JP5112541B2 - Biometric authentication method and biometric authentication system - Google Patents

Description

  The present invention relates to a biometric authentication method and a biometric authentication system for detecting a biometric feature and performing personal authentication. It relates to the biometric authentication system used.

  With recent development of information processing technology, various types of fraudulent transactions using electronic data have become prominent. In particular, along with the establishment of identity verification using a password using a card, the relationship between the card data and the password is known, and the acquisition of illegal card data and passwords has become prominent and the damage is also increasing.

  As a method for solving the problem of the method based on the password, various biometric authentication techniques using the characteristics of a human biological body are provided. For example, biometric fingerprints, irises, facial features, blood vessel images (palms and fingers) have been proposed. In such a biometric authentication technique, own biometric feature data is registered in a personal card. In order to make a transaction by biometric authentication, the biometric information reader provided in the transaction device acquires the biometric information of the individual, compares it with the registered biometric data of the personal card, and can make a transaction based on the comparison result. (For example, refer to Patent Document 1).

JP 2001-067523 A

  However, in the prior art, issuing a personal card for biometric authentication requires various procedures from user application to issuance and takes time. In addition, in order to issue a biometric card at the counter, if the number of personal cards increases, security must be taken into account, which is troublesome. In addition, since the issue of the personal card is a burden on the issuer, an issue cost is required, and the spread of the cost is also hindered.

  As described above, the biometric authentication technique is an extremely effective method against fraudulent transactions. However, the process of issuing a personal card with security is complicated and the issuing cost is high, which is an obstacle to the spread.

  SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to provide a biometric authentication method and a biometric authentication system using a portable communication device for simplifying a process of issuing a medium that can use a biometric authentication method and realizing personal authentication by biometric authentication. It is in.

  Another object of the present invention is to provide a biometric authentication method and a biometric authentication system using a mobile communication device for reducing the cost of issuing a medium that can use a biometric authentication method and realizing personal authentication by biometric authentication. There is to do.

  Furthermore, another object of the present invention is to provide a biometric authentication method and a biometric authentication system using a portable communication device for immediately issuing a medium that can use a biometric authentication method while maintaining security.

In order to achieve this object, the biometric authentication method of the present invention includes a step of accessing a server that manages a biometric authentication application via a mobile communication network from a mobile communication terminal having a non-contact communication function and a mobile communication function, Downloading the biometric authentication application from the server to the mobile communication terminal; creating a storage area for the biometric authentication application to store the biometric information in a memory of the mobile communication terminal; and the biometric authentication application Displaying the completion of creation of the storage area managed by the biometric authentication application in the memory of the mobile communication terminal on the screen of the mobile communication terminal and notifying the user of completion of registration preparation, and the biometric authentication application The biometric registration finger displayed on the screen of the portable communication terminal by The in response to the user selected, and initiating a registration sequence by the biometrics authentication application, the biological detector, from a user of said portable communication terminal, a step of detecting biometric information of the user, The registration device communicates with the mobile communication terminal in which the biometric authentication application has been downloaded, and writes the detected biometric information in a storage area managed by the biometric authentication application of the mobile communication terminal; after the writing, When the biometric authentication application of the mobile communication terminal is activated, the terminal device that detects biometric information of a user communicates with the non-contact communication function of the mobile communication terminal, and is detected by the terminal device Collating biometric information with the biometric information written in the portable communication terminal.

The biometric authentication system of the present invention has a non-contact communication function and a portable communication function, and accesses a server that manages the biometric authentication application via the portable communication network, and downloads the biometric authentication application. The biometric information of the user is detected from the terminal and the user of the mobile communication terminal, and the biometric authentication application of the mobile communication terminal is managed by communicating with the mobile communication terminal to which the biometric authentication application has been downloaded. A biometric information registration device that writes the detected biometric information in a storage area, and after the writing, the biometric authentication application of the mobile communication terminal is activated to detect a user's biometric information, and the non-portability of the mobile communication terminal Communicate using the contact communication function, and write the detected biological information and the mobile communication terminal The biometric information is collated with a terminal device for biometric authentication, and the biometric authentication application of the mobile communication terminal creates the storage area for storing the biometric information in the memory of the mobile communication terminal, The biometric authentication application displays the completion of creation of the storage area managed by the biometric authentication application in the memory of the mobile communication terminal on the screen of the mobile communication terminal, notifies the user of the completion of registration preparation, and the notification Thereafter, in response to a user selecting a biometric registration instruction displayed on the screen of the mobile communication terminal by the biometric authentication application, a registration sequence with the biometric information registration device is started by the biometric authentication application .

