medium, the reference The biometric data updating means generates reference biometric data using the biometric data generated based on the acquired biometric data and the biometric data recorded on the recording medium, and the reference biometric data The gist of the present invention is that it is provided with a means for updating.

  According to a sixth aspect of the present invention, in the personal authentication system according to the fourth or fifth aspect, the process for notifying the user contact information of the update password is updated to the user's e-mail address. The main point is to do so by sending an e-mail containing the password for the service.

(Function)
According to the invention described in claim 1 or 4, the authentication device generates biometric authentication data based on the acquired biometric data, compares it with the reference biometric authentication data of the recording medium, and calculates the similarity. The authentication device rejects authentication when the similarity is less than the second reference value, records alarm information when the similarity is greater than or equal to the second reference value and less than the first reference value, and records the alarm information. If the number of times reaches a predetermined number of times, the server is notified. Then, the server records the generated update password in the user data storage means, and performs a process of notifying the user contact information of the update password. When the server receives an update request including the update password input by the authentication device, the server compares the received update password with the update password of the user data storage unit. An instruction to update the reference biometric data is given to the authentication device, and the authentication device updates the reference biometric data of the recording medium. As a result, when the similarity is equal to or higher than the second reference value, the user is registered when the user is authenticated as the user and the similarity is equal to or higher than the second reference value and lower than the first reference value for a predetermined number of times. Update password can be sent to the contact. Then, the user can update the reference biometric data using this update password.

  According to the invention described in claim 2 or 5, the biometric authentication data generated based on the biometric data is recorded on the recording medium. Then, the update of the reference biometric data by the authentication device generates the reference biometric data using the biometric data generated based on the acquired biometric data and the biometric data recorded on the recording medium, Update is performed with this reference biometric data. Thereby, reference biometric data can be generated using a plurality of pieces of biometric data acquired for the same person. For this reason, the reference biometric data that absorbs the variation in the biometric data can be generated and updated.

  According to the third or sixth aspect of the present invention, the update password is notified to the contact information of the user by transmitting an e-mail including the update password to the user's e-mail address. This allows the user to receive a notification regarding the update password at an e-mail address registered in advance.

According to the present invention , the reference biometric authentication data is recorded on the recording medium, and the biometric authentication data generated based on the biometric data is compared with the reference biometric authentication data recorded on the recording medium. A history of alarm information indicating that the degree of similarity is greater than or equal to the second reference value and less than the first reference value is recorded. Thus, an instruction for updating the reference biometric data recorded on the recording medium can be issued using the alarm information recorded on the recording medium.

  According to the present invention, it is possible to efficiently and safely update pre-registered reference biometric information in order to cope with changes in biometric information over time.

Hereinafter, an embodiment embodying the present invention will be described with reference to FIGS. In the present embodiment, in order to cope with temporal variation of the biological information it will be described as an authentication method and authentication system for updating the reference biometric information previously registered efficiently and safely. In this embodiment, the finger vein pattern of the hand is used as biometric information.

  As shown in FIG. 1, an automated teller machine (ATM) 20 serving as an authentication device is connected to a host system 30 serving as a server via a bank internal network 40.

  The automatic teller machine 20 includes a control unit 21, a biometric data acquisition unit 22, and an IC reading / writing unit 23. Furthermore, the automatic teller machine 20 includes a touch panel display (not shown), a cash storage unit, a cash card insertion unit, and a transaction details output unit.

  The control unit 21 includes a CPU, a RAM, a ROM, and the like (not shown), performs processing to be described later, and functions as a similarity calculation unit, a similarity-based correspondence unit, a reference biometric data update unit, and the like.

  The similarity calculation means generates biometric authentication data based on the biometric data acquired by the biometric data acquisition unit 22 and compares it with reference biometric authentication data recorded on the IC chip 51 as a recording medium of the cash card 50. Calculate the degree.

  The similarity-specific handling means rejects authentication if the similarity is less than the second reference value, and if the similarity is greater than or equal to the second reference value and less than the first reference value, alarm information is stored in the cash card. When the alarm information is recorded more than a predetermined number of times in the 50 IC chips 51, the host system 30 is notified.

