JP4860346B2 - Personal authentication system and method - Google Patents

Description

The present invention, for example, personal authentication system that authenticates the individual based finger vein or palm vein, iris, retina, fingerprints, the biometric information such as a face, related to the method, in particular, to perform the personal authentication based on biological information The present invention relates to a transaction processing apparatus such as ATM.

  Conventionally, in an ATM installed in a financial institution, password authentication for performing personal authentication using a password represented by a password is performed. In this password authentication, a registered password registered in a passbook or a card is compared with an input password input by a user using a touch panel or a numeric keypad, and if they match, the authentication is successful.

  In this password authentication, if a medium such as a passbook or a card is illegally obtained by a third party and the password is illegally known to a third party, the third party can use the medium and the password with ATM. There is a problem of being able to trade illegally.

  On the other hand, a personal authentication system using biometric information has been proposed as a personal authentication method that can prevent such unauthorized transactions (see Patent Document 1). Since each person's living body is different, it is considered that the above-described fraudulent transaction can be prevented by personal authentication using this biological information.

  In a financial institution, as biometric authentication using such biometric information, an account number and registered biometric information are registered in a server as a set, and when a user inserts a bankbook or card into the ATM, the ATM is The account number is read and transmitted to the server, the server specifies the registered biometric information corresponding to the account number and transmits it to the ATM, and the biometric unit attached to the ATM reads the biometric data read from the registered biometric information and the user. Biometric authentication is performed by collating with information. If the biometric authentication is successful, the ATM permits the transaction.

  However, this biometric authentication has just started to spread, and there are some ATMs that do not support biometric authentication but perform password authentication. For this reason, when biometric authentication is performed, transactions are allowed only with ATMs that support biometric authentication, and users cannot perform transactions with ATMs that do not support biometric authentication, which reduces convenience. there were.

Corresponding to this problem, a method of performing biometric authentication in an ATM that supports biometric authentication, and executing conventional password authentication in an ATM that does not support biometric authentication can be considered. However, with such a method, the security level is lowered, and there remains a conventional problem that a third party who illegally obtains a medium and a password can illegally trade with an ATM that does not support biometric authentication.
JP 2003-186847 A

In view of the above-described problems, the present invention provides a personal authentication system and method that can cope with both improvement of security level and improvement of convenience in a situation where devices that support biometric authentication and devices that do not support biometric authentication coexist. The purpose is to do.

The present invention relates to a first financial institution terminal capable of executing a transaction with a first financial institution, a second financial institution terminal capable of executing a transaction with a second financial institution, and biological information from a living body of a user of the first financial institution. Biometric authentication necessity information regarding the necessity of biometric authentication based on the read biometric information when executing a transaction with the biometric information reading means, the read biometric information, the password, and the first financial institution. And a server belonging to the first financial institution comprising a storage means for storing the information in association with the user, and a necessity information acquisition means for acquiring the biometric authentication necessity information from the storage means. The first financial institution terminal and the second financial institution terminal are selectively provided with biometric authentication means, and the biometric information of the user input to execute a transaction with the first financial institution and the storage Stored in the means Password authentication means having password input means for executing personal authentication by biometric authentication based on the read biometric information and allowing the user to input a password, and executing the transaction with the first financial institution a personal identification system for performing personal authentication by password authentication based on said password stored in the password and the storage unit which is input by the input means, to said second financial institution terminal, the user transactions available Type information acquisition means for acquiring financial institution type information indicating the type of financial institution to be obtained, and the biometric authentication necessity information about the user from the server of the first financial institution indicated in the financial institution type information And biometric authentication necessity information acquisition means for acquiring the biometric authentication means, and the second financial institution terminal is not equipped with the biometric authentication means And a necessity determining unit that determines whether or not biometric authentication is required when the user executes a transaction with the first financial institution based on the biometric authentication necessity information. The personal authentication system is characterized in that, when it is determined that authentication is unnecessary, the user is allowed to perform personal authentication based on the password authentication without performing personal authentication based on the biometric authentication .

  According to the present invention, it is possible to cope with both the improvement of the security level and the improvement of convenience in a situation where there are a mixture of devices that support biometric authentication and devices that do not support biometric authentication.

