KR20070059915A - Method and apparatus for multi-modal biometric identification - Google Patents

Abstract

A method and a device for authenticating a traveler with biometric information, and an immigration management method using the same are provided to correctly check identification of the traveler with multimodal biometric information and smoothly manage/control the traveler while enabling the traveler to maximally utilize time required for searching the multimodal biometric information. A portable biometric authentication terminal(201) authenticates the first biometric information by comparing the first biometric information received from the user with the second biometric information registered to a biometric passport. A terminal management server(212) decodes the first biometric information received from the portable biometric authentication terminal as an encoded message. A main server(211) checks agreement by comparing the first biometric information received from the terminal management server with the biometric information to register persons. A user entry approver(202) checks the user by displaying the second biometric information registered to the biometric passport and agreement result information to an immigration table.

Description

User identification device and method using biometric information, and method for managing traveler's immigration using the method {Method and apparatus for multi-modal biometric identification}

FIG. 1 illustrates a conventional biometric information retrieval system when a biometric information search is performed at the time of immigration.

2 illustrates a user identification system using biometric information according to an exemplary embodiment of the present invention.

3 is a block diagram of a user identification system using biometric information according to an embodiment of the present invention.

4 is a block diagram of a mobile biometric terminal according to an embodiment of the present invention.

5 is a block diagram of a terminal device management server according to an exemplary embodiment of the present invention.

6 is a block diagram of a main server according to an exemplary embodiment of the present invention.

7 is a flowchart illustrating a process in which a traveler receives a final identification result and receives final immigration approval according to an exemplary embodiment of the present invention.

8 is a flowchart schematically illustrating a step in which a traveler directly performs biometric authentication and requests to search for biometric information according to an exemplary embodiment of the present invention.

9 is a flowchart schematically illustrating a step of performing a biometric information search, fusing a search result, and transmitting the result according to an exemplary embodiment of the present invention.

FIG. 10 is a flowchart schematically illustrating the final determination of a traveler's entry / exit according to a preferred embodiment of the present invention.

The present invention relates to a device and method for identifying a user using biometric information, and a method for managing a traveler's immigration using the method, and more specifically, to a traveler's time using a multi-biographical traveler terminal device, the time required for a traveler's multi-biometric search to the maximum. The present invention relates to a multi-biometric user identification system that can manage and control travelers smoothly while utilizing it.

Recently, the immigration management system using biometric e-passport has begun to enhance the security of immigration and simplify the immigration process. The biopassport securely registers the traveler's biometric information (face, fingerprint, iris, etc.) in a device such as a smart card, providing a means for identifying whether a traveler with a biopassport is the same as the person registered in the biopassport. As a device, it provides a method (biometric identification) to check whether a user's biometric information belongs to a watch-list (terrorist, offender, illegal immigrant, etc.) during the issuance of a bio passport. It provides a means to identify whether the entry / exit country is a person who has a passport issued through a valid issuance procedure through the biometric authentication of the holder of the bio passport.

Multiple biometric authentication is intended to overcome the shortcomings of single biometric authentication (the existence of a person who cannot obtain biometric information, the limitations of the performance of a single biometric algorithm, etc.). And comparing the user biometric information with the user biometric information stored in a database or a smart card. Similar to multi-biometric authentication, multi-biometric search has been recently developed and developed to overcome the shortcomings of single biometric search, and the user compares two or more user's biometric information with two or more biometric information for unspecified majority by 1: N. It is used to verify the identity of a person. Multiple biometric search provides a more accurate way of finding search results than using single biometric search results for fingerprints, faces, irises, veins, and the like. However, multiple biometric search has a long processing time because more biometric information needs to be compared, and the processing procedure is difficult.

FIG. 1 illustrates a biometric information retrieval system that can be constructed by a conventional technology when a biometric information search is performed at the time of entry and exit. In the place 100 where immigration is performed, the immigration officer receives the biometric information of the travelers from the biometric sensor and the bio passport through the biometric kiosk 101, and compares the received biometric information to authenticate the traveler, The biometric search system 110 requests biometric search using the traveler's biometric information received from the sensor. The biometric search system 110 receives the biometric search request through the biometric search main server 111 and performs a search for the biometric information 113 of the list of persons of interest through the plurality of search servers 112. The search result 114 is informed to the kiosk via the main server, and the examiner determines the immigration approval through the result.

With such a conventional system configuration, it is difficult to expect an immediate search result response because the basic execution time required for biometric search is long, and when multiple organisms are used for search, the time required for biometric search differs depending on the biometric characteristics used. There is a problem that time prediction is difficult. Due to these problems, the number of travelers waiting for the auditorium continues to increase, and it is difficult to predict the number of travelers each auditorium can handle. Therefore, it is difficult to carry out biometric search in places where many travelers frequently enter and leave (airports, ports, etc.), and verify whether the traveler is the same as the passport possessed by multiple biometric authentication (1: 1 biometric authentication). That is the level of the prior art. However, the list of people of interest may be changed (added) after the traveler is issued a passport, and there is still room to carry out biometrics as well as biometrics for identification in order to enhance security.

The present invention is to solve the problems (convenience of travelers, difficulty in managing travelers, etc.) according to the time required to search for multiple bio-research for travelers entering and leaving the country, and to show the architecture of the multi-biometric search system accordingly. There is this.

The present invention provides a traveler by providing a hand-held multi-modal biometric kiosk to a traveler by performing a multi- biometric authentication and receiving a multi-biometric search request. A second step of searching for a single biometric information of the registered biometrics for each individual biometric information of the third step; a third step of performing a multi-biometric search convergence after the biometric search of each individual biometric information is completed; After the convergence, the fourth step of delivering the search result and the terminal authentication code for the search result to the workstation of a specific immigration station and the information necessary for the screening to the traveler's terminal device at the same time; And a fifth step of finally determining whether or not to enter or exit based on the transmitted information.

The technical problem to be achieved through the present invention is to provide a system for accurately identifying the identity of a traveler using multiple biometric information.

The technical problem to be achieved through the present invention is to provide a system for smoothly managing and supervising travelers while allowing the traveler to utilize the time during the time of performing the multi-biological search.

In order to solve the above technical problem, a user authentication device using biometric information according to the present invention includes first biometric information (face, iris, fingerprint information, etc.) and biometric passport (or smart card capable of storing biometric information) received from a user. A mobile biometric terminal for authenticating the first biometric information by comparing the second biometric information registered in the mobile terminal, and a mobile biometric terminal for receiving and decrypting the first biometric information from the mobile biometric terminal in an encrypted message. A management unit, a main search unit for comparing the first biometric information transmitted from the mobile biometric terminal management unit with the biometric information of the registered person, and confirming a match, and the second biometric information registered in the bio passport and the main Use to confirm the user by displaying information on whether or not the search unit is matched at the screening pass that the user passes It characterized in that it comprises an access authorization.

The main search unit compares the first biometric information with biometric information about a registered person, checks whether there is a match, and determines a level according to a degree of similarity.

The mobile biometric terminal unit reads the biometric information acquisition unit for detecting the first biometric information of the user, reads the second biometric information and the passport information registered in the biometric passport by contact or contactless communication with the biometric passport of the user. Includes a biometric passport reader unit, a terminal secure access module (SAM) for transmitting and receiving an encrypted message with the mobile biometric terminal management unit, and an RFID for transmitting a terminal authentication code for identifying the passport information and the mobile biometric terminal unit. It features.

The mobile biometric terminal management unit may identify the SAM for a management unit capable of authenticating the SAM for the terminal or transmitting and receiving an encrypted message with the mobile biometric terminal and the mobile biometric terminal, or confirming the main search unit. Comprising a management unit for transmitting the examination information to pass through the user to the mobile biometric terminal when completed.

The main search unit is a bio-information search unit for comparing the biometric information of the first biometric information and the registered person, and when the first biometric information is two or more, the comparison result of each of the biometric information search unit is predetermined And a biometric information determination unit configured to determine a level according to a degree of matching through a comparison result of the biometric information fusion unit and a biometric information search unit or a biometric information fusion unit to search for biometric information by fusion according to a method. .

The user access approval unit communicates with the mobile biometric terminal unit to read the passport information and the terminal authentication code, the terminal reader unit and the passport information and terminal authentication code read from the terminal reader unit and received from the main search unit It characterized in that it comprises a display unit for displaying information on whether or not match.

