JP5388991B2 - Biometric authentication unit, automatic transaction processing apparatus, biometric authentication method, and biometric authentication program - Google Patents

Description

  The present invention relates to a biometric authentication unit, a biometric authentication method, a biometric authentication program, and a biometric authentication program for reading a customer's biometric information and confirming the identity, and an automatic transaction processing apparatus including the biometric authentication unit.

  Traditionally, financial institutions have increased the damage caused by the use of stolen cards and counterfeit cards in transactions with automated teller machines (hereinafter referred to as ATMs), which are automatic transaction processing devices. As a method for this, biometric authentication is performed in which identity verification is performed using biometric information. In ATM, even though the user is the person himself / herself, biometric authentication cannot be performed and the acceptance of the transaction may be refused.

  As a countermeasure against this problem, Patent Document 1 displays guidance for improving the cause of authentication failure and finger placement / position (setting method) when a predetermined degree of coincidence is not achieved as a result of biometric authentication. Then, a biometric authentication system is disclosed in which a finger is placed again and an authentication process is performed again.

JP 2009-9434 A

  However, when the biometric authentication system described in Patent Document 1 fails to perform biometric authentication, the cause and an improvement plan are displayed, and if the user repositions the finger based on these, whether the authentication is successful or not Output only simple results. Therefore, the user did not know how the degree of coincidence changed. In addition, the user may not be authenticated even after trial and error according to the improvement plan and may repeatedly fail many times, and there is a possibility that the user has distrust in biometric authentication.

  Therefore, an object of the present invention is to provide a biometric authentication unit, an automatic transaction processing apparatus, a biometric authentication method, and a biometric authentication program that can reduce the number of times biometric authentication is repeated and do not cause distrust to the user.

  In order to solve the above problems and achieve the object, the biometric authentication unit of the present invention has the following configuration.

  The biometric authentication unit according to the present invention includes a reading unit, a coincidence degree acquiring unit, and an output unit, and reads biometric information of the person to be authenticated to perform biometric authentication. The reading unit reads biometric information from the finger of the person to be authenticated placed on the placement table. The coincidence degree obtaining unit obtains a distribution of coincidence levels by comparing the biometric information read by the reading unit and the registered biometric information of the authentication target person registered in advance. The output unit outputs display data regarding the distribution of the degree of coincidence between the biometric information and the registered biometric information obtained by the coincidence degree obtaining unit.

  Since the biometric authentication unit outputs the display data related to the distribution of the degree of coincidence between the biometric information and the registered biometric information, the person to be authenticated confirms this display data, and when biometric authentication is performed, what is wrong is detected. I can understand. Thereby, the person to be authenticated knows how to respond, and can easily change the state of the finger placed on the placing table. Therefore, even if biometric authentication fails, the number of times biometric authentication is repeated is small, and it is possible to prevent the person to be authenticated from feeling distrust.

  In the biometric authentication unit of the above invention, the output unit generates an instruction to change the placement state of the finger with respect to the placement table, generated based on the distribution of the degree of coincidence between the biometric information and the registered biometric information detected by the coincidence degree obtaining unit. The display data for guiding is also output.

  The person to be authenticated checks the display data that is output from the biometric authentication unit and guides the instruction to change the placement state of the finger with respect to the placement table, so that the state of the finger placed on the placement table when performing biometric authentication Can be easily changed. Therefore, the number of times biometric authentication is repeated can be suppressed, and biometric authentication can be completed in a short time.

  In the biometric authentication unit of the above invention, the display data relating to the distribution of the degree of coincidence between the biometric information and the registered biometric information is data obtained by dividing the biometric information reading area into a plurality of blocks.

  The person to be authenticated can easily grasp which part of the plurality of blocks matches and which part does not match by confirming the display data in which the reading area is divided into the plurality of blocks. Therefore, the person to be authenticated can suppress the number of times biometric authentication is repeated by changing the finger placement method based on the display data.

  In the biometric authentication unit of the above invention, the coincidence degree obtaining unit obtains the distribution of the coincidence degree at regular time intervals, and the output unit places the finger on the placement table in accordance with the change in the coincidence degree distribution at regular time intervals. Display data that guides the instruction to change the position is output.

  The person to be authenticated changes the placement of the finger so that it is authenticated by the biometric authentication unit by changing the placement state of the finger according to the instruction to change the placement state of the finger with respect to the placement table output by the biometric authentication unit Therefore, biometric authentication can be completed in a short time without repeating biometric authentication.

  The biometric authentication unit of the said invention is provided with the data generation part. The data generation unit estimates a factor that causes a region having a low degree of coincidence based on the distribution of the degree of coincidence between the biometric information and the registered biometric information detected by the coincidence degree acquisition unit, and generates display data that guides the factor And output to the output unit. In addition, when biometric authentication of the person to be authenticated is successful, data for guiding the factor estimated so far is output, and an instruction is given to record display data for guiding the factor on a card received from the person to be authenticated. To do. Further, when the card is received from the next person to be authenticated, an instruction is given to read the display data for guiding the factor recorded on the card, and the display data read from the card is output to the output unit. .

  The biometric authentication unit outputs a factor that causes a region with a low degree of coincidence estimated at the previous biometric authentication at the time of the current biometric authentication. Recalling the setting method, it can be reflected in this loading state. Therefore, biometric authentication failure is prevented, and biometric authentication can be completed in a short time.

  The degree of coincidence acquisition unit instructs the card received from the authentication subject to output the degree of coincidence distribution, and obtains the degree of coincidence distribution output by the card.

  In this configuration, the card confirms the distribution of the degree of coincidence and outputs it. By storing the registered biometric information in the card, the distribution of the degree of coincidence can be confirmed without outputting the registered biometric information outside the card. It is possible to increase the safety of registered biometric information.

  The automatic transaction processing apparatus according to the present invention includes the biometric authentication unit having the above-described configuration, and processes a transaction in response to an input operation of a person to be authenticated who has succeeded in biometric authentication.

  The person to be authenticated knows how to respond even if biometric authentication fails, and can easily change the state of the finger placed on the placing table. Therefore, even if biometric authentication fails, the number of times biometric authentication is repeated is small, and transactions corresponding to input operations can be processed quickly.

  The biometric authentication method of the present invention includes a detection step and an output step, and the computer performs biometric authentication by reading the biometric information of the person to be authenticated. In the detection step, the biometric information of the finger of the authentication target person placed on the mounting table read by the reading unit is compared with the registered biometric information registered in advance of the authentication target person read from the storage medium. The distribution of the degree of coincidence is detected. In the output step, display data related to the distribution of the degree of coincidence between the biometric information and the registered biometric information detected in the detection step is output to the output unit.

  Therefore, the person to be authenticated can check how the biometric authentication is failed by checking the distribution of the degree of coincidence between the biometric information and the registered biometric information, and the number of times of biometric authentication is reduced. It is possible to prevent the person to be authenticated from feeling distrust. In addition, since the computer includes the storage medium, the registered biometric information is not output to the outside of the computer, so that the safety of the registered biometric information can be improved.

  According to the present invention, even if biometric authentication fails, the number of times biometric authentication is repeated can be suppressed to a small number.

It is a block diagram which shows the structure of the principal part of an automatic teller machine. It is a schematic block diagram of the biometrics processing system containing ATM. It is a block diagram which shows the structure of the principal part of a biometrics authentication unit. It is sectional drawing of the scanner of a finger vein reader. It is a block diagram which shows the structure of the IC chip with which an IC card is provided. It is a flowchart of the registration process of the biometric information in ATM. It is an example of a guidance screen of transaction selection. It is an example of a precaution screen when reading biometric information. It is an example of a set guidance screen for the finger to be registered. It is an example of the biometric information image which the finger vein reader read. This is an example in which a biometric information read image is divided into blocks. It is registration data (template) example of biometric information. It is a flowchart of the authentication process of biometric information. It is an example of data in the biometric information area of the IC chip. It is an example of a finger set guidance screen for authentication. It is an example according to the block of coincidence. It is an example of a guidance screen of support mode transfer. It is a flowchart of biometric authentication assistance mode. It is an example of an authentication assistance mode display screen. It is an example of an authentication assistance mode display screen. It is an improvement guidance support mode display of how to place a finger (when the finger is slanted). It is an improvement guidance support mode display of how to place the finger (when the fingertip is popping out). It is an improvement guidance support mode display of how to place a finger (in the case of finger bending). This is an improvement guidance support mode display of how to place a finger (in the case of finger pressing). It is an example of an authentication assistance mode display screen. It is an example of a finger set guidance screen for authentication.

  First, the basic configuration of the present embodiment will be described with reference to FIGS. In the present embodiment, an example in which finger vein information is used as biological information will be described.

  FIG. 1 is a block diagram of an automated teller machine (hereinafter referred to as ATM) provided with a biometric authentication unit according to an embodiment of the present invention. An ATM 101 that is an automatic transaction processing device is a finger vein reader 102 that reads a finger vein image (biological image) of a customer's finger, and a display unit (liquid crystal) display 103 that displays transaction guidance for a customer who is an authentication target. A touch panel 104 that is an input unit that receives an operation input for performing a transaction, a card handling mechanism 105 that processes an inserted cash card, a banknote deposit / withdrawal mechanism 106 that processes banknotes such as a banknote deposit / withdrawal, and a statement slip The statement slip printing mechanism 107 that performs the printing process, the bankbook printing mechanism 108 that performs the bankbook printing process, and the main control unit 110 that controls the operation of the ATM 101 as a whole.

  In the ATM 101, the finger vein reader 102, the card handling mechanism 105, and the main control unit 110 constitute a biometric authentication unit 119 of the present invention.

  The biometric authentication unit shown in FIG. 1 is configured to include the main control unit 110 of the ATM 101, but a control unit is provided separately from the main control unit 110, and this other control unit includes the finger vein reader 102, A configuration for controlling the card handling mechanism 105 is also possible.

  The card handling mechanism 105 includes a magnetic stripe read / write unit 111 that reads and writes data with respect to the magnetic stripe of the IC card inserted by the customer, and an IC chip that reads and writes data with respect to the IC chip of the IC card. A read / write unit 112.

  The main control unit 110 includes a CPU 113 that controls each process, a memory 114 that stores programs and transaction information for executing each process, a communication unit 115 that transmits and receives data to and from the host computer 203, and the like. A recording unit 116 that sequentially records customer transaction information and the like, and a power source 117 are provided.

  FIG. 2 is a configuration diagram of a biometric authentication processing system in a financial institution including an ATM. The ATM 101 is provided with a person camera 118 for photographing a face image of the customer 202 bringing the IC card 201 at the upper part of the front, and a finger serving as a reading unit is placed on the finger placement table provided at the right end of the customer operation surface. A vein reader 102 is provided. The ATM 101 is connected to a host computer 203 installed in an office center via a network 200 of financial institutions. The host computer 203 includes a database 204 that stores account information data of the customer 202 and other information.

  FIG. 3 is a block diagram of the biometric authentication unit mounted on the ATM. When the customer 202 inserts the IC card 201 into the card handling mechanism 105 of the ATM 101, the IC chip 301 provided on the IC card 201 is connected to an IC chip read / write unit via a contact (not shown) provided on the surface thereof. Communicate with 112. At the time of biometric authentication, when the customer 202 puts a finger on the finger vein reader 102, the scanner 302 reads the finger vein image, and the feature extraction function unit 303 extracts the finger vein feature from the finger vein image. Output data as authentication data. The authentication function unit 304 outputs authentication data (biometric information) to the IC chip 301 via the main control unit 110 and the IC chip read / write unit 112. The IC chip 301 corresponds to a coincidence degree acquisition unit, and performs authentication processing by comparing and collating registration data and authentication data.

  The registration function unit 305 of the finger vein reader 102 is used when registration data (template) obtained by extracting the characteristics of the read finger vein image is written and registered in the IC chip 301.

  In this way, by configuring the IC chip 301 to perform authentication processing, registration data registered in advance for each customer 202 (authenticated person) need not be output to the outside of the IC chip 301. Data safety can be increased. It should be noted that the main control unit 110 (CPU 113) can naturally be configured to read the registration data from the IC chip 301 and perform the authentication process.

  FIG. 4 is a sectional view of the scanner of the finger vein reader. The scanner 302 irradiates the finger 402 of the customer 202 with light from the LEDs 401 a and 401 b installed on the left and right of the finger placing table 400. The vein image of the finger 402 is reflected by the mirror 404, forms an image on a CCD (two-dimensional image pickup element) 403 via the lens group 405, and is read by the CCD 403.

  FIG. 5 is a block diagram showing a configuration of an IC chip provided in the IC card.

  An IC card 201 that is a portable storage medium includes a CPU 501, a communication unit 502, a biometric AP (application program) 503, a biometric information area 504, a bank AP 506, account information data 507, and other APs 508. The CPU 501 controls the entire IC chip 301. The communication unit 502 communicates with the IC chip read / write unit 112 of the card handling mechanism 105 shown in FIG. The biometric AP (application program) 503 is a part of biometric authentication processing for registering registration data (template) 505 in the biometric information area 504 and for verifying authentication data read by a customer during authentication processing with the registration data (template) 505. It is a biometric authentication program for taking charge (execution) of a department. The bank AP 506 is a program for taking charge (execution) of reading the account information data 507. In addition, in the IC chip 301, other AP 508 may be incorporated in order to perform credit processing for each financial institution.

  The biometric information area 504 is divided into a plurality of areas. The biometric authentication process is a total of the number of times biometric authentication processing has been performed at the time of transaction in the registered data 505 and ATM 101 of the user's biometric information (registered biometric information). The number of times 509, the number of biometric authentication failures 510, which is the total number of biometric authentication failures, the previous authentication result 511 that is the result of biometric authentication in the previous transaction, The previous improvement history 512, which is a history, is recorded.

  Next, specific processing of biometric authentication processing in the ATM 101 will be described.

  In order to start a transaction by biometric authentication processing, the customer 202 needs to apply for registration of biometric information to a financial institution. The biometric information registration method includes (1) registering biometric information in another portable electronic medium such as the IC card 201 carried by the customer 202, and (2) registering it in the database 204 of the host computer 203 of the financial institution. There are two cases where biometric information of the customer 202 is registered. In the following description, (1) the case where biometric information is registered in the IC card 201 which is the portable electronic medium of the customer 202 will be described.

  When the financial institution accepts a card issuance request from the customer 202, it writes the financial institution number, branch number, customer account number, etc. as account information data 507 in the magnetic stripe of the IC card 201 or the IC chip 301. An IC card 201 is issued and mailed to the customer 202. The customer 202 brings the received IC card 201 to a financial institution and registers biometric information in the IC card 201 at the financial institution.

  There are two ways to register biometric information.

  One method is that the biometric information registration device reads the finger vein image of the customer 202 in accordance with the operation and instruction of the attendant, extracts the finger vein image and creates registration data (template) 505, and the IC brought by the customer 202 In this method, registration data (template) 505 is registered in the IC chip 301 of the card 201.

  Another method is that the customer 202 himself operates the ATM 101, and when the customer 202 places a finger on the finger vein reader 102 according to the guidance of the ATM 101, the finger vein reader 102 reads the finger vein image of the customer 202, and In this method, registration data (template) 505 is created by extracting features, and registration data (template) 505 is registered in the IC chip 301 of the IC card 201 brought by the customer 202.

  Since the procedures of the above two registration methods are basically the same, hereinafter, the case where the customer 202 himself / herself registers biometric information using the ATM 101 will be described with reference to FIG. FIG. 6 is a processing flow for registering biometric information in an IC card by ATM.

  When a sensor (not shown) detects the approach of the customer 202, the CPU 113 of the main control unit 110 of the ATM 101 displays a response screen indicating that the customer 202 is approaching on the display 103. Then, a transaction selection screen 701 for selecting a transaction item as shown in FIG. The customer 202 inserts the IC card 201 into the card handling mechanism 105 after selecting “biological information registration 702” from the transaction selection screen 701 displayed on the display 103 in order to register biometric information.

  When the main control unit 110 detects that the biometric information registration 702 is selected from the transaction selection screen 701 and the IC card 201 is inserted into the card handling mechanism 105 (S601: Y), the main stripe control unit 110 inserts the IC card into the magnetic stripe read / write unit 111. The magnetic stripe information of 201 is read. Then, if information indicating that the IC chip 301 is mounted is recorded, the IC chip read / write unit 112 is made to read the account information data 507 recorded on the IC chip 301 based on this information. Further, the main control unit 110 causes the person camera 118 to capture the face image of the customer 202 at the timing when the IC card 201 is inserted into the card handling mechanism 105, and causes the recording unit 116 to capture the face image of the customer 202. Store (S602).

  Next, in order to confirm that the customer 202 who brought the IC card 201 is the principal, the main control unit 110 displays a password input screen on the display 103 and inputs the password to the customer 202. (S603, S604: N). When the main control unit 110 detects that the customer 202 has entered a password from the touch panel 104 (step S604: Y), the communication unit 115 transmits the entered password to the host computer 203 in the office center. The host computer 203 confirms whether it matches the pre-registered personal identification number and returns the result.