  An embodiment of the present invention will be described below with reference to the drawings.

  FIG. 1 shows a hardware configuration diagram of a transaction processing system 1 used in a financial institution. In the first embodiment, finger vein authentication is used as biometric authentication. However, the present invention is not limited to finger vein authentication, and other biometric authentication such as palm vein, iris, retina, fingerprint, and face may be used. This transaction processing system 1 functions as a personal authentication system that performs personal authentication regarding the determination of whether or not transactions are possible.

  2 is a registration terminal for registering finger vein information, card information, personal ID, and biometric authentication omission availability flag (a flag indicating whether biometric authentication is not used as biometric authentication necessity information), which is a kind of biometric information, Reference numeral 21 denotes registration software (software) which is an application for registering such information, 22 is a finger vein authentication unit for acquiring finger vein information as a biometric information reading means, and 23 is an RF-ID card which is an information storage medium A card unit for reading card information (medium information) from a card such as.

  The registration terminal 2 includes a control unit configured by a CPU or the like, a storage unit configured by a hard disk, an input unit configured by a touch panel, a display unit configured by a liquid crystal display, etc. An audio output unit composed of speakers and the like, and a communication unit that communicates with the server 5 and the like are provided. The control unit of the registration terminal 2 controls each of these units according to the registration software 21.

  3 is a bank A ATM as a first financial institution terminal that is a financial automatic machine that performs transactions, 31 is an A bank ATM software that is an application of the bank A ATM 3, and 32 is a kind of biological information from a finger that is a living body of a user. A finger vein authentication unit 33 for acquiring certain finger vein information is a card unit for reading information from a card such as a non-contact IC card or a magnetic card. There are two types of A bank ATM3: a type with a finger vein authentication unit 32 and a type without a finger vein authentication unit 32. Both types of A bank ATM3 have the same type. Bank A ATM software 31 is installed. The A bank ATM software 31 includes a personal authentication program for executing personal authentication.

  In addition, the bank A ATM 3 includes a control unit configured with a CPU, a storage unit configured with a hard disk, an input unit configured with a touch panel, a display unit configured with a liquid crystal display, and the like as units not shown. A voice output unit composed of a speaker or the like, a currency processing unit that performs deposit / withdrawal processing of bills and coins, and a communication unit that communicates with the server 5 and the like are provided. The control unit of the A bank ATM 3 controls each of these units in accordance with the A bank ATM software 31. This A bank ATM3 also functions as a personal authentication device for performing personal authentication.

  5 is a server, 51 is a server software that communicates with A bank ATM3, receives personal ID or card information, obtains finger vein information and biometric authentication omission flag from the database, and transmits them to A bank ATM3, 52 It is a database as a storage means for managing finger vein information, card information, personal ID, and biometric authentication omission flag. The card information and personal ID here function as user identification information for identifying the user.

  The server 5 includes a control unit configured by a CPU, a storage unit configured by a hard disk, an input unit configured by a keyboard and a mouse, a display unit configured by a liquid crystal display, and the like as units not shown. And an audio output unit composed of a speaker and the like, and a communication unit for communicating with the registration terminal 2, the A bank ATM 3, and the like. The control unit of the server 5 controls each of these units according to the server software 51. The input unit functions as a password input unit that allows the user to input a password.

Reference numeral 7 denotes a bank A host as a host device that communicates with the bank A ATM 3 to execute transactions, and transactions with users who trade with a bank A card at the bank B ATM 9 as a second financial institution terminal are also performed by the bank B This is executed via the host 8.
The A bank host 7 includes a control unit configured by a CPU, a storage unit configured by a hard disk, an input unit configured by a keyboard and a mouse, a liquid crystal display, and the like as units not shown. An audio output unit including a display unit, a speaker, and the like, and a communication unit that communicates with the A bank ATM 3 and the like are provided. The control unit of the A bank host 7 controls these units according to host software (not shown).