The user authentication method using the biometric information according to the present invention for solving the technical problem, (a) receives the first biometric information and the second biometric information registered in the biological passport through the terminal provided to the user receives the first Comparing the biometric information with the second biometric information to authenticate the first biometric information, (b) comparing the biometric information of the person registered on the main server with the authenticated first biometric information received from the terminal; (C) verifying the user by displaying the first biometric information authenticated in the step (a) and the result confirmed in the step (b) on the examination table through which the user passes. It is characterized by including.

The step (a) may include obtaining one or more first biometric information of the user and extracting biometric features from the first biometric information, and obtaining and extracting one or more second biometric information registered in the biometric passport of the user. Comparing the biometric feature with the biometric feature and authenticating the first biometric information of the user when the comparison result is identical.

The step (b) is a first comparison step of comparing the biometric characteristics of the first biometric information with the biometric information of a person already registered on the main server, and when the first biometric information is two or more, the first biometric information. Determining a level according to a degree of agreement through a comparison result of the second comparison step of comparing the biometric information by fusing each comparison result according to a predetermined fusion method, and comparing the first or second comparison step; And transmitting the determined level to the examination table or the terminal.

In the step (c), displaying the first biometric information authenticated in the step (a), the bio passport information of the user and the result confirmed in the step (b), and displaying the displayed information and the bio passport of the user. It characterized in that it comprises a step of confirming the identity of the user through.

The travelers entry / exit management method through the user identification method using the biometric information according to the present invention for solving the technical problem is to receive the first biometric information and the second biometric information registered in the bio passport through a terminal provided to the traveler A first step of authenticating the first biometric information by comparing the first biometric information and the second biometric information, for the authenticated first biometric information received from the terminal and a subject registered in advance on an immigration management server; Comparing the biometric information and confirming a match, and the first biometric information authenticated in the first step and the bio-passport information of the user and the result confirmed in the second step to the immigration desk passed by the traveler Display and confirm the traveler's identity through the displayed information and the user's bio-passport to confirm whether or not the traveler has entered or exited. Article characterized in that it comprises a step of.

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the present invention.

2 illustrates a user identification system using biometric information according to an exemplary embodiment of the present invention. Referring to FIG. 2, the user identification system includes a mobile biometric terminal device 201, a traveler access approval device 202, a main server 211, a terminal device management server 212, a single biometric search server 213, It is configured to include a multi-organ fusion server (214).

Unlike FIG. 1, a traveler performs a biometric authentication and a search request through a terminal device 201 assigned to him / herself without having to wait for his / her immigration inspection order at the immigration desk, and the designated space (airport, Ports, etc.) within 200 can be used freely. In addition, more accurate identification results 215 can be expected through the multi-bio fusion server 214. In addition, it is possible to efficiently manage and control the traveler while being able to exchange necessary data with the traveler terminal device 201 through the terminal device management server 212.

3 is a block diagram of a user identification system using biometric information according to an embodiment of the present invention. Referring to FIG. 3, the multi biometric search system includes a mobile biometric terminal device 300, a multi biometric search system 310, and a user access approval device 320.

The multi-bio terminal device 300 may include a biometric acquisition module, a bio passport reader, a SAM for a terminal device, an RFID module, and the like as a terminal device that a traveler can carry.

The multi-bial search system 310 may include a terminal device management server 311, the main server 312, the fusion server 313, the search server 314 and the like.

The user access approval device 320 may include an access determination module and the like. The access determination module may be configured to use a user by using data received from the multi-bio retrieval system 310 and data received from the multi-bio terminal device 300. Determining whether or not to allow access.

Figure 4 is a block diagram of a mobile biometric terminal device according to an embodiment of the present invention. Referring to FIG. 4, the mobile biometric terminal device 300 includes a message transmission / reception module 400, a display module 410, a main control unit 420, a bio acquisition module 430, an RFID module 440, and a terminal device. SAM 450, bio-Passport reader 460, speakers and vibration module 470 is configured to include.

The message transmitting and receiving module 400 performs a function of transmitting and receiving a message wirelessly with the terminal device management server. For example, the wireless LAN device and the communication software according to the same.

The display module 410 is configured with a device and software that can display simple messages and pictures, and provide travelers with the necessary information.

