WO2009153846A1

WO2009153846A1 - Authentication system, registration device, and authentication device

Info

Publication number: WO2009153846A1
Application number: PCT/JP2008/060948
Authority: WO
Inventors: 鋭志林
Original assignee: 三菱電機株式会社
Priority date: 2008-06-16
Filing date: 2008-06-16
Publication date: 2009-12-23

Abstract

An authentication system comprises a biometrics information reading means for reading biometrics information, a feature quantity extracting means for extracting a feature quantity from the biometrics information, a secret information generating means for generating secret information, an encryption key generating means for generating an encryption key from the feature quantity extracted by the feature quantity extracting means, an encrypting means for encrypting the secret information with the encryption key to generate encrypted secret information, an authentication information storing means for storing the secret information and the encrypted secret information, a decryption key setting means for generating a decryption key from the feature quantity extracted by the feature quantity extracting means, a decrypting means for decrypting the encrypted secret information with the decryption key to generate decrypted secret information, and a comparing means for comparing the secret information and the decrypted secret information.

Description

Authentication system, registration device, and authentication device

The present invention relates to an authentication system, a registration device, and an authentication device, and more particularly to an authentication system, a registration device, and an authentication device that enable biometric authentication without leaking biometric information.

Conventionally, biometric authentication that performs authentication based on user biometric information has been used as a simple and highly secure user authentication method. In this biometric authentication, a method of previously registering user biometric information for authentication is known. Japanese Patent Application Laid-Open No. 5-290149 discloses a system for preventing the outflow of biometric information in biometric authentication of such a method. In this system, biometric information is encrypted and registered in a storage device, and this registration information is decrypted and verified with biometric information during authentication.

Japanese Unexamined Patent Publication No. 5-290149

In the above-described method, even when information registered in the storage device leaks, only the encrypted biometric information leaks. However, the encrypted biometric information may be decrypted by a decryption technique such as a brute force attack. For this reason, the above-described method cannot completely prevent leakage of biometric information.

The present invention has been made to solve the above-described problems, and an object thereof is to prevent leakage of user biometric information in biometric authentication.

In order to achieve the above object, the first invention is an authentication system capable of selectively selecting, as an operation mode, a registration mode for registering biometric information and an authentication mode for authenticating biometric information. Biometric information reading means for reading biometric information, feature quantity extracting means for extracting feature quantities from the byte metrics information, secret information generating means for generating secret information in the case of the registration mode, and the registration In the case of the mode, an encryption key generating means for generating an encryption key from the feature quantity extracted by the feature quantity extracting means, and in the case of the registration mode, the secret information is encrypted with the encryption key, Encryption means for generating encrypted secret information, and storing the secret information and the encrypted secret information in the case of the registration mode Certificate information storage means, decryption key generation means for generating a composite key from the feature quantity extracted by the feature quantity extraction means in the authentication mode, and the composite key in the authentication mode. Decrypting means for decrypting the encrypted secret information to generate composite secret information, and comparing means for comparing the secret information with the decrypted secret information in the authentication mode. It is characterized by.

In order to achieve the above object, the second invention is a registration device, comprising biometric information reading means for reading biometric information, feature quantity extracting means for extracting feature quantities from the byte metrics information, and secret information. Secret information generating means for generating, encryption key generating means for generating an encryption key from the feature quantity, encryption means for generating the encrypted secret information by encrypting the secret information with the encryption key, It is characterized by providing.

In order to achieve the above object, a third invention is an authentication apparatus, which is an authentication information fetching unit for fetching secret information and encrypted secret information, a biometric information reading unit for reading biometric information, and the byte metrics. A feature amount extracting means for extracting a feature amount from the information; a decryption key generating means for generating a decryption key from the feature amount; and decrypting the encrypted secret information with the composite key to obtain the composite secret information It comprises a decryption means to be generated, and a comparison means for comparing the secret information with the decryption secret information.

According to the present invention, it is possible to prevent leakage of user biometric information in biometric authentication.

It is a figure which shows the structure of the authentication system which concerns on Embodiment 1 of this invention. It is a figure which shows the flowchart of the authentication system which concerns on Embodiment 1 of this invention. It is a figure which shows the structure of the authentication system which concerns on Embodiment 2 of this invention. It is a figure which shows the flowchart of the authentication system which concerns on Embodiment 2 of this invention.

Explanation of symbols

10; 46 Registration terminal 12; 48 Authentication information storage device 14; 50 Authentication terminal 16; 52 Dedicated line 18; 54, 34; 74 Biometric information reading unit 20; 56, 36; 76 Feature quantity extraction unit 22 Encryption unit 24 60 Numerical value sequence generation unit 28; 68 Numerical value sequence 30 Encrypted numerical value sequence 32; 72 Personal authentication information 38 Decoding unit 40; 84 Comparison unit 58; 78 Feature quantity division unit 62 Numerical value sequence division unit 64 Numerical value sequence fragment encryption unit 70 Encrypted Numeric Sequence Fragment 80 Numeric Sequence Fragment Decoding Unit 82 Numeric Sequence Restoration

Embodiments according to the present invention will be described below in detail with reference to the drawings. In addition, this invention is not limited by this embodiment.

Embodiment 1 FIG.
Embodiment 1 of the present invention relates to an authentication system that authenticates a user based on the user's biometric information. The authentication system according to the first embodiment can prevent the user's biometric information from leaking outside the system. Below, the outline | summary of the authentication system which concerns on this Embodiment 1, and the outline | summary of the process in the system are demonstrated.

[Outline of Authentication System of Embodiment 1]
An outline of the authentication system according to the first embodiment is shown in FIG. As shown in FIG. 1, the authentication system includes a registration terminal 10, an authentication information storage device 12, and an authentication terminal 14. The registration terminal 10 is connected to the authentication information storage device 12 through a dedicated line 16 and can communicate with the authentication information storage device 12. The authentication information storage device 12 is connected to the authentication terminal 14 via a dedicated line 16 and can communicate with the authentication terminal 14. The outline | summary of each terminal mentioned above and an apparatus is demonstrated below.

First, the registration terminal 10 includes a biometric information reading unit 18, a feature amount extraction unit 20, an encryption unit 22, and a numerical string generation unit 24. In the registration terminal 10, the biometric information reading unit 18 reads the biometric information of the system user. The biometric information reading unit 18 is connected to the feature amount extraction unit 20. The feature amount extraction unit 20 extracts a feature amount from the read biometric information. The feature quantity extraction unit 20 is connected to the encryption unit 22. On the other hand, the numerical sequence generator 24 generates a numerical sequence 28. The numerical string generation unit 24 is also connected to the encryption unit 22. The encryption unit 22 encrypts the numerical sequence 28 generated by the numerical sequence generation unit 24 with the feature amount extracted by the feature amount extraction unit 20 to generate an encrypted numerical sequence 30. Then, the registration terminal 10 transmits the numerical value sequence 28 and the encrypted numerical value sequence 30 to the authentication information storage device 12.

The authentication information storage device 12 receives the numerical value sequence 28 and the encrypted numerical value sequence 30 transmitted from the registration terminal 10 as described above. Then, the authentication information storage device 12 stores the numerical value sequence 28 and the encrypted numerical value sequence 30 as the personal authentication information 32. The authentication information storage device 12 transmits the stored personal authentication information 32 to the authentication terminal 14.

The authentication terminal 14 includes a biometric information reading unit 34, a feature amount extraction unit 36, a decoding unit 38, and a comparison unit 40. In the authentication terminal 14, a biometric information reading unit 34 reads biometric information of the system user. The biometric information reading unit 34 is connected to the feature amount extraction unit 36. The feature quantity extraction unit 36 extracts a feature quantity from the read biometric information. The feature quantity extraction unit 36 is connected to a decoding unit 38. Further, the authentication terminal 14 receives the personal authentication information 32 transmitted from the authentication information storage device 12 as described above. Then, the decryption unit 38 decrypts the encrypted numerical sequence 30 in the personal authentication information 32 using the feature amount extracted by the feature amount extraction unit 36 to generate a decrypted numerical sequence. The decryption unit 38 is connected to the comparison unit 40. The comparison unit 40 compares the composite numeric value sequence generated by the decryption unit 38 with the original numeric value sequence 28 in the personal authentication information 32.

[Outline of Processing of Authentication System of Embodiment 1]
Next, an outline of processing of the authentication system according to the first embodiment will be described below. FIG. 2 is a flowchart for explaining the processing flow of the authentication system according to the first embodiment. FIG. 2 shows the flow of processing in the above-described registration terminal 10, authentication information storage device 12, and authentication terminal 14, and the relationship between these processes. Below, the flow of these processes and the relationship between processes are demonstrated.

In the authentication system according to the first embodiment, the user registers in advance information used for verification at the time of authentication. In this case, first, the user inputs his / her biometric information via the biometric information reading unit 18 of the registration terminal 10 (step S101). Next, the feature quantity extraction unit 20 extracts the feature quantity from the biometric information input in step S101 (step S102). At this time, for example, when the biometric information reading unit 18 is a fingerprint scanner, the biometric information reading unit 18 reads a fingerprint image, and the feature amount extraction unit 20 extracts information on feature points of the fingerprint image. Next, the numerical sequence 28 is generated by the numerical sequence generator 24 (step S103). Next, in the encryption unit 22, the numerical value sequence 28 generated in step S103 is encrypted with the feature amount extracted in step S102, and an encrypted numerical value sequence 30 is generated (step S104). Next, the registration terminal transmits the set of the numerical value sequence 28 generated in step S103 and the encrypted numerical value sequence 30 generated in step S104 to the authentication information storage device 12 as personal authentication information 32 (step S105). . Then, the personal authentication information 32 transmitted from the registration terminal 10 is stored in the authentication information storage device 12 (step S106).

Next, the flow of processing when the user performs authentication will be described with reference to FIG. When the user performs authentication, first, his / her biometric information is input via the biometric information reading unit 34 of the authentication terminal 14 (step S107). Next, the feature quantity extraction unit 36 extracts the feature quantity from the biometric information input in step S107 by the same method as in step S102 (step S108). Next, the authentication terminal 14 requests the authentication information storage device 12 to transmit the personal authentication information 32 to the authentication terminal 14 (step S109). Based on this request, the authentication information storage device 12 transmits the personal authentication information 32 to the authentication terminal 14 (step S110). Then, the decryption unit 38 of the authentication terminal 14 decrypts the encrypted numerical sequence 30 included in the personal authentication information 32 transmitted in step S110 by the feature amount extracted in step S108, and decrypts the decrypted value. A numerical string is generated (step S111). Next, the comparison unit 40 compares the numerical value sequence 28 included in the personal authentication information 32 transmitted in step S110 with the composite numerical value sequence generated in step S111 (step S112).

In this comparison, the encrypted numerical sequence 30 is obtained by encrypting the numerical sequence 28 that is one of the comparison targets with the feature amount extracted in step S102. The composite numeric value sequence that is the other comparison target is obtained by decrypting the encrypted numeric value sequence 30 with the feature amount extracted in step S108. Therefore, when the numerical sequence 28 to be compared and the composite numerical sequence match, the feature amount extracted in step S102 matches the feature amount extracted in step S108. That is, the biometric information input to the registration terminal by the user in step S101 coincides with the biometric information input to the authentication terminal by the user in step S107, and it is determined that the user is valid. . On the other hand, if the numerical sequence 28 to be compared does not match the composite numerical sequence, it is determined that the user is not valid.

In this authentication system, user authentication is realized by the above processing. Note that the information stored in the authentication system in the above processing is only the personal authentication information 32 stored in step S106. The personal authentication information 32 includes only a numerical sequence 28 that is not related to biometric information and an encrypted numerical sequence 30 obtained by encrypting the numerical sequence 28.

[Effect of Embodiment 1]
As described above, the information registered in the authentication system according to the first embodiment includes only the numerical value sequence 28 that is not related to the user's biometric information and the encrypted numerical value sequence 30 obtained by encrypting the information. is there. Therefore, even if the registration information of this authentication system is leaked, the user's biometric information is not leaked.

[Modification of Embodiment 1]
In the authentication system according to the first embodiment, a dedicated line 16 is used as a communication line between each terminal and device. The communication line between each terminal and apparatus in the first embodiment is not limited to the dedicated line 16. The communication line between each of these terminals and devices may be either a signal line or a public telephone line network, whether wired or wireless. Further, communication between these terminals and devices may be performed by an IP network such as the Internet constructed on a communication line. The above-described modifications can be applied to the other embodiments described below.

The authentication system according to the first embodiment includes a registration terminal 10 and an authentication terminal 14 separately. The authentication system according to the first embodiment is not limited to this. The registration terminal 10 and the authentication terminal 14 may be a single terminal. In this case, one biometric information reading unit and feature amount extraction unit can be used in common during registration and authentication. The above-described modifications can be applied to the other embodiments described below.

In the authentication system according to the first embodiment, the authentication information storage device 12 is provided separately from the registration terminal 10 and the authentication terminal 14. The authentication system according to the first embodiment is not limited to this. The authentication information storage device 12 may be combined with the registration terminal 10 and the authentication terminal 14 as one device. Alternatively, the above-described registration terminal 10 and authentication terminal 14 may be combined with the authentication information storage device 12 to form one device. The above-described modifications can be applied to the other embodiments described below.

In the authentication system according to the first embodiment, the numerical sequence 28 generated by the numerical sequence generation unit 24 may use a different numerical sequence for each user, or a fixed numerical sequence. In addition, the numerical value sequence generation unit 24 may generate the numerical value sequence 28 at random, or may generate it based on a certain calculation formula. The above-described modifications can be applied to the other embodiments described below.

Embodiment 2. FIG.
The second embodiment of the present invention relates to an authentication system that authenticates a user based on the user's biometric information. The authentication system according to the second embodiment can stably authenticate a user even when an error such as noise mixing occurs in biometric information read at the time of authentication. Below, the outline | summary of the authentication system which concerns on this Embodiment 2, an authentication method, and the outline | summary of the process in the system are demonstrated.

[Outline of Authentication System of Embodiment 2]
An outline of the authentication system according to the second embodiment is shown in FIG. As shown in FIG. 3, this authentication system includes a registration terminal 46, an authentication information storage device 48, and an authentication terminal 50, as in the first embodiment. The registration terminal 46 is connected to the authentication information storage device 48 through a dedicated line 52 and can communicate with the authentication information storage device 48. The authentication information storage device 48 is connected to the authentication terminal 50 through a dedicated line 52 and can communicate with the authentication terminal 50. The outline | summary of each terminal mentioned above and an apparatus is demonstrated below.

First, the registration terminal 46 includes a biometrics information reading unit 54, a feature amount extraction unit 56, a feature amount division unit 58, a numerical sequence generation unit 60, a numerical sequence division unit 62, and a numerical sequence fragment encryption unit 64. In the registration terminal 46, the biometric information reading unit 54 reads the biometric information of the system user. The biometric information reading unit 54 is connected to the feature amount extraction unit 56. The feature amount extraction unit 56 extracts feature amounts from the read biometric information. The feature quantity extraction unit 56 is connected to the feature quantity division unit 58. The feature amount dividing unit 58 divides the above-described feature amount to generate the first to Nth feature amount fragments (N is an integer equal to or greater than 2; the same applies hereinafter). The feature amount dividing unit 58 is connected to the numerical value string fragment encrypting unit 64. On the other hand, the numerical sequence generator 60 generates a numerical sequence 68. The numerical sequence generator 60 is connected to the numerical sequence divider 62. The numerical value string dividing unit 62 divides the numerical value string 68 using a so-called secret sharing method (details will be described in [Authentication Method of Authentication System of Second Embodiment], which will be described later), and the above-described feature value fragment. The first to Nth numerical value string fragments of the same number as are generated. Further, the feature amount dividing unit 58 and the numerical sequence dividing unit 62 are connected to the numerical sequence fragment encrypting unit 64. Then, the numerical sequence fragment encryption unit 64 encrypts the numerical sequence fragments in the same order with the first to Nth feature amount fragments, and the first to Nth encrypted numerical sequence fragments 70 are obtained. Generate. Then, the registration terminal 46 transmits the above-described numerical sequence 68 and the first to Nth encrypted numerical sequence fragments 70 to the authentication information storage device 48.

The authentication information storage device 48 receives the numerical value sequence 68 and the first to Nth encrypted numerical value value fragments 70 transmitted from the registration terminal 46 as described above. Then, the authentication information storage device 48 stores the numerical value sequence 68 and the encrypted numerical value sequence fragment 70 as the personal authentication information 72. Further, the authentication information storage device 48 transmits the stored personal authentication information 72 to the authentication terminal 50.

The authentication terminal 50 includes a biometric information reading unit 74, a feature amount extraction unit 76, a feature amount division unit 78, a numerical sequence fragment decoding unit 80, a numerical sequence restoration unit 82, and a comparison unit 84. In the authentication terminal 50, the biometric information reading unit 74 reads the biometric information of the system user. The biometric information reading unit 74 is connected to the feature amount extraction unit 76. The feature amount extraction unit 76 extracts feature amounts from the read biometric information. The feature quantity extraction unit 76 is connected to the feature quantity division unit 78. The feature amount dividing unit 78 divides the feature amount to generate No. 1 to N-th feature amount fragments. The feature amount dividing unit 78 is connected to the numerical sequence fragment decoding unit 80. Further, the authentication terminal 50 receives the personal authentication information 72 transmitted from the authentication information storage device 48 as described above. Then, the numerical sequence fragment decrypting unit 80 decrypts the encrypted numerical sequence fragments 70 in the same order in the personal authentication information 72 by using the 1st to Nth feature amount fragments, respectively. Nth decrypted numerical sequence fragment is generated. The numerical sequence fragment decoding unit 80 is connected to the numerical sequence restoration unit 82. The numerical value sequence restoration unit 82 tries to restore the original numeric value sequence 68 from the first to Nth decoded numeric value sequence fragments, and generates a restored numeric value sequence. The numerical value string restoration unit 82 is connected to the comparison unit 84. The comparison unit 84 compares the restored numeric value sequence with the original numeric value sequence 68 in the personal authentication information 72.

[Authentication Method of Authentication System of Embodiment 2]
The authentication method of the authentication system according to the second embodiment will be specifically described below. As described above, in this authentication system, the numerical value sequence 68 is divided into the first to Nth numerical value sequence fragments using the secret sharing method. Then, the first to Nth numerical sequence fragments are encrypted with the feature amount fragments in the same order obtained from the biometric information input at the registration terminal, and an encrypted numerical sequence fragment 70 is generated. As the personal authentication information, a numerical value string 68 and first to Nth encrypted numerical value string fragments 70 are accumulated.

In the secret sharing method, when N pieces are generated by dividing certain information into N pieces, the information can be correctly restored from a specified number of pieces less than N of the N pieces. This is a technique for dividing the information. Therefore, since the numerical sequence 68 according to this authentication system is divided by the secret sharing method, the numerical sequence 68 is correctly restored from a specified number of numerical sequence fragments that is less than N.

In the numerical sequence fragment decrypting unit 80 of this authentication system, when the specified number of the first to Nth encrypted numerical sequence fragments 70 is decrypted as before, it is equal to the numerical sequence fragment. A specified number of decrypted numerical sequence fragments are obtained. For this reason, from the above, the restored numeric sequence restored from the decrypted numeric sequence fragment in the numeric sequence restoring unit 82 matches the original numeric sequence 68, and the authenticated user is valid. Determined. On the other hand, as described above, the designated number of the encrypted numerical value sequence fragments 70 is decrypted as before to be equal to or more than the designated number of the first to Nth feature amount fragments input at the authentication terminal. Means that it matches the feature value fragment input at the registration terminal. As for the above, if the identity within a certain error range can be confirmed between the biometric information read at the time of authentication and the biometric information read at the time of registration, the user who performed the authentication is valid. It means that it can be judged.

In the authentication system according to the second embodiment, the authentication method using the secret sharing method as described above is applied. As a result, stable authentication is performed even when an error such as noise mixing occurs in biometric information read at the time of authentication.

[Outline of Processing of Authentication System of Embodiment 2]
Next, an outline of processing of the authentication system according to the second embodiment will be described below. FIG. 4 is a flowchart for explaining the processing flow of the authentication system according to the second embodiment. FIG. 4 shows the processing flow of the registration terminal 46, the authentication information storage device 48, and the authentication terminal 50 described above, and the relationship between these processes. Below, the flow of these processes and the relationship between processes are demonstrated.

In the authentication system according to the second embodiment, the user registers in advance information used for verification at the time of authentication. In this case, first, the user inputs his / her biometric information via the biometric information reading unit 54 of the registration terminal 46 (step S101). Next, the feature quantity extraction unit 56 extracts the feature quantity from the biometric information input in step S101 (step S102). At this time, for example, when the biometric information reading unit 54 is a fingerprint scanner, the biometric information reading unit 54 reads a fingerprint image, and the feature amount extraction unit 56 extracts information on feature points of the fingerprint image. Next, the feature quantity dividing unit 58 divides the feature quantity extracted in step S102, and the first to Nth feature quantity fragments are generated (step S103). Next, the numerical sequence 68 is generated by the numerical sequence generator 60 (step S104). Next, the numerical value string dividing unit 62 divides the numerical value string 68 generated in step S10 4 using a so-called secret sharing method, and generates the first to Nth numerical value string fragments (step S105). Next, in the numerical sequence fragment encryption unit 64, the numerical sequence fragments in the same order generated in step S105 are encrypted by the first to Nth feature amount fragments generated in step S103, respectively. The 1st to Nth encrypted numerical value string fragments 70 are generated (step S106). Next, the registration terminal accumulates the authentication information as the personal authentication information 72 by combining the numerical sequence 68 generated in step S103 and the first to Nth encrypted numerical sequence fragments 70 generated in step S106. It transmits to the apparatus 48 (step S107). Then, the personal authentication information 72 transmitted from the registration terminal 46 is stored in the authentication information storage device 48 (step S108).

Next, the flow of processing when the user performs authentication will be described with reference to FIG. When the user performs authentication, first, the user's own biometric information is input via the biometric information reading unit 74 of the authentication terminal 50 (step S109). Next, the feature amount extraction unit 76 extracts feature amounts from the biometric information input in step S109 by the same method as in step S102 (step S110). Next, the feature amount dividing unit 78 divides the feature amount extracted in step S110 by the same method as in step S103, and generates the first to Nth feature amount fragments (step S111). Next, the authentication terminal 50 requests the authentication information storage device 48 to transmit the personal authentication information 72 to the authentication terminal 50 (step S112). Based on this request, the authentication information storage device 48 transmits the personal authentication information 72 to the authentication terminal 50 (step S113). Then, in the numerical value string fragment decrypting unit 80 of the authentication terminal 50, each of the first to Nth feature amount fragments generated in step S111 is included in the personal authentication information 72 transmitted in step S113. The encrypted numerical value sequence fragments 70 in the same order are decrypted, and the first to Nth decrypted numerical value sequences are generated (step S114). Next, the numerical sequence restoration unit 82 tries to restore the original numeric sequence 68 from the first to Nth decoded numeric sequence fragments generated in step S114, and a restored numeric sequence is generated (step S1). S115). Next, the comparison unit 84 compares the numerical value sequence 68 included in the personal authentication information 72 transmitted in step S110 with the restored numerical value sequence generated in step S111 (step S116).

In this comparison, if the numerical sequence 68 matches the restored numerical sequence, as described in [Authentication Method of Authentication System of Second Embodiment], the first to Nth decrypted numerical sequence fragments Of these, the specified number or more matches the original numeric string fragment. This means that the specified number or more of the first to Nth feature amount fragments generated in step S103 matches the feature amount fragments generated in step S111. Therefore, it is determined that the biometric information input to the registration terminal by the user in step S101 and the biometric information input to the authentication terminal by the user in authentication in step S109 are the same in consideration of errors. Thereby, it is determined that the user who has performed authentication is valid. On the contrary, if the numerical value sequence 68 and the restored numerical value sequence do not match, even if the biometric information input by the user to the registration terminal and the biometric information input by the user to the authentication terminal at the time of authentication take account of errors, It is determined that they do not match. As a result, it is determined that the user who has performed authentication is not valid.

In this authentication system, user authentication is realized by the above processing. Note that the information stored in the authentication system in the above processing is only the personal authentication information 72 stored in step S108. The personal authentication information 72 includes only a numerical sequence 68 that is not related to the biometric information and an encrypted numerical sequence fragment 70 that is encrypted after being divided.

[Effect of Embodiment 2]
As described above, in the authentication system according to the second embodiment, a part of the first to Nth feature amount fragments obtained by dividing the feature amount extracted from the biometric information is registered. Users are authenticated based on whether they match the feature fragment. For this reason, stable authentication can be performed even when an error such as noise mixing occurs in biometric information read at the time of authentication.

Further, in the authentication system according to the second embodiment, the secret sharing method is used, and if a part of the decrypted numerical sequence fragment matches the original numerical sequence fragment, the decrypted numerical sequence fragment is converted into the original. It is possible to generate a restored numeric sequence that is restored to the original numeric sequence. Then, the user is authenticated based on whether or not the restored numerical sequence matches the original numerical sequence. For this reason, stable authentication can be performed even when an error such as noise mixing occurs in biometric information read at the time of authentication.

[Modification of Embodiment 2]
In the authentication system according to the second embodiment, the numerical value sequence division unit 62 divides the numerical value sequence 68 using the secret sharing method. In the authentication system according to the second embodiment, the secret sharing method is not necessarily used. A method of simply dividing the numerical sequence 68 into numerical sequence fragments having the same number of digits may be employed. Even in this case, authentication can be performed by comparing the decrypted numerical sequence fragment with the numerical sequence fragment obtained by simply dividing the original numerical sequence 68 into the same number of digits.

An authentication system that enables biometric authentication without leaking biometric information can be used.

