JPH03100753A - Self-destruction method for personal identification device - Google Patents

Abstract

PURPOSE:To keep a high security by forcibly destroying registered data, a collating circuit, a control circuit, etc., at the time of detecting that some external force acts upon a personal identification device. CONSTITUTION:When an external force is applied to the outer box of a personal identification device 10 to destroy the outer box, external light penetrates the device from the outside. When a photodetector 11 detects this light, an alarm device is operated to report the occurrence of abnormality, and a signal indicating it is given to a circuit destroying device 12. The circuit destroying device 12 resets a memory to erase registered fingerprint picture data and erases ROM data in the control circuit and the collating circuit and destroys an LSI, an IC, or the like by a high voltage. Thus, a higher security is kept.

Description

[Detailed description of the invention] [w! i Required] Concerning self-destruction methods for personal identification devices such as fingerprint identification devices, the purpose is to securely destroy registered data and maintain higher security when external force is applied to personal identification devices. When it is detected that an external force is applied to the identification device, an alarm is generated and the registration data, verification circuit, control circuit, etc. are destroyed using a destruction means.

[Industrial Application Field] The present invention relates to a self-destruction method for a personal identification device such as a fingerprint matching device.

In recent years, as computers have been introduced into a wide range of social systems, system security has become a focus of interest among those concerned. Many questions have been raised about the security of ID cards and passwords, which have been used up until now as a means of verifying one's identity when entering a computer room or using a terminal. Fingerprints, on the other hand, are considered the most powerful means of identity verification because they have two major characteristics: they are immovable and unchanging throughout life.

In such personal identification methods, it is desirable to destroy information related to individuals in order to ensure the reliability of identity verification and to ensure the confidentiality of information if external force is applied.

[Prior Art] In the case of the above-mentioned personal identification bag device using fingerprints, the fingerprint pattern for each individual registered in advance is compared with the input fingerprint pattern, and if they match, it is determined that the person is the person. ing. This type of personal identification device is used for managing the number of people at important facilities. It can also be applied anywhere there is a key.

FIG. 5 is a block diagram showing an example of a conventional configuration of a fingerprint verification system, which is a type of personal identification device. Such systems typically treat fingerprints as images. The fingerprint image signal (analog signal) read from the fingerprint human power sensor 1 is converted into image data (digital data) by the subsequent input device 2 and sent to the verification device 3.

The verification device 3 is connected to a storage device 4 that stores fingerprint image data (fingerprint minutiae data) for each individual in advance. Then, the verification device 3 extracts fingerprint minutiae data from the input fingerprint image data, and collates it with the registered fingerprint minutiae data stored in the storage device 4. As a result of the verification, if both feature points match, it means that the identity of the person has been confirmed.

[Problems to be Solved by the Invention] If the storage device 4 that stores fingerprint minutiae data from such a fingerprint verification system is stolen, a replica of the fingerprint with the same characteristics as the registrant will be made. There is a risk of misuse. One way to counter this is to encrypt the image data, but if the verification system itself is stolen and the control and verification circuits are analyzed, there is a risk that the encrypted fingerprint minutiae data will also be analyzed. . Furthermore, by analyzing the control circuit and making some changes to the control circuit, it becomes possible to enter important facilities without fingerprint verification.

The present invention has been made in view of these problems, and provides a personal identification device that can reliably destroy registered data and maintain higher security when external force is applied to the personal identification device. The purpose is to provide a method of self-destruction.

[Means for Solving the Problems] FIG. 1 is a flowchart showing the principle of the method of the present invention. When the present invention detects that an external force is applied to the personal identification device (Step 1), it generates an alarm, Step 2), and destroys the registered data, verification circuit, control circuit, etc. using a destructive means (Step 3). ).

[Operation] When it is detected that some kind of external force has been applied to the personal identification device, the registered data, verification circuit, control circuit, etc. are forcibly destroyed. This makes it possible to reliably destroy personal information and maintain high security.

[Example] Hereinafter, an example of the present invention will be described in detail with reference to the drawings.

FIG. 2 is a diagram showing an example of a system configuration for implementing the method of the present invention. Reference numeral 10 denotes a personal identification device, which includes a photodetector 11 therein. This photodetector 11 is connected to a circuit breaking device 12, from which an on/off signal input plug 13 comes out.