  When the main control unit 110 receives the confirmation result of “matching password” at the communication unit 115, the ATM 101 determines that the customer 202 is the person himself (S605), so that the finger vein can be read with high quality in FIG. The general notes 711 at the time of reading the finger vein are displayed on the display 103 (step S606). Subsequently, as shown in FIG. 9, the main control unit 110 causes the display 103 to display a guidance screen 721 for guiding the finger 402 to be registered to be placed on the finger vein reader 102 (step S <b> 607). When the finger 402 of the customer 202 is placed on the finger vein reader 102 according to the guidance screen 721, the main control unit 110 causes the finger vein reader 102 to read the vein image of the placed finger 402 a plurality of times (step S608). FIG. 10 shows an example of a finger vein image 1000 of the finger 402 read by the finger vein reader 102 in step S608.

  In step 608, the main control unit 110 determines whether the image is stable among the plurality of finger vein images 1000 read by the finger vein reader 102 with respect to the read finger vein image 1000 (the finger has not moved). If the image is unstable (S609: N), it is estimated that "the finger is not stationary (shakes)" (S610). Then, the main control unit 110 causes the display 103 to display a warning message that warns that the finger is not stationary (vibrating) and guidance such as how to place the finger and how to improve the position (S619). . And the process after step S607 is performed again.

  On the other hand, when the main control unit 110 determines in step S608 that the plurality of finger vein images 1000 are stable and the finger is stationary (S609: Y), an averaging process is performed between the plurality of finger vein images 1000. To reduce noise (step S611). Subsequently, the main control unit 110 confirms whether or not the finger is clear over the entire area. If the finger is unclear (S612: N), it is estimated that “the finger is floating” (step S613). Subsequently, the main control unit 110 causes the display 103 to display a warning message for warning that the finger is lifted and guidance such as how to place the finger and how to improve the position (S619). And the process after step S607 is performed again.

  If the finger vein image 1000 is clearer than the threshold over the entire area in step S612 (S612: Y), the main control unit 110 further checks whether the finger vein thickness and continuity are appropriate (step S612). S614). If the blood vessel is thin (S614: N), the main control unit 110 estimates that “a finger is pressed” (step S615). Subsequently, the main control unit 110 causes the display 103 to display a warning message for warning that the finger is pressed and guidance such as how to place the finger and how to improve the position (S619). And the process after step S607 is performed again.

  When the main control unit 110 determines in step S614 that the thickness or continuity of the finger vein is appropriate for the threshold (S614: Y), the main control unit 110 detects the central axis of the finger vein image 1000 (step S616). The main control unit 110 confirms that the inclination of the central axis is within the allowable value (step 617), and if it is greater than the allowable value (S617: N), it is estimated that “the finger is inclined” (step S618). Subsequently, the main control unit 110 causes the display 103 to display a warning message that warns that the finger is tilted and guidance such as how to place the finger and how to improve the position (S619). And the process after step S607 is performed again.

  The main control unit 110 has an inclination of the central axis within an allowable value (S617: Y), and a predetermined high quality equal to or higher than a threshold is secured from the qualitative evaluation results of the finger vein image 1000 in steps S609 to S617. If it is determined, feature extraction is performed from the read finger vein image 1000 (step S620). Then, as shown in FIG. 11, the area of the read finger vein image 1000 is divided into three in the vertical direction, the fingertip, the center, and the root, and divided in three in the left-right direction, left, middle, and right. Are divided into blocks 1001 to 1009. Then, after dividing from each block, the feature points extracted are extracted. For example, as shown in the table 551 of the registration data 505 shown in FIG. 12, the feature points are classified into end points, intersections, inflection points, etc., with a branch point near the center at the base of the finger vein image 1000 as a reference point, Information such as position coordinates, distance, and direction is created as temporary registration data (template) for each block and recorded in the IC memory of the IC card. Then, it is temporarily stored in a memory (not shown) in the finger vein reader 102 (step S621). In FIG. 12, the number of extracted feature points is not a constant value, but differs for each customer / block. Note that the number of blocks into which the finger vein image 1000 is divided may be divided into an arbitrary number.

  The main control unit 110 displays a display for guiding the temporarily registered finger 402 to be placed on the finger vein reader 102 again in order to check whether the temporarily stored temporarily registered data (template) can be normally used during the authentication process. It is displayed on the display 103 (step S622). The main control unit 110 reads the finger vein image 1000 of the placed finger 402 again with the finger vein reader 102 and extracts features. Then, the main control unit 110 sequentially collates to what extent the extracted feature points match the temporarily registered data (template) temporarily stored in the memory in the finger vein reader 102 (step S623).

  The main control unit 110 confirms the degree of coincidence that is the collation result in step S623 (step S624). If the degree of coincidence is less than the threshold and is insufficient (collation NG) (S624: N), the registration process is performed again. The processing after step S607 is performed again. On the other hand, the main control unit 110 temporarily stores in the memory in the finger vein reader 102 when the matching degree is equal to or greater than the threshold predetermined value and the collation is OK (step S624: Y) in step S624. The provisional registration data (template) is written in the registration data (template) 505 of the IC chip 301 and formally registered (step S625), and issued as the IC card 201 with biometric information registered (step S626). That is, the main control unit 110 causes the card handling mechanism 105 to eject the IC card 201 in which the biological information is registered, and ends the process.

  Next, a case where the customer 202 performs biometric authentication using the biometric authentication-compatible ATM 101 using the IC card 201 in which biometric information is registered and then performs a “drawer transaction” will be described. FIG. 13 is a processing flow in the case of performing a “draw transaction” after biometric authentication by ATM.

  In the following description, an example in which the CPU 113 of the main control unit 110 and the CPU 501 of the IC card 201 share processing will be described.

  When the main control unit 110 detects the approach of the customer 202 with a sensor (not shown), the main control unit 110 displays a transaction selection screen 701 for selecting a transaction item shown in FIG. When the main control unit 110 detects that the customer 202 selects the drawer 704 from the transaction selection screen 701 and inserts the IC card 201 into the card handling mechanism 105 (S1300: Y), the main control unit 110 causes the magnetic stripe read / write unit 111 to The IC chip 301 mounted information recorded in the magnetic stripe of the IC card 201 is read, and based on this, the IC chip read / write unit 112 is read the account information data 507 recorded in the IC chip 301. Further, the main control unit 110 causes the person camera 118 to capture the face image of the customer 202 at the timing when the IC card 201 is inserted into the card handling mechanism 105, and causes the recording unit 116 to capture the face image of the customer 202. Store (S1301).

