JP5629633B2 - Automatic transaction apparatus, biometric authentication unit, and biometric authentication method - Google Patents

Description

  The present invention relates to an automatic transaction apparatus, a biometric authentication unit that performs biometric authentication, and a biometric authentication method.

  In financial institutions, biometric authentication using biometric information such as fingerprints, irises, and finger veins is used as a method of identity verification in transactions using an automatic transaction apparatus (hereinafter referred to as ATM). Biometric authentication is a highly secure method, but there are cases where the authentication of the user fails and the transaction cannot be made.

  As a countermeasure described above, in the case of the biometric authentication system described in Patent Document 1, when the degree of coincidence of the biometric information is not sufficient, a transaction in which the limit amount or number of times is partially limited depending on the degree of coincidence. (Hereinafter referred to as restricted transactions). In the case of the biometric authentication system described in Patent Document 2, when the degree of coincidence of biometric information is not sufficient, guidance is displayed on the cause and an improvement plan for the finger setting method (placement, position, etc.). The success rate of biometric authentication is improved by performing re-authentication after repositioning the finger.

JP 2007-048118 A JP 2009-009434 A

  However, in the case of a conventional biometric authentication system, the real-time change in the degree of coincidence of biometric information and appropriate improvement measures cannot be grasped. Also, forgetting the finger setting method when registering biometric information, registering it in an inappropriate state (permanent registration failure factor), finger being damaged, foreign matter and dirt on the finger In the case of authentication failure due to factors such as having been performed (temporary identity factor), even if biometric authentication is performed again with the same finger, there is a possibility of repeated authentication failures without increasing the degree of coincidence of biometric information.

  Therefore, in the present invention, when it is determined that the user is suspicious from the degree of coincidence of biometric information (when authentication is not successful, but there is a possibility of the user), re-registration or restriction transaction of biometric information It is an object of the present invention to provide an automatic transaction apparatus, a biometric authentication unit, and a biometric authentication method that improve user convenience.

  In order to solve the above-described problems, the present invention provides that a degree of coincidence between biometric information acquired at the time of authentication (hereinafter referred to as authentication data) and a template of registered biometric information (hereinafter referred to as registration data) is a predetermined determination value. If not, the estimation factor with a low degree of coincidence and the improvement plan of the finger setting method are displayed in real time. If the degree of coincidence of the biometric information is not sufficient even if the improvement measures are taken, or if the factor that does not improve is a failure factor at the time of registration, identity verification materials (license, basic resident register card, passport, etc.) presented by the user at the time of biometric information registration After reconciling a medium in which personal information is recorded on an IC chip or a portable terminal equipped with an IC chip), re-registration of biometric information and transaction processing are performed. On the other hand, if the factor that does not improve is a temporary identity factor, it cannot be resolved at that time, so the identity verification material is read and verified, and then the transaction is restricted.

  According to the present invention, when biometric authentication fails even if the improvement of the finger setting method is promoted, and the cause is a permanent registration failure factor, re-registration of biometric information after verifying the identity verification material I do. Therefore, the success rate of biometric authentication is greatly increased, and authentication failures are reduced. Moreover, even if the biometric authentication fails, since the transaction is possible if there is a possibility of the user, the convenience for the user is improved.

It is a block diagram which shows the structure of ATM. 1 is a schematic diagram of a biometric authentication processing system. It is a block diagram which shows the structure of a biometrics authentication unit. It is a block diagram which shows the structure of the IC chip with which an IC card is provided. It is a flowchart of biometric authentication and transaction processing. It is an example of the guidance screen of transaction selection. It is an example of the finger | toe set guidance screen to authenticate. It is an example of the finger vein image which the finger vein reader read. It is an example according to the block of the coincidence degree of biometric information. It is an example of the guidance screen of authentication assistance mode transfer. It is an example of the table which recorded withdrawal amount limit. It is a flowchart of authentication assistance mode. It is an example of the notes screen at the time of biometric information reading. It is an example of an authentication assistance mode display screen (when a finger is rotating). It is an example of an authentication support mode display screen (when a finger is pressed). It is an example of the table which recorded the characteristic of the biometric information image.

First, the basic configuration of the present embodiment will be described with reference to FIGS. In the present embodiment, an example in which finger vein information is used as biological information will be described.
FIG. 1 is a block diagram illustrating a configuration of an ATM 101 including a biometric authentication unit. The ATM 101 includes a finger vein reader 102 that reads a finger vein image of a user, a display (display unit such as a liquid crystal display) 103 that displays transaction guidance for the user, and a touch panel (input) that receives an operation input for performing a transaction. Part) 104, a card handling mechanism 105 for processing the inserted card, a banknote depositing / withdrawing mechanism 106 for processing banknotes such as banknote depositing / withdrawing, a statement slip printing mechanism 107 for performing the bill printing process, A passbook printing mechanism 108 that performs printing processing, and a non-contact IC reader 109 that reads a personal identification document (a medium in which personal information is recorded on an IC chip such as a license, a basic resident register card, a passport, or a portable terminal equipped with an IC chip). And a main control unit 110 that controls the operation of the entire ATM 101.

