JP4764751B2 - Biological information registration apparatus, system, and method - Google Patents

Description

  The present invention relates to a biometric information registration apparatus, system, and method for registering biometric information used for identity verification.

  In the withdrawal of deposits at financial institutions and electronic commerce using the Internet, biometric authentication devices using biometric authentication have been proposed to prevent impersonation of others.

  In recent years, a biometric authentication system using a portable electronic medium typified by an IC card has been introduced as means for identifying a person. The IC card makes it difficult to copy the card as compared with the magnetic stripe card, and can secure safety that the internal information is not easily stolen. In addition, the amount of information that can be stored inside the card can be dramatically increased. Patent Documents 1 and 2 are known as biometric authentication techniques by holding biometric information such as fingerprints and veins in an IC card and collating them.

  Patent Document 1 describes a personal identification system using fingerprints. In this technology, a user's fingerprint is stored in advance in an IC card, and the identification is performed by collating the fingerprint stored in advance with the fingerprint obtained at the time of authentication in the IC card. .

  Patent Document 2 describes a personal electronic authentication method using a portable electronic device and biometric information. In this technology, registration data (biological information feature value) is stored in advance in a portable electronic device such as an IC card, and the registered data is compared with the feature data (biometric information feature value) obtained at the time of authentication in the IC card. By doing so, identity verification is carried out.

JP 61-199162 A JP 10-312459 A

  However, all of the biometric authentication processing systems including the above-mentioned Patent Documents 1 and 2 are based on the premise that the administrator of the biometric information registration apparatus performs an appropriate registration process, and the unauthorized registration manager's unauthorized registration Is extremely difficult to prevent. For example, assume that the administrator accepts a request for new issuance of an IC card compatible with biometric authentication from a user. In the process of registering biometric information in an IC card, it is extremely difficult to prevent the administrator's own biometric information from being illegally registered in the IC card issued to the user.

  An object of the present invention is to prevent an administrator of a biometric information registration apparatus from illegally registering the biometric information of the administrator himself / herself when registering biometric information in a portable electronic medium.

  When issuing an IC card that supports biometric authentication to a user, the administrator's template registered in advance is checked against the newly acquired biometric feature, and the user is found to match Are registered in the IC card as a template and issued.

  According to the present invention, it is possible to prevent an administrator of a biometric information registration apparatus from illegally registering an administrator's own biometric information in another person's portable electronic medium. Further, since the administrator can always register only the biometric information of another person, it is possible to realize a highly reliable biometric information system that can reliably register the biometric information of the user in the IC card.

  Examples of preferred embodiments for carrying out the present invention will be described in detail below. However, the present invention is not limited to this embodiment.

  In the present embodiment, an explanation will be given focusing on biometric information registration processing in which an operator (a person in charge of a window) registers biometric information of a user in an IC card at a sales office of a financial institution. Here, the biometric information is information unique to the person indicating that the person is the person, and includes various information such as finger veins, palm veins, fingerprints, irises, and faces. Here, finger veins are taken as an example. I will explain. A user can perform a transaction by performing biometric authentication using an IC card obtained through the biometric information registration process in an automatic cash transaction apparatus (ATM) installed in a financial institution, a convenience store or the like. The biometric information includes a biometric feature that is effective for identifying an individual.

  The biometric feature amount registered in advance in the IC card (referred to during biometric authentication) is also referred to as a “template” below. The medium for registering the template is not limited to the IC card, and any medium may be used as long as it is a portable electronic medium such as an RFID tag.

  FIG. 1 is an example of a configuration diagram of a biometric information registration processing system used for biometric information registration.

  The biometric information registration system includes a biometric information registration / authentication device 101 and a registration terminal device 104 that controls the biometric information registration / authentication device 101. This system is roughly divided into a registration device and a terminal device, which are connected by wireless / wired. The biometric information registration / authentication device 101 includes a biometric information reading unit 102 that reads biometric information, and an IC card device 103 that has a read / write function for information stored in the IC card. The registration terminal device 104 includes a CRT, a liquid crystal display, and the like, and includes a display unit 105 that displays an operation guide, a keyboard, a mouse, and the like, and an operation unit 106 that receives an input operation of a person in charge at the window. The display unit 105 and the operation unit 106 may be collectively referred to as an operation unit.

  In this system, an operator of a financial institution operates the registration terminal device 104 to register the user's biometric information in the user IC card. Specifically, the person in charge of the window selects and inputs a process to be performed by the operation unit 106 from various menus displayed on the display unit 105, and performs various processes in a financial institution in addition to registering biometric information. To do.

  Among the operators, a person in charge of the biometric information registration work is called an administrator. In this system, two IC cards are used: an administrator IC card 107 for registering administrator information and a user IC card 108 for registering user information.

  FIG. 2 is an example of a block diagram of the biometric information registration / authentication apparatus 101 and the administrator IC card 107 (user IC card 108).

  The biometric information registration / authentication device 101 includes a CPU 201 that controls the biometric information registration / authentication device 101 as a whole, a storage unit 202 that stores various information, a biometric information reading unit 102, an IC card device 103, and a registration terminal device 104. The I / O device 203 is an interface to be connected.

  The storage unit 202 is an area that mainly stores various programs and encryption keys, and the ROM 210 that cannot rewrite stored data, and an area that mainly stores data, and rewrites the stored data. Can be divided into a RAM 220 capable of Here, although described as the ROM 210 and the RAM 220, it may be configured by a hard disk and various semiconductor memories, respectively.

  The ROM 210 is an overall control program 211 for controlling the entire biometric information registration / authentication apparatus 101, an I / O device control program 212 for controlling the I / O device 203, a registration / authentication program for performing biometric information registration processing and authentication processing. 213, an encryption / decryption program 214 that performs data encryption processing and decryption processing, an IC card read / write control program 215 that performs information reading processing and writing processing to an IC card, and data encryption and decryption And an encryption key 216 used to do this.

  The RAM 220 includes an encrypted template storage area 221 for storing an encrypted template, a template storage area 222 for storing a template, a biological image storage area 223 for storing a biological image, a biological feature amount storage area 224 for storing a biological feature amount, A collation result data storage area 225 for storing collation result data, an encrypted collation result data storage area 226 for storing encrypted collation result data, a characteristic data storage area 227 for storing characteristic data, and a development location for executing various programs A program load area 228 used as For example, in the case of finger vein authentication, the characteristic data is data serving as a reference for selecting a biometric feature amount suitable for registration, such as finger tilt.

  The biological information reading unit 102 acquires a biological image (finger vein pattern), an image sensor (image acquisition unit) 231 configured with a CCD camera or the like, and a biological acquisition illumination LED (biological irradiation) that irradiates the finger with near infrared rays. Part) 232.

  The IC card device 103 includes an IC card read / write unit 241 having information reading processing and writing processing functions for the IC card, and a contact terminal 242 necessary for connection to the IC card 105. The IC card device 103 may be simply called a read / write unit.

  The administrator IC card 107 and the user IC card 108 include a CPU 251 that controls the entire IC card, a storage unit 252 that stores data related to biometric information, programs related to financial transactions, and the like, and the biometric information registration / authentication apparatus 101. And a contact terminal 253 necessary for connection to the terminal. Note that the IC card device 103 and the IC card are not limited to the contact type using the contact terminals, but can also be configured as a non-contact type. The administrator IC card 107 and the user IC card 108 have the same hardware configuration.

  Note that, when the CPU 201 executes the program, each program is expanded in the program load area 228, so that the configuration thereof can be collectively referred to as a control unit.

  FIG. 3 is an example of a block diagram of a registration terminal device.

  The registration terminal device 104 is an interface connected to the CPU 301 that controls the entire registration terminal device 104, the storage unit 302 that stores various information, the display unit 105, the operation unit 106, and the biometric information registration / authentication device 101. The I / O device 303 is configured.

  The storage unit 302 is an area that mainly stores various programs, an HDD 310 that can be accessed at high speed, an area that stores an encryption key, and a ROM 320 in which stored data cannot be rewritten, The data storage area is divided into a RAM 330 that can rewrite the stored data.

  The HDD 310 includes an overall control program 311 that controls the entire registration terminal device 104, an I / O device control program 312 that controls the I / O device 303, a business application program 313 that performs various processes related to registration and authentication, and biometric information. A biometric information registration / authentication device control program 314 that controls the registration / authentication device; and an encryption / decryption program 315 that performs data encryption processing and decryption processing.

  The ROM 320 includes an encryption key 321 used for encrypting and decrypting data.

  The RAM 330 executes a verification result data area 331 for storing verification result data, an encrypted verification result data area 332 for storing encrypted verification result data, an administrator ID table 333 for storing an administrator ID, and various programs. Therefore, a program load area 334 used as a development location is provided.

  Note that when the CPU 301 executes the program, each program is expanded in the program load area 334, so that the configuration thereof can be collectively referred to as a control unit.

  In both the biometric information registration / authentication device 101 and the registration terminal device 104, all the programs are stored in ROMs provided in the respective devices, and are temporarily expanded in the RAM when executed. For example, when the IC card read / write control program 215 is executed to read the biometric information by the biometric information reading unit 102, the IC card read / write control program 215 is developed and executed in the program load area 228. Therefore, this development process will be omitted.

  The various programs are programs that operate under the commands of the overall control programs 211 and 311. In the following description, the process of these commands will be omitted for the sake of brevity.

  The biometric information registration process will be described below with reference to FIGS.

  FIG. 4 is a flowchart example of the entire template registration process of a user (new registration applicant) executed by the CPU 201 of the biometric information registration / authentication apparatus 101 or by each mechanism and each unit (including a program) based on an instruction from the CPU 201. It is. A process in which the administrator operates the registration terminal device 104 to register the user's biometric information in the user IC card 108 and processes and controls executed by each mechanism and the like based on the operation will be described.

  The registration process is broadly divided into two processes: (1) identification of the administrator and (2) registration of the user's biometric information in the IC card. As will be described later, in steps 401 to 409 in the flowchart of FIG. 4, the identity of the administrator is confirmed, and in steps 410 to 413, the biometric information registration process of the user to the IC card is performed.

  The first half (1) Confirming the identity of the administrator will be described. The registration terminal device 104 displays a menu screen (a screen for guiding selection of processing such as registration, authentication, change, and termination) on the display unit 105, and accepts an input operation of the person in charge at the window by the operation unit 106. When “registration” is selected from the displayed transaction items by the operation unit 106, the registration terminal device 104 displays a menu screen related to registration processing on the display unit 105 (administrator identity confirmation, user biometric information registration, end Screen for guiding the selection of the process, etc.) and the input operation of the person in charge of the window is accepted by the operation unit 106. When “manager identity confirmation” is selected by the operation unit 106 from the displayed transaction items, the CPU 301 of the registration terminal device 104 executes the business application program 313 and the biometric information registration / authentication device control program 314, The biometric information registration / authentication apparatus 101 is instructed to start the administrator identification process. Receiving the instruction to start the administrator identification process, the CPU 201 executes the registration / authentication processing program 213 to execute the administrator identification process.

  The instruction here is that the I / O device 303 is activated by the execution of the I / O device control program 312 and the I / O device control program 212 of the biometric information registration / authentication apparatus 101 is also executed at the same time. This is performed in the process of starting the device 203. In this way, the I / O device control programs 212 and 312 are connected to each other to transmit and receive data.

  The CPU 301 displays a guidance for inserting the administrator IC card 107 into the IC card device 103 on the display unit 105 of the registration terminal device 104. The CPU 201 detects when the administrator IC card 107 is inserted into the IC card device 103 by the administrator (step 401). Here, the contact terminal 253 of the administrator IC card 107 and the contact terminal 242 of the IC card device 103 are brought into contact with each other, and the biometric information registration / authentication device 101 and the administrator IC card 107 are connected.

  After step 401, manager ID matching is performed (step 402). The administrator ID is read from the storage unit 252 of the administrator IC card 107 by the IC card read / write unit 241 and stored in the administrator ID table 333 of the registration terminal device 104 in advance. Collation with the administrator ID is performed (step 403). Here, if they do not match, the registration process is stopped (step 404). After step 404, the administrator IC card 107 is ejected from the IC card read / write unit 241 (step 405).

  It should be noted that there may be a format in which there is one administrator or a format in which there are a plurality of managers. When a plurality of managers are set for one apparatus, IDs for a plurality of persons are stored in the manager ID table 333. A format in which only one administrator is set simplifies management because it requires less storage capacity. On the other hand, a format in which a plurality of managers are set is convenient because another person can use the device even when one manager is absent.

  On the other hand, if the two administrator IDs match in step 403, then the administrator's biometric authentication process is performed (step 406). This biometric authentication process is the second identity verification following the identity verification by the administrator ID. By performing two different types of identity verification, ID and biometric authentication, the identity verification of the administrator can be performed accurately. The biometric authentication process will be described later with reference to FIG.

  The CPU 201 determines whether or not the administrator's biometric authentication is successful (step 407). If the biometric authentication process is not successful, the number of biometric authentications is counted, and if the number is within the specified number (step 408), the process returns to step 406, and the biometric information of the administrator is acquired again to obtain the biometrics. Perform authentication. On the other hand, if the number of implementations exceeds the specified number, registration is stopped (step 404). After step 404, the administrator IC card 107 is ejected from the IC card read / write unit 241 (step 405). Note that success here does not indicate whether or not collation has been performed, but indicates that the characteristics of the two pieces of biometric information (registered data and authentication data) match at least a predetermined value.

  On the other hand, if the collation result is successful in step 407, the administrator IC card 107 is ejected from the IC card read / write unit 241 (step 409), and the biometric feature registration work of the user after step 410 is performed. Proceed to Note that storing the administrator's template read (obtained) from the administrator IC card 107 in the administrator biometric authentication process in step 406 in the biometric information registration / authentication apparatus 101 is the point of the present invention. In the description, the example stored in the biometric information registration / authentication apparatus 101 side will be described. However, as described later, an administrator's template may be stored on the registration terminal device 104 side and collated on the registration terminal device 104 side.

  This completes “(1) Confirming the identity of the manager” in the first half. From now on, “(2) User biometric information registration to IC card” in the latter half will be described.

  The registration terminal device 104 displays a menu screen (guidance screen) related to the registration process on the display unit 105, and accepts an input operation of the person in charge at the window by the operation unit 106. When “user biometric information registration” is selected by the operation unit 106 from the displayed transaction items, the CPU 301 of the registration terminal device 104 executes the business application program 313 and the biometric information registration / authentication device control program 314. The biometric information registration / authentication apparatus 101 is instructed to start the biometric information registration process. Upon receiving the user's instruction to start biometric information registration processing, the CPU 201 executes the registration / authentication processing program 213 to execute the biometric information registration processing of the user. As described above, the control unit of the registration terminal device 104 has a registration guidance function.

  The CPU 301 displays a guidance for inserting the user IC card 108 in the biometric information registration / authentication device 101 on the display unit 105 of the registration terminal device 104. When the administrator inserts the user IC card 108 into the IC card device 103, the CPU 201 detects it (step 410). Here, the contact terminal 253 of the user IC card 108 and the contact terminal 242 of the IC card device 103 are brought into contact with each other, and the biometric information registration / authentication device 101 and the administrator IC card 108 are connected.

  After step 410, the user's biometric feature registration process is performed (step 411). The biometric feature amount registration process of the user will be described in detail later with reference to FIG. When the biometric feature registration process is completed, the user IC card 108 is ejected from the IC card read / write unit 241 (step 412).

  After step 412, the administrator's encryption template, biometric image, biometric feature, user biometric image, biometric feature, and characteristic data (detailed in FIG. 6) are deleted (step 413), and the entire registration process is performed. Ends. Here, the data to be erased is the above data, and the administrator's template is stored in the biometric information registration / authentication apparatus 101 and used for the next biometric information registration process.

  As a result, when the same administrator continuously performs biometric information registration processing, it is not necessary to perform identity verification because the administrator is the same person. Therefore, since the “(1) manager identity verification” steps 401 to 409 in the first half are omitted, the “(2) user biometric information registration to the IC card” steps 410 to 413 may be performed. There is an advantage that the time of the can be shortened. Of course, there is no need to leave the administrator's template permanently. Since the biometric information registration / authentication apparatus 101 is turned off because it is not used for a long time, when the registration operation at the sales office is completed, another management is performed. It is desirable to delete when changing to another person.

  In this flowchart, the administrator's biometric authentication process is performed after the administrator ID verification process. However, the order of this process may be reversed, or the administrator ID verification process is omitted and the biometric authentication process is performed. However, it may be configured to perform only the above.

  With reference to FIG. 5, the “manager biometric authentication process” in the above “(1) manager identity verification” corresponding to step 406 in FIG. 4 will be described in detail. The CPU 201 executes an IC card read / write control program 215. The encrypted template stored in the storage unit of the administrator IC card 107 is read by the IC card read / write unit 241 and stored in the encryption template storage area 221 (step 501). The templates stored here refer to all templates registered in the IC card, and there are usually a plurality of templates. For example, in the case of finger vein information, a total of 10 finger vein information must be registered for each five left and right hands, and in the case of palm vein information, a total of two palm vein information must be registered with two left and right hands. This is because even if there is an omission of comparison with the administrator's biometric information, the biometric information of the administrator who has made a comparison omission may be illegally registered in the user IC card 108. As described above, the control unit of the biometric information registration / authentication apparatus 101 has a function of reading the encrypted template.

  Next, the CPU 201 executes the encryption / decryption program 214. After reading the encryption template from the encryption template storage area 221 and decrypting the encryption template using the encryption key 216, the created administrator's template is stored in the template storage area 222 (step 502). As described above, the control unit of the biometric information registration / authentication apparatus 101 has template decoding and template reading functions.

  The CPU 301 displays guidance on the display unit 105 so that the registered finger of the administrator is held over the biometric information reading unit 102. In response, the administrator holds his finger.

  The CPU 201 executes the registration / authentication program 213 and issues a biometric information reading start instruction to the biometric information reading unit 102. Note that up to step 505 described later is processing in which the CPU 201 reads and executes this program. When the living body (finger) is placed over the image acquisition area of the image sensor 231, the biological information reading unit 102 irradiates the living body (finger) with near-infrared light by the living body acquisition illumination LED 232, and the image sensor 231 uses the biological image (finger vein). Pattern) is acquired and stored in the biological image storage area 223 (step 503). In short, the control unit of the biometric information registration / authentication apparatus 101 has a function as a biometric image acquisition unit.

  Next, a biometric image is read from the biometric image storage area 223, a biometric feature is extracted from the biometric image, and stored in the biometric feature storage area 224 (step 504). As described above, the control unit of the biometric information registration / authentication apparatus 101 has a function of acquiring (including storage) a biometric feature, that is, a biometric feature acquiring unit.

  Then, collation between the administrator template stored in advance and the newly obtained biometric feature of the administrator is performed to create collation result data, which is stored in the collation result data storage area 225 (step 505). ). This collation is performed by the following work, for example. The distance value between the administrator's template and the newly obtained biometric feature amount is calculated a plurality of times, and if the smallest distance value is less than the threshold value, it is determined to be successful, and if it is equal to or greater than the threshold value, it is determined to be failure (not successful). The distance value represents the distance between the two feature amounts, and the authentication process can be performed depending on the proximity. As described above, the control unit of the biometric information registration / authentication apparatus 101 has a function of collating the newly acquired biometric feature quantity of the administrator with the administrator template stored in advance. As will be described later, the control unit also has a function of collating with the user's biometric feature amount and the above-described administrator's template (see step 605). For convenience of explanation, the former collation function (collation processing) Is referred to as a first verification unit, and the latter verification function is also referred to as a second verification unit.

Next, the verification result data is encrypted in order to send the generated verification result data to the registration terminal device 104 safely. The CPU 201 executes the encryption / decryption program 214. Encryption key 216
After the verification result data is encrypted using, the created encrypted verification result data is stored in the encrypted verification result data storage area 226 (step 506). As described above, the control unit of the biometric information registration / authentication apparatus 101 has a function of reading the verification result data and encrypting the verification result data.

  Next, the CPU 201 executes the I / O device control program 212. The encrypted verification result data is read out from the encrypted verification result data area 226 and transmitted to the registration terminal device 104 via the I / O device 203 (step 507). As described above, the control unit of the biometric information registration / authentication apparatus 101 has a function of reading the encrypted collation result data.

  On the other hand, the CPU 301 receives the encrypted verification result data via the I / O device 303 and stores it in the encrypted verification result data storage area 321 (step 508). As described above, the control unit of the registration terminal device 104 has a function of reading the encrypted collation result data.

  Next, the CPU 301 executes the encryption / decryption program 315. The encrypted verification result data is decrypted using the encryption key 315, and the verification result data created thereby is stored in the verification result data area 322 (step 509). The collation result is displayed on the display unit 105. As described above, the control unit of the registration terminal device 104 has functions of decrypting the encrypted collation result data and reading the collation result data.

  The step “411” in FIG. 4 and “(2) Registration of user's biometric information in the IC card” will be described in detail with reference to FIG. The data storage format has been described so far as storing data corresponding to the various data areas of the RAM 220 of the biometric information registration / authentication apparatus 101. Similarly, in FIG. Shall be stored. For example, in FIG. 5, there is a step of storing the biometric image of the administrator, and in FIG. 6, there is a step of storing the biometric image of the user. In this case, the target person is different, but since they are the same type of data, both are stored in the same biological image storage area 223.

  The CPU 301 displays a guidance to hold the finger registered in the display unit 105 over the biometric information reading unit 102. In response to this, the user holds the finger to be registered over the biometric information reading unit 102.

  The CPU 201 executes the registration / authentication program 213 and issues a biometric information reading start instruction to the biometric information reading unit 102. When the living body (finger) is placed over the image acquisition area of the image sensor 231, the biological information reading unit 102 irradiates the living body (finger) with near-infrared light by the living body acquisition illumination LED 232, and the image sensor 231 uses the biological image (finger vein). Pattern) is acquired and stored in the biological image storage area 223 (step 601).

  Next, the biometric image is read from the biometric image acquisition area 223, the biometric feature value and the characteristic data (reference data) are extracted from the biometric image, and stored in the biometric feature value storage area 224 and the characteristic data storage area 227, respectively (step 602). .

  Here, it is determined whether or not a predetermined number of biometric features and characteristic data set in advance have been extracted (step 603). If a predetermined number of biometric features and characteristic data have not been extracted, the process returns to step 601 to newly acquire a biometric image and extract biometric features and characteristic data.

  On the other hand, if the specified number of biometric features and characteristic data have been extracted, the optimal biometric feature for registration is selected from the specified number of biometric features based on the characteristic data acquired in step 602. Select (step 604).

  Next, collation between the selected user's biometric feature amount and the administrator's template stored in the template storage area 222 is performed (step 605). It is determined whether there is an administrator template that matches the biometric feature amount selected here (step 606). If there is a match, registration is canceled (step 607). In addition, when registration is canceled, it is preferable to display that the unauthorized registration has been made on the display unit of the registration terminal device and to issue a warning by an alarm device (not shown) in order to notify security guards and the like. . As described above, the control unit of the biometric information registration / authentication apparatus 101 has a function of performing the second collation between the newly acquired biometric feature amount of the user and the administrator template stored in advance. Yes.

  Note that the administrator template is preferably not only the finger used for collation, but also all the finger templates stored in the administrator IC card 107. By comparing all types of templates of the administrator and the biometric feature amount of the user, it is possible to prevent an injustice that the biometric information of the administrator is registered in the user IC card 108.

  On the other hand, if it is determined in step 606 that there is no match, that is, if the above-described distance value is equal to or greater than the threshold, the CPU 201 executes the encryption / decryption program 214 and encrypts the selected user's biometric feature amount as a template. (Step 608). Here, it is checked whether or not the number of biometric features that have been encrypted has reached a specified number (step 609). If the specified number has not been reached, the process returns to step 601 to start acquiring biometric feature quantities of fingers of a type that has not yet been acquired.

  On the other hand, if the specified number has been reached, the specified number of encrypted templates acquired so far are registered in the user IC card 108 (stored in the storage unit 252) (step 610). As described above, the control unit of the biometric information registration / authentication apparatus 101 has a function of registering the biometric feature amount in the user IC card 108.

  Here, after the biometric feature amount is encrypted as a template, it is checked whether or not the number of biometric feature amounts has reached a specified value. However, the biometric feature quantity may be encrypted after changing the order and checking whether or not the number of biometric feature quantities has reached the specified value.

  By adopting the biometric information registration system as described above, it is possible to prevent an illegal act in which an administrator registers his / her biometric information in the user IC card without permission.

  In this embodiment, the registration process by the administrator and the user has been described. However, if the administrator rewrites the administrator template stored in the administrator IC card, the administrator IC can be rewritten as much as possible. There arises a problem that the card can be illegally registered. In that case, the security can be improved by giving the authority to rewrite the information of the administrator IC card only to those higher than the administrator, for example, the supervisor, and not allowing the administrator to rewrite the information.

  In the present embodiment, the biometric authentication process has been described as being performed in the biometric information registration / authentication apparatus. However, this process may be performed by a registration terminal device or an IC card. In such a case, the terminal device or the IC card is provided with a function such as verification.

  When the registration is performed on the registration terminal device, biometric authentication may be performed in the same flow as in the present embodiment. This eliminates the need for forcibly installing a program necessary for biometric authentication in the biometric information registration / authentication apparatus, and the biometric information registration / authentication apparatus only requires a simple configuration including an image sensor and an IC card device.

  In the case of implementation with an IC card, biometric authentication may be performed according to the same flow as in the present embodiment, but care is required regarding the storage location of the administrator's template. Therefore, at least two IC card read / write units 241 are provided so that one can store an administrator IC card and the other can store a user IC card. In the second verification, the administrator's template is not brought into the biometric information registration / authentication apparatus 101, but is sent directly to the user's IC card. This improves security.

  Further, regarding the timing of erasing the biological information as in step 413 in FIG. 4, various modes other than those described above can be considered, and two examples that can particularly achieve the effect will be described. (A) Every time biometric information registration for one user is completed, the data related to the biometric information only on the user side is deleted, and when biometric information registration for several times is completed, the biometric information on the administrator side is How to erase data. (B) Every time biometric information registration for one user is completed, data related to biometric information only on the user side is erased, and after a certain period of time has elapsed after identity verification has been carried out or after the last biometric information registration process has ended, A method for automatically erasing data related to biometric information on the administrator side.

  According to the methods (a) and (b), for example, when the administrator has left the temporary biometric information registration / authentication device due to a break, a malicious person impersonates the administrator and registers biometric information. Effective in situations where processing is to be performed. In other words, after a certain period of time as in the case of a screen saver, the biometric information registration process cannot be performed unless the identity verification is performed again. Therefore, it is convenient because it can be operated without the identity verification of the administrator until the specified time elapses after the identity verification process or after the last biometric information registration process ends or until the biometric information registration process for the specified number of times is completed. is there.

  In the case of (a), the biometric information registration / authentication apparatus 101 has a counter for counting the number of registrations of the user's template, and the biometric feature when the number of registrations counted by the counter reaches a predetermined number. A biometric information erasure unit that erases the biometric feature quantity of the administrator and the biometric feature quantity of the user acquired by the quantity acquisition unit is provided. In the case of (a), the biometric information registration / authentication apparatus 101 has a timer for measuring the elapsed time from the end of registration of the template of the user, and when the elapsed time measured by the timer reaches a predetermined time, A biometric information erasure unit that erases the biometric feature amount of the administrator and the biometric feature amount of the user acquired by the biometric feature amount acquisition unit is provided.

  In the description so far, the administrator's biometric information has been mainly registered in the administrator IC card owned by the administrator. However, all the biometric information of the administrator is stored in the biometric information registration / authentication device. A method of registering is also conceivable. However, even if it is an administrator, there is a security problem to always keep biometric information in the biometric information registration / authentication device, so this method of registering biometric information in an IC card and downloading it sequentially when necessary Is better.

The example of a biometric information registration system block diagram. The example of a block diagram of a biometric information registration / authentication apparatus and an IC card. The example of the block diagram of the terminal device for registration. The example of the flowchart of the whole registration process. The example of the flowchart of an administrator biometrics authentication process. The example of the flowchart of a biometric feature amount registration process.

Explanation of symbols

DESCRIPTION OF SYMBOLS 101 ... Biometric information registration / authentication apparatus, 102 ... Biometric information reading part, 103 ... IC card apparatus, 104 ... Registration terminal apparatus, 105 ... Display part, 106 ... Operation part, 107 ... Manager IC card, 108 ... Use IC card for a person, 201 ... CPU (biological information registration / authentication device), 202 ... storage unit (biological information registration / authentication device), 203 ... I / O device (biological information registration / authentication device), 210 ... ROM, 220 ... RAM, 231 ... Image sensor, 232 ... LED for biometric acquisition, 241 ... IC card read / write unit, 242 ... Contact terminal (biological information registration / authentication device), 251 ... CPU (IC card for administrator / user), 252 ... Storage unit (IC card for manager / user) 253 ... Contact terminal (IC card for manager / user), 301 ... CPU (registration terminal), 302 ... Part (registration terminal device), 303 ... I / O device (registration terminal device), 310 ... HDD, 320 ... ROM, 330 ... RAM

Claims (16)

A biometric information registration apparatus comprising: an image sensor that acquires a biometric image from a living body; a read / write unit that reads information stored in an IC card or writes information into an IC card; and a control unit;
A terminal device having an operation unit for receiving an operation guidance display or an input operation;
A biometric information registration system for registering biometric information used for authentication,
The control unit of the biometric information registration device includes:
A biometric feature acquisition unit that extracts a biometric feature from a biometric image acquired by the image sensor;
A template reading unit for reading and storing a template stored in advance in the IC card for manager by the read / write unit;
Based on the administrator biometric information collation command from the terminal device, collation result data obtained by collating the biometric feature amount of the administrator acquired by the biometric feature amount acquiring unit with the template of the administrator acquired by the template reading unit. A first verification unit to obtain;
Based on a user biometric information registration command from the terminal device, a second collation that collates the biometric feature of the user acquired by the biometric feature acquisition unit and the template of the administrator acquired by the template reading unit And
As a result of the collation by the second collation unit, when it is determined that the user's biometric feature quantity and the administrator's template do not match, the read / write unit adds the biometric feature of the user to the user IC card. A registration unit for registering the amount as a template;
A biometric information registration system comprising: The biometric information registration system according to claim 1,
The control unit performs unauthorized registration in the operation unit of the terminal device when it is determined that the biometric feature amount of the user matches the template of the administrator as a result of the collation by the second collation unit. A biometric information registration system that controls to display the information. The biometric information registration system according to claim 1,
The terminal device guides whether or not to perform biometric information registration of the user by the display unit when the verification result data obtained by the first verification unit is a verification success,
A biometric information registration system for instructing the user biometric information registration command to the control unit of the biometric information registration device when performing biometric information registration of the user. The biometric information registration system according to any one of claims 1 to 3,
The terminal device
A counter that counts the number of registrations as a template of the user's biometric features to the user IC card by the registration unit;
A biometric information erasure unit that erases the biometric feature amount of the administrator and the biometric feature amount of the user acquired by the biometric feature amount acquisition unit when the number of registrations counted by the counter reaches a predetermined number of times; And a biometric information registration system. The biometric information registration system according to any one of claims 1 to 3,
The terminal device
When the biometric feature of the user is registered as a template in the user IC card by the registration unit, a timer that measures an elapsed time from the end of registration;
A biometric information erasure unit that erases the biometric feature amount of the administrator and the biometric feature amount of the user acquired by the biometric feature amount acquisition unit when the elapsed time measured by the timer reaches a predetermined time; And a biometric information registration system. In a biometric information registration system for registering biometric information used for identity verification,
A biometric information acquisition unit that acquires biometric information of a user who wishes to register biometric information;
A storage unit for storing the biological information of the administrator;
A collation unit for obtaining collation result data obtained by collating the biometric information of the user acquired by the biometric information acquisition unit with the biometric information of the administrator stored in advance in the storage unit;
A control unit that registers the biometric information acquired by the biometric information acquisition unit in the first portable electronic medium when the verification result obtained by the verification unit is determined to be inconsistent;
A biometric information registration system comprising: In a biometric information registration system that accepts registration of biometric information desired by a user,
An image sensor for capturing a biological image from a living body;
A feature amount extraction unit for extracting a biometric feature amount from a biometric image captured from the image sensor;
A first storage unit for storing an encrypted administrator template;
A decryption unit for acquiring and decrypting an encrypted administrator biometric feature stored in the first storage unit;
A second storage unit for storing the administrator's template decrypted by the decryption unit;
The first verification result is verified by checking whether or not the biometric feature amount of the administrator obtained by the image sensor and the feature amount extraction unit matches the biometric feature amount of the administrator stored in the second storage unit in advance. A first verification unit for obtaining
The user's biometric feature amount obtained by the image sensor and the feature amount extracting unit is collated with the administrator's biometric feature amount stored in advance in the second storage unit, and the second collation result A second verification unit for obtaining
When the first collation result obtained by the first collation unit is successful and the second collation result obtained by the second collation unit is unsuccessful, the biometric feature of the user is stored in the first portable electronic medium. A control unit to be registered;
A biometric information registration system comprising: In a biometric information registration system for registering biometric information that can identify an individual,
An image sensor for capturing a biological image from a living body;
A feature amount extraction unit for extracting a biometric feature amount from a biometric image captured from the image sensor;
A first storage unit for storing a personal identification number indicating that the administrator is the administrator and an encrypted administrator template;
A decryption unit for acquiring and decrypting an encrypted biometric feature of the administrator stored in the first storage unit;
A second storage unit for storing the administrator's template decrypted by the decryption unit;
A reading unit for reading the personal identification number stored in the first storage unit;
A third storage unit for storing the personal identification number;
A first collation result is obtained by collating whether or not the biometric feature amount of the administrator obtained by the image sensor and the feature amount extraction unit matches the biometric feature amount stored in advance in the second storage unit. A collation unit;
A second collation result is obtained by collating whether or not the biometric feature amount of the user obtained by the image sensor and the feature amount extraction unit matches the biometric feature amount stored in advance in the second storage unit. A collation unit;
A third verification unit that verifies whether the personal identification number read by the reading unit matches the personal identification number stored in advance in the third storage unit, and obtains a third verification result;
The third verification result obtained by the third verification unit is successful, the first verification result obtained by the first verification unit is successful, and the second verification unit obtained by the second verification unit If the collation result is unsuccessful, a control unit that registers the biometric feature of the user in the first portable electronic medium;
A biometric information registration system comprising: The biometric information registration system according to any one of claims 6 to 8,
The biometric information registration system, wherein the first storage unit is provided in a second portable electronic medium. The biometric information registration system according to any one of claims 6 to 9,
The biometric information registration system, wherein the biometric information is finger vein information. The biometric information registration system according to claim 6 to 10,
The said control part erase | eliminates all the biometric information acquired until then after registering a user's biometric feature-value to a said 1st portable electronic medium. The biometric information registration system according to claim 6 to 10,
The control unit deletes all biometric information obtained so far other than the biometric information stored in the second storage unit after registering the biometric feature of the user in the first portable electronic medium. Biometric information registration system. The biometric information registration system according to claim 6 to 10,
The control unit erases all biometric information obtained so far other than the biometric information stored in the second storage unit every time the registration process of registering the biometric feature of the user in the first portable electronic medium is completed. And the biometric information registration system characterized by deleting the biometric information memorize | stored in the said 2nd memory | storage part, if registration of predetermined times is processed. The biometric information registration system according to claim 6 to 10,
A timer for measuring time from when the first matching result obtained by the first matching unit is found to be successful;
The control unit erases all biometric information obtained so far other than the biometric information stored in the second storage unit every time the registration process of registering the biometric feature of the user in the first portable electronic medium is completed. When the time measured by the timer reaches a predetermined time, the biological information stored in the second storage unit is also deleted. The biometric information registration system according to claim 6 to 10,
The biometric information registration system, wherein the biometric information stored in advance in the first storage unit is all biometric information possessed by an administrator. The biometric information registration system according to claim 6 to 15,
The biometric information registration system, wherein the first portable electronic medium and the second portable electronic medium include an IC card.

Images