JP6810568B2 - Authentication processing system and authentication processing method - Google Patents

Description

The present invention relates to an authentication processing system and an authentication processing method, and specifically relates to a technique for streamlining biometric authentication processing and reducing the authentication processing time as compared with the prior art.

There are various devices that require personal authentication processing of customers, such as ATMs at financial institutions and terminals provided at branch offices. Recently, a biometric authentication system has been widely adopted because it has the meaning of reducing the procedure required for authentication to improve usability and avoiding the theft of assets by a malicious third party.

Conventional techniques related to such bioauthentication include, for example, a biometric information input device for processing a user authentication process by biometric information, an authentication processing unit that performs an authentication process using the user's biometric information, and a user's desire. By detecting the start of the user authentication operation for the input / output device for executing the process of the above and starting the process preparation desired by the user in the background by detecting the start of the authentication operation, the user desires before the user authentication process is completed. There has been proposed an authentication device (see Patent Document 1) having a control unit that controls the process so that the user's desired process can be executed immediately after the user authentication is completed.

Japanese Unexamined Patent Publication No. 2011-76288

In such a biometric authentication system, it is common to store and manage biometric information for authentication in a medium such as an IC card of each customer. In this case, various customer burdens such as storage and carrying of the medium and operations of setting it in an ATM or the like cannot be avoided. In addition, the burden on the financial institution side for issuing the medium or reissuing it when it is lost cannot be avoided.

In addition, when biometric authentication processing is executed by exchanging biometric information between the above-mentioned ATM or the like and the authentication server by encrypting the biometric information, the biometric information read from the customer and the living body of all registrants on the authentication server A collation procedure with the information is required. As a result, the authentication time tends to be long, and there is a concern that customer satisfaction tends to decrease.

Therefore, an object of the present invention is to provide a technique for streamlining biometric authentication processing and reducing the authentication processing time as compared with the prior art.

The authentication processing system of the present invention that solves the above problems uses the identification information of the authentication target person entered by the authentication target person as a key to perform predetermined authentication for a request for acquisition of a biometric authentication template registered for the authentication target person. A process of transmitting to the server, reading the biometric information of the authentication target person by the biometric information reader, and acquiring the biometric authentication template of the authentication target person from the authentication server during the biometric information reading, and the above-mentioned and biometric information obtained by the biological information, wherein the predetermined biometric authentication process based on the biometric template obtained from the authentication server, an authentication processing unit for execution, and identification information of the authentication target person, the authentication subject Regarding the above, the biometrics templates generated for each of multiple types of biometric parts based on the policy in the open-type biometrics platform and the biometrics templates used for the latest biometrics processing. The flag to be used, which is the most recently used flag set in association with the type of the biometric part to be used and the biometric authentication template existing for the type to be used, is stored in association with each other. a storage device for storing authentication table, in response to the acquisition request from the authentication processing unit, the key identification information of the authentication target person to which the acquisition request is shown, biometric authentication of the authentication target person in the authentication table Among the templates, the one for which the latest use flag is set is searched, the biometric authentication template that has been the target of authentication in the past for the authentication target person is specified by the search, and the biometric authentication template is used as the biometric authentication template. It is characterized by including an authentication server provided with an arithmetic device that performs a process of returning to the authentication processing device and a process of executing the biometric authentication process together with the authentication processing device based on the authentication procedure in the template open biometric authentication platform. To do.

Further, in the authentication processing method of the present invention, the authentication device uses the identification information of the authentication target person input by the authentication target person as a key to request the acquisition of the biometric authentication template registered for the authentication target person. A process of transmitting to the authentication server, reading the biometric information of the authentication target person by the biometric information reader, and acquiring the biometric authentication template of the authentication target person from the authentication server during the biometric information reading. The biometric information obtained by reading the biometric information and a predetermined biometric authentication process based on the biometric authentication template obtained from the authentication server are executed, and the authentication server executes the identification information of the authentication target person and the authentication target. A plurality of biometric authentication templates generated for each of a plurality of types of biometric sites based on the policy of the open-type biometric authentication platform, and the biometric authentication template used for the latest biometric authentication process. The most recent use flag, which is set in association with the type of biometric part to be used and the biometric authentication template that exists for the type and is the target of use, is stored in association with the flag. the authentication table held by the storage apparatus, in response to the acquisition request from the authentication processing unit, the key identification information of the authentication target person to which the acquisition request is shown, biometric authentication of the authentication target person in the authentication table Among the templates for, the one for which the latest use flag is set is searched, the biometric authentication template that has been the target of authentication in the past for the authentication target person is specified by the search, and the biometric authentication template is used. It is characterized in that a process of returning to the authentication processing device and a process of executing the biometric authentication process together with the authentication processing device based on the authentication procedure in the template open-type biometric authentication platform are executed.

According to the present invention, the biometric authentication process can be made more efficient and the authentication process time can be reduced as compared with the conventional case.

It is a network block diagram which shows the authentication processing system of this embodiment. It is a figure which shows the hardware configuration example of the authentication processing apparatus in this embodiment. It is a figure which shows the hardware configuration example of the authentication server in this embodiment. It is a figure which shows the data structure example of the authentication table of this embodiment. It is a figure which shows the configuration image of the biometric authentication template of this embodiment. It is a figure which shows the flow example 1 of the authentication processing method in this embodiment. It is a figure which shows the screen example in this embodiment. It is a figure which shows the execution order example of the difference calculation in this embodiment. It is a figure which shows the flow example 2 of the authentication processing method in this embodiment.

--- System configuration ---

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is a network configuration diagram corresponding to the authentication processing system 10 of the present embodiment. The authentication processing system 10 shown in FIG. 1 is a computer system that makes biometric authentication processing more efficient and enables the authentication processing time to be reduced as compared with the conventional case.

The authentication processing system 10 of the present embodiment is configured by connecting the authentication processing device 100 and the authentication server 200 so as to be able to communicate with each other via the network 5.

Among the devices constituting the authentication processing system 10, the authentication processing device 100 is assumed to be a device that authenticates the customer of a financial institution, such as an ATM or a counter terminal of a sales office. Of course, any type of device can be used as long as it should be used for personal authentication. Here, as an example, the customer of the above-mentioned financial institution is set as the certification target person. Further, the authentication server 200 is a server device that manages the biometric authentication template for each customer of the above-mentioned financial institution and executes the biometric authentication process in cooperation with the authentication processing device 100.

Both the above-mentioned authentication processing device 100 and the authentication server 200 are devices that perform biometric authentication processing on a template open-type biometric authentication platform (reference: JP-A-2015-39106). Therefore, the biometric authentication process in the present embodiment conforms to the protocol of the authentication process in the template open type biometric authentication platform.

When the above-mentioned template open-type biometric authentication platform is applied to personal authentication, a medium for storing biometric information such as a cash card with a built-in IC chip, which has been conventionally used in ATMs and the like, becomes unnecessary. Further, the biometric authentication template of each customer provided from the authentication server 200 to the authentication processing device 100 via the network 5 is so-called irreversible information that has been mathematically proved to be irreversible to the original biometric information. is there. Therefore, even if such a biometric authentication template is leaked, the biometric information of the customer is not known to a third party, and biometric authentication can be executed in a secure environment.
--- Hardware configuration ---

In addition, a hardware configuration example of each device included in the authentication processing system 10 of the present embodiment will be described. FIG. 2 is a diagram showing a hardware configuration example of the authentication processing device 100 of the present embodiment. The authentication processing device 100 is specifically assumed to be an ATM or a branch office terminal, but description of existing configurations (eg, cash transfer mechanism in ATM, cash storage, etc.) peculiar to such terminals will be omitted. ..

The authentication processing device 100 of the present embodiment includes a storage device 101 composed of an appropriate non-volatile storage element such as an SSD (Solid State Drive) or a hard disk drive, a memory 103 composed of a volatile storage element such as a RAM, and a storage device 101. The program 102 held in the memory 103 is executed by reading it into the memory 103 to perform overall control of the device itself, and also receives key input and voice input from the arithmetic device 104 such as a CPU that performs various determinations, calculations and control processes. An input device 105, an output device 106 such as a display that displays processing data, a communication device 107 that connects to a network 5 and is responsible for communication processing with other devices, and biological information that reads biological information from a customer's biological part. It is equipped with a reader 110.

The biometric information reader 110 described above assumes, for example, a finger or palm vein sensor, a fingerprint or iris imaging device, or the like.

Further, the above-mentioned program 102 includes a program that executes an authentication procedure according to a protocol in the template public biometric authentication platform.

Subsequently, FIG. 3 shows a hardware configuration example of the authentication server 200 of this embodiment. The authentication server 200 of the present embodiment includes a storage device 201 composed of an appropriate non-volatile storage element such as an SSD (Solid State Drive) or a hard disk drive, a memory 203 composed of a volatile storage element such as a RAM, and a storage device 201. The held program 202 is read into the memory 203 and executed to perform overall control of the device itself, and the arithmetic device 204 such as a CPU that performs various determinations, calculations and control processes, and the network 5 are connected to other devices. A communication device 205, which is responsible for communication processing, is provided.

In addition to the program 202, the storage device 201 described above stores an authentication table 225 that stores a biometric authentication template for each biological part of each customer. A specific data configuration example of the authentication table 225 will be described later.
--- Data structure example ---

Subsequently, the tables used in the authentication processing system 10 of the present embodiment will be described. FIG. 4 shows an example of the authentication table 225 in this embodiment.

The authentication table 225 of the present embodiment is a table in which biometric authentication templates generated by processing biometric information obtained in advance from a customer of a financial institution according to the protocol of the above-mentioned template open type biometric authentication platform are accumulated.

The data structure uses a customer ID that uniquely identifies a customer of a financial institution as a key, a biometric site in which a biometric authentication template is registered for the customer, a plurality of biometric authentication templates registered for the biometric site, and It is a collection of records associated with values such as the most recently used flag.

As an example of the biological part, the thumb of the right hand is "R01", the index finger of the right hand is "R02", the middle finger of the right hand is "R03", the ring finger of the right hand is "R04", and the little finger of the right hand is "R05". The left thumb is "L01", the left index finger is "L02", the left middle finger is "L03", the left ring finger is "L04", the left little finger is "L05", and so on.

In the example of FIG. 4, for the customer with the customer ID "00001", the biometric authentication template is registered for the right index finger "R02" and the left index finger "L02". Further, for the customer with the customer ID "00002", the biometric authentication template has been registered for the right index finger "R02", the left index finger "L02", and the left middle finger "L03".
Further, the biometric authentication template is a data in which the authentication server 200 embeds the private key for the customer in the biometric information obtained from each biological part designated by the customer for registration, and the disclosure of the above-mentioned private key and pair. It is a set with a key. Of course, the procedure for generating such an authentication template is in line with the protocol in the template public biometric authentication platform.

As shown in the example of the authentication table 225 in FIG. 4, a plurality of biometric authentication templates are registered for a plurality of biological parts of one customer, for example, by time (see FIG. 5).

Further, the latest use flag is a flag given to the biometric authentication template registered for each customer, which is used for the latest biometric authentication process, that is, which is collated by the authentication processing device 100. ..

In the case of the example of FIG. 4, for the customer with the customer ID "00001", the latest use flag "1" is given to the record of the right index finger "R02". Therefore, it is shown that the biometric authentication template of the right index finger "R02" was used in the latest biometric authentication process for this customer. Similarly, for the customer with the customer ID "00002", the latest use flag "1" is given to the record of the left index finger "L02". Therefore, it is shown that the biometric authentication template of the left index finger "L02" was used in the latest biometric authentication process for this customer.

The authentication table 225 of the present embodiment shows an example in which the above-mentioned latest use flag is given for each type of biological part, but the type of biological part and the template for biometric authentication related to the biological part are shown. It may be in a form in which the latest use flag is given so as to specify one.
--- Flow example 1 ---

Hereinafter, the actual procedure of the authentication processing method in the present embodiment will be described with reference to the figure. Various operations corresponding to the authentication processing methods described below are realized by programs that are read into and executed by the authentication processing device 100 and the authentication server 200, which constitute the authentication processing system 10. The program is composed of code for performing various operations described below.

FIG. 6 is a diagram showing a flow example 1 of the authentication processing method in the present embodiment. Here, it is said that a customer of a financial institution inputs a predetermined instruction to perform a desired financial transaction in an authentication processing device 100 such as an ATM, and the authentication processing device 100 starts a biometric authentication procedure for the customer accordingly. To do.

In this case, the authentication processing device 100 displays the customer ID input screen 600 (see FIG. 7), which is the identification information for the customer, on the output device 106 (s100). Here, as an example of the identification information, a form in which the customer ID is input is given, but the present invention is not limited to this. For example, the customer may be asked to enter information such as a store number, a subject, and an account number of an account held by a financial institution.

Next, the authentication processing device 100 transmits a request for acquiring a biometric authentication template registered for the customer to the authentication server 200 using the above-mentioned customer ID as a key (s101).

On the other hand, the authentication server 200 receives the above-mentioned acquisition request and executes a search in the authentication table 225 using the customer ID included in the acquisition request as a key (s102).

On the other hand, the authentication processing device 100 starts reading the biometric information to the customer by the biometric information reader 110 together with the transmission of the acquisition request (s101) (s103). While this biometric information reading is being performed, the authentication server 200 identifies a biometric authentication template registered for each biometric part of the customer corresponding to the customer ID in accordance with the above-mentioned search, for example, the biometric part. It returns to the authentication processing apparatus 100 every time (s104).

Further, the authentication processing device 100 transmits a request for personal authentication data using the customer ID as a key to the authentication server 200 while reading the biometric information, and acquires the personal authentication data related to the customer from the authentication server 200. (S105). This personal authentication data is data held by an existing customer management system or the like in a financial institution, and assumes, for example, information on a financial transaction account held by the customer, which is managed in association with the customer ID.

In many cases, the above-mentioned operation of reading biological information for a customer's biological part is in seconds, for example, 1 to 2 seconds. On the other hand, acquisition of a biometric authentication template and personal authentication data based on a customer ID is assumed to be in units of several milliseconds to several tens of milliseconds, for example. Therefore, the acquisition of the biometric authentication template and the like can be executed in parallel from the start of the biometric information reading operation in s103 to the completion of the operation, that is, in the background of the biometric information reading operation.

Here, the authentication processing device 100 acquires all the biometric authentication templates registered for each of the plurality of biological parts registered in the authentication table 225 for the above-mentioned customer, and uses the biometric information reader 110. It is assumed that the reading of the biometric information of the above is completed (s106).

In this case, the authentication processing device 100 executes winetime key pair generation based on the above-mentioned template public biometric authentication platform protocol by a predetermined algorithm, and generates a one-time public key and a one-time private key (s107). ..

Next, the authentication processing device 100 embeds the one-time private key generated in s107 into the above-mentioned customer biometric information obtained by the biometric information reader 110 by a predetermined algorithm, and uses this as the private key data to be used as the secret key data, and the authentication server The difference calculation with each biometric authentication template obtained from 200 is executed one by one (s108).

In this difference calculation, the difference between the biometric information is eliminated by performing a predetermined error correction process in the template open type biometric authentication platform.

Further, as the order in which the above-mentioned difference calculation is executed one by one, as shown in FIG. 8, a plurality of biometric authentication templates obtained from the authentication server 200, for example, for each biological part of the right-hand index finger and the left-hand index finger. That is, one of the biometric authentication templates sequentially selected between the biological parts of the templates 1 to 3 is collated with the biometric information obtained by the biometric information reader 110 and the private key data based on the one-time private key. Shall be repeated until a predetermined result is obtained.

As a result of the difference calculation of s108 described above, if the difference private key cannot be generated even if the difference calculation with each biometric authentication template is performed (s109: n), the authentication processing device 100 determines that the authentication has failed and processes it. To finish.

On the other hand, when the difference secret key can be generated by the difference calculation with any of the biometric authentication templates as a result of the difference calculation of s108 described above (s109: y), the authentication processing device 100 uses the above-mentioned one-time secret. The above-mentioned personal authentication data is signed by the key, this is used as the server authentication data, and is transmitted to the authentication server 200 together with the above-mentioned differential private key (s110).

On the other hand, the authentication server 200 receives the above-mentioned server authentication data and the differential private key, decrypts the server authentication data with the above-mentioned customer's public key, and executes signature verification (s111).
Further, the authentication server 200 verifies whether the public key held in advance for the customer and the above-mentioned one-time public key correspond to the differential private key (s112). In this case, in the template public biometric authentication platform, a method is adopted in which the relationship between the private key and the public key satisfies the property of "quasi-identity", and by using this property, the differential private key can be obtained as described above. It is verified whether the difference between the private keys corresponding to the two public keys matches.

The authentication server 200 returns the result of the signature verification of s111 and the verification of s112 described above to the authentication processing device 100 (s113), and ends the processing. On the other hand, the authentication processing device 100 receives this result, displays it on the output device 106 (s114), and ends the processing.

The processing in the authentication server 200 and the authentication processing device 100 related to s109 to s114 is the processing according to the procedure of biometric authentication in the template open type biometric authentication platform.

Further, in the above flow, in s100, the authentication processing device 100 displays an input screen on the output device 106 that accepts the designation of the biological part to be authenticated in addition to the customer ID that is the identification information for the customer. You may let it.

In this case, the authentication processing device 100 in s101 transmits a request for acquisition of a biometric authentication template registered for the relevant biometric part of the customer to the authentication server 200 using the above-mentioned customer ID and biometric part information as a key. It becomes.

Further, the authentication server 200 in s102 receives the above-mentioned acquisition request and executes a search in the authentication table 225 using the customer ID and the information of the biological part included in the acquisition request as keys. By this search, the authentication server 200 identifies the biometric authentication template registered for each designated biometric part of the customer corresponding to the customer ID, and returns to the authentication processing device 100 for each biometric part, for example. Subsequent steps are the same as in Flow Example 1 described above.
--- Flow example 2 ---

Next, a biometric authentication template is specified based on the biometric part that the customer has previously authenticated, and an example of using the template will be described with reference to the figure without any particular designation by the customer. FIG. 9 is a diagram showing a flow example 2 of the authentication processing method in the present embodiment. Here, the processing associated with the acquisition of the biometric authentication template will be described.

In this case, it is assumed that the authentication server 200 receives the request for acquiring the biometric authentication template from the authentication processing device 100.

The authentication server 200 identifies, among the records of the corresponding customer in the authentication table 225, the one whose latest use flag is "1", using the customer ID included in the above acquisition request as a key (s200). It is assumed that the authentication processing device 100 has started reading the biometric information to the customer by the biometric information reader 110 together with the transmission of the above-mentioned acquisition request, as in the flow example 1.

Next, the authentication server 200 returns the biometric authentication template indicated by the record specified in s200 described above, that is, the biometric authentication template of the biological part that has been the target of authentication in the past, to the authentication processing device 100 (s201).

On the other hand, the authentication processing device 100 acquires a biometric authentication template for a biological part that has been authenticated in the latest past for the customer from the above-mentioned authentication server 200 (s202). Hereinafter, the same processing as in s106 to s1114 in the above-mentioned flow example 1 will be executed by the authentication processing device 100 and the authentication server 200.

Although the best mode for carrying out the present invention has been specifically described above, the present invention is not limited to this, and various modifications can be made without departing from the gist thereof.

According to this embodiment, it is not necessary to retain and manage a medium storing biometric information such as a cash card with a built-in IC chip, which is a feature of biometric authentication processing based on a template open biometric authentication platform, and spoofing etc. Efficient and quick by processing the biometric information reading operation of the authentication target person in the authentication processing device such as ATM and the download of the biometric authentication template from the authentication server in parallel, as well as the advantage that the risk is very low. There is an advantage that biometric authentication processing becomes possible. In the authentication server, the biometric authentication template can be uniquely searched and returned to the authentication processing device based on the identification information specified by the authentication target person in the authentication processing device. Therefore, the authentication processing device can also perform so-called 1: 1 authentication, and the processing efficiency of biometric authentication is further improved.

In addition, by registering and managing multiple biometric authentication templates for one person to be authenticated for multiple biological parts, the person authentication rate and the rejection rate of others can be dealt with in response to injuries and secular changes in the person to be authenticated. It is also possible to guarantee the improvement of.

That is, the biometric authentication process can be streamlined and the authentication process time can be reduced as compared with the conventional case.

The description herein reveals at least the following: That is, in the authentication processing device of the present embodiment, the authentication processing device acquires a biometric authentication template generated based on the policy in the template public biometric authentication platform as the biometric authentication template from the authentication server. , The biometric authentication process may be executed together with the authentication server based on the authentication procedure in the template open type biometric authentication platform.

According to this, secure biometric authentication via a network can be executed efficiently and quickly. As a result, the biometric authentication process can be made more efficient and the authentication process time can be reduced as compared with the conventional case.

Further, in the biometric authentication system of the present embodiment, when the authentication processing device acquires the biometric authentication template from the authentication server, a plurality of biometric authentications registered for each of a plurality of biometric parts in the authentication target person are performed. It may be the one that obtains the template for.

According to this, even if the biological part of the person to be authenticated cannot be authenticated due to an injury or the like, biometric authentication can be performed for the alternative part, and the biological information in the biological part can be changed over time. Correspondingly, the personal authentication rate and the rejection rate of others can be made suitable. As a result, the biometric authentication process can be made more efficient and the authentication process time can be reduced as compared with the conventional case.

Further, in the biometric authentication system of the present embodiment, the authentication processing device is used for each biometric part among a plurality of biometric authentication templates for each of the plurality of biometric parts obtained from the authentication server during the biometric authentication process. The matching of one biometric authentication template sequentially selected between the two and the biometric information obtained by reading the biometric information may be repeatedly executed until a predetermined result is obtained.

According to this, the authentication efficiency is appropriately maintained in response to the situation where a plurality of biometric authentication templates are registered and managed in a large number of biological parts for one person to be authenticated, and by extension, the biometric authentication process. It becomes possible to improve the efficiency and reduce the authentication processing time as compared with the conventional case.

Further, in the bioauthentication system of the present embodiment, the authentication processing device obtains the information of the biological part designated by the authentication target person and the identification information of the authentication target person in the process of acquiring the bioauthentication template. In the key, the acquisition request of the bioauthentication template registered for the authentication target person is transmitted to the authentication server, and the biometric information reading for the authentication target person is executed by the biometric information reader to read the biometric information. In the meantime, a bioauthentication template for the biometric part of the authentication target person who has received the designation is acquired from the authentication server, and the biometric information obtained by reading the biometric information during the bioauthentication processing and the bioauthentication server It may be said that a predetermined bioauthentication process based on the obtained bioauthentication template for the biological part is executed.

According to this, not only the identification information of the person to be authenticated but also the biometric part is specified, and based on this, the biometric authentication template can be quickly identified and read on the authentication server, and eventually biometric authentication. It is possible to make the processing more efficient and reduce the authentication processing time than before.

Further, in the bioauthentication system of the present embodiment, the authentication processing device has been subject to authentication in the past with respect to the authentication target person by using the identification information of the authentication target person as a key in the process of acquiring the bioauthentication template. A request for acquiring a registered bioauthentication template for the biometric part is transmitted to the authentication server, and the biometric information reader is used to read the biometric information for the person to be authenticated. From the authentication server, a bioauthentication template for the biometric part of the authentication target person that has been the subject of authentication in the past is acquired, and the biometric information obtained by reading the biometric information during the bioauthentication process and the biometric information obtained from the authentication server. It is also possible to execute a predetermined bioauthentication process based on the bioauthentication template for the biological part that has been authenticated in the past.

According to this, it is possible to obtain a biometric authentication template for a biological part that has been authenticated in the past, which is presumed to have a high probability of being authenticated this time as well, and by extension, the biometric authentication process is further processed. It will be more efficient and the authentication processing time can be reduced compared to the past.

Further, in the bioauthentication system of the present embodiment, authentication in which the identification information of the authentication target person and the bioauthentication template generated based on the policy in the template open type bioauthentication platform for the authentication target person are stored in association with each other. In response to the acquisition request from the storage device that stores the table and the authentication processing device, a search is executed in the authentication table using the identification information of the authentication target person indicated by the acquisition request as a key, and the search is specified. An arithmetic device that performs a process of returning the bioauthentication template to the authentication processing device and a process of executing the bioauthentication process together with the authentication processing device based on the authentication procedure in the template open type bioauthentication platform. It may further include an provided authentication server.

According to this, the processing of biometric authentication regarding the person to be authenticated between the authentication server corresponding to the template open type biometric authentication platform and the above-mentioned authentication processing device becomes more efficient, and by extension, biometric authentication. It is possible to make the processing more efficient and reduce the authentication processing time than before.

Further, in the biometric authentication system of the present embodiment, the authentication server holds a plurality of biometric authentication templates for each of a plurality of biometric parts in the authentication target person in the authentication table of the storage device, and the authentication In response to the acquisition request from the processing device, a plurality of biometric authentication templates registered for each of the plurality of biological parts in the authentication target person are read from the authentication table and returned to the authentication processing device. May be.

According to this, even if the biological part of each person to be authenticated cannot be authenticated due to injury or the like, biometric authentication can be performed for the alternative part, and the biological information in the biological part changes over time. Correspondingly, the personal authentication rate and the rejection rate of others can be made suitable. As a result, the biometric authentication process can be made more efficient and the authentication process time can be reduced as compared with the conventional case.

Further, in the biometric authentication system of the present embodiment, the authentication server responds to the acquisition request from the authentication processing device with the information of the biological part designated by the authentication target person indicated by the acquisition request and the authentication. Using the identification information of the target person as a key, the biometric authentication template registered for the biological part of the authentication target person may be read from the authentication table and returned to the authentication processing device.

According to this, not only the identification information of the person to be authenticated but also the biometric part is specified, and based on this, the biometric authentication template can be quickly identified and read on the authentication server, and eventually biometric authentication. It is possible to make the processing more efficient and reduce the authentication processing time than before.

Further, in the biometric authentication system of the present embodiment, the authentication server holds a history of executing biometric authentication processing on a predetermined biological part in the authentication target person in a storage device, and the authentication processing device from the authentication processing device. In response to the acquisition request, the history is searched using the identification information of the authentication target person indicated by the acquisition request as a key, the biological part that has been authenticated in the past for the authentication target person is specified, and the biological part is registered. It may be said that the completed biometric authentication template is read from the authentication table and returned to the authentication processing device.

According to this, it is possible to identify a biometric authentication template for a biological part that has been authenticated in the past, which is presumed to have a high probability of being authenticated this time, and to provide it to an authentication processing device. , The biometric authentication process can be made more efficient, and the authentication process time can be reduced as compared with the conventional case.

Further, in the biometric authentication method of the present embodiment, the authentication processing device acquires a biometric authentication template generated based on the policy in the template public biometric authentication platform as the biometric authentication template from the authentication server. , The biometric authentication process may be executed together with the authentication server based on the authentication procedure in the template open type biometric authentication platform.

Further, in the biometric authentication method of the present embodiment, when the authentication processing device acquires the biometric authentication template from the authentication server, a plurality of biometric authentications are registered for each of the plurality of biological parts in the authentication target person. You may get the template for.

Further, in the biometric authentication method of the present embodiment, among the plurality of biometric authentication templates for each of the plurality of biometric parts obtained from the authentication server when the authentication processing device performs the biometric authentication process, each biometric part The matching of one biometric authentication template sequentially selected between the two and the biometric information obtained by reading the biometric information may be repeatedly executed until a predetermined result is obtained.

Further, in the biometric authentication method of the present embodiment, when the authentication processing device acquires the biometric authentication template, the information of the biological part designated by the authentication target person and the identification information of the authentication target person are obtained. In the key, a request for acquisition of a biometric authentication template registered for the authentication target person is transmitted to the authentication server, and biometric information is read for the authentication target person by the biometric information reader to read the biometric information. In the meantime, a biometric authentication template for the biometric site designated by the authentication target person is acquired from the authentication server, and the biometric information obtained by reading the biometric information during the biometric authentication process and the biometric information from the authentication server. A predetermined biometric authentication process based on the obtained biometric authentication template for the biological part may be executed.

Further, in the bioauthentication method of the present embodiment, when the authentication processing device acquires the bioauthentication template, the authentication target person has been authenticated in the past by using the identification information of the authentication target person as a key. A request for acquiring a registered bioauthentication template for the biometric part is transmitted to the authentication server, and the biometric information reader is used to read the biometric information for the person to be authenticated. From the authentication server, a bioauthentication template for the biometric part of the authentication target person that has been the subject of authentication in the past is acquired, and the biometric information obtained by reading the biometric information during the bioauthentication process and the biometric information obtained from the authentication server. It is also possible to execute a predetermined bioauthentication process based on the bioauthentication template for the biological part that has been authenticated in the past.

Further, in the bioauthentication method of the present embodiment, authentication in which the identification information of the authentication target person and the bioauthentication template generated based on the policy in the template open type bioauthentication platform for the authentication target person are stored in association with each other. An authentication server provided with a storage device for storing the table executes a search in the authentication table using the identification information of the authentication target person indicated by the acquisition request as a key in response to the acquisition request from the authentication processing device. The process of returning the bioauthentication template identified by the search to the authentication processing device and the process of executing the bioauthentication process together with the authentication processing device based on the authentication procedure in the template open type bioauthentication platform. Good.

Further, in the bioauthentication method of the present embodiment, the authentication server holds a plurality of bioauthentication templates for each of a plurality of biosites in the authentication target person in the authentication table of the storage device, and the authentication In response to the acquisition request from the processing device, a plurality of registered bioauthentication templates for each of the plurality of biological parts in the authentication target person may be read from the authentication table and returned to the authentication processing device. ..

Further, in the biometric authentication method of the present embodiment, the authentication server responds to the acquisition request from the authentication processing device, and the information of the biological part designated by the authentication target person indicated by the acquisition request and the authentication. Using the identification information of the target person as a key, the biometric authentication template registered for the biological part of the authentication target person may be read from the authentication table and returned to the authentication processing device.