In the device configured in this way, the personal identification device 10
When an external force is applied to the outer box of the device and it is destroyed, external light enters the inside of the device from the outside. When the photodetector 11 detects this light, it activates an alarm (not shown) to notify of the occurrence of an abnormality. At the same time, a signal to that effect is given to the circuit breaking device 12. When the circuit destruction device 12 detects the intrusion of external light, it erases the registered fingerprint image data (minutiae data) by resetting the memory, erases the ROM data of the control circuit and verification circuit, or destroys the LSI, IC by high voltage. etc. Destruction. The on/off signal input plug 13 constitutes a signal input section for switching between activation and deactivation of the circuit breaking device 12. For example, when an on signal is input from the on/off signal input plug 13, is the circuit breaking device 12
is in standby mode. In addition, when the off signal is input from the on/off signal input plug 13, the circuit destruction device 1
2 is in a non-operational state.

FIG. 3 is a diagram showing another system configuration example for implementing the method of the present invention, in which a magnetic detector is used as a sensor. In the figure, 20 is a personal identification device attached to a wall 21. 20a is a circuit (hereinafter referred to as an internal circuit) such as a verification device and a storage device provided in the personal identification device 20.

Reference numeral 22 denotes a magnetic detector provided within the personal identification device 20 and connected to the circuit breaking device 23 . 24 is an on/off signal input plug, whose function is the same as that shown in FIG. A magnet 25 is provided at a position corresponding to the magnetic detector 22, and is attached to the inside or surface of the wall 21. 26
is an alarm connected to the magnetic detector 22.

In a system configured in this way, if the personal identification device 20 is forcibly removed from the wall 21 without following the prescribed steps, the magnetic detector 22 will move away from the magnet 25, and its output will be weak. Become. Thereby, the magnetic detector 22 can detect that the personal identification device 20 has been peeled off from the wall surface. As a result, the magnetic detector 22 detects the occurrence of an abnormality, and sounds the alarm 26 to report the abnormality. At the same time, the abnormality is notified to the circuit breaking device 23. When the circuit destruction device 23 receives the abnormality notification, it destroys the internal circuit 20a. This makes it possible to prevent an unexpected accident in which personal information is stolen.

FIG. 4 is a diagram showing another system configuration example for implementing the method of the present invention, in which a vibration detector is used as a sensor. In the figure, reference numeral 30 denotes a personal identification device, which has an internal circuit 30a similar to that shown in FIG. 3 built therein. Reference numeral 31 is a vibration detector that detects vibrations and also analyzes the vibrations, and 32 is a circuit destruction device that receives the output of the vibration detector 31 and performs a circuit destruction operation. 33 is an alarm connected to the vibration detector 31. 34 is an on/off signal input plug having a function similar to that shown in FIG.

In the system configured in this way, the vibration detector 3
1 detects vibrations generated during destruction or removal of the outer box, it sounds an alarm 33 to report the occurrence of an abnormality, and also notifies the circuit destruction device 32 to that effect. Thereby, the circuit destruction device 32 destroys the internal circuit 30a. Specifically, image data is erased by resetting the memory, ROM data of the control circuit and verification circuit is erased, or LSIs, ICs, etc. are destroyed by high voltage. In this case, vibrations caused by an abnormality and vibrations caused by an earthquake can be distinguished by detecting P waves and S waves possessed by vibrations caused by an earthquake.

In all of the embodiments described above, the series of operations must be performed using a backup power source (for example, a battery), and must be configured to operate even when the power to the personal identification device is cut off. Furthermore, in order to produce the above-mentioned system in a factory or perform maintenance after installation, a function to freely operate and stop the destruction device is required. To start the operation of the destructive device, and to stop the operation of the destructive device, there are two methods: manually inputting a stop signal from a signal input plug provided on the outer box of the personal identification device, A method of manually issuing an operation stop signal using a tool through a provided hole is used. Note that if a current or voltage exceeding a permissible value is applied to the on/off signal input plug, the destructive device immediately starts operating.

[Effects of the Invention] As described in detail above, according to the present invention, when an external force (destruction, robbery, opening, etc.) is applied to a personal identification device, this is detected and the registered data in the device is By destroying all or part of the application circuit, verification circuit, etc., it is possible to prevent duplication and fabrication of registered data, and furthermore, it is possible to make analysis of the control system and verification system impossible, which has no practical effect. big.

[Brief explanation of drawings]

FIG. 1 is a flowchart showing the principle of the method of the present invention, FIG. 2 is a diagram showing an example of a system configuration for implementing the method of the present invention, and FIG. FIG. 4 is a diagram showing another system configuration example for implementing the method of the present invention, and FIG. 5 is a block diagram showing a conventional configuration example of a fingerprint matching system.

Claims (1)

[Claims] When it is detected that an external force is applied to the personal identification device (step 1), an alarm is generated (step 2), and the registered data, verification circuit, control circuit, etc. are destroyed using destructive means. (Step 3) A method for self-destruction of a personal identification device, characterized in that: