WO2021220320A1

WO2021220320A1 - Biometric authentication system

Info

Publication number: WO2021220320A1
Application number: PCT/JP2020/015919
Authority: WO
Inventors: 和男吉原
Original assignee: 和男吉原
Priority date: 2020-04-03
Filing date: 2020-04-09
Publication date: 2021-11-04
Also published as: JP2021160679A

Abstract

[Problem] To provide a biometric authentication system for preventing vehicle theft by preventing the alteration of biological features used for biometric authentication inside a vehicle. [Solution] A dedicated terminal 2 for inputting a voiceprint, a fingerprint, veins, or combinations of two or more of those as biological features is provided at an automobile seller 1, a server 41 that registers the biological features inputted at the dedicated terminal 2 is managed by an automobile maker 4, the biological features are set at an onboard computer 8 of an automobile 5 via the server 41, and the biological features serve as options for biometric authentication of a user 6 by the onboard computer 8, making it possible to prevent the theft of the automobile 5 and to prevent the alteration of the biological features set at the onboard computer 8.

Description

Biometric authentication system

The present invention relates to a biometric authentication system for preventing vehicle theft.

Conventionally, as one of the technologies for improving the safety and comfort of a vehicle, a control system (keyless entry or smart entry system) that controls the locked / unlocked state of a door with an electronic key (portable communication device) has been used. Collectively, the entry system (hereinafter referred to as the entry system) is widely used.

That is, instead of the method of inserting a physical key (engine key) into the keyway of the door and switching the lock / unlock state by rotating the engine key, the radio between the electronic key possessed by the occupant and the electronic control device in the vehicle is used. The lock / unlock state is controlled by communication.
For example, when an occupant with an electronic key approaches a vehicle, the door lock is automatically released, and when the occupant stands beside the door for a certain period of time, the door is automatically opened (see Patent Document 1).

A new car theft method "relay attack" aimed at the above entry system is occurring frequently. In this relay attack, a special receiver hacks the weak radio waves that are constantly emitted from the electronic key, and the receiver is used as a relay point to disguise the electronic key and further transmit the radio waves to the car. It is a mechanism that mistakenly recognizes that the instruction came from the electronic key and unlocks the door.
Of course, it is also possible to start the engine using the radio waves, and it is also possible to start it with the start button.

JP-A-2015-209715 Japanese Unexamined Patent Publication No. 2019-105046

In the above entry system, infrared rays, which have the property of being easily absorbed by red blood cells in blood vessels, are irradiated to the palms and arms of the occupants from the infrared sensor, which is a sensor for biometric authentication, and the occupants are identified based on the plane image of the reflected light. Biometric authentication technology has been developed (see Patent Document 2).

This Patent Document 2 only describes that an infrared sensor is used for biometric authentication, and does not specifically describe how to register a biological feature used for biometric authentication.
For example, it is assumed that the technology of a smartphone is applied to register biological features in a vehicle by using an in-vehicle electronic control unit (ECU) diagnostic tool or the like.

However, when registering a fingerprint as a biological feature in a vehicle, a relay attack is used to hack the weak radio waves constantly emitted from the electronic key, unlock the door, and invade the vehicle, and then use an ECU diagnostic tool, etc. There was a problem that the vehicle was stolen by modifying the fingerprint, which is a biological feature.
The present invention has been made in view of the above-mentioned prior art, and an object of the present invention is to provide a biometric authentication system that prevents theft of a vehicle by preventing modification of biological characteristics used for biometric authentication in a vehicle. do.

The biometric authentication system according to the first aspect of the present invention that solves the above problems registers a dedicated terminal for inputting a biological feature installed in an automobile store and the biological feature input by the dedicated terminal. It is characterized by consisting of a server that operates.

The biometric authentication system according to the second aspect of the present invention that solves the above problems is characterized in that, in the above form, the biological feature is a voiceprint, a fingerprint, a vein, or a combination of two or more thereof.

The biometric authentication system according to the third embodiment of the present invention that solves the above problems is characterized in that, in the above embodiment, the server is managed by an automobile manufacturer.

The biometric authentication system according to the fourth aspect of the present invention that solves the above problems is characterized in that, in the above embodiment, the biometric features are set in an in-vehicle computer of an automobile via the server.

