JPH10187976A - Device for authenticating individual - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve precision in authentication (namely security for surely checking identity) by arbitrarily designating the plural fingers of the same person and mutually collating fingerprint feature point data from different bases for each finger. SOLUTION: This device is provided with a fingerprint scanner 32 for fetching fingerprints from the fingers of the same person as images and generating fingerprint feature point data, IC card reader 33 for reading the fingerprint feature point data stored on an IC card owned by that person, ten-finger's finger print data base 34 storing the fingerprint feature point data of fingerprints previously registered by that person himself, collation unit 35 for mutually collating the fingerprint feature point data respectively sent out of the fingerprint scanner 21, IC card reader 33 and ten-finger's fingerprint data base, and control unit 31 for designating the fingers to e defined as the object of collation, fetching the relevant fingerprint feature point data and displaying the collated result.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal identification device, and more particularly, to a personal identification device for identifying a person by collating a fingerprint and confirming the identity of the person.

[0002]

2. Description of the Related Art As a method for confirming the identity of a person,
For example, a specific individual may be identified by recognition of a seal, identification of a signature (handwriting), collation of a face photograph, and the like. However, when it is necessary to identify an individual more reliably, the individual is often authenticated by collating the fingerprint.

[0003] Conventionally, in personal identification using fingerprint collation, identification of a person is generally performed by collating a person with a portable storage medium such as an IC card, or another person with another storage medium. Had been In such a system, a collation device with extremely high matching accuracy and a reading scanner with very high reading accuracy are required.

[0004] That is, it is necessary to make the collation accuracy with the IC card extremely high on the assumption that either the forgery of the IC card or the forgery of the physical characteristics is performed. Therefore, if you try to increase the accuracy, it costs machine cost,
It takes a long time to collate technically.

[0005] In addition, a device for authenticating a person between a card, a person, and a center using the same fingerprint data is conceivable.
If the fingerprints are the same, there is a problem in checking / guarding against falsification / abuse. That is, if a card is created using data already registered in the center or information is extracted from the card, a fingerprint image is restored from the information, and the device is used, the user is confirmed as the principal.

[0006]

The above-mentioned conventional personal authentication apparatus has the following problems.

The first problem is that the reliability of the system is impaired by either counterfeiting the holding card or counterfeiting physical characteristics. For this reason, it is necessary to make the matching accuracy with the holding card extremely high, and there is also a problem in terms of performance that the matching time is long technically. In other words, in the collation between what is recorded on a medium such as a card and the holder of the medium, forgery of physical characteristics and storage of fake data on the card are performed. Accurate collation must be performed to determine whether or not they are the same person with subtle changes.

[0008] The second problem is that when authentication is performed using a collectively managed database, there is no means for reliably confirming whether or not the user is the identity on the reading side. Therefore, it cannot be checked whether the card or the fingerprint image has been falsified.

An object of the present invention is to improve the above-mentioned problems,
A plurality of fingers of the same person are arbitrarily specified, and fingerprint feature point data of different origins are compared for each finger, thereby improving the authentication accuracy (that is, the security of being able to reliably check the identity of the person). A personal authentication device is provided.

[0010]

According to the present invention, there is provided a personal identification device comprising: a fingerprint feature point data of an individual; and an IC possessed by the individual.
The fingerprint feature data stored on the card and the fingerprint feature data registered by the user in advance and stored in the database are compared with each other, and the user is authenticated based on these three types of comparison results. .

Also, the personal authentication device of the present invention comprises a first collating means for comparing the fingerprint feature point data of the person with the fingerprint feature point data stored on the IC card possessed by the person;
Second matching means for comparing the fingerprint feature point data of the principal with the fingerprint feature point data registered by the principal in advance and stored in the database; and the fingerprint characteristic point data stored in the IC card and stored in the database. Third matching means for comparing with fingerprint feature point data, wherein the first matching means matches the fingerprint of the first finger of the person, and the second matching means compares the fingerprint of the second finger of the person. The third collating means collates the fingerprint of the other finger of the person, and authenticates the person based on the three kinds of collation results.

Further, the personal authentication device of the present invention is configured such that a finger of the fingerprint feature point data to be compared and matched is arbitrarily designated at each comparison and matching.

Further, the personal authentication apparatus of the present invention reads a fingerprint from an individual's finger as an image to generate fingerprint characteristic point data, and reads fingerprint characteristic point data stored in an IC card owned by the individual. An IC card reader, a fingerprint database storing fingerprint feature point data of fingerprints registered in advance by the user, the fingerprint scanner,
A collation unit for mutually comparing fingerprint feature point data sent by the IC card reader and the fingerprint database, and a control for designating a finger to be collated and taking in the corresponding fingerprint feature point data and displaying the result of collation And a unit.

Further, the personal authentication apparatus of the present invention reads a fingerprint from an individual's finger as an image to generate fingerprint characteristic point data, and reads fingerprint characteristic point data stored in an IC card owned by the individual. An IC card reader, a matching unit for comparing fingerprint feature data sent by the fingerprint scanner and the IC card reader, and a transmitting / receiving unit for sending the fingerprint feature data to a center system and receiving a matching result from the center system And a plurality of remote systems including a control unit that designates a finger to be collated and captures the corresponding fingerprint characteristic point data and displays the collation result, and stores fingerprint characteristic point data of a fingerprint registered in advance by the user. A fingerprint database, and a finger sent by the fingerprint scanner and the IC card reader; A matching unit for comparing feature point data with corresponding fingerprint feature point data stored in the fingerprint database, a transmitting / receiving unit for receiving fingerprint feature point data from the remote system and transmitting a matching result to the remote system, A control unit that searches the fingerprint database in accordance with an instruction from a remote system, drives the collation unit, and instructs transmission of a collation result.

Further, in the personal authentication device of the present invention,
The center system extracts corresponding fingerprint feature point data from the fingerprint database based on a request from the remote system and transmits the fingerprint feature point data to the remote system, and a collation unit of the remote system converts the fingerprint feature point data into the fingerprint scanner and the fingerprint scanner. It is configured to compare with fingerprint feature point data respectively sent by the IC card reader.

Further, in the personal authentication device of the present invention,
The collating unit of the center system is configured to compare fingerprint feature point data received from the remote system and sent by the fingerprint scanner and the IC card reader, respectively.

That is, the personal authentication device of the present invention performs authentication based on the results of three times of verification: the user and the IC card, the user and the fingerprint database, and the IC card and the fingerprint database. Then, since the person who authenticates the target finger in each collation can be arbitrarily designated, it is possible to check the data for intentional tampering.

FIG. 1 is an explanatory diagram showing a basic configuration (concept) of the present invention. In the figure, the control unit 1 and the control unit 4 are installed apart from each other and connected between them by a communication line, but this does not limit the present invention. Hereinafter, the basic operation of the present invention will be described with reference to FIG.

Verification (1): Does the person match the IC card? That is, means for checking whether or not the IC card is different from that of the person is as follows. First, the person's finger is captured by the scanner 2 as an image. At this time, the person to be checked can arbitrarily designate the finger to be taken. The fingerprint captured as an image is extracted as endpoints / branches, the central part of the fingerprint (hereinafter referred to as a core) and the direction of the fingertip are automatically extracted and identified, and converted into feature point data. Fingerprint matching is performed between the converted feature point data and the fingerprint feature point data (read from the IC card reader 3) stored in the IC card held by the user. Naturally, collation is performed with arbitrary fingers set by the person who checks. If the score indicating the similarity of the collation result (hereinafter, referred to as score value) is equal to or more than the threshold value (usually 9999), the person is regarded as the person.

Verification (2): Does the fingerprint match the fingerprint held in the fingerprint database 5 of the center? That is, it is checked whether the person is registered in the center. In this case, similarly to the matching check with the IC card, the person to be checked designates an arbitrary finger, the fingerprint of the person is captured as an image by the scanner 2, and converted into feature point data.
Send it to the center. The center collates the sent feature point data with the fingerprint feature point data stored in the database, and if the score value is equal to or larger than the threshold value, the center is regarded as the principal.

Verification (3): Does the IC card held by the user match the one registered in the fingerprint database 5 of the center? That is, it is checked whether the IC card belongs to the registered person. In this method, fingerprint data of an arbitrary finger recorded on an IC card is transmitted to a center, and the center compares the transmitted fingerprint data with fingerprint data stored in a database. As a result of collation, if the score is equal to or greater than the threshold value, the person is regarded as the person.

[0022]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described below with reference to the drawings.

FIG. 2 is a block diagram showing a first embodiment of the present invention. In the figure, a personal authentication device according to the present invention reads a fingerprint from an individual's finger as an image and generates fingerprint characteristic point data, and reads fingerprint characteristic point data stored in an IC card owned by the individual. An IC card reader 13, a matching unit 14 for comparing fingerprint feature data sent by the fingerprint scanner and the IC card reader, respectively, and transmitting the fingerprint feature data to a center system and receiving a matching result from the center system; A plurality of remote systems 10 including a transmission / reception unit 15, a control unit 11 for designating a finger to be collated and taking in relevant fingerprint characteristic point data and displaying the collation result, and a fingerprint characteristic of a fingerprint registered in advance by himself / herself A ten finger fingerprint database 22 storing point data; A matching unit 23 for comparing the fingerprint feature point data transmitted by the IC card reader with the corresponding fingerprint feature point data stored in the ten finger fingerprint database, and receiving the fingerprint feature point data from the remote system and comparing the matching result The center system 20 includes a transmission / reception unit 24 for transmitting to the remote system, and a control unit 21 for searching the ten finger fingerprint database according to an instruction from the remote system, driving the verification unit, and instructing transmission of the verification result. The remote system 10 and the center system 20 are connected by a communication line.

In the remote system 10, the fingerprint scanner 12 has a function of optically reading a fingerprint, and the IC card reader 13 has a function of optically reading an IC card. And the control unit 11 is the remote system 1
The collation unit 14 is used for collation within 0, the collation control using the fingerprint data read from the fingerprint scanner 12 and the fingerprint data read from the IC card reader 13, the communication control via the transmission / reception unit 15, the collation result And the like.

Here, the collating unit 14 has a function of collating fingerprint data read from the fingerprint scanner 12 and the IC card reader 13 with feature point data points / cores. Has a communication function.

In the center system 20, the control unit 21 performs collation control on the ten-fingerprint fingerprint database 22 using the collation unit 23 at the time of collation in the center system 20, communication control on a plurality of remote systems, and collation results and the like. It has a screen input / output function. Here, the ten fingers of the subject are registered in the ten finger fingerprint database 22.
The collation unit 23 has a function of collating the transmitted fingerprint data with the fingerprint data of the ten-fingerprint fingerprint database 22 using the feature point data / core. The transmission / reception unit 24 has a communication function with the remote system 10.

Next, the operation of fingerprint collation will be described with reference to FIG.

(1) Person-to-IC card: The fingerprint of the subject is read by the fingerprint scanner 12. Fingerprint data is digitized. The fingerprint data on the IC card is read by the IC card reader 13. The control unit 11 checks both data in the check unit 14. The verification unit 14 passes the result to the control unit 11.

(2) Person-to-fingerprint fingerprint database: The fingerprint of the target finger is read by the fingerprint scanner 12. Fingerprint data is digitized. The fingerprint data is transmitted to the transmission / reception unit 24 via the transmission / reception unit 15.
The control unit 21 compares the fingerprint data of the transmitting / receiving unit 24 with the ten finger fingerprint database 22 in which the ten finger fingerprints of the subject are registered in advance by using the matching unit 23. The collation result is transmitted from the transmission / reception unit 24 to the transmission / reception unit 15 and notified to the control unit 11.

(3) IC Card to Ten Finger Fingerprint Database: Fingerprint data of the IC card is read by the IC card reader 13. The fingerprint data is stored in the transmitting / receiving unit 15.
Is transmitted to the transmission / reception unit 24 via The control unit 21 collates the fingerprint data with the ten finger fingerprint database 22 using the collation unit 23. The collation result is transmitted from the transmission / reception unit 24 to the transmission / reception unit 15 and notified to the control unit 11.

The order of collation between the three points and the target finger used for each collation are determined by the remote system control unit 11.
Alternatively, it can be set by the control unit 21 of the center system.

Next, the operation of the personal authentication device will be described. First, the fingerprints F1 and F2 are optically read by the fingerprint scanner 12 in order to verify the person and the IC card. Further, fingerprint data C1 and C1 of the corresponding finger optically climbed by the IC card reader 13 are obtained.
2 is read from the IC card.

The control unit 11 uses the collation unit 14 to collate the fingerprint data read from the fingerprint scanner 12 and the fingerprint data read from the IC card reader 13. The collation result is notified to the inspector by the screen input / output function of the control unit 11. As a result, the inspector can check the validity of the IC card and the person.

If the validity of the person and the IC card is checked, a check is made to see if the person is a registered person. First,
The fingerprints F3 and F4 are optically read by the fingerprint scanner 12. The read fingerprint is digitized. The digitized fingerprint data is transmitted by the control unit 11 from the transmission / reception unit 15 to the transmission / reception unit 24 of the center system.

The control unit 21 of the center system uses the collation unit 23 to collate the transmitted fingerprint data with the fingerprint data of the ten-finger fingerprint database 22 in which the ten fingers of the subject are registered, using the feature point data / core. . The collation result is transmitted to the remote system 10 via the transmission / reception unit 24.
And is displayed on the control unit 11.

Further, the IC card and the personal registration data are checked. First, fingerprint data C3 and C4 of an IC card are optically read by an IC card reader.
The read fingerprint data is transmitted by the control unit 11
The data is transmitted to the transmission / reception unit 24 of the center system via the transmission / reception unit 15. For the transmitted fingerprint data,
The control unit 21 of the center system includes the verification unit 2
3 using the feature point data / core to compare the transmitted fingerprint data with the fingerprint data in the ten finger fingerprint database 22 with the ten finger fingerprint database 22 in which the ten fingers of the subject are registered. The collation result is transmitted by the transmission / reception unit 24 having a communication function with the remote system 10, and the result is displayed by the control unit 11.

Next, an example will be described in which the above-mentioned personal authentication apparatus is applied to a procedure for giving and receiving an annuity or the like, which is one of the reception work of government offices. In this case, a plurality of remote systems 1
0 is distributed in each region, and the center system 2
Connected to 0.

Assume that the subject A has fingerprint data C1, C2, C
The remote system 10 carries out a procedure for giving and receiving a pension, with the IC card storing 3 and C4. The finger registered in this IC card is a finger arbitrarily registered by the system administrator.

First, the user is compared with the IC card, and
Confirm the true owner of the C card. The fingerprint data C1 and C2 on the IC card and the fingerprints F1 and F2 corresponding to the arbitrarily set finger numbers are stored in the IC card reader 1.
3 and the fingerprint scanner 12, respectively, and collation is performed by the collation unit 14.

After the collation is confirmed, the procedure for giving and receiving the pension is started. A passes the written predetermined exchange sheet to the reception window, and causes the fingerprint scanner 12 to read the fingerprints F3 and F4 for identification. The read fingerprint data is digitized and transmitted from the transmission / reception unit 15 to the transmission / reception unit 24 of the center system.

In the center system, the received fingerprint data is transmitted to the ten finger fingerprint database 22 by the control unit 21.
And collation is performed using the collation unit 23. The collation result is transmitted to the transmission / reception unit 15 of the remote system via the transmission / reception unit 24. Control unit 11
Informs the terminal manager of the collation result.

In order to confirm the IC card, the fingerprint data C3 and C4 read from the IC card are transmitted from the transmission / reception unit 15 to the transmission / reception unit 24 of the center system, and the finger number corresponding to the transmitted fingerprint data C3 and C4 is used. The fingerprint database 22 is collated using the collation unit 23. The collation result is transmitted to the transmission / reception unit 15 of the remote system via the transmission / reception unit 24. The control unit 11 notifies the terminal manager of the collation result.

The terminal manager knows the following from the above results.・ Is the IC card the thing of the person? ・ The applicant for the pension transfer is the registrant himself / herself and has not made a false declaration. ・ The IC card is also registered and legitimate, and the impersonation is not performed. Whether the above items are confirmed from the verification result and if the person is authenticated, the pension is given and received.

In the above-mentioned personal authentication apparatus, it is also possible to transmit only the data to be referred in the ten-fingerprint fingerprint database 22 to the remote system 10 and execute all the collation by the collation unit 14. In this case, the collating unit 23 becomes unnecessary, and the amount of data transmitted and received between the remote system 10 and the center system 20 can be reduced. Conversely, all collation can be performed by the collation unit 23 of the center system, and the collation unit 14 of the remote system can be omitted.

FIG. 3 is a block diagram showing a second embodiment of the present invention. In the figure, the personal authentication device of the present invention reads a fingerprint as an image from a person's finger as an image to generate fingerprint feature point data, and reads fingerprint feature point data stored in an IC card owned by the person. An IC card reader 33, a ten finger fingerprint database 34 storing fingerprint feature point data of fingerprints registered in advance by the user, the fingerprint scanner, the IC card reader,
And a collating unit 35 for mutually comparing fingerprint feature point data sent by the ten finger fingerprint database,
A control unit 31 for designating a finger to be collated, acquiring the corresponding fingerprint feature point data, and displaying the collation result.

The above-mentioned personal authentication device is also a system in which collation is performed at three points in the same manner as that shown in FIG. 2, but is a small-scale system in which all functions are concentrated in one system. Key.

In the personal authentication apparatus described above, the ten-fingerprint fingerprint database 34 records ten-fingerprint fingerprint data, and the control unit 31 records the order of collation performed at three points. This order can be set by the system administrator. Therefore, the order of the fingers read from the fingerprint scanner 32 is known only to the system administrator.

At the entrance and exit or in a safe, a fingerprint scanner can be read using a forged fingerprint with rubber or the like.
If you do not know the order of the fingers to be read, this system will not authenticate you. Therefore, even if forged, it is not authenticated.

[0049]

As described above, according to the present invention, the following effects can be obtained.

The first effect is expected to greatly improve the security effect. That is, more strict authentication of the person can be performed. The reason is that the user is authenticated based on the result of the three-point collation with the arbitrary designated finger. In addition, since the designated finger is used, falsification becomes impossible.

The second effect is that even if the matching accuracy of each is not so high, authentication is performed only when all three-point matching is regarded as the identity of the user, so that the performance conditions of the apparatus are not strictly required. In other words, even with a verification device whose unit accuracy is not strict, it is possible to perform highly accurate personal authentication. The reason is that any number of fingers to be subjected to collation performed at three points can be flexibly specified. Therefore, even if the accuracy of each collation is, for example, 90%, the user is not regarded as a person unless all three times exceed the threshold value.
(0.1) ³ = 99.99% or more.

[Brief description of the drawings]

FIG. 1 is an explanatory diagram showing a basic configuration (concept) of the present invention.

FIG. 2 is a block diagram showing a first embodiment of the present invention.

FIG. 3 is a block diagram showing a second embodiment of the present invention.

[Explanation of symbols]

 1, 4 control unit 2 scanner 3 IC card reader 5 fingerprint database 10 remote system 20 center system

Claims (7)

[Claims] 1. A fingerprint feature point data of a principal, a fingerprint feature point data stored in an IC card owned by the principal, and a fingerprint feature point data registered in advance and stored in a database are compared with each other. A personal authentication device for authenticating the person based on three types of comparison results. 2. A first matching means for comparing fingerprint feature point data of a principal with fingerprint feature point data stored in an IC card possessed by the principal, and registering the fingerprint characteristic point data of the principal with the principal in advance. Second matching means for comparing fingerprint feature point data stored in a database, and third matching means for comparing fingerprint feature point data stored in the IC card with fingerprint feature point data stored in the database; Wherein the first collating means collates the fingerprint of the first finger of the principal, the second collating means collates the fingerprint of the second finger of the principal, and the third collating means is the other of the principal. A personal authentication device that collates the fingerprint of the finger of the user and authenticates the person based on the three types of comparison results. 3. The personal authentication apparatus according to claim 1, wherein a finger of the fingerprint feature point data to be compared and arbitrarily designated is arbitrarily designated at each of the comparison and collation. apparatus. 4. The personal authentication device according to claim 1, wherein said fingerprint scanner is configured to capture a fingerprint from an individual's finger as an image to generate fingerprint feature point data, and to be stored in an IC card possessed by said individual. An IC card reader for reading fingerprint feature point data, a fingerprint database storing fingerprint feature point data of fingerprints registered in advance, and fingerprint feature points sent by the fingerprint scanner, the IC card reader, and the fingerprint database, respectively. A personal authentication device comprising: a collation unit for mutually comparing data; and a control unit for designating a finger to be collated, acquiring corresponding fingerprint feature point data, and displaying the result of collation. 5. The personal authentication device according to claim 1, wherein the fingerprint scanner is configured to capture a fingerprint from an individual's finger as an image to generate fingerprint feature point data, and to be stored in an IC card owned by the individual. An IC card reader for reading the fingerprint feature point data, a matching unit for comparing the fingerprint feature point data sent by the fingerprint scanner and the IC card reader, and transmitting the fingerprint feature point data to a center system. A plurality of remote systems including a transmitting / receiving unit for receiving the verification result, a control unit for designating a finger to be verified and taking in the corresponding fingerprint feature point data and displaying the verification result, and a fingerprint system registered in advance by the user. A fingerprint database storing fingerprint feature point data, the fingerprint scanner and the IC card; A matching unit for comparing the fingerprint feature point data sent by the reader with the corresponding fingerprint feature point data stored in the fingerprint database, and receiving the fingerprint feature point data from the remote system and transmitting the matching result to the remote system. A personal authentication apparatus, comprising: a center system including a transmitting / receiving unit and a control unit that searches the fingerprint database according to an instruction from the remote system, drives the matching unit, and instructs transmission of a matching result. 6. The personal authentication device according to claim 5,
The center system extracts corresponding fingerprint feature point data from the fingerprint database based on a request from the remote system and transmits the fingerprint feature point data to the remote system, and a collation unit of the remote system converts the fingerprint feature point data into the fingerprint scanner and the fingerprint scanner. A personal authentication device for comparing with fingerprint feature point data respectively sent by an IC card reader. 7. The personal authentication device according to claim 5, wherein
The personal authentication device, wherein the collating unit of the center system compares fingerprint feature point data received from the remote system and sent by the fingerprint scanner and the IC card reader, respectively.