  The card handling mechanism 105 includes a magnetic stripe read / write unit (hereinafter referred to as a magnetic stripe RW unit) 111 that reads data from and writes data to the magnetic stripe (MS) of the card, and an IC chip of the card. An IC chip read / write unit (hereinafter referred to as an IC chip RW unit) 112 that reads data and writes data is provided.

  Further, the main control unit 110 includes a CPU 113 that controls each process, and a memory 114 such as a RAM (Random Access Memory) that temporarily stores various data such as programs for executing each process and transaction information until the transaction is completed. A communication unit 115 for transmitting / receiving data to / from a host or server, a recording unit 116 such as an HDD (Hard Disk Drive) for sequentially recording transaction information with a user after the transaction is established, and a power source 117. Prepare.

  In the present embodiment, the finger vein reader 102, the card handling mechanism 105, the non-contact IC reader 109, and the main control unit 110 are combined into the biometric authentication unit 119 in the above configuration. The biometric authentication unit 119 may be controlled by the main control unit 110 as described above, but each unit (finger vein reader 102, card) is controlled by a control unit (not shown) provided separately from the main control unit 110. The handling mechanism 105 and the non-contact IC reader 109) may be controlled.

  FIG. 2 is a schematic diagram of a biometric authentication system including the ATM 101. The ATM 101 is provided with a person camera 118 for photographing a face image of the user 202 who brings the IC card 201a and the identity verification material 201b at the upper front portion thereof, and is placed on the right end of the operation surface of the user 202. In addition, a finger vein reader 102 and a non-contact IC reader 109 are provided. The ATM 101 is connected to a host computer 203 installed in an office center via a network 200 of financial institutions. The host computer 203 includes a database 204 that stores account information data of the user 202 and the like.

  FIG. 3 is a block diagram showing the configuration of the main part of the biometric authentication unit 119. When the IC card 201a is inserted into the card handling mechanism 105, the IC chip 301a provided on the IC card 201a communicates with the IC chip RW unit 112 via a contact (not shown) provided on the surface thereof. . At the time of biometric authentication, when the user 202 places a finger on the finger vein reader 102, the scanner 401 reads the finger vein image, the feature extraction function unit 402 extracts the feature of the finger vein from the finger vein image, and Data relating to features is output as biometric information for authentication (hereinafter referred to as authentication data). The authentication function unit 403 outputs the authentication data to the IC chip 301a via the main control unit 110 and the IC chip RW unit 112. The IC chip 301a compares and collates the registered biometric information template (hereinafter referred to as registration data) with the authentication data, and performs an authentication process. The registration function unit 404 of the finger vein reader 102 is used when writing and registering registration data obtained by extracting features of the read finger vein image in the IC chip 301a.

  In this way, by configuring the IC chip 301a to perform the authentication process, it is not necessary to output registration data registered in advance for each user 202 who is an authentication target to the outside of the IC chip 301a. , Can increase the safety of registration data.

  Further, the IC chip 301b mounted on the personal identification material 201b is read by a non-contact IC reader 109 provided separately from the card handling mechanism 105. In the case of the non-contact IC reader 109, unlike the card handling mechanism 105 (the IC chip RW unit 112 can read the IC chip 301a by contacting the IC chip 301a), the IC chip 301b in the personal identification material 201b is brought closer. Thus, the IC chip 301b can be read.

FIG. 4 is a block diagram showing a configuration of an IC chip 301a included in the IC card 201a. The IC chip 301a that is a portable storage medium includes a CPU 501 of a CPU, a communication unit 502, a biometric AP (application program) 503, a biometric information area 504, a bank AP 506, account information data 507, and other APs 508. The CPU 501 controls the entire IC chip 301a. The communication unit 502 communicates with the IC chip RW unit 112 of the card handling mechanism 105 shown in FIG. The biometric AP 503 is a biometric authentication program for executing a part of biometric authentication processing for registering the registration data 505 in the biometric information area 504 and collating the authentication data read from the user 202 during the authentication processing with the registration data 505. It is. The bank AP 506 is a program for executing reading of the account information data 507. In addition, the IC chip 301a may incorporate other APs 508 that perform credit processing for each financial institution.
The biometric information area 504 is divided into a plurality of areas, the registration data 505 that is biometric information (registered biometric information) of the user 202, the classification of the personal identification material 201b presented by the user 202 at the time of registration, and the personal identification number. Information 509, biometric authentication processing count 510 that is the total number of times biometric authentication processing has been performed at the time of transaction at ATM 101, biometric authentication failure count 511 that is the total number of biometric authentication failures, and biometric authentication in the previous transaction The previous authentication result 512, which is the result, is stored.

