KR100778890B1 - Method and apparatus for biometric registration - Google Patents

Abstract

The present invention relates to a method of registering biometric information such as a fingerprint. More specifically, the authentication score is different from the matching score threshold at registration and the matching score threshold at 1: 1 mode and 1: N mode authentication. The present invention relates to a biometric information registration method and device that applies a security level differentially. In the present invention, unlike the conventional method, the matching score threshold is set differently at the time of biometric information registration and authentication, so that optimal authentication efficiency can be obtained for each of 1: 1 mode and 1: N mode. Specifically, in the 1: N mode authentication, by setting the registration threshold value Th _{D (1: N)} to be smaller than the authentication threshold value Th _A , the FAR is reduced by making the registration more stringent than authentication. In the 1: 1 mode authentication, on the contrary, the registration threshold Th _{D (1: 1)} is set to be larger than the authentication threshold Th _A.

Biometric Information, Fingerprint, Registration, Authentication, Matching Score, Acceptance Rate, Rejection Rate, FAR, FRR

Description

Method and apparatus for biometric registration

1A is an overall configuration diagram of a general biometric information registration system.

1B is a conceptual diagram illustrating a conventional biometric information registration method.

1C is a conceptual diagram illustrating a problem in authentication in the conventional biometric information registration method.

2A is a conceptual diagram for explaining the operation in the 1: N mode of the present invention.

Figure 2b is a conceptual diagram for explaining the operation in the 1: 1 mode of the present invention.

Figure 3 is a flow chart of the fingerprint registration method according to an embodiment of the present invention.

4 is a schematic diagram of a threshold data storage unit of the data storage unit set in the present invention;

Figure 5 is a block diagram of a fingerprint registration device according to an embodiment of the present invention.

The present invention relates to a method for registering biometric information such as a fingerprint. More specifically, the matching score threshold at registration is set differently from the matching score threshold at 1: 1 mode and 1: N mode authentication. The present invention relates to a method and apparatus for registering biometric information that differentially applies a registration requirement for each authentication mode.

Biometric information authentication technology has a database of feature data of a large number of biometric information (fingerprints, palms, irises, facials, veins, etc.) in advance, and then finds and matches the biometric information of the person who wants access for a specific purpose. It is a technology that grants access rights. Such biometric authentication technology is used to lock doors or safes, access management, time and attendance, and computer access control.

As used herein, "bioinformation" refers to all organs that can be used for personal identification among organs of the human body, and in the technical level at the time of filing of the present invention, fingerprints, palms, irises, veins, facial images, etc. It may include, but is not limited to. In addition, the term "bioinformation data" means data generated by extracting feature points from the bioinformation using a predetermined algorithm and processing them to generate a predetermined form.

Basic biometric authentication system is a system that registers biometric data of political party user in database in advance, and if the person who wants to be authenticated later inputs his own biometric information, it finds whether there is the same biometric data in database and performs authentication as party user. .

Such a biometric information authentication system is configured as shown in FIG. 1A. It is composed of the biometric information registration unit 10, the biometric information authentication unit 20, the user interface 30.

When the user inputs his biometric information through the user interface 30, the biometric information register 10 stores the biometric information as feature data by applying a predetermined algorithm. The biometric information authentication unit 20 inputs biometric information by using a predetermined algorithm when a person (authentication requester) who wishes to be authenticated to access the main system 40 inputs his biometric information to the user interface 30. Is compared with the biometric data stored in the biometric information register 10 to perform authentication. In FIG. 1, the user interface 30 is hardware (for example, a biometric information acquisition device) that reads biometric information and transmits the biometric information to the biometric information registration unit 10, displays various information to the user, and inputs the user's input to the authentication system. Software to transmit (eg, a GUI).

One of the most important factors to be considered in the biometric information authentication system is the FAR (Facility Acceptance Rate), which means that the user's biometric information of a political party user is also accepted for others (false accept ratio). In other words, FAR refers to the percentage of authentication errors that are authenticated to unauthorized persons.

Meanwhile, methods for performing authentication in a biometric authentication system can be classified into various categories, among which biometric data registered as the subject of the biometric information registered for authenticating the biometric information input by the subject. "1: 1 mode" to check the 1: 1 and call the biometric data stored in the database in order to find the biometric information matched by the subject input "1" to find out if there is a match : N mode ".

In practice, the 1: 1 mode is performed by a candidate entering his ID to retrieve candidate biometric data from a database, and then comparing the biometric data with newly entered biometric information. On the other hand, in the 1: N mode, if a user who wants to input an ID is omitted and immediately inputs his / her biometric information, the biometric information authentication unit examines a large number of biometric information stored in a database for the input biometric information. The matching biometric information is found.

As described above, in the 1: 1 mode biometric information system, the authentication candidate has to input ID in addition to his / her biometric information every time the user authenticates, but has an advantageous advantage in the processing speed of finding a matching biometric information. In 1: N matching, it is convenient to use only the biometric information of the authentication user without having to input the ID of the authentication user. However, it requires a lot of authentication processing time because it needs to examine all the biometric data stored in the database. have.

At the time of biometric information registration in the conventional biometric information system, if a person who wants to register biometric information inputs new biometric information and requests registration, the biometric information registration unit (10 in FIG. 1) requests the biometric information of another person registered in the database. A comparison is made to see if there is a similar thing (this is called "duplication check". If the same biometric information is already registered by the duplicate check, a separate biometric information is referred to as biometric information of another person. However, if a lot of similar biometric information is already registered in the database, it is necessary to review the registration of newly requested biometric information. This is because the probability of authentication error is increased. Registration whether or not the new biometric information is determined by the match score threshold (Th _D).

Referring to FIG. 1B, a new registration is recognized only when the score (matching score) S _D indicating a matching result between the newly registered biometric information and the previously registered biometric information is lower than the matching score threshold Th _D at registration. do. This is because, as the matching score S _D is larger than the threshold Th _D in FIG. 1B, the similarity between the newly requested biometric information and the registered biometric information is increased.

Meanwhile, in the conventional general biometric information authentication system, the registration matching score threshold Th _D used by the biometric information registration unit 10 and the authentication score matching threshold value Th _A used by the biometric information authentication unit 20 are used. ) Is applied to Th _D = Th _A collectively. Accordingly, if the matching score S _D registers new biometric information slightly smaller than the threshold Th _D at the time of registration as shown in FIG. 1B, and then authenticates, according to the state of the biometric information as shown in FIG. 1C, Th _D (= Th There is a possibility that an authentication matching score S _A higher than _A ) is calculated. In the case of FIG. 1C, since authentication is performed on similar biometric information of another person, the FAR increases in an authentication system to which Th _D = Th _A is applied as in the conventional method.

The above description applies to both 1: 1 and 1: N authentication modes. However, due to the characteristics of the two modes, the possibility of increasing the FAR due to the above-described problems will be greater in the case of 1: N mode than in the 1: 1 mode.

According to the present invention, biometric information to be newly registered is compared with all previously registered biometric information to prevent separate registration of biometric information of a similar person, thereby reducing FAR in 1: N authentication mode. To provide a biometric information registration method and apparatus for applying a security level differentially for each authentication mode by changing the matching score threshold at the time of biometric information registration according to 1: 1 mode authentication and 1: N mode authentication. The purpose.

Basic Concepts of the Invention

In the present invention, unlike the conventional method, the matching score threshold at the time of registration is differently applied at the time of biometric information registration and authentication, thereby solving the problems of the conventional system described above. Specifically, the threshold Th _D is applied at the time of biometric information registration, but the threshold Th _A is not set equal to Th _D (ie, larger or smaller) at the time of authentication, thereby avoiding the same problems as those of FIGS. 1B and 1C. It is the basic concept of the present invention.

In the present invention, it is preferable to set Th _A ≠ Th _D , but the case relationship is differently applied depending on whether the authentication mode of the system is 1: 1 mode or 1: N mode. This is because the general biometric information system uses a mixture of 1: 1 authentication and 1: N authentication. (In general, the threshold for authentication in 1: 1 mode is set lower than the threshold for authentication in 1: N mode.) do).

Specifically, in the 1: N mode, Th _A > Th _D may be set as shown in FIG. 2A. With this setting, even when the matching score S _D between the new biometric information and the registered biometric information at the time of biometric information registration is slightly smaller than Th _D and the matching score S _A becomes larger than Th _D at the time of authentication, Since it is smaller than the authentication matching score threshold Th _{A, the} likelihood of generating FAR by similar biometric information is reduced. In this case, if Th _A is fixed at a certain level of authentication, the Th _D becomes relatively lower than in the conventional system, which means that the registration requirements of the system become strict. This is because registration is rejected even when the biometric information is newly registered, even if the similarity with the existing registered vegetable information is low.

Meanwhile, in the 1: 1 mode, Th _A <Th _D may be set as shown in FIG. 2B. By this setting, even if the matching score S _D between the new biometric information and the registered biometric information at the time of biometric information registration is slightly smaller than Th _{D, it is} larger than the authentication matching score threshold Th _A at the time of authentication. The likelihood of FAR is reduced. In this case, the threshold for registration becomes higher than the conventional method, which results in a relatively relaxed registration requirement.However, in the 1: 1 mode, the user's ID authentication must be preceded. In addition, since the possibility of FAR is reduced, it may give a user convenience in using an authentication device.

As in the present invention, the matching score threshold at the time of registration is set differently from the matching score threshold at the time of authentication, in particular for each authentication mode, so that optimal authentication efficiency can be achieved for 1: 1 and 1: N modes at the time of biometric information authentication. You can get it.

In summary, in the present invention, in the case of 1: N mode authentication, the registration threshold Th _{D (1: M)} is set lower than the authentication threshold Th _A , so that registration becomes more stringent than authentication, thereby reducing FAR. On the contrary, in the 1: 1 mode authentication, the registration threshold Th _{D (1: 1)} is set higher than the authentication threshold Th _A , so that the registration requirement is alleviated, making it easier to use.

In addition, according to the present invention, in accordance with the user's request to newly register the biometric information, the user can select the authentication mode (1: 1 or 1: N) to be used in the future at the time of registration, and the matching score at the time of registration. You can set the threshold. In other words, the user who selects 1: 1 mode is easy to register, but the user must always enter his or her ID during authentication. The user who selects 1: N mode strictly restricts the registration for 1: N authentication. It is possible to minimize the FAR that can occur.

<Example>

Hereinafter, the above configuration will be described with reference to the drawings. In the following embodiments, the fingerprint will be described as biometric information. 3 is a schematic process flow diagram of a fingerprint registration method according to the present invention.

First, the data storage unit 100 of the present invention includes a threshold data storage unit 101 and a fingerprint data storage unit 102. The threshold data storage unit 101 stores matching score thresholds used in the present invention (see Fig. 4). The matching score thresholds used at the time of registration according to the present invention are the registration threshold Th _{D (1: N) at 1: N} authentication and the registration threshold Th _{D (1: 1)} at 1: 1 authentication. Here, as described above, Th _{D (1: N)} is set to be Th _{D (1: N)} <Th _A , and Th _{D (1: 1)} is set to be Th _A <Th _{D (1: 1)} do. On the other hand, the fingerprint data storage unit 102 is the same as that used in a conventional fingerprint authentication system.

When the fingerprint registration is performed in the state where the data storage unit 100 is provided (s200), the system checks whether the fingerprint to be newly registered will be used in the 1: N authentication mode or the 1: 1 authentication mode (s210). In case of 1: N authentication, Th _{D (1: N)} is called from the threshold data storage unit 101 (s220), and in case of 1: 1 authentication, Th _{D (1: 1)} is _referred to as the threshold data storage unit. Call from 101 (s220 '). Then, the calling Th _{D (1: N)} and Th _{D (1: 1)} are applied to perform a fingerprint registration process according to a predetermined rule in each case (s230 and s230 '). The registered fingerprint is stored in the fingerprint data storage 102. In this state in which the fingerprint data is registered, the user may perform fingerprint authentication through the fingerprint authentication unit 300.

Meanwhile, in step s210, a user who wants to newly register a fingerprint may select an authentication mode (1: 1 or 1: N) to be used in the future. This is to allow setting of matching score thresholds upon registration according to the authentication mode selected by the user. In other words, the user who selects 1: 1 mode is easy to register, but the user must always enter his or her ID during authentication, and the user who selects 1: N mode strictly restricts registration for 1: N authentication. It is possible to minimize the FAR that can occur.

The method of the present invention can also be embodied as computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like, and may also be implemented in the form of a carrier wave (for example, transmission over the Internet). Include. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

5 is a block diagram of a fingerprint registration device according to the present invention. FIG. 5 shows the device configuration of the fingerprint registration method described in FIG. 3, and its operation is similar to that described above.

The data storage unit 100 is the same as described above, and the fingerprint authentication unit 300 includes a Th _A calling unit and an authentication processing unit. The fingerprint registration unit 200 includes an authentication mode checking unit 205 for checking what the authentication mode is, and a Th for calling the registration threshold value from the threshold data storage unit 101 in the 1: N mode according to the checked authentication mode. _{D (1: N)} call unit 210, Th _{D (1: 1)} call unit 320 for calling the registration threshold value in the 1: 1 mode from the threshold data storage unit 101, the called threshold value It includes a registration processing unit 230 to apply the registration of the fingerprint. As described above, the relationship of Th _{D (1: 1)} > Th _A and Th _{D (1: N)} <Th _A is established.

As described above, according to the present invention, the matching score threshold value at the time of biometric information registration is adjusted differently from the matching score threshold value at the time of biometric information authentication, in particular for each authentication mode, thereby lowering the FAR during authentication to secure the biometric information authentication system. You can strengthen the castle.

Claims (8)

In the biometric information registration device comprising a biometric information registration unit and a biometric information authentication unit, The biometric information registration unit applies a threshold value Th _D at the time of biometric information registration, but the threshold value Th _D is set not to be equal to the threshold value Th _A at the time of authentication by the biometric information authentication unit. When the biometric information authentication unit is 1: N authentication mode, the threshold value when registering the biometric information is Th _D <Th _A , The biometric information authentication added 1: 1 mode, which is the biometric information registration method, if the threshold value Th _D> Th _A biometric information registration apparatus, characterized in that. delete delete In the biometric information registration method comprising the biometric information registration step and biometric information authentication step, The registration threshold Th _{D (1: N)} when the biometric authentication step is 1: N authentication and the registration threshold Th _{D (1: 1)} when 1: 1 authentication are stored, but Th _{D (1: N)} is set such that Th _{D (1: N)} <Th _A , and Th _{D (1: 1)} is set so that Th _A <Th _{D (1: 1)} to further establish the data storage. Where Th _A is the threshold at the time of biometric authentication, The biometric information registration step may include a mode checking step of checking whether the current authentication mode should be 1: N authentication or 1: 1 authentication, and in case of 1: N authentication, Th _{D (1: N)} . Calling from the data store and calling Th _{D (1: 1)} from the data store if 1: 1 authentication, and performing biometric registration by applying the called threshold value; How to register. The method of claim 4, wherein the mode checking step And a step of allowing a user who wants to newly register a fingerprint to select an authentication mode to be used in the future biometric information authentication step. A computer recording medium containing a program for implementing the method of registering biometric information according to claim 4 or 5. In the biometric information registration device comprising a biometric information registration unit and a biometric information authentication unit, The registration threshold Th _{D (1: N)} when the authentication mode of the biometric authentication unit is 1: N mode, and the registration threshold Th _{D (1: 1)} when 1: 1 mode, where Th _{D (1 : N)} additionally includes a threshold storage that stores <Th _A and Th _A <Th _{D (1: 1)} ), The biometric information registration unit may include an authentication mode confirmation unit that checks whether the current authentication mode should be 1: N authentication or 1: 1 authentication, and Th _{D (1: N)} in the case of 1: N authentication. Th _{D (1: N)} calling unit calling from the data storage unit, Th _{D (1: 1)} calling unit calling Th _{D (1: 1)} from the data storage unit for 1: 1 authentication, and calling And a registration processing unit for performing biometric information registration by applying the threshold values. The method of claim 7, wherein the authentication mode confirmation unit And a mode selector for allowing a user to newly register a fingerprint to select an authentication mode to be used in the biometric information authentication step in the future.

Images