Reference numeral 8 is a B bank host as a second financial institution host that communicates with the B bank ATM 9 and executes transactions. When a card issued by the A bank is inserted into the B bank ATM 9, the card information is stored in the A bank. Processing to send to the host 7 for authentication and transaction is also executed.
The B bank host 8 includes a control unit configured by a CPU, a storage unit configured by a hard disk, an input unit configured by a keyboard and a mouse, a liquid crystal display, and the like as units not shown. An audio output unit including a display unit, a speaker, and the like, and a communication unit that communicates with the A bank ATM 3 and the like are provided. The control unit of the bank B host 8 controls each of these units according to host software (not shown).

  Reference numeral 9 denotes a B bank ATM which is a financial automatic machine for performing transactions, 91 a B bank ATM software which is an application of the B bank ATM 9, and 93 a card unit which reads information from a card such as a non-contact IC card or a magnetic card. Reference numeral 92 denotes a finger vein authentication unit that obtains finger vein information, which is a kind of biometric information, from a finger that is a living body of a user. Bank B ATM 9 is not equipped with a type that includes this finger vein authentication unit 92. Type exists. The same B bank ATM software 91 is installed in any type of B bank ATM 9. The B bank ATM software 91 includes a personal authentication program for executing personal authentication.

  The bank B ATM 9 includes a control unit configured by a CPU, a storage unit configured by a hard disk, an input unit configured by a touch panel, a display unit configured by a liquid crystal display, and the like as units not shown. There are provided a voice output unit composed of a speaker, a currency processing unit that performs deposit and withdrawal processing of banknotes and coins, and a communication unit that communicates with the B bank host 8 and the like. The control unit of the B bank ATM 9 controls each of these units according to the B bank ATM software 91. The bank B ATM 9 also functions as a personal authentication device that performs personal authentication.

  With the above configuration, the user's finger vein information and card information can be registered in the server 5 by the registration terminal 2. The bank A ATM 3 uses the card information and finger vein information stored in the database 52 of the server 5, and the card information read by the card unit 33 and the finger vein information read by the finger vein authentication unit 32. Can be personally authenticated. If the authentication is OK in the personal authentication, various transactions such as a deposit process, a withdrawal process, and a transfer process can be executed. Further, if the card read by the card unit 93 is a card issued by the A bank, the B bank ATM 9 can transmit the card information and the like to the A bank host 7 to execute personal authentication and transaction.

FIG. 2 shows a flowchart of processing executed by the control unit of the bank A ATM 3 when the user executes transaction processing at the bank A ATM 3.
The A bank ATM software 31 on the A bank ATM 3 reads the card information from the card set in the card unit 33 (step S1), and transmits the read card information to the server (step S2).

  Here, when the server software 51 on the server 5 receives the card information from the A bank ATM 3, the server software 51 searches the card information registered in the database 52 on the server 5 for matching card information. If the matching card information exists (if the card information is registered), the finger vein information corresponding to the card information and the biometric authentication omission flag are transmitted to the A bank ATM 3.

  The A bank ATM software 31 on the A bank ATM 3 receives response information including finger vein information and a biometric authentication omission flag from the server 5 (step S3). The communication unit of the bank A ATM 3 at this time functions as necessity information acquisition means for acquiring a biometric authentication omission flag as biometric necessity information.

  If the response information includes finger vein information (step S4: YES), and if the finger vein authentication unit 32 is installed in the A bank ATM 3 (step S5: YES), the A bank ATM software 31 is used by the user. Is instructed to place the finger on the finger vein authentication unit 32 (step S6). Here, the step S5 corresponds to the biometric information reading means presence / absence determination process for determining the presence / absence of the finger vein authentication unit 32 as the biometric information reading means.

  The bank A ATM software 31 then matches the degree of feature points based on the finger vein information (read biometric information) read by the finger vein authentication unit 32 and the finger vein information (registered biometric information) received from the server 5. Finger vein authentication is performed to authenticate whether or not the user is the person by checking whether or not is within a certain range (step S7). This finger vein authentication may be executed by the finger vein authentication unit 32.

  If the finger vein authentication is successful and the authentication is OK (step S8: YES), the bank A ATM 3 continues the transaction (step S11). In this transaction, conventional password authentication (for example, authentication with a four-digit password) is first executed, and transactions such as deposit and withdrawal are permitted if this password authentication is OK.