  The biometric authentication processing count 510 in the biometric information area 504 “0” indicates that the user 202 performs biometric authentication for the first time after the IC card 201a is issued. The previous authentication result 512 indicates that the biometric authentication succeeded without retrying the authentication processing at the time of the previous authentication, the biometric authentication succeeded by retrying the authentication processing, or the transaction ended with the biometric authentication failed. I remember that. Thereby, it is possible to determine whether or not the user 202 is used to biometric authentication.

Next, specific processing of biometric authentication processing in the ATM 101 will be described.
FIG. 5 is a flowchart showing a case where biometric authentication using the IC card 201a in which finger vein information is registered and a withdrawal transaction is performed as an example of transaction processing. When the CPU 113 of the main control unit 110 (hereinafter referred to as the main control unit 110) detects that the user 202 has approached by a customer detection sensor (not shown) provided in the ATM 101, after displaying the welcome screen on the display 103 A transaction selection guide screen 700 as shown in FIG. 6 is displayed. After the user 202 selects “withdrawal” from the guidance screen (S601), when the IC card 201a is inserted into the card handling mechanism 105 (S602), the magnetic stripe RW unit 111 records the IC chip recorded in the magnetic stripe. When the IC chip 301a is mounted, the IC chip RW unit 112 reads the account information data 507 recorded on the IC chip 301a. In addition, after detecting that the IC card 201 a is inserted into the card handling mechanism 105, the main control unit 110 causes the person camera 118 to photograph the face image of the user 202 and stores the face image of the user 202 in the recording unit 116. (S603).

  The main control unit 110 displays a guidance screen 800 for setting the finger to be authenticated on the finger vein reader 102 as shown in FIG. When the user 202 confirming the guide screen 800 detects that the finger is placed on the finger vein reader 102 (S604), the finger vein reader 102 reads the finger vein image (S605). Authentication data is created by extracting finger vein feature points from the read finger vein image (S606).

  FIG. 8 is a diagram illustrating an example of finger vein information of the user 202 read by the feature function extraction unit 402 of the finger vein reader 102. The feature extraction function unit 402 extracts the feature points of the finger vein from the finger vein image 900 read from the user's finger 801, and outputs it as authentication data for the entire finger 801. Further, the finger vein image 900 is divided into nine blocks 901 to 909, divided into three blocks in the vertical direction (fingertip / center / root) and three blocks in the left / right direction (left / middle / right). Extracts feature points and outputs authentication data. The feature points are information such as position coordinates, distances, directions, etc., classified into end points, intersections, bending points, and the like of the finger vein image 900, with the branch point near the center at the base of the finger vein image 900 as a reference point. . It should be noted that the number of blocks to be divided and the number of feature points to be extracted need not be constant values, and can be changed for each user and for each block.

  Returning to FIG. 5, after extracting feature points of the finger vein image 900 (S606), the main control unit 110 transmits the created authentication data to the IC chip 301a via the IC chip RW unit 112. The CPU 501 of the IC chip 301a executes the biological AP 503. The CPU 501 reads the registration data 505 (S607), and sequentially compares and collates how much the authentication data matches the registration data 505 (S608). From the comparison / collation result, as shown in FIG. 9, the degree of coincidence AT in the entire area and the degree of coincidence A0 to A8 for each block are calculated (S609). The degree of coincidence refers to the rate at which the registration data read from the IC chip 301a matches the authentication data created in S606. In the present embodiment, the degree of coincidence AT in the entire authentication data and the degree of coincidence A0 to A8 for each block shown in FIG. 9 are calculated.

  The CPU 501 confirms whether or not the degree of coincidence AT in the entire area is equal to or higher than a predetermined value (eg, 80%) (S610), and if it is equal to or higher than the predetermined value (80%), the biometric authentication is OK (the biometric authentication is successful). ) And a signal to that effect is output to the main control unit 110 via the communication unit 502. Thereafter, the main control unit 100 performs transaction processing as follows (S611a to g). That is, the main control unit 110 communicates with the host computer 203 of the business center after completing the input operation of the password (S611a), the input operation of the withdrawal amount (S611b), and the confirmation operation (S611c). Then, the personal identification number and the withdrawal amount are inquired (S611d). If there is no problem with the password / withdrawal amount (S611e: YES), the withdrawal process is performed (S611f), the IC card is returned (S611g), and the process is terminated. Further, if there is a problem with the password / withdrawal amount (S611e: NO), the main control unit 110 performs the processing after S611a. In the transaction process described above, since the biometric authentication is OK, as shown in FIG. 11, the transaction is a “normal transaction” that is a transaction with a high withdrawal limit.