Further, in the biometric authentication method of the present embodiment, the authentication server holds in the storage device the history of executing the biometric authentication process for a predetermined biometric part in the authentication target person, and the authentication processing device is used. In response to the acquisition request, the history is searched using the identification information of the authentication target person indicated by the acquisition request as a key, the biological part that has been authenticated in the past for the authentication target person is specified, and the biological part is registered. The completed biometric authentication template may be read from the authentication table and returned to the authentication processing device.

5 Network 10 Authentication processing system 100 Authentication processing device 101 Storage device 102 Program 103 Memory 104 Arithmetic logic unit 105 Input device 106 Output device 107 Communication device 110 Biological information reader 200 Authentication server 201 Storage device 202 Program 203 Memory 204 Arithmetic device 205 Communication device 225 Authentication table

Claims (4)

Using the identification information of the authentication target person entered by the authentication target person as a key, a request for acquiring a bioauthentication template registered for the authentication target person is sent to a predetermined authentication server, and the authentication by the biometric information reader is performed. The process of reading the biometric information of the target person and acquiring the bioauthentication template of the authentication target person from the authentication server during the biometric information reading, the biometric information obtained by the biometric information reading, and the authentication server. an authentication processing unit for executing a predetermined biometric authentication process based on the biometric template obtained from,
Identification information of the person to be authenticated , a plurality of biometric authentication templates generated for each of a plurality of types of biometric parts based on the policy in the template public biometric authentication platform for the person to be authenticated, and the latest biometric authentication template. It is a flag indicating that it was used for biometric authentication processing, and is set in association with the type of biometric part to be used and the biometric authentication template that exists among multiple biometric templates for that type. A storage device that stores an authentication table in which the most recently used flag is associated and stored, and an identification information of the authentication target person indicated by the acquisition request in response to the acquisition request from the authentication processing device are used as keys . Among the biometric authentication templates of the authentication target person in the authentication table , the biometric authentication template for which the latest use flag is set is searched, and the biometric authentication template for which the authentication target person has been authenticated in the past by the search is performed . And the process of returning the biometric authentication template to the authentication processing device and the process of executing the biometric authentication process together with the authentication processing device based on the authentication procedure in the template open type biometric authentication platform. an authentication server having a device,
Authentication processing system including. The authentication processing device is
From the authentication server, as the biometric authentication template, a biometric authentication template generated based on the policy in the template public biometric authentication platform is acquired, and the biometric authentication process is performed in the template public biometric authentication platform. It is executed together with the authentication server based on
The authentication processing system according to claim 1. The authentication device
Using the identification information of the authentication target person entered by the authentication target person as a key, a request for acquiring a bioauthentication template registered for the authentication target person is sent to a predetermined authentication server, and the authentication by the biometric information reader is performed. The process of reading the biometric information of the target person and acquiring the bioauthentication template of the authentication target person from the authentication server during the biometric information reading, the biometric information obtained by the biometric information reading, and the authentication server. Perform the predetermined bioauthentication process based on the bioauthentication template obtained from
Authentication server
Identification information of the person to be authenticated , a plurality of biometric authentication templates generated for each of a plurality of types of biometric parts based on the policy in the template public biometric authentication platform for the person to be authenticated, and the latest biometric authentication template. It is a flag indicating that it was used for biometric authentication processing, and is set in association with the type of biometric part to be used and the one to be used among multiple biometric authentication templates existing for that type. The authentication table stored in association with the most recently used flag is stored in the storage device, and in response to the acquisition request from the authentication processing device, the identification information of the authentication target person indicated by the acquisition request is used as a key . Among the biometric authentication templates of the authentication target person in the authentication table, the one for which the latest use flag is set is searched, and the biometric authentication template that has been the authentication target in the past for the authentication target person by the search. Is specified, and the process of returning the biometric authentication template to the authentication processing device and the process of executing the biometric authentication process together with the authentication processing device based on the authentication procedure in the template open type biometric authentication platform are executed. To do,
An authentication processing method characterized by that. The authentication processing device
From the authentication server, as the biometric authentication template, a biometric authentication template generated based on the policy in the template public biometric authentication platform is acquired, and the biometric authentication process is performed in the template public biometric authentication platform. Execute with the authentication server based on
The authentication processing method according to claim 3, characterized in that.

Images