  If the finger vein authentication unit 32 is not installed in the bank A ATM 3 (step S5: NO), the bank A ATM software 31 does not use biometric authentication as a biometric authentication necessity determination process for determining whether or not biometric authentication is necessary. A biometric authentication omission flag indicating whether the transaction is possible is checked (step S9). The control unit of the A bank ATM 3 that performs this check functions as necessity determination means for determining whether or not biometric authentication is necessary.

If the biometric authentication omission flag is permitted (step S9: YES), the bank A ATM software 31 continues the transaction and performs password authentication and transaction (step S11). The control unit of the bank A ATM 3 at this time functions as a personal authentication unit that allows the personal authentication process by the password authentication without executing the biometric authentication when the necessity determining unit determines that biometric authentication is unnecessary. .
If the biometric authentication omission flag is rejected in step S9 (step S9: NO), the bank A ATM software 31 cancels the transaction (step S10).

  If the finger vein information is not included in the response information received from the server 5 (step S4: NO), since the finger vein is an unregistered user, the transaction is continued without performing finger vein authentication, password authentication and A transaction is performed (step S11).

  FIG. 3 shows a flowchart of processing executed by the control unit of the B bank ATM 9 when a user who has a bank A card executes transaction processing at the B bank ATM 9.

  The B bank ATM software 91 on the B bank ATM 9 reads card information (including a personal ID and a bank name as financial institution type information) from the card set in the card unit 93 (step S21). At this time, the card unit 93 that reads the personal ID functions as an identification information acquisition unit that acquires a personal ID as user identification information for identifying the user. At this time, the card unit 93 that reads the bank name functions as a type information acquisition unit that acquires the bank name as the financial institution type information.

The B bank ATM software 91 determines whether or not the set card is the bank card based on the read bank name (step S22).
If it is the bank card (step S22: YES), the B bank ATM software 91 transmits the read card information to the server (not shown) of the bank or the bank B host 8 which is the host of the bank (step S23). .

  Here, the B bank host 8 or the B bank server that received the card information from the B bank ATM 9 has the same personal ID from the card information registered in the database managed by the B bank host 8 or the B bank server. Search card information. If matching card information exists (if card information is registered), finger vein information and password information corresponding to the card information are transmitted to the B bank ATM 9.

  The B bank ATM software 91 on the B bank ATM 9 receives response information including finger vein information and password information from the B bank host 8 or the B bank server (step S24).

  If the card is not the bank in step S22 (step S22: NO), the B bank ATM software 91 transmits the read card information to the host of the other bank that issued the card (step S25). In this embodiment, the card information is transmitted to the A bank host 7 as the host of the other bank.

  Here, when the host software on the A bank host 7 receives the card information from the B bank ATM 9, it transfers this card information to the server 5. The server 5 searches for the matching card information from the card information registered in the database 52 on the server 5, and if the matching card information exists (if the card information is registered), the server 5 searches for the matching card information. The finger vein information corresponding to the card information and the biometric authentication omission flag are transmitted to the bank A host 7. The A bank host 7 transmits the finger vein information and the biometric authentication omission flag to the B bank ATM 9. The biometric authentication omission flag transmitted here has a meaning of requesting password authentication if permitting and requesting finger vein authentication if rejecting.

  The B bank ATM software 91 on the B bank ATM 9 receives the response information including the finger vein information and the biometric authentication omission flag from the A bank host 7 (step S26). At this time, the communication unit of the bank B ATM 9 functions as a personal authentication related information acquisition means for acquiring a biometric authentication omission flag as personal authentication related information.

  If the finger vein information is included in the response information received in this way (step S27: YES) and the finger vein authentication unit 92 is installed in the B bank ATM 9 (step S28: YES), the B bank ATM software 91 Instructs the user to place the finger on the finger vein authentication unit 92 (step S29).

  Then, the B bank ATM software 91 determines whether or not the feature point coincidence is within a certain range based on the finger vein information read by the finger vein authentication unit 92 and the finger vein information received from the A bank host 7. Thus, finger vein authentication is performed to authenticate whether the user is the person or not (step S30).

  If the finger vein authentication is successful and the authentication is OK (step S31: YES), the bank B ATM 9 continues the transaction (step S34). In this transaction, the conventional password authentication is executed first, and if the password authentication is successful, transactions such as deposit and withdrawal are permitted. The control unit of the bank B ATM 9 that performs the determination in step S31 functions as a transaction availability determination unit that determines whether or not the transaction can be continued based on the finger vein information acquired from the server 5 as personal authentication related information.

  If the finger vein authentication unit 92 is not installed in the B bank ATM 9 (step S28: NO), the B bank ATM software 91 checks a biometric omission omission flag indicating whether or not a transaction using biometric authentication is possible (step S32). ).

  If the biometric authentication omission flag is permitted (step S32: YES), the transaction is continued to perform password authentication and transaction (step S34), and if the biometric omission omission flag is rejected, the transaction is canceled (step S33). .

  If the finger vein information is not included in the response information received from the bank A host 7 (step S27: NO), since the finger vein is an unregistered user, the transaction is continued without performing finger vein authentication, and the password Authentication and transaction are performed (step S34).

  With the above configuration and operation, users place importance on security and refuse transactions that do not use biometric authentication, or prioritize convenience until biometric authentication becomes widespread and execute transactions without using biometric authentication You can choose whether you want it or not, depending on your own intentions.

  That is, the user who wants to make finger vein authentication essential sets the biometric authentication omission flag by the registration terminal 2 to be rejected, and does not perform finger vein authentication in ATMs 3 and 9 that are not provided with the finger vein authentication units 32 and 92. Thus, it is possible to prevent an unauthorized transaction (for example, illegal debit) from being performed by a third party. Therefore, the security level can be improved.

  Further, a user who wants to make a transaction even in ATMs 3 and 9 that are not provided with the finger vein authentication units 32 and 92 sets the biometric authentication omissibility flag to “permitted” by the registration terminal 2, and the finger vein authentication units 32 and 92 are provided. In the ATMs 3 and 9, the finger vein authentication is executed, and in the ATMs 3 and 9 which are not provided with the finger vein authentication units 32 and 92, the transaction can be executed only by the password authentication without executing the finger vein authentication. Accordingly, the ATMs 3 and 9 having the finger vein authentication units 32 and 92 maintain a high security level, and the ATMs 3 and 9 having no finger vein authentication units 32 and 92 can be traded only by password authentication. Can be improved.

  In addition, since the ATM software 31, 91 is configured to change the processing depending on the presence / absence of the finger vein authentication units 32, 92, all ATM 3's are provided for each bank regardless of whether the finger vein authentication units 32, 92 are installed. , 9 can be used by installing the same ATM software 31, 91.

  As a result, version management of the ATM software 31 and 91 can be facilitated, and when installing the ATM software 31 and 91 in the ATM 3 and 9, installation errors due to version differences and model differences can be prevented. It is possible to prevent malfunctions of A bank ATM3 and B bank ATM9 due to the difference.

  Even if the AMT 3 and 9 are not equipped with the finger vein authentication units 32 and 92, if the ATM software 31 and 91 is installed, the finger vein authentication units 32 and 92 are specially installed later. Finger vein authentication can be performed using the finger vein authentication units 32 and 92 without performing any installation or the like.

  In the bank B system, finger vein information is managed by the bank B host 8 or a server (not shown) of the bank B, and the bank B can uniquely authenticate the bank B card. Even if the introduction of the same authentication method is not forced on the B bank, the use of the A bank card at the B bank ATM 9 can be easily realized.

  The finger vein information used by the A bank and the B bank may be managed by the server 5 in common. In this case, the server 5 may be directly connected to the B bank host 8. As a result, finger vein information can be centrally managed regardless of banks.

  Further, the B bank ATM software 91 may be configured not to perform finger vein authentication if it is a bank card. In this case, steps S27 to S33 may be omitted. The bank A host 7 receives the card information transmitted in step S25, confirms the biometric omission skip flag, transmits a password if permitted, and transmits transaction rejection information if denied. That's fine. Thereby, B bank ATM9 can refuse the transaction with the card of A bank in which the biometrics omission omission flag is denied in step S34. In addition, transactions corresponding to the setting of the biometric authentication omission / prohibition flag provided by the A bank can be realized without modifying the B bank ATM software 91 of a type that can only perform password authentication.

  Further, if the bank B ATM software 91 is a card of its own bank, steps S27 to S33 may be omitted as a configuration in which finger vein authentication is not executed, and a personal authentication is requested to a host of another bank in step S25. . At this time, the communication unit of the B bank ATM 9 that requests personal authentication functions as a personal authentication request means. In this case, the bank B ATM software 91 is configured not to execute password authentication in step S34, and after step S21, the user inputs a password, and in step S25, password information and personal authentication request information are added in addition to card information. Just send it. Then, the bank A host 7 receives the card information and the personal authentication request information transmitted in step S25 and confirms the biometric authentication omission flag, and if permitted, the received password and the password registered in the server 5 May be determined, and transaction permission information may be transmitted as a response as an authentication result. If the biometric authentication omission flag is rejected or the passwords do not match, transaction rejection information may be sent as a response as an authentication result. At this time, the communication unit of the B bank ATM software 91 that receives the authentication result functions as a personal authentication related information acquisition unit. With this configuration, the bank B ATM 9 can reject the transaction with the bank A card whose biometric authentication omission flag is denied in step S34. In addition, transactions corresponding to the setting of the biometric authentication omission / prohibition flag provided by the A bank can be realized without modifying the B bank ATM software 91 of a type that can only perform password authentication.

  Similarly, the bank A ATM software 31 may request the bank A host 7 for personal authentication. In this case, the bank A ATM software 31 is configured not to execute password authentication in step S11, and allows the user to input a password after step S1, and in step S2, in addition to the card information, password information and personal authentication request information. Just send it. Then, the A bank host 7 receives the card information and the personal authentication request information transmitted in step S2 and confirms the biometric authentication omission flag, and if permitted, the received password and the password registered in the server 5 May be determined, and transaction permission information may be transmitted as a response as an authentication result. If the biometric authentication omission flag is rejected or the passwords do not match, transaction rejection information may be sent as a response as an authentication result. Thereby, A bank ATM3 can refuse the transaction with the card of A bank in which the biometrics omission omission flag is denied in step S11.

  The bank A ATM software 31 is configured not to handle cards from other banks, but may be configured to execute the same processing as the bank B ATM software 91 described in FIG. Good.

  In addition, although the card information stored in the card is used, the card may not be used at all. In this case, in steps S1 and S21, the personal ID and the bank name (the bank / bank ID or bank ID may be used) are input to the user by the input unit of the A bank ATM3 or the B bank ATM9, and this input is performed. The subsequent processing may be executed based on the personal ID and the bank name. Thereby, a transaction can be permitted without using a card. Even in this case, the user can register in advance whether the transaction is permitted only with the password or the finger vein authentication is required by using the biometric authentication omission propriety flag.

  Next, a second embodiment of the system in which the card possessed by the user is an IC card and biometric information is stored in the IC card will be described. In the second embodiment, the server 5 described in the transaction processing system 1 of the first embodiment is not provided. Instead, finger vein information and a biometric authentication omission flag are individually assigned to each IC card possessed by each user. It is remembered. Since the other configuration is the same as that of the transaction processing system 1 of the first embodiment, detailed description thereof is omitted.

FIG. 4 shows a flowchart of processing executed by the control unit of A bank ATM3 or B bank ATM9 when the user executes transaction processing at A bank ATM3 or B bank ATM9. In the second embodiment, the A bank ATM software 31 and the B bank ATM software 91 are configured to execute the same processing as shown in the following steps S41 to S49.
The ATM software 31 (or 91) on the ATM 3 (or 9) reads the finger vein information and the biometric authentication omission flag from the IC card (step S41), and uses the read finger vein information and the biometric omission omission flag. Thereafter, the processes of steps S42 to S49 are executed.

  Steps S42 to S49 are the same as steps S4 to S11 described in the first embodiment except that the information read from the IC card is used instead of the information received from the server 5, and thus detailed description thereof is omitted.