  On the other hand, if the coincidence degree AT in the entire area is less than a predetermined value (80%) in S610, the CPU 501 confirms whether or not 5 seconds have elapsed since the start of the authentication process (S612). If 5 seconds have not elapsed (S612: NO), the CPU 501 performs the processing from S605 onward together with the main control unit 110. That is, the main control unit 110 reads the finger vein image 900 of the finger 801 placed on the finger vein reader 102 a plurality of times, generates authentication data, and outputs it to the IC chip 301a. The CPU 501 registers the authentication data and the authentication data. The degree of coincidence is calculated by collating the data. Further, in S610, if 5 seconds have elapsed since the start of the authentication process with the degree of matching AT in the entire region being less than the predetermined value (80%) in S610 (S612: YES), the degree of matching in the entire region. The AT information is output from the communication unit 502 to the main control unit 110.

  When the received matching degree AT is less than 50% (S613: NO), the main control unit 110, for example, has registered the middle finger due to an elementary mistake of the user 202, but puts an unregistered index finger. Since there is a possibility of a mistake, a warning “Is it different from the registered finger? Please confirm” is displayed on the display 103 (S614). After confirming that the finger 801 of the user 202 is separated from the finger vein reader 102 by the scanner 401 of the finger vein reader 102 (S615: YES), the main control unit 110 returns to S604 and the user 202 moves the finger 801. Wait to put it again. In the present embodiment, the processes in and after S604 are repeatedly executed until the degree of coincidence AT in the entire area becomes 50% or more. There is a high possibility that the degree of coincidence AT will not be 50% or more. For this reason, even if the processing after S604 is executed a predetermined number of times (for example, 3 times), if the matching degree AT does not become 50% or more, the transaction may be stopped.

  On the other hand, the main control unit 110 has a matching degree AT of 50 to 80% (a suspicious value that the finger vein image 900 is the object of the user 202) in the entire area received (S613: YES), FIG. As shown, a screen 1100 for selecting whether or not to shift to the “authentication support mode” that supports improvement of the degree of coincidence in finger vein reading is displayed for the user 202 (S616). When the user 202 presses the “do not transfer” button 1102 and cancels the biometric authentication (S617: N), the process shifts to “restricted transaction 1” in which the withdrawal limit is limited.

  FIG. 11 shows the correspondence between the transaction type 1201 and the withdrawal limit 1202 and is recorded as a table 1200 in the memory 114 of the main control unit 110. In the case of “ordinary transactions”, the withdrawal limit is set high (3 million yen / day). The “restricted transaction 1” is a transaction with only a low security compared to a “restricted transaction 2” described later and a transaction that succeeded in biometric authentication. Therefore, the withdrawal limit is set to a low amount (100,000 yen / day for authentication using a magnetic stripe and 300,000 yen / day for authentication using an IC card).

  When the user 202 presses the “transition to“ authentication support mode ”” button 1101 on the screen 1100 for selecting whether or not to transition to “authentication support mode” (S616: Y), the main control unit 110 Then, the process proceeds to the “authentication support mode” shown in FIG. 12 (S618).

  FIG. 12 is a flowchart showing processing in the authentication support mode. The main control unit 110 causes the display 103 to display general precautions 1400 when reading the finger vein shown in FIG. 13 (S1301). As a result of reading the biometric information area 504 of the IC chip 301a, when the biometric authentication processing count 510 “0” (the user performs biometric authentication for the first time) or the previous authentication result 512, the user is not accustomed to biometric authentication. If it is determined that, in addition to displaying the notes on the display 103, it is desirable to output more detailed notes as voice guidance.

The main control unit 110 always displays the coincidence degree AT in the entire area as a graph on the display 103 of the ATM 101 in real time as shown by a graph 1501 in the upper part of FIG. 14 (S1302). In the lower part of FIG. 14, a block with a low matching degree, an estimation factor with a low matching degree, an improvement plan for a finger setting method, and the like are displayed. Details will be described later.
In the upper graph 1501 in FIG. 14, the degree of coincidence is displayed as a numerical value. However, the present invention is not limited to this display, and a specific numerical value may not be displayed by qualitative expression or color display. For example, when the degree of coincidence is greatly insufficient (the degree of coincidence AT in the entire area is 50% or more and less than 65%), it is “orange”, and when it is not significant, the degree of coincidence AT in the entire area is 65 % Or more and less than 80%) is “yellow”, if they are consistent (matching degree AT in the whole area is 80% or more and less than 85%) is “green”, if they are well matching (matching degree AT in the whole area is 85% or more) may be displayed as “blue”.

