JPH09311938A - Fingerprint collation device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a fingerprint collation device which can prevent falsification of data registered in its memory even when a management computer is operated by an illegal user. SOLUTION: This fingerprint collation device A is provided with a fingerprint image collection part 1 which optically collects the fingerprints and outputs the image signals, an A/D conversion part 2 which converts the image signals into the fingerprint image data, a feature parameter extraction part 3 which extracts a feature parameter from the fingerprint image data, a collation part 6 which collates the extracted feature parameter with a registered feature parameter that is stored in a memory 51 via a register part 5, a communication part 8 which performs communication with a management computer 7, and a control part 9 which controls each operation of those parts. In such a constitution, the write instruction is validated for the backup data given from the computer 7 only when a person to be identified is recognized as a manager via a manager collating operation and also the write of the backup data is permitted by the manager.

Description

Detailed Description of the Invention

[0001]

The present invention relates to a fingerprint collating apparatus for collating a fingerprint.

[0002]

2. Description of the Related Art Generally, a fingerprint collating device includes a fingerprint image collecting means for optically collecting a fingerprint by pressing a fingerprint of a finger against a prism or the like, and an A / D converting means for converting an image signal into fingerprint image data. A characteristic parameter extracting means for extracting characteristic parameters from the converted fingerprint image data, a memory for storing the characteristic parameters, a registration means for storing the characteristic parameters in the memory means, and the extracted characteristic parameters of the identification target person And collating means for performing a registrant collating operation for collating the characteristic parameter of the registrant stored in the storage means.

The fingerprint collating apparatus is provided with communication means, and the communication means is connected to an access history management for managing access history, a backup of registration data, and a management computer for writing backup data. ing.

[0004]

However, there is a possibility that an unauthorized user may tamper the registered data in the memory of the fingerprint collation device by the following method. Instruct the management computer to back up the registration data, back up the registration data to the hard disk or diskette, tamper with this backup data, instruct the management computer to write the backup data, and use the tampered disk to Rewrite the registered data in the memory of the fingerprint matching device. If the registration data in the memory of the fingerprint collation device is tampered with, the fingerprint of an outsider may be illegally registered or the registration data of the registrant may be erased.

An object of the present invention is to provide a fingerprint collation device in which registered data in the memory of the fingerprint collation device is not tampered with even if an unauthorized user illegally operates the management computer.

[0006]

In order to solve the above-mentioned problems,
The present invention employs the following configuration. (1) Features of fingerprint image collection means for optically collecting a fingerprint of a finger and outputting an image signal, A / D conversion means for converting the image signal into fingerprint image data, and the converted fingerprint image data Feature parameter extracting means for extracting parameters, input means for instructing fingerprint registration, fingerprint collation, etc., storage means for storing registration data such as the feature parameters and administrator identification parameters, and the feature Registration means for storing the registration data such as parameters and parameters for administrator identification in the storage means, the characteristic parameters of the extracted identification target person, and the characteristic parameters of the registrant stored in the storage means In addition to the registrant collating operation for collating the registrant and the registrant collating, it is collated whether or not the identification target person is the administrator based on the administrator identification parameter. And a communication means for performing communication with a management computer for managing access history, backing up registered data, and writing backup data, and instructing each of the above-mentioned operations. The backup data from the management computer can be obtained only when the identification target person is identified as the administrator by the administrator collating operation, and the administrator permits the writing operation of the backup data by the input means. The writing instruction of is valid.

(2) With the configuration of the above (1), the write operation of the backup data is prohibited when a predetermined time has elapsed after the storage of the backup data from the management computer is completed.

[0008]

[Action]

[Regarding Claim 1] (Fingerprint registration of the registration target person) The administrator gives an instruction of the fingerprint registration of the registration target person by the input means. The fingerprint image capturing means optically captures a fingerprint of a finger and outputs an image signal.
The A / D conversion means converts the image signal into fingerprint image data. The characteristic parameter extracting means extracts characteristic parameters from the converted fingerprint image data. The registration means performs a registration operation of storing the characteristic parameters extracted by the characteristic parameter extraction means in the storage means.

(Fingerprint collation of the identification target person)
An instruction for fingerprint collation is given by the input means. The fingerprint image capturing means optically captures a fingerprint of a finger and outputs an image signal. The A / D conversion means converts the image signal into fingerprint image data. The characteristic parameter extracting means extracts characteristic parameters from the converted fingerprint image data. The matching means is
A characteristic parameter extracted by the characteristic parameter extraction means,
It collates with the characteristic parameter of the registrant stored in the storage means.

(Manager Fingerprint Matching) The collating means performs a registrant collating operation for collating the extracted characteristic parameter of the identification target person with the characteristic parameter of the registrant stored in the storage means. When it is confirmed that the identification target person is a registrant, the collation means collates whether or not the identification target person is the administrator based on the administrator identification parameter stored in the storage means. Perform a matching operation.

(Management of Access History by Management Computer) For security reasons, the management computer communicates with the communication means to grasp the operating state of each means, and when the fingerprint verification instruction (access) is issued from the input means. , Record the results of whether or not the registration was performed (printed on the printer, stored in the hard disk).

(Backup of Registration Data by Management Computer) When the registration data of the registrant stored in the storage means is backed up, if the operation of backing up the registration data is performed by the management computer, the management computer will communicate. The registration data of the registrant stored in the storage means is transmitted by communicating with the means, and the management computer writes (backs up) the registration data of the registrant to a file or a floppy disk in the hard disk.

(Writing of Backup Data by Management Computer) First, the above-described fingerprint collating operation of the administrator is performed to make the fingerprint collating apparatus discriminate whether or not the person to be identified is the administrator. The authorized administrator issues an instruction from the input means to allow the backup computer to write the backup data.

When a backup data write command is issued from the management computer, the management computer communicates with the communication means to transfer the registration data of the registrant backed up on the hard disk or floppy of the management computer to the fingerprint collation device. The data is transmitted and the registration data of the registrant is restored or overwritten in the storage means.

(1) If the administrator authorized as the administrator does not give an instruction from the input means to permit the backup computer to write the backup data, (2) or the person to be identified manages If the administrator does not recognize that the registered data is written, the instruction to write the backup data from the management computer is invalidated, and the registered data of the registrant backed up on the floppy disk is restored to the storage means. Not overwritten.

[Claim 2] When a certain period of time elapses after the backup data from the management computer is stored in the storage means, the fingerprint collation device prohibits the backup computer from writing the backup data. .

[0017]

【The invention's effect】

[Claim 1] Even if an unauthorized user illegally operates the management computer, the registered data in the memory of the fingerprint collation device is not tampered with. Therefore, the fingerprint of an outsider is not illegally registered, and the registration data of the registrant is not erased, so that the security is excellent.

[Claim 2] When the fingerprint collation device forgets to instruct the management computer that the backup data has been stored in the storage means, or the storage end instruction has not been transmitted due to communication failure. After a certain time has passed, the backup data write operation is prohibited.

Therefore, even if someone tries to operate the management computer illegally with a gap, the fingerprint collation device is
Since the write-protection operation has already been performed, the registered data in the storage means is not tampered with. Therefore, the fingerprint of an outsider is not illegally registered, and the registration data of the registrant is not erased, so that the security is excellent.

[0020]

DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention (claims 1 and 2)
Will be described with reference to FIGS. As shown in FIG. 1, the fingerprint collation device A includes a fingerprint image collection unit 1, an A / D conversion unit 2 that converts a video signal into fingerprint image data,
A characteristic parameter extraction unit 3 for extracting characteristic parameters from fingerprint image data, an input unit 4 provided with a key for inputting a registration number and the like, and registration data such as characteristic parameters and manager collation parameters are stored in the memory 51. Registration section 5
And a collation unit 6 that performs a registrant collation operation and an administrator collation operation.
A communication unit 8 for communicating with the management computer 7, and a control unit 9 for controlling the operation of each unit.

