WO2014155634A1

WO2014155634A1 - Biometric registration/authentication system, biometric registration/authentication device, and biometric registration/authentication method

Info

Publication number: WO2014155634A1
Application number: PCT/JP2013/059409
Authority: WO
Inventors: 厚志加藤
Original assignee: 日立オムロンターミナルソリューションズ株式会社
Priority date: 2013-03-28
Filing date: 2013-03-28
Publication date: 2014-10-02
Also published as: CN104077514A; CN104077514B

Abstract

Provided are a biometric registration/authentication system, a biometric registration/authentication device, and a biometric registration/authentication method, with which the risk of impersonation by another person can be adequately reduced. In this biometric registration/authentication system a terminal with which user biometric information is registered and a host computer that stores the registered biometric information are connected via a network. The terminal is equipped with: a sensor that picks up user biometric information; an input unit that accepts inputs of supplemental information for the purpose of identifying characteristics of the user; a display unit that displays a determination result indicating whether the user's biometric information can be registered; and a terminal control unit that transmits the biometric information and the supplemental information to the host computer or receives the determination result from the host computer and displays this result on the display unit. The host computer is equipped with: a storage unit that stores biometric information and supplemental information for each user of the biometric registration/authentication system; and a host control unit that receives the biometric information and the supplemental information from the terminal, determines whether the user is registered on the basis of the similarity between the biometric information and supplemental information stored in the storage unit and the received biometric information and supplemental information, and transmits to the terminal the result thereof, as a determination result.

Description

Biometric registration / authentication system, biometric registration / authentication device, and biometric registration / authentication method

The present invention is a biometric registration / authentication system, a biometric registration / authentication device that performs user registration and authentication using biometric information of a user and, for example, additional information such as gender, age, height, and current address, And a biometric registration / authentication method.

In recent years, with the rapid development of the information society, management awareness of personal information and confidentiality is increasing in companies and local governments. In the financial industry, fraudulent transactions such as forgery of stamps and forgery of cards are a major problem. Along with this, biometric authentication using “individual features” is being recognized as a highly accurate and accurate personal authentication means with less risk of forgery, theft, loss and unauthorized transfer. Furthermore, as users, use environments, and purposes of biometric information authentication technology are diversified, it is considered difficult to meet diversified requirements with only a single biometric authentication.

On the other hand, at the time of new user registration, by using means to register biometric information that is not similar to existing users as much as possible, when a user authenticates himself / herself, it is difficult to impersonate others Efforts have been made (see Patent Document 1). The registration means acquires a plurality of pieces of biometric information from the new user when registering the biometric information of the new user. At that time, one piece of biometric information is first obtained from the new user, feature information is extracted from the obtained biometric information, and the biometric information and feature quantity of each of the existing users in the existing user database are compared. It is determined how much the biometric information of the new user is similar to the biometric information of the existing user group.

At that time, if the degree of similarity is below a certain level, that is, the degree of impersonation by another person is below a certain standard, the biometric information is added to the database as the registered biometric information of the new user, Prompt to use. If the degree of similarity is above a certain level, that is, the degree of impersonation by another person is above a certain standard, the acquired biological information is rejected and another biological information is acquired from the new user. In the same manner, the biometric information of each existing user in the existing user database and the feature amount are compared, and biometric information in the case where the degree of similarity is below a certain level is found and registered in the user database.

As described above, it is determined how similar the biometric information acquired from the new user is to the biometric information group of the existing user, and the result is used to prompt the user to use the biometric information at the time of personal authentication. It is a registration method that provides more secure authentication by proposing whether to use another living body.

JP 2010-26959 A

When registering biometric information, when registering biometric information, the biometric information with the lowest similarity to other people is registered while checking the similarity with the existing registered biometric information. The risk of spoofing due to can be reduced to some extent.

However, in a large-scale biometric registration / authentication system in which the number of existing registrants ranges from several million to tens of millions, even if the method of the known example is applied, existing biometric information having similar biometric information A large number of users are found, and as a result, it is expected that a sufficient effect for reducing the risk of impersonation by others will not be obtained, and a safer means of identity registration and authentication is required. That is, there is a problem that the risk of impersonation by another person cannot be sufficiently reduced simply by considering the similarity of biometric information.

The present invention has been made in view of the above, and provides a biometric registration / authentication system, a biometric registration / authentication apparatus, and a biometric registration / authentication method that can sufficiently reduce the risk of impersonation by others. The purpose is to do.

In order to solve the above-described problems and achieve the object, a biometric registration / authentication system according to the present invention includes a terminal that registers biometric information of a user and a host computer that stores the registered biometric information. A biometric registration / authentication system connected via the terminal, wherein the terminal captures the user's biometric information, and an input unit that receives input of additional information for identifying the user's characteristics; A display unit that displays a determination result indicating whether or not registration of the user's biometric information is possible, and transmits the biometric information and the additional information to the host computer, or receives the determination result from the host computer. And a terminal control unit that displays on the display unit, and the host computer has the same number of users as the number of users of the biometric registration / authentication system. A storage unit that stores information and the additional information; and the biological information and additional information of the user received from the terminal; the biological information and additional information stored in the storage unit; and the received biological information And a host control unit that determines whether or not the user is registered based on the similarity to the additional information and transmits the result to the terminal as the determination result.

A biometric registration / authentication apparatus according to the present invention is a biometric registration / authentication apparatus for registering biometric information of a user connected via a network to a host computer that stores biometric information. A display unit for displaying a determination result indicating whether or not information can be registered, and the host information and the biometric information captured by the sensor and the additional information for identifying the feature of the user input by the input unit. Whether the user is registered based on the degree of similarity between the biometric information and the additional information and the biometric information and additional information for the number of users of the biometric registration / authentication system transmitted from the host computer Terminal control that receives a result of whether or not and displays a determination result indicating whether or not registration of the biometric information of the user is possible Characterized in that it comprises a and.

The biometric registration / authentication method according to the present invention is a biometric registration / authentication system in which a terminal that registers biometric information of a user and a host computer that stores the registered biometric information are connected via a network. A biometric registration / authentication method to be performed, comprising: biometric information of the user captured from a sensor included in the terminal; and additional information for identifying the characteristics of the user input from an input unit of the terminal. Similar to the step of transmitting to the host computer, the biometric information and the additional information for the number of users of the biometric registration / authentication system stored in the storage unit, and the biometric information and additional information received from the terminal Determining whether or not the user is registered based on the degree, and whether or not the result can be registered for the biometric information of the user And transmitting to the terminal a judgment result indicating, characterized in that it comprises the steps of: displaying on the display unit receives the judgment result from the host computer.

According to the present invention, it is possible to provide a biometric registration / authentication system, a biometric registration / authentication apparatus, a biometric registration / authentication method, and a biometric registration / authentication program that can sufficiently reduce the risk of spoofing by others. it can.

It is a figure which shows the whole structure of a biometric registration and authentication system. It is a figure which shows the structural example of a biometrics authentication apparatus. It is a figure which shows the structural example of a terminal computer. It is a figure which shows the example of the user additional information preserve | saved in the user additional information database. It is a flowchart which shows the example of the processing operation of the terminal computer 102 at the time of bank account opening. It is a flowchart which shows the example of the processing operation in a host computer. It is a flowchart which shows the example of the process detail of process S602 in FIG. It is a flowchart which shows the example of the process detail of process S603 in FIG. It is a figure which shows the example of the guidance screen for showing the kind of living body most suitable for personal authentication in process S508 in FIG. 5, and encouraging a user to use the living body. It is a figure which shows the example of the new registration permission screen displayed when permitting new registration in process S508 in FIG. It is a figure which shows the example of the registration refusal display screen displayed when refusing registration in process S507 in FIG. It is a flowchart which shows the process sequence of the authentication process using the optimal biometric information with the low risk of impersonation by others.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings, taking user registration and user authentication in banking operations as an example.

Hereinafter, embodiments of a biometric registration / authentication system, a biometric registration / authentication apparatus, and a biometric registration / authentication method according to the present invention will be described in detail with reference to the accompanying drawings. In the following, user registration and user authentication in banking operations are described as examples. However, the present invention can be applied to various operations that require user authentication and registration for the authentication.

FIG. 1 is a diagram showing an overall configuration of a biometric registration / authentication system. As shown in FIG. 1, the biometric registration / authentication system according to the present embodiment includes each branch 101 in banking business and a data center 107 that exchanges various data with each branch 101. They are connected to each other by a backbone network 105 such as a dedicated line.

Each branch 101 in banking business is provided with a terminal computer 102 operated by a bank clerk or an attendant and a biometric authentication device 103 connected to the terminal computer 102. It is controlled by receiving the acquired biological indication. The terminal computer 102 and the biometric authentication device 103 may be remotely connected via a network in addition to an I / O connection represented by a USB (Universal Serial Bus) connection.