  The finger vein reader 102 reads a finger vein image (S1303). Authentication data is created by extracting finger vein feature points from the read finger vein image (S1304).

  The main control unit 110 transmits the created authentication data to the IC chip 301a via the IC chip RW unit 112. The CPU 501 of the IC chip 301a executes the biological AP 503. The CPU 501 reads the registration data 505 (S1305), and sequentially compares and collates how much the authentication data matches the registration data 505 (S1306).

  The CPU 501 checks whether or not the degree of coincidence AT in the entire area is equal to or greater than a predetermined value (eg, 80%) (S1307), and if it is equal to or greater than the predetermined value (80%), the biometric authentication is OK (the biometric authentication is successful). ). Even if the biometric authentication is OK, the user 202 may want to confirm the setting method of the finger 801 with the highest degree of coincidence AT in the entire area. Therefore, as shown in FIG. 15, a graph 1501 and a block diagram 1502 are displayed. The update is performed sequentially and waits for the finger 801 to be released from the finger vein reader 102 (S1308). When the finger 801 is released, a signal to that effect is output to the main control unit 110 via the communication unit 502. Thereafter, the main control unit 100 performs transaction processing as “normal transaction” (withdrawal limit: 3 million yen / day) (S611a to g).

  On the other hand, if the degree of coincidence AT in the entire area is less than the predetermined value (80%), the main control unit 110 checks whether 15 seconds have elapsed since the start of the “authentication support mode” (S1310). When 15 seconds have not elapsed since the start of the “authentication support mode”, as shown in the lower part of FIG. 14, an improvement factor 1504 of the estimation factor 1503 and the finger 801 having a low degree of coincidence is illustrated with a telop with an illustration. The information is sequentially displayed on the display 103 (S1311). For example, when the finger 801 is pressed against the finger vein reader 102 or warped from the finger vein reader 102, blood is difficult to flow due to the blood vessel being compressed, and the finger vein image 900 becomes thin. In this case, an improvement plan is displayed so that the finger 801 is slightly lifted so that the finger 801 is lightly touched without being pressed against the finger vein reader 102.

  If the matching degree is not improved (the graph 1501 is lowered) even though the setting method of the finger 801 is changed in accordance with the improvement plan displayed on the display 103, the user 202 notices that the change is excessive and the finger is changed. The setting method 801 can be modified. On the other hand, when the degree of coincidence improves (the graph 1501 increases), the user 202 can confirm that the correction is correct.

  Even when the setting method of the finger 801 is changed, the estimation factor 1503 and the improvement plan 1504 also change in real time, but may flicker when displayed on the display 103. Therefore, in order to suppress the flickering of the display on the display 103, after the estimation factor 1503 and the improvement plan 1504 change, it is confirmed that the display 103 continues for a certain period of time, and then displayed on the display 103.

  Further, in addition to the estimation factor 1503 having a low degree of coincidence and an improvement plan 1504 for the method of setting the finger 801, a block diagram 1502 showing the degree of coincidence A0 to A8 for each block in a shade that becomes darker as the degree of coincidence is lower is displayed in real time. Is displayed as a block diagram indicated by the gradation (S1312). The read finger vein image 900 is not displayed as it is, but displayed as a block diagram in order to prevent abuse by a suspicious person. As described above, the user 202 becomes aware of his bad habit about the method of setting the finger 801, and easily takes improvement actions based on the “improvement plan”. Thereafter, the processing after S1302 is repeated.

  When 15 seconds have elapsed since the start of the “authentication support mode”, the characteristics of the read finger vein image 900 are confirmed (S1313), and as shown in FIG. It is determined whether this is due to a temporary principal factor (S1314).

  FIG. 16 shows the characteristics of the finger vein image 900, and is recorded as a table 1700 in the IC chip 301 a of the IC card 201 a or the feature extraction function unit 402 of the finger vein reader 102. In the table 1700, a feature point determination section 1701 and a feature 1702 of the feature point itself are recorded in association with each other. Specifically, as shown in FIG. 16, (1) when the line is narrow and meandering or branching, or (2) when the extension line can be drawn even if the line is interrupted Judged as a blood vessel. On the other hand, (3) if there is a linear object that does not meander, it is determined as a scratch, (4) if there is a remote island-like line and a wide object, it is determined that a foreign object is attached, (5) If the object is concentrated or scattered discontinuously, it is determined that the user's finger is dirty. (6) The image of a certain part is unclear (faint, (The line is thin), it is determined that a part of the finger is keratinized, and (7) the finger vein image 900 read a plurality of times is compared, and if the finger is moving greatly, it is determined that the finger is trembling To do.