  With the above configuration and operation, the transaction processing system 1 according to the second embodiment allows transactions to be permitted and improved in convenience to the ATMs 3 and 9 in which the finger vein authentication units 32 and 92 are not mounted as in the first embodiment. The ATMs 3 and 9 that are not equipped with the finger vein authentication units 32 and 92 can cope with both rejecting the transaction and improving the security level.

  In addition, this invention is not limited only to the structure of the above-mentioned embodiment, Many embodiments can be obtained.

The hardware block diagram of the transaction processing system used with a financial institution. The flowchart of the process which the control unit of A bank ATM performs. The flowchart of the process which the control unit of B bank ATM performs. 10 is a flowchart of processing executed by an ATM control unit according to the second embodiment.

1 ... Transaction processing system 3 ... Bank A ATM
9 ... Bank B ATM
22 ... Finger vein authentication unit 52 ... Database 93 ... Card unit

Claims (2)

A first financial institution terminal capable of executing transactions with the first financial institution;
A second financial institution terminal capable of executing transactions with the second financial institution;
Biometric information reading means for reading biometric information as biometric information from the biometrics of the user of the first financial institution;
A storage that stores the read biometric information, the password, and biometric authentication necessity information regarding the necessity of biometric authentication based on the read biometric information when executing a transaction with the first financial institution in association with the user. And communication connection with a server belonging to the first financial institution provided with necessity information obtaining means for obtaining the biometric authentication necessity information from the storage means,
In the first financial institution terminal and the second financial institution terminal,
An individual by biometric authentication that is selectively provided with biometric authentication means and is based on the biometric information of the user input to execute a transaction with the first financial institution and the read biometric information stored in the storage means Perform authentication,
Password authentication means having password input means for allowing the user to input a password, the password input by the password input means for executing a transaction with the first financial institution and the storage means stored in the storage means a <br/> personal authentication system that performs personal authentication by password-based authentication and a password,
In the second financial institution terminal,
Type information acquisition means for acquiring financial institution type information indicating the type of financial institution that the user intends to use for trading;
Biometric authentication necessity information acquisition means for acquiring the biometric authentication necessity information about the user from the server of the first financial institution indicated in the financial institution type information;
When the biometric authentication means is not installed in the second financial institution terminal, the necessity of biometric authentication when the user executes a transaction with the first financial institution based on the biometric authentication necessity information is determined. A necessity determination means for determining,
When the necessity determination unit determines that the biometric authentication is unnecessary, the user is allowed to perform the personal authentication based on the password authentication without executing the personal authentication based on the biometric authentication. Personal authentication system. A first financial institution terminal capable of executing transactions with the first financial institution;
A second financial institution terminal capable of executing transactions with the second financial institution;
Biometric information reading means for reading biometric information as biometric information from the biometrics of the user of the first financial institution;
A storage that stores the read biometric information, the password, and biometric authentication necessity information regarding the necessity of biometric authentication based on the read biometric information when executing a transaction with the first financial institution in association with the user. And communication connection with a server belonging to the first financial institution provided with necessity information obtaining means for obtaining the biometric authentication necessity information from the storage means,
In the first financial institution terminal and the second financial institution terminal,
An individual by biometric authentication that is selectively provided with biometric authentication means and is based on the biometric information of the user input to execute a transaction with the first financial institution and the read biometric information stored in the storage means Perform authentication,
Password authentication means having password input means for allowing the user to input a password, the password input by the password input means for executing a transaction with the first financial institution and the storage means stored in the storage means Perform personal authentication by password authentication based on password
A personal authentication method by a personal authentication system ,
In the second financial institution terminal,
The type information acquisition means acquires financial institution type information indicating the type of financial institution that the user intends to use for transactions,
The biometric authentication necessity information about the user is acquired from the server of the first financial institution indicated in the financial institution type information by biometric authentication necessity information acquisition means,
When the biometric authentication means is not installed in the second financial institution terminal, the necessity of biometric authentication when the user executes a transaction with the first financial institution based on the biometric authentication necessity information is determined. Determined by necessity determination means,
When the necessity determination unit determines that the biometric authentication is unnecessary, the user is allowed to perform the personal authentication based on the password authentication without executing the personal authentication based on the biometric authentication. <Br / > Personal authentication method.

Images