The data center 107 has a host computer 108. As shown in FIG. 1, the host computer 108 includes a user additional information database 109, a user biometric information database 110, a biometric authentication program 112, and a user additional information comparison program 113. Specifically, as will be described later, when the user registers himself / herself, as the information regarding the user, in addition to a plurality of biometric information 104 regarding the user, name, sex, age, height, current address (residence), registration The additional information 104 for identifying the characteristics of the user such as the name of the branch office that performs the registration is also registered.

The host computer 108 compares the biometric information of the user with the biometric information stored in the user biometric information database 110 and is stored in the user additional information and the user additional information database 109. Comparison with additional information. Then, the host computer 108 determines whether or not the user who is to be newly registered has already been registered in the database based on the biometric similarity and the additional information similarity from the plurality of biometric information 104. And the determined result is presented to the user as a search result 106. Furthermore, the host computer 108 identifies a biometric with a low risk of impersonation by another person during personal authentication, presents the identified result to the user as a biometric 114 recommended for use of biometric authentication, and performs subsequent personal authentication. The user is prompted to use the living body.

In the present embodiment, the configuration of the host computer 108 is not particularly illustrated, but a control unit constituted by an arithmetic device such as a CPU (Central Processing Unit) for executing various processes shown below, Assume that hardware such as a memory for storing various programs and data is included. And when performing the process mentioned later, a control part reads a program mentioned above from memory etc., and controls various processes and transactions.

FIG. 2 is a diagram illustrating a configuration example of the biometric authentication device 103. In FIG. 2, a CPU 201 is a processor responsible for data processing in the biometric authentication device 103 and manages execution of various programs, which will be described later, and processing and control of various data. The peripheral device I / O port 202 is an interface for connecting the biometric authentication device 103 and the terminal computer 102. The biometric authentication illumination 203 is for acquiring a biometric image, and a near infrared LED or the like suitable for image acquisition is used.

The image sensor 204 is a sensor for acquiring a biometric image. For example, the biometric pattern irradiated by the biometric illumination 203 is acquired as image data by a CCD (Charge Coupled Device) camera or the like. In the main storage device 206, various programs and data areas for operating the device are secured. The overall apparatus control program 208 is a program that controls the entire biometric authentication apparatus 103. The peripheral device I / O control program 209 is a program for controlling the peripheral device I / O port 202. The image buffer 210 is an area for storing biological image data acquired by the image sensor 204.

As described above, each program performs a process by performing a predetermined function by being executed by the CPU 101. As shown in FIG. 2, these programs are stored in the main storage device 206. However, when executed by the CPU 201, for example, the entire device control means, the peripheral I / O control means, the authentication means, etc. , And can be expressed as means for realizing those functions.

FIG. 3 is a diagram illustrating a configuration example of the terminal computer 102. The CPU 301 is a processor responsible for data processing and various controls of the entire authentication system. The peripheral device I / O port 302 is an interface represented by USB for connecting the biometric authentication device 103. The display device 303 is a display for displaying a confirmation display when inputting the additional information of the person, an authentication result, and the like. The input device 305 is a device for inputting user additional information such as a keyboard. A bus 304 is a bus that connects modules in the terminal computer.

The main storage device 306 stores various programs. The biometric authentication device control program 307 is a program that controls the biometric authentication device 103 connected via the peripheral device I / O port 302. The peripheral device I / O control program 308 is a program for controlling the peripheral device I / O port 302. The customer information input control program 309 is a program that accepts information input from the input device 305 as customer information.

FIG. 4 is a diagram showing an example of user additional information stored in the user additional information database 109. As shown in FIG. 4, the user additional information database 109 includes identification information (ID) for identifying a user, the name, gender, and height of the user, and the user opens an account and adds it. A registered branch (account opening branch) indicating the branch 101 in which the information is registered is stored in association with the current address of the user. In FIG. 4, for example, the user “Hitachi Taro” identified by the ID “103251” is a man who is 33 years old, is 170-174 cm tall, and currently lives in “xx Town, Chuo-ku, Tokyo”. It shows that. This user also indicates that an account has been opened at the Otemachi branch.

In the biometric registration / authentication system according to the present embodiment, the gender, age, height, current address, and registered branch of a user who are highly likely to be at risk of impersonation are listed as examples of additional information. However, it is not necessarily limited to these examples. If there is a possibility of spoofing using items listed on identification documents such as a driver's license or passport, such as date of birth, permanent address, nationality, etc., these items may be included.

Next, with reference to FIG. 5, when the biometric authentication device 103 and the terminal computer 102 perform biometric registration / authentication processing operations, particularly when opening a store visitor's account in banking operations, the store visitor has already opened an account. An embodiment of the processing operation for checking whether the service is open will be described.

First, the CPU 301 of the computer 102 executes the customer information input control program 309, and the input device 305 receives input of additional information of the user from the operator of the terminal computer 102 (S501).

Next, the CPU 301 executes the biometric authentication device control program 307, transmits an activation signal to the biometric authentication device 103, and activates the biometric authentication device (S502). Then, the biometric authentication device 103 activates the CPU 201 based on the received activation signal, and executes the programs 208 to 209. In step S <b> 503, the CPU 301 executes the biometric authentication device control program 307 and transmits a biometric image acquisition processing activation signal to the biometric authentication device 103.

When a biometric is set in the biometric authentication device 103, the biometric authentication device 103 detects it and controls the biometric authentication illumination 203 and the image sensor 204 to acquire a biometric image. At that time, the biological image to be acquired acquires n biological bodies that are determined in advance. For example, in finger vein authentication, there are 6 living fingers such as the index finger, middle finger, and ring finger for each of the left hand and right hand, and in iris authentication, it is a living body such as 2 in total for the right eye and left eye.

Thereafter, in S 504, the CPU 301 transmits the user's biological information and additional information 104 to the host computer 108 via the backbone network 105. The host computer 108 collates and adds the biometric information in the database based on the user's biometric information and the additional information 104 received from the terminal computer 102 in the processes of FIGS. 6, 7, and 8 to be described later. Whether the user who acquired the biometric information by collating with the information has already been registered in the database, and of the n pieces of biometric information of the user acquired in S503, which biometric information is the most impersonated by others. It is determined whether the risk is small, and the result is returned to the terminal computer 102 in S505.

The terminal computer 102 that has received the determination result determines whether or not the user has already been registered (S506), and if it is determined that the user has already been registered, the terminal computer 102 determines that the user has already registered in S507. Perform the corresponding process. In FIG. 5, as an example of S507, the registration rejection display is used for the purpose of preventing double registration of the user. However, the registration rejection display is not particularly required if the process should be performed when the user is already registered. . FIG. 11 is a diagram illustrating an example of a registration rejection display screen displayed on the display device 303 when the CPU 301 rejects registration in S507. As shown in FIG. 11, the registration rejection display screen displays that the user has already been registered and that new registration cannot be accepted.

In this way, it is determined whether or not the user or another person pretending to be the user is registered by referring to the biometric information and additional information of the user, and it is determined that these users are already registered. In such a case, new registration is not accepted and double registration can be prevented. Therefore, a user impersonated by another person can quickly notice that the impersonation has occurred at the time of registration, and a bank employee or attendant can register that the user has been impersonated by another person. It can be discovered early at that time.

If the user has not been registered, the CPU 301 of the terminal computer 102 as the corresponding processing in S508, the user has not been registered at the present time, and the new registration is OK (allows new registration). ) Is displayed on the display device 303. Further, as a living body having a low risk of impersonation by another person, the type of the living body most suitable for the personal authentication received in S505 is shown, and the living body is used by the user. A guidance screen for prompting the user to do so is displayed on the display device 303.

FIG. 9 is a diagram showing an example of the above-described guidance screen. FIG. 10 is a diagram illustrating an example of the above-described new registration permission screen. As shown in FIG. 10, the new registration permission screen displays that the user has not been registered at the present time and that the new registration is OK. Further, as shown in FIG. 9, the guidance screen displays the recommended biological body (the user's finger in FIG. 9) in the order of the lowest possibility of impersonation by others (low similarity). Are displayed in order. Thus, since the CPU 301 of the terminal computer 102 displays the above-described guidance screen on the display device 303, the user can easily determine which biological information should be registered as biological information with the least risk of impersonation by others. Can be recognized.

In the present embodiment, the terminal computer 102 transmits the user's biological information and additional information to the host computer 108, and the host computer 108 holds the information. For example, the processing of S508 At the timing when the process ends, a bank clerk or an attendant inserts the user's cash card into a card reader (not shown) connected to the terminal computer 102, and the IC chip included in the inserted cash card holds the information. It is also possible. In this case, authentication can be rejected when the cash card user is different from the user at the time of registration.

6, 7, and 8 are flowcharts showing an example of processing on the host computer 108 side, particularly an example of processing when the residence, sex, and height are used as additional information of the user. . FIG. 6 is a diagram showing an overall outline of processing in the host computer 108.

First, in step S <b> 601, the host computer 108 receives n pieces of user biometric information and additional information from the terminal computer 102. Thereafter, in S602, the host computer 108 searches and collates the user additional information database 109 and the user biometric information database 110 based on the information received in S601, and the user has already been registered in the database. It is determined whether or not. Note that the processing content in S602 will be described in detail with reference to FIG.

Next, in step S603, the host computer 108 similarly searches and collates the user additional information database 109 and the user biometric information database 110 based on the information received in step S601, and obtains n pieces obtained from the user. The biometric information is searched and determined which biometric authentication is the safest during the personal authentication, that is, whether the similarity with the existing user is low and impersonation by another person is difficult. Note that the processing content in S603 will be described in detail with reference to FIG. Thereafter, in S604, the host computer 108 transmits the results of S602 and S603 to the terminal computer 102, and ends the process.

FIG. 7 is an example of details of processing in step S602 in FIG. In S701, the host computer 108 executes the biometric authentication program 112 of the host computer 108, and extracts n pieces of biometric information and additional information for one existing user from the user biometric information database 110 (S701). Next, in step S702, the host computer 108 uses the n pieces of biological information 104 received from the terminal computer 102 and the n pieces of biological information extracted in step S701, and compares the corresponding pieces of biological information. The degree of similarity between the two pieces of biological information is calculated (S702). At this time, the corresponding biometric information corresponds to the corresponding biometric information, for example, the index fingers of the right hand, the middle finger, in the case of finger vein authentication, the right eye, the left eye, etc. in the case of iris authentication.

Thereafter, in step S703, the host computer 108 determines whether or not the number of n similarities calculated in step S702 exceeds a predetermined similarity threshold is equal to or more than the predetermined number P. If it is determined whether or not the number exceeding the similarity threshold is equal to or greater than the number P (S703; Yes), the user who is going to register is extremely similar to the user extracted in S701. It is similar and it is determined that it is already registered in the database (S710), and the process is terminated. That is, in S703, the host computer 108 determines how much the user who is trying to register is very similar to the registered user (how much is black).

On the other hand, when the host computer 108 determines that the number exceeding the similarity threshold is not equal to or more than the predetermined number P (S703; No), in step S704, the n computers calculated in step S703 are used. Regarding the similarity, it is determined whether or not the number exceeding the predetermined similarity threshold is equal to or less than the predetermined number Q (S704), and the number is equal to or less than the number Q. The user who is going to register determines that it is not very similar to the user extracted in S701, and proceeds to the comparison with the next existing user (S711). In other words, in S704, the host computer 108 determines how much the user who is trying to register is not very similar to the registered user (how much it is white).

Here, the number is set so that P> Q, and a registered user who is very similar to the user is determined, and then a registered user that is not very similar to the user is determined. On the contrary, it is also possible to determine a registered user who is very similar to the user after determining a registered user who is not very similar to the user. For example, if there is a transaction device such as ATM (Automated Teller Machine) that authenticates users in an area where the number of crimes due to impersonation by others is low, the number of registered users that are very similar to users tends to be small It is thought that there is. Therefore, in order to increase the speed of the process search, a registered user who is not very similar to the user may be determined first.

In step S704, the host computer 108 determines that the number of the n similarities calculated in step S703 exceeds the predetermined similarity threshold is not less than the predetermined number Q (S704; No). ), It is determined whether the existing user taken out in S701 is the same person as the user to be registered or whether it is another person (gray zone). The user is not very similar to the user extracted in S701, but is determined to be likely to be similar, and in S705, S706, and S707, additional information such as the height, age, and address of the user is added. If either of them is similar, the user extracted in S701 and the user who is about to register Although not very similar, it is determined that their high possibility, already determined to be registered in the database (S710), the process ends. On the other hand, if the host computer 108 determines that none of the additional information is similar, the host computer 108 determines that the user extracted in S701 is a different person from the user who intends to register, and The process proceeds to comparison with existing users (S712).

As described above, when biometric authentication is performed, there are three branches, i.e., whether the person is the person (P or more similarities greater than or equal to the threshold value), the other person (Q or less similarities equal to or greater than the threshold value), or whether the determination is suspended. In the case where the biometric authentication result is branched and the determination is suspended, it is possible to improve the authentication accuracy by comparing the additional information of the user and determining whether the person is the other person or not.

In the above-described example, the determination based on the additional information is performed in the order of the user's height difference, age difference, and residence distance. Can do. For example, when an ATM is installed in a region where there are many elderly people, it is considered that the users are in an age group close to each other, and thus it may be difficult to narrow down the number of people. Therefore, in such a case, the determination based on the age difference may be performed last.

FIG. 8 is an example of the processing details of the processing S603 in FIG. In step S <b> 802, the host computer 108 activates the biometric authentication program 112, extracts biometric information for one user from the user biometric information database 110, compares it with the biometric information 104 received from the terminal computer 102, and n Calculate the degree of similarity.

Thereafter, in S803, the host computer 108 subtracts n similarities according to the distance of the physical distance of the residence between the existing user extracted in S802 and the new user. In this case, the host computer 108 increases the subtraction value as the distance increases, and decreases the subtraction value as the distance decreases. In other words, the closer the residence between the users, the higher the risk of impersonation by others.

Next, in S804, the host computer 108 subtracts n similarities according to the size difference between the users, similar to the subtraction of the similarity based on the physical distance of the residence in S803. In this case, the larger the height difference, the larger the subtraction value, and the smaller, the smaller the subtraction value. In other words, the smaller the height difference between users, the higher the risk of impersonation by others.

Next, in step S805, the host computer 108 subtracts a certain value from the n similarities when the gender between the users is different. In other words, if the gender between users is the same, the theory is that the risk of impersonation by others increases.

If information such as date of birth, residence, nationality, etc. included in identification documents such as driver's licenses and passports is set as additional information, the host computer 108 matches these pieces of information. It is good also as subtracting a fixed value from the similarity mentioned above, when it is judged whether it is in agreement.

The determination of height difference and gender in S803 and S804 is performed, for example, by a bank clerk or an attendant when biometric information is registered and the data is input, and the input data is compared with the data of registered users. Or, the height and gender may be analyzed from image data such as a camera, and the use and data of registered users may be compared.

For example, when analyzing height from image data, the size of a reference object is captured in advance, and it is determined how large the user's height is with respect to that object in the image. . There may be a case where such a determination method cannot measure the height itself with high accuracy. However, since the image of the user and the image of the registered user are imaged with the same accuracy based on the size of the predetermined object, the height error in these images is considered to be the same. You can get a height difference. When analyzing gender from image data, for example, feature information such as hair, body shape, face contour, etc. is acquired from an external site, and the average value (for example, average value for each age) is used as a reference. Alternatively, the determination may be made statistically, for example, when the feature information of the user on the image is within a certain range from the reference value, it is determined to be any gender.

Further, in this embodiment, in each step of S707 shown in FIG. 7 and S803 shown in FIG. 8, the residence of the user is described as an example of the additional information, but the same applies to the registered branch. Therefore, the determination in S707 or S803 may be performed using a registered branch instead of the place of residence. Furthermore, the determination described above in these steps may be performed using both the residence and the registered branch.

By performing the above processing, the host computer 108 calculates n total similarities in which the similarity of the additional information of the user is added to the biometric similarity of the user, and the comparison is made for one existing user. As a result, save the result.

Then, the host computer 108 performs the above processing for all existing users in the database (S807), and calculates the average of the total similarity for each n living organisms from the calculated total similarity of n × M people. Is calculated (S808). Thereafter, in S809, the host computer 108 determines that the living body having the lowest similarity is the safest living body for personal authentication from the calculated n similarity averages, and as shown in FIG. The biological information is displayed on the guidance screen in ascending order of similarity.

As described above, the biometric registration / authentication system according to the present embodiment is characterized in that n pieces of biometric information acquired from users are compared with biometric information of existing users in the database, and n pieces of similarity are obtained. And n total similarities are calculated in consideration of user attribute information. Then, by performing the above comparison process for all existing users, the average of n total similarity is obtained, and the living body having the lowest overall similarity is regarded as the living body that is most unlikely to be spoofed by others. By prompting the user to use it for personal authentication, a safe personal authentication means can be provided. That is, by comparing the biometric information of a new user with additional information such as gender and age, and comparing the biometric information of an existing user in the database with additional information such as gender and age, the new user can enter the database. Providing means to determine whether or not it has already been registered, and to provide the user with an optimum biometric to be used for personal authentication from the system side, and as a result, to provide personal authentication that is difficult for others to impersonate be able to.

Specifically, in a large-scale biometric registration / authentication system (for example, a biometric registration / authentication system in which millions to tens of millions of users exist), new users are registered in the database. At this time, in addition to registering a plurality of biometric information of the new user, additional information such as gender, age, height, current address, registered location, etc. of the new user is associated and registered. In addition, when performing identity authentication, among biometrics registered by the new user, in order to select a biometric that is difficult to impersonate by another person, in addition to obtaining biometric information of existing users, By comparing the additional information of the user with the additional information of the existing user, calculating the similarity, and adding to the similarity of the living body, it is possible to effectively select which living body should be used, It is possible to provide a safe identification means. In addition, biometric authentication and additional information similarity authentication are performed to determine whether the new user is a truly new user or whether an existing user is falsely registering as a new user. It becomes possible to detect by doing.

In the above-described example, when a user opens an account, the biometric information and additional information of the user are compared with the biometric information and additional information of the registered user, and the similarity is obtained. We decided to register the optimal biometric information with low risk of impersonation by others, but the user authenticates using the registered optimal biometric information and conducts various transactions using his / her own account. Will be able to.

FIG. 12 is a flowchart showing a processing procedure of authentication processing using optimal biometric information with a low risk of impersonation by another person. In the authentication process, for example, the user operates a transaction device (not shown) such as an ATM installed in each branch office or the ATM installed in a convenience store together with the terminal computer 102 shown in FIG. Is done by.

As shown in FIG. 12, when the host computer 108 receives the user's biometric information and additional information acquired by the biometric authentication device 103 from the above-described ATM, whether or not these pieces of information are the information of the user at the time of registration. Is checked (S1201, S1202).

Then, the host computer 108 determines whether or not these biometric information and additional information match the biometric information and additional information of the user at the time of registration (S1203). If it is determined that they match (S1203; Yes), the user is authenticated, the result is transmitted to the terminal computer 102, and the fact that the authentication is OK is displayed on the display device 303 of the terminal computer 102 (S1204).

On the other hand, when the host computer 108 determines that these pieces of information do not match the information at the time of registration (S1203; No), the host computer 108 transmits error information indicating that the user cannot be authenticated to the terminal computer 102, and A message indicating an authentication error is displayed on the display device 303 of the computer 102 (S1205). In this way, since the user is authenticated using the biometric information and additional information of the user at the time of registration, the user can be authenticated while reducing the risk due to impersonation by others.

In the example shown in FIG. 12, each piece of information is stored in an IC chip of the user's cash card when registering biometric information and additional information, and the ATM is provided when the user operates the ATM. However, if the information is not held on the cash card side, it is the same as the biometric authentication device 103 provided in the ATM at the time of authentication. The biometric authentication device may read the biometric information of the user and cause the host computer 108 to transmit the read biometric information. Further, when transmitting the additional information to the host computer 108, as in the case of the registration, the biometric information is measured by a bank clerk or an attendant, and the additional information data is input, or the height is obtained from the image data such as a camera. Alternatively, the additional information data may be generated by the ATM by analyzing the sex, and each of these data may be transmitted to the host computer 108.

The present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the above embodiments. For example, some components are deleted from all the components shown in the embodiment, such as performing registration and authentication of a user using a terminal device in which the terminal computer 102 and the biometric authentication device 103 are integrated. Also good. Furthermore, constituent elements over different embodiments may be appropriately combined.

101: Each branch office in banking business 102: Terminal computer 103: Biometric authentication device 104: Example of user information transmitted to the host computer 105: Core network 106: Identity determination result 107: Data center 108: transmitted to the terminal computer Host computer 109: User additional information database 110: User biometric information database 112: Biometric authentication program 113: User additional information comparison program.

