JP4593091B2 - Fingerprint authentication method and apparatus - Google Patents

Description

  The present invention relates to a fingerprint authentication method and apparatus for performing fingerprint authentication by collating fingerprints, and more particularly, to a fingerprint authentication method and apparatus with enhanced fingerprint authentication security.

Conventionally, as such a fingerprint authentication method, for example, there is a method proposed in Japanese Patent Application Laid-Open No. 2000-076450 (see Patent Document 1). The method of this publication performs the input of the fingerprint twice or more, collates the fingerprint information and the order or combination of the input fingerprints with the fingerprint information registered in advance and the order or combination of the input fingerprints, This is to authenticate the person by matching the above.
JP 2000-076450 (paragraphs 0021, 0024 to 0025, FIG. 1, FIG. 2, etc.)

  In the method described in Patent Document 1, fingerprint type information of the order or combination of fingerprints input by a fingerprint registration machine is registered in the fingerprint registration unit, and authentication is performed by inputting the fingerprints in the same order or combination at the time of fingerprint verification. As a result, the fingerprint registrant has to remember the input order or combination of all fingerprints, which is inconvenient.

  The present invention has been made in view of the above-described conventional problems, and it is not necessary to remember the input order or combination of fingerprints, and can improve usability and increase the security of fingerprint authentication. And a fingerprint authentication method and apparatus.

In order to achieve the above object, the present invention provides a fingerprint authentication method for authenticating whether a user is a person to be authenticated by collating a plurality of fingerprints of an input person to be authenticated and a plurality of fingerprints registered in advance. At the time of fingerprint registration, one type is selected from a plurality of types of special information presented in accordance with the operation of the person to be authenticated, and the target information is selected from a plurality of pieces of the selected one type of special information. A plurality of different information selected by the certifier and a plurality of pieces of fingerprint information of the person to be authenticated corresponding to a plurality of different pieces of information of the one type of special information are registered in the storage means, and at the time of fingerprint authentication, request means Accordingly, a plurality of pieces of different information of one type of special information registered in the storage means are presented at random different from the order presented at the time of the fingerprint registration, and a plurality of pieces of the one type of special information presented Different information A step of requesting to enter a fingerprint of a plurality of fingers corresponding, respectively, by matching means, a plurality of the plurality of fingerprint input in response to the request, one of the special information registered in the storage means characterized by comprising the steps of: determining whether a person to be authenticated himself, the by matching a plurality of fingerprint corresponding to the information of different.

Further, the present invention includes a plurality of fingerprints of the person to be authenticated input, the fingerprint authentication device for authenticating whether a plurality of fingerprints and matching to the authenticated person himself a previously registered, at the time of fingerprint registration, presented One type is selected from the plurality of types of special information according to the operation of the user to be authenticated, and the user is selected from the plurality of pieces of information of the selected one type of special information. a plurality of different information, and the one of the storage means corresponding the respective plurality of different information and a plurality of fingerprint information of the person to be authenticated is registered in the special information, the fingerprint authentication is registered in the storage means A plurality of different pieces of information of one type of special information are presented at random in a different order from the order presented at the time of fingerprint registration, and a plurality of pieces of information corresponding to a plurality of pieces of different information of the one type of special information presented. Insert fingerprint And requesting means for requesting to a plurality of fingerprints which are input in response to the request of the requesting means, and a plurality of fingerprints corresponding to different information of one kind of special information registered in the storage means And verification means for determining whether the person is the person to be authenticated by checking each of them.

  According to the present invention, when registering a fingerprint, special information that can naturally recall a fingerprint is registered in association with the fingerprint, and at the time of fingerprint verification, the special information is presented and a corresponding fingerprint is requested to be input. Thus, since the fingerprint collator can easily recall the fingerprint from the special information, it is not necessary to remember the input order of the fingerprints, and the usability can be improved.

  In addition, since the special information is known only by the registrant, even if the fingerprint is illegally stolen, it cannot be used illegally by others, which can enhance security and present this special information randomly. Thus, security can be further enhanced.

  Furthermore, by encrypting the fingerprint data by associating the special information with the encryption key for encrypting the fingerprint data, even if the fingerprint data is illegally stolen, if the special information is changed and the fingerprint data is re-registered Fingerprint authentication can be performed in the same manner, and theft and the like can be dealt with.

  Next, the best mode for carrying out the invention will be described in detail with reference to the drawings. FIG. 1 is a block diagram showing a configuration of an embodiment of a fingerprint authentication device according to the present invention. In the figure, reference numeral 101 denotes an ID input unit for inputting an ID number, which includes a numeric keypad. An ID number is assigned to each fingerprint registrant and has a one-to-one correspondence with the fingerprint registrant. Reference numeral 102 denotes a fingerprint input unit for inputting a fingerprint, which includes a prism, a CCD, and the like. Reference numeral 103 denotes a special information input unit for inputting special information arbitrarily selected by the user, and includes a keyboard or the like.

Special information is information that can be recalled naturally from the special information, even if the fingerprint registrant does not remember which fingerprint the fingerprint was registered. Any information can be used as long as it can recall a fingerprint registered by a fingerprint registrant, such as various colors, numbers, letters, shapes, pictures, and music. Compared to the order and combination of fingerprints, special information that is easier to remember or recall a registered finger is associated with personal preference, memory, etc. (however, it is difficult for other people to recall).

  For example, in the case of color, it is the most favorite color, the second favorite color, the third favorite color. The color of the car bought second, the color of the car bought third. Such special information is registered in association with the fingerprint, the special information is presented at the time of fingerprint collation, and the fingerprint corresponding to the special information is requested to be input, thereby improving the reliability of fingerprint authentication.