The reference biometric data updating unit updates the reference biometric data recorded in the IC chip 51 of the cash card 50 by the IC reading / writing unit 23.
The biometric data acquisition unit 22 extracts features of a specific part of the user's human body and generates image data. In the present embodiment, a finger of a user's hand is photographed using near infrared rays, and a finger vein pattern is extracted. Specifically, the biological data acquisition unit 22 includes a biological sensor having a light source that irradiates near infrared light, an optical filter that transmits only infrared light, and a CCD camera. Near infrared light is irradiated from the back side of the finger from the light source, the light passes through the finger, passes through the optical filter, and reaches the CCD camera. The light is imaged by a CCD camera, converted into an electrical signal, and input to the control unit 21 as image data.

The IC read / write unit 23 reads and writes data for the IC chip 51 of the cash card 50.
The touch panel display displays information to the user and receives instructions from the user. The cash storage unit delivers banknotes and coins to and from the user. The cash card insertion unit accommodates the user's cash card 50, acquires information recorded in the magnetic stripe of the cash card 50, acquires information on the IC chip 51 by the IC read / write unit 23, and the IC chip. Information is written to 51. The transaction details output unit outputs the transaction details.

  On the other hand, the IC chip 51 of the cash card 50 has a memory area, and user authentication data 510 is recorded in this memory area. This user authentication data 510 is recorded when the user's cash card 50 is created. The user authentication data 510 includes a deposit account identifier as a user identifier, reference biometric authentication data, and data regarding the number of alarms.

  In the deposit account identifier data area, data relating to an identifier for identifying an authorized user of the cash card 50 is recorded. In the present embodiment, the deposit account identifier includes a branch, a deposit item, and an account number.

In the reference biometric data area, reference biometric data generated based on the user's biometric data is recorded. As the reference biometric data, when the cash card 50 is created, the biometric data of the user is acquired, and the reference biometric data related to the feature amount calculated based on the biometric data is recorded. This reference biometric authentication data is updated by a process described later.

  The number of alarms is recorded in the alarm number data area. As described later, the number of alarms is recorded as the number of times that the similarity between the acquired biometric authentication data and the reference biometric authentication data is equal to or higher than the second reference value and lower than the first reference value.

  The host system 30 includes a management computer 31. The management computer 31 has a CPU, a RAM, a ROM, and the like (not shown), performs processing described later, and functions as an update password notification unit, a reference biometric data update instruction unit, and the like.

The update password notification means records the generated update password in the user data storage unit 32 and performs a process of notifying the user contact information of the update password.
When the reference biometric data update instruction unit receives an update request including the update password input by the automatic teller machine 20, the reference biometric data update instruction unit compares the received update password with the update password in the user data storage unit 32. If they match, the automatic teller machine 20 is instructed to update the reference biometric data.

The management computer 31 is connected to a user data storage unit 32 as user data storage means.
User data 320 is recorded in the user data storage unit 32 for each deposit account identifier. This user data 320 is set when the user opens an account. The user data 320 includes data relating to a deposit account identifier as a user identifier, a user name, a contact address, and an update password.

  In the deposit account identifier data area, data relating to an identifier for specifying the deposit account identifier is recorded. In the present embodiment, the deposit account identifier includes a branch, a deposit item, and an account number.

Data relating to the user's name is recorded in the user name data area.
In the contact data area, data related to the user's contact information is recorded. In this embodiment, data relating to the user's e-mail address is recorded as a contact address.

  In the update password data area, data related to the update password used when the reference biometric authentication data is updated is recorded. As will be described later, this update password continuously causes the similarity between the acquired biometric authentication data and the reference biometric authentication data to be greater than or equal to the second reference value and less than the first reference value. When it reaches the predetermined number of times, it is generated and recorded.

  Next, a procedure of processing in the case of updating the reference biometric data of the cash card 50 in response to a change in biometric information over time using the system as described above will be described with reference to FIGS. Here, the personal authentication process (FIGS. 2 and 3) and the update process (FIG. 4) will be described separately.

(Personal authentication process)
Next, personal authentication processing when the user uses the cash card 50 will be described with reference to FIGS.

First, the user inserts the cash card 50 into the cash card insertion part of the automatic teller machine 20. In this case, the control unit 21 of the automatic teller machine 20 acquires the deposit account identifier stored in the IC chip 51 of the cash card 50 (step S1-1). Specifically, for the cash card 50 inserted in the cash card insertion unit, the IC read / write unit 23 reads data relating to the deposit account identifier recorded in the IC chip 51 and transfers this data to the control unit 21. .

  Next, the control part 21 acquires the feature-value stored in the IC chip 51 of the cash card 50 (step S1-2). Specifically, with respect to the cash card 50 inserted into the IC card reading / writing unit 23 in the cash card insertion unit, the IC reading / writing unit 23 stores data related to the feature amount recorded on the IC chip 51 (reference biometric authentication data). ) And transfer this data to the control unit 21.

  Next, the automatic teller machine 20 acquires the biometric data of the bearer of the cash card 50 (step S1-3). In this case, the control unit 21 first requests biometric information of the user of the automatic teller machine 20. In the present embodiment, the control unit 21 outputs, to the touch panel display, an instruction for holding the finger over the biometric sensor to the user. And the biometric data acquisition part 22 which detected the bearer's finger | toe of the cash card 50 with a biometric sensor reads a vein pattern. Then, the biological data acquisition unit 22 transfers the vein pattern image data to the control unit 21.

  And the control part 21 calculates a feature-value based on the acquired biometric data (step S1-4). Specifically, the control unit 21 determines, from the vein pattern image data received from the biometric data acquisition unit 22, the coordinates of the branch points of the veins, the length between the branch points, the branch angle between the branch points, and the like. The information regarding is extracted, and the feature amount based on the information is calculated.

  And the control part 21 calculates the similarity degree of the feature-value calculated based on the biometric data acquired from the bearer of the cash card 50, and the feature-value acquired from the IC chip 51 of the cash card 50 (step S1-5). ). Although there are many definitions of similarity, one example is used. In the present embodiment, the similarity is 0 ≦ similarity ≦ 1, and when the similarity is 1 (100%), the similarity is completely the same. This indicates that the feature amount (biometric authentication data) calculated based on the above is close to the feature amount (reference biometric data) of the cash card 50.

  Then, the control unit 21 compares the calculated similarity with the first reference value (step S1-6). For example, the first reference value is 90%. If the calculated similarity is equal to or higher than the first reference value (“YES” in step S1-6), the alarm history is reset (step S1-10). Specifically, the control unit 21 rewrites the number of alarms recorded in the IC chip 51 mounted on the cash card 50 to “0” by the IC reading / writing unit 23.

  On the other hand, when the calculated similarity is less than the first reference value (“NO” in step S1-6), the control unit 21 compares this similarity with the second reference value (step S1-7). . For example, the second reference value is 80%. When the similarity is equal to or higher than the second reference value (“YES” in step S1-7), a confirmation process is performed (step S1-8). This process will be described with reference to FIG.

  As shown in FIG. 3, the control part 21 of the automatic teller machine 20 acquires an alarm continuous log | history (step S2-1). Specifically, the control unit 21 uses the IC reading / writing unit 23 to acquire data relating to the number of alarms stored in the IC chip 51 of the cash card 50. Then, the control unit 21 compares this alarm continuous history count (alarm count) with the reference count (step S2-2).

  When the number of consecutive alarms exceeds the reference number (in the case of “YES” in step S2-2), an update password is generated (step S2-3). Specifically, first, the automatic teller machine 20 transmits an update password generation request to the host system 30 via the intra-bank network 40. This update password generation request includes a deposit account identifier. Upon receiving this update password generation request, the management computer 31 of the host system 30 generates an update password, searches the user data storage unit 32 using the deposit account identifier, and updates the searched user data 320. Record as a password.

  Then, the management computer 31 notifies the user of an update request including the update password (step S2-4). Specifically, the user data 320 is specified by the user identifier, data related to the contact is extracted, and an e-mail related to the update request including the update password is transmitted to the contact (e-mail address) as a destination. .

  Then, the management computer 31 notifies the automatic teller machine 20 of the completion of the generation of the update password and the notification of the update request to the user. The automatic teller machine 20 which received this records an alarm continuous history (step S2-5). Specifically, the control unit 21 of the automatic teller machine 20 adds “1” to the number of alarms recorded on the IC chip 51 of the cash card 50 by the IC reading / writing unit 23.

  On the other hand, when the number of consecutive alarms is equal to or less than the reference number (in the case of “NO” in step S2-2), the process of steps S2-3 and S2-4 is skipped and the alarm continuous history is recorded (step S2). -5).

  When the confirmation process is completed as described above, the automatic teller machine 20 approves the transaction (step S1-9) and normally performs the transaction process. On the other hand, when the similarity is less than the second reference value (in the case of “NO” in step S1-7), the automatic teller machine 20 rejects the transaction (step S1-11).

(Update process)
Next, reference biometric data update processing recorded in the IC chip 51 of the cash card 50 will be described with reference to FIG.

  The user who has received the notification of the update request including the password for update first selects “update biometric data” displayed on the touch panel display of the automatic teller machine 20 and inserts the cash card into the cash card insertion unit. 50 is inserted. In this case, the control unit 21 of the automatic teller machine 20 acquires the deposit account identifier stored in the IC chip 51 of the cash card 50 (step S3-1). Next, the control part 21 acquires the feature-value stored in the IC chip 51 of the cash card 50 (step S3-2). Next, the automatic teller machine 20 acquires the biometric data of the bearer of the cash card 50 (step S3-3). And the control part 21 calculates a feature-value based on the acquired biometric data (step S3-4). And the control part 21 calculates the similarity degree of the feature-value calculated based on the biometric data acquired from the bearer of the cash card 50, and the feature-value acquired from the IC chip 51 of the cash card 50 (step S3-5). ). The specific process in steps S3-1 to S3-5 is the same as the process in steps S1-1 to S1-5 described above.

Then, the control unit 21 compares the calculated similarity with the third reference value (step S3-6). Here, the third reference value is set to 80% similarly to the second reference value. When the calculated similarity is equal to or greater than the third reference value (in the case of “YES” in step S3-6), the automatic teller machine 20 acquires an update password (step S3-7). Specifically, the control unit 21 first requests the user of the automatic teller machine 20 to input an update password. In the present embodiment, the control unit 21 outputs an instruction for inputting the update password to the touch panel display. Then, the bearer of the cash card 50 inputs the update password described in the e-mail regarding the update request on the touch panel display.

  When the update password is input by the user, the control unit 21 of the automatic teller machine 20 transmits the input update password and the deposit account identifier to the host system 30 via the in-line network 40. . The management computer 31 of the host system 30 searches the user data storage unit 32 based on the received deposit account identifier, extracts the update password, and this update password and the update password received from the automatic teller machine 20. And match. Then, the automatic teller machine 20 is notified of the verification result. The control unit 21 of the automatic teller machine 20 that has received this notification updates the biometric data (step S3-9) when the update passwords match (in the case of “YES” in step S3-8). Specifically, the control unit 21 writes data relating to the feature amount calculated based on the biometric data acquired in step S3-4 in the reference biometric data area of the user authentication data 510 of the cash card 50. Then, the control unit 21 of the automatic teller machine 20 transmits a reference biometric data update completion notification including the deposit account identifier to the host system 30. Receiving this, the management computer 31 of the host system 30 specifies the user data 320 of the user data storage unit 32 by the deposit account identifier, and resets the update password. And this update process is complete | finished.

  If the update passwords do not match (in the case of “NO” in step S3-8), the control unit 21 of the automatic teller machine 20 outputs to the touch panel display that the update passwords do not match, This update process is terminated.

  On the other hand, when the calculated similarity is less than the third reference value (in the case of “NO” in step S3-6), the automatic teller machine 20 rejects the update of the biometric data (step S3-10).

As described above, according to the present embodiment, the following effects can be obtained.
In the above embodiment, the automatic teller machine 20 calculates the feature amount based on the acquired biometric data, generates biometric authentication data, compares it with the feature amount of the reference biometric data of the cash card 50, and the similarity Is calculated. If the similarity is less than the second reference value, authentication is rejected. If the similarity is greater than or equal to the second reference value and less than the first reference value, the number of alarms is added and recorded in the cash card 50. When the alarm continuous history count becomes equal to or greater than the predetermined number, the host system 30 records the update password in the user data storage unit 32 and notifies the user's contact information. When the update password input in the automatic teller machine 20 and the update password in the user data storage unit 32 match, the reference biometric data in the cash card 50 is updated. As a result, when the similarity is equal to or higher than the second reference value, the user is registered when the user is authenticated as the user and the similarity is equal to or higher than the second reference value and lower than the first reference value for a predetermined number of times. Update password can be sent to the contact. Then, the user can update the reference biometric data using this update password. In this way, the first reference value and the second reference value are provided, the second reference value is used for personal authentication, and the reference biometric authentication data is updated using the first reference value having a higher similarity than the second reference value. It can be used to determine whether it is necessary. By the way, the degree of similarity gradually decreases as the biological information changes over time, but the degree of similarity may be lower due to, for example, the influence of sweat adhesion, in addition to the case of such changes in biological information over time. There is also. If the similarity is gradually decreasing, the reference biometric data may be updated while the similarity is equal to or higher than the second reference value. For example, when the similarity is less than the first reference value, the reference biometric authentication is performed. Data may be updated. However, for example, if the degree of similarity is greater than or equal to the second reference value and less than the first reference value due to the influence of sweat adhesion, etc. The similarity may be equal to or higher than the first reference value. Therefore, when the similarity is equal to or higher than the second reference value and lower than the first reference value for a predetermined number of times, the reference biometric authentication data is updated, so that the similarity is more reliably changed over time. The reference biometric data can be updated only when the degree is decreasing. Then, when updating the reference biometric data, only the user who has received the update password notification uses the update password to notify the registered contact information of the user of the update password. The reference biometric data can be updated.