The biometric authentication system according to the fifth aspect of the present invention that solves the above problems is characterized in that, in the above embodiment, the in-vehicle computer biometrically authenticates an occupant with the biological feature as an option.

The present invention has an effect that since a dedicated terminal for inputting biological characteristics is installed in an automobile dealer, an unauthorized third party cannot input (modify) the biological characteristics and contributes to theft prevention. Play. Further, when a voiceprint, a fingerprint, a vein, or a combination of two or more of these is used as a biological feature, there is an advantage that biometric authentication can be reliably performed, especially when two or more biological features are combined.

Further, if the automobile manufacturer manages the server that registers the biological features input from the dedicated terminal, there is an advantage that the data can be managed safely and surely.
When the biological feature is set in the vehicle-mounted computer of the automobile via this server, the vehicle-mounted computer can perform biometric authentication based on the biological feature. Further, if this biometric authentication is set as an option, for example, it is possible not to perform biometric authentication from factory shipment to delivery.

It is a block diagram of the biometric authentication system which concerns on 1st Example of this invention. It is a block diagram of the biometric authentication system which concerns on 2nd Example of this invention. It is a block diagram of the biometric authentication system which concerns on 3rd Example of this invention.

Hereinafter, the biometric authentication system of the present invention will be described in detail with reference to the examples shown in the drawings.
[Example 1]
The biometric authentication system according to the first embodiment of the present invention is shown in FIG.
As shown in FIG. 1, a dedicated (Internet of Things: IOT) terminal 2 for inputting biological characteristics of an occupant (hereinafter referred to as a user 6) is installed in an automobile dealer (hereinafter referred to as a cardilla) 1. Has been done. In this embodiment, the IOT terminal 2 corresponds to voiceprint authentication using a voiceprint as a biological feature, and fingerprint vein authentication using a fingerprint and a vein.

Voiceprint authentication is an authentication method that confirms the identity of a person by identifying the quality of the voice in the spoken voice. Factors that characterize an individual include vocal tract length and shape, vocal cord length, gender, speech speed, pronunciation, and the like.

The IOT terminal 2 includes a microphone 21 and a voiceprint authentication data creation device 22 in order to extract the information from the spoken voice, score it, and create voiceprint data. The microphone 21 collects the utterance voice, and the voiceprint authentication data creation device 22 extracts information such as the length and shape of the vocal tract, the length of the vocal tract, the gender, the utterance speed, and the pronunciation from the utterance voice collected by the microphone 21 and scores. And create voiceprint authentication data.
The reason for adopting voiceprint authentication is that in recent years, devices that perform various operations by voice have been implemented and it is easy to implement. However, there is a risk that voiceprints will be difficult to authenticate due to physical condition such as voice cassoulet. In addition, there is a risk that authentication will be difficult depending on the surrounding sound conditions.

Therefore, in this embodiment, fingerprint vein authentication is also used together.
Fingerprint vein authentication is a hybrid authentication means that performs fingerprint authentication and vein authentication at the same time.
Fingerprint authentication is an authentication method that uses fingerprints as a biometric feature. The fingerprint consists of a striped pattern called a "ridge", and this ridge has a broken point and a branched point, the broken point is the "end point", and the branched point is the "branch point". Is called. Fingerprint authentication is a collation method that uses the end points / branch points of such ridges as feature quantities.

Fingerprint authentication has been adopted in many smartphones in recent years and is easy to implement, but there is a risk that authentication will fail due to dry or rough hands.
On the other hand, vein authentication is an authentication method that uses a finger vein pattern inside the body, and is more difficult to forge or tamper with than fingerprint authentication, so that higher security can be realized.

In general, finger vein authentication includes finger vein authentication, which authenticates with the second joint of the finger, and palmar vein authentication, which authenticates with the hand open. In this embodiment, finger vein authentication is performed because it is relatively easy to miniaturize and is performed at the same time as fingerprint authentication.

Therefore, the IOT terminal 2 creates fingerprint vein authentication data by digitizing the scanner 31 that collects the fingerprint and finger vein patterns and the fingerprint and finger vein patterns collected by the scanner 31 as feature quantities and creating fingerprint vein authentication data. The device 32 is provided.

In the present invention, the reason why the glow authentication (iris recognition) is not adopted is that in the glow authentication, the face must be brought close to the authentication device installed in the vehicle, and the speed at which the face is brought close to the authentication device and the like. This is because there is a problem that the authentication accuracy is not constant depending on the orientation of the face.

The voiceprint authentication data and the fingerprint vein authentication data created by the IOT terminal 2 of the cardilla 1 are uploaded and registered as biological features to the server 41 of the automobile manufacturer 4 via the Internet.
It is desirable that the Internet between the card dealer 1 and the automobile manufacturer 4 uses encrypted communication, for example, a virtual private network (VPN) in order to ensure security.

The server 41 is not limited to the one installed in the automobile manufacturer 4 as long as it is managed responsibly by the automobile manufacturer 4, and includes the server 41 installed in the cloud on the Internet. Since the server 41 is managed by the automobile manufacturer 4, there is no data leakage and the server 41 is safe and secure. When the automobile maker 4 manages the server 41, it is particularly convenient when the automobile maker 4 has a plurality of sales channels. For example, when purchasing a sports car from a cardilla of one sales channel of the automobile manufacturer 4 and purchasing an SUV from the cardilla of the other sales channel, the biological characteristics of the user 6 are transferred to the server 41 of the automobile manufacturer 4. This is because if the biological features are registered multiple times, it is not necessary to register the biological features multiple times.

The automobile 5 manufactured by the automobile manufacturer 4 and sold by the cardilla 1 employs an entry system in which the locked / unlocked state of the door is controlled by the electronic key 7 (portable communication device) described in the section of the prior art. And. That is, the lock / unlock state is controlled by wireless communication between the electronic key 7 possessed by the user 6 and the electronic control unit (ECU) 8 mounted on the automobile 5.
Then, in the present invention, biometric authentication is set as an option in the above entry system.

That is, the ECU 8 mounted on the automobile 5 includes known wireless communication means and the like (not shown) for realizing the entry system, and also includes the following biometric authentication means 9.
The biometric authentication means 9 includes a microphone 91 that collects spoken voice, and the length and shape of the vocal tract, the length of the vocal band, gender, speech speed, pronunciation, etc. from the spoken voice (for example, "good morning") collected by the microphone 91. The voice pattern authentication data creation device 92 for extracting and scoring the information of the above and creating the voice pattern authentication data is provided.

Further, the biometric authentication means 9 includes a voiceprint authentication data comparison device 93 in which voiceprint authentication data is downloaded and set as biometric information via the server 41 through the mobile communication system.
The voiceprint authentication data comparison device 93 compares the voiceprint authentication data collected by the microphone 91 and created by the voiceprint authentication data creation device 92 with the voiceprint authentication data downloaded via the server 41, and when both match. That is, when the voiceprint authentication is established, the engine 11 is started when the start button 10 is pressed within a certain period of time. In other words, when the voiceprint authentication is not established, the engine 11 does not start even if the start button 10 is pressed.

Further, the biometric authentication means 9 has a scanner 94 that collects fingerprints and finger vein patterns, and fingerprint vein authentication data that digitizes the fingerprints and finger vein patterns collected by the scanner 94 as feature quantities to create fingerprint vein authentication data. The creation device 95 is provided.
Further, the biometric authentication means 9 includes a fingerprint vein authentication data comparison device 96 in which fingerprint vein authentication data is downloaded and set as biometric information via the server 41 through the mobile communication system.

The fingerprint vein authentication data comparison device 96 compares the fingerprint vein authentication data collected by the scanner 94 and created by the fingerprint vein authentication data creation device 95 with the fingerprint vein authentication data downloaded via the server 41, and both are used. When they match, that is, when fingerprint vein authentication is established, the engine 11 is started. In other words, when the fingerprint vein authentication is not established, the engine 11 does not start.

Here, the user 6 can select either voiceprint authentication or fingerprint vein authentication as an option. That is, when voiceprint authentication is selected as an option, fingerprint vein authentication is not performed. Also, when fingerprint vein authentication is selected as an option, fingerprint authentication is not performed. In this way, the option can be selected by comparing and considering the risk and convenience of authentication for each authentication method at the discretion of the user 6.