  When it is determined that the cause of the lack of the matching degree AT in the whole area is due to temporary personal factors such as (3) to (7) (S1314: YES), the main control unit 110 It is displayed on the display 103 that the lack of coincidence cannot be resolved due to a temporary personal factor (S1315). In this case, the “normal transaction” process with a high withdrawal limit (3 million yen / day) cannot be performed, but the withdrawal limit (100,000 yen / day or “ If it is necessary to withdraw more cash (300,000 yen / day), another personal authentication is required.

  In order to perform another personal authentication, the main control unit 110 displays on the display 103 a screen (not shown) for confirming whether the user 202 has the personal identification material 201b presented when the biometric information is registered. When the identification document 201b is not brought (S1316: NO), the process proceeds to “Restricted Transaction 1” (withdrawal limit: 100,000 yen / day or 300,000 yen / day) with a low withdrawal limit (S1317). ). On the other hand, when the user 202 is bringing the personal identification material 201b (S1316: YES), the main control unit 110 guides the user 202 to hold it over the non-contact IC reader 109. The clerk explains that the user identification material 201b can be used as a means of avoiding biometric authentication when biometric information is registered, so that the user who uses biometric authentication for the first time or use that is unfamiliar with biometric authentication. It can be expected that the person visits the store with the identity verification material 201b.

  The main control unit 110 reads the classification and personal identification number from the IC chip 301b of the personal identification material 201b by the non-contact IC reader 109 (S1318), and the personal identification material recorded on the IC chip 301a in the IC card 201a. Whether or not the information 509 matches the information 509 such as the classification 201b and the personal identification number is compared and verified (S1319). If the IC chip 301b of the personal identification material 201b cannot be read, the classification and personal identification number may be manually input. If the classification or personal identification number does not match as a result of the comparison / collation (S1319: NO), “Restriction Transaction 1” with a low withdrawal limit (drawer limit: 100,000 yen / day or 300,000 yen / day) (S1317). On the other hand, when the classification and personal identification number match (S1319: YES), the withdrawal limit is limited from “Normal Transaction” as shown in FIG. Move to relaxed “Restricted Transaction 2”.

  The “restricted transaction 2” is obtained by authenticating the user with the magnetic stripe or IC chip and authenticating with the identity verification material 201b. Although the security is lower than the transaction that succeeded in the biometric authentication, the “restricted transaction 2” This is a transaction with higher security than “Restricted Transaction 1”. For this reason, the withdrawal limit is moderate (1 million yen / day).

  Returning to S1314, if it is determined that the cause of the lack of coincidence degree AT in the entire area is not due to temporary personal factors such as (3) to (7) (S1314: NO), “authentication support mode” Until 60 seconds have passed since the start of "" (S1321: NO), the processes of S1311, S1312, and S1302 to S1314 are repeated. That is, as shown in FIG. 14, as the setting method of the finger 801 changes, the estimation factor 1503 having a low degree of coincidence and the improvement method 1504 of the setting method of the finger 801 are sequentially displayed in a telop with an illustration. In addition, when the coincidence degree AT over the entire area becomes equal to or higher than a predetermined value (80%) by 60 seconds after the start of the “authentication support mode” (S1307: YES), the biometric authentication is OK. It is determined that (the biometric authentication has been successful), and the main control unit 100 performs transaction processing as “normal transaction” (withdrawal limit: 3 million yen / day)) (S1308 to S1309).

  When 60 seconds have elapsed since the start of the “authentication support mode” (S1321: YES), the main control unit 110 confirms whether the matching degree AT in the entire area is 65% or more (S1322), and is less than 65%. In the case (S1322: NO), the processing after S1315 is performed. That is, the control unit 110 displays on the display 103 that the lack of coincidence cannot be resolved due to a temporary identity factor of the user, and has the identity verification material 201b presented by the user when registering the biometric information. If the identification information 201b is brought, the comparison / verification is made to check whether the identification information 201b and the information 509 such as the personal identification number recorded in the IC chip 301a in the IC card 201a are identical. Depending on the result, the process proceeds to “restricted transaction 1” or “restricted transaction 2”.

