WO2014010214A1

WO2014010214A1 - Authentication device and authentication system provided with same

Info

Publication number: WO2014010214A1
Application number: PCT/JP2013/004190
Authority: WO
Inventors: 西谷　裕之; 航石川
Original assignee: パナソニック株式会社
Priority date: 2012-07-09
Filing date: 2013-07-05
Publication date: 2014-01-16
Also published as: JP2014016804A; JP5323971B1

Abstract

[Problem] To provide an authentication device that makes it possible to prevent a leak of information used in authentication, and to prevent forgery in authentication. [Solution] Provided is an authentication device (2) that uses at least a portion of information for authentication to acquire secret information that is stored in a storage medium (L), said authentication device (2) being provided with: a distributed data storage unit (33) that stores first distributed data, which is a portion of distributed information obtained by distributing information for authentication; and a distributed information reconstruction unit (41) that acquires, from outside, second distributed data that is of the distributed information but is different from the first distributed data, and reconstructs information for authentication from the first and second distributed data.

Description

Authentication apparatus and authentication system provided with the same

The present invention relates to an authentication device and an authentication system including the authentication device, and more particularly to an authentication device suitable for confirming the validity of an authentication target in a remote place and an authentication system including the authentication device.

Conventionally, as this type of authentication system, for example, an alcohol test system for preventing drunk driving, an alcohol measuring device for measuring the alcohol concentration in the driver's breath and an image of the driver's license A license reader to be read and a PC for determining whether or not the license number recognized from the image of the driver's license is registered in advance, the alcohol measuring device is obtained from the image of the driver's license It is known that the alcohol concentration measurement is started after the PC determines that the obtained license number is a regular number (see Patent Document 1).

JP 2005-157599 A

The prior art described in Patent Document 1 uses the license number read from the driver's license image instead of entering the driver's ID, etc., to confirm that the driver's license is not carried or has expired, and to check drinking Can be performed simultaneously.

However, in the above prior art, when measuring alcohol concentration in a remote place, personal information such as a license number flows on a network shared by unspecified users, so this personal information is sent to a malicious third party. Once obtained, there was a problem that it could be used for crimes such as impersonation of the person.

In addition, in the above prior art, when measuring alcohol concentration in a remote place, even if someone other than a regular driver can obtain a regular license, a photo of the face printed on the ticket and other licenses can be obtained. There was also a problem that it was possible to acquire and recognize the person's face photo and recognize him. That is, in the above-described conventional technology, it is not possible to prevent an illegal act such as an alcohol test performed by another person who has not drunk instead of a driver who has drunk.

The present invention has been devised in view of such problems of the prior art, and an authentication apparatus capable of preventing leakage of information used for authentication and preventing impersonation in authentication, and the authentication apparatus. The main purpose is to provide a prepared authentication system.

An authentication apparatus according to the present invention is an authentication apparatus that acquires confidential information stored in a storage medium using at least a part of authentication information, and is a part of distributed information in which the authentication information is distributed. A shared data storage unit for storing the shared data, and second shared data different from the first shared data in the shared information is acquired from the outside, and the authentication information is obtained from the first and second shared data. And a distributed information restoring unit for restoring.

As described above, according to the present invention, it is possible to prevent an outflow of information used for authentication and to prevent impersonation in authentication.

Overall configuration diagram of an alcohol test system according to the first embodiment Functional block diagram of the alcohol test system shown in FIG. The flowchart which shows the flow of the processing procedure by the alcohol test | inspection system shown in FIG. Flow chart showing tablet pre-registration operation in ST101 in FIG. FIG. 3 is a flowchart showing the pre-registration operation of the management server in ST101 in FIG. Flow chart showing the login operation (starting place) of the tablet in ST102 in FIG. Flow chart showing tablet login operation (remote location) in ST103 in FIG. Flow chart showing registration operation of alcohol test result of tablet in ST105 in FIG. Flow chart showing registration operation of alcohol test result of tachograph in ST105 in FIG. The flowchart which shows the login operation | movement (starting place) of the tablet which concerns on 2nd Embodiment. The flowchart which shows the login operation | movement (remote place) of the tablet which concerns on 2nd Embodiment. The flowchart which shows registration operation | movement of the alcohol test result of the tablet which concerns on 2nd Embodiment. The flowchart which shows the registration operation | movement of the alcohol test result of the tachograph which concerns on 2nd Embodiment

A first invention made to solve the above-mentioned problem is an authentication device that acquires confidential information stored in a storage medium using at least a part of authentication information, and in which the authentication information is distributed A distributed data storage unit that stores first shared data that is part of the information; and second shared data that is different from the first shared data in the shared information is acquired from outside, and the first and second And a shared information restoring unit for restoring the authentication information from the shared data.

The authentication device according to the first aspect of the present invention restores authentication information used for authentication from the first distributed data stored in the authentication device and the second distributed data acquired from the outside. It is possible to prevent the authentication information from flowing out through the communication network and to prevent impersonation in authentication.

In addition, in a second aspect based on the first aspect, the authentication information includes key information used for acquiring confidential information stored in the storage medium.

Since the authentication device according to the second invention uses the restored key information for authentication, it is not necessary to store identification information such as a password, and the convenience of the authentication operation is improved.

Also, in a third aspect based on the first aspect, the authentication information includes biometric information for collation for collating biometric information of the person to be authenticated.

The authentication device according to the third aspect of the present invention stores identification information such as a personal identification number in order to use the restored biometric information (for example, information such as facial images, fingerprints, and irises that can be acquired on the spot) for authentication. Therefore, the convenience of the authentication operation is improved.

Moreover, 4th invention is the said 1st invention. WHEREIN: The said information for authentication collates the key information used in order to acquire the confidential information memorize | stored in the said storage medium, and biometric information of an authentication subject person Biometric information for verification, and the secret information is obtained from the storage medium using the key information among the authentication information restored by the distributed information restoration unit.

The authentication device according to the fourth invention restores biometric information for verification and key information used for authentication from the first distributed data stored in the authentication device and the second distributed data acquired from the outside. Therefore, it is possible to prevent such authentication information from leaking through the communication network and to prevent impersonation in authentication. Further, since the person to be authenticated can use biometric information (for example, information such as facial images, fingerprints, and irises that can be acquired on the spot) and the restored key information for authentication, identification information such as a password Need not be stored, and there is an advantage that the convenience of the authentication operation is improved.

Moreover, the 5th invention acquired in the said 3rd invention the biometric information acquisition part which acquires the biometric information of the said authentication subject, and the said biometric information for collation contained in the restored said information for authentication A biometric information collating unit that collates the biometric information with at least one of the authentication information only when the biometric information collating unit determines that the collating biometric information and the biometric information match. It is set as the structure which acquires the said confidential information using a part.

The authentication device according to the fifth aspect of the present invention can prevent the acquisition of confidential information and more reliably prevent impersonation of the person even when another person illegally acquires the storage medium or the authentication device.

In addition, in a sixth aspect based on the first aspect, the second shared data is erased after the secret information is read out by the shared information restoration unit.

The authentication device according to the sixth aspect of the present invention prevents the second distributed data from being leaked after use, improving the safety and reliability of the authentication device.

The seventh invention is an authentication system comprising the authentication device according to the first invention and an authentication management device for providing the second distributed data to the authentication device.

Also, in an eighth aspect based on the seventh aspect, the storage medium stores public information that can be acquired without requiring the authentication information, and the authentication apparatus acquires the information from the storage medium. The public information is transmitted to the authentication management apparatus, and the authentication management apparatus transmits the second distributed data corresponding to the public information acquired from the authentication apparatus to the authentication apparatus.

According to the authentication device of the eighth invention, it is possible to reliably acquire the second distributed data corresponding to the public information.

The ninth invention further comprises an authentication device according to the first invention, a body condition measuring device for measuring the body condition of the person to be authenticated, and a recording device for recording the measurement result of the body condition. The recording apparatus records the secret information and the measurement result of the physical state in association with each other.

Further, a tenth aspect of the present invention is the configuration according to the ninth aspect, wherein the authentication device transmits the confidential information and the corresponding measurement result of the physical condition to the recording device.

The authentication device according to the tenth aspect of the present invention can easily record confidential information and physical condition measurement results in correspondence with each other.

The eleventh aspect of the present invention is the recording apparatus according to the seventh aspect, further comprising: a physical condition measuring device that measures the physical condition of the person to be authenticated; and a recording device that records the measurement result of the physical condition. Is configured to record the confidential information and the measurement result of the physical state in association with each other.

In addition, in a twelfth aspect based on the eleventh aspect, the authentication device transmits the confidential information and the corresponding measurement result of the physical condition to the recording device.

The authentication device according to the twelfth aspect of the present invention can easily record confidential information and physical condition measurement results in association with each other.

The thirteenth invention is a part of the distributed information in which the authentication information is distributed, and the first shared data stored inside in advance, and the shared information is different from the first shared data. The authentication information is restored from the second distributed data obtained from the server, and the secret information stored in the storage medium is obtained using at least a part of the restored authentication information. It is an authentication method.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

<First Embodiment>
FIG. 1 is an overall configuration diagram showing an alcohol test system as an authentication system according to the first embodiment of the present invention. This alcohol inspection system 1 is for confirming the validity of the alcohol inspection at a remote place for the driver (authentication object) of the transport truck in the shipping company. A tablet (authentication device) 2 used for authentication processing, a portable alcohol tester (physical condition measuring device) 3 and a digital tachograph (recording) installed in a transport truck and used for alcohol testing and recording of the test results, respectively. Device) 4 and an operation management server (authentication management device) 5 that is installed in the transportation company and performs authentication processing in cooperation with the tablet 2.

Tablet 2 consists of a portable personal computer equipped with a touch panel. The tablet 2 can be connected to other external devices (communication via a LAN (Local Area Network) 12 built in the operating company, the Internet (Wide Area Network) 13 connected thereto, or near field communication). It is possible to exchange data and the like with the digital tachograph 4 and the operation management server 5). The tablet 2 can read information (hereinafter referred to as license information) recorded in a non-contact type IC card driving license (hereinafter referred to as license) L which is a storage medium owned by the driver. It also functions as a simple reader. Note that the tablet 2 can also be connected to the Internet 13 via a 3G line (not shown) or a mobile network such as LTE.

The alcohol tester 3 has a well-known configuration for measuring the alcohol concentration in the breath to be tested. A digital tachograph (hereinafter referred to as a tachograph) 4 connected to the alcohol tester 3 is for electrically recording the operation information (operation time, travel speed, etc.) of the transport truck. The alcohol test result (information of the measured alcohol concentration) is acquired from the inspection device 3 and recorded as a part of the operation information. As with the tablet 2, the tachograph 4 can communicate with other external devices via the Internet 13, near field communication, or the like.

The operation management server 5 is composed of a general-purpose computer and manages the operation information of the transport truck. In addition, the operation management server 5 can provide various data, programs, and the like for authentication processing in response to a request from the tablet 2 by communicating with the tablet 2 via the LAN 12 or the Internet 13.

FIG. 2 is a functional block diagram of the alcohol inspection system shown in FIG. The tablet 2 includes a network communication unit 21 having a wireless communication module for performing wireless LAN communication in conformity with a predetermined communication standard (IEEE802.11b / g / a, etc.) and a touch panel. While displaying various information necessary for the authentication process, the driver captures a display / input unit 22 for inputting an operation for the authentication process, a driver's face image (here, a still image), and the like. A short-distance communication unit 24 having a radio communication module for performing short-distance wireless communication in accordance with a predetermined communication standard (Bluetooth (registered trademark), etc.) And an IC card reader 25 that reads information recorded on the IC chip in the license L by transmitting power to the license L in a non-contact manner.

The tablet 2 also includes a program memory 31 that stores application programs for executing various processes including an authentication process, a work memory 32 that is used as a work area for executing the application programs, and will be described in detail later. A distributed data storage unit 33, which is a memory for storing shared information, and a CPU (control unit) 34 that comprehensively controls the operation of the tablet 2 by executing various programs.

In the tablet 2, the application information stored in the program memory 31 uses the shared information based on the secret sharing method to restore the authentication information using the shared information restoration unit 41 and the driver's face image taken by the photographing unit 23. A face image matching unit (biometric information matching unit) 42, a user registration unit 43 for a driver to perform user registration with respect to the operation management server 5, and an alcohol test for executing processing related to a driver's alcohol test (Body state information processing unit) 44 is realized.

In addition, as a secret sharing method, at least authentication information is distributed (divided into a plurality of pieces), and as long as the original authentication information cannot be guessed depending on a part of the distributed information. Various methods can be used. For example, A.Shamir: “How to Share a Secret”, Communication of the ACM, November 1979, Volume 22, Number 11 are known as methods using polynomial interpolation.

Furthermore, the shared information for restoring the authentication information by the shared information restoring unit 41 may not be based on the secret sharing method described above. A plurality of pieces of distributed information in the present invention are generated from the original authentication information, and the original authentication information cannot be restored or estimated by each alone. The shared information can restore the original authentication information for the first time when all or a part of the plurality of generated pieces of distributed data are collected. Any method can be used as long as it can generate such shared information, not limited to the secret sharing method.

The license L includes a communication unit 51 having an antenna that transmits and receives power and data to and from the IC card reader 25 of the tablet 2, and an IC control unit 52 and a memory 53 provided in an IC chip (not shown). is doing. The IC control unit 52 includes a rectifier circuit, a modulation circuit, a demodulation circuit, and the like in addition to a control circuit that comprehensively controls operations such as data transmission / reception and storage in the IC chip. The memory 53 is composed of a non-volatile memory such as an EEPROM, and is protected by the public information 55 including information on the date of issue of the license L and the expiration date as the license information, and the first recitation number PIN1. Information of driver's license face image protected by PIN1 confidential information 56 including information such as the driver's name, date of birth, license type, license number, etc. and PIN2 which is the second recitation number PIN2 secret information 57 including the URL is stored. PIN1 and PIN2 are key information for acquiring the confidential information from the license L, and are configured by a number of digits set in advance by the driver.

Note that public information can be read out by an IC card reader without requiring a recitation number. In addition, “confidential information” used here does not necessarily mean secret information that has not been made public, but it cannot be read from the license L by being protected by key information such as a recital number. It means that it is information.

The tachograph 4 includes a network communication unit 61, a display unit 62 / input unit 63, and a short-range communication having the same functions as the network communication unit 21, the display / input unit 22, and the short-range communication unit 24 in the tablet 2 described above. A portion 64 is provided. The tachograph 4 includes a program memory 71 that stores an application program for executing registration (storage) of alcohol test results, a work memory 72 that is used as a work area for executing the application program, and alcohol test results. A storage 73 for storing information such as, a CPU 74 for comprehensively controlling the operation of the tachograph 4 by executing various programs, and an inspector I / F 75 that is an interface to which the alcohol inspector 3 is connected.

The operation management server 5 includes a network communication unit 81, a display unit 82, and an input unit that have the same functions as the network communication unit 21, display / input unit 22, program memory 31, work memory 32, and CPU 34 in the tablet 2 described above. 83, a program memory 84, a work memory 85, and a CPU 86.

As will be described in detail later, in the operation management server 5, the management information collating unit 91 that collates public information received from the tablet 2 by the application program stored in the program memory 84 and the authentication process in the tablet 2 are used. By distributing the authentication information based on the secret sharing method, a distributed data generation unit 92 that generates shared information and a user registration unit 93 that allows the driver to perform user registration of the tablet 2 are realized. In the storage 95 of the operation management server 5, information necessary for authentication processing transmitted / received to / from the tablet 2 is appropriately stored.

Here, as authentication information, face image information for collation (biometric information for collation) for collating face images (biological information) unique to each driver, and PIN1 and PIN2 are used. In addition, the shared information generated by the distributed data generation unit 92 includes two types of distributed data described below. One of them is internal distributed data (first distributed data) stored in the tablet 2 in the take-out registration of the tablet 2 at the departure place, which will be described in detail later with reference to ST102 of FIG. 3 and FIG. The other is the external distributed data that is not stored in the tablet 2 at the departure place but is transmitted to the tablet 2 when logging in to the tablet 2 at a remote place, which will be described in detail later with reference to ST103 in FIG. 3 and FIG. (Second distributed data).

FIG. 3 is a flowchart showing the flow of the processing procedure by the alcohol inspection system shown in FIG. First, the driver of the transport truck performs user registration (hereinafter referred to as pre-registration) for starting use of the tablet 2 received from the system administrator in the transport company (ST101). In this pre-registration, when the driver communicates with the operation management server 5 using the tablet 2, authentication information and public information are provided from the tablet 2 to the operation management server 5. Distributed information (internal distributed data and external distributed data) is generated from the authentication information.

Next, the driver obtains internal shared data, which is a part of the shared information generated in ST101, by performing login to the tablet 2 at the departure place (here, in the shipping company) (ST102). ). The driver who uses the tablet 2 often differs depending on the day. Therefore, the tablet 2 has been registered for take-out by the logged-in driver by this ST102. Here, the operation management server 5 holds both the external distributed data and the internal distributed data.

Next, when the driver starts driving the transport truck at a remote location (for example, the transport destination of the transport truck's baggage), the driver performs login (authentication processing) to the tablet 2 to authenticate the alcohol test. (ST103). The login to the tablet 2 is performed using authentication information restored from the internal distributed data stored in the tablet 2 and the external distributed data stored in the operation management server 5.

When the login in ST103 is normally completed, the driver can start the alcohol test section (program) 44 for performing the alcohol test (more specifically, registering the alcohol test result in the tachograph 4). Become. On the other hand, if the login to the tablet 2 fails, the driver cannot perform the alcohol test (more specifically, the alcohol test result cannot be registered in the tachograph 4).

Subsequently, the driver activates an application program for performing an alcohol test and registering the result on the tablet 2, and performs an alcohol test using the alcohol tester 3 (ST104). In this alcohol test, the alcohol concentration in the driver's breath is measured by a known method. Note that the alcohol test may be performed before or after the login (remote location) of the tablet 2 in ST103. In the present embodiment, an example of performing an alcohol test is shown. However, in place of the alcohol test, other methods for checking a driver's body condition or health condition (for example, blood pressure, pulse, body temperature, electrocardiogram, complexion, etc.) The inspection may be carried out.

Thereafter, the driver registers the result of the alcohol test in ST104 in the tachograph 4 on the tablet 2 (ST105).

In this embodiment, the login to the tablet 2 is used as an authentication process for the alcohol test. However, the present invention is not limited to this, and for other functions (for example, a web access function) that can be executed in the tablet 2. It can also be used as an authentication process.

4 and 5 are flowcharts showing the pre-registration operations of the tablet and the operation management server in ST101 in FIG. 3, respectively. These pre-registration operations are performed, for example, when a driver who has just been hired does business, or when there is a situation in which login may be hindered, such as renewing a driver's license or a major change in hairstyle. This is a case of re-registering.

As shown in FIG. 4, when the driver's pre-registration has not been completed, the tablet 2 activates the user registration unit (program) 43 and requests the driver to input PIN1. Is displayed on the display / input unit 22 (ST201). Therefore, when PIN1 (four-digit number here) is input by the driver (ST202: Yes), the tablet 2 subsequently displays a screen for requesting the driver to input PIN2. This is displayed on the input unit 22 (ST203). Therefore, when PIN2 (four-digit number here) is input by the driver (ST204: Yes), the tablet 2 displays / inputs a screen for requesting the driver to read the license L. This is displayed on the unit 22 (ST205). PIN1 and PIN2 input by the driver in response to the request screens of ST201 and ST203 are stored in the work memory 32 of the tablet 2.

Next, when the driver brings the license L close to the tablet 2 to a position where it can communicate with the IC card reader 25, the tablet 2 acquires public information from the license L, and PIN1 and PIN2 acquired in ST202 and ST204. Is used to obtain the PIN1 secret information 56 and the PIN2 secret information 57 from the license L. Therefore, when acquisition of the driver's license face image (PIN2 confidential information 57) is successful (ST206: Yes), the tablet 2 then displays a screen for requesting the driver to capture the current face. The information is displayed on the display / input unit 22 (ST207).

After that, when the photographing of the driver's face by the camera of the photographing unit 23 is completed (ST208: Yes), the tablet 2 stores the face image acquired by photographing (hereinafter referred to as a photographed face image) in the work memory 32. Subsequently, the tablet 2 activates the face image collation unit (program) 42, and collates the captured face image of ST208 with the license face image acquired in ST206 (ST209). In the face image collation in ST209, the tablet 2 matches the two face images by performing matching by focusing on the characteristic parts (for example, each part constituting the face) in the two face images by a known method. It is determined whether or not to do.

If it is determined in ST209 that both face images match (Yes), the tablet 2 manages the PIN1, PIN2, public information, and photographed face image (hereinafter referred to as pre-registration information) acquired in the above steps. It transmits to the server 5 (ST210). And tablet 2 will judge that pre-processing was completed normally, if the notice to the effect that registration of the pre-registration information transmitted by ST210 was completed from operation management server 5 (ST211: Yes). The acquired pre-registration information and license face image in the work memory 32 are deleted (ST212). As a result, troubles such as the pre-registration information and the license face image later leaking from the tablet 2 are avoided, and the safety and reliability of authentication are improved. Thereafter, the tablet 2 displays a screen informing the driver that the pre-registration is completed on the display / input unit 22 (ST213).

On the other hand, if acquisition of the driver's license face image fails in ST206 described above (No), if it is determined in ST209 that the photographed face image does not match the license face image (No), or in ST211 When the notification that the registration of the pre-registration information has failed from the operation management server 5 (or the registration completion notification has not been received within the specified time) (No), the tablet 2 has failed in the pre-processing. In the same manner as in ST212 described above, the pre-registration information and the license face image in the work memory 32 are deleted (ST214). Thereafter, the tablet 2 displays on the display / input unit 22 a screen informing the driver that pre-registration has failed (ST215).

Next, the pre-registration operation of the operation management server 5 will be described with reference to FIG. At the time of pre-registration, the operation management server 5 enters a state of waiting for reception of pre-registration information from the tablet 2 (ST301). And the operation management server 5 will start the user registration part (program) 93, if the pre-registration information (refer ST210 in FIG. 4) from the tablet 2 is received (ST302: Yes), and the received pre-registration information is included. Based on the public information included, a driver account is created (ST303).

Subsequently, the operation management server 5 activates the distributed data generation unit (program) 92, and based on the secret sharing method from the PIN1, PIN2 as authentication information included in the pre-registration information, and the photographed face image (internal information) (Distributed data, external distributed data) is generated (ST304). Here, the generated internal distributed data and external distributed data are associated with the account created in ST 303 and stored in the storage 95.

As will be described in detail later, the photographed face image included in the authentication information here is collated with the face image photographed by each driver in processing such as login to the tablet 2 in ST103 in FIG. Is used as face image information for verification. In ST304, PIN1 and PIN2 and the captured face image are deleted from the operation management server 5 after the shared information is generated. Thereby, troubles such as those PIN1, PIN2, and the photographed face image that later flow out of the operation management server 5 are avoided, and the safety and reliability of authentication are improved.

Thereafter, the operation management server 5 registers the internal shared data and the external distributed data generated in ST304 to the account created in ST303 (ST305), and further notifies the tablet that the registration of the pre-registration information is completed. 2 (ST306).

On the other hand, in the above-described ST302, when the pre-registration information from the tablet 2 cannot be received (No), and when the specified time has elapsed (ST307: Yes), the operation management server 5 indicates that registration of the pre-registration information has failed. Is sent to the tablet 2 (ST308).

FIG. 6 is a flowchart showing the login operation (starting place) of the tablet in ST102 in FIG. This is performed each time the driver departs from the shipping company (departure point), for example, in a state where the pre-registration of ST101 in FIG. 3 has been completed. The tablet 2 starts the login procedure at the departure place, and displays a screen for requesting the driver to read the license L as in ST205 in FIG. 4 (ST401). Therefore, when the tablet 2 reads the license information from the license L and acquires the public information (ST402: Yes), the tablet 2 transmits the public information to the operation management server 5 via the LAN 12 (ST403).

At this time, the operation management server 5 recognizes that access has been received from the tablet 2 existing in the company, and subsequently activates the management information verification unit (program) 91 to verify the public information received from the tablet 2. Then, the internal shared data and the external distributed data associated with the public information are transmitted to the tablet 2.

Next, when the tablet 2 receives the internal distributed data and the external distributed data from the operation management server 5 (ST404: Yes), the tablet 2 stores the internal distributed data and the external distributed data in the distributed data storage unit 33. Then, the tablet 2 restores the authentication information (that is, obtains PIN1, PIN2, and collation face image) using the distributed data (ST405). Subsequently, as in ST207 in FIG. 4, the tablet 2 displays a screen for requesting the driver to photograph the face (ST406), and when the photographing of the driver's face is completed (ST407: Yes). ), The face image collation unit (program) 42 is activated, and the captured face image of ST407 and the collation face image acquired in ST405 are collated in the same manner as ST209 in FIG. 4 (ST408).

If it is determined in ST408 that both face images match (Yes), the tablet 2 requests the driver to read the license L again (ST409), similarly to the above ST401, where PIN1, PIN2 Is used to access PIN1 confidential information 56 and PIN2 confidential information 57 (ST410). In this way, the tablet 2 can read the confidential information in the license L using the PIN1 and PIN2 only when it is determined that the driver's photographed face image and the matching face image match. Even when another person illegally acquires the license L or the tablet 2, it is possible to prevent the confidential information of the license L from being acquired and to prevent impersonation of the person more reliably.

After that, when the tablet 2 succeeds in obtaining the PIN1 confidential information 56 and the PIN2 confidential information 57 from the license L (ST411: Yes), the tablet 2 determines that the login by the driver is successful, and external distribution in the work memory 32 is performed. The data, the photographed face image, and the collation face image are deleted (ST412). As a result, only the internal shared data is stored in the distributed data storage unit 33, and the distributed information obtained by distributing the authentication information is distributed and stored in the operation management server 5 and the tablet 2. After that, the tablet 2 displays a screen informing the driver that the login is completed on the display / input unit 22 (ST413).

On the other hand, when the internal dispersion data and the external dispersion data cannot be received within the specified time in ST404 described above (No), or when it is determined in ST408 that the captured face image does not match the collation face image (No), Alternatively, if the acquisition of the PIN1 confidential information 56 and the PIN2 confidential information 57 from the license L fails in ST411 (No), the tablet 2 determines that the login by the driver has failed, and similarly to the above ST412 Then, the external shared data and the internal distributed data in the work memory 32 are deleted (when the acquired face image and the collation face image are already acquired) (ST414). Thereafter, the tablet 2 displays on the display / input unit 22 a screen informing the driver that the login has failed (ST415).

Note that in the tablet 2, before the login (that is, before the confidential information is read), processing other than the processing related to authentication (driver's login operation) is limited, and after login (that is, after the confidential information is read), Information processing (for example, Web access) other than processing related to authentication can be performed.

FIG. 7 is a flowchart showing the login operation (remote location) of the tablet in ST103 in FIG. When the driver activates the tablet 2 at a remote location, the tablet 2 starts a login procedure at the remote location.

First, the tablet 2 performs ST501 to ST503 similar to ST401 to ST403 in FIG. In ST503, the operation management server 5 recognizes that access has been received from the tablet 2 that exists outside the company, and then activates the management information verification unit (program) 91 to verify the public information received from the tablet 2. The external shared data associated with the public information is transmitted to the tablet 2.

Next, when receiving the external shared data from the operation management server 5 (ST504: Yes), the tablet 2 stores the external distributed data in the distributed data storage unit 33. The tablet 2 restores the authentication information using the external shared data acquired from the operation management server 5 and the internal shared data stored in the distributed data storage unit 33 in ST102 described above (that is, PIN1, PIN2,. A face image for verification is acquired) (ST505). Thereafter, the tablet 2 performs ST506 to ST515 similar to ST406 to ST415 in FIG. In ST514, only the external shared data is deleted from the distributed data storage unit 33 (if the image is already acquired, the photographed face image and the collation face image are also deleted), and the internal shared data is retained for the next login. Is done.

8 and 9 are flowcharts showing the registration operation of the alcohol test result of the tablet and the tachograph in ST105 in FIG. 3, respectively.

As shown in FIG. 8, in the tablet 2, when the login is completed and the alcohol test section (program) 44 is activated, the tablet 2 is in a state of waiting for an alcohol test result (ST601). Therefore, when the tablet 2 acquires the alcohol test result from the tachograph 4 (ST602: Yes), the tablet 2 displays the alcohol test result on the display / input unit 22 (ST603). At this time, the display / input unit 22 displays a screen informing the driver that the alcohol test result is being registered.

Next, the tablet 2 includes the alcohol test result (alcohol concentration measurement data), and at least a part of the license information (here, the license number) acquired at the time of login (see ST502 and ST511 in FIG. 7). Are combined in a predetermined data format, and an alcohol test result (hereinafter referred to as an authenticated alcohol test result) to which the license information is added is transmitted to the tachograph 4 (ST604). In this way, by combining the alcohol test result with the license information, it is possible to confirm the validity of the alcohol test result. In this case, it is more preferable to include any of confidential information (PIN1 confidential information 56 and PIN2 confidential information 57) as information combined with the alcohol test result. Among the license information combined with the alcohol test result, the confidential information includes the license number, the vehicle type permitted to drive, the name and address of the license holder, and the like. Public information includes a promulgation date and an expiration date.

After that, when the tablet 2 receives a notification from the tachograph 4 indicating that the registration of the alcohol test result transmitted in ST604 has been completed (ST605: Yes), the screen informing the driver that the registration of the alcohol test result has been completed. Is displayed on the display / input unit 22 (ST606), and the authenticated alcohol test result is deleted (ST607). Thereby, troubles such as those alcohol test results and license information flowing out from the tablet 2 later are avoided, and the safety and reliability of the authenticated alcohol test results are improved.

On the other hand, if the notification that the registration of the alcohol test result is completed is not received from the tachograph 4 in ST605 described above (No), and the specified time has elapsed (ST608: Yes), the tablet 2 registers the alcohol test result. Is displayed on the display / input unit 22 (ST609).

Next, with reference to FIG. 9, the operation of registering the alcohol test result of the tachograph will be described. When the driver presses the inspection start button of the tachograph 4 during the alcohol test, the tachograph 4 enters a state of waiting for an inspection of the alcohol tester 3 (ST701), and a message indicating that the driver is waiting for an inspection is displayed on the display unit 62. Is displayed. Thereafter, when the alcohol test by the alcohol tester 3 is completed, the tachograph 4 receives the alcohol test result from the alcohol tester 3 (ST702: Yes). Subsequently, the tachograph 4 transmits the alcohol test result to the tablet 2.

Next, when receiving the authenticated alcohol test result (see ST604 in FIG. 8) transmitted from the tablet 2 (ST704: Yes), the tachograph 4 stores the authenticated alcohol test result in the storage 73 (ST705). Then, a message that the registration of the alcohol test result is completed is displayed on the display unit 62, and the fact is notified to the tablet 2 (ST706). Here, the tachograph 4 acquires the authenticated alcohol test result from the tablet 2. However, the tachograph 4 acquires the license information from the tablet 2, and the authenticated alcohol test result similar to that of the tablet 2 described above. It is good also as a structure which produces | generates.

On the other hand, if the authenticated alcohol test result cannot be received from the tablet 2 in the above-described ST704 (No), and the specified time has elapsed (ST707: Yes), the tachograph 4, a message that the registration of the alcohol test result has failed. It is displayed on the display unit 62 (ST708).

Second Embodiment
Next, an alcohol test system according to a second embodiment of the present invention will be described with reference to FIGS. Matters not particularly mentioned below regarding the second embodiment are the same as those of the first embodiment described above.

FIG. 10 is a flowchart showing the login operation (starting place) of the tablet according to the second embodiment, and corresponds to FIG. 6 in the first embodiment.

Tablet 2 starts the login procedure at the departure place in the state where the pre-registration (see ST101 in FIG. 3) is completed, and executes ST801 and ST802 similar to ST406 and ST407 in FIG. Thereafter, the tablet 2 performs ST803 to ST807 similar to ST401 to ST405 in FIG. 6, respectively, and further performs ST808 to ST815 similar to ST408 to ST415 in FIG. Note that, unlike ST412 and ST414 in FIG. 6, the license information is also deleted in ST812 and ST814. This avoids troubles such as license information leaking out from the tablet 2 later, and improves the safety and reliability of authentication.

FIG. 11 is a flowchart showing the login operation (remote location) of the tablet according to the second embodiment, and corresponds to FIG. 7 in the first embodiment.

When the driver activates the tablet 2 at a remote location, the tablet 2 starts a login procedure at the remote location, and executes ST901 and ST902 similar to S506 and ST507 in FIG. Thereafter, the tablet 2 performs ST903 to ST907 similar to ST501 to ST505 in FIG. 7, respectively, and further performs ST908 to ST915 similar to ST508 to ST515 in FIG. Unlike ST512 and ST514 in FIG. 6, the license information is also deleted in ST912 and ST914. This avoids troubles such as license information leaking out from the tablet 2 later, and improves the safety and reliability of authentication.

Incidentally, in the second embodiment, photographing of the driver's face is performed in ST801 to ST802 in FIG. 10 and ST901 to ST902 in FIG. The reading operation of the license L twice is ST803 and ST809 in FIG. 10, and ST903 and ST909 in FIG. That is, photographing of the driver's face and reading operation of the license L twice are separated. The driver first shoots his / her face using only the tablet 2 and then takes out the license L from the pocket or bag and holds it over the tablet 2 twice. As in the first embodiment described above, the face photographing operation does not enter during the reading operation of the license L. Thus, the driver's license L that has been held before is placed somewhere in the vehicle before the face photographing operation, and the license L is not held again after the face photographing operation. In addition, the number of times the tablet 2 is changed is reduced. Therefore, a smoother login procedure can be performed. In addition, it takes time to drop the license L on the floor in the car during the login procedure, pick up the license L, damage the face of the license L, or misplace the license L somewhere to find it. Less time is required. As a result, convenience is improved.

It should be noted that the processing from the first reading request of the license L (ST803 in FIG. 10 and ST903 in FIG. 11) to the face image collation (ST808 in FIG. 10 and ST908 in FIG. 11) currently takes time. The tablet 2 can use PIN1 and PIN2 for the first time after collation of the face image is OK. However, when these PIN1 and PIN2 can be used, there is a possibility that the driver who attempts to log in to the tablet 2 will release the license L from the tablet 2. Therefore, in order to reliably acquire the secret information 56 or the secret information 57 from the license L, a request for reading the license L is displayed again (ST809 in FIG. 10, ST909 in FIG. 11). At this time, it is assumed that the driver holds the license L over the tablet 2 for a sufficiently long time from the first reading request. Then, the tablet 2 should immediately move to the procedure of acquiring the confidential information from the license L (ST810 to ST811 in FIG. 10, ST910 to ST911 in FIG. 11). Therefore, in such a case, it seems to the driver that the reading of the license information held by the license L is completed once. Also in this respect, convenience is further improved.

In the future, if the processing from the first request for reading the license L (ST803 in FIG. 10 and ST903 in FIG. 11) to the acquisition of the confidential information becomes faster, the second request for reading the license L is made. It may not be possible. Here, “acquisition of confidential information” is ST811 in FIG. 10 and ST911 in FIG. 11, and “second license L reading request” is ST809 in FIG. 10 and ST909 in FIG.

FIG. 12 is a flowchart showing an operation of registering the alcohol test result of the tablet according to the second embodiment, and corresponds to FIG. 8 in the first embodiment.

In the tablet 2, when the login is completed and the alcohol test section (program) 44 is activated, a screen for requesting the driver to read the license L is displayed (ST1001), and PIN1 and PIN2 are used. The license L is then accessed (ST1002). This is necessary to obtain again the license information combined with the result after the alcohol test is completed after the license information has been deleted from the tablet 2 after the login in FIG. If the tablet 2 succeeds in obtaining the public information and the PIN1 confidential information 56 and the PIN2 confidential information 57 from the license L (ST1003: Yes), the tablet 2 is the same as S601 to ST603 in FIG. Steps ST1004 to ST1006 are executed.

Next, the tablet 2 generates a plurality of distributed data in which information including the alcohol test result and the license information (at least a part) is distributed by the same processing as the distributed data generation unit (program) 92 of the operation management server 5. (ST1007). Then, the tablet 2 transmits a part of the distributed data regarding the inspection result generated in ST1007 to the tachograph 4 (ST1008). The remaining shared data that has not been transmitted to the tachograph 4 is held in the distributed data storage unit 33 of the tablet 2. Alternatively, a part or all of them may be transmitted to the operation management server 5. In other words, in the first embodiment shown in FIG. 8, in ST604, a simple combination of the alcohol test result and the secret information of the license L is transmitted to the tachograph 4, but it has been authenticated by using the distributed data. Increased safety of alcohol test results. That is, even if any of the distributed data distributed and held among any one of the tablet 2, the tachograph 4 and the operation management server 5 leaks to a third party, the alcohol test result and the license information cannot be restored. .

After that, when the tablet 2 receives a notification from the tachograph 4 that the registration of the alcohol test result (distributed data) transmitted in ST1008 has been completed (ST1009: Yes), a screen informing that the registration of the alcohol test result has been completed. Displayed on the display / input unit 22 (ST1010), and further, alcohol test results, license information, and distributed data transmitted to the tachograph 4 are deleted (ST1011). Thereby, troubles such as those alcohol test results and license information flowing out from the tablet 2 later are avoided, and the safety and reliability of the authenticated alcohol test results are improved.

On the other hand, when the notification that the registration of the alcohol test result is completed is not received from the tachograph 4 in the above-described ST1009 (No), and the notification that the registration of the alcohol test result is failed from the tachograph 4 (ST1012: Yes), or without receiving notification that the registration of the alcohol test result has failed from the tachograph 4 (ST1012: No), when the specified time has elapsed (ST1013: Yes), the tablet 2 A screen informing that registration of the alcohol test result (distributed data) has failed is displayed on display / input unit 22 (ST1014). At the same time, the distributed data transmitted to the tachograph 4 among the distributed data created from the alcohol test and the license information is deleted (ST1011). Alternatively, all the distributed data may be erased. Thereby, troubles such as those alcohol test results and license information flowing out from the tablet 2 later are avoided, and the safety and reliability of the authenticated alcohol test results are improved.

FIG. 13 is a flowchart showing an operation for registering the alcohol test result of the tachograph according to the second embodiment, and corresponds to FIG. 9 in the first embodiment.

When the driver presses the inspection start button of the tachograph 4 during the alcohol inspection, the tachograph 4 executes ST1101 to ST1103 similar to ST701 to ST703 in FIG.

Thereafter, when the tachograph 4 receives distributed data (see ST1008 in FIG. 12) corresponding to the authenticated alcohol test result transmitted from the tablet 2 (ST1104: Yes), the distributed data is stored in the storage 73 (ST1105). ) A message indicating that the registration of the alcohol test result has been completed is displayed on the display unit 62, and the fact is notified to the tablet 2 (ST1106).

On the other hand, if the distributed data cannot be received from the tablet 2 in ST1104 described above (No) and the specified time has elapsed (ST1107: Yes), the tachograph 4 displays a message that the registration of the alcohol test result has failed. 62, and notifies the tablet 2 to that effect (ST1108).

In this way, the alcohol test result and the license information at a remote location become a plurality of different distributed data that cannot be restored by itself. The plurality of different distributed data is registered in any one of the tachograph 4, the tablet 2, and the operation management server 5. When the driver returns to the transportation company, these distributed data are collected into the operation management server 5 and stored as part of the operation record.

When such distributed data is registered in the tachograph 4 and the tablet 2, for example, the driver first pulls up the distributed data of the tachograph 4 to the tablet 2 and brings the tablet 2 into the transportation company. Then, the driver transfers the distributed data held in the tablet 2 to the operation management server 5. This facilitates data handling and improves convenience.

Alternatively, the operation management server 5 may collect the distributed data respectively registered in the tachograph 4 and the tablet 2 via at least some different communication paths. For example, in FIG. 1, the operation management server 5 may collect the distributed data held by the tablet 2 via the LAN 12 and may collect the distributed data held by the tachograph 4 via the LAN 12 and the Internet 13. (It may also be via a mobile phone line such as 3G or LTE (not shown)). By doing so, since only one of a plurality of distributed data is always kept in the tablet 2 and the tachograph 4 from the time of leaving the shipping company until returning, the safety of the certified alcohol test result and Reliability is further improved. This also applies to the case where the distributed data is registered in each of the tachograph 4, the tablet 2, and the operation management server 5.

In addition, when the distributed data is registered in the tachograph 4 and the operation management server 5, the operation management server 5 may directly collect the distributed data held by the tachograph 4. In this case, the operation management server 5 may collect the distributed data held by the tachograph 4 via the LAN 12 and the Internet 13 (further, a cellular phone line such as 3G or LTE, not shown). May be used). Alternatively, the following may be performed. That is, the driver collects the distributed data held in the tachograph 4 in the tablet 2 by using, for example, the short-range communication unit 24 of the tablet 2 and the short-range communication unit 64 of the tachograph 4, and stores it in the inside of the transportation company. Bring it in. Then, the driver transfers those distributed data held in the tablet 2 to the operation management server 5. By doing so, since the tachograph 4 always holds only one of a plurality of distributed data from the time of leaving the shipping company until returning, the safety and reliability of the certified alcohol test result is ensured. Further improve. In addition, when the tablet 2 collects the distributed data stored in the tachograph 4 in the operation management server 5, the distributed data is only temporarily stored. Therefore, the safety and reliability of the authenticated alcohol test result Is further improved.

In addition, about the difference part with the above-mentioned 1st Embodiment in the above-mentioned 2nd Embodiment, it is also possible to apply only a part of the difference part to 1st Embodiment in the range which does not deviate from the scope of the present invention. is there.

Thus, according to the tablet 2 in the alcohol test system 1, for verification used for authentication from the internal distributed data stored in the distributed data storage unit 33 and the external distributed data acquired from the external operation management server 5. Since the face image and PIN1 and PIN2 (key information) are restored, it is possible to prevent such authentication information from leaking through a communication network such as the Internet 13, and to prevent impersonation in authentication. In addition, since the driver uses the face image photographed on the spot, the restored key information, and the license carried by himself / herself for authentication, the driver can use a personal identification number such as PIN1 or PIN2 of the license, There is no need to store identification information such as codes and employee codes, and there is an advantage that convenience of authentication operation is improved. When logging in to the tablet 2, the driver is only required to hold the license L over the IC card reader 25 built in the tablet 2 and to photograph his / her face image with the tablet 2.

Although the present invention has been described based on specific embodiments, these embodiments are merely examples, and the present invention is not limited to these embodiments. For example, the means and method for performing communication between devices such as the authentication device and the authentication management device constituting the authentication system according to the present invention are shown in the embodiment as long as at least necessary data can be transmitted and received. It is possible to change to other well-known means and methods without being limited to those. The biometric information used in the present invention is not limited to a face image, but may be other information used for well-known biometric authentication such as fingerprints, irises, voiceprints, veins, and ear shapes. When the biological information is changed, a device other than the camera (for example, a fingerprint reading device) can be used as a means for acquiring the biological information. The storage medium used in the present invention is not limited to an IC card driver's license, and may be another storage medium such as a card having a known RF tag. Further, the external distributed data (the remaining distributed data excluding the internal distributed data) is held not only in the above-described operation management server 5 but also in a plurality of information processing apparatuses that can communicate with the authentication apparatus (that is, the authentication apparatus A configuration in which external distributed data is acquired from a plurality of information processing apparatuses is also possible.

3 may be performed in advance by the operation management server 5 instead of using both the operation management server 5 and the tablet 2. In this case, the operation management server 5 may be provided with a device corresponding to each of the imaging unit 23, the IC card reader 25, the face image matching unit 42, and the user registration unit 43 provided in the tablet 2. In addition, the input of PIN1 and PIN2 in ST201 to ST204 in FIG.

However, it is more preferable to perform pre-registration using both the operation management server 5 and the tablet 2 as shown in ST101 of FIG. 3, FIG. 4, and FIG. In this case, the photographing of the face image at the time of pre-registration and the photographing of the face image at the time of login to the tablet 2 at the departure place or the remote place are performed by the photographing unit 23 of the same tablet 2. Even if the tablet 2 to be used differs between pre-registration and login, the specifications of the photographing unit 23 are the same. Therefore, since a face image having no great difference in the number of pixels, color, and the like can be obtained between pre-registration and login, the authentication success rate is also increased.

3 After both the ST102 in FIG. 3 and the take-out registration of the tablet 2 at the departure place shown in FIG. 6, the operation management server 5 shown in FIGS. 1 and 2 holds both the external distributed data and the internal distributed data. At this time, a plurality of storages 73 of the operation management server 5 may be prepared, and the external distributed data and the internal distributed data may be separately stored in different storages.

Alternatively, the operation management server 5 may hold only externally distributed data. In that case, the internal distributed data may be returned to the operation management server 5 when the tablet 2 returns to the departure place. In any case, it is more advanced with respect to hacking or the like that the operation management server 5 retains the authentication information itself in the form of distributed data generated based on the authentication information than the authentication information itself. Security can be realized.

Then, the operation management server 5 may restore the authentication information from the external distributed data and the internal distributed data, and appropriately perform processing for generating the external distributed data and the internal distributed data different from that before the recovery. That is, distributed data may be updated. In that case, it is desirable to carry out in a state where the internal distributed data is not held in the tablet 2. Then, the operation management server 5 can realize higher security against hacking and the like without hindering the exchange of information with the tablet 2.

Furthermore, when taking out the tablet 2 at the departure place, the health management such as an alcohol test may be performed by the operation management server 5 or an information terminal (not shown) that can communicate with the operation management server 5 and the tablet 2. In that case, the operation management server 5 or an information terminal communicable with the operation management server 5 is connected with a device for measuring and inspecting a physical condition such as another alcohol tester, and provided with a program capable of communicating with and controlling the device. That's fine. As used herein, “measuring and examining physical condition or health condition” refers to measuring and examining blood pressure, pulse, body temperature, electrocardiogram, facial color, and the like, as described above. The operation management server 5 may pass the shared information to the tablet 2 only when the result of the inspection at the time of departure is OK, and may not pass the shared information to the tablet 2 when the result is NG. If it does in this way, it can prevent that the person who does not have driving qualification of the day carries out the tablet 2 illegally and departs.

The embodiments described so far assume that the tablet 2 is used daily by a plurality of drivers. However, when the tablet 2 is used as a dedicated terminal for one driver, the internal distributed data may be transferred to the tablet 2 immediately after the pre-registration is completed, and thereafter held on the tablet 2. In this case, the internal shared data is not erased when the facial image features do not match or when the license secret information acquisition fails.

Internal distributed data may be held in work memory or program memory in addition to the distributed data storage unit. Further, the remainder of the distributed data in the second embodiment may be held in the work memory or the program memory in addition to the distributed data storage unit.

In addition, the constituent elements of the authentication apparatus according to the present invention and the authentication system including the authentication apparatus according to the present invention are not necessarily essential, and may be appropriately selected as long as they do not depart from the scope of the present invention. Is possible.

The authentication apparatus according to the present invention and the authentication system including the authentication apparatus can prevent the outflow of information used for authentication and prevent impersonation in authentication, and particularly confirm the validity of the authentication target in a remote place. It is useful as an authentication device suitable for the above and an authentication system provided with the same.

1 Alcohol inspection system (authentication system)
2 Tablet (authentication device)
3 Alcohol tester (physical condition measuring device)
4 Digital tachograph (recording device)
5 Operation management server (authentication management device)
22 Display / Input Unit 23 Imaging Unit (Biological Information Acquisition Unit)
33 Distributed data storage unit 34 CPU (control unit)
41 Distributed information restoration unit (distributed information restoration unit)
42 face image matching unit (biometric information matching unit)
44 Alcohol testing department (physical condition information processing department)
L IC card driver's license (storage medium)

Claims

An authentication device that acquires confidential information stored in a storage medium using at least a part of authentication information,
A distributed data storage unit that stores first shared data that is a part of shared information in which the authentication information is distributed;
A shared information restoring unit that obtains from the outside second shared data different from the first shared data in the shared information and restores the authentication information from the first and second shared data; An authentication device.
2. The authentication apparatus according to claim 1, wherein the authentication information includes key information used to acquire confidential information stored in the storage medium.
2. The authentication apparatus according to claim 1, wherein the authentication information includes verification biometric information for verifying biometric information of the person to be authenticated.
The authentication information is composed of key information used for acquiring confidential information stored in the storage medium and biometric information for verification for verifying biometric information of the person to be authenticated,
The authentication apparatus according to claim 1, wherein the secret information is acquired from the storage medium using the key information among the authentication information restored by the distributed information restoration unit.
A biometric information acquisition unit for acquiring biometric information of the person to be authenticated;
A biometric information matching unit for matching the biometric information for verification included in the restored authentication information with the acquired biometric information;
The secret information is acquired using at least a part of the authentication information only when the biometric information collation unit determines that the biometric information for collation and the biometric information match. 4. The authentication device according to 3.
The authentication apparatus according to claim 1, wherein the second shared data is erased after the secret information is read by the shared information restoration unit.
An authentication system comprising: the authentication device according to claim 1; and an authentication management device that provides the second distributed data to the authentication device.
The storage medium stores public information that can be acquired without requiring the authentication information,
The authentication device transmits the public information acquired from the storage medium to the authentication management device,
The authentication system according to claim 7, wherein the authentication management apparatus transmits the second distributed data corresponding to the public information acquired from the authentication apparatus to the authentication apparatus.
The authentication apparatus according to claim 1, further comprising: a physical condition measuring apparatus that measures a physical condition of the person to be authenticated; and a recording apparatus that records the measurement result of the physical condition,
The said recording apparatus records the said confidential information and the measurement result of the said physical state correspondingly, The authentication system characterized by the above-mentioned.
10. The authentication system according to claim 9, wherein the authentication device transmits the confidential information and the measurement result of the physical condition corresponding to the confidential information to the recording device.
A physical condition measuring device that measures the physical condition of the person to be authenticated, and a recording device that records the measurement result of the physical condition;
The authentication system according to claim 7, wherein the recording device records the secret information and the measurement result of the physical state in association with each other.
12. The authentication system according to claim 11, wherein the authentication device transmits the confidential information and the measurement result of the physical condition corresponding to the confidential information to the recording device.
First shared data that is a part of shared information in which authentication information is distributed and stored in advance, and second shared data obtained from the outside that is different from the first shared data in the shared information The authentication information is restored from the above, and the secret information stored in the storage medium is obtained using at least a part of the restored authentication information.