JPH0728755A - Identifier - Google Patents

Abstract

PURPOSE:To provide the personal identifier which is constituted more inexpensively than convertional in the case that plural positions where identification is required exist in one building. CONSTITUTION:Plural input parts 10 are installed at plural gates, where identification is required, in one building, and each input part 10 consists of a picture input device 15 for input of the finger picture of a person to be identified, an A/D converter 16 which digitizes the inputted picture signal, a feature extracting part 17 which extracts feature information of fingers from A/D converted picture information, a reader/writer 20 which writes and reads feature information of fingers of the person to be identified in or from an IC card 19 carried by him, etc. Input parts 10 are connected to a single identification part 40 through respective communication lines 30. The single identification part 40 is installed in a prescribed position in the building and consiss of a communication control part 41, which transmits and receives information to and from each input part, and a control part 43 which performs collation and discrimination processings and the control of each input part 10.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to, for example, an entrance / exit management device for managing entrance / exit to an important facility, etc. Regarding the authentication device.

[0002]

2. Description of the Related Art In recent years, along with the development of an information-oriented society, there is a need for technology for identifying a person for the purpose of managing entry and exit from a specific area (important facility). In the past, personal identification was often done using a personal identification number or personal identification card (ID card), but these may be forgotten or lost, and there is also the risk of misuse by a third party. Yes, the limit of safety is becoming an issue.

Therefore, recently, a personal authentication method using the physical characteristic information of a person has been attracting attention, for example, a fingerprint,
Various personal authentication methods using physical characteristic information such as handprints, fingers, and retina patterns of eyes have been proposed.

Here, a general personal authentication device for performing personal authentication using the characteristic information of the finger will be described. A personal authentication device that uses the characteristic information included in a finger is obtained by taking in image information of the finger by a finger image input unit including a prism, a light source, and a television camera, and adding the image information in a direction orthogonal to the finger. The collation is performed using the feature information of.

When the abdominal surface of the finger is struck against the prism, the contact with the prism surface and the contact with the prism surface are not possible due to the unevenness of the finger skin formed by the fingerprint of the finger or the wrinkle pattern of the indirect part. . In this state, when the finger surface of the finger is illuminated by the light source through the prism, the light is totally reflected inside the prism in a portion where the skin is not in contact, and ideally all the input light enters the television camera.

However, the condition where total reflection is not satisfied at the portion where the finger skin is in contact, and light diffusion occurs,
The light incident on the television camera becomes part of the input light. As a result, the image information of the finger having a contrast corresponding to the unevenness of the skin is captured by the television camera.

Next, the characteristic information of the finger obtained by adding the image information in the direction orthogonal to the finger from the input image information of the finger is extracted, and this is registered (stored) in advance as personal characteristic information. Keep it. At the time of collation (at the time of individual authentication), the characteristic information of the finger obtained in the same manner is collated with the characteristic information of the registered finger to determine the person or other person.

[0008]

For example, in the case where a personal identification device is installed at each of a plurality of gates in one building, each gate needs only an input section for inputting characteristic information of a finger. Whether the person is
It is sufficient to have only one authentication unit in the building to make the judgment.

However, in the conventional personal authentication device having the above-mentioned configuration, the part for inputting the characteristic information of the finger and the part for determining by comparing the registered person are configured in the same device. Therefore, it is necessary to install the entire device including the input unit and the authentication unit in each gate,
There was a drawback that the cost required for introducing the equipment was high.

Therefore, it is an object of the present invention to provide a personal authentication device that can be constructed at a lower cost than conventional ones, for example, when there are a plurality of locations in a building that require personal authentication.

[0011]

A personal authentication device of the present invention is an identification information input means for inputting identification information for identifying a person to be authenticated and a physical characteristic input means for inputting physical characteristic information of the person to be authenticated. And an input unit, which is connected to the input unit so that information can be transmitted, and stores in advance personal physical characteristic information, and the physical characteristic input unit that is transmitted from the input unit. The received physical characteristic information and the identification information input from the identification information input means, and the physical characteristic information in the storage means corresponding to the identification information and the body input by the physical characteristic input means. The verification unit is composed of a collating unit that collates the physical characteristic information with each other to determine whether or not a predetermined relationship is established, and an authenticating unit that includes a discriminating unit that discriminates the person or others based on the collation result of the collating unit. Is characterized in that the plurality of input portions is connected to the authentication unit.

The personal authentication device of the present invention is a portable storage medium reading device for reading the physical characteristic information from a portable storage medium carried by the person to be authenticated and storing the physical characteristic information of the person to be authenticated. Means and a physical characteristic input means for inputting the physical characteristic information of the person to be authenticated, and the physical characteristic input which is connected to the input portion so that information can be transmitted and is transmitted from the input portion. The physical characteristic information input by the means and the physical characteristic information read by the portable storage medium reading means are received, and whether or not a predetermined relation is established between them is determined. The authentication unit includes a matching unit for matching and a judging unit for judging the person or other person based on the matching result of the matching unit, and a plurality of input units are connected to the authenticating unit. Features .

Further, the personal authentication device of the present invention comprises a portable storage medium reading means for reading the identification information from a portable storage medium which is held by the person to be authenticated and which stores identification information for identifying the person to be authenticated. An input unit comprising a physical characteristic input unit for inputting the physical characteristic information of the person to be authenticated, and a storage unit which is connected to the input unit so as to be able to transmit information and stores personal physical characteristic information in advance. Receiving the physical characteristic information input by the physical characteristic inputting unit transmitted from the input unit and the identification information read by the portable storage medium reading unit, and storing the storage unit corresponding to the identification information. Collating means for collating the physical characteristic information in the means with the physical characteristic information input by the physical characteristic inputting means to determine whether or not a predetermined relationship is established between them; and the collation result of the collating means. Based consists an authentication unit comprising a determining means for determining the person or another person, and a plurality of input portions is connected to the authentication unit.

[0014]

The input unit for inputting the physical characteristic information of the person to be authenticated and the authentication unit for determining by comparing whether the person to be authenticated are registered are separate devices, and a plurality of units requiring individual authentication are provided. By installing an input unit at each location and connecting all of those input units to a single authentication unit, it is cheaper than installing the entire device including the input unit and authentication unit at each gate as in the past. it can.

[0015]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 shows the configuration of the personal identification device according to the present embodiment. In the figure, a plurality of input units 10
Are installed at a plurality of gates each requiring individual authentication in one building, for example. Each input section 1
0 is a prism 11 as a finger rest, a light source 13 that illuminates the ventral surface of a finger 12 placed on the prism 11, and
The light reflected by the finger contact surface on the prism 11 is converted into an electric signal (NT
For example, a CCD type television camera (hereinafter abbreviated as TV camera) 14 for converting into an SC image signal)
Image input device 15 and TV camera 14
A to convert the image signal obtained from A into digital image information
A feature extraction unit 17 that obtains a one-dimensional addition signal by adding the image information output from the A / D converter 16 and the A / D converter 16 in the orthogonal direction of the finger, and uses this as the feature information of the finger 12. The characteristic information of the finger of the person to be authenticated is written in the indicator 18 for displaying operation guidance or the like for the person to be authenticated, or the IC card 19 as a portable storage medium carried by the person to be authenticated, or the reverse. A reading / writing device 20 for reading the characteristic information of the finger stored in the IC card 19, and a communication control unit 21 for exchanging information with an authentication unit 40 described later.
It consists of The feature extraction unit 17, the display unit 18, and the reading / writing device 20 are connected to the communication control unit 21.

Each of the input units 10 thus configured has a communication line (for example, RS-232C cable).
It is connected to a single authentication unit 40 via 30. The single authentication unit 40 is installed at a predetermined site in the building, and is a communication control unit 41 for exchanging information with each input unit 10, and finger feature information received by the communication control unit 41. It is composed of a storage unit 42 for storing the above items, and a control unit 43 for controlling the collation / determination process and each input unit 10.

The host machine 50 controls, for example, opening / closing of a door of an important facility or ringing of an alarm buzzer in response to a control signal from the control unit 43 of the authentication unit 40. The control target of the host machine 50 differs depending on the security system to which the personal authentication device is applied.

The IC card 19 described above is constructed, for example, as shown in FIG. That is, a control element (for example, a CPU) 61 as a control unit, a non-volatile data memory 62 whose stored contents can be erased, a working memory 63, a program memory 64, and an electrical contact with the read / write device 20 are provided. It is composed of a contact portion 65 for obtaining. Of these, the part within the broken line (control element 61, data memory 62, working memory 63, program memory 64) is composed of one (or more) IC chip and is embedded in the IC card body.