Claims

As an operation mode, an authentication system capable of selectively selecting a registration mode for registering biometric information and an authentication mode for authenticating biometric information,
Biometric information reading means for reading biometric information;
Feature quantity extraction means for extracting feature quantities from the byte metrics information;
Secret information generating means for generating secret information in the case of the registration mode;
An encryption key generating means for generating an encryption key from the feature quantity extracted by the feature quantity extracting means in the case of the registration mode;
Encryption means for encrypting the secret information with the encryption key and generating encrypted secret information in the case of the registration mode;
Authentication information storage means for storing the secret information and the encrypted secret information in the case of the registration mode;
Decryption key generation means for generating a composite key from the feature quantity extracted by the feature quantity extraction means in the case of the authentication mode;
Decrypting means for decrypting the encrypted secret information with the decryption key to generate decrypted secret information in the authentication mode;
Comparison means for comparing the secret information with the decrypted secret information in the authentication mode;
An authentication system comprising:
The encryption key generation means uses the feature amount extracted by the feature amount extraction means as the encryption key;
The authentication system according to claim 1, wherein the composite key generation unit uses the feature amount extracted by the feature amount extraction unit as the decryption key.
Feature amount dividing means for dividing the feature amount extracted by the feature amount extracting means to generate first to Nth (N is an integer of 2 or more) feature amount fragments;
Secret information dividing means for dividing the secret information to generate the first to Nth secret information fragments in the case of the registration mode;
With
The encryption key generating means sets each of the first to Nth feature amount fragments generated by the feature amount dividing means as a fragment encryption key in the same order, and from the first to the Nth The fragment encryption key is used as the encryption key,
The encryption means encrypts the secret information fragments in the same order with each of the first to Nth fragment encryption keys, and uses the first to Nth ciphers as the encrypted secret information. A secret information fragment,
The authentication information storage means stores the first to Nth encrypted secret information fragments as the encrypted secret information;
The composite key generation means sets each of the first to Nth feature amount fragments generated by the feature amount dividing means as a fragment decryption key in the same order, and from the first to the Nth The fragment decryption key is used as the decryption key,
The decryption means decrypts the encrypted secret information fragments in the same order using the first to the Nth fragment decryption keys, and the first to the Nth as the decryption secret information. To generate a decryption secret information fragment of
2. The authentication system according to claim 1, wherein the comparing means compares the secret information with the first to Nth decrypted secret information fragments.
The secret information dividing means generates the secret information fragment so that the secret information can be restored from less than the N secret information fragments among the first to Nth secret information fragments. Yes,
The comparing means is
Secret information restoring means for restoring the secret information from the first to the Nth decrypted secret information fragment to generate restored secret information,
The authentication system according to claim 3, wherein the secret information is compared with the restored secret information.
Biometric information reading means for reading biometric information;
Feature quantity extraction means for extracting feature quantities from the byte metrics information;
Secret information generating means for generating secret information;
Encryption key generation means for generating an encryption key from the feature amount;
Encryption means for encrypting the secret information with the encryption key to generate encrypted secret information;
A registration device comprising:
6. The registration apparatus according to claim 5, wherein the encryption key generation means uses the feature amount as the encryption key.
Feature quantity dividing means for dividing the feature quantity to generate first to Nth (N is an integer of 2 or more) feature quantity fragments;
Secret information dividing means for dividing the secret information to generate the first to Nth secret information fragments;
With
The encryption key generation means sets each of the first to Nth feature amount fragments as a fragment encryption key in the same order, and sets the first to Nth fragment encryption keys as the fragment encryption keys. An encryption key,
The encryption means encrypts the secret information fragments in the same order with each of the first to Nth fragment encryption keys, and uses the first to Nth ciphers as the encrypted secret information. 6. The registration apparatus according to claim 5, wherein the registration secret information fragment is generated.
The secret information dividing means generates the secret information fragment so that the secret information can be restored from less than the N secret information fragments among the first to Nth secret information fragments. The registration apparatus according to claim 7, wherein the registration apparatus is provided.
Authentication information fetching means for fetching secret information and encrypted secret information;
Biometric information reading means for reading biometric information;
Feature quantity extraction means for extracting feature quantities from the byte metrics information;
Decryption key generation means for generating a composite key from the feature quantity;
Decrypting means for decrypting the encrypted secret information with the decryption key to generate decrypted secret information;
A comparing means for comparing the secret information with the decrypted secret information;
An authentication device comprising:
10. The authentication apparatus according to claim 9, wherein the decryption key generation unit uses the feature amount as the decryption key.
The encrypted secret information includes first to Nth (N is an integer of 2 or more) encrypted secret information fragments,
Feature amount dividing means for dividing the feature amount to generate the first to Nth feature amount fragments;
The composite key generation means sets each of the first to Nth feature amount fragments as a fragment decryption key in the same order, and the first to Nth fragment decryption keys are set as the fragment decryption keys. A decryption key,
The decryption means decrypts the encrypted secret information fragments in the same order using the first to the Nth fragment decryption keys, respectively, and uses the first to the Nth as the decryption secret information. To generate a decryption secret information fragment of
10. The authentication apparatus according to claim 9, wherein the comparing means compares the secret information with the first to Nth decrypted secret information fragments.
The comparing means is
Secret information restoring means for restoring the secret information from the first to the Nth decrypted secret information fragment to generate restored secret information,
The authentication apparatus according to claim 11, wherein the secret information is compared with the restored secret information.