Claims

A biometric registration / authentication system in which a terminal that registers biometric information of a user and a host computer that stores the registered biometric information are connected via a network,
The terminal
A sensor that captures the user's biological information;
An input unit for receiving input of additional information for identifying the characteristics of the user;
A display unit for displaying a determination result indicating whether or not the biometric information of the user can be registered;
A terminal control unit that transmits the biological information and the additional information to the host computer, or receives the determination result from the host computer and displays the determination result on the display unit;
The host computer
A storage unit for storing the biometric information and the additional information for the number of users of the biometric registration / authentication system;
The user's biological information and additional information are received from the terminal, and the user is based on the similarity between the biological information and additional information stored in the storage unit and the received biological information and additional information. A host control unit that determines whether or not is registered, and transmits the result to the terminal as the determination result;
A biometric registration / authentication system comprising:
The terminal
The sensor captures biological information of a plurality of parts of the user,
The display unit displays a guidance screen that recommends a part having a low degree of similarity with another user in the biological information of the plurality of parts as a registered part,
The terminal control unit transmits the captured biometric information of the plurality of parts to the host computer, or receives the determination result of the similarity for the biometric information of the plurality of parts from the host computer and displays it on the guidance screen. Display
The host computer
The host control unit receives the biometric information of the plurality of parts from the terminal, and receives each of the received biometric information of the plurality of parts and the biometric information of other users stored in the storage unit of the host computer. Determine the degree of similarity with each of them, and send the result to the terminal as the determination result;
The biometric registration / authentication system according to claim 1.
The host control unit determines the degree of similarity between each of the biological information of the plurality of parts and each of the biological information of the other users, and as a result, the number of parts having a degree of similarity equal to or greater than a predetermined threshold is obtained. If it is determined whether the number is greater than a certain number and less than a number greater than the certain number, and the number of parts is determined to be within the range, the additional information of the user and the other Determining whether the difference between the additional information of the user and the user is within a predetermined range, and determining that the difference between the additional information is not within the predetermined range, determining that the user is unregistered, The result is transmitted to the terminal as the determination result.
The biometric registration / authentication system according to claim 2.
When the terminal control unit receives a determination result of the similarity for the plurality of parts from the host computer, the part is displayed on the guidance screen as a recommended part in ascending order of similarity.
The biometric registration / authentication system according to claim 2 or 3.
The biometric registration / authentication system further includes a transaction device for the user connected to the network to perform transactions.
The transaction device
A device sensor that captures the user's biological information;
A device control unit that transmits the biometric information captured by the device sensor to the host computer, or receives an authentication result of the user from the host computer and displays the result on a display device;
The host control unit authenticates the user based on the biometric information received from the transaction apparatus and the biometric information of the other user stored in the storage unit, and the result is the authentication As a result, send to the transaction device,
The biometric registration / authentication system according to any one of claims 1 to 4, characterized in that:
In the terminal, the input unit accepts feature information including the user's height, residence, registered branch of the user, and gender as the additional information,
In the host computer, the host control unit determines whether or not the user is registered based on the similarity between the biological information and the feature information received from the terminal, and the result is the determination result. To the terminal as
The biometric registration / authentication system according to any one of claims 1 to 5, characterized in that:
A biometric registration / authentication device for registering biometric information of a user connected via a network to a host computer that stores biometric information,
A display unit for displaying a determination result indicating whether or not the biometric information of the user can be registered;
The biometric information captured by the sensor and the additional information for identifying the user characteristics input by the input unit are transmitted to the host computer, or the biometric registration / authentication system user is transmitted from the host computer. Is it possible to receive the result of whether or not the user is registered based on the biometric information and additional information for several minutes and the degree of similarity between the biometric information and the additional information, and register the biometric information of the user? A terminal control unit for displaying on a display unit for displaying a determination result indicating whether or not,
A biometric registration / authentication apparatus comprising:
The sensor captures biological information of a plurality of parts of the user,
The display unit displays a guidance screen that recommends, as a registered part, a part having a low degree of similarity with other users in the biological information of the plurality of parts,
The terminal control unit transmits the captured biological information of the plurality of parts to the host computer, or is stored in the storage part of the host computer with each of the biological information of the plurality of parts from the host computer. Receiving the result of determining the degree of similarity with each of the other users' biometric information, and displaying the part as a recommended part in the order of the degree of similarity on the guidance screen;
The biometric registration / authentication apparatus according to claim 7.
A biometric registration / authentication method performed in a biometric registration / authentication system in which a terminal that registers biometric information of a user and a host computer that stores the registered biometric information are connected via a network,
Transmitting the biometric information of the user captured from a sensor included in the terminal and additional information for identifying the characteristics of the user input from the input unit of the terminal to the host computer;
The user registers based on the similarity between the biometric information and the additional information for the number of users of the biometric registration / authentication system stored in the storage unit, and the biometric information and the additional information received from the terminal. Determining whether or not
Transmitting the result to the terminal as a determination result indicating whether registration of the biometric information of the user is possible;
Receiving the determination result from the host computer and displaying it on a display unit;
A biometric registration / authentication method comprising: