JP4843389B2 - Biometric authentication system - Google Patents

Description

  The present invention relates to a biometric authentication system installed in an automobile or the like, and relates to a technology that realizes improvement of security, prevention of outflow of biometric information, and the like at a high level.

  To improve convenience and security in recent automobiles, a smart key that unlocks a door lock or allows the engine to be started just by a driver carrying a smart key (electronic key) approaching the vehicle body. The one equipped with the keyless entry system (smart key system) used has appeared. In the smart key system, an in-vehicle device (smart ECU) storing an ID code is mounted on the vehicle body side, and a transponder storing the ID code is stored in the smart key. For example, when the driver approaches the door The ID code on the smart key side and the ID code on the in-vehicle device side are collated, and the door lock is unlocked only when both ID codes match.

However, even if the smart key system is installed, if the smart key is stolen or if the driver leaves the car with the smart key left in the car, theft by a malicious third party Could not be prevented. In addition, when going out for shopping, a passenger who does not have a smart key may not be able to open the door and load luggage. As a keyless entry system that solves such problems, only those who are registered in advance after the in-vehicle device performs biometric authentication using finger veins, etc. A biometric authentication system that permits door unlocking and engine starting has been proposed (see Patent Document 1).
JP-A-2005-262

  The biometric authentication system of Patent Document 1 has another type of problem caused by registering the owner's biometric information in the in-vehicle device. Automobiles are often distributed as used cars by replacement after being sold as a new car. At this time, the biometric information of the original owner registered in the in-vehicle device flows out. Further, when biometric information remains in the in-vehicle device, it is not preferable from the viewpoint of security because the original owner can get on and start the engine after being sold as a used car. Although biometric information can be rewritten (erase and newly registered) by a data erasure / registration operation on the in-vehicle device, there is a risk that the biometric information may not be completely deleted due to an operation error or an erasure method. As a result, there were problems such as making the original owner feel uneasy. Furthermore, when a salesperson moves a vehicle at a used car dealer, etc., or when a customer takes a test ride, it is necessary to register biometric information each time. It was.

  The present invention has been made in view of such a background, and an object of the present invention is to provide a biometric authentication system that realizes improvement in security and prevention of outflow of biometric information at a high level.

A biometric authentication system according to a first aspect of the present invention is a data collection means for collecting a person's biometric information as input data, a detachable data storage means for storing the registrant's biometric information as registration data, and a password input. A password input means provided, a password storage means for storing a registration password, a password verification means for verifying the password input from the password input means and the registration password, and holding the data storage means , Determination means for determining whether or not the person is the registrant by comparing the input data and the registration data with a holding means having an electric lid that sometimes prevents the data storage means from being removed by closing. If, based on the collation result of the password verification means, said registered from the data storage means A data erasing means for erasing data, by opening the electric lid after erasure of the registration data by the data erasing means is performed, the electric lid opening to allow removal of the data storage means from the holding means And a data writing means for writing registration data to the data storage means under a predetermined write permission command including input of the registration password after the data storage means is reattached to the holding means. It is provided with.

The invention of claim 2 is the in biometric authentication system according to claim 1, based on the collation result of the password verification unit, a password change means for allowing the change of the registration password by said password changing means And a write permission command output means for outputting the write permission command to the data writing means when the registered password is changed.

  Further, the invention of claim 3 is the biometric authentication system according to claim 1 or 2, wherein when the person is a registrant, the opening / closing body of the vehicle is unlocked / locked. It is characterized by permission.

  According to a fourth aspect of the present invention, in the biometric authentication system according to the third aspect, when the person is a registrant who satisfies a predetermined condition, driving of the vehicle is permitted.

According to a fifth aspect of the present invention, in the biometric authentication system according to the fourth aspect, the holding unit holds a smart card, and the smart card taken out from the holding unit is removed when the data storage unit is removed . A key system is provided that allows the holder to unlock / lock the opening / closing body and to drive the vehicle.

  According to the first aspect of the present invention, when the data storage means is removed, the registered data in the data storage means is erased, so that the biometric information of the original registrant does not flow out. In addition, if a new data storage means is used at the time of new registration, the original owner will never have anxiety about the outflow of biometric information. According to the second aspect of the present invention, when biometric information is newly registered in the data storage means, it is necessary to change the registration password, so that it is possible to prevent an unauthorized ride by the original registrant. In addition, according to the third and fourth aspects of the invention, it is possible to reliably prevent the outflow of biometric information, theft by the original owner, and the like when buying and selling a car equipped with a biometric authentication system. In addition, according to the invention of claim 5, it is possible to smoothly move and test ride a car at a used car dealer or the like.

Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a perspective view illustrating a front part of a vehicle interior of an automobile according to the embodiment, and FIG. 2 is a block diagram illustrating a schematic configuration of the biometric authentication ECU according to the embodiment.

<< Configuration of Embodiment >>
As shown in FIG. 1, an automobile (vehicle) V of the embodiment is a so-called four-door sedan type passenger car, and four fingers (not shown) excluding the thumb of the right hand at a portion corresponding to the outer handle 2 of the driver side door 1. ) Of the first vein sensor (infrared CCD camera: data collection means) 3 for imaging the back side vein pattern, and a second vein sensor for imaging the surface side vein pattern of the right index finger 5 at the right end of the instrument panel 4 Data collection means) 6 is installed. The instrument panel 4 is provided with a display 7 such as a navigation system or a television at the center upper part, a card holder (holding means) 9 is provided on the left side of the steering column 8, and a biometric authentication ECU 10 is provided at the center lower part. Has been.

  The card holder 9 includes an electric lid 11 opened by an electric actuator, an MC slot (holding means) 13 into which a memory card (data storage means) 12 is inserted / held, and an SC slot into which a smart card 14 is inserted / held. 15. In the MC slot 13, there is a memory reader / writer (data writing means, data erasing means) 16 (see FIG. 2) for reading data from the memory card 12 and writing / erasing data to / from the memory card 12. It is arranged. In the SC slot 15, a card sensor 18 (see FIG. 2) for detecting whether or not the smart card 14 is inserted is disposed. As the memory card 12, for example, a flash memory such as a CF card or an SD card can be adopted, and it is desirable that the memory card 12 be supplied as a commercial product or a genuine part of an automobile manufacturer. On the other hand, the biometric authentication ECU 10 includes a microcomputer, ROM, RAM, peripheral circuits, various drivers, and the like, and is connected to each device described above via a communication line (CAN (Controller Area Network) in this embodiment). Has been. Note that an antenna 17 (see FIG. 2) that communicates with the smart card 14 is installed in a proper place on the body of the automobile V.

<Biometric ECU>
As shown in FIG. 2, the biometric authentication ECU 10 includes an input interface 21, a biometric authentication unit (determination unit) 22, a smart authentication unit 23, a password confirmation / communication unit (password storage unit, password verification unit) 24, An authentication switching unit 25, an authentication signal generating unit 26, a data erasing / writing unit 27, and an output interface 28 are provided.

  The input interface 21 is connected to the first and second vein sensors 3 and 6, the display 7, the memory reader / writer 16, the antenna 17, and the card sensor 18. The biometric authentication unit 22 performs biometric authentication by comparing input data from the first and second vein sensors 3 and 6 with registration data from the memory reader / writer 16. The smart authentication unit 23 performs smart authentication by comparing the ID code of the smart card 14 input from the antenna 17 with the ID code registered in the built-in memory. The password confirmation / communication unit 24 communicates with the display 7 and outputs various commands to an authentication switching unit 25 and a data erasing / writing unit 27 described later.

  The authentication switching unit 25 switches between biometric authentication and smart authentication based on the authentication switching command input from the password confirmation / communication unit 24. Based on the authentication result input from the authentication switching unit 25, the authentication signal generation unit 26 generates an authentication signal for a driver's seat side door lock, an engine ECU (both not shown), and the like. The data erasing / writing unit 27 generates a lid release signal and a data erasing / writing signal based on the data erasing command and the data writing command input from the password confirmation / communication unit 24. The output interface 28 outputs signals from the authentication signal generation unit 26, the data erasing / writing unit 27, and the like to the electric lid 11, the memory reader / writer 16, and the like in addition to the driver's seat door lock and the engine ECU.

<< Operation of Embodiment >>
<Biometric authentication>
When a person approaches the parked automobile V and grasps the outer handle 2 of the driver's seat side door 1 with his hand, the first vein sensor 3 images the back side vein pattern of the four fingers of the right hand and is not shown in the figure. A detection signal from the handle sensor is sent to the biometric authentication ECU 10, and the biometric authentication ECU 10 starts biometric authentication control whose procedure is shown in the flowchart of FIG.

  When biometric authentication control is started, the biometric authentication ECU 10 first captures input data (imaging result) from the first vein sensor 3 in step S1 of FIG. 3, and stores the data in the memory card 12 input from the memory reader / writer 16 in step S2. The registered data and the input data are collated to determine whether the person is a registrant. If this determination is No, the biometric authentication ECU 10 ends the biometric authentication control without performing the subsequent processing. In general, when a person is a registrant, the input data matches with one registered data existing in the memory card 12 with a predetermined matching degree. The first vein sensor 3 images the back side vein pattern of the four fingers of the right hand, but the collation in step S2 may be performed only on the middle finger or the like.

  If the person is a registrant and the determination in step S2 is Yes, the biometric authentication ECU 10 outputs an unlock command to the door lock, the trunk lock, etc. of the driver side door 1 in step S3. As a result, the driver and passengers can get in the passenger compartment of the automobile V, and can load luggage on a trunk (not shown).

  When the unlock command is output in step S3, the biometric authentication ECU 10 takes in the input data from the second vein sensor 6 in step S4, and then determines whether or not the person is a registered driver in step S5. If the determination is No, the biometric authentication control is terminated without performing the subsequent processing. If the person is a registered driver and the determination in step S5 is Yes, the biometric authentication ECU 10 outputs an engine start permission command to the engine ECU in step S6. This prevents driving of the vehicle V by a passenger (such as a child) who does not have a driver's license, while the registered driver can start the engine by operating a start button (not shown). If the person is a registered driver, the driving position (seat or steering wheel position, door mirror angle, etc.) corresponding to the registered driver may be called from the memory and reproduced.

<Sales of automobiles>
When selling the vehicle V to a used car dealer or the like, when the current owner performs a menu operation on the display 7 a plurality of times and selects “sale”, the biometric authentication ECU 10 performs the sales control whose procedure is shown in the flowchart of FIG. To start.

  When control at the time of sale is started, the biometric authentication ECU 10 first displays a password input screen on the display 7 in step S11 of FIG. Next, the biometric authentication ECU 10 determines whether or not the current password (for example, A1234) is input in step S12. If this determination is No, the subsequent control is terminated without performing the subsequent processing.

  If the correct password is entered and the determination in step S12 is Yes, the biometric authentication ECU 10 displays the initialization confirmation screen of the memory card 12 on the display 7 in step S13, and then the “OK” button is selected in step S14. Determine whether or not. And if this determination is No, biometrics authentication ECU10 will complete | finish control at the time of sales, without performing a subsequent process. This is because if there are a plurality of registrants and the memory card 12 is mistakenly initialized, the re-registration work takes a lot of time and effort. The current owner informs the sales person of the used car dealer of the current password when the car V is sold.

  When the initialization of the memory card 12 is confirmed by the current owner and the determination in step S14 is Yes, the biometric authentication ECU 10 outputs an initialization command for the memory card 12 to the memory reader / writer 16 in step S15. Thereby, initialization of the memory card 12 by the memory reader / writer 16 is executed, and all registration data (biological information) in the memory card 12 is deleted.

  Next, the biometric authentication ECU 10 performs authentication switching from biometric authentication to smart authentication in step S16, and outputs an opening command to the electric lid 11 in step S17. As a result, unlocking of doors and the like by biometric authentication and starting of the engine cannot be performed, while using the smart card 14 taken out from the card holder 9, a vehicle sales or customer test drive by a salesperson at a used car dealer or the like Is possible.

  Next, the biometric authentication ECU 10 repeatedly determines whether or not the memory card 12 and the smart card 14 have been taken out based on the detection signals from the memory reader / writer 16 and the card sensor 18 in step S18, and this determination is Yes. When this happens, a closing command is output to the electric lid 11 and the sale control is terminated. The original owner can remove the memory card 12 and destroy it so as not to feel uneasy about the outflow of biometric information.

<Purchase of car>
When the vehicle V is sold at a used car dealer or the like, and a new owner selects the “purchase” by performing menu operations on the display 7 a plurality of times, the biometric authentication ECU 10 performs control at the time of purchase shown in the flowchart of FIG. Start.

  When control at the time of purchase is started, the biometric authentication ECU 10 first displays a password input screen on the display 7 in step S21 of FIG. Next, the biometric authentication ECU 10 determines whether or not the current password has been input in step S12. If this determination is NO, the biometric authentication ECU 10 ends the purchase control without performing the subsequent processing. The current password is notified to the new owner by a sales representative of a used car dealer.

  When the correct password is input and the determination in step S22 is Yes, the biometric authentication ECU 10 displays a password change screen on the display 7 in step S23. Next, the biometric authentication ECU 10 determines whether or not a new password (for example, B5678) is input in step S24, and if this determination is No (for example, if the current password is input by mistake). The control at the time of purchase is terminated without performing the subsequent processing.

  When the password is changed and the determination in step S24 is Yes, the biometric authentication ECU 10 outputs an opening command to the electric lid 11 in step S25. Thereby, the new owner can insert the new memory card 12 into the MC slot 13. If the original owner does not feel uneasy about the leakage of biometric information, the memory card 12 pulled out at the time of sale can be stored in a used car dealer or the like, and the memory card 12 can be reused.

  Next, the biometric authentication ECU 10 outputs a write permission command to the memory reader / writer 16 in step S26. As a result, the two types of vein patterns input from the first vein sensor 3 and the second vein sensor 6 are recorded in the memory card 12 as registration data by the memory reader / writer 16. If the memory card 12 is not inserted into the MC slot 13, registration data cannot be recorded on the memory card 12, so a message such as “Please insert the memory card 12” is displayed on the display 7. You may do it.

  Next, the biometric authentication ECU 10 repeatedly determines whether or not the registration data has been written in step S27, and does not perform subsequent processing while this determination is No. This is because, for example, when authentication switching described later is performed in a state where only one type of vein pattern is registered, the smart card 14 cannot unlock the door or start the engine.

  When writing of registration data to the memory card 12 is completed and the determination in step S27 is Yes, the biometric authentication ECU 10 performs authentication switching from smart authentication to biometric authentication in step S28. Thereby, while the smart card 14 becomes invalid, a new owner can unlock the door and start the engine by biometric authentication.

  Next, the biometric authentication ECU 10 repeatedly determines whether or not the smart card 14 is stored based on the detection signal from the card sensor 18 in step S29, and when this determination is Yes, the biolid authentication ECU 10 is closed to the electric lid 11 in step S30. A command is output and the purchase control is terminated.

  In the present embodiment, by adopting the above-described configuration, it is possible not only to effectively prevent the outflow of biometric information and fraud by the original owner, but also to move and test drive the automobile V at a used car dealer or the like. It came to be able to do smoothly.

  This is the end of the description of specific embodiments. However, aspects of the present invention are not limited to these embodiments. For example, although the finger vein pattern is used as the biometric information in the above embodiment, a fingerprint, a face, a voiceprint, or the like may be employed. In the above embodiment, the password is entered or changed at the time of erasing or rewriting the registration data in the data storage means. However, an IC card or a mechanical key that is difficult to duplicate may be used, and these and the password. And may be used in combination. Moreover, in the said embodiment, although the smart card was used for the movement and test drive of a motor vehicle while an owner changes, you may make it use a mechanical key with an immobilizer. In addition, the specific configuration of the vehicle, the specific control procedure, and the like can be changed as appropriate without departing from the scope of the present invention.

It is a perspective view which shows the vehicle interior front part of the motor vehicle which concerns on embodiment. It is a block diagram which shows schematic structure of biometrics ECU which concerns on embodiment. It is a flowchart which shows the procedure of the biometric authentication control which concerns on embodiment. It is a flowchart which shows the procedure of the control at the time of sale which concerns on embodiment. It is a flowchart which shows the procedure of the control at the time of purchase which concerns on embodiment.

Explanation of symbols

3 First vein sensor (data collection means)
6 Second vein sensor (data collection means)
7 Display (password input means)
9 Card holder (holding means)
10 Biometric ECU
12 Memory card (data storage means)
14 Smart card (key system)
16 Memory reader / writer (data writing means, data erasing means)
22 Biometric authentication unit (determination means)
24 Password confirmation / communication unit (password storage means, password verification means)
V Automobile (vehicle)

Claims (5)

Data collection means for collecting biometric information of a person as input data;
Detachable data storage means for storing registrant's biometric information as registration data;
A password input means for entering the password;
Password storage means for storing the registered password;
Password verification means for verifying the password input from the password input means and the registered password;
Holding means for holding the data storage means and having an electric lid for preventing the data storage means from being removed by closing the data storage means in normal times ;
Determining means for determining whether the person is the registrant by comparing the input data and the registration data;
A data erasure unit for erasing the registered data from the data storage unit based on the verification result of the password verification unit ;
An electric lid opening means for opening the electric lid after the data erasing means has been erased and allowing the data storage means to be removed from the holding means;
A data writing unit for writing registration data to the data storage unit under a predetermined write permission command including input of the registration password after the data storage unit is reattached to the holding unit; A biometric authentication system characterized by that. Based on the comparison result of the password verification unit, a password change means for allowing a change of the registered passwords,
2. The write permission command output means for outputting the write permission command to the data writing means when the registered password is changed by the password changing means. Biometric authentication system. Mounted on the vehicle,
The biometric authentication system according to claim 1 or 2, wherein when the person is a registrant, the unlocking / locking of the opening / closing body of the vehicle is permitted.   The biometric authentication system according to claim 3, wherein when the person is a registrant who satisfies a predetermined condition, driving of the vehicle is permitted. The holding means holds an electronic key or a mechanical key;
A key system that enables unlocking / locking of the opening / closing body and driving of the vehicle by a holder of the electronic key or mechanical key taken out from the holding means when the data storage means is removed; The biometric authentication system according to claim 4, wherein the biometric authentication system is characterized.

Images