The main control unit 420 drives a mobile biometric terminal device operating system (OS) and performs tasks required for each module included in the mobile biometric terminal device to operate smoothly.

The biometric module 430 includes tasks such as preprocessing and feature information extraction on biometric information obtained by a device (fingerprint sensor, face acquisition camera, iris camera, etc.) for obtaining biometric information of a traveler.

The RFID module 440 performs a function of delivering the biometric passport information and the terminal authentication code received from the terminal device management server through an external RFID reader. The RFID module operates only for a predetermined time after the user successfully performs biometric authentication, and does not operate at other times.

In addition, the low frequency (30kHz to 500kHz) band is used to prevent information acquisition at a long distance. This restriction prevents the acquisition of biometric passport information and terminal authentication codes by anyone who is illegal at a place other than the examination desk.

The terminal 450 for the terminal device may have a unique mechanism for authenticating the biopassport (the biopassport may be a passport issued by a legitimate issuer. Therefore, the terminal 450 may include a function thereof). It performs communication key generation function to protect the back. Each terminal device has a unique SAM number, and each SAM has a unique secret information (key for generating a communication key, etc.).

The bio passport reader 460 is a module for communicating with the bio passport, and performs a function of exchanging necessary information with the bio passport in a contact or contactless manner.

The speaker and vibration module 470 performs a function of informing the traveler to confirm when a message to be transmitted to the traveler is received.

5 is a block diagram of a terminal device management server according to an exemplary embodiment of the present invention. Referring to FIG. 5, the terminal device management server 311 includes an interface module 500 capable of communicating with a mobile biometric terminal device, a terminal management module 510, a terminal device management SAM 520, and a multi-biometric search main. And a communication module 540 in communication with the server 312.

The interface module 500 transmits and receives a message (biometric information, biometric passport information, terminal device information, search completion information, examination table information, terminal authentication code, etc.) with the mobile biometric terminal device.

The terminal management module 510 is for managing mobile biometric terminal devices registered in the terminal device management server. Information required for upgrading, environment initialization, terminal device unique number, and SAM authentication for a terminal is required for each terminal device. Store, manage, etc.

In addition, the mobile biometric terminal device may include a function of frequently identifying a moving pattern of the mobile biometric terminal device or delivering the appropriate examination table information (the examination table near the current location of the user, the examination table with a small number of waiting parties) to the terminal device after the search is completed. Can be.

The terminal device management SAM 520 authenticates the terminal device SAM 450, modifies / modifies information registered in the terminal device SAM, and performs a function for generating a secure communication key with the terminal device.

The communication module 530 transmits first biometric information obtained from the traveler by communicating with the multi biometric search main server to request a multi biometric search.

6 is a block diagram of a main server according to an exemplary embodiment of the present invention. Referring to FIG. 6, the multi-biological search main server 312 is a search server management module 600 for managing search servers performing a single biometric search, a terminal device management server 311 / fusion server 313, and a search server. A communication module 610 for communicating with the 314, an asynchronous search result processing module 620 for receiving the search results from the respective search servers and performing appropriate post-processing thereon; It comprises an interface module 630 for communication, a search request queue management module 640 for managing the multi-bio search request queue 650, and a terminal authentication code generation module 660.

The search server management module 600 always grasps the current state of a plurality of registered search servers, and provides a list of search servers capable of performing a search operation. Each search server partially divides the whole bio feature set (ie, all bio information registered in the multi biometric search system 310) for the registered persons for distribution of search workload and efficiency (biotype, bioclassification). Code and the size of the set), the search server management module should be able to provide information about it to the search request queue management model 640.

The communication module 610 performs a function of coordinating a multi-bio search task by communicating with a search server, a fusion server, and a terminal device management server, and includes a function of converting data to be provided to each server into an exchangeable standard data format. do.

The asynchronous search result processing module 620 receives all the search results of the search servers and performs necessary post-processing tasks (sorting the entire search results by reference values, granting levels according to similarities, etc.) When the information includes a plurality of biometric information, it performs a function of request processing to the multi-bio convergence server for the fusion processing for a single bio search results.

The user access approval device interface module 630 transmits a single biosearch result or a fusion result of a multi-bio fusion server and a terminal authentication code to a user access approval unit.