  In the present invention, it is preferable that the downloading step includes a step of downloading the biometric authentication application and a designation of a storage area of the portable communication terminal managed by the biometric authentication application.

  In the present invention, it is preferable that the downloaded portable communication terminal further includes a step of creating an area for storing the biological information in accordance with the designation of the storage area.

  In the present invention, it is preferable that the writing step includes a step of writing the biometric information and the personal information of the user for using biometric authentication.

  In the present invention, it is preferable that the writing step includes a step of writing the biometric information and the user account information for using biometric authentication.

  In the present invention, it is preferable that the downloading step includes a step of downloading the biometric authentication application and personal information of the user for using the biometric authentication.

  In the present invention, it is preferable that the downloading step includes a step of downloading the biometric application and account information of the user for using the biometric authentication.

  Furthermore, in the present invention, preferably, when the verification is good, the terminal further includes a step of processing a transaction using the non-contact communication function of the mobile communication terminal.

Download the biometric authentication application from the server to the mobile communication terminal, create an authenticated biometric information area, image its own biometric information, and store the biometric data (venous data) and the account number in the common area of the mobile communication terminal Store. Thereby, the mobile communication terminal has a function of a personal card in which biometric information is stored, and issuance of the biometric authentication card is completed. Therefore, the biometric authentication medium issuance process is simplified and the issuance cost can be reduced. In addition, when the biometric authentication application completes the creation of the biometric information area, the completion is displayed on the screen of the mobile communication terminal, so that the user can know that the mobile communication terminal can be registered. It is possible to register biometric information smoothly even when using a terminal. After the completion notification, the biometric authentication application starts the registration sequence in response to the user selecting the biometric registration instruction displayed on the screen of the mobile communication terminal by the biometric authentication application. Since only the communication terminal can execute the registration sequence, the function of a personal card can be given with a simple operation and maintaining security. After writing, biometric authentication can be performed by starting the biometric authentication application of the mobile communication terminal, so that the user can perform registration and authentication with a simple operation.

It is a block diagram of the biometric authentication system of one embodiment of this invention. It is a block diagram of the portable communication terminal of FIG. It is a block diagram of the window terminal of FIG. It is a block diagram of the automatic transaction apparatus of FIG. It is a flowchart of the registration process of FIG. It is explanatory drawing of the registration process of FIG. It is a flowchart of the utilization process of FIG. It is explanatory drawing of the biometric information registration process of FIG. It is a flowchart of the biometrics authentication process of FIG. FIG. 10 is a biometric authentication process flowchart of FIG. 9. It is a block diagram of the biometric authentication system of other embodiment of this invention.

  Hereinafter, embodiments of the present invention will be described in the order of a biometric authentication system, registration processing to a mobile communication device, use processing of a mobile communication device, and other embodiments. Not limited.

[Biometric authentication system]
1 is a configuration diagram of a biometric authentication system according to an embodiment of the present invention, FIG. 2 is a configuration diagram of a portable communication device to which a biometric authentication function of FIG. 1 is provided, and FIG. 3 is a diagram of the window device of FIG. FIG. 4 is a block diagram of the automatic transaction operation of FIG. The biometric authentication system of FIG. 1 shows a financial system using an ATM (Automated Teller Machine) used in a financial institution as an example.

  As shown in FIG. 1, the mobile communication terminal 1 is composed of a mobile phone having a data read / write function of a non-contact IC card. As will be described later with reference to FIG. 2, for example, a Felica (registered trademark) compatible mobile phone is suitable for the mobile phone. For example, NTT DoCoMo F901i (manufactured by Fujitsu Limited) is equipped with a FeliCa-compatible i application.

  The Felica-compatible terminal 2 is configured by an automatic cash transaction machine described in FIG. The i-appli server 3 communicates with the mobile communication terminal 1 by e-mail, secures a common area for the i-appli in the mobile communication terminal 1 and downloads the biometric authentication application in response to the access of the mobile communication terminal 1. The bank host 5 is connected to the Felica compatible terminal 2 and executes transaction processing by biometric authentication using the mobile communication terminal 1.

  A branch terminal 6A of the financial institution is provided with a window terminal 6A to which the biometric imaging device 10 and the Felica reader / writer 21 are connected. The biological imaging apparatus 10 acquires vein (for example, palm, finger) data from the living body as biological information. The Felica reader / writer 21 communicates with the Felica chip of the mobile communication terminal 1 to read / write data of the mobile communication terminal 1. The window terminal 6A adds an account number or the like to the acquired biometric information and registers it in the mobile communication terminal 1. This window terminal 6A is connected to the bank host 5 and executes these registration processes.

  As shown in FIG. 2, the portable terminal 1 includes a display unit 13, a key input unit 14, a long range communication unit (portable communication unit) 15, a CPU 11, a memory 12, and a non-contact IC card specification. It has a short range communication unit (FeliCa chip) 16 and a bus 17 for connecting them.

  The portable terminal 1 has a mail function including a browser, a voice telephone function, an i-application execution function, and a contactless IC card function. For this reason, the CPU 11 activates these functions in accordance with the key operation of the key input unit 14. Furthermore, the memory 12 includes an i-mode (registered trademark) application program area 12-1 and a common area 12-2 for storing account numbers, biometric information, and the like that can be traded. The common area 12-2 is an authenticated area that can be used by the Felica chip 16, and is allocated as a region used by the biometric authentication application in response to an application for the use of Felica, as will be described later.

  Next, the window terminal 6A in FIG. 1 has a CPU unit, a keyboard, and a display as hardware. Further, the window terminal 6A includes a vein sensor 10 as a living body imaging unit and a Felica reader / writer 21 including an antenna 21A and an RF (Radio Frequency) unit 21B for wireless communication with the Felica chip of the mobile communication terminal 1. Connecting.

  Further, as shown in FIG. 3, the window terminal 6 </ b> A includes an OS (Operating System) 60 such as Windows (registered trademark), a window processing application 61, package software 62, and middleware 63 as software. Further, the window terminal 6A includes a vein authentication driver 67 that drives the biological imaging unit 10, here, a vein sensor, a vein authentication library (program) 66 that performs vein authentication processing, and FelicaR that drives the Felica reader / writer 21. / W driver 65 and a Felica library (program) 64 for processing data from the Felica chip.

  As shown in FIG. 4, the automatic machine 2 includes a control unit 20, a memory (magnetic disk device) 22, a customer operation unit 23, a card unit 24, a cash unit 25, a line control unit 26, and the biological imaging unit 10 ( Here, it has a vein sensor). The card unit 24 reads a magnetic card / IC card inserted from a card slot (not shown) and returns it to the slot. The card unit 24 optically reads a card (embossed portion) by an image sensor. Further, the card unit 24 prints the transaction result on the receipt paper with the print head, and discharges the printed receipt to the card entrance.

  The UOP section (customer operation section) 23 is a display with a touch panel (screen display section 23-1 and key input touch panel 23-2) 23-1, 23-2, voice guidance section 23-3, and customer sensor 23-. It is composed of four.

  The cash unit 25 is composed of a recycle type banknote / coin depositing / dispensing machine, and a banknote / coin counting section for discriminating and counting banknotes / coins input from banknote / coin inlets and a banknote storage section for storing banknotes / coins. (Stacker) and a unit control unit for performing a depositing operation for storing the counted banknotes / coins in the stacker, and for performing a dispensing operation for taking out the requested banknotes / coins from the stacker and discharging them to the banknote / coin inlet / outlet. Have.

  The line control unit 26 communicates with the host computer 5 (the host of the financial institution) via the public line 4 or the like. The control unit 20 controls the customer operation unit 23, the card unit 24, the cash unit 25, and the line control unit 26 using the program and data in the memory 22.

  Furthermore, the automatic machine 2 has a mobile communication unit 21 that communicates with the mobile communication terminal 1. The portable communication unit 21 is configured by the non-contact IC card reader / writer 21 described with reference to FIG. 3 and connected to the control unit 20. Further, the software 20 to 67 described with reference to FIG.

  In the present invention, as shown in FIG. 1, a vein application is downloaded from the i-appli server 3 to the mobile communication terminal 1 to create an authenticated biometric information area. The user brings the mobile communication terminal 1 to the window 6 and images his / her own biometric information, and stores the biometric data (venous data) and the account number in the common area 12-2 of the mobile communication terminal 1. . Thereby, the mobile communication terminal 1 has a function of a personal card in which biometric information is stored, and issuance of the biometric authentication card is completed.

  The user causes the automatic communication device 2 to read the mobile communication terminal 1, performs personal authentication by biometric authentication, and executes automatic transaction from an account. For this reason, the card issuance process is simplified, the cost of the issuer can be reduced, and biometric authentication can be realized.

[Registration process for mobile communication devices]
FIG. 5 is a flowchart of registration processing of the mobile communication terminal according to the embodiment of the present invention, and FIG. 6 is an explanatory diagram of the operation. As shown in FIG. 5, the i-appli server 3 includes an i-mode server 3A, an i-appli download server 3B, and a Felica compatible server 3C. First, the vein authentication application is registered in the i-mode (registered trademark) i-application download menu, and the common area 12-2 of the Felica chip is secured.