  On the other hand, when the degree of coincidence AT in the entire area is 65% or more (S1322: YES), the main control unit 110 forgets to set the finger 801 when registering biometric information, or is registered in an inappropriate state. It is displayed on the display 103 that the lack of coincidence cannot be solved due to a permanent registration failure factor (S1323). In this case, when the biometric information is not re-registered, the “normal transaction” process in which the withdrawal limit is set high (3 million yen / day) cannot be performed. Therefore, the biometric information can be re-registered after confirming the presentation of the identity verification material 201b.

  That is, in the “authentication support mode”, only when the identity factor cannot be determined in S1314 and the degree of coincidence AT in the whole area is not significant but is insufficient (50% or more and less than 65%). The biometric information can be re-registered as a special response. Note that this is a case where it is not determined to be the principal factor in S1314, and when the degree of coincidence AT in the entire area is significantly insufficient (50% or more and less than 65%), the re-registration of biometric information is permitted. Therefore, a factor with a low degree of coincidence AT throughout the entire area is determined as the principal factor.

  The main control unit 110 displays on the display 103 a screen (not shown) for confirming whether the user 202 has the personal identification material 201b presented when biometric information is registered. When the identity verification material 201b is not brought (S1324: NO), the process proceeds to “Restricted Transaction 1” (withdrawal limit: 100,000 yen / day or 300,000 yen / day) with a low withdrawal limit (S1325). ). On the other hand, when the user 202 brings the personal identification material 201b, the main control unit 110 guides the user 202 to hold it over the non-contact IC reader 109.

  The main control unit 110 reads the classification and personal identification number from the IC chip 301b of the personal identification material 201b by the non-contact IC reader 109 (S1326), and the personal identification material recorded on the IC chip 301a in the IC card 201a. Whether or not the information matches the information 509 such as the 201b classification and personal identification number is compared (S1327). If the classification or personal identification number does not match as a result of the comparison / collation (S1327: NO), “Restricted Transaction 1” with a low withdrawal limit (drawer limit: 100,000 yen / day or 300,000 yen / day) (S1325). On the other hand, when the classification and personal identification number match (S1327: YES), the main control unit 110 displays a screen (not shown) for confirming whether or not to re-register biometric information to the user 202 on the display. To do. When re-registration of biometric information is performed (S1328: YES), the user 202 sets a finger on the finger vein reader 102 (S1330). After that, among the registration data 505 of the IC chip 301a, the registration data already recorded in the new registration data 505a is moved to the old registration data 505b, and the biometric information read by the finger vein reader 102 is newly added to the new registration data 505b. 505a. After re-registration of the biometric information, the main control unit 100 performs transaction processing as “normal transaction” (withdrawal limit: 3 million yen / day) (S1331).

  On the other hand, when the re-registration of biometric information is not performed (S1328: NO), the main control unit 100 performs transaction processing as “restricted transaction 2” (withdrawal limit: 1 million yen / day) (S1329).

  In the above embodiment, biometric information is registered / authenticated by the finger vein reader 102 mounted on the ATM 101, but the biometric information is not limited to the finger vein, such as palm vein, fingerprint, iris, face image, etc. Other biological information may be used.

  In the above embodiment, the biometric information is recorded in the IC chip 301a mounted on the IC card 201a. However, the biometric information is registered in the IC chip mounted on the mobile terminal (eg, mobile phone), and the mobile phone is registered. Similar processing may be executed by reading the terminal with the non-contact IC reader 109. Further, the biometric information may be centrally managed by registering the biometric information with a financial institution server.

  Further, in the above embodiment, the cause of the lack of the matching degree AT in the whole area is determined from the characteristics of the finger vein image recorded on the IC chip 301a of the IC card 201a and the matching degree AT of the biometric information. You may judge using a log | history etc.

  In the above embodiment, the upper limit of the withdrawal amount is restricted as an example of the restricted transaction. However, even if the transaction type is restricted (for example, withdrawal transaction is restricted) or the number of transactions per day is restricted. good.

  Furthermore, in the above-described embodiment, the instruction from the main control unit 110 to the user 202 uses the display 103 or voice guidance of the ATM 101, but a biometric information registration device, a biometric authentication personal computer, or a biometric information authentication device If a liquid crystal display or the like is mounted on the device itself, the user 202 may be instructed using these devices. Therefore, the present invention is not limited to ATM, but can also be applied to a biometric information registration apparatus, a personal computer with biometric authentication, a general information processing apparatus including a biometric information authentication apparatus, and an automatic machine. In this case, the same biometric authentication can be performed not only on the biometric information of the user who uses the automatic machine but also on the biometric information of the operator (customer / clerk) who operates the automatic machine. .