The search request queue management module 640 registers the multi-bio search request from the terminal management server to the search request queue 650 and performs the search request operation based on the search server information received from the search server management module 600. Split the search request (for example, if you have 10 search servers, you can run one search request on 10 servers at the same time) and run the search request at the appropriate time (for example, if the search server is waiting). It performs the function of delivering to search servers.

The terminal authentication code generation module 660 generates a terminal authentication code through the user's passport information or terminal unique information. A code for correlating a specific terminal device with a specific traveler and a search result for the specific traveler may correspond to a bio passport or a forgery of the terminal device.

7 is a flowchart illustrating a process in which a traveler receives a final identification result and receives final immigration approval according to an exemplary embodiment of the present invention.

The user terminal (S700) receives and authenticates the traveler's multi-biological information, and the system (S710) searches the biometric information of the subject list of interest, compares the similarity with the authenticated multi-biological information, and then authenticates the terminal for the comparison. The code is generated and the screening unit (S720) uses the comparison result and the terminal authentication code to approve the final entry and exit of the traveler.

In the user stage (S700), the traveler is authenticated by inputting the multi biometric information, and in the system stage (S710), the biometric information of the subject list of interest is searched and compared with the multi-biometric information to generate a terminal authentication code, and then the screening stage. In operation S720, the final immigration approval of the traveler is made using the comparison result.

8 is a flowchart schematically illustrating a step in which a traveler directly performs biometric authentication and requests to search for biometric information according to an exemplary embodiment of the present invention.

When a traveler receives a mobile biometric terminal device and connects his or her own biometric passport with the mobile biometric terminal device (inserted in the case of a contact biometric passport, and in the case of a non-contact type, the biometric passport is located at a short distance from the mobile biometric terminal device). ), The SAM of the mobile biometric terminal device and the smart card of the bio passport are mutually authenticated through the bio passport (S800).

If the mutual authentication is successful, the mobile biometric terminal device obtains the traveler biometric template (biocharacteristic or biometric image information) and passport information registered in the biopassport through the biopassport reader (S810). The traveler registers his / her biometric information through the biometric information acquisition sensor of the mobile biometric terminal device according to the usage method displayed on the mobile biometric terminal device. After the registered biometric information image is preprocessed, the biometric information feature is extracted (S820).

The bio features obtained from the biometric passport and the bio features extracted from the biometric information acquisition sensor are compared in the main control unit or SAM (when an independent biometric routine is possible) through a biometric authentication algorithm suitable for each biometric characteristic ( S830).

If the comparison is successful (as defined in the bioauthentication algorithm), the traveler's mobile biometric terminal device is connected to the terminal device management server through a message transmission / reception module, and the terminal device SAM and the management server SAM mutually authenticate (S840).

If the mutual authentication is successful, the terminal device is the extracted bio-characteristics (the biometric authentication performed in step S830 is a method for confirming that the biometric information to be used for biometric search is the biometric information of the bio-passport holder), passport information, and terminal information. After encrypting with the help of the SAM for the terminal device, and transmits to the terminal device management server (S850).

The terminal device management server decrypts the encrypted information, generates a multi-bio search request message based on the decrypted information, transmits the multi-bio search main server, and registers a search request received from the multi-bio search main server. To transmit to the terminal device (S860).

9 is a flowchart schematically illustrating a step of performing a biometric information search, fusing a search result, and transmitting the result according to an exemplary embodiment of the present invention.

Receiving the multi-bio search request and searching for the single bio-information of the registered subject list for each of the traveler's individual bio-information (S900) and after the bio-search for each individual bio-information is completed, multi-bio search convergence The step (S910) of implementing the step, delivering the result of the convergence, etc. to the workstation (traveller access approval device) of the specific inspection station after the multi-bio search convergence and the step (S920) to pass the information necessary for the access examination to the terminal device of the traveler Illustrated.

The multi biometric search main server checks whether the traveler's biometric information requested through the search request queue management module is suitable for the search and, if appropriate, searches the necessary search servers according to the characteristic information of the biometric information and the number of biometric information. The biometric information is transmitted to selected and selected search servers through a management module to request a search (S900).

