WO2020075317A1

WO2020075317A1 - Authentication system and smartphone case used therefor

Info

Publication number: WO2020075317A1
Application number: PCT/JP2019/004154
Authority: WO
Inventors: 守彦久保田
Original assignee: 株式会社ＭｏｒｉＸ
Priority date: 2018-10-10
Filing date: 2019-02-06
Publication date: 2020-04-16
Also published as: JP2022036337A; TW202014918A

Abstract

[Problem] To provide an authentication system capable of preventing unauthorized use of a smartphone by a third party, and a smartphone case used for the authentication system. [Solution] An authentication system 1 comprises a smartphone 10 and a fingerprint authentication device 16 capable of data communication with the smartphone 10. The fingerprint authentication device 16 is provided with: a fingerprint sensor 21 which reads fingerprint data; an authentication processing unit 22 which performs a matching process between the fingerprint data read by the fingerprint sensor 21 and pre-registered fingerprint template data; a data communication unit 23 which transmits authentication result data of the fingerprint data to the smartphone 10; and a power supply unit 25 which supplies power to the fingerprint sensor 21, the authentication processing unit 22, and the data communication unit 23.

Description

Authentication system and smartphone case used for this

The present invention relates to an authentication system using a smartphone. The present invention also relates to a smartphone case with a fingerprint authentication function used together with a smartphone in such an authentication system.

Widespread smartphones are equipped with various functions such as electronic payment, electronic commerce, access to personal information and confidential information, and convenience and added value are increasing. On the other hand, the risk of a smartphone being lost or stolen is increasing. There are many smartphones equipped with biometric authentication functions such as fingerprint authentication and face authentication for the purpose of preventing their use by third parties other than the legitimate owner (see, for example, Patent Document 1).

JP, 2016-212636, A

However, the biometric authentication function of a smartphone can be broken through by inputting a PIN code such as a PIN (Personal Identification Number), so its cryptographic strength is as weak as PIN. In addition, there are many smartphones that do not have a fingerprint authentication function, and such smartphones are always in danger.

Therefore, an object of the present invention is to provide an authentication system capable of preventing unauthorized use of a smartphone by a third party and a smartphone case used for the authentication system.

In order to solve the above problems, an authentication system according to the present invention includes a smartphone and a fingerprint authentication device capable of data communication with the smartphone, and the fingerprint authentication device includes a fingerprint sensor that reads fingerprint data and a fingerprint sensor that reads the fingerprint data. An authentication processing unit that performs a matching process between the fingerprint data and the fingerprint template data registered in advance, a data communication unit that transmits authentication result data of the fingerprint data to the smartphone, the fingerprint sensor, the authentication processing unit, and A power supply unit for supplying electric power to the data communication unit.

According to the present invention, the fingerprint authentication function can be added to the smartphone, and the smartphone security can be improved. In addition, the fingerprint authentication result on the fingerprint authentication device side can be transmitted to various cloud services by using the communication function of the smartphone, and the security of the cloud service can be improved. Even if the biometric information of the smartphone having the biometric authentication function is rewritten by a third party who knows the PIN code, the fingerprint authentication information on the fingerprint authentication device side cannot be rewritten. It can prevent unauthorized use by third parties and enhance the security of smartphones and cloud services.

In the present invention, it is preferable that the fingerprint authentication device is integrated with a smartphone case that houses the smartphone. According to this configuration, the fingerprint authentication function can be added to the smartphone only by housing the smartphone in the case, and the fingerprint authentication device can be always carried with the smartphone, which improves the convenience of the user. be able to.

In the present invention, it is also preferable that the fingerprint authentication device is configured to be detachable from a smartphone case that houses the smartphone. In this case, it is preferable that the fingerprint authentication device is a card type device and is stored in a card pocket provided in the smartphone case. With this configuration, it is possible to increase the degree of freedom in selecting a smartphone case design, and if the smartphone case becomes dirty or damaged, replace only the smartphone case and continue to use the fingerprint authentication device as it is. It is also advantageous in terms of cost.

In the present invention, the data communication unit preferably includes at least one communication module selected from NFC, Bluetooth (registered trademark, the same applies below), Wi-Fi, WAN, USB, and Lightning. Therefore, for example, the data communication unit may include a short-range wireless communication module (NFC module) that performs short-range wireless communication with the smartphone using the short-wave band of 13.56 MHz, and uses the frequency band of 2.4 GHz. A short-range wireless communication module (Bluetooth module) that performs short-range wireless communication with the smartphone may be included. Furthermore, the data communication unit may include a wireless LAN communication module that performs wireless communication with the smartphone according to the IEEE 802.11 standard. Thereby, the fingerprint authentication result on the smartphone case side can be transferred to the smartphone side, and the security of the smartphone can be improved.

In the present invention, it is preferable that the power supply unit includes at least one circuit selected from a battery, an NFC power supply circuit, a USB power supply circuit, a Lightning power supply circuit, and a Qi power supply circuit. Therefore, for example, the power supply unit may include a power supply circuit that receives power supply from the power supply line of the communication cable, or may include a contactless power supply circuit that receives power supply from the smartphone in a contactless manner. . When it has a function of receiving electric power by wire, it is possible to improve the operational reliability of the fingerprint authentication function of the smartphone case. In addition, when power is received by contactless power feeding, it is not necessary to connect the smartphone case and the smartphone by wire, and thus the convenience of the smartphone case with a fingerprint authentication function can be improved.

In the present invention, it is preferable that, when the authentication result data obtained by the fingerprint authentication device indicates that the smartphone has succeeded, the smartphone displays a screen indicating the successful authentication, allows the smartphone to operate, or allows processing by an application program. This can prevent unauthorized use of the smartphone by a third party and enhance security.

The authentication system according to the present invention is configured to be able to perform data communication with the smartphone via a public communication network, and further includes a server that performs an authentication process based on security information sent from the smartphone, and the smartphone has a predetermined size. While transmitting the security information, the authentication result data sent from the fingerprint authentication device is transferred to the server, and the server is based on the authentication result data sent from the fingerprint authentication device via the smartphone. It is preferable that the security information sent from the smartphone is additionally authenticated. According to this configuration, it is possible to prevent various cloud services provided through the smartphone from being illegally used by a third party and improve the security of the service.

The smartphone includes biometric authentication means, the security information is biometric authentication result data by the biometric authentication means, the server, the biometric authentication result data from the smartphone and the authentication result data from the fingerprint authentication device. It is preferable to perform a specific data processing when both of the two indicate successful authentication. According to this, it is possible to enhance the safety when the server executes specific data processing such as payment processing in response to a request from the smartphone.

Further, in order to solve the above problems, a smartphone case according to the present invention includes a case body that houses a smartphone, a fingerprint sensor provided on the surface of the case body, fingerprint data detected by the fingerprint sensor, and a fingerprint registered in advance. The authentication processing unit includes an authentication processing unit that performs a matching process with template data, a data communication unit that performs data communication, a power supply unit that supplies power to the fingerprint sensor, the authentication processing unit, and the data communication unit. The data communication unit and the power supply unit are built in the case body, and the data communication unit transmits fingerprint authentication result data by the authentication processing unit.

According to the present invention, the fingerprint authentication function can be added to the smartphone only by housing the smartphone in the case, and the security of the smartphone can be improved. In addition, the fingerprint authentication result on the smartphone case side can be transmitted to various cloud services by using the communication function of the smartphone, and the security of the cloud service can be improved. Moreover, even if the biometric information of the smartphone having the biometric authentication function is rewritten by a third party who knows the PIN code, the fingerprint authentication information on the smartphone case side cannot be rewritten. It is possible to prevent unauthorized use of users and improve the security of smartphones and cloud services.

In the present invention, it is preferable that the data communication unit includes at least one communication module selected from NFC, Bluetooth, Wi-Fi, WAN, USB, and Lightning. Therefore, for example, the data communication unit may include a short-range wireless communication module (NFC module) that performs short-range wireless communication with the smartphone using the short-wave band of 13.56 MHz, and uses the frequency band of 2.4 GHz. A short-range wireless communication module (Bluetooth module) that performs short-range wireless communication with the smartphone may be included. Furthermore, the data communication unit may include a wireless LAN communication module that performs wireless communication with the smartphone according to the IEEE 802.11 standard. Thereby, the fingerprint authentication result on the smartphone case side can be transferred to the smartphone side, and the security of the smartphone can be improved.

The data communication unit may include a wired communication module that performs wired communication with the smartphone via a communication cable. As a result, the reliability of communication with the smartphone can be increased, and the identity verification process using the biometric authentication function of the smartphone case can be reliably performed.

In the present invention, it is preferable that the authentication processing unit is composed of a semiconductor IC chip having damper resistance. According to this, even if the smartphone case is handed over to a third party, the fingerprint information is not read, and the security and convenience of the smartphone case with a fingerprint authentication function can be further improved.

In the present invention, the case body is a case type having a base cover portion that covers the back surface of the smartphone, and a side cover portion that covers the side surface of the smartphone, and the fingerprint sensor is provided on the outer surface of the base cover portion. It is preferably provided. Furthermore, it is preferable that the authentication processing unit, the data communication unit, the control unit, and the power supply unit are embedded inside the base cover unit. According to this configuration, a so-called case-type smartphone case can be easily realized as a smartphone case with a fingerprint authentication function.

In the present invention, the case body has a base cover portion that covers the back surface of the smartphone, and a holding member that slidably holds the smartphone, and the fingerprint sensor is provided on an inner surface of the base cover portion. The fingerprint sensor is hidden behind the smartphone when the smartphone covers the front surface of the case body, and the fingerprint sensor is exposed when the smartphone exposes the front surface of the case body. It is preferable. According to this configuration, a so-called case-type smartphone case can be easily realized as a smartphone case with a fingerprint authentication function.

Further, the authentication system according to the present invention includes a smartphone and a smartphone case having the above-described features of the present invention that accommodates the smartphone, and the smartphone operates or operates the smartphone only when authenticated by the authentication processing unit. The feature is that processing by an application program is permitted.

The authentication system according to the present invention further includes a server capable of communicating with the smartphone via a public communication network, the smartphone transmits the fingerprint authentication result data sent from the smartphone case to the server, and the server is It is preferable that predetermined data processing be performed when fingerprint authentication result data by the smartphone case sent from the smartphone indicates successful authentication.

In the present invention, it is preferable that the smartphone includes a biometric authentication unit, and the server performs the data processing when both the biometric authentication result by the smartphone and the fingerprint authentication result by the smartphone case indicate successful authentication. When the data processing is electronic payment processing, transaction security can be enhanced.

According to the present invention, it is possible to provide an authentication system capable of preventing unauthorized use of a smartphone by a third party and a smartphone case used for the authentication system.

FIG. 1 is a block diagram schematically showing a configuration of an authentication system according to an embodiment of the present invention. FIG. 2 is a plan view schematically showing an example of a specific configuration of a smartphone case, where (a) is a front view showing a state where the smartphone is housed in the case, (b) is a rear view, c) is a front view of the smartphone taken out of the smartphone case, and (d) is a front view showing a state where the smartphone is taken out of the case. 3A to 3C are diagrams schematically showing another example of the structure of the smartphone case, and FIG. 3A is a front view showing a state in which the smartphone is housed and the top cover part is opened. , (B) is a side view showing a state in which the top cover portion is opened, and (c) is a side view showing a state in which the top cover portion is closed. 4A and 4B are diagrams schematically showing another example of the structure of the smartphone case together with FIG. 3, in which FIG. 4A is a front view showing a state where the smartphone is removed, and FIG. It is a front view showing a state where the smartphone is slightly slid upward. FIG. 5 is a sequence diagram for explaining an example of a fingerprint authentication operation performed by the smartphone case and the smartphone. FIGS. 6A and 6B are schematic perspective views showing a modified example of a smartphone case with a fingerprint authentication function, and FIG. 6A shows a state where a card-type fingerprint authentication device is housed in the smartphone case. (B) shows a state in which the card-type fingerprint authentication device is taken out from the smartphone case.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a block diagram schematically showing the configuration of an authentication system according to an embodiment of the present invention.

As shown in FIG. 1, the authentication system 1 includes a smartphone 10, a fingerprint authentication device 16 incorporated in a smartphone case 20 accommodating the smartphone 10, and a smartphone 10 or fingerprint authentication via a public communication network such as the Internet 40. A service server 30 capable of communicating with the device 16 is provided.

The smartphone 10 is a mobile wireless terminal that has a property closer to that of a personal computer than a conventional mobile phone, and has various functions such as a telephone function, a web browser, an email function, and a music and video playback function. Various application programs can be installed in the smartphone 10, and it is easy to add or delete functions.

In the present invention, it is not essential that the smartphone 10 has a telephone function, and its size is not particularly limited. Therefore, a so-called tablet terminal is also included in the concept of the smartphone 10 in the present invention.

In general, the smartphone 10 has a data communication function using a public communication line (WAN) such as LTE, as well as communication such as NFC (Near Field Communication), Bluetooth, Wi-Fi, USB (Universal Serial Bus), and Lightning. It is equipped with various communication modules to realize it, and can communicate using various communication methods. NFC is one of short-distance wireless communication standards (ISO / IEC18092 (NFCIP-1)) that realizes short-distance wireless communication of 10 cm or less using the 13.56 MHz short-wave band. Bluetooth is one of the communication standards that realizes short-range wireless communication using the 2.4 GHz frequency band. Wi-Fi is one of the wireless LAN communication standards according to the IEEE 802.11 standard. USB is a serial bus communication standard, and Lightning is one of wired communication standards.

It is preferable that the smartphone 10 has a biometric authentication function such as fingerprint authentication. When the smartphone 10 has the biometrics authentication function, the lock can be easily released without entering the PIN code every time, and the convenience can be improved while ensuring the security of the smartphone 10. The biometric authentication method of the smartphone 10 is not limited to fingerprint authentication, and may be face authentication, iris authentication, or the like.

A dedicated application program (fingerprint authentication application) that works with the fingerprint authentication function of the smartphone case 20 is installed on the smartphone 10 according to this embodiment. In addition, the third-party application program 12 can perform identity verification using the program module 13 (fingerprint authentication module) that works in conjunction with the fingerprint authentication function of the smartphone case 20.

The smartphone case 20 is a cover member for protecting the smartphone 10 from a shock or the like. While the smartphone 10 is a precision device and is vulnerable to shocks such as falling, it is small and thin and is easy to drop. Therefore, most smartphone users use the smartphone 10 by accommodating it in a smartphone case 20. The smartphone case 20 is attached later to the smartphone product, and is different from the casing of the smartphone 10. The smartphone case 20 can be easily attached to and detached from the smartphone 10, and can be easily attached to and removed from the smartphone 10 without using a special tool. The shape of the smartphone case 20 is not particularly limited, and a so-called case type or notebook type case can be used.

The smartphone case 20 according to the present embodiment has the fingerprint authentication device 16 incorporated in such a well-known cover member. The fingerprint authentication device 16 includes a fingerprint sensor 21 that reads fingerprint data, an authentication processing unit 22 that performs fingerprint authentication processing by collating the fingerprint data read by the fingerprint sensor 21 with a plurality of fingerprint template data registered in advance. A data communication unit 23 that performs data communication with the smartphone 10 and the like, a control unit 24 that controls the fingerprint sensor 21, the authentication processing unit 22, and the data communication unit 23, a fingerprint sensor 21, an authentication processing unit 22, a data communication unit 23, and control. The power supply unit 25 supplies power to the unit 24.

The authentication processing unit 22 includes a secure memory for storing fingerprint template data, and performs collation processing between the fingerprint data detected by the fingerprint sensor 21 and a plurality of fingerprint template data registered in advance. The authentication processing unit 22 is preferably composed of a semiconductor IC chip having damper resistance. As a result, even if the smartphone case 20 is lost or the like and reaches the hand of a third party, the security of the fingerprint information can be ensured.

The data communication unit 23 transmits the fingerprint authentication result data from the authentication processing unit 22 to the smartphone 10. The data communication unit 23 includes at least one communication module selected from NFC, Bluetooth, Wi-Fi, USB, and Lightning. NFC and Bluetooth are short-range wireless communication, and USB and Lightning are wired communication. In this case, the data communication unit 23 can transmit the fingerprint authentication result data to the smartphone 10, or can transfer the fingerprint authentication result data to the service server 30 via the smartphone 10.

The data communication unit 23 may have an IoT communication module connectable to a public communication line (WAN) such as LTE. In this case, the data communication unit 23 can transmit the fingerprint authentication result data to the service server 30 via the WAN (via the Internet 40) without passing through the smartphone 10.

The power supply unit 25 may include a battery, an NFC power supply circuit, a USB power supply circuit, a Lightning power supply circuit, a Qi power supply circuit, and the like, and at least one of these may be included. Since the fingerprint authentication requires only a small amount of power, a large-capacity battery is not required, and power can be supplied from the smartphone 10 by contactless power supply such as NFC or Qi. Qi is an international standard for wireless power supply for small electronic devices such as smartphones. When the power is received by contactless power supply, it is not necessary to wire-connect the fingerprint authentication device 16 and the smartphone 10, so that the convenience of the smartphone case 20 with the fingerprint authentication function can be improved.

The USB power supply circuit and the Lightning power supply circuit are connected to the smartphone 10 etc. via a communication cable and receive power from the power supply line of the signal cable. When the fingerprint authentication device 16 has a function of receiving such power by wire, it can improve the operational reliability of the fingerprint authentication function of the fingerprint authentication device 16.

A dedicated reading device is used for initial registration of the fingerprint template in the authentication processing unit 22 of the fingerprint authentication device 16. The fingerprint information of the user can be registered only once in the fingerprint authentication device 16, and the fingerprint information once registered cannot be basically rewritten. If the user wants to change the fingerprint information, it is necessary to discard the smartphone case itself, purchase a new smartphone case 20, and newly register the fingerprint information. Since the smartphone case 20 has only the elements necessary for fingerprint authentication mounted on the case body, it is inexpensive in cost and disposable. Further, even if the smartphone case 20 is lost or stolen, it can be purchased again and used, and the fingerprint authentication function is not abused.

The service server 30 provides various cloud services by communicating with the smartphone 10 via the Internet 40. For example, the service server 30 can perform electronic payment according to a request from the smartphone 10. At this time, the service server 30 confirms the identity of the user, executes the settlement when the user is authenticated as the owner of the smartphone 10, and cancels the settlement when the user is not authenticated.

At this time, the service server 30 can use the fingerprint authentication result of the fingerprint authentication device 16 for identity verification. The smartphone 10 that has received the identity verification request from the service server 30 requests the current user to perform fingerprint authentication using the fingerprint sensor 21 of the fingerprint authentication device 16. When the user performs the fingerprint authentication operation, the fingerprint authentication module 13 incorporated in the dedicated application program 11 or the third-party application program 12 in the smartphone 10 provides the fingerprint authentication result data sent from the fingerprint authentication device 16 as a service. Transfer to the server 30. Then, the service server 30 executes electronic payment if the fingerprint authentication result data sent from the smartphone 10 indicates authentication success, and cancels the electronic payment if the fingerprint authentication result data indicates authentication failure.

As described above, the smartphone case 20 has the fingerprint authentication function, but the fingerprint authentication result is not used by the smartphone case 20 itself but by the smartphone 10 or the service server 30. Therefore, the smartphone case 20 needs not only the fingerprint authentication function but also the communication function for transmitting the fingerprint authentication result. The application of the fingerprint authentication result by the smartphone 10 or the service server 30 is not particularly limited, and the application can be used for various applications requiring identification. For example, the smartphone 10 can be used to unlock the operation of the smartphone 10. Alternatively, the application program in the smartphone 10 can be used for identity verification when performing special processing.

FIG. 2 is a plan view schematically showing an example of a specific configuration of the smartphone case 20, where (a) is a front view showing a state where the smartphone 10 is housed in the case, and (b) is a rear view. , (C) is a front view of the smartphone 10 taken out from the smartphone case 20, and (d) is a front view showing a state where the smartphone 10 is taken out from the case.

As shown in FIGS. 2A to 2D, the smartphone case 20 according to the present embodiment is a so-called case-type smartphone case that is fitted and attached from the back side of the smartphone 10. Therefore, the case body 26 has a base cover portion 26a that covers the back surface of the smartphone 10, and a side cover portion 26b that covers the side surface (outer peripheral surface) of the smartphone over the entire circumference, and a cover member for protecting the smartphone 10 is provided. I am configuring. The material of the case body 26 is not particularly limited as long as the fingerprint authentication function and the communication function can be embedded, and polycarbonate, TPU (thermoplastic polyurethane), silicon rubber, leather, or the like can be used.

The smartphone 10 is a thin information device having a substantially rectangular planar shape, and has a touch panel display 14 on the front surface and a flat housing surface on the back surface. A camera 15 is provided on the back side of the smartphone 10. The touch panel display 14 of the smartphone 10 is exposed without being covered by the case body 26. Normally, the base cover portion 26a of the case body 26 is provided with an opening 26h that exposes the camera 15 provided on the back surface of the smartphone 10. Further, an opening for exposing the operation buttons and the connector is also provided at an appropriate position of the case main body 26.

As described above, the smartphone case 20 according to the present embodiment has the fingerprint authentication function and the communication function in addition to the function as a normal case that protects the smartphone 10 from scratches and impacts. The fingerprint sensor 21 is provided on the outer surface of the base cover portion 26a of the case body 26. The electronic circuit package 28 including the authentication processing unit 22, the data communication unit 23, the control unit 24, the power supply unit 25, and the like is extremely thin and is built in the case body 26, and the base cover portion 26 a of the case body 26. It is embedded inside the wall that constitutes the. The fingerprint sensor 21 may be provided on the surface of the side cover portion 26b of the case body 26.

The LED indicator 27 may be provided on the outer surface of the base cover portion 26a of the case body 26. The LED indicator 27 is provided near the fingerprint sensor 21 and informs the fingerprint authentication operation state by lighting or blinking. For example, it blinks when waiting for fingerprint data reading and lights up when fingerprint data reading is completed, so that it is possible to easily know whether or not the fingerprint reading operation is correctly performed.

FIG. 3 is a diagram schematically showing another example of the structure of the smartphone case 20, in which (a) is a front view showing a state in which the smartphone 10 is housed and the top cover part 29c is opened, (b). Is a side view showing a state in which the top cover portion 29c is opened, and (c) is a side view showing a state in which the top cover portion 29c is closed. 4 is a diagram schematically showing another example of the structure of the smartphone case 20 together with FIG. 3, in which (a) is a front view showing a state where the smartphone 10 is removed, and (b) is the smartphone 10. It is a front view which shows the state which was slid up a little.

As shown in FIGS. 3A to 3C and FIGS. 4A and 4B, the smartphone case 20 according to the present embodiment is a so-called notebook type smartphone case. Therefore, the case main body 26 connects the base cover portion 29a that covers the back surface of the smartphone 10, the top cover portion 29c that covers the front surface of the smartphone 10 in an openable and closable manner, the top cover portion 29c and the base cover portion 29a, and the smartphone 10 It has the connection part 29b which covers one side surface. The case body 26 has a resin holding member 29d provided on the inner surface of the base cover portion 29a. The smartphone 10 can be set by fitting it into the holding member 29d, and the smartphone 10 is slidable along the guide piece of the holding member 29d.

As shown in FIGS. 4A and 4B, the fingerprint sensor 21 is provided on the inner surface of the base cover portion 26a facing the back surface of the smartphone 10. Therefore, as shown in FIG. 3A, when the smartphone 10 is completely fitted in the holding member 29d, the fingerprint sensor 21 is hidden behind the smartphone 10 and invisible. However, when the smartphone 10 is slid upward as shown in FIG. 4B, the fingerprint sensor 21 is exposed, so that the fingerprint reading operation can be performed.

It is not essential to provide the fingerprint sensor 21 on the inner surface of the base cover portion 29a in the notebook-type smartphone case 20, and the fingerprint sensor 21 may be provided in the base cover portion 29a as in the case-type smartphone case 20 shown in FIG. It can also be provided on the outer surface. Further, it may be provided on the inner surface or the outer surface of the top cover portion 29c. However, when the fingerprint sensor 21 is provided on the inner surface of the base cover part 29a in the notebook type smartphone case 20, the fingerprint sensor 21 can be covered with the smartphone 10 and the fingerprint sensor 21 can be protected. Further, the fingerprint sensor 21 can be hidden, and the existence itself of the fingerprint sensor 21 can be hidden to improve security.

FIG. 5 is a sequence diagram for explaining an example of the fingerprint authentication operation performed by the fingerprint authentication device 16 and the smartphone 10.

As shown in FIG. 5, when the user requests a specific operation on the application program (step S1), the smartphone 10 transmits fingerprint authentication request data to the fingerprint authentication device 16 incorporated in the smartphone case 20 (step S2). . The application program of the smartphone 10 here may be the dedicated application program 11 (fingerprint authentication application) in FIG. 1 or the third-party application program 12. In the case of the third-party application program 12, the fingerprint authentication module 13 sends fingerprint authentication request data.

The control unit 24 of the fingerprint authentication device 16, which has received the fingerprint authentication request data, activates the fingerprint sensor 21 and then transmits the fingerprint sensor operation request data (step S3). The smartphone 10, which has received the fingerprint sensor operation request data, notifies the user of the fingerprint sensor operation request from the fingerprint authentication device 16 by screen display, sound, vibration, etc. to start the fingerprint reading operation (step S4). ). At this time, the LED indicator 27 is also in a blinking state.

In this way, when the user who receives the fingerprint reading operation request on the smartphone 10 presses the fingertip of the fingerprint sensor 21 of the fingerprint authentication device 16 to perform the fingerprint reading operation (step S5), the fingerprint data matching process is performed. The fingerprint authentication result data is transferred to the smartphone 10 (step S6).

When the fingerprint authentication result data indicates that the authentication is successful, a screen indicating that the authentication is successful is displayed, the request for operating the application program is approved, and the smartphone 10 is unlocked, so that the application program can be operated. (Step S7A). However, when the fingerprint authentication result indicates authentication failure, a screen indicating the authentication failure is displayed, the operation request of the application program is rejected, and the smartphone 10 is not unlocked. Therefore, it is not possible to operate the application program. No (step S7B).

When the smartphone 10 requests the service server 30 for electronic payment, the application program of the smartphone 10 sends the fingerprint authentication result data sent from the fingerprint authentication device 16 to the service server 30. The smartphone 10 may directly transfer the authentication result data of the fingerprint authentication device 16 to the service server 30, or may transmit the authentication result data processed in the smartphone 10 and rewritten in another data format. When the smartphone 10 has the biometric authentication function, both the biometric authentication result by the smartphone 10 and the fingerprint authentication result by the fingerprint authentication device 16 are transmitted to the service server 30.

Then, when the service server 30 receives the authentication result data indicating the successful authentication, the service server 30 executes a specific data process such as electronic payment. If the authentication result data indicating the successful authentication is not received, the specific data processing such as electronic payment is not executed. Therefore, the reliability of electronic payment can be improved.

If the smartphone 10 itself has a biometric authentication function, the biometric authentication result by the smartphone 10 can be sent to the service server 30 together with the fingerprint authentication result by the fingerprint authentication device 16. In this case, the service server 30 can perform the desired electronic payment processing only when both the biometric authentication result by the smartphone 10 and the fingerprint authentication result by the fingerprint authentication device 16 are successful. When the double biometric authentication is performed as described above, the reliability of electronic payment can be enhanced and the security of high-value payment can be enhanced.

Since the smartphone 10 is a multifunctional and extremely expensive information device, it is unavoidable that the owner can be changed. When the smartphone 10 has a biometric authentication function, the biometric information can be rewritten. . Usually, rewriting of biometric information can be performed by inputting a PIN code such as PIN and unlocking. Therefore, if the secret code is known to a third party, the biometric information may be rewritten and the smartphone 10 may be taken over, and the third party can impersonate the owner of the smartphone 10. .

However, even if a third party can rewrite biometric information in the smartphone 10 and impersonate him / her, he / she cannot break through the fingerprint authentication on the smartphone case 20 side. Therefore, the unauthorized use of the smartphone 10 by a third party can be prevented, and the security of the smartphone 10 and the security of various cloud services provided via the smartphone 10 can be enhanced. When the smartphone case 20 is provided with the fingerprint authentication function, the fingerprint authentication function can be added to the smartphone 10 only by housing the smartphone 10 in the smartphone case 20, so that the additional fingerprint authentication function is always provided. It can be carried around with the smartphone 10, and convenience can be improved.

As described above, in the authentication system 1 according to the present embodiment, the smartphone case 20 accommodating the smartphone 10 has the fingerprint authentication function and the communication function, and the identity verification is performed using the fingerprint authentication result of the smartphone case 20, Even if the smartphone 10 is not equipped with the biometrics authentication function, it is possible to perform identity verification by biometrics authentication and enhance the security of the smartphone 10. Further, when the smartphone 10 is equipped with the biometric authentication function, it is possible to prevent spoofing by rewriting the biometric information in the smartphone 10, and it is possible to further improve the security by the additional authentication. Therefore, it is possible to prevent unauthorized use of the smartphone by a third party other than the legitimate owner.

FIGS. 6A and 6B are schematic perspective views showing a modified example of a smartphone case with a fingerprint authentication function, and FIG. 6A shows a state where a card-type fingerprint authentication device is housed in the smartphone case. (B) shows a state in which the card-type fingerprint authentication device is taken out from the smartphone case.

As shown in FIGS. 6A and 6B, the smartphone case 20 with a fingerprint authentication function according to the present embodiment is not a fingerprint authentication device integrated with the case body 26 but a card pocket of a general smartphone case 20. The fingerprint authentication card 17, which is a card-type fingerprint authentication device, is housed in 26p. The illustrated smartphone case 20 is a so-called notebook type, but may be a case type, and its shape is not particularly limited. Other configurations are the same as those of the above-described embodiment, in particular, the fingerprint authentication device is physically independent of the smartphone 10.

The fingerprint authentication card 17 is one in which the above-mentioned fingerprint authentication device 16 (see FIG. 1) is incorporated in a resin card body. As described above, the fingerprint authentication device 16 performs the fingerprint authentication process by collating the fingerprint sensor 21 for reading the fingerprint data with the fingerprint data read by the fingerprint sensor 21 and a plurality of fingerprint template data registered in advance. The processing unit 22, the data communication unit 23 that performs data communication with the smartphone 10, etc., the fingerprint sensor 21, the control unit 24 that controls the authentication processing unit 22 and the data communication unit 23, the fingerprint sensor 21, the authentication processing unit 22, and the data. It has a power supply unit 25 that supplies power to the communication unit 23 and the control unit 24. The size of the fingerprint authentication card 17 is preferably a size (53.98 mm × 85.60 mm) according to ID-1 of the international standard ISO / IEC7810, but may be a different size.

The fingerprint sensor 21 is provided on one main surface of the card body. The electronic circuit package 28 including the authentication processing unit 22, the data communication unit 23, the control unit 24, the power supply unit 25, and the like is extremely thin and is embedded inside the card body. The fingerprint sensor 21 is preferably arranged near one end in the longitudinal direction of the fingerprint authentication card 17 so that the fingerprint sensor 21 is exposed even when the fingerprint sensor 21 is put in the card pocket 26p.

When the fingerprint authentication card 17 according to this embodiment is used, the smartphone case 20 with the fingerprint authentication function can be realized by using a commercially available smartphone case. Since the user can select smartphone cases of various designs, it is possible to increase the degree of freedom in selecting the smartphone case design. In addition, even if the smartphone case becomes dirty or damaged due to use, only the case body 26 can be replaced with a new one and the fingerprint authentication card 17 can be used as it is, which is advantageous in terms of cost. The convenience of 20 can be improved.

Although the preferred embodiments of the present invention have been described above, the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention. It goes without saying that it is included in the range.

For example, in the above-described embodiment, the case where the fingerprint authentication device has the authentication processing unit that performs the verification process of the fingerprint data has been described, but the verification process can be performed externally. That is, the fingerprint data read by the fingerprint sensor may be sent to the authentication server via the smartphone, and the verification process with the fingerprint template data may be performed in the authentication server.

1 Authentication system 10 Smartphone 11 Dedicated application program (fingerprint authentication application)
12 Third-party application program 13 Fingerprint authentication module 14 Touch panel display 15 Camera 16 Fingerprint authentication device 17 Fingerprint authentication card (card type fingerprint authentication device)
20 smartphone case 21 fingerprint sensor 22 authentication processing unit 23 data communication unit 24 control unit 25 power supply unit 26 case body 26a base cover unit 26b side cover unit 26h opening 26p card pocket 27 LED indicator 28 electronic circuit package 29a base cover unit 29b connection unit 29c Top cover part 29d Holding member 30 Service server 40 Internet

Claims

With a smartphone
A fingerprint authentication device capable of data communication with the smartphone is provided,
The fingerprint authentication device is
A fingerprint sensor that reads fingerprint data,
An authentication processing unit that performs a matching process between the fingerprint data read by the fingerprint sensor and the fingerprint template data registered in advance;
A data communication unit that transmits authentication result data of the fingerprint data to the smartphone,
An authentication system comprising: the fingerprint sensor, the authentication processing unit, and a power supply unit that supplies power to the data communication unit.
The authentication system according to claim 1, wherein the fingerprint authentication device is integrated with a smartphone case that houses the smartphone.
The authentication system according to claim 1, wherein the fingerprint authentication device is configured to be detachable from a smartphone case in which the smartphone is housed.
The authentication system according to claim 3, wherein the fingerprint authentication device is a card-type device, and is stored in a card pocket provided in a smartphone case that houses the smartphone.
The authentication system according to any one of claims 1 to 4, wherein the data communication unit includes at least one communication module selected from NFC, Bluetooth, Wi-Fi, WAN, USB, and Lightning.
The authentication system according to any one of claims 1 to 5, wherein the power supply unit includes at least one circuit selected from a battery, an NFC power supply circuit, a USB power supply circuit, a Lightning power supply circuit, and a Qi power supply circuit.
The authentication system according to any one of claims 1 to 5, wherein the power supply unit includes a contactless power supply circuit that receives power from the smartphone in a contactless manner.
The smart phone permits display of a screen showing the successful authentication, operation of the smart phone or specific processing by an application program when the authentication result data by the fingerprint authentication device indicates successful authentication. The authentication system according to item 1.
A server that is configured to be able to perform data communication with the smartphone via a public communication network and further includes a server that performs authentication processing based on security information sent from the smartphone,
The smartphone transmits predetermined security information and transfers the authentication result data sent from the fingerprint authentication device to the server,
9. The server additionally authenticates the security information sent from the smartphone based on the authentication result data sent from the fingerprint authentication device via the smartphone. The authentication system described in paragraph.
The smartphone includes biometrics means,
The security information is biometric authentication result data by the biometric authentication means,
The authentication system according to claim 9, wherein the server performs specific data processing when both the biometric authentication result data from the smartphone and the authentication result data from the fingerprint authentication device indicate successful authentication.
A case body that houses a smartphone,
A fingerprint sensor provided on the surface of the case body,
An authentication processing unit that performs a matching process between the fingerprint data detected by the fingerprint sensor and the fingerprint template data registered in advance,
A data communication unit that performs data communication,
A power supply unit that supplies power to the fingerprint sensor, the authentication processing unit, and the data communication unit;
The authentication processing unit, the data communication unit, and the power supply unit are built in the case body,
The smartphone case, wherein the data communication unit transmits the authentication result data by the authentication processing unit.
The smartphone case according to claim 11, wherein the data communication unit includes at least one communication module selected from NFC, Bluetooth, Wi-Fi, WAN, USB, and Lightning.
The smartphone case according to claim 11, wherein the data communication unit includes a short-range wireless communication module that performs short-range wireless communication with the smartphone using the short-wave band.
The smartphone case according to claim 11, wherein the data communication unit includes a short-range wireless communication module that performs short-range wireless communication with the smartphone using the frequency band of 2.4 GHz.
The smartphone case according to claim 11, wherein the data communication unit includes a wireless LAN module that performs wireless LAN communication with the smartphone according to the IEEE 802.11 standard.
The smartphone case according to claim 11, wherein the data communication unit includes a wired communication module that performs wired communication with the smartphone via a communication cable.
The smartphone case according to any one of claims 11 to 16, wherein the power supply unit includes at least one circuit selected from a battery, an NFC power supply circuit, a USB power supply circuit, a Lightning power supply circuit, and a Qi power supply circuit.
The smartphone case according to claim 16, wherein the power supply unit includes a power supply circuit that receives power from a power supply line of the communication cable.
The smartphone case according to any one of claims 11 to 16, wherein the power supply unit includes a contactless power feeding circuit that receives power from the smartphone in a contactless manner.
The smartphone case according to any one of claims 11 to 19, wherein the authentication processing unit is formed of a semiconductor IC chip having damper resistance.
The case body is a case type having a base cover portion that covers the back surface of the smartphone, and a side cover portion that covers the side surface of the smartphone.
The smartphone case according to claim 11, wherein the fingerprint sensor is provided on an outer surface of the base cover part.
The smartphone case according to claim 11, wherein the authentication processing unit, the data communication unit, the control unit, and the power supply unit are embedded inside the base cover unit.
The case body is a base cover portion that covers the back surface of the smartphone,
A holding member for holding the smartphone slidably,
The fingerprint sensor is provided on the inner surface of the base cover part,
When the smartphone covers the front surface of the case body, the fingerprint sensor is hidden behind the smartphone,
The smartphone case according to any one of claims 11 to 22, wherein the fingerprint sensor is exposed when the smartphone exposes the front surface of the case body.