101: ATM, 102: finger vein reader, 103: display, 104: touch panel, 105: card handling mechanism, 109: non-contact IC reader, 110: main control unit, 112: IC chip read / write unit, 113: CPU, 114 : Memory, 116: recording unit, 119: biometric authentication unit, 201a: IC card, 201b: identity verification material, 202: user, 301a: IC chip of IC card, 301b: IC chip of identity verification material, 401: scanner 402: Feature extraction function unit, 403: Authentication function unit, 404: Registration function unit, 504: Biometric information area, 505: Registration data, 509: Information of identity verification material, 801: Finger, 900: Finger vein image

Claims (9)

A card reader that reads the IC card of the person to be authenticated, a first reading unit that reads the biometric information of the person to be authenticated, and a personal identification material in which personal information different from the biometric information is stored in the IC chip is read without contact. An automatic transaction apparatus comprising a second reading unit and a control unit that controls the operation of the entire device,
The controller is
Obtaining a degree of coincidence between the biometric information read by the first reading unit and the biometric information of the person to be authenticated registered in the IC card;
If the degree of coincidence is lower than a first threshold for allowing biometric authentication after a predetermined time has elapsed, determine a factor of the degree of coincidence being low,
The factor is the biometric information registered in the IC card, and the personal information read by the second reading unit and the biometric information of the person to be authenticated registered in the IC card. An automatic transaction apparatus, wherein when different personal information matches, the first reading unit reads new biometric information and records the read biometric information on the IC card. The automatic transaction apparatus according to claim 1,
The controller is
When the biometric information read by the first reading unit has a feature recorded in advance in the first reading unit or the IC card, the factor is read by the first reading unit. An automatic transaction apparatus that determines that the biometric information is present. The automatic transaction apparatus according to claim 1 or 2,
The controller is
The biometric information read by the first reading unit does not have a feature recorded in advance in the first reading unit or the IC card, and the second matching level is lower than the first threshold value. When it is lower than the threshold, the automatic transaction apparatus determines that the factor is in the biological information read by the first reading unit. The automatic transaction apparatus according to claim 3,
The automatic transaction apparatus which judges that the factor with the low said matching degree exists in the said biometric information registered into the said IC card, when the said matching degree is higher than said 2nd threshold value. The automatic transaction apparatus according to any one of claims 1 to 4,
The controller is
An automatic transaction apparatus that performs transaction processing in accordance with an input operation of the person to be authenticated after recording the new biometric information on the IC card. The automatic transaction apparatus according to any one of claims 1 to 5,
If the read personal information does not match the personal information of the person to be authenticated registered in advance on the IC card, the personal information that has been read and the person to be authenticated registered in advance on the IC card Compared with the case where the personal information matches, transaction processing is limited. The automatic transaction apparatus according to any one of claims 1 to 6,
A display unit for displaying display data for the person to be authenticated;
The controller is
The display data including an instruction to change the placement of the living body of the person to be authenticated with respect to the first reading unit in accordance with a factor of the low degree of coincidence or a change in the degree of coincidence distribution at regular intervals. An automatic transaction apparatus characterized by outputting to a department. A biometric authentication unit that reads biometric information of a person to be authenticated and performs biometric authentication,
A card reader for reading the IC card of the person to be authenticated, a first reading unit for reading the biometric information of the person to be authenticated, and a personal identification material in which personal information different from the biometric information is recorded on the IC chip is read without contact. A second reading unit; an output unit that outputs various types of biometric authentication information to the outside of the biometric authentication unit; and a control unit that controls the biometric authentication unit.
The controller is
Obtaining a degree of coincidence between the biometric information read by the first reading unit and the biometric information of the person to be authenticated registered in the IC card;
If the degree of coincidence is lower than a first threshold for allowing the biometric authentication after a predetermined time has elapsed, determine a factor of the degree of coincidence being low,
The factor is the biometric information registered in the IC card, and the personal information read by the second reading unit is different from the biometric information of the person to be authenticated registered in the IC card. A biometric authentication unit, wherein when the personal information matches, the first reading unit reads new biometric information and records the read new biometric information on the IC card. A biometric authentication method for performing biometric authentication by reading biometric information of a person to be authenticated,
And the step of reading the biological information of the previous Symbol person to be authenticated,
Acquiring the degree of coincidence between the read biometric information and the biometric information of the person to be authenticated registered in the IC card;
After the elapse of a predetermined time, if the coincidence is lower than a first threshold for allowing the biometric authentication, determining a factor of the low coincidence;
The factor is, when there is in the biological information that has been registered in advance in the IC card, and the steps to take read the identification documents with different personal information has been recorded in the IC chip is the raw body information,
And read fringed the personal information, if the personal information and match different from the object's biometric information registered in the IC card, and reading a new biometric information,
Recording the new biometric information read on the IC card;
A biometric authentication method.

Images