At this time, the search transaction number is delivered together, so that the asynchronous search result processing module can manage / process the search result in the corresponding transaction according to the search transaction number. When the asynchronous search result processing module determines that all of the biosearch jobs requested in the transaction have been completed, and there is more than one biometric information used in the search transaction, the multi-fusion convergence server sends the individual search results in the transaction. Request to derive one fusion result by fusion (S910).

When the fusion operation is completed, the comparison level is determined according to the fusion result, the terminal authentication code is generated, and the determination level information and the terminal authentication code are transmitted to a user access approval device of a specific examination table, and at the same time the user access approval device Information (for example, the examination station number, examination station location, etc.) and the terminal authentication code is transmitted to the traveler's mobile biometric terminal device through the terminal device management server (S920).

In step S920, the terminal authentication code is generated by using traveler's passport information, terminal device information, search transaction information, and the like, and is defined as a secure code that a traveler or an illegal agent cannot guess using any specific device or method. .

Since the traveler's mobile biometric terminal device is not a device that is protected under the supervision of an administrator, but is a device that is loaned to a traveler for a specific time, generation and management of the terminal authentication code is important for the safe operation of the present invention. The procedure for confirming the terminal authentication code varies depending on the method of generating the terminal authentication code, but it is preferable to include the step of confirming passport information and search transaction information through the terminal authentication code.

FIG. 10 is a flowchart schematically illustrating the final determination of a traveler's entry / exit according to a preferred embodiment of the present invention.

The final determination of the entry / exit of the traveler based on the information transmitted in step S920 is shown.

The traveler performs the multi-biometric work at the immigration finalization stage as described in FIG. 8 (S800 to S840) (S1000). If the traveler's multiple biometric authentication succeeds (authentication in step S840 is necessary to confirm that the biometric information to be used for the search is the biometric information of the traveler, authentication in step S1000 is required for the traveler in front of the examiner and his / her terminal device and biopassport). Is necessary to confirm the authentication using the terminal), the traveler's mobile biometric terminal device activates the RFID module for a predetermined time, and the RFID module authorizes the user access to the terminal authentication code and the bio passport information described in step S920. Send to the device (S1010).

The user access approval apparatus checks the transmitted terminal authentication code using the terminal authentication code transmitted in step S920 and then displays the fusion result and the bio passport information transmitted in step S920 on the display device of the immigration officer. (S1020). The immigration officer is based on the displayed convergence result information (such as face photo information of people registered in the list of persons of interest similar to the biometric information of the traveler) and passport information (such as the face image of the traveler) registered in the traveler's bio passport. Allows (or disallows) entry and exit of travelers (S1030).

The invention can also be embodied as computer readable code on a computer readable recording medium. Computer-readable recording media include any type of recording device that stores data that can be read by a computer system. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, and floppy. Disks, optical data storage, and the like, and also include those implemented in the form of carrier waves (eg, transmission over the Internet). The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

The best embodiments have been disclosed in the drawings and specification above. Although specific terms have been used herein, they are used only for the purpose of describing the present invention and are not used to limit the scope of the present invention as defined in the meaning or claims. Therefore, those skilled in the art will understand that various modifications and equivalent other embodiments are possible from this. Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

According to the present invention, a traveler who has to undergo an immigration check including multiple biometric screening can personally utilize the time required for biometric screening during the immigration screening process. It offers the advantage of going fast.

According to the present invention, examiners and supervisors who perform immigration inspections including multiple biometric searches, while more strongly checking the identity of travelers entering and leaving through multiple biometric searches, during the identification time (traveling device) It can identify and supervise movement patterns in designated places, efficiently allocate the number of travelers entering and leaving each auditorium, and greatly simplify the screening process of immigration officers.

In addition, according to the present invention, since the original biometric image information obtained from the traveler is used only in the mobile biometric terminal, the original biometric image information of the traveler is exposed to another system or device, thereby minimizing the risk of personal privacy being infringed. That provides the benefits.

Claims (11)

A mobile biometric terminal unit for authenticating the first biometric information by comparing the first biometric information input from a user with the second biometric information registered in the biometric passport; A mobile biometric terminal management unit configured to receive and decrypt the first biometric information from the mobile biometric terminal in an encrypted message; A main search unit for comparing the first biometric information transmitted from the mobile biometric terminal management unit with biometric information about a registered person and confirming a match; And And a user access approval unit configured to display the second biometric information registered in the bio passport and information on whether the main search unit matches at the examination table through which the user passes, to confirm the user. User identification device used. The method of claim 1, And the main search unit compares the first biometric information with biometric information about a registered person to determine whether there is a match, and determines a level according to a degree of similarity. The method of claim 1, wherein the mobile biometric terminal unit A biometric information acquisition unit for detecting first biometric information of the user; A biometric passport reader for contacting or contactlessly contacting the biometric passport of the user to read second biometric information and passport information registered in the biometric passport; A SAM (Secure Access Module) for transmitting and receiving an encrypted message with the mobile biometric terminal management unit; And And a terminal for transmitting an encrypted terminal authentication code using the passport information, the terminal unit, the user, and a search result for the user. According to claim 1, wherein the mobile biometric terminal management unit A management unit SAM capable of authenticating the terminal SAM or transmitting and receiving an encrypted message with the mobile biometric terminal; And A user using the biometric information, characterized in that it comprises a management unit for identifying the movement pattern of the mobile biometric terminal unit or the identification of the main search unit and transmits the examination table information to the user to pass through the mobile biometric terminal unit; Identification device. The method of claim 1, wherein the main search unit A biometric information searcher which compares the biometric information of the first biometric information and a registered person; A biometric information fusion unit configured to search for biometric information by fusing each comparison result of the biometric information search unit according to a predetermined fusion method when the first biometric information is two or more; A biometric information determination unit determining a level based on a degree of matching through a comparison result of the biometric information search unit or a search result of the biometric information fusion unit; and And a terminal authentication code generation unit for generating a terminal authentication code using the user identification information including the user's passport information and the terminal unit's unique information. The method of claim 1, wherein the user access approval unit A terminal reader unit for communicating with the mobile biometric terminal unit to read passport information and terminal authentication code; An access judging unit for checking a terminal authentication code read from the terminal reader unit and a terminal authentication code received from the main search unit; And And a display unit for displaying passport information read from the terminal reader unit and information on the search result delivered from the main search unit. (a) receiving the first biometric information and the second biometric information registered in the bio passport through a terminal provided to the user, and comparing the first biometric information with the second biometric information to authenticate the first biometric information; (b) comparing the authenticated first biometric information received from the terminal with biometric information about a person already registered on the main server to confirm whether there is a match; And (c) identifying the user by displaying the first biometric information authenticated in the step (a) and the result confirmed in the step (b) on the examination table through which the user passes. User identification method using information. The method of claim 7, wherein step (a) Obtaining at least one first biometric information of the user and extracting a biometric feature from the first biometric information; Obtaining one or more pieces of second biometric information registered in the biometric passport of the user and comparing the extracted biometric features with the extracted biometric feature; And Authenticating the first biometric information of the user when the sameness is recognized as the result of the comparison. 8. The method of claim 7, wherein step (b) A first comparison step of comparing biometric characteristics of the first biometric information with biometric information of a person previously registered on the main server; A second comparison step of comparing the biometric information by fusing the comparison result of each of the first biometric information according to a predetermined fusion method when the first biometric information is two or more; Determining a level according to a degree of agreement through a comparison result of the first or second comparison step; Generating a terminal authentication code using user identification information including passport information of the user and unique information of the terminal unit; And And transmitting the determined level and the generated terminal authentication code to the examination table or the terminal. 8. The method of claim 7, wherein step (c) Displaying the bio-passport information and the terminal authentication code of the user and the result confirmed in the step (b); Checking whether the terminal authentication code is the same as the terminal authentication code received from the main server; And confirming the identity of the user through the displayed information and the bio passport information of the user. A first step of receiving first biometric information and second biometric information registered in a bio passport through a terminal provided to a traveler, and comparing the first biometric information with the second biometric information to authenticate the first biometric information; A second step of comparing whether the authenticated first biometric information received from the terminal and the biometric information of the subject of interest registered on the immigration management server are matched; And The first biometric information authenticated in the first step, the bio passport information of the user, and the result confirmed in the second step are displayed on the immigration desk through which the traveler passes, so that the displayed information and the bio passport of the user are displayed. And a third step of confirming the identity of the traveler and approving the entry / exit of the traveler.

Images