The fingerprint image collecting unit 1 is installed near the entrance door and has a right-angle prism in which the fingerprint surface of a finger is pressed against the prism upper surface, a light source for projecting illumination light on the prism standing surface, and a prism slope. It is arranged in parallel, and is composed of a CCD element or the like that captures the reflected light corresponding to the crests of the fingerprint ridges as a bright image and the reflected light corresponding to the valleys of the fingerprint ridges as a dark image (all not shown). Then, every predetermined time (several hundreds of ms), a video signal for one screen (a grayscale image of fingerprint ridges) is transmitted to the A / D conversion unit 2 via the coaxial cable.

The A / D conversion unit 2 A / D converts the video signal transmitted from the fingerprint image collection unit 1 to obtain fingerprint image data (two-dimensional digital grayscale data), and stores it in a built-in memory.

The characteristic parameter extraction unit 3 extracts characteristic parameters from the fingerprint image data. The extraction of the characteristic parameter is performed by a known group delay spectrum conversion (Japanese Patent Laid-Open No. 6-60167, etc.), and the obtained group delay spectrum (hereinafter referred to as GDS) is used as the characteristic parameter.
The characteristic parameter may be extracted by frequency analysis other than the GDS conversion or minutiae method.

The input unit 4 is installed near the entrance door, and is provided with various keys for issuing a registrant verification instruction, an administrator verification instruction, a backup data writing instruction, and a registration data backup instruction. . The notification unit 41 includes a liquid crystal panel, a buzzer, and the like.

The registration unit 5 operates in the management mode,
Registration data such as the extracted characteristic parameters and administrator identification parameters are stored in the memory 51.

The collation unit 6 determines whether or not the extracted characteristic parameter of the identification target person matches the characteristic parameter (stored in the memory 51) corresponding to the ID number input by the identification target person. In addition to the registrant verification operation for verification and this registrant verification, an administrator verification operation for verifying whether or not the identification target person is an administrator is performed based on the administrator identification parameter.

The management computer 7 that mutually communicates with the communication unit 8 includes a keyboard 71, a printer 72, a hard disk 73, etc., and manages access history, backs up registration data, and writes backup data.

Next, introductory management (ordinary operation),
The operation of the fingerprint collation apparatus A and the management computer 7 when the registration data is backed up, the backup data is written, the operation in the write prohibition of the backup data is prohibited, and the communication failure or the write end of the backup data is forgotten will be described.

Introductory management (ordinary operation); see FIG. 2. The identification subject inputs his or her own ID number from the input unit 4, and the collation unit 6 performs the above-mentioned registrant collation operation to register the identification subject. It is checked whether the person is a person (state j101).
The collation unit 6 sends access information {when, what ID number was used for collation, and what was the collation result} to the control unit 9, and the control unit 9 transmits the access information via a communication line to a management computer. The communication unit 8 is instructed to send the data to the communication unit 7. The access information is transmitted to the management computer 7 (state j102), and the management computer 7 performs access history management (state j103).

Backup of registration data; see FIG. 3, for example, when the system administrator instructs the management computer 7 to backup the registration data of the registrant Tm (state j201), the management computer 7 The fingerprint collation device A is communicated with the communication unit 8 of the fingerprint collation device A.
Request to read / transfer registration data (state j20
2).

The fingerprint collation device A retrieves the registration data of the registrant Tm from the stored data stored in the memory 51 (state j203), and registers the registration data of the registrant Tm {registrant Tm registered in advance. Registration data (characteristic parameter)} of the above is sent to the management computer 7 via the communication unit 8 (state j204).

The management computer 7 performs the backup operation of the registration data of the registrant Tm and records it in a file (state j205).

Writing of backup data; see FIG. 4 For example, when writing the backup data of the registrant Tm, the system administrator performs the registrant verification operation and the administrator verification operation described above, and the administrator The fingerprint collation device A is made to recognize that there is (state j301; administrator collation OK).

When the administrator verification is OK, the system administrator performs a key input from the input unit 4 to permit the write operation of the backup data by the management computer 7 (state j302). After this, the system administrator (may be another system administrator)
The backup computer 71 is instructed to write the backup data from the keyboard 71 (state j303), and the management computer 7 issues a backup data write request to write the backup data of the registrant Tm to the fingerprint collation device A via the communication unit 8. (State j304).

When the write permission of the backup data is confirmed (state j305), the fingerprint collation device A can perform the write operation {backup data (registrant Tm).
Writing operation is possible} to the management computer 7 (state j306), and the management computer 7
The backup data of the administrator Tm {the registration data of the registrant Tm that has been backed up (recorded on the floppy or hard disk)} is transferred to the fingerprint collation device A via the communication unit 8.
(State j307).

When the backup data is sent, fingerprint collation device A stores the backup data in {memory 5
Stored (or overwritten) in 1 as registration data of the registrant Tm} (state j308). The system administrator performs a key input indicating that the writing has been completed from the keyboard 71 of the management computer 7 {send that the backup data writing operation has been completed} (state j309), and the management computer 7 completes the writing operation. It transmits the message (sends that the backup data write operation is completed) (state j310). The fingerprint collation device A enters the write operation prohibited state and prohibits the write operation (state j311).

Writing of backup data while writing operation is prohibited; see FIG. 5 The system administrator uses the keyboard 7 of the management computer 7.
When the instruction to write the backup data is issued from 1 (state j401), the management computer 7 requests the writing of the backup data {request the writing of the backup data of the registrant Tm} via the communication unit 8 to the fingerprint collation device A.
(State j402).

When the write permission of the backup data is confirmed (state j403), the fingerprint collation device A prohibits the write operation {backup data (registrant T
The write operation of m) is prohibited} is returned to the management computer 7 (state j404). If you ignore the operation inhibition and forcibly continue the write operation,
Backup data of the administrator Tm {registration data of the registrant Tm that has been backed up (recorded on the floppy or hard disk)} is sent to the fingerprint collation apparatus A via the communication unit 8 (state j405). On the other hand, fingerprint collation device A ignores the received backup data (state j40
6).

Operation in case of communication failure or forgetting to finish writing backup data; see FIG. 6, for example, when writing the backup data of the registrant Tm, the system administrator performs the registrant collating operation described above. The administrator collation operation is performed so that the fingerprint collation apparatus A recognizes that he is the administrator (state j501; administrator collation OK).

When the administrator verification is OK, the system administrator performs a key input from the input unit 4 to permit the write operation of the backup data by the management computer 7 (state j502). After this, the system administrator (may be another system administrator)
Instructing the writing of backup data from the keyboard 71 (state j503), the management computer 7 requests writing of backup data {requesting writing of backup data of the registrant Tm} via the communication unit 8 and the fingerprint collation device A. (State j504).

When the write permission of the backup data is confirmed (state j505), the fingerprint collation device A can perform the write operation {backup data (registrant Tm).
Is written to the management computer 7 ”(state j506), and the management computer 7
The backup data of the registrant Tm {registration data of the registrant Tm which has been backed up (recorded on the floppy or hard disk)} is transferred to the fingerprint collation device A via the communication unit 8.
To (state j507).

When the backup data is sent, the fingerprint collation device A stores the backup data {memory 5
1 (stored (or overwritten) as registration data of the registrant Tm in 1) (state j508). Then, when the following state occurs, the fingerprint collation apparatus A prohibits the writing operation after a certain period of time has passed (state j511).

The system administrator uses the keyboard 71 of the management computer 7 to input a key indicating that the writing has been completed {send that the backup data writing operation has been completed} (state j509), and the management computer 7
In the case where the transmission of the completion of the writing operation {the transmission of the completion of the writing operation of the backup data} (state j510) is not transmitted to the fingerprint collation device A due to communication failure (noise inclusion, etc.).

When the system administrator forgets the key entry from the keyboard 71 of the management computer 7 to the effect that writing has been completed {send that backup data writing operation has been completed}.

The fingerprint collation device A of this embodiment has the following advantages. (A) If the administrator verification is not performed (whether it is OK or not performed), even if an instruction to write backup data is issued from the keyboard 71 of the management computer 7 (status j401 in FIG. 5), the fingerprint verification device Since the write operation is prohibited in A, backup data is not written. Therefore, even if someone illegally operates the management computer 7, the registration data in the memory 51 of the fingerprint collation device A is not tampered with, and the fingerprint of an outsider is illegally registered.
The registered data of the registrant is not erased, so the security is excellent.

[B] The system administrator inputs a key indicating that the writing is completed from the keyboard 71 of the management computer 7, and the management computer 7 transmits a message indicating that the writing completion operation is completed, but communication failure occurs. If the fingerprint collation device A is not transmitted to the fingerprint collation device A due to (mixing of noise) or the like, or if the system administrator forgets to input a key indicating that the writing is completed from the keyboard 71 of the management computer 7, the fingerprint collation device In A, the write inhibit operation is automatically performed after the elapse of a certain time (state j511 in FIG. 6).

Therefore, even if someone tries to operate the management computer 7 illegally with a gap, the fingerprint collation device A
Is already write-protected, so the memory 5
The registration data in 1 is not tampered with, the fingerprints of outsiders are not illegally registered, and the registration data of the registrant is not erased.

[Brief description of drawings]

FIG. 1 is a block diagram of a fingerprint matching device according to an embodiment of the present invention.

FIG. 2 is an explanatory diagram showing operations of a fingerprint collation device and a management computer during entry management (normal time).

FIG. 3 is an explanatory diagram showing operations of a fingerprint collation device and a management computer when backing up registration data.

FIG. 4 is an explanatory diagram showing operations of a fingerprint collation device and a management computer when writing backup data.

FIG. 5 is an explanatory diagram showing the operation of the fingerprint collation device and the management computer during the write prohibition of backup data.

FIG. 6 is an explanatory diagram showing the operation of the fingerprint collation device and the management computer when communication failure or forgetting to finish writing backup data is forgotten.

[Explanation of symbols]

 A fingerprint collation device 1 fingerprint image sampling unit (fingerprint image sampling unit) 2 A / D conversion unit (A / D conversion unit) 3 characteristic parameter extraction unit (characteristic parameter extraction unit) 4 input unit (input unit) 5 registration unit ( Registration means) 6 Collation unit (collation means) 7 Management computer 8 Communication unit (communication means) 51 Memory (storage means)

Claims (2)

[Claims] 1. A fingerprint image collecting means for optically collecting a fingerprint of a finger and outputting an image signal, an A / D converting means for converting the image signal into fingerprint image data, and the converted fingerprint image data. Characteristic parameter extracting means for extracting characteristic parameters from the input means, input means for instructing fingerprint registration, fingerprint collation, etc., and storage means for storing registration data such as the characteristic parameters and administrator identification parameters, Registration means for storing the registration data such as the characteristic parameter and the administrator identification parameter in the storage means; the characteristic parameter of the extracted identification target person and the characteristic of the registrant stored in the storage means Registrant collation operation for collating parameters and whether or not the identification target person is an administrator based on the administrator identification parameter in addition to this registrant verification A collating means for performing an administrator collating operation for collating with each other, and a communication means for communicating with the management computer for managing access history, backing up registered data, and writing backup data, and instructing each of the above means to perform each operation. The management computer verifies the identification target person as an administrator, and only when the administrator permits the backup data writing operation by the input means, A fingerprint collation device, wherein the backup data write instruction is validated. 2. The fingerprint collation apparatus according to claim 1, wherein a write operation of the backup data is prohibited when a predetermined time has elapsed after the storage of the backup data from the management computer is completed.