The data memory 62 is used to store various data, and is composed of, for example, an EEPROM or the like. The working memory 63 is a memory for temporarily holding processing data when the control element 61 performs processing, and is composed of, for example, a RAM. The program memory 64 is composed of, for example, a mask ROM, and stores the program of the control element 61 and the like.

The data memory 62 is divided into, for example, a control area 620, a directory 621, an empty area 622, and an area group 623, as shown in FIG. Then, each area has a directory 621.
It is managed by.

As shown in FIG. 7, the directory 621 is constituted as an aggregate of area definition information including an area number 71 of each area, a head address 72 of the area, a size 73, and a check code 74. For example, the top address 32 of area [01] is aaa address,
The area size corresponds to Sa bytes.

There are the following two types of access commands for these areas. One is a command for reading the data in the area, and is composed of, for example, as shown in FIG. 8, a function code indicating the read command and the number of the area to be accessed.

The other is a command for writing data in the area. For example, as shown in FIG. 9, it is composed of a function code indicating a write command, an area number to be accessed, and write data. To be done.

Here, the operation concept of the IC card 19 will be described with reference to the flowchart shown in FIG. As shown in the figure, the IC card 19 shifts to a command waiting state after electrical activation. At this point, the command is kept waiting and when input, the area number in the command is extracted and it is checked whether or not the corresponding area number exists in the directory 621. If it does not exist, an error code indicating that there is no corresponding area is output, and the command wait state is returned.
If it exists, thereafter, processing is performed in each command routine corresponding to the function code in the input command, the processing result is output, and then the processing returns to the instruction data waiting state.

Next, the processing operation in the above configuration will be described. Before describing the processing operation, the added signal will be described. FIG. 2 shows image information Fx of the finger,
The addition signal A (x) corresponding to this is schematically shown. The addition signal A (x) is a one-dimensional signal obtained by adding the pixel density of the image in the direction y perpendicular to the longitudinal direction x of the finger. Further, the addition signal A (x) has a steep valley at a horizontal wrinkle position corresponding to the finger joint, and this information includes individuality. The size of the image in this embodiment is
There are N (= 512) pixels in both the x direction and the y direction.

The processing operation can be roughly divided into two processes, that is, "registration" and "verification". First, the registration processing operation will be described with reference to the flowchart shown in FIG. In step S <b> 1, the finger 12 placed on the prism 11 by the person to be authenticated based on the operation guide of the display device 18.
Image information of the TV camera 14 and the A / D converter 16
And the feature extraction unit 17 adds the density D (x, y) of the image information in the direction y perpendicular to the longitudinal direction of the finger 2 using the following formula 1 to obtain the addition signal A (X) is extracted (S2). Note that N in Equation 1 is x
It is the number of pixels in the direction and the y direction.

[0027]

[Equation 1]

When the addition signal A (x) is obtained in this way, it is used as the characteristic information (dictionary information) of the finger 12 via the communication control unit 21 and the reading / writing device 20 to read / write the device 2.
The data is stored (registered) in the data memory 62 of the IC card 19 inserted and set to 0 (S3), and the registration process ends.

The above registration process is performed by the control unit 4 of the authentication unit 40.
It is performed based on the control signal transmitted from S. next,
The collation processing operation will be described with reference to the flowchart shown in FIG. First, in step S4, the control unit 43 of the authentication unit 40 initializes the matching number i and the same determination number j to “0”. Next, the processing from the finger image input in step S5 to the addition signal extraction in step S6 is the same processing as those (S1, S2) in the above-described registration processing. The characteristic information of the finger 12 extracted by this processing is transmitted to the control unit 43 of the authentication unit 40 via the communication control unit 21, the communication line 30, and the communication control unit 41.

Now, in step S7, the controller 43
First, the feature information is aligned using the following equations 2 and 3. That is, by transmitting the card information read command to the communication control unit 21 of the input unit 10, the IC card 19 inserted and set in the reading / writing device 20 by the authenticated person.
The finger feature information (addition signal) stored in advance in the data memory 62 is read via the reading / writing device 20. The read characteristic information is used for the communication line 3
0, and is transmitted to the control unit 43 of the authentication unit 40 via the communication control unit 41.