  In the above-described embodiment, the host system 30 notifies the update password to the contact information of the user by transmitting an email including the update password to the user's email address. This allows the user to receive a notification regarding the update password at an e-mail address registered in advance. Therefore, only the user himself / herself can know the update password, and only the user himself / herself can update the reference biometric authentication data using this update password.

  In the above embodiment, the reference biometric data is recorded on the IC chip 51 of the cash card 50, and the biometric data generated based on the biometric data acquired by the automatic teller machine 20 and the IC chip 51 are recorded. The number of times that the similarity calculated by comparing with the reference biometric authentication data is greater than or equal to the second reference value and less than the first reference value is recorded. As a result, an instruction for updating the reference biometric data recorded on the IC chip 51 can be issued using the number of alarms recorded on the IC chip 51. In addition, since the number of alarms is recorded in the IC chip 51, it is possible to determine whether or not the reference biometric authentication data needs to be updated without recording data regarding the number of alarms in the host system 30.

In addition, you may change the said embodiment into the following aspects.
In the above embodiment, the reference biometric data recorded on the IC chip 51 is updated with the biometric data generated based on the biometric data acquired by the automatic teller machine 20 during the update process. Instead of this, even if the biometric data acquired for the same user is obtained multiple times, the reference biometric data is generated, and thus the reference biometric data recorded in the IC chip 51 is updated. Good. Specifically, biometric data generated based on the biometric data acquired by the automatic teller machine 20 is recorded on the IC chip 51 of the cash card 50. Then, as in the case of the above embodiment, when the similarity is greater than or equal to the second reference value and less than the first reference value for a predetermined number of times, an update password is generated and notified to the user contact information. To do. The update of the reference biometric data using the update password is performed by using the biometric data generated based on the biometric data acquired by the automatic teller machine 20 and the biometric data recorded on the IC chip 51. The reference biometric authentication data is generated and updated with the reference biometric authentication data. Thereby, reference biometric data can be generated using a plurality of pieces of biometric data acquired for the same person. For this reason, the reference biometric data that absorbs the variation in the biometric data can be generated and updated.

In the above embodiment, if the similarity is less than the second reference value, the transaction is rejected. If the similarity is less than the third reference value (= second reference value), the update of the reference biometric authentication data is rejected. Further, the cash card 50 may be disabled when the same feature amount or similarity is repeated a predetermined number of times. For example, the feature amount is recorded on the IC chip 51 of the cash card 50, and the feature amount recorded on the IC chip 51 is compared with the feature amount generated based on the biological data acquired by the automatic teller machine 20. . When the completely identical feature amount is detected for a predetermined number of times, a flag for making the cash card 50 unusable is recorded on the IC chip 51. When acquiring biological information from a living body, it is not always possible to obtain biological information having the same feature amount. Each time, the same feature amount is obtained when the living body is not used. For this reason, when the completely same feature amount is continuously detected a predetermined number of times, this can be detected to detect damage when impersonation is being performed, thereby preventing damage.

  In the above embodiment, the update password is notified to the user's contact information by sending an email including the update password to the user's email address. Instead, it may be performed by mailing a notice in which the update password is written in the user's address. In this case, the user's address is registered in the user data storage unit 32 as the user's contact information. Then, the host system 30 creates a notification with this address as the recipient. Then, this notice is mailed to the recipient. The user who has received this notice updates the biometric data using the update password described in this notice. In this case as well, the update password can be used to confirm the identity of the user by receiving notification of the update password at the user's registered address.

  In the above embodiment, alarm information (number of alarms) is recorded on the IC chip 51 of the cash card 50. Alternatively, the alarm information may be recorded on the host system 30 side. Specifically, alarm information (number of alarms) is recorded in the storage means on the host system 30 side in association with the deposit account identifier. In this case, in the confirmation process in step S1-8, first, the automatic teller machine 20 transmits the deposit account identifier to the host system 30. In step S2-1, the management computer 31 acquires alarm information (number of alarms) recorded on the host system 30 side, thereby acquiring an alarm continuous history. In this case, the management computer 31 may perform all the processes in steps S2-1 to S2-5 in the confirmation process. In step S2-5, the management computer 31 records the alarm information (alarm count) in the storage means on the host system 30 side in association with the deposit account identifier. Then, the end of the confirmation process is notified to the automatic teller machine 20. As a result, information recorded on the IC chip 51 can be reduced, and alarm information (number of alarms) can be monitored on the host system 30 side.

  In the above embodiment, the alarm frequency is recorded as the alarm information, but the alarm information to be recorded is not limited to this. For example, the number of times alarm information is recorded may be obtained by recording the alarm occurrence time as alarm information and counting the number of recorded alarm occurrence times.

  In the above embodiment, the present invention is applied to a bank system using the automatic teller machine 20, but the present invention is not limited to this. What is the case when biometric authentication is performed using biometric authentication data and reference biometric authentication data based on biometric data acquired from the recording medium owner by recording reference biometric authentication data on a recording medium? The present invention can also be applied to.

  In the above embodiment, a finger vein pattern is used as biometric information for biometric authentication. The biometric information used for biometric authentication is not limited to this, and may be a vein pattern of other parts of the body such as a palm vein pattern, a fingerprint, a voiceprint, a retina, an iris pattern, or the like.

1 is a schematic diagram of a system according to an embodiment of the present invention. Explanatory drawing of the process sequence of one Embodiment of this invention. Explanatory drawing of the process sequence of one Embodiment of this invention. Explanatory drawing of the process sequence of one Embodiment of this invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 20 ... Automatic teller machine as an authentication apparatus, 30 ... Host system as a server, 51 ... IC chip as a recording medium, 32 ... User data storage part as user data storage means.

Claims (6)

Using a recording medium in which a user identifier and reference biometric authentication data are recorded, an authentication device, and a server having user data storage means for recording data relating to an update password and contact information in association with the user identifier A method for authenticating an individual,
The authentication device generates biometric authentication data based on the acquired biometric data, compares the biometric authentication data with the reference biometric authentication data of the recording medium, and calculates a similarity;
The authentication device rejects authentication when the similarity is less than a second reference value, records alarm information when the similarity is greater than or equal to the second reference value and less than the first reference value, and the alarm information When the number of records continuously exceeds a predetermined number of times, the server is notified,
The server records the generated update password in the user data storage means, and performs a process of notifying the update password to the contact information of the user;
When the server receives an update request including the update password input by the authentication device, the received update password is compared with the update password of the user data storage means. Instructing the authentication device to update reference biometric data, and executing the step of updating the reference biometric data of the recording medium by the authentication device. Recording biometric data generated based on biometric data on the recording medium,
The update of the reference biometric data by the authentication device is as follows:
Using the biometric authentication data generated based on the acquired biometric data and the biometric authentication data recorded on the recording medium, reference biometric authentication data is generated and updated with the reference biometric authentication data. The personal authentication method according to claim 1.   3. The process for notifying the user contact information of the update password is performed by transmitting an e-mail including the update password to the e-mail address of the user. The person authentication method described in 1. Using a recording medium in which a user identifier and reference biometric authentication data are recorded, an authentication device, and a server having user data storage means for recording data relating to an update password and contact information in association with the user identifier A personal authentication system for performing personal authentication,
The authentication device is
Similarity calculation means for generating biometric authentication data based on the acquired biometric data, comparing with reference biometric data of the recording medium, and calculating similarity;
The authentication device rejects authentication when the similarity is less than a second reference value, records alarm information when the similarity is greater than or equal to the second reference value and less than the first reference value, and the alarm information If the number of records continuously exceeds a predetermined number of times, the correspondence means according to the similarity level to notify the server,
Reference biometric data update means for updating reference biometric data of the recording medium,
The server is
Update password notification means for performing processing for recording the generated update password in the user data storage means and notifying the user contact information of the update password;
When an update request including an update password input by the authentication device is received, the received update password is compared with the update password of the user data storage means. A personal authentication system comprising reference biometric data update instruction means for instructing update of reference biometric data. The authentication apparatus further comprises means for recording biometric authentication data generated based on biometric data on the recording medium,
The reference biometric data update means
The biometric authentication data generated based on the acquired biometric data and biometric authentication data recorded on the recording medium are used to generate reference biometric authentication data and update the reference biometric authentication data. The personal authentication system according to claim 4, wherein:   6. The process for notifying the user contact information of the update password is performed by transmitting an e-mail including the update password to the e-mail address of the user. The identification system described in 1.

Images