That is, an application is made to a service company that operates the Felica network, and an allocation of a specific area of the common area 12-2 and an ID (identifier) of the vein authentication application are obtained. The Felica service company stores the allocated ID, area, and registration data necessary for initialization in the Felica compatible server 3C. Also, the vein application is registered in the i-mode server 3A as an i-appli download menu.

  As shown in FIG. 5, when a user accesses a homepage to the i-mode server 3 </ b> A using the i-mode browser 18 of the mobile communication terminal 1, the user can select a vein authentication application site as the i-application.

  As shown in FIG. 6, when the user operates the mobile communication terminal 1 to connect to the vein authentication application download site (i-application download server) 3 </ b> B, the site is being connected to the display unit 13 of the mobile communication terminal 1. Is displayed. When the user operates the key 14 of the mobile communication terminal 1, the vein authentication application is downloaded from the i-appli server 3 </ b> B to the mobile communication terminal 1 and stored in the memory 12.

  Next, when the user activates the downloaded vein authentication application of the mobile communication terminal 1, the user connects to the Felica compatible server 3C with the URL embedded in the vein authentication application. The Felica compatible server 3 </ b> C transmits various types of registration information to the Felica chip 16 (including the memory 12) to the mobile communication terminal 1 in accordance with the above-described assigned ID from the mobile communication terminal 1.

  In response to this, the mobile communication terminal 1 creates a vein authentication service area in the common area 12-2 and registers this area in the Felica chip 16. For example, a palm vein region creation progress screen as shown in FIG. 6 is displayed on the display unit 13 of the mobile communication terminal 1, and as shown in FIG. 5, a vein authentication service region (account region or (Biological information area) is created.

  Here, the palm vein authentication application restricts area access by mutual authentication via the Felica reader / writer 21, and reads / writes the assigned vein authentication service area by designation after authentication. In addition, as will be described later, a function for performing biometric authentication by performing a comparison process between biometric information (vein data) registered in the biometric information area of the common area and biometric information via the Felica reader / writer 21 as necessary. have.

  In this way, the vein authentication application from the communication site is downloaded to the mobile communication terminal 1, and a service area is created in the Felica chip. Since access to this service area is restricted by the vein authentication application, a security function can be added, and a function of a biometric authentication medium can be added to the mobile communication terminal 1. Therefore, it is possible to prepare for the issuance of a biometric authentication card in advance anytime and anywhere by the user's operation.

[Use processing of mobile communication terminal]
Next, the use processing of the mobile communication terminal will be described with reference to FIGS. FIG. 7 is a flowchart of biometric data registration processing and biometric authentication processing of the mobile communication terminal according to the embodiment of the present invention, and FIG. 8 is an operation explanatory diagram of the biometric data registration processing.

  First, the biometric data registration process will be described. As described with reference to FIG. 1, the user has the mobile communication terminal 1 in which the above-described vein application is registered, and visits the bank window 6. As shown in FIG. 8, the user applies to the counter 6 for an account transaction using a mobile phone with a predetermined application form. At the window 6, the bank host 5 is inquired and verified. For example, the user fills in the application form with his / her name, date of birth, address, telephone number, mobile phone number, account number, seal or PIN, and submits it to the window. At the counter, these matters are inquired to the bank host 5 to identify whether the user of the account number is the principal. Confirm your mobile number on the spot.

  When the user is confirmed, the user holds the mobile phone 1 compatible with the non-contact IC card function (for example, FeliCa) over the Felica reader / writer 21 of the window terminal 6A. The window terminal 6A performs mutual authentication with the mobile phone 1 using the Felica library 64, and activates the i-appli of the mobile phone 1 when the mutual authentication is satisfactory. As a result, the vein authentication application of the mobile phone 1 is activated as shown in FIG. On the display unit 13 of the mobile phone 1, the selection screen of the title “xx bank mobile phone” shown in FIG. 8 is displayed. Here, “cash card transaction”, “registration account inquiry”, and “biological registration” are displayed as selection menus.

  When the user selects “Biometric registration” on this screen, the guidance screen “Please hold your phone over the sensor” in FIG. 8 is displayed on the display unit 13 of the mobile phone 1. On this screen, you can choose to cancel the selection.

  On the other hand, in the window terminal 6A, in response to the selection of the biometric registration, the “vein registration by mobile phone” screen G1 of FIG. 8 is displayed. On this screen G1, “registration” and “inquiry” can be selected. When the user selects registration on the screen G1, the guidance screen G2 of “Please hold your phone” in FIG. 8 is displayed. On this screen, you can choose to cancel the selection.

  Next, the window terminal 6A displays an account confirmation screen G3. On this screen G3, the account number and the personal information that have been verified first are displayed. When confirmation is pressed on this screen G3, the window terminal 6A displays a palm vein reading guidance screen G4. In response to this, the user holds his / her palm over the vein sensor 10. The vein sensor 10 reads the vein image of the palm and sends it to the vein authentication library 66 of the window terminal 6A. The vein authentication library 66 extracts the characteristics of the vein pattern from the vein image and creates biometric data (vein data).

  Further, the window terminal 6A writes the vein data, the account data, and the like in the common area 12-2 managed by the vein authentication application of the mobile phone 1 by the Felica reader / writer 21 via the Felica library 64. Then, trial authentication is performed. That is, the window terminal 6A displays the palm vein reading guidance screen G5 again. In response to this, the user holds his / her palm over the vein sensor 10. The vein sensor 10 reads the vein image of the palm and sends it to the vein authentication library 66 of the window terminal 6A. The vein authentication library 66 extracts the characteristics of the vein pattern from the vein image and creates biometric data (vein data).

  On the other hand, the window terminal 6A reads the vein data registered in the common area 12-2 of the mobile phone 1 with the Felica reader / writer 21 via the Felica library 64, and the vein data read again with the vein authentication library 66. The collated vein data is collated to confirm the collation. Alternatively, the read vein data is notified to the vein authentication application of the mobile phone, and collation is confirmed in the mobile phone. If the collation result is good, the window terminal 6A displays a registration completion screen G6, and the registration completion screen is also displayed on the display unit 13 of the mobile phone 1.

  Upon completion of this registration, as shown in FIG. 7, the vein authentication application of the mobile phone 1 notifies biometric information registration to the Felica-compatible server 5 </ b> A of the financial institution via the mobile communication network 8. That is, the account information and registration information are stored in the Felica compatible server 5A.

  In this way, the biometric information is registered in the mobile phone 1 and a transaction or the like by biometric authentication becomes possible.

  Next, the biometric authentication process will be described with reference to FIGS.

  (S10) As shown in FIG. 10, when the user presses the i-appli key with the key input unit 14 of the mobile terminal 1, the CPU 11 activates the i-appli and displays the i-appli standby screen on the display unit 13. indicate. On the other hand, the automatic transaction machine 2 uses the customer operation unit 23 as a transaction selection screen G10 to perform normal card transactions such as “deposit”, “payment”, “balance inquiry”, “passbook entry”, and transactions on mobile phones. Display the “Transaction on mobile phone” selection icon.

  (S12) When the user selects “transaction on mobile phone” on the displayed transaction selection screen G10, the automatic transaction machine 2 guides the customer operation unit 23 to hold the mobile phone over the Felica sensor 21. The screen G11 is displayed. When the user holds the short range communication unit 16 of the mobile phone 1 over the mobile communication unit 21 of the ATM 2, the account number and the biometrics described above are transferred from the short range communication unit 16 by the well-known non-contact IC card read / write sequence. Information or the like is communicated to the portable communication unit 21 of the ATM 2 in a non-contact manner. Upon receiving this, the ATM 1 displays an account selection screen G12 on the customer operation unit 23. In this account selection screen G12, the account numbers transmitted from the mobile phone 1 are listed. When the user selects an account to be traded from the customer operation unit 23, a transaction selection screen G13 using a mobile phone is displayed on the customer operation unit 23. On this transaction selection screen G13, only the transaction items that can be automatically traded with the mobile phone 1 are displayed. Here, only “payment”, “payment”, and “balance inquiry” can be selected.

  (S14) When the user selects a transaction item from the customer operation unit 23, the ATM 2 displays a palm vein reading guidance screen G14 on the customer operation unit 23. In response to this, the user holds his / her palm over the vein sensor 10. The vein sensor 10 reads a vein image of the palm and sends it to the vein authentication library 66 of ATM2. The vein authentication library 66 extracts the characteristics of the vein pattern from the vein image and creates biometric data (vein data). Then, the vein authentication library 66 of ATM 2 collates the read vein data with the vein data registered in the mobile phone 1 to confirm the collation. If the authentication is unsuccessful (unsuccessful), a retry is made. If the authentication is not successful even after a predetermined number of retries, the service process is terminated and the service process is blocked.

  (S16) On the other hand, if the authentication is successful, ATM2 determines the transaction type of the mobile phone selected in step S12.

  (S18) The ATM 2 executes a well-known payment process according to the payment selection. For example, when an amount input screen is displayed on the screen 23-1 of the customer operation unit 23, the amount is input, and the end of the amount input is detected, an amount confirmation screen is displayed on the screen 23-1 of the customer operation unit 23. When detecting the pressing of the confirmation key, the control unit 20 displays a computer communication screen on the screen 23-1 of the customer operation unit 23.

  During this time, the control unit 20 transmits the selected account data and the amount to the host computer 5 via the line control unit 26 and obtains a response from the host computer 5. When the response from the host computer 5 is a payment permission, the control unit 20 issues a receipt with the card unit 24 when the use refusal issuance is designated. Then, the control unit 20 instructs the cash unit 25 to release the input amount of cash. When the cash unit 25 discharges the amount of cash (banknote), the control unit 20 displays a banknote release screen on the screen 23-1 of the customer operation unit 23. When detecting the withdrawal of cash, the control unit 20 displays a transaction end screen on the screen 23-1 of the customer operation unit 23. Then, the process returns to step S12.

  (S20) When a deposit transaction is selected in step S12, the control unit 20 displays a cash (banknote) insertion screen on the screen 23-1 of the customer operation unit 23. On this screen, a guidance message “Bill insertion” is displayed. The control unit 20 opens the insertion slot for the cash unit 25. When the control unit 20 detects that a banknote has been inserted into the insertion slot of the cash unit 25, the control unit 20 displays a cash counting screen on the screen 23-1 of the customer operation unit 23. During this time, the cash unit 25 counts the inserted banknotes.

  When the control unit 20 receives a count end notification from the cash unit 25, the control unit 20 displays an amount confirmation screen on the screen 23-1 of the customer operation unit 23. On this screen, the counted amount and a confirmation key are displayed. When detecting the pressing of the confirmation key, the control unit 20 displays a computer communication screen on the screen 23-1 of the customer operation unit 23. During this time, the control unit 20 transmits the selected account data and the counted amount to the host computer 5 via the line control unit 26 and obtains a response from the host computer 5.

  When the response from the host computer 5 is the deposit permission, the control unit 20 issues a receipt with the card unit 24 when the use refusal issuance is designated. Then, the control unit 20 displays a receipt issuance screen on the screen 23-1 of the customer operation unit 23. On this screen, a guidance message “Please take a copy of the service” is displayed. When detecting the receipt extraction, the control unit 20 displays a transaction end screen on the screen 23-1 of the customer operation unit 23. Then, the process returns to step S12.

  (S22) When the balance inquiry is selected in step S12, the control unit 20 displays a computer communication screen on the screen 23-1 of the customer operation unit 23 and on the screen 23-1 of the customer operation unit 23. During this time, the control unit 20 transmits the selected account data to the host computer 5 via the line control unit 26 and obtains a response from the host computer 5. When receiving a response from the host computer 5, the control unit 20 displays a balance confirmation screen on the screen 23-1 of the customer operation unit 23. On this screen, an “account number”, “its balance”, and a confirmation key are displayed. The control unit 20 prints and issues a receipt with the card unit 24 when the confirmation key is pressed and issuance of usage records is designated. Then, the control unit 20 displays a receipt issuance screen on the screen 23-1 of the customer operation unit 23. When detecting the receipt extraction, the control unit 20 displays a transaction end screen on the screen 23-1 of the customer operation unit 23. Then, the process returns to step S12.

  In this manner, the biometric data from the mobile phone 1 is read, biometrically authenticated, and a normal automatic transaction is executed with the account data. In this case, the transaction type is limited to “payment”, “deposit”, and “balance inquiry” for the transaction service from the mobile terminal. As a result, it is possible to prevent the display of an extra transaction item for the user and to facilitate the user.

  Moreover, since the portable terminal 1 can have data of a plurality of accounts as shown in the screen G12 of FIG. 9, it is not necessary to have a card for each account. That is, a plurality of cards can be collected and a service convenient for the user can be provided.

  As a biometric authentication method, for example, as a biometric authentication method suitable for a portable terminal, in addition to fingerprint authentication, authentication using a blood vessel image of a finger, a blood vessel image of a palm, an emblem, and the like are preferable.

[Other embodiments]
FIG. 11 is a block diagram of a system according to another embodiment of the present invention. 11, the same components as those shown in FIG. 1 are indicated by the same symbols. Here, the account number of the user who applied for is downloaded from the bank host 5 to the i-appli server 3. The vein application and the account number are downloaded from the i-αppli server 3 to the mobile communication terminal 1, the authenticated biometric information area is created, and the account number is stored. The user brings the mobile communication terminal 1 to the window 6 and images his / her own biological information, and stores the biological data (venous data) in the common area 12-2 of the mobile communication terminal 1. Thereby, the mobile communication terminal 1 has a function of a personal card in which biometric information is stored, and issuance of the biometric authentication card is completed.

  The user causes the automatic communication device 2 to read the mobile communication terminal 1, performs personal authentication by biometric authentication, and executes automatic transaction from an account. For this reason, the card issuance process is simplified, the cost of the issuer can be reduced, and biometric authentication can be realized.

  In the above-described embodiment, biometric authentication has been described with palm vein pattern authentication. However, it can also be applied to other biometrics such as finger vein patterns, fingerprints, blood vessels on the back of hands, palm prints, and facial features. In addition, although explained in the automatic machine for financial business, it can be applied to an automatic machine in other fields such as an automatic ticketing machine and a vending machine.

  Furthermore, although the non-contact communication system from the portable terminal 1 has been described using the Felica system, other IC card non-contact communication systems and other non-contact communication systems such as infrared rays can be used. Similarly, although the mobile terminal has been described as a mobile phone, a mobile communication terminal such as a PDA can be used.

  (Additional remark 1) The step which accesses the server which manages a biometrics application from a portable communication terminal which has a non-contact communication function and a portable communication function via a portable communication network, The said biometric authentication from the said server to the said portable communication terminal Downloading an application; creating a storage area for the biometric authentication application to store the biometric information in the memory of the mobile communication terminal; and biometric authentication application in the memory of the mobile communication terminal The creation completion of the storage area managed by the application is displayed on the screen of the mobile communication terminal, the step of notifying the user of the completion of registration preparation, and the biological detector from the user of the mobile communication terminal, A step of detecting biometric information of a user, and a registration device comprising: A terminal device that communicates with a mobile communication terminal in which a mobile station has been downloaded and writes the detected biometric information in a storage area managed by the biometric authentication application of the mobile communication terminal; Communication using the non-contact communication function of the mobile communication terminal, and collating biometric information detected by the terminal device with biometric information written in the mobile communication terminal. A biometric authentication method.

  (Supplementary note 2) The biometric authentication method according to supplementary note 1, wherein the downloading step includes a step of downloading the biometric authentication application and designation of a storage area of the portable communication terminal managed by the biometric authentication application.

  (Supplementary note 3) The biometric authentication method according to supplementary note 2, further comprising the step of creating an area in which the downloaded mobile communication terminal stores the biometric information in accordance with the designation of the storage area.

  (Supplementary note 4) The biometric authentication method according to supplementary note 1, wherein the writing step includes a step of writing the biometric information and personal information of the user for using biometric authentication.

  (Supplementary note 5) The biometric authentication method according to supplementary note 4, wherein the writing step includes a step of writing the biometric information and the account information of the user for using biometric authentication.

  (Supplementary note 6) The biometric authentication method according to supplementary note 1, wherein the downloading step includes a step of downloading the biometric authentication application and the personal information of the user for using the biometric authentication.

  (Supplementary note 7) The biometric authentication method according to supplementary note 6, wherein the downloading step includes a step of downloading the biometric authentication application and the account information of the user for using the biometric authentication.

  (Supplementary note 8) The biometric authentication method according to supplementary note 1, further comprising a step of performing transaction processing using the non-contact communication function of the mobile communication terminal at the terminal when the collation is good.

  (Supplementary Note 9) A portable communication terminal having a non-contact communication function and a portable communication function, accessing a server that manages a biometric authentication application via a portable communication network, and downloading the biometric application, and the portable communication Detecting the biometric information of the user from the user of the terminal, communicating with the mobile communication terminal to which the biometric authentication application has been downloaded, and detecting the detection in a storage area managed by the biometric authentication application of the mobile communication terminal A biometric information registration device for writing the biometric information, and detecting the biometric information of the user, using the non-contact communication function of the mobile communication terminal, and communicating with the detected biometric information and the mobile communication terminal A terminal device for biometric authentication by collating the written biometric information, and the biometric authentication application of the portable communication terminal. Creates the storage area for storing the biometric information in the memory of the mobile communication terminal, and the biometric authentication application completes the creation of the storage area managed by the biometric authentication application in the memory of the mobile communication terminal, A biometric authentication system that displays on a screen of a mobile communication terminal and notifies the user of completion of registration preparation.

  (Supplementary note 10) The biometric authentication system according to supplementary note 9, wherein the server downloads the biometric authentication application and designation of a storage area of the mobile communication terminal managed by the biometric authentication application.

  (Supplementary note 11) The biometric authentication system according to supplementary note 10, wherein the downloaded mobile communication terminal creates an area for storing the biometric information in accordance with the designation of the storage area.

  (Additional remark 12) The said registration terminal writes the said biometric information and the said user's personal information for utilizing biometric authentication, The biometric authentication system of Additional remark 9 characterized by the above-mentioned.

  (Additional remark 13) The said registration terminal writes the said biometric information and the said user's account information for utilizing biometric authentication, The biometric authentication system of Additional remark 12 characterized by the above-mentioned.

  (Supplementary note 14) The biometric authentication system according to supplementary note 9, wherein the server downloads the biometric authentication application and the personal information of the user for using the biometric authentication.

  (Supplementary note 15) The biometric authentication system according to supplementary note 14, wherein the server downloads the biometric authentication application and the account information of the user for using the biometric authentication.

  (Supplementary note 16) The biometric authentication system according to supplementary note 9, wherein the collation device performs transaction processing using the non-contact communication function of the mobile communication terminal when the collation is good.

Download the biometric authentication application from the server to the mobile communication terminal, create an authenticated biometric information area, and store the biometric data (vein data) and the account number obtained by capturing the image of the own biometric in the common area of the mobile communication terminal Thus, the mobile communication terminal has a function of a personal card in which biometric information is stored, and issuance of the biometric authentication card is completed. For this reason, the issuing process can be simplified and the issuing cost can be reduced. In addition, when the biometric authentication application completes the creation of the biometric information area, the completion is displayed on the screen of the mobile communication terminal, so that the user can know that the mobile communication terminal can be registered. It is possible to register biometric information smoothly even when using a terminal. After the completion notification, the biometric authentication application starts the registration sequence in response to the user selecting the biometric registration instruction displayed on the screen of the mobile communication terminal by the biometric authentication application. Since only the communication terminal can execute the registration sequence, the function of a personal card can be given with a simple operation and maintaining security. After writing, biometric authentication can be performed by starting the biometric authentication application of the mobile communication terminal, so that the user can perform registration and authentication with a simple operation.

1 Mobile phone (mobile communication terminal)
2 Automatic transaction equipment (ATM)
5 Host computer 10 Biological reader (imaging device)
11 CPU
12 Memory 16 Short range communication unit (FeliCa chip)
20 Control Unit 21 Reading Device 23 Customer Operation Unit 24 Card Unit 25 Cash Unit 26 Line Control Unit

Claims (2)

Accessing a server for managing a biometric authentication application from a mobile communication terminal having a non-contact communication function and a mobile communication function via a mobile communication network;
Downloading the biometric application from the server to the mobile communication terminal;
Creating a storage area for the biometric application to store the biometric information in a memory of the mobile communication terminal;
Displaying the completion of creation of the storage area managed by the biometric authentication application in the memory of the mobile communication terminal in the memory of the mobile communication terminal on the screen of the mobile communication terminal, and notifying the user of the completion of registration preparation;
In response to a user selecting a biometric registration instruction displayed on the screen of the mobile communication terminal by the biometric authentication application, starting a registration sequence by the biometric authentication application;
A biological detector detects the user's biological information from the user of the mobile communication terminal;
A registration device communicating with a mobile communication terminal in which the biometric authentication application is downloaded, and writing the detected biometric information in a storage area managed by the biometric authentication application of the mobile communication terminal;
After the writing, the terminal device that detects the biometric information of the user by the activation of the biometric authentication application of the mobile communication terminal communicates using the non-contact communication function of the mobile communication terminal, and the terminal device A biometric authentication method comprising: comparing biometric information detected in step 1 with biometric information written in the mobile communication terminal. A mobile communication terminal having a non-contact communication function and a mobile communication function, accessing a server managing a biometric authentication application via a mobile communication network, and downloading the biometric authentication application;
From the user of the mobile communication terminal, the biometric information of the user is detected, communicated with the mobile communication terminal downloaded with the biometric authentication application, and stored in the storage area managed by the biometric authentication application of the mobile communication terminal A biometric information registration device for writing the detected biometric information;
After the writing, the biometric authentication application of the mobile communication terminal is activated to detect the biometric information of the user, communicate using the non-contact communication function of the mobile communication terminal, and the detected biometric information And the biometric information written in the mobile communication terminal, and having a terminal device for biometric authentication,
The biometric authentication application of the mobile communication terminal creates the storage area for storing the biometric information in the memory of the mobile communication terminal, and the biometric authentication application manages the biometric authentication application in the memory of the mobile communication terminal. Display the creation completion of the storage area to be displayed on the screen of the mobile communication terminal, notify the user of the completion of registration preparation ,
After the notification, the biometric authentication application starts a registration sequence with the biometric information registration device in response to the user selecting a biometric registration instruction displayed on the screen of the mobile communication terminal by the biometric authentication application. A biometric authentication system characterized by that.

Images