In the control unit 43, the characteristic information read from the IC card 19 is the dictionary characteristic information Ad (i), and the characteristic information obtained from the image information of the input finger 12 is the input characteristic information A.
If (i), then A (i +
The squared error from m) is added over a certain range to obtain S (m).

[0032]

[Equation 2]

[0033]

[Equation 3]

The value S (m) thus obtained is A (i +
m) and Ad (i) are parameters indicating the degree of coincidence, and the smaller the value of S (m), the closer the agreement. Alignment changes m within a certain range, and
It is assumed that m when the value of (m) becomes small is the position shift amount M, and that the position of M can be adjusted. Next, the control unit 43 performs collation calculation using the following equations 4 and 5.

[0035]

[Equation 4]

[0036]

[Equation 5]

The matching values E of the above equations 4 and 5 are the input characteristic information A (i + M) and the dictionary characteristic information Ad that are aligned.
The sum of square errors of (i) over a certain range is normalized by the sum of squares of dictionary feature information Ad (i) in the same range. The matching value E represents the degree of difference between the aligned input feature information A (i + M) and the dictionary feature information Ad (i). The larger the value, the larger the difference between the feature information and the smaller the value. The more similar the feature information is.

Next, in step S8, the controller 43
Is the threshold value TH which is set in advance by the collation value E.
If [E> TH], it is determined that the two pieces of feature information do not match, and the process proceeds to step S12. If [E ≦ TH] as a result of the above comparison, it is determined that the two pieces of feature information match each other, and the process proceeds to step S9.

In step S9, the control unit 43 increments the matching count i and the same determination count j by "+1",
Go to step S10. In step S10, the control unit 43 compares the number of identical determinations j with a preset threshold value l, and if [j ≧ l], the process proceeds to step S11, determines that the person to be authenticated is the person himself, and performs the matching process. finish. If the result of the comparison is [j <l], the process returns to step S5,
Repeat the process.

In step S12, the control unit 43
The number of matchings i is set to "+1" and the number of identical determinations j is set to "0", and the process proceeds to step S13. In step S13, the control unit 43 compares the number of collations i with a preset threshold value k, and if [i ≧ k], then the control section 43 proceeds to step S13.
Proceeding to 14, the person to be authenticated is determined to be another person, and the collation process ends. If the result of the comparison is [i <k], step S5.
Then, the process is repeated.

After the above collation processing is completed, the authentication unit 40
The control unit 43 controls the display 18 of the input unit 10 based on the determination result of the person / others and sends the determination result to the host machine 50. The host machine 50 performs processing according to the determination result, for example, opening the door when it is determined that the person is the person and sounding an alarm buzzer when the person is the other person. These processes differ depending on the security system to which the personal authentication device is applied.

In the above embodiment, the case where the dictionary information (finger characteristic information) is stored in the IC card 19 has been described, but the present invention is not limited to this. For example, the dictionary information (finger characteristic information) is stored. Information) may be stored in the storage unit 42 in the authentication unit 40. That is, the characteristic information of the finger of the person to be authenticated is stored in advance in the specific area of the storage unit 42 together with the identification information (ID code) for specifying the person to be authenticated, and the IC card 19 is used to identify the person to be authenticated. Remember the information. And at the time of authentication, I
The identification information is read from the C card 19, the characteristic information corresponding to this identification information is read from the storage unit 42, and is collated with the inputted characteristic information of the person to be authenticated.

In the above embodiment, the RS-232C cable is used as the communication line connecting the input section and the authentication section, but the present invention is not limited to this, and Ethernet or optical cable may be used. Further, not only wired communication but also wireless communication using electromagnetic waves may be used.

Further, in the above-mentioned embodiment, the IC card is exemplified as the device for managing the data, but the housing structure is not limited to the card shape, and various modifications such as a rod shape and a block shape can be made. Further, in particular, the IC card illustrated in the above embodiment uses the contact portion for exchanging data with an external device, but, for example, without contact with the external device by using light, electric field, magnetic field or the like. , Any method of doing this may be used.

Further, in the above embodiment, the case where the addition signal calculated from the finger image is used as the physical characteristic information used for the collation is described as an example, but the present invention is not limited to this, and other physical characteristic information, for example, It is also possible to use the feature points of fingerprint ridges or the feature points of the retina pattern of the eyes.

[0046]

As described above in detail, according to the present invention, the input unit for inputting the physical characteristic information of the person to be authenticated and the authentication unit for determining whether or not the person to be authenticated is registered. As a separate device, by installing an input unit at each of multiple locations that require personal authentication, and connecting all of these input units to a single authentication unit, the input unit and It is possible to provide a personal authentication device that can be configured at a lower cost than installing the entire device including the authentication unit.

[Brief description of drawings]

FIG. 1 is a block diagram showing the configuration of a personal authentication device according to an embodiment of the present invention.

FIG. 2 is a diagram schematically showing a relationship between image information of a finger and an addition signal.

FIG. 3 is a flowchart illustrating a registration processing operation.

FIG. 4 is a flowchart illustrating a collation processing operation.

FIG. 5 is a block diagram showing a configuration example of an IC card.

FIG. 6 is a memory map diagram showing a configuration example of a data memory.

FIG. 7 is a diagram showing a configuration example of a directory set in a data memory.

FIG. 8 is a diagram showing a format example of a data read command.

FIG. 9 is a diagram showing a format example of a data write command.

FIG. 10 is a flowchart illustrating an initial operation of the IC card.

[Explanation of symbols]

10 ... Input part, 11 ... Prism, 12 ... Finger, 13 ... Light source, 14 ... TV camera, 15 ... Image input device, 16 ... A
/ D converter, 17 ... Feature extraction unit, 18 ... Display, 19 ...
IC card, 20 ... Read / write device, 21 ... Communication control unit,
30 ... communication line, 40 ... authentication unit, 41 ... communication control unit, 4
2 ... storage unit, 43 ... control unit, 50 ... host machine.

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁶ Identification code Internal reference number FI Technical display location G06T 1/00 G06K 17/00 V G07C 9/00 Z 9436-3E H04L 9/32 H04L 9/00 A

Claims (3)

[Claims] 1. An input section comprising identification information input means for inputting identification information for identifying a person to be authenticated and physical characteristic input means for inputting physical characteristic information of the person to be authenticated, and the input section and information. Storage means that is communicatively connected and stores in advance personal physical characteristic information, physical characteristic information input by the physical characteristic input means transmitted from the input unit, and the identification information The identification information input from the input means is received, and the physical characteristic information in the storage means corresponding to the identification information and the physical characteristic information input by the physical characteristic input means have a predetermined relationship therebetween. The authentication unit is composed of a collating unit for collating whether or not is satisfied, and a judging unit for discriminating the person or other person based on the collation result of the collating unit. Personal authentication apparatus characterized by being connected. 2. A portable storage medium reading means for reading the physical characteristic information from a portable storage medium carried by the person to be authenticated and storing the physical characteristic information of the person to be authenticated, and the body of the person to be authenticated. Physical characteristic input means for inputting physical characteristic information, and a physical characteristic input by the physical characteristic input means connected to the input portion for information transmission and transmitted from the input portion. Collation means for receiving the information and the physical characteristic information read by the portable storage medium reading means, and collating the both physical characteristic information with each other to determine whether a predetermined relationship is established between them; A personal authentication device comprising: an authentication unit, which includes a determination unit that determines the person or other person based on the collation result of the unit, and a plurality of input units are connected to the authentication unit. 3. A portable storage medium reading means for reading the identification information from a portable storage medium which is held by the person to be authenticated and which stores identification information for identifying the person to be authenticated, and a physical characteristic of the person to be authenticated. An input unit including a physical characteristic input unit for inputting information, a storage unit that is connected to the input unit so as to be able to transmit information, and stores in advance personal physical characteristic information, and is transmitted from the input unit. The physical characteristic information input by the physical characteristic input means and the identification information read by the portable storage medium reading means, and the physical characteristic information in the storage means corresponding to the identification information, Collating means for collating the physical characteristic information input by the physical characteristic inputting means to determine whether or not a predetermined relationship is established between them, and a judgment of the person or other person based on the collation result of this collating means. Nau consists authentication section and comprising a determining means, personal authentication apparatus, wherein a plurality of input portions is connected to the authentication unit.