JP7439843B2 - Electronic information storage medium, IC card, processing method, and program - Google Patents

Description

It relates to technical fields such as IC cards that can acquire human biometric data.

Conventionally, an IC card with a fingerprint authentication function has been proposed. For example, Patent Document 1 discloses an RFID device that includes an antenna for receiving an RF (Radio Frequency) signal, an RFID chip that receives power through non-contact communication using the antenna, a fingerprint authentication engine, and the like. The fingerprint authentication engine is configured to compare the fingerprint read by the fingerprint reader with pre-stored fingerprint data.

Special table 2017-538188 publication

However, the process for the IC card to acquire fingerprint data from the user takes several seconds because the CPU capacity is lower than that of, for example, a smartphone terminal. Therefore, the user is forced to wait every time fingerprint authentication using an IC card is performed, which is not convenient.

The present invention has been made in view of such problems, and provides an electronic information storage medium, an IC card, a processing method, and a program that can improve convenience by reducing user waiting time. The purpose is to

In order to solve the above problem, the invention according to claim 1 provides an electronic information storage medium that can be used for transactions, and is a storage medium for storing biometric data acquired from a user's body by a biometric data acquisition sensor. a storage unit provided with a first storage area and a second storage area ; an authentication means for performing biometric authentication using the biometric data in a transaction; and a storage unit that stores the previous biometric data used in the previous transaction in the first storage. determining means for alternately determining whether the biometric data is stored in the second storage area and determining whether the biometric data is stored in the second storage area for each transaction; If it is determined that the biometric data is not stored in the first storage area, the biometric data acquired from the user's body by the biometric data acquisition sensor is acquired from the biometric data acquisition sensor as the current biometric data; area, and causes the authentication means to perform biometric authentication using the current biometric data, while the determination means determines that the previous biometric data is stored in the first storage area. In this case, biometric data acquired from the user's body by the biometric data acquisition sensor is acquired from the biometric data acquisition sensor as the current biometric data and stored in the second storage area, and stored in the first storage area. control means for causing the authentication means to perform biometric authentication using the previous biometric data that has been stored , and the determining means determines that the previous biometric data is stored in the second storage area. In this case, the control means acquires the biometric data acquired from the user's body by the biometric data acquisition sensor as the current biometric data from the biometric data acquisition sensor and overwrites and saves it in the first storage area, and The present invention is characterized in that the authentication means is caused to perform biometric authentication using the previous biometric data stored in the second storage area .

The invention according to claim 2 is the electronic information storage medium according to claim 1, in which, in parallel with the execution of the biometric authentication, the control means performs biometric authentication acquired from the user's body by the biometric data acquisition sensor. The present invention is characterized in that data is acquired as the current biometric data from the biometric data acquisition sensor and stored in the first storage area or the second storage area .

The invention according to claim 3 is characterized in that in the electronic information storage medium according to claim 1 or 2 , the control means executes transaction processing related to the transaction in parallel with execution of the biometric authentication. shall be.

The invention according to claim 4 is the electronic information storage medium according to claim 3 , further comprising: a receiving means for receiving a command indicating the start of the transaction from an external device; The present invention is characterized in that it further includes a transmitting means for transmitting a response indicating completion of the transaction to the external device when the processing is normally completed.

The invention according to claim 5 is an IC card that can be used for transactions, and includes a biometric data acquisition sensor that acquires biometric data from the body of a user of the IC card, and a biometric data acquisition sensor that acquires biometric data from the user's body. a storage unit provided with a first storage area and a second storage area for storing biometric data; an authentication means for performing biometric authentication using the biometric data in a transaction; determining means for alternately determining whether or not the biometric data is stored in the first storage area and determining whether or not it is stored in the second storage area for each transaction ; If the means determines that the previous biometric data is not stored in the first storage area, the biometric data acquired from the user's body by the biometric data acquisition sensor is set as the current biometric data. The biometric data acquired from the acquisition sensor is stored in the first storage area, and the authentication means executes biometric authentication using the current biometric data, while the determination unit stores the previous biometric data in the first storage area. If it is determined that the biometric data is stored in the user's body by the biometric data acquisition sensor, the biometric data acquired from the user's body by the biometric data acquisition sensor is acquired from the biometric data acquisition sensor as the current biometric data and stored in the second storage area. , and a control means for causing the authentication means to perform biometric authentication using the previous biometric data stored in the first storage area , wherein the determination means selects the previous biometric data from the second storage area. If it is determined that the biometric data is stored in the area, the control means acquires the biometric data acquired from the user's body by the biometric data acquisition sensor from the biometric data acquisition sensor as the current biometric data. The first storage area is overwritten and saved, and the authentication means is caused to perform biometric authentication using the previous biometric data stored in the second storage area.

The invention according to claim 6 is a processing method executed by a computer included in an electronic information storage medium that can be used for transactions, and the method includes storing biometric data acquired from a user's body by a biometric data acquisition sensor in a storage unit. determining whether or not the previous biometric data used in the previous transaction is stored in the first storage area, and the second storage area . a determination step of alternately performing a determination of whether or not the biometric data is stored in the first storage area for each transaction; and when it is determined in the determination step that the previous biometric data is not stored in the first storage area; The biometric data acquired from the user's body by the biometric data acquisition sensor is acquired from the biometric data acquisition sensor as the current biometric data and stored in the first storage area, and the biometric data using the current biometric data is While causing the authentication means to perform authentication, if it is determined in the determination step that the previous biometric data is stored in the first storage area , the biometric data acquired from the user's body by the biometric data acquisition sensor The authentication means acquires data as the current biometric data from the biometric data acquisition sensor and stores it in the second storage area, and performs biometric authentication using the previous biometric data stored in the first storage area. and a control step for causing the biometric data acquisition sensor to execute the user's biometric data when it is determined in the determining step that the previous biometric data is stored in the second storage area. The biometric data acquired from the body of the user is acquired from the biometric data acquisition sensor as the current biometric data and is overwritten and saved in the first storage area, and the previous biometric data stored in the second storage area is The method is characterized in that the authentication means is caused to execute the biometric authentication used .

The invention according to claim 7 is an electronic information storage medium usable for transactions, which comprises a first storage area and a second storage area for storing biometric data acquired from a user's body by a biometric data acquisition sensor. an authentication means included in an electronic information storage medium having a storage section provided with an authentication means for performing biometric authentication using the biometric data in a transaction ; a determining means for alternately determining whether or not the biometric data is stored in one storage area and determining whether or not it is stored in the second storage area for each transaction ; If it is determined that the biometric data is not stored in the first storage area, the biometric data acquired from the user's body by the biometric data acquisition sensor is acquired from the biometric data acquisition sensor as the current biometric data. 1 storage area, and causes the authentication means to perform biometric authentication using the current biometric data, while the determination means determines that the previous biometric data is stored in the first storage area. , the biometric data acquired from the user's body by the biometric data acquisition sensor is acquired from the biometric data acquisition sensor as the current biometric data and stored in the second storage area, and the first storage area A program that functions as a control means for causing the authentication means to perform biometric authentication using the previous biometric data stored in the second storage area, wherein the determination means stores the previous biometric data in the second storage area. If it is determined that the biometric data acquisition sensor has acquired the biometric data from the user's body, the control means acquires the biometric data acquired from the user's body by the biometric data acquisition sensor as the current biometric data and stores it in the first storage area. It is characterized in that the authentication means is caused to overwrite the biometric data and execute biometric authentication using the previous biometric data stored in the second storage area .

According to the present invention, it is possible to improve convenience by reducing user waiting time.

2 is a diagram showing an example of a schematic configuration of an IC card C. FIG. 4 is a diagram showing an example of a memory map of a storage unit 4. FIG. 3 is a flowchart illustrating an example of processing executed by the control unit 5 of the IC card C. FIG. 4 is a diagram illustrating an example of the relationship between the number of times of authentication and fingerprint data that is stored and used when the process illustrated in FIG. 3 is executed multiple times in chronological order.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The embodiment described below is an embodiment in which the present invention is applied to an IC card with a fingerprint authentication function.

[1. Configuration and functions of IC card C]
First, with reference to FIG. 1, the configuration and functions of the IC card C according to the present embodiment will be explained. FIG. 1 is a diagram showing an example of a schematic configuration of an IC card C. As shown in FIG. 1, the IC card C includes an antenna section 1, a fingerprint sensor 2, an authentication section 3, a storage section 4, and a control section 5. Note that the authentication section 3, the storage section 4, and the control section 5 may be composed of one IC chip or may be composed of a plurality of IC chips. The IC card C is an example of an electronic information storage medium that can be used for transactions. Examples of the IC card C include a credit card, a cash card (bank card), an electronic money card, and the like. Examples of transactions include transactions related to the purchase and sale of products or service delivery and reception at stores and vending machines, and transactions related to deposits and withdrawals at banks and ATMs (Automatic Teller Machines).

The antenna unit 1 receives radio waves (RF signals) transmitted from a reader/writer (RW) included in the external device E, and outputs the electric signals to the control unit 5 . Further, the antenna section 11 transmits the electric signal output from the control section 5 as a radio wave. Thereby, non-contact communication is performed between the control unit 5 and the external device E. Note that electric power can be supplied to each component of the IC card C by the voltage induced by the antenna section 1.

The fingerprint sensor 2 (an example of a biometric data acquisition sensor) is mounted on the surface of the IC card C, reads a fingerprint from the pad of a finger of a user using the IC card C, and acquires the fingerprint data (an example of biometric data). , outputs the fingerprint data to the authentication section 3 or the control section 5. For example, the fingerprint sensor 2 has tens of thousands of electrodes and a contact surface that the user's fingertip contacts, and when the user's fingertip comes into contact with this contact surface, the user's Due to the unevenness on the pad of the finger (that is, the unevenness forming the fingerprint), an amount of charge is accumulated depending on the proximity to the contact surface. The fingerprint sensor 2 acquires fingerprint data by detecting the amount of charge accumulated in each electrode and converting it into a numerical value (that is, a numerical value corresponding to the amount of charge). Note that the fingerprint sensor 2 may acquire fingerprint data by a method other than the above.

The authentication unit 3 (an example of authentication means) includes a RAM (Random Access Memory), a ROM (Read Only Memory), a CPU (Central Processing Unit), etc., and performs fingerprint authentication using fingerprint data output from the fingerprint sensor 2. (an example of biometric authentication) and outputs the authentication result (authentication success or authentication failure) to the control unit 5. Such fingerprint authentication is a process for confirming, using fingerprint data output from the fingerprint sensor 2, whether the user having the fingerprint is the person initially registered in advance.

The storage unit 4 includes NVM (Nonvolatile Memory). FIG. 2 is a diagram showing an example of a memory map of the storage unit 4. As shown in FIG. As shown in FIG. 2, the storage unit 4 stores an operating system and applications (including the program of the present invention). The storage unit 4 also stores fingerprint data related to the fingerprint read by the fingerprint sensor 2 as registered fingerprint data (template) for initial registration (initial registration). The initial registration of fingerprint data can be performed, for example, using a small fingerprint registration device (an example of external device E) delivered to the user together with the IC card C, or a fingerprint registration device (an example of external device E) installed at a predetermined location such as a store. Executed in response to a command from (an example).

Furthermore, the storage unit 4 is provided with a storage area 41 and a storage area 42 for storing fingerprint data acquired by the fingerprint sensor 2. Every time fingerprint data is acquired by the fingerprint sensor 2, the fingerprint data is alternately written (overwritten) into either the storage area 41 or the storage area 42. For example, fingerprint data acquired each time a transaction is written to the storage area 41 for the first transaction, written to the storage area 42 for the second transaction, and written to the storage area 42 for the third transaction. is written in the storage area 41, and is written in the storage area 42 at the time of the fourth transaction. In other words, the fingerprint data is saved in a storage area different from the storage area where it was last saved. This makes it possible to simultaneously process fingerprint data storage and fingerprint authentication, as will be described later.

Furthermore, the storage unit 4 stores transaction data necessary for transactions. Here, in the case of a transaction related to the purchase and sale of products or the delivery and reception of services at a store, etc., the transaction data includes information necessary for payment according to a payment method such as credit card payment. For example, in the case of credit card payment, examples of information necessary for payment include data such as the credit card number, the name of the holder, and the expiration date. Note that the information necessary for payment may be a payment ID (identification information) unique to the user of the IC card C. On the other hand, in the case of transactions related to deposits and withdrawals at banks, etc., the transaction data includes account numbers and the like as information necessary for deposits and withdrawals.

The control unit 5 (an example of a computer) includes a RAM, a ROM, a CPU, and the like. The control unit 5 functions as a determining means, a controlling means, a receiving means, and a transmitting means in the present invention by executing the program of the present invention. Specifically, the control unit 5 determines whether the previous fingerprint data used in the previous transaction (hereinafter referred to as “previous fingerprint data”) is stored in the storage unit 4 (storage area 41 or storage area 42). Determine whether If it is determined that the previous fingerprint data is stored in the storage unit 4, the control unit 5 causes the authentication unit 3 to perform fingerprint authentication using the previous fingerprint data. At this time, in parallel with the execution of the fingerprint authentication, the control unit 5 acquires the fingerprint data acquired by the fingerprint sensor 2 from the fingerprint sensor 2 as current fingerprint data (hereinafter referred to as "current fingerprint data") and stores it in the storage section. It is better to save (keep) it in 4.

On the other hand, if it is determined that the previous fingerprint data is not stored in the storage unit 4, the control unit 5 acquires the current fingerprint data acquired by the fingerprint sensor 2 from the fingerprint sensor 2 and stores it in the storage unit 4, The authentication unit 3 is caused to perform fingerprint authentication using the current fingerprint data. Further, the control unit 5 preferably executes transaction processing related to the transaction in parallel with the execution of the fingerprint authentication. In other words, it is preferable that transaction processing related to the transaction is executed before the fingerprint authentication result is obtained. In such transaction processing, for example, the validity of the external device E is verified and transaction data is acquired.

[2. Operation of IC card C]
Next, the operation of the IC card C will be explained with reference to FIG. FIG. 3 is a flowchart showing an example of processing executed by the control unit 5 of the IC card C. When the user holds the IC card C over an external device E while touching the fingerprint sensor 2 of the IC card C with the pad of a finger, the external device E recognizes the IC card C and starts wireless communication. Thereby, the external device E performs an initial sequence (exchange) related to the transaction with the control unit 5 of the IC card C. In this initial sequence, the current transaction amount between the external device E and the IC card C is specified. Then, when a command indicating the start of a transaction is sent from the external device E to the IC card C, and the command is received by the control unit 5 via the antenna unit 1 of the IC card C, the process shown in FIG. 3 is started. Ru.

When the process shown in FIG. 3 is started, the control unit 5 executes a transaction process (step S1) and an authentication process (step S2) in parallel. For example, when the control unit 5 includes two or more CPUs, the control unit 5 uses the first CPU to execute transaction processing, and the second CPU to execute authentication processing. Alternatively, when the control unit 5 includes one CPU having two or more cores, the control unit 5 executes the transaction process using the first core and executes the authentication process using the second core. On the other hand, when the control unit 5 includes one CPU having one core, the control unit 5 executes transaction processing and authentication processing in parallel using a multitasking function.

In step S1, the control unit 5 acquires information necessary for transaction processing from the external device E and determines whether the transaction is possible. Here, the information necessary for transaction processing is, for example, authentication data for the IC card C to authenticate the external device E, and is preferably included in the command indicating the start of the transaction. The authentication data includes, for example, certificate data of the external device E issued by a certification authority (including the public key of the external device E), signature data signed with the private key of the external device E, and the like. In this case, the control unit 5 verifies the validity of the external device E based on the authentication data. In such validity verification, for example, the signature data of the external device E is verified using the public key included in the certificate data of the external device E (that is, decrypted using the public key of the external device E). Then, when the validity verification of the external device E is satisfactory (that is, the signature verification is successful), it is determined that the transaction is possible, and transaction data is acquired from the storage unit 4. This can improve security.

In step S2, the control unit 5 determines whether the previous fingerprint data is stored in the storage unit 4 (step S21). In other words, it is determined whether or not a transaction using fingerprint authentication is to be performed for the first time. When the control unit 5 determines that the previous fingerprint data is not stored in the storage unit 4 (that is, a transaction using fingerprint authentication is being performed for the first time) (step S21: NO), the process proceeds to step S22. On the other hand, if the control unit 5 determines that the previous fingerprint data is stored in the storage unit 4 (that is, the transaction using fingerprint authentication is performed for the second time or later) (step S21: YES), the control unit 5 causes the process to step The process advances to S25 and step S26. Note that each time the process shown in FIG. 3 is executed, in step S21, it is determined whether or not the previous fingerprint data is stored in the storage area 41, and whether or not the previous fingerprint data is stored in the storage area 42. It is preferable that the determinations are performed alternately (limited to the same user).

In step S22, the control unit 5 outputs a fingerprint reading command to the fingerprint sensor 2, thereby acquiring the current fingerprint data acquired by the fingerprint sensor 2 and storing it in the storage unit 4 (storage area 41 or storage area 42). (keep) it. Next, the control unit 5 converts the current fingerprint data stored in step S22 into a template on the RAM (step S23). Here, "templating" refers to stylizing fingerprint data so that it can be easily compared with registered fingerprint data. Next, the control unit 5 outputs the current fingerprint data made into a template in step S23, the registered fingerprint data stored in the storage unit 4, and a fingerprint authentication command to the authentication unit 3 to perform fingerprint authentication. It is executed (step S24). In addition, in response to the fingerprint authentication command from the control unit 5, the authentication unit 3 executes fingerprint authentication by comparing the current fingerprint data from the control unit 5 with the registered fingerprint data, and determines the authentication result (authentication success or authentication failure) is output to the control unit 5. Here, if the degree of match between the current fingerprint data and the registered fingerprint data is greater than or equal to the threshold, the authentication result will be set as authentication success, while if the degree of match is less than the threshold, the authentication result will be set as authentication failure. Set.

The processing in step S25 and the processing in step S26 are executed in parallel by the control unit 5. In step S25, the control unit 5 outputs a fingerprint reading command to the fingerprint sensor 2, thereby acquiring the current fingerprint data acquired by the fingerprint sensor 2 and storing it in the storage unit 4 (storage area 41 or storage area 42). let On the other hand, in step S26, the control unit 5 acquires the previous fingerprint data stored in the storage unit 4, and converts the previous fingerprint data into a template on the RAM (step S261). Next, the control unit 5 outputs the previous fingerprint data made into a template in step S261, the registered fingerprint data stored in the storage unit 4, and a fingerprint authentication command to the authentication unit 3 to perform fingerprint authentication. It is executed (step S262). In addition, in response to the fingerprint authentication command from the control unit 5, the authentication unit 3 executes fingerprint authentication by comparing the previous fingerprint data from the control unit 5 with the registered fingerprint data, and determines the authentication result (authentication success or authentication failure) is output to the control unit 5. Here, if the degree of match between the previous fingerprint data and the registered fingerprint data is greater than or equal to the threshold, the authentication result will be set as authentication success, while if the degree of match is less than the threshold, the authentication result will be set as authentication failure. Set.

FIG. 4 is a diagram illustrating an example of the relationship between the number of times of authentication and the fingerprint data stored and used when the process illustrated in FIG. 3 is executed multiple times in chronological order. As shown in FIG. 4, in the first fingerprint authentication, the current fingerprint data acquired this time is stored in the storage area 41, and the current fingerprint data in the storage area 41 is used for fingerprint authentication. Next, in the second fingerprint authentication, the current fingerprint data acquired this time is stored in the storage area 42, and the previous fingerprint data in the storage area 41 is used for the fingerprint authentication. Next, in the third fingerprint authentication, the current fingerprint data acquired this time is stored in the storage area 41, and the previous fingerprint data in the storage area 42 is used for the fingerprint authentication. Next, in the fourth fingerprint authentication, the current fingerprint data acquired this time is stored in the storage area 42, and the previous fingerprint data in the storage area 41 is used for fingerprint authentication.

In step S3, the control unit 5 determines whether the transaction process has ended normally and whether or not the fingerprint authentication has been successful. This allows security to be maintained. If it is determined in step S1 that the transaction is possible and the transaction data is acquired, and the authentication result of the fingerprint authentication in step S24 or step S262 is successful, the transaction process ends normally and the fingerprint authentication is successful. It is determined that this has been done (step S3: YES). In this case, the control unit 5 transmits a response indicating that the transaction has been completed to the external device E via the antenna unit 1 (step S4), and ends the process. This response includes the transaction data acquired in step S1. Thereby, the external device E acquires transaction data from the response and executes processing related to the transaction based on the transaction data. For example, the external device E executes a payment process for charging the user to pay for goods or services based on the transaction data. Alternatively, the external device E executes the withdrawal process based on the transaction data. On the other hand, if it is determined in step S1 that the transaction is not possible (that is, the transaction process did not end normally), or if the authentication result of the fingerprint authentication in step S24 or step S262 is an authentication failure (step S3: NO ), the control unit 5 transmits a response indicating failure of the transaction to the external device E via the antenna unit 1 (step S5), and ends the process.

As explained above, according to the above embodiment, the IC card C determines whether or not the previous fingerprint data used in the previous transaction is stored in the storage unit 4, and determines that the previous fingerprint data is stored. In this case, the authentication unit 3 is configured to perform fingerprint authentication using the previous fingerprint data, thereby improving convenience by reducing the user's waiting time. At this time, the IC card C is configured to acquire the current fingerprint data from the fingerprint sensor 2 and store it in the storage unit 4 in parallel with the execution of fingerprint authentication for the next transaction, making it even more convenient. can improve sexual performance. Furthermore, since the IC card C is configured to perform transaction processing in parallel with fingerprint authentication, convenience can be further improved.

In addition, in the above embodiment, the case where the fingerprint sensor 2, which is an example of a biometric data acquisition sensor, is mounted on the IC card C has been described as an example, but even when the fingerprint sensor 2 is not mounted on the IC card C, The present invention is applicable. In this case, the fingerprint sensor 2 is installed at a predetermined location such as a store, and is capable of communicating with the IC card C. Furthermore, in the above embodiments, fingerprint data was used as an example of biometric data used for user authentication. Alternatively, the iris of the user's eye may be configured to be acquired as biometric data, and the present invention can be applied to such a case as well. Further, in the above embodiment, the IC card C that is capable of contactless communication with the external device E has been described as an example, but the present invention is also applicable to the IC card C that can perform contactless communication with the external device E. The present invention is also applicable to IC cards that are capable of (for example, IC cards having C1 to C8 terminals specified by the international standard ISO7816).

1 Antenna section 2 Fingerprint sensor 3 Authentication section 4 Storage section 5 Control section C IC card

Claims (7)

An electronic information storage medium that can be used for transactions,
a storage unit provided with a first storage area and a second storage area for storing biological data acquired from the user's body by a biological data acquisition sensor;
an authentication means for performing biometric authentication using the biometric data in a transaction;
Determining whether or not the previous biometric data used in the previous transaction is stored in the first storage area and determining whether or not it is stored in the second storage area are alternately performed for each transaction. A determination means to be executed ;
When the determining means determines that the previous biometric data is not stored in the first storage area, the biometric data acquired from the user's body by the biometric data acquisition sensor is used as the current biometric data. The biometric data is acquired from the biometric data acquisition sensor and stored in the first storage area, and the authentication means executes biometric authentication using the current biometric data, while the determining means determines that the previous biometric data is the same as the first biometric data. If it is determined that the biometric data is stored in the storage area , the biometric data acquired from the user's body by the biometric data acquisition sensor is acquired from the biometric data acquisition sensor as the current biometric data and stored in the second storage area. control means for causing the authentication means to perform biometric authentication using the previous biometric data stored in the first storage area ;
Equipped with
When the determining means determines that the previous biometric data is stored in the second storage area, the control means stores the current biometric data acquired from the user's body by the biometric data acquisition sensor. Acquired as the biometric data from the biometric data acquisition sensor and overwritten and stored in the first storage area, and causing the authentication means to perform biometric authentication using the previous biometric data stored in the second storage area. An electronic information storage medium characterized by: In parallel with the execution of the biometric authentication, the control means acquires biometric data acquired from the user's body by the biometric data acquisition sensor as the current biometric data, and stores the biometric data in the first storage area. The electronic information storage medium according to claim 1, wherein the electronic information storage medium is stored in the second storage area . 3. The electronic information storage medium according to claim 1 , wherein the control means executes transaction processing related to the transaction in parallel with execution of the biometric authentication. receiving means for receiving a command indicating the start of the transaction from an external device;
a transmitting means for transmitting a response indicating completion of the transaction to the external device when the biometric authentication is successful and the processing related to the transaction is successfully completed;
The electronic information storage medium according to claim 3 , further comprising:. An IC card that can be used for transactions,
a biometric data acquisition sensor that obtains biometric data from the body of an IC card user;
a storage unit provided with a first storage area and a second storage area for storing biological data acquired from the user's body by the biological data acquisition sensor;
an authentication means for performing biometric authentication using the biometric data in a transaction;
Determining whether or not the previous biometric data used in the previous transaction is stored in the first storage area and determining whether or not it is stored in the second storage area are alternately performed for each transaction. A determination means to be executed ;
When the determining means determines that the previous biometric data is not stored in the first storage area, the biometric data acquired from the user's body by the biometric data acquisition sensor is used as the current biometric data. The biometric data is acquired from the biometric data acquisition sensor and stored in the first storage area, and the authentication means executes biometric authentication using the current biometric data, while the determining means determines that the previous biometric data is the same as the first biometric data. If it is determined that the biometric data is stored in the storage area , the biometric data acquired from the user's body by the biometric data acquisition sensor is acquired from the biometric data acquisition sensor as the current biometric data and stored in the second storage area. control means for causing the authentication means to perform biometric authentication using the previous biometric data stored in the first storage area ;
Equipped with
When the determining means determines that the previous biometric data is stored in the second storage area, the control means stores the current biometric data acquired from the user's body by the biometric data acquisition sensor. Acquired as the biometric data from the biometric data acquisition sensor and overwritten and stored in the first storage area, and causing the authentication means to perform biometric authentication using the previous biometric data stored in the second storage area. An IC card that is characterized by A processing method carried out by a computer contained in an electronic information storage medium that can be used for transactions,
storing the biometric data acquired from the user's body by the biometric data acquisition sensor in a first storage area and a second storage area provided in the storage unit;
Determining whether or not the previous biometric data used in the previous transaction is stored in the first storage area and determining whether or not it is stored in the second storage area are alternately performed for each transaction. a determination step to be performed ;
If it is determined in the determination step that the previous biometric data is not stored in the first storage area, the biometric data acquired from the user's body by the biometric data acquisition sensor is used as the current biometric data. The biometric data is acquired from the biometric data acquisition sensor and stored in the first storage area, and the authentication means executes biometric authentication using the current biometric data, while in the determination step, the previous biometric data is stored in the first storage area. If it is determined that the biometric data is stored in the second storage area , the biometric data acquired from the user's body by the biometric data acquisition sensor is acquired from the biometric data acquisition sensor as the current biometric data and stored in the second storage area. and causing the authentication means to perform biometric authentication using the previous biometric data stored in the first storage area ;
including ;
If it is determined in the determination step that the previous biometric data is stored in the second storage area, in the control step, the biometric data acquired from the user's body by the biometric data acquisition sensor is stored this time. acquiring the biometric data from the biometric data acquisition sensor and overwriting it in the first storage area, and causing the authentication means to perform biometric authentication using the previous biometric data stored in the second storage area. A processing method characterized by: An electronic information storage medium that can be used for transactions, and includes a storage section provided with a first storage area and a second storage area for storing biometric data acquired from a user's body by a biometric data acquisition sensor. information storage medium contained in a computer;
an authentication means for performing biometric authentication using the biometric data in a transaction;
Determining whether or not the previous biometric data used in the previous transaction is stored in the first storage area and determining whether or not it is stored in the second storage area are alternately performed for each transaction. A determination means to be executed ;
When the determining means determines that the previous biometric data is not stored in the first storage area, the biometric data acquired from the user's body by the biometric data acquisition sensor is used as the current biometric data. The biometric data is acquired from the biometric data acquisition sensor and stored in the first storage area, and the authentication means executes biometric authentication using the current biometric data, while the determining means determines that the previous biometric data is the same as the first biometric data. If it is determined that the biometric data is stored in the storage area , the biometric data acquired from the user's body by the biometric data acquisition sensor is acquired from the biometric data acquisition sensor as the current biometric data and stored in the second storage area. A program that functions as a control means for causing the authentication means to perform biometric authentication using the previous biometric data stored in the first storage area ,
When the determining means determines that the previous biometric data is stored in the second storage area, the control means stores the current biometric data acquired from the user's body by the biometric data acquisition sensor. Acquired as the biometric data from the biometric data acquisition sensor and overwritten and stored in the first storage area, and causing the authentication means to perform biometric authentication using the previous biometric data stored in the second storage area. A program characterized by:

Images