Furthermore, both voiceprint authentication and fingerprint vein authentication can be selected as options. In that case, the engine 11 is started only when two authentication results by both the

comparison devices

93 and 96 are established between the voiceprint authentication data comparison device 93 and the fingerprint vein authentication data comparison device 96 and the engine 11. A circuit (not shown) shall be provided. That is, this AND circuit does not start the engine 11 only when either voiceprint authentication or fingerprint vein authentication is established. The engine 11 is started when both voiceprint authentication and fingerprint vein authentication are established.

Such biometric authentication is not mandatory and is set as an option.
Therefore, since a plurality of drivers drive the automobile 8 from the factory shipment to the delivery of the automobile manufacturer 4, there is an advantage that the automobile can be easily operated (engine is started) by turning off biometric authentication. Further, when the used car is distributed as the automobile 8, the same applies because a plurality of drivers drive the used car until the used car is purchased, moved, exhibited, and delivered.

Further, it is desirable that the automobile 5 is a connected car capable of communicating with the automobile manufacturer 4 by a mobile communication system (for example, a third generation mobile communication system). This is because, for the automobile 5 that has been factory-shipped from the automobile manufacturer 4 and parked in the card dealer 1, the biological characteristics can be downloaded to the ECU 8 and set as a manufacturer option by using the mobile communication system.
When the automobile 5 is not a connected car, the biometric authentication option can be set by the automobile manufacturer 4 as a manufacturer option before shipment from the factory.

According to the biometric authentication system of this embodiment having the above configuration, voiceprint authentication data and fingerprint vein authentication data are created as biological features by the IOT terminal 2 installed in the cardilla 1, and registered in the server 41 of the automobile manufacturer 4. , It is set in the ECU 8 of the automobile 5 via the mobile communication system. Therefore, even if an unauthorized third party hacks the radio wave into the vehicle by a relay attack, the voiceprint authentication and the fingerprint vein authentication by the ECU 8 cannot be established, so that the engine cannot be started. Further, since the voiceprint authentication data and the fingerprint vein authentication data set in the ECU 8 cannot be modified, it contributes to the prevention of theft.

Further, depending on the judgment of the user 6, there is an advantage that biometric authentication can be performed relatively easily when only voiceprint authentication is used, as it bears some authentication risk. Further, when combined with fingerprint vein authentication, there is an advantage that highly accurate authentication can be performed.
In this embodiment, voiceprint authentication and fingerprint vein authentication are used in combination, but either voiceprint authentication or fingerprint vein authentication may be adopted. Furthermore, it is also possible to adopt fingerprint authentication or vein authentication instead of fingerprint vein authentication.

[Example 2]
The biometric authentication system according to the second embodiment of the present invention is shown in FIG.
In this embodiment, in the first embodiment shown in FIG. 1, the automobile manufacturer 4 manages the server 41, whereas the cardilla 1 manages the server 42 for registering biological features. Other features are the same as in the above-described embodiment.

Therefore, since the voiceprint authentication data and the fingerprint vein authentication data are directly registered in the server 42 from the IOT terminal 2 installed in the cardilla 1, they do not go through the automobile manufacturer 4.
Further, in the first embodiment shown in FIG. 1, the automobile manufacturer 4 sets the voiceprint authentication data and the fingerprint vein authentication data from the server 41 in the biometric authentication means 9 of the automobile 5 as an option (maker option). On the other hand, in this embodiment, when the cardilla 1 delivers the vehicle, the voiceprint authentication data and the fingerprint vein authentication data are set as options (dealer option) in the biometric authentication means 9 of the vehicle 5 from the server 42.

According to the biometric authentication system of the present embodiment having the above configuration, the same effect as that of the first embodiment described above is obtained, and further, in the present embodiment, the server 42 is arranged in the cardilla 1, so that the automobile is used. This has the effect of reducing the cost of the maker 4 managing the server 41 and the cost of the cardilla 1 laying encrypted communication such as VPN with the automobile maker 4.

In particular, when the card dealer 1 is a used car dealer that handles a used car, the advantage becomes remarkable.
That is, since the used car dealer generally treats a car manufactured by a plurality of car makers as a used car, if the same as in the first embodiment, the plurality of car makers 4 must manage each of the servers 41. In addition, encrypted communication between the car dealer 1 and the automobile manufacturer 4 must be laid, respectively, which requires a considerable cost.

On the other hand, in this embodiment, as shown in the figure, since the server 42 is arranged in the cardilla 1, it is possible to reduce such management and laying costs.
The server 42 may be outsourced to a data management company that responsibly manages the data, and the data management company may install the server 42 in the cloud on the Internet. However, in that case, it is desirable to install encrypted communication between Cardilla 1 and the data management company.

[Example 3]
The biometric authentication system according to the third embodiment of the present invention is shown in FIG.
In this embodiment, in the first embodiment shown in FIG. 1, a part of the functions of the biometric authentication means 9 mounted on the ECU 8 of the automobile 5 is moved to the automobile manufacturer 4.

That is, the voiceprint authentication data comparison device 93 and the fingerprint vein authentication data comparison device 96 are omitted from the biometric authentication means 9 of the ECU 8, and the voiceprint authentication data comparison device 97 and the fingerprint vein authentication data comparison device 98 having the same functions are used by the automobile manufacturer. It is to be installed in 4.
Then, the voiceprint authentication data collected by the microphone 91 and created by the voiceprint authentication data creation device 92 and the fingerprint vein authentication data collected by the scanner 94 and created by the fingerprint vein authentication data creation device 95 are combined with each other by a mobile communication system. It is sent to the automobile manufacturer 4 as it is.

Further, the voiceprint authentication data comparison device 97 installed in the automobile manufacturer 4 compares the voiceprint authentication data registered in the server 41 with the voiceprint authentication data sent by the mobile communication system, and if they match, That is, when the voiceprint authentication is established, the engine 11 is started when the start button 10 is pressed within a certain period of time.
Similarly, the fingerprint vein authentication data comparison device 98 installed in the automobile manufacturer 4 compares the fingerprint vein authentication data registered in the server 41 with the fingerprint vein authentication data sent by the mobile communication system, and both of them compare the fingerprint vein authentication data. If they match, that is, when the fingerprint vein authentication is established, the engine 11 is started. Other features are the same as in the above-described embodiment.

According to the biometric authentication system of the present embodiment having the above configuration, the same effect as that of the above-described first embodiment is obtained, and further, in the present embodiment, the biometric authentication means 9 of the ECU 8 to the voiceprint authentication data comparison device 93. Since the fingerprint vein authentication data comparison device 96 can be omitted, the manufacturing cost of the ECU 8 can be reduced.

In addition, when biometric authentication is not established by the voiceprint authentication data comparison device 97 and the fingerprint vein authentication data comparison device 98 installed in the automobile manufacturer 4, it is estimated that an unauthorized third party has invaded the vehicle for the purpose of vehicle theft. Therefore, there is also an advantage that the voiceprint authentication data and the fingerprint vein authentication data sent to the automobile manufacturer 4 can be used as proof of attempted crime.
In this embodiment, it is assumed that the automobile 5 is a connected car capable of communicating with the automobile manufacturer 4 by a mobile communication system. However, according to the 5th generation mobile communication system, the vehicle 5 has a high speed and a large capacity. This embodiment is sufficiently feasible because the communication of the above is possible.

The biometric authentication system of the present invention is widely available in industry as an effective means for preventing vehicle theft.

1 Cardilla 2 IOT terminal 4 Automobile manufacturer 5 Automobile 6 User 7 Electronic key 8 ECU
9 Biometric authentication means 10 Start button 11 Engine 21,91

Mike

22,92 Voiceprint authentication data creation device 31,94

Scanner

32,95 Fingerprint vein authentication data creation device 41,42

Server

93,97 Voiceprint authentication

data comparison device

96,98 Fingerprint Fingerprint authentication data comparison device

Claims

A biometric authentication system including a dedicated terminal for inputting a biological feature installed in an automobile store and a server for registering the biological feature input by the dedicated terminal.
The biometric authentication system according to claim 1, wherein the biometric feature is a voiceprint, a fingerprint, a vein, or a combination of two or more thereof.
The biometric authentication system according to claim 1 or 2, wherein the server is managed by an automobile manufacturer.
The biometric authentication system according to claim 1, 2, or 3, wherein the biometric features are set in an in-vehicle computer of an automobile via the server.
The biometric authentication system according to claim 4, wherein the in-vehicle computer biometrically authenticates an occupant with the biometric feature as an option.