  The main control unit 110 causes the IC chip read / write unit 112 to read the biometric authentication processing count 509 and the previous authentication result 511 in the biometric information area 504 of the IC chip 301.

  FIG. 14 shows details of the previous authentication result 511 stored in the biometric information area 504. In the biometric information area 504, the previous authentication result 511 is “0” if biometric authentication succeeds without any problem during the previous biometric authentication, and the degree of coincidence is insufficient during the previous biometric authentication. However, “1” is recorded when the biometric authentication is successful due to the retry of the authentication process. In addition, when the biometric authentication was successful due to authentication processing according to the trouble support mode, the degree of coincidence was insufficient at the previous biometric authentication, but “2”, biometric authentication failed at the previous biometric authentication If the process ends, “3” is recorded. Accordingly, the main control unit 110 can determine that the customer 202 is unfamiliar with biometric authentication when the previous authentication result 511 is “1” to “3” other than “0”.

  In addition, when the biometric authentication processing count 509 is “0”, the main control unit 110 can determine that the customer 202 performs biometric authentication for the first time.

  When the main control unit 110 reads the biometric authentication processing count 509 and the previous authentication result 511 and determines that the customer 202 performs biometric authentication for the first time or is unfamiliar with biometric authentication (S1302: Y). After displaying the general notes 711 at the time of reading the finger vein as shown in FIG. 8 (S1303), the registered finger 402 for authentication as shown in FIG. 15 is put on the finger vein reader 102. A guidance screen 731 for guiding the user is displayed on the display 103 (S1304, S1305: N).

  On the other hand, if the main control unit 110 determines that the customer 202 is used to biometric authentication or has performed a plurality of times (S1302: N), the main control unit 110 does not display the precautions 711 and displays the guidance screen 731. Is displayed on the display 103 (S1304, S1305: N). At this time, as described later, when the previous improvement history 512 is recorded in the IC chip 301, this is read and displayed on the display 103.

  When the main control unit 110 detects that the customer 202 has placed the finger 402 on the finger vein reader 102 according to the guidance screen 731 (S1305: Y), the finger vein image 1000 of the finger 402 placed on the finger vein reader 102 is detected. Is extracted a plurality of times, and features are extracted from the read finger vein image 1000 (S1306). The reading unit 12 reads a finger vein image at regular time intervals (for example, every 0.1 second). The main control unit 110 creates authentication data for each block from the extracted feature points in the same manner as the registration data (template) 505 shown in FIG. 12, and causes the IC chip read / write unit 112 to transmit the authentication data to the IC chip 301. .

  When the communication data is received by the communication unit 502, the CPU 501 of the IC chip 301 executes the biometric AP 503. Then, the CPU 501 reads registration data (template) 505 as shown in FIG. 12 from the registration data 505 in the biometric information area 504, and how much the authentication data output by the communication unit 502 matches the registration data (template) 505. Whether or not to do so is sequentially compared and collated (S1307). The CPU 501 calculates the degree of coincidence A0 to A8 for each block and the degree of coincidence AT in the entire area as shown in FIG. 16 as processing for detecting the distribution of the degree of coincidence from the comparison / collation result (S1308). ). Here, the degree of coincidence AT in the entire area is AT = authentication data in the entire area / registered data in the entire area.

  The CPU 501 checks whether or not the degree of coincidence AT in the entire area is equal to or greater than a predetermined value (for example, 80%), and if it is equal to or greater than the predetermined value (80%) (S1309: Y), the biometric authentication is OK (biometric). A signal indicating this is output to the main control unit 110 via the communication unit 502. The communication unit 502 corresponds to the output unit of the computer of the present invention.

  In this case, the main control unit 110 performs transaction processing as follows. That is, when receiving the password input operation, the main control unit 110 confirms the password with respect to the host computer 203 of the office center (S1321), and then, when the withdrawal amount is input according to the withdrawal amount input instruction. (S1322) After communicating with the host computer 203, the main control unit 110 inquires for a password and a withdrawal amount (S1323). If there is no problem (S1323: Y), the main control unit 110 performs a withdrawal process (S1324), returns the IC card (S1325), and ends the process. In addition, if there is a problem with the password / withdrawal amount (S1323: N), the main control unit 110 performs the processing after step S1321.

  On the other hand, in step S1309, if the degree of coincidence AT in the entire area is less than a predetermined value (80%), the CPU 501 checks whether 5 seconds have elapsed since the start of the authentication process. If 5 seconds have not elapsed (S1310: N), the CPU 501 performs the processing after step S1306 together with the main control unit 110. That is, the main control unit 110 reads the finger vein image 1000 of the finger 402 placed on the finger vein reader 102 a plurality of times again to generate authentication data and outputs it to the IC chip 301. The CPU 501 registers the authentication data and the authentication data. The degree of coincidence is calculated by collating the data.

  Further, in step S1310, if 5 seconds have elapsed since the start of the authentication process with the matching degree AT in the entire region being less than a predetermined value (80%) in step S1310 (S1310: Y), the matching in the entire region is performed. The degree AT information is output to the main control unit 110 by the communication unit 502.

  If the received matching degree AT is less than 50% (S1311: N), the main control unit 110 may, for example, place an unregistered index finger even though the middle finger is registered due to a mistake of the customer 202. The display 103 is displayed with a warning that “is it different from the registered finger? Please confirm” (S1312). The main control unit 110 confirms that the customer 202 has released the finger 402 placed on the finger vein reader 102 (S1313: Y), returns to step S1305, and waits for the customer 202 to place the finger 402 again.

  On the other hand, the main control unit 110, as shown in FIG. 8, allows the finger vein image 1000 to be read with high quality if the received matching degree AT is 50% or more (50 to 80%) (S1311: Y). After the general precautions 711 for reading the finger vein are displayed again on the display 103 (S1314), as shown in FIG. 17, the customer 202 supports the improvement of the degree of coincidence in the finger vein reading. A screen 741 for selecting whether or not to shift to the “problem support mode” is displayed (S1315). When the customer 202 presses the “Cancel” button 743 (S1316: N), a message “Biometric authentication failed (authentication NG)” is displayed (S1317). If the number of biometric authentication failures is less than 3 (S1318: N), the process after step S1306 is performed. Further, if the number of times that biometric authentication could not be performed is the third time (S1318: Y), the main control unit 110 displays on the display 103 that the transaction has been canceled because the authentication has failed three times (S1319), and the IC The card 201 is returned to the customer 202 (S1325), and the process ends.

  When the “cancel” button 743 is not pressed in step S1316 and the “transition” button 742 is pressed in step S1316 (S1316: Y), the main control unit 110 performs the “problem support mode” process shown in FIG. (S1320).

  As shown in FIG. 18, when performing the “problem support mode”, the main control unit 110 displays the degree of coincidence AT in the entire area as a graph on the display 103 of the ATM 101 as shown in a graph 751 in FIG. 19. It is always displayed in real time (S1800). Although the degree of coincidence is numerically displayed in the graph 751 in the upper part of FIG. 19, the display is not limited to this display, and specific numerical values may not be displayed by qualitative expression or color display. For example, “orange” may be displayed when the degree of matching is significantly insufficient, “yellow” when matching is insufficient, “green” when matching, and “blue” when matching is good.

  The main control unit 110 confirms the degree of coincidence AT in the entire area, and if it is 50 to 65%, the degree of coincidence is significantly insufficient (S1801: N), so is it the first time since the start of the authentication process? If it is the first time (S1802: Y), it is confirmed whether a ghost has occurred in the authentication image. When the finger 402 is soiled, when the bandage is applied to the finger 402, or when the finger 402 is keratinized, the portion does not transmit light. The part appears black and appears as a ghost. For this reason, the degree of coincidence AT in the entire area is lowered. Further, when the finger 402 is moving, since the finger vein image 1000 is averaged a plurality of times, the entire finger vein image 1000 becomes unclear and the matching degree AT of the entire area is lowered.

  When a ghost has occurred in the authentication image (S1803: Y), the main control unit 110 displays a guidance display for confirming the state of the finger 402 on the display 103 (S1804). If no ghost has occurred but the image is not stable and the finger 402 is moving (S1803: N), a display for guiding the user to rest with the other hand on the display 103 is displayed ( S1805).

  When the finger 402 is released, the main control unit 110 waits for the customer 202 to place the finger 402 on the finger vein reader 102 again (S1806: Y), and then displays the finger vein image 1000 of the placed finger 402. Read again multiple times (S1807).

  On the other hand, if the degree of coincidence is significantly insufficient (S1801: N), the main control unit 110 performs the authentication process a plurality of times instead of the first time after starting the authentication process (S1802: N), it is confirmed whether 15 seconds have passed since the trouble support mode was started (S1808: N). If the coincidence degree AT of the entire area does not improve to 65% or more even after 15 seconds have passed since the main control unit 110 starts the trouble support mode (S1808: Y), “Biometric authentication could not be performed (authentication NG ) "Is displayed and the transaction is canceled (S1809). Then, the IC card 201 is returned to the customer 202 (S1326), and the process ends. This is to prevent an attack by a suspicious person.

  On the other hand, the main control unit 110, which is a data generation unit, matches in all areas in step S1808 when 15 seconds have not elapsed since the trouble support mode was started (S1808: N) or in step S1801. When the degree AT becomes 65 to 80% (S1801: Y), as shown in a block diagram 764 in the lower part of FIG. 20, a block diagram that displays a portion where the degree of coincidence is insufficient (display data related to the degree of coincidence distribution) ) Is always displayed in real time (S1810). In this block diagram, as shown in FIG. 16, the calculated coincidence degrees A0 to A8 of the respective blocks 1001 to 1009 are displayed in shades so as to become darker as the coincidence degree is insufficient.

  Further, the main control unit 110 corresponds to an output unit, and as shown in a screen 761 in FIG. 20, an estimation factor of lack of coincidence and an improvement plan (positioning method) on how to place and position the finger 402 (setting method) The display data for guiding the instruction to change the placement state of the fingers is output to the display 103 and is sequentially displayed on the telop with illustrations (S1811). As a result, the customer 202 becomes aware of his / her bad habit of “placement / position (setting method) of the finger 402” and easily takes an improvement action based on the “improvement plan”.

  In the screen 761 shown in FIG. 20, the read finger vein image 1000 is not displayed as it is, but is displayed as a shaded block diagram 764 to prevent misuse of finger vein data by a suspicious person. is there.

  The main control unit 110 reads the finger vein image 1000 of the placed finger 402 a plurality of times while sequentially displaying the telops with illustrations as described above (S1807). The main control unit 110 performs feature extraction on the read finger vein image 1000, creates authentication data for each block from the extracted feature points, and outputs the authentication data to the IC chip 301 (S1812).

  The CPU 501 reads registration data (template) 505 as shown in FIG. 12 from the biometric information area 504 of the IC chip 301 (S1813), and the authentication data output by the main control unit 110 is registered data (template) 505. Whether or not they match to each other is sequentially checked (S1814). From the collation result, the degree of coincidence A0 to A8 for each block and the degree of coincidence AT in the entire area are calculated (S1815). Then, the CPU 501 confirms whether or not the coincidence degree AT in the entire area has reached a predetermined value (80%) or more, and outputs the confirmed coincidence degree AT to the main control unit 110 (S1816).