  Further, even if the fingerprint input order or combination is not remembered, it is possible to easily recall which fingerprint is by presenting the special information, so that it is possible to improve usability. The number of special information and the number of fingerprints to be registered is arbitrary, and one special information and the fingerprint of any one finger corresponding thereto may be registered, or a plurality of fingers may be registered respectively corresponding to a plurality of special information. You may register your fingerprint. The special information is output from a fingerprint registration processing unit, which will be described later, to the special information output unit at the time of fingerprint registration. The fingerprint registrant selects from a plurality of special information, and the selected special information is input from the special information input unit 103.

104 input ID number, the fingerprint information is then specials to a set fingerprint registration processing section for registering the fingerprint database 105, a personal computer (hereinafter, PC) consists software, etc. on. The fingerprint database 105 includes a RAM, a hard disk, and the like. An encryption key storage unit 106 includes an information storage medium such as a RAM or a hard disk for storing an encryption key corresponding to the special information on a one-to-one basis and a decryption key corresponding to the special information on a one-to-one basis. Reference numeral 107 selects an encryption key corresponding to the special information on a one-to-one basis from the encryption key storage unit 106, and encrypts fingerprint data corresponding to the special information using a common key encryption method such as DES. An encryption unit, which is composed of software on a PC.

  Fingerprint data from the fingerprint registration processing unit 104 is encrypted by the fingerprint data encryption unit 107 and then registered in the fingerprint database 105. A fingerprint data decrypting unit 108 decrypts fingerprint data registered in the fingerprint database 105, and includes software on a PC. 109 is a fingerprint collation processing unit that collates fingerprint data input from the fingerprint input unit 102 with the fingerprint data registered in the fingerprint database 105 and decrypted by the fingerprint data decryption unit 108, and 110 is from the fingerprint registration processing unit 104. A special information output unit 111 such as a display for displaying the output special information, and a switch 111 for notifying completion of fingerprint input. Each processing unit is connected by a LAN, RS232C serial communication, or a bus signal line.

  Next, the operation during fingerprint registration will be described with reference to the sequence diagram shown in FIG. First, at the time of fingerprint registration, a fingerprint registrant inputs an ID number to be registered from the ID number input unit 101. When the ID number is input, the fingerprint registration processing unit 104 outputs all special information such as colors, numbers, characters, shapes, pictures, songs, etc. to the special information output unit 110 and displays it on the display screen. .

  The fingerprint registrant selects arbitrary special information from a plurality of special information on the display screen and inputs it from the special information input unit 103. For example, a fingerprint registrant selects a color (for example, white, black, red, blue, yellow, green, orange, pink, etc.) as special information, and three fingerprints of the thumb, index finger, and middle finger are red , Blue and green are registered correspondingly.

  At this time, colors (white, black, red, blue, yellow, green, orange, pink) are displayed on the display screen of the special information output unit 110, and the fingerprint registrant has the most preferred color among the displayed colors. Red is selected and input from the special information input unit 103. When the special information is input, the fingerprint registration processing unit 104 prompts the fingerprint registration, and the fingerprint registrant inputs the fingerprint of the thumb corresponding to red from the fingerprint input unit 102. The input fingerprint is read by the prism or CCD of the fingerprint input unit 102 and sent to the fingerprint registration processing unit 104.

  Next, the fingerprint registration processing unit 104 displays (white, black, blue, yellow, green, orange, pink) excluding red on the display screen of the special information output unit 110, and the fingerprint registrant has two of them. Next, the preferred blue color is selected and input from the special information input unit 103. The fingerprint registration processing unit 104 prompts input of a fingerprint, and the fingerprint registrant inputs the fingerprint of the index finger corresponding to blue from the fingerprint input unit 102.

  Furthermore, the fingerprint registration processing unit 104 displays red, blue (white, black, yellow, green, orange, pink) on the display screen of the special information output unit 110, and the fingerprint registrant is the third among them. Is selected from the special information input unit 103. Similarly, the fingerprint registration processing unit 104 prompts the user to input a fingerprint, and the fingerprint registrant inputs the fingerprint of the middle finger corresponding to green from the fingerprint input unit 102. Here, the special information corresponds to the encryption key for encrypting the fingerprint data, and the fingerprint registration processing unit 104 selects the encryption key corresponding to the input special information, and the fingerprint data encryption unit 107 is selected. Notify

  When the input of the ID number, special information, and fingerprint is completed, the fingerprint registrant operates the switch 111. A fingerprint input end signal indicating that the fingerprint input is ended by the operation of the switch 111 is output to the registration processing unit 104. When receiving the fingerprint input end signal, the fingerprint registration processing unit 104 registers the input ID number, special information, and fingerprint data as a pair in the fingerprint database 105.

  At this time, the fingerprint registration processing unit 104 instructs encryption of the fingerprint data input to the fingerprint data encryption unit 107, and the fingerprint data encryption unit 107 uses the encryption key corresponding to the special information as described above. Encrypt fingerprint data of thumb, index finger, and middle finger by common key encryption. The encrypted fingerprint data is registered in the fingerprint database 105 together with the ID number and special information. This completes the fingerprint registration process.

  Here, when encrypting fingerprint data, it is encrypted using an encryption key that corresponds to the special information on a one-to-one basis, but this is effective for loss of fingerprint data, such as illegally stolen fingerprint data. It is a simple method. That is, when a situation such as illegally stealing fingerprint data occurs, fingerprint authentication can be performed as it is by changing the special information and re-registering the fingