JP5203286B2 - Biometric authentication system, biometric authentication method, and information processing apparatus - Google Patents

Description

  The present invention relates to a biometric authentication system, a biometric authentication method, and an information processing apparatus, and more specifically, to a technique that enables biometric authentication processing to be executed at high speed even when a large number of templates are registered.

  Techniques have been proposed for managing entry / exit and availability of predetermined areas and facilities using biometric authentication processing. For example, security that allows only legitimate persons to perform guarded actions in a guarded area, with the objective of increasing the security of the guarded object in the guarded area where only specific users can enter and leave at relatively low cost. A portable device that is issued to the authorized person, the authentication information enabling authentication of the validity of the portable device, and the authentic issuer specific to the portable device Using the authentication information stored in the portable device possessed by the person who intends to enter the guarded area and the portable device storing the unique information that is the information of the mobile device. , Allowing the owner of the portable device whose validity is authenticated to enter the guarded area, and allowing the owner of the portable device whose validity is not verified to enter the guarded area. Security area to refuse Read the specific information stored in the portable device from the portable device possessed by the person who enters the guarded area, the legitimacy of which is authenticated by the provisioning means, the storage means, and the authentication means, Specific information reading means stored in storage means, information input means for receiving input of information from a person who intends to act in the guard area, and the unique information that matches the information received by the information input means When stored in the storage means, the person to be guarded is permitted, and the personal information that matches the information received by the information input means is not stored in the storage means. Access to a guarded action guard means for refusing an action, and a portable device possessed by a person leaving the guard area, and the specific information reading means is A security system (see Patent Document 1) characterized in that it includes specific information read from the portable device and stored in the storage means, and exit management means for deleting the specified specific information from the storage means. Proposed.

  A user management system for managing entry / exit of a user who uses a play facility with one or more attractions and usage status, with the objective of improving usability and security for the user. A registration device that is installed at the entrance of a play facility and registers user authentication information for entering the play facility, a management server that manages user authentication information registered by the registration device, and each attraction in the play facility And an authentication device that provides authentication information of a user who intends to use the attraction to the management server and requests authentication, and the registration device acquires image information of the face of the user. Image processing means for extracting features of the user's face by performing image processing on the image information acquired by the image information acquisition means, and usage extracted by the image processing means Notification means for notifying the management server of the facial features as authentication information, and the authentication device obtains image information acquisition means for acquiring image information of the user's face and image information acquired by the image information acquisition means. An image processing unit that extracts a facial feature of the user by performing image processing; and a notification unit that notifies the management server of the facial feature of the user extracted by the image processing unit as authentication information. Notifies the authentication device of the database for storing the authentication information notified from the registration device, the verification means for verifying the authentication information notified from the authentication device with the authentication information stored in the database, and the verification result by the verification means A user management system in an amusement facility characterized by comprising a notification means (see Patent Document 2) has also been proposed.

JP 2001-076270 A JP 2004-126791 A

  By the way, when performing such biometric authentication processing, the biometric information to be authenticated is compared with the registered biometric information (template) of the authentication source to determine the match. When the number of registered biometric information is enormous, that is, when there are a large number of registrants, the verification operation of the biometric information to be authenticated and each of the registered biometric information (in some cases, all of the registered biometric information) It becomes necessary to perform the authentication, and the authentication process takes a lot of time.

  Therefore, the present invention has been made in view of the above problems, and an object of the present invention is to provide a technique capable of executing biometric authentication processing at high speed even in a situation where a large number of templates are registered.

  In order to solve the above problem, in the present invention, biometric information is registered in a plurality of servers or tables, and the search range is narrowed down by specifying a server (table) to be searched. More specifically, the biometric authentication system of the present invention includes an authentication server that actually executes biometric authentication processing, a biometric information registration terminal and a biometric authentication terminal used by a user who wants to receive biometric authentication, and the authentication It is a computer system comprised of an information processing apparatus that manages a server and also performs mediation processing between each terminal of the user and an authentication server.

  The information processing apparatus that constitutes such a biometric authentication system includes a storage device that stores a first table that stores identification information of an authentication server, an address on a network, and data of the maximum number of biometric information that can be registered.

  Further, the information processing apparatus receives data on the current registration number of biometric information from each authentication server connected via a network, reads the value of the maximum number of registrable registrations of the authentication server in the first table, A margin specifying unit is provided that subtracts the current number of registrations from the number that can be registered to calculate a registration margin number for each authentication server, and stores it in association with the corresponding authentication server in the first table.

  In addition, the information processing apparatus receives a biometric information registration request from a user from a registration terminal or an input device on a network, and an authentication server whose registration margin number stored in the first table is a predetermined value or more, A candidate presenting unit is provided that identifies as a registered server candidate, extracts identification information and an address of the registered server candidate from the first table, and returns them to the registration terminal or output device.

  Further, the registration terminal constituting the biometric authentication system transmits a biometric information registration request to the information processing apparatus connected via a network in response to an instruction from a user, and the identification information and address of the registration server candidate Is obtained from the information processing device, and a candidate information obtaining unit is provided for displaying identification information of the registered server candidate on the output device.

  Further, the registration terminal acquires the biometric information of the user from the biometric information reading device, and sends the identification information and biometric information of the corresponding user to the address of the registration authentication server selected by the user from among the registration server candidates. A biological information transmission unit for transmitting data is provided.

  The authentication server that constitutes the biometric authentication system includes a storage device that stores a member table that stores biometric information identification information and biometric information in association with each other.

  The authentication server receives user identification information and biometric information from the registration terminal, stores the user identification information and biometric information in the member table, increments the current registration number of the biometric information in the member table, and calculates the value of the current registration number. Is transmitted to the information processing apparatus connected via a network.

  The margin specifying unit of the information processing device specifies an authentication server having the largest number of registration margins in the first table, and uses the identification information and address of the corresponding authentication server as registration server candidate information. It may be stored in two tables.

  In this case, the candidate presentation unit of the information processing apparatus receives a biometric information registration request from a user from the registration terminal or the input device, reads out information on registration server candidates stored in the second table, and Return to registration terminal or output device.

  On the other hand, the biometric information transmission unit of the registration terminal acquires the biometric information of the user from the biometric information reading device, and transmits the identification information and biometric data of the corresponding user to the address of the registration server candidate. It will be.

  In addition, the margin specifying unit of the information processing apparatus sets an authentication server that has received an administrator's designation from the input device among the authentication servers registered in the first table as a registered server candidate, and identification information of the corresponding authentication server And the address may be stored in the second table of the storage device as information of the registration server candidate.

  The margin specifying unit of the information processing apparatus calculates the registration margin number at regular intervals, and when there is no authentication server whose registration margin number is equal to or greater than a predetermined value, information on registration server candidates in the second table Is moved to the third table, and when there is an authentication server whose registration margin number is equal to or greater than a predetermined value, the information on the existing registration server candidates stored in the second table is moved to the third table and the registration margin The authentication server having the largest number may be specified, and the identification information and address of the corresponding authentication server may be stored in the second table as information on the current registered server candidate.

  The authentication terminal constituting the biometric authentication system receives an instruction of identification information of an authentication server from a user who wants to receive biometric authentication by using an input device, and the identification information is sent to the information processing apparatus connected via a network. An address request unit that transmits an address request for the authentication server including the address and receives the address of the authentication server from the information processing apparatus.

  Further, the authentication terminal acquires the biometric information of the user from a biometric information reading device, transmits an authentication request including the biometric information and the identification information of the user to the address of the authentication server, and the corresponding authentication An authentication request unit that receives an authentication result from the server is provided.

  In this case, the information processing apparatus receives the address request from an authentication terminal or input device on the network, and extracts the address of the authentication server corresponding to the identification information indicated by the address request from the first table. It is preferable to provide an address reply unit that returns the address of the authentication server to the authentication terminal or output device.

  On the other hand, the authentication server receives the authentication request from the authentication terminal, searches the member table for biometric information corresponding to the user identification information included in the authentication request, and searches the biometric information and the authentication request. It is preferable to include an authentication execution unit that performs biometric authentication processing by collating with the biometric information included in.

  In addition, the margin specifying unit of the information processing apparatus uses the registration start candidate information storage start time in the second table and the transfer time to the third table as registration period information in the third table as a corresponding registration server candidate. It may be stored in association with information.

  In this case, the address request unit of the authentication terminal receives biometric information registration time information from the user who wants to receive biometric authentication by the input device, and sends the information processing device to the authentication server including the registration time information. An address request is transmitted and the address of the authentication server is received from the information processing apparatus.

  The information processing apparatus address answering unit collates the registration time information indicated by the address request with the third table, specifies registration server candidate information whose registration time is included in the registration period, and The address of the authentication server included in the registration server candidate information is returned to the authentication terminal or output device.

  In the biometric authentication method of the present invention, the information processing apparatus includes a storage device that stores a first table that stores authentication server identification information, network addresses, and data of the maximum number of biometric information that can be registered. , Receiving data on the current registration number of biometric information from each authentication server connected via the network, reading the value of the maximum registration number of the corresponding authentication server in the first table, and calculating the current registration from the maximum registration number The number of registration margins for each authentication server is calculated by subtracting the number and stored in association with the corresponding authentication server in the first table, and the biometric information from the user from the registration terminal or input device on the network A registration request is received, an authentication server whose registration margin number stored in the first table is a predetermined value or more is specified as a registration server candidate, and the registration server candidate The identification information and the address extracted from the first table, and a process to return to the registration terminal to the output device.

  Further, in this case, the biometric information registration terminal transmits a biometric information registration request to the information processing apparatus connected via the network in response to an instruction from the user, and the identification information and address of the registration server candidate are set to the information. A process of displaying the identification information of the registration server candidate on the output device, obtained from the processing device, and acquiring the user's biometric information from the biometric information reading device, and the registration authentication server selected by the user from the registration server candidates A process of transmitting identification information and biometric data of the corresponding user to the address is executed.

  On the other hand, an authentication server that performs biometric authentication processing includes a storage device that stores a member table that stores biometric information registrant's identification information and biometric information in association with each other. Processing for receiving biometric information and storing it in the member table, incrementing the current registration number of the biometric information in the member table, and transmitting the value of the current registration number to the information processing apparatus connected by the network Run.

  The information processing apparatus according to the present invention includes a storage device that stores a first table that stores identification information of an authentication server, an address on a network, and data of a maximum number of biometric information that can be registered. Receives data of the current registration number of biometric information from the authentication server, reads the value of the maximum registration number of the corresponding authentication server in the first table, and subtracts the current registration number from the maximum registration number Calculates the number of registration allowances for each, and stores the biometric information registration request from the user from a margin specifying unit and a registration terminal or input device on the network, which are stored in association with the corresponding authentication server in the first table. An authentication server whose registration margin number stored in the first table is equal to or greater than a predetermined value is specified as a registration server candidate, and the identification information and registration information of the registration server candidate are identified. Extracting an address from the first table, characterized in that and a candidate presentation unit that returns to the registration terminal to the output device.

  As the identification information of the authentication server, for example, attribute information of the authentication server (for example, server ID, server name, location, etc.) can be assumed. When the biometric authentication system is applied to various commercial facilities, icons (eg, images of characters, playground equipment facilities, etc.), numbers and symbols (eg, images of facilities, attractions, services, etc. included in the commercial facilities). Room numbers such as guest rooms and building building symbols) can also be assumed.

  In addition, the problems disclosed by the present application and the solutions thereof will be clarified by the embodiments of the present invention and the drawings.

  According to the present invention, even when a large number of templates are registered, biometric authentication processing can be executed at high speed.

1 is an overall configuration diagram of a biometric authentication system in the present embodiment. It is a figure which shows each data structural example of (a) Member integrated management table of this embodiment, (b) Member table, (c) Server management table. It is a figure which shows each data structural example of (a) the registration server candidate table now, (b) registration server candidate history table of this embodiment. It is a flowchart which shows process sequence example 1 of the biometric authentication method of this embodiment. It is a flowchart which shows process sequence example 2 of the biometrics authentication method of this embodiment. It is a flowchart which shows process sequence example 3 of the biometrics authentication method of this embodiment. It is a flowchart which shows process sequence example 4 of the biometrics authentication method of this embodiment. It is a flowchart which shows process sequence example 5 of the biometrics authentication method of this embodiment. It is a flowchart which shows the process sequence example 6 of the biometrics authentication method of this embodiment.

--- System configuration ---
Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a configuration diagram of a biometric authentication system 10 in the present embodiment. The biometric authentication system 10 (hereinafter, system 10) in the present embodiment is a computer system that can execute biometric authentication processing at high speed even in a situation where a large number of templates (biometric information for authentication) are registered. .

  The biometric authentication system 10 is for performing a biometric authentication process necessary for entry / exit of a user and use of a facility in a commercial facility such as an amusement park. An authentication server or a plurality of member tables 126 managed by the authentication server exist on the network 190), a server management server 100 (information processing apparatus) that manages the authentication server 300, and a registration that the user uses for biometric information registration And an authentication terminal 400 used by a user when receiving biometric authentication. Of course, in addition to these examples, various situations in which biometric authentication processing is performed (ex: entry / exit at government offices and government offices, reception and provision of services, immigration control that requires biometric authentication at airports, ports, stations, etc.) The biometric authentication system of this embodiment can be applied to business and the like.

  The server management server 100 constituting the system 10 reads out the program 102 stored in the storage device 101 such as a non-volatile memory to the memory 103 in order to realize the function of executing the biometric authentication method, and the CPU 104 serving as the arithmetic device Run. The server management server 100 may include various buttons generally provided in a computer device, an input device 105 such as a keyboard, and an output device 106 such as an LED or a display. The server management server 100 includes a communication device 107 that communicates with other devices such as the registration terminal 200 and the authentication terminal 400 via the network 190.

  Next, functional units that are configured and held by the server management server 100 based on the program 102 will be described. The server management server 100 includes a server management table 127, a current registered server candidate table 128, and a registered server candidate history table 129 in the storage device 101.

  The server management server 100 receives the data of the current registration number of biometric information from each authentication server 300 connected by the network 190, and the maximum number of registrations of the corresponding authentication server 300 in the server management table 127 as the first table. The margin identification is obtained by subtracting the current registration number from the maximum registration possible number to calculate the registration margin number for each authentication server, and storing it in association with the corresponding authentication server 300 in the server management table 127. The unit 110 is provided.

  Further, the server management server 100 receives a biometric information registration request from a user from the registration terminal 200 or the input device 105 on the network 190, and the registration margin number stored in the server management table 127 is a predetermined value or more. The authentication server 300 is specified as a registration server candidate, the identification information and address of this registration server candidate are extracted from the server management table 127, and a candidate presenting unit 111 that returns the information to the registration terminal 200 or the output device 106 is provided.

  On the other hand, the registration terminal 200 is a computer terminal used by a user of a commercial facility such as the amusement park when registering biometric information, and naturally has hardware and functions of a general computer. In addition, the installation location may be a part of the commercial facility or the like, or may be the user's home or a company to which the user belongs.

  The registration terminal 200 receives a biometric information registration instruction from the user via an input device such as a keyboard or a mouse, and requests the biometric information registration request to the server management server 100 connected by the network 190 in response to the instruction. And receiving the identification information and address of the registered server candidate returned from the server management server 100 in response to the biometric information registration request, and receiving the identification information of the registered server candidate on an output device such as a display. A candidate information acquisition unit 210 to display is provided.

  Further, the registration terminal 200 acquires the user's biometric information from the biometric information reader 160, and sends the identification information of the corresponding user to the address of the registration authentication server selected by the user from among the registration server candidates. And a biometric information transmission unit 211 that transmits biometric information data.

  The authentication server 300 receives registration of the user's biometric information from the registration terminal 200. In the present embodiment, a plurality of the authentication servers 300 are arranged on the network 190. For example, biometric information is registered so that registered user information does not overlap between the authentication servers (that is, the user's information is registered). The biometric information is registered in only one of the plurality of authentication servers 300). Alternatively, only one authentication server 300 may be arranged on the network 190, and a plurality of member tables 126 may be stored in the storage device 301 of this single authentication server 300. In this case, the biometric information is registered so that the registered user information does not overlap between the member tables 126 (that is, the user's biometric information is stored in only one of the plurality of member tables 126). The management target of the server management server 100 is also the member table 126 provided in the authentication server 300.

  The authentication server 300 naturally has hardware and functions that should be provided as a general server device. In addition, the storage device 301 stores a member table 126 that stores the biometric information registrant's identification information and biometric information in association with each other.

  The authentication server 300 receives user identification information and biometric information from the registration terminal 200 and stores them in the member table 126, and the current number of biometric information registered in the member table 126 (eg, in the storage device 301). A registration processing unit 310 that transmits the value of the current registration number to the server management server 100 connected through the network 190.

  The margin specifying unit 110 of the server management server 100 specifies the authentication server 300 with the largest number of registration margins in the server management table 127, and uses the identification information and address of the corresponding authentication server 300 as registration server candidate information. As the second table of the storage device 101, and may be stored in the current registered server candidate table 128.

  In this case, the candidate presentation unit 111 of the server management server 100 accepts a biometric information registration request from a user from the registration terminal 200 or the input device 105, and the registration stored in the registration server candidate table 128 just now. The server candidate information is read out and returned to the registration terminal 200 or the output device 106.

  In addition, the biometric information transmission unit 211 of the registration terminal 200 acquires the biometric information of the user from the biometric information reading device 160 and sends the identification information and biometric information of the corresponding user to the address of the registration server candidate. Send the data.

  The margin specifying unit 110 of the server management server 100 sets the authentication server 300 that receives the administrator's designation from the input device 105 among the authentication servers 300 registered in the server management table 127 as a registered server candidate. The identification information and address of the corresponding authentication server 300 may be stored in the current registration server candidate table 128 as registration server candidate information.

  Further, the margin specifying unit 110 of the server management server 100 calculates the registration margin number at regular intervals, and when there is no authentication server 300 whose registration margin number is equal to or greater than a predetermined value, the current registration server candidate table. When the information of the 128 registration server candidates is moved to the registration server candidate history table 129, which is the third table, and there is an authentication server 300 whose registration margin number is a predetermined value or more, the current registration server candidate table 128 is stored. The information on the existing registration server candidate is moved to the registration server candidate history table 129, the authentication server 300 having the largest registration margin number is specified, and the identification information and address of the corresponding authentication server 300 are set to the current registration server candidate. The information may be stored in the current registered server candidate table 128 as information.

  Further, the authentication terminal 400 included in the system 10 is a computer terminal used when a user of a commercial facility such as the amusement park receives biometric authentication, and is integrated with the registration terminal 200. Of course, the computer is equipped with the hardware and functions of a general computer. The installation location is assumed to be an entrance / exit gate of the commercial facility, for example.

  Such an authentication terminal 400 symbolizes an identification information instruction of the authentication server 300 from a user who wants to undergo biometric authentication (for example, an authentication server ID, a server name, an arrangement location, equipment, attractions, services, etc. of the commercial facility). Authentication, including the identification information for the server management server 100 connected to the network 190 by receiving the input device 405 and the like. An address request unit 410 that transmits an address request for the server 300 and receives the address of the authentication server 300 from the server management server 100 is provided.

  Further, the authentication terminal 400 acquires the user's biometric information from the biometric information reader 160, and sends an authentication request including the biometric information and the user identification information to the address of the authentication server 300. An authentication request unit 411 that transmits and receives an authentication result from the corresponding authentication server 300 is provided.

  On the other hand, the server management server 100 receives the address request from the authentication terminal 400 (or the input device 105), and from the server management table 127, the authentication server 300 according to the identification information indicated by the address request. An address reply unit 112 that extracts the address and returns the address of the authentication server 300 to the authentication terminal 400 (or the output device 106) is provided.

  Further, the authentication server 300 receives the authentication request from the authentication terminal 400, searches the member table 126 for biometric information corresponding to the identification information of the user included in the authentication request, and the biometric information searched. And an authentication execution unit 311 that executes biometric authentication processing by comparing biometric information included in the authentication request.

  Further, the margin specifying unit 110 of the server management server 100 uses the storage start time of the registered server candidate information in the current registered server candidate table 128 and the movement time to the registered server candidate history table 129 as registration period information. It is preferable that the registered server candidate history table 129 is stored in association with the corresponding registered server candidate information.

  In this case, the address request unit 410 of the authentication terminal 400 receives biometric information registration time information from the user who wants to receive biometric authentication by the input device 405, and sends the registration time information to the server management server 100. The address request of the authentication server 300 including is transmitted, and the address of the authentication server 300 is received from the server management server 100.

  Further, the server management server 100 address reply unit 112 checks the registration time information indicated by the address request against the registration server candidate history table 129, and the registration server candidate whose registration time is included in the registration period. The information is specified, and the address of the authentication server 300 included in the registration server candidate information is returned to the authentication terminal 400 (or the output device 106).

  The biometric information reading device 160 is a device that executes an appropriate biometric information reading process such as veins such as fingers and palms, fingerprints, irises, and the like, for example, on a user who is an amusement park user. . Therefore, a reader and a controller for reading necessary biometric information, and a communication device that communicates with the registration terminal 200 and the authentication terminal 400 (or the authentication server 300) are provided.

  The function units 110 to 112, 210 to 211, 310 to 311, and 410 to 411 in each device constituting the system 10 described so far may be realized as hardware, a memory, an HDD (Hard It may be realized as a program stored in an appropriate storage device such as Disk Drive). In this case, the CPU of each device constituting the system 10 reads the corresponding program from the storage device into the memory and executes it in accordance with the program execution.

--- Example of table structure ---
Next, the structure of the table used by each device constituting the biometric authentication system 10 in the present embodiment will be described. FIG. 2 is a diagram illustrating a data configuration example of (a) the member integrated management table 125, (b) the member table 126, and (c) the server management table 127 according to the present embodiment.

  The member integrated management table 125 is a table that stores the member ID of the user for whom biometric information has been registered and the ID of the authentication server 300 to which biometric information is registered in association with each other. Although this member integrated management table 125 is not essential, for example, when the server management server 100 responding to an address request from the authentication terminal 400 includes a user identification information = member ID in the address request. If the search in the member integrated management table 125 is executed using the member ID as a key, the process of specifying the authentication server 300 that is the registration destination of the relevant user's biometric information can be quickly performed.

  The member table 126 is a table that stores biometric information registrant identification information and biometric information in association with each other, and the authentication server 300 is provided in the storage device 301. For example, the member table 126 uses the “member ID” that uniquely identifies the biometric information registrant as a key, the member's name, payment credit card information (card No.), the finger vein template 1 that is biometric information, and the finger. It is an aggregate of records in which data such as the vein template 2 is associated.

  The server management table 127 (first table) uses a server ID and a symbol (identification mark of the authentication server 300, etc.) as identification information of the authentication server 300 as a key and a connection destination (address of the corresponding authentication server 300). Example: IP address), the maximum number of biometric information that can be registered and the number of current registrations, the priority of biometric information registration between authentication servers (example: set by the administrator), and the difference (= the maximum number of registrations possible from the maximum number of registrations possible) Is a set of records in which data such as a registration margin number for each authentication server calculated by subtracting and a flag (e.g., a registration destination that should be given priority regardless of the priority order) is associated. . For example, the margin specifying unit 110 of the server management server 100 sets the priority and flag for the authentication server 300 that is designated by the administrator from the input device 105.

  FIG. 3 is a diagram illustrating a data configuration example of (a) the current registration server candidate table 128 and (b) the registration server candidate history table 129 according to the present embodiment. The current registration server candidate table 128 (second table) should be returned to the registration terminal 200 when a biometric information registration request from a user is received from the registration terminal 200 (or the input device 105). It is a table which stores the identification information and address of a registration server candidate. The current registration server candidate table 128 stores, for example, a record in which the server name and connection destination data are associated with the server ID of the authentication server 300 that is the registration server candidate as a key.

  The registration server candidate history table 129 (third table) is a table for storing registration histories of registration server candidates stored in the current registration server candidate table 128. The registration server candidate history table 129 includes, for example, the registration period of registration server candidate information in the current registration server candidate table 128 (the storage start time in the current registration server candidate table 128 and the registration server candidate history table 129). This is a set of records in which data such as a server ID, a server name, and a connection destination of the authentication server 300 that is a corresponding registered server candidate are associated with each other using a period until the movement time as a key.

--- Processing flow example 1 ---
Hereinafter, the actual procedure of the biometric authentication method in the present embodiment will be described with reference to the drawings. Note that various operations corresponding to the biometric authentication method described below are realized by a program that is read into a memory and executed by each device constituting the system 10. And this program is comprised from the code | cord | chord for performing the various operation | movement demonstrated below.

  FIG. 4 is a flowchart showing a processing procedure example 1 of the biometric authentication method of the present embodiment. Here, an example of processing executed by the registration terminal 200 at the time of biometric information registration will be described. It is assumed that the registration terminal 200 accepts a user instruction to register biometric information = biometric information registration instruction with an input device or the like. At this time, the candidate information acquisition unit 210 of the registration terminal 200 performs an authentication process to determine whether or not the credit card presented by the user = the registration applicant is own (s100). As an example of this authentication processing, the registration terminal 200 accepts input of the user authentication information (e.g., password, ID, etc.) at the input device, and a verification request regarding this authentication information is sent to the card reader. 150, to the credit card IC chip, while the credit card IC chip collates the authentication information with the authentication information held in the storage area of the IC chip, and the collation result is registered. Processing to return to the terminal 200 for use can be assumed.

  The candidate information acquisition unit 210 of the registration terminal 200 that has received the result of the verification using the IC chip of the credit card, if the verification result indicates that the authentication information does not match (s101: No), End the registration process. On the other hand, if the collation result indicates that the authentication information matches (s101: Yes), the candidate information acquisition unit 210 of the registration terminal 200 inputs the information (name, etc.) of the applicant for registration. Is received by the input device (s102), and the credit card information (card number, etc.) is acquired via the card reader 150 and stored in the memory 103 (s103). Further, the biometric information transmission unit 211 of the registration terminal 200 acquires the biometric information of the applicant for registration from the reading device 160 and stores it in the memory 103 (s104).

  Subsequently, the candidate information acquisition unit 210 of the registration terminal 200 transmits a biometric information registration request to the server management server 100 connected via the network 190 to obtain candidate information of the authentication server 300 that registers the biometric information. An inquiry is made (s105). Further, the candidate information acquisition unit 210 of the registration terminal 200, if the result returned from the server management server 100 in response to the biometric information registration request indicates that there is no registration server candidate (s106). : No), the process ends. On the other hand, if the result returned from the server management server 100 indicates that there is a registration server candidate (s106: Yes), the candidate information acquisition unit 210 of the registration terminal 200 may The registration server candidate identification information received from 100 is displayed on an output device such as a display, and designation of a registration authentication server by the registration applicant is accepted (s107).

  Next, the biometric information transmission unit 211 of the registration terminal 200 is addressed to the address of the registration authentication server (obtained in step s105) selected by the applicant for registration from among the registration server candidates, and in steps s102 to s104. The acquired member ID and name, the credit card information, and biometric data, which are identification information of the corresponding registration applicant, are transmitted together with a registration instruction (s108).

  In addition, the biometric information transmission unit 211 of the registration terminal 200 receives a registration completion notification from a registration authentication server that has received a data registration instruction regarding the applicant for registration, and sends the identification information of the authentication server 300 to the output device. Display (s109) and end the process. Examples of the identification information include the server name, server ID, and symbol of the authentication server 300, for example.

--- Processing flow example 2 ---
Next, a processing example in the server management server 100 when registering biometric information will be described. FIG. 5 is a flowchart illustrating a processing procedure example 2 of the biometric authentication method according to the embodiment. As described above, the candidate information acquisition unit 210 of the registration terminal 200 transmits a biometric information registration request to the server management server 100 to inquire about candidate information of the authentication server 300 that registers biometric information. At this time, the candidate presentation unit 111 of the server management server 100 accepts the biometric information registration request = query server candidate inquiry from the registration terminal 200 (or the input device 105) (s200).

  Further, the candidate presenting unit 111 of the server management server 100 extracts the data of the current registration number and the maximum registrable number for each authentication server 300 stored in the server management table 127, and calculates the data from the maximum registrable number. The registration margin number for each authentication server is calculated by subtracting the current registration number, and it is determined whether there is an authentication server 300 whose registration margin number is 1 or more = the current registration number is less than the maximum registration possible number (s201). . The margin specifying unit 110 of the server management server 100 stores the registration margin number in association with the corresponding authentication server 300 in the server management table 127.

  The candidate presenting unit 111 of the server management server 100 can register if there is no authentication server 300 whose current registration number is less than the maximum registrable number in the determination in step s201 (s201: No). The fact that there is no authentication server candidate is returned to the registration terminal 200 (s203), and the process is terminated.

  On the other hand, if it is determined in step s201 that there is an authentication server 300 in which the current registration number is less than the maximum registration possible number (s201: Yes), the candidate presentation unit 111 of the server management server 100 determines that the registration margin The authentication server 300 whose number is equal to or greater than the predetermined value = 1 is specified as a registration server candidate, the identification information and address of this registration server candidate are extracted from the server management table 127, and the registration terminal 200 (or the output device 106). (S202). Here, it is assumed that the information transmitted to the registration terminal 200 includes information in a form recognizable by the applicant for registration (for example, server name, server ID, symbol, etc.).

--- Processing flow example 3 ---
Next, a process in which the server management server 100 uses the “currently registered server candidate table 128” when registering the biometric information will be described. FIG. 6 is a flowchart showing a processing procedure example 3 of the biometric authentication method of the present embodiment. In this case, the candidate presentation unit 111 of the server management server 100 accepts a biometric information registration request = inquiry of a registration server candidate from the user from the registration terminal 200 (or the input device 105) (s300). The presence / absence of registration server candidate information in the registration server candidate table 128 is determined (s301). If there is no registered server candidate information in the current registered server candidate table 128 (s301: No), the candidate presenting unit 111 of the server management server 100 displays a message indicating that there is no candidate for the authentication server 300 that can be registered. A reply is made to the registration terminal 200 (s303), and the process is terminated.

  On the other hand, if there is registration server candidate information in the current registration server candidate table 128 (s301: Yes), the candidate presenting unit 111 of the server management server 100 may register a registration server candidate from the current registration server candidate table 128. Information is read out and returned to the registration terminal 200 (or output device 106) (s302).

  The management of registered server candidates in the current registered server candidate table 128 is as follows. In this case, the margin specifying unit 110 of the server management server 100 calculates the registration margin number at regular intervals such as every day, and determines whether or not there is an authentication server 300 whose registration margin number is a predetermined value = 1 or more. (S305). When there is no authentication server 300 in which the number of registration margins is equal to or greater than the predetermined value = 1 in this determination process (s305: No), the margin specifying unit 110 of the server management server 100 determines the registration server of the current registration server candidate table 128. The candidate information is moved to the registered server candidate history table 129 (s306). In other words, the current registered server candidate table 128 in which information about the registered server candidates has been stored until then is empty = no registered server candidate.

  In addition, the margin specifying unit 110 of the server management server 100 moves the information on the movement time of the registered server candidates in the current registered server candidate table 128 to the registered server candidate history table 129 (for example, the server management server 100 is a computer). (Date and time information acquired when the event of step s306 is completed) from the clock function, calendar function, etc. provided as above is stored in association with the corresponding registered server candidate information in the registered server candidate history table 129 (s310).

  On the other hand, when there is an authentication server 300 in which the registration margin number is a predetermined value = 1 or more in the determination process (s305: Yes), the margin specifying unit 110 of the server management server 100 determines that the authentication server 300 = the registration margin number is the largest. The best1 authentication server is specified (s307). In this best 1 authentication server identification process, in addition to the process of selecting the largest registration margin, the server with the highest priority in the server candidate table 128 is selected, and a flag is set in the server candidate table 128. It is also possible to apply a process such as selecting an existing one.

  Subsequently, the margin specifying unit 110 of the server management server 100 determines whether or not there is information about a registered server candidate in the current registered server candidate table 128 (s308), and the registered server candidate is stored in the current registered server candidate table 128. Is not registered (s308: No), the identification information and address of the best1 authentication server 300 are stored in the current registration server candidate table 128 as information of the current registration server candidate (s311).

  Further, the margin specifying unit 110 of the server management server 100 stores the information of the best1 authentication server 300 stored in the current registered server candidate table 128, that is, the storage start time of the registered server candidate information (for example, the server management server 100). (Date information acquired when the event of step s311 is completed) from the clock function, calendar function, etc. provided as a computer is stored in the registered server candidate history table 129 in association with the corresponding registered server candidate information (s312).

  On the other hand, if a registered server candidate is registered in the current registered server candidate table 128 (s308: Yes), the margin specifying unit 110 of the server management server 100 stores the current registered server candidate table 128. The existing registered server candidate information is moved to the registered server candidate history table 129 (s309). In addition, the margin specifying unit 110 of the server management server 100 moves the information on the movement time of the registered server candidates in the current registered server candidate table 128 to the registered server candidate history table 129 (for example, the server management server 100 is a computer). The date and time information acquired at the time of completion of the event in step s309 from the clock function, calendar function, and the like provided as are stored in association with the corresponding registered server candidate information in the registered server candidate history table 129 (s310).

  Further, the margin specifying unit 110 of the server management server 100 stores the identification information and address of the authentication server 300 of the best 1 in the current registration server candidate table 128 as information on the current registration server candidate (s311). Further, the margin specifying unit 110 of the server management server 100 stores the information of the best1 authentication server 300 stored in the current registered server candidate table 128, that is, the storage start time of the registered server candidate information (for example, the server management server 100). (Date information acquired when the event of step s311 is completed) from the clock function, calendar function, etc. provided as a computer is stored in the registered server candidate history table 129 in association with the corresponding registered server candidate information (s312).

--- Processing flow example 4 ---
Next, processing in the authentication server 300 when registering biometric information will be described. FIG. 7 is a flowchart showing a processing procedure example 4 of the biometric authentication method of the present embodiment. Here, the authentication server 300 receives registration of the user's biometric information from the registration terminal 200. The registration processing unit 310 of the authentication server 300 receives the identification information and biometric information of the registration applicant from the registration terminal 200 (s400), and stores it in the member table 126 (s401).

  Also, the registration processing unit 310 of the authentication server 300 increments the current number of biometric information registrations (eg, managed in the storage device 301) in the member table 126 according to the number of registrations in the step s401. Then, the value of the current registration number after the increment is transmitted to the server management server 100 (s402). Also, the registration processing unit 310 of the authentication server 300 transmits the member ID of the member registered in step s401 and the server ID of the authentication server 300 to the server management server 100 (s403), and ends the process. To do. The server management server 100 receives the server ID and member ID data (s500) and stores them in the member integrated management table 125 (s501).

--- Processing flow example 5 ---
Next, a processing example in the authentication terminal 400 at the time of biometric authentication will be described. FIG. 8 is a flowchart showing a processing procedure example 5 of the biometric authentication method of the present embodiment. In this case, the address request unit 410 of the authentication terminal 400 instructs the identification information of the authentication server 300 from the user who wants to receive biometric authentication (for example, the ID of the authentication server, the server name, the location, the facility of the commercial facility). , An icon symbolizing an attraction, service, etc., a number such as a room number such as a guest room, a number or symbol indicating a symbol of a building, and the like are received by the input device 405 (s600). The user can be assumed to be a person who has registered biometric information up to processing flow example 4 in advance.

  The authentication request unit 411 of the authentication terminal 400 acquires the user's biometric information from the biometric information reader 160 and stores it in the memory 103 (s601). Next, the address request unit 410 of the authentication terminal 400 transmits the address request of the authentication server 300 including the identification information of the authentication server 300 received in step s600 to the server management server 100. (S602).

  On the other hand, the address reply unit 112 of the server management server 100 receives the address request from the authentication terminal 400 (or the input device 105) (s700), and the identification indicated by the address request from the server management table 127. The address of the authentication server 300 corresponding to the information is extracted, and the address of the authentication server 300 is returned to the authentication terminal 400 (or the output device 106) (s701).

  On the other hand, the address request unit 410 of the authentication terminal 400 receives the address of the authentication server 300 from the server management server 100 (s603). The authentication request unit 411 of the authentication terminal 400 generates an authentication request including the user's biometric information acquired from the reading device 160 and stored in the memory 103 and the user's identification information. The address is transmitted to the address of the authentication server 300 obtained in step s603 (s604).

  At this time, the authentication execution unit 311 of the authentication server 300 receives the authentication request from the authentication terminal 400 (s900). The authentication execution unit 311 searches the member table 126 for biometric information corresponding to the user identification information included in the authentication request, and compares the biometric information retrieved with the biometric information included in the authentication request. The biometric authentication process is executed (s901). If the result of the biometric authentication process indicates that the biometric information does not match (s901: No), the authentication execution unit 311 returns an authentication failure to the authentication terminal 400 (s903). Further, if the result of the biometric authentication process indicates that the biometric information matches (s901: Yes), the authentication execution unit 311 notifies the authentication terminal 400 that the authentication has been successful (and credit card information). A reply is made (s902).

  On the other hand, if the authentication request unit 411 of the authentication terminal 400 receives an authentication result from the authentication server 300 and the authentication result indicates a successful authentication (s605: Yes), for example, facility use or product purchase The payment processing (such as sending a payment request to a credit card company server) is executed based on the credit card information (s606), and the processing is terminated. On the other hand, if the authentication result indicates an unsuccessful authentication (s605: No), the authentication request unit 411 of the authentication terminal 400 ends the process.

--- Processing flow example 6 ---
Next, a process when the user forgets identification information or the like for the authentication server in which his / her biometric information is registered will be described. FIG. 9 is a flowchart showing a processing procedure example 6 of the biometric authentication method of the present embodiment. In this case, the address request unit 410 of the authentication terminal 400 receives biometric information registration time information from the user who wants to receive biometric authentication by the input device 405 (s800). The authentication request unit 411 of the authentication terminal 400 acquires the user's biometric information from the biometric information reader 160 and stores it in the memory 103 (s801). In addition, the address request unit 410 of the authentication terminal 400 transmits an address request for the authentication server 300 including the registration time information to the server management server 100 (s802).

  On the other hand, the server management server 100 address reply unit 112 receives the address request (s810), collates the registration time information indicated by the address request with the registration server candidate history table 129, and the registration time is Registration server candidate information included in the registration period is specified (s811). The registration period is, for example, the registration server candidate table at the current registration server candidate table 128 from the storage start time of the registration server candidate information (“yymm1dd1” at the “registration period” in FIG. 3B). 128 indicates a period until a registration server candidate in 128 moves to the registration server candidate history table 129 (“yymm2dd2” in the “registration period” in FIG. 3B).

  The server management server 100 address reply unit 112 returns the information (address) of the authentication server specified that the registration time is included in the registration period to the authentication terminal 400 (s812).

  On the other hand, the address request unit 410 of the authentication terminal 400 receives the address of the authentication server 300 from the server management server 100 (s803). The authentication request unit 411 of the authentication terminal 400 generates an authentication request including the user's biometric information acquired from the reading device 160 and stored in the memory 103 and the user's identification information. The address is transmitted to the address of the authentication server 300 obtained in step s803 (s804). The authentication request unit 411 of the authentication terminal 400 receives an authentication result from the authentication server 300, and if the authentication result indicates a successful authentication (s805: Yes), for example, facility use or product purchase The payment processing (such as sending a payment request to a credit card company server) is executed based on the credit card information (s806), and the processing is terminated. On the other hand, if the authentication result indicates an unsuccessful authentication (s805: No), the authentication request unit 411 of the authentication terminal 400 ends the process.

  According to the biometric authentication system of the present embodiment described above, biometric authentication processing can be executed at high speed even in a situation where many templates are registered.

  As mentioned above, although embodiment of this invention was described concretely based on the embodiment, it is not limited to this and can be variously changed in the range which does not deviate from the summary.

10 Biometric Authentication System 100 Server Management Server (Information Processing Device)
101 storage device 102 program 103 memory 104 CPU
105 Input Device 106 Output Device 107 NIC (Communication Device)
110 margin specifying unit 111 candidate presenting unit 112 address answering unit 125 member integrated management table 126 member table 127 server management table (first table)
128 Currently registered server candidate table (second table)
129 Registered server candidate history table (third table)
150 Card Reader 160 Reading Device 190 Network 200 Registration Terminal 210 Candidate Information Acquisition Unit 211 Biometric Information Transmission Unit 300 Authentication Server 310 Registration Processing Unit 311 Authentication Execution Unit 400 Authentication Terminal 410 Address Request Unit 411 Authentication Request Unit

Claims (8)

A storage device storing a first table for storing authentication server identification information, network addresses, and data on the maximum number of biometric information that can be registered;
Data on the current registration number of biometric information is received from each authentication server connected via a network, the value of the maximum registration number of the corresponding authentication server is read in the first table, and the current registration number is calculated from the maximum registration number To calculate the number of registration margins for each authentication server, and store in association with the corresponding authentication server in the first table,
A biometric information registration request from a user is received from a registration terminal or an input device on the network, and an authentication server whose registration margin number stored in the first table is a predetermined value or more is specified as a registration server candidate. An information processing apparatus comprising a candidate presentation unit that extracts identification information and addresses of registration server candidates from the first table and returns them to the registration terminal or output device;
In response to an instruction from a user, a biometric information registration request is transmitted to the information processing devices connected via a network, identification information and addresses of the registration server candidates are acquired from the information processing device, and identification of the registration server candidates is performed. A candidate information acquisition unit for displaying information on the output device;
A biometric information transmitting unit that acquires biometric information of a user from a biometric information reading device and transmits identification information and biometric data of the corresponding user to an address of a registration authentication server selected by the user from among the registration server candidates A registration terminal comprising:
A storage device storing a member table for storing biometric information registrant identification information and biometric information in association with each other;
User identification information and biometric information are received from the registration terminal, stored in the member table, the current registration number of the biometric information in the member table is incremented, and the value of the current registration number is connected via a network. An authentication server comprising a registration processing unit for transmitting to the information processing device;
A biometric authentication system comprising: The margin specifying unit of the information processing device specifies an authentication server having the largest number of registration margins in the first table, and uses the identification information and address of the corresponding authentication server as registration server candidate information in the second table of the storage device. Remember
The candidate presentation unit of the information processing apparatus receives a biometric information registration request from a user from the registration terminal or the input device, reads out information on registration server candidates stored in the second table, and registers the registration terminal. Or return it to the output device,
The biometric information transmission unit of the registration terminal acquires the biometric information of the user from the biometric information reading device, and transmits the identification information and biometric data of the corresponding user to the address of the registration server candidate.
The biometric authentication system according to claim 1.   The margin specifying unit of the information processing apparatus uses an authentication server that is designated by the administrator from the input device among the authentication servers registered in the first table as a registered server candidate, and the identification information and address of the corresponding authentication server Is stored in the second table of the storage device as information of a registered server candidate. The margin specifying unit of the information processing apparatus calculates the registration margin number at regular intervals, and when there is no authentication server whose registration margin number is equal to or greater than a predetermined value, information on registration server candidates in the second table is stored in the first table. When there is an authentication server whose registration margin number is greater than or equal to a predetermined value, the information of the existing registration server candidates stored in the second table is moved to the third table and the registration margin number is Identify the largest authentication server, and store the identification information and address of the corresponding authentication server in the second table as information on the current registration server candidate.
The biometric authentication system according to claim 2 or 3, characterized in that. An instruction of identification information of an authentication server is received by an input device from a user who wants to receive biometric authentication, and an address request of the authentication server including the identification information is transmitted to the information processing device connected via a network, and the information processing An address request unit that receives an address of the authentication server from the device; and
Obtaining biometric information of the user from a biometric information reader, transmitting an authentication request including the biometric information and the identification information of the user to an address of the authentication server, and receiving an authentication result from the authentication server; Including an authentication terminal including an authentication request unit,
The information processing apparatus receives the address request from an authentication terminal or input device on a network, extracts an address of an authentication server corresponding to the identification information indicated by the address request from the first table, and performs authentication. An address reply unit that returns the server address to the authentication terminal or output device;
The authentication server is
Receiving the authentication request from the authentication terminal, searching the member table for biometric information corresponding to the identification information of the user included in the authentication request, and the biometric information searched and the biometric information included in the authentication request; An authentication execution unit that performs biometric authentication processing by collating
The biometric authentication system according to any one of claims 1 to 4. The margin specifying unit of the information processing device uses the registration start candidate information storage start time in the second table and the transfer time to the third table as registration period information in the third table as the corresponding registration server candidate information. Memorize it,
The address request unit of the authentication terminal receives biometric information registration time information from a user who wants to undergo biometric authentication by using an input device, and sends an authentication server address request including the registration time information to the information processing device. Send, receive the address of the authentication server from the information processing device,
The information processing apparatus address answering unit collates the information on the registration time indicated by the address request with the third table, specifies registration server candidate information whose registration time is included in the registration period, and performs registration. Return the address of the authentication server included in the server candidate information to the authentication terminal or output device.
The biometric authentication system according to any one of claims 4 and 5, Information processing device
A storage device that stores a first table that stores identification server identification information, network address, and biometric information maximum registration number data,
Data on the current registration number of biometric information is received from each authentication server connected via a network, the value of the maximum registration number of the corresponding authentication server is read in the first table, and the current registration number is calculated from the maximum registration number To calculate the registration margin number for each authentication server, and store in association with the corresponding authentication server in the first table;
A biometric information registration request from a user is received from a registration terminal or an input device on the network, and an authentication server whose registration margin number stored in the first table is a predetermined value or more is specified as a registration server candidate. Processing for extracting identification information and addresses of registration server candidates from the first table and returning them to the registration terminal or output device;
The biometric information registration terminal
In response to an instruction from a user, a biometric information registration request is transmitted to the information processing devices connected via a network, identification information and addresses of the registration server candidates are acquired from the information processing device, and identification of the registration server candidates is performed. Processing to display information on the output device;
The process of acquiring the user's biometric information from the biometric information reader and transmitting the identification information of the user and the biometric data to the address of the registration authentication server selected by the user from among the registration server candidates. And
An authentication server that performs biometric authentication processing
A storage device storing a member table for storing the biometric information registrant's identification information and biometric information in association with each other;
User identification information and biometric information are received from the registration terminal, stored in the member table, the current registration number of the biometric information in the member table is incremented, and the value of the current registration number is connected via a network. Executing processing to be transmitted to the information processing device;
A biometric authentication method. A storage device storing a first table for storing authentication server identification information, network addresses, and data on the maximum number of biometric information that can be registered;
Data on the current registration number of biometric information is received from each authentication server connected via a network, the value of the maximum registration number of the corresponding authentication server is read in the first table, and the current registration number is calculated from the maximum registration number To calculate the number of registration margins for each authentication server, and store in association with the corresponding authentication server in the first table,
A biometric information registration request from a user is received from a registration terminal or an input device on the network, and an authentication server whose registration margin number stored in the first table is a predetermined value or more is specified as a registration server candidate. A candidate presentation unit that extracts identification information and addresses of registration server candidates from the first table and returns them to the registration terminal or output device;
An information processing device comprising:

Images