  In the “problem support mode”, the finger vein image 1000 of the finger 402 placed and the authentication processing are continuously repeated, and the main control unit 110 has a predetermined degree of coincidence AT for the entire area output by the CPU 501. If it is less than 80% (S1816: N), it is confirmed whether 60 seconds have elapsed since the trouble support mode was started. If 60 seconds have not elapsed (S1817: N), the main control unit 110 returns to step S1800, and shows how the finger 402 is placed and positioned (setting method) as shown in FIGS. Like the screen 771, the screen 781, the screen 791, and the screen 801, a block diagram showing a position with a poor degree of coincidence, an estimation factor, and an improvement plan are sequentially updated and displayed.

  As shown in FIG. 21, when the finger is inclined, the degree of coincidence between the block 1001 and the block 1009 decreases. In this case, the improvement plan is displayed so that the finger is straightened and positioned in the center.

  As shown in FIG. 22, when the fingertip protrudes from the scanner 302 of the finger vein reader 102, the matching degree of the blocks 1007 to 1009 decreases. In this case, an improvement plan is displayed so that the finger is slightly lowered.

  As shown in FIG. 23, when the finger 402 floats with respect to the finger vein reader 102, the camera focus of the scanner 302 is shifted, the finger vein image 1000 becomes unclear, and the matching degree of the blocks 1004 to 1006 decreases. In this case, the improvement plan is displayed so that the finger is straightened.

  As shown in FIG. 24, when the finger 402 is pressed or bent (warped) into a concave, the blood vessel is compressed and blood hardly flows, and the finger vein image 1000 becomes thin, and blocks 1001 to 1003 The degree of coincidence decreases. In this case, the improvement plan is displayed so that the finger can be lifted lightly without being pressed.

  As shown in the upper part of the screen 811 shown in FIG. 25, the inferiority factor for the placement / position (setting method) of the finger 402 is estimated on the graph 812 of the degree of coincidence over time. Add as ~ 820. If the placement / position (setting method) of the finger 402 is changed according to the telops 818 to 820, but the coincidence graph drops, it is noticed that the finger 402 is excessively changed, and the placement / position of the finger 402 is immediately recognized. If the (setting method) is corrected and the coincidence graph increases, the customer 202 can confirm that the correction is correct.

  Also, whenever the placement / position (setting method) of the finger 402 changes, the displayed inferiority estimation factor 815 or improvement plan 816 is changed, but when displayed during the changing of the setting method, May cause flicker. Therefore, after the coincidence deficiency estimation factor 815 and the improvement plan 816 are changed, it is displayed after confirming that they are continued a plurality of times. As a result, display flicker during the change of the setting method is suppressed.

  If the matching degree AT of the entire area does not become 80% or more even after 60 seconds have passed in step S1817 (S1817: Y), the main control unit 110 offers to the person in charge of the window and how to place and position the finger ( “Re-learning / confirmation of setting method and re-registration of finger vein is recommended” (S1818), then “Biometric authentication failed (authentication NG)” is displayed and the transaction is made. Cancel (S1819). Then, the IC card 201 is returned to the customer 202, and the process is terminated.

  In step S1816, the main control unit 110 determines that biometric authentication is OK when the degree of coincidence AT in the entire area is equal to or greater than a predetermined value (80%) (S1816: Y). Even if the authentication is OK, the customer 202 may want to confirm the placement / position (setting method) of the finger 402 having the highest degree of matching. Therefore, the main control unit 110 continues the processing in the trouble support mode until the finger 402 is released, and sequentially updates the block diagram showing the position with poor matching as shown in FIG. It waits for 402 to be released (S1820: N). When the finger 402 is released (S1820: Y), the main control unit 110 uses the IC chip 301 shown in FIG. 5 as an estimation factor of a series of finger 402 placement / positions (setting method) corresponding to the lack of matching. Is stored in the “previous improvement history 512” in the biometric information area 504 (S1821). Furthermore, the main control unit 110 performs the processing (transaction processing) in steps S1321 to S1326 described based on FIG. 13 and ends the processing.

  When the customer 202 performs biometric authentication with the biometric authentication compatible ATM 101 at the next transaction, the main control unit 110 shifts to the “problem support mode” from the authentication result 511 of the previous transaction by reading the IC chip 301. If it is found, the previous improvement history 512 is read from the IC chip 301. When the main control unit 110 displays the finger 402 registered by the ATM 101 on the display 103 so as to be placed on the finger vein reader 102, for example, step S1304 shown in FIG. 13 or step S1801 shown in FIG. As shown in FIG. 26, the estimated factor pointed out last time is also displayed. Thus, by presenting the improvement history of the previous transaction at the time of the current transaction, the customer 202 can remember and respond to the placement / position (setting method) of the finger 402 for which biometric authentication has succeeded. Authentication failure is prevented, and transaction cancellation can be prevented or suppressed. If the biometric authentication of this transaction has not shifted to the “problem support mode”, the previous improvement history 512 of the IC chip 301 may be deleted, or the “problem support” is not performed at the next transaction without deleting. “Mode”.

  As described above, in the biometric authentication unit and the automatic transaction processing device according to the embodiment of the present invention, the failure of biometric authentication is prevented in advance, and even if the degree of coincidence does not reach a predetermined determination value, the authentication failure immediately occurs. The customer will not be distrusted with biometric authentication. The customer displays the poorly matched part, its estimation factors, and the improvement plan in an easy-to-understand manner. If the customer takes an improvement action for the finger placement / position (setting method) based on this, the improvement result is immediately displayed. By displaying it, you can deepen your understanding of reading biometric information and improving image quality, and you can reproduce the placement and position (setting method) of your finger at the time of registration. Can be greatly increased.

  As described above, in the present embodiment, the processing in the finger vein authentication device implemented in the ATM 101 has been described in detail with reference to the drawings. However, biometric information is not limited to finger veins, such as palm veins, fingerprints, and palm prints. Other biological information may be used. The biometric information is registered using the IC chip 301 mounted on the IC card 201. However, the biometric information is registered in a portable terminal, for example, a cellular phone, and the IC chip read / write unit 112 of the ATM 101 is contact-type. If not only a non-contact type can be supported, the same processing can be performed by wirelessly reading biometric information registered in the mobile phone. The same applies when biometric information is registered in the host computer 203 of the financial institution. Further, in this embodiment, the instruction from the ATM 101 to the customer 202 has been described using the display 103 of the ATM 101 and voice guidance. However, a liquid crystal display is provided on the biometric information registration apparatus, the biometric authentication personal computer, or the biometric authentication apparatus itself. If others are implemented, a configuration instructing the customer 202 can be realized. Therefore, the present invention is not limited to the ATM 101, and can be applied to a biometric information registration apparatus, a personal computer with biometric authentication, a general information processing apparatus including a biometric information authentication apparatus, and an automatic machine. In this case, the automatic machine can handle the same biometric authentication not only for the biometric information of the customer 202 using the automatic machine but also for the biometric information of the operator (user) who operates the automatic machine. .

  In the above description, the CPU 113 of the main control unit 110 and the CPU 501 of the IC card 201 share the processing. However, the present invention is not limited to this, and the CPU 113 of the main control unit 110 performs the processing performed by the CPU 501. It is also possible to do so. In this case, the CPU 113 reads the registered biometric information from the IC chip 301, compares the registered biometric information with the biometric information read by the finger vein reader 102, and calculates (detects) the degree of coincidence. Good.

  According to the present embodiment, when the degree of coincidence of the biometric information image read at the time of the authentication process is insufficient, the customer notices a different way of placing / positioning (setting method) of the biometric at the time of registration, and takes an improvement action to The success rate can be improved. In addition, it is possible to deepen understanding of reading biometric information, increase the reliability of an automatic transaction apparatus including a biometric authentication apparatus or an apparatus having a biometric authentication function, and ensure stable operation of the apparatus.

DESCRIPTION OF SYMBOLS 101 ... ATM 102 ... Finger vein reader 103 ... Display 104 ... Touch panel 105 ... Card handling mechanism 106 ... Banknote deposit / withdrawal mechanism 107 ... Statement slip printing mechanism 108 ... Passbook printing mechanism 110 ... Main control part 111 ... Magnetic stripe read / write part 112 ... IC chip read / write unit 113 ... CPU 114 ... memory 115 ... communication unit 116 ... recording unit 118 ... person camera 119 ... biometric authentication unit 200 ... network 201 ... IC card 202 ... customer 203 ... host computer 301 ... IC chip 302 ... scanner 303 ... Feature extraction function part 304 ... Authentication function part 305 ... Registration function part 1000 ... Finger vein image

Claims (9)

A biometric authentication unit that reads biometric information of a person to be authenticated and performs biometric authentication,
A reading unit that reads biometric information from the finger of the person to be authenticated placed on the placing table;
A degree-of-matching acquisition unit that acquires a distribution of the degree of matching obtained by comparing the biometric information read by the reading unit and the registered biometric information of the authentication target person registered in advance;
An output unit for outputting display data related to the distribution of the degree of coincidence between the biometric information and the registered biometric information obtained by the coincidence degree obtaining unit;
A biometric authentication unit.   The output unit is a display data that is generated based on a distribution of coincidence between the biometric information and the registered biometric information detected by the coincidence degree obtaining unit and that guides an instruction to change the placement state of a finger on the mounting table. The biometric authentication unit according to claim 1, wherein the biometric authentication unit outputs in addition.   The biometric authentication unit according to claim 1 or 2, wherein the display data relating to the distribution of the degree of coincidence between the biometric information and the registered biometric information is data obtained by dividing a biometric information reading area into a plurality of blocks. The coincidence degree acquisition unit acquires the distribution of the coincidence degree at regular intervals,
The living body according to claim 2 or 3, wherein the output unit outputs display data that guides an instruction to change a placement state of a finger with respect to the mounting table according to a change at a certain time in the distribution of the degree of coincidence. Authentication unit. Based on the coincidence distribution between the biometric information and the registered biometric information detected by the coincidence degree acquiring unit, a factor that causes a region with a low coincidence degree is estimated, and display data that guides the factor is generated, Output to the output section,
In addition, when biometric authentication of the person to be authenticated is successful, data for guiding the factor estimated so far is output, and an instruction is given to record display data for guiding the factor on a card received from the person to be authenticated. And
Further, when the card is received from the next person to be authenticated, an instruction is given to read the display data for guiding the factor recorded on the card, and the display data read from the card is output to the output unit. The biometric authentication unit according to any one of claims 2 to 4, comprising a data generation unit. The coincidence degree acquisition unit
The living body according to any one of claims 1 to 5, wherein the card received from the authentication subject is instructed to output the distribution of coincidence, and the distribution of coincidence output from the card is acquired. Authentication unit.   An automatic transaction processing apparatus comprising the biometric authentication unit according to any one of claims 1 to 6, wherein the biometric authentication unit processes a transaction in response to an input operation of a person to be authenticated who has been biometrically authenticated. A biometric authentication method in which the biometric information of a person to be authenticated is read and the computer performs biometric authentication,
The biometric information of the finger of the person to be authenticated placed on the mounting table read by the reading unit is compared with the registered biometric information registered in advance of the person to be authenticated read out from the storage medium, and these match A detection step for detecting the distribution of degrees;
An output step of causing the output unit to output a distribution of the degree of coincidence between the biometric information and the registered biometric information detected in the detection step;
A biometric authentication method. On the computer,
The biometric information of the finger of the person to be authenticated placed on the mounting table read by the reading unit is compared with the registered biometric information registered in advance of the person to be authenticated read out from the storage medium, and these match Detection step to detect the distribution of degrees,
An output step of causing the output unit to output a distribution of coincidence between the biometric information and the registered biometric information detected in the detection step;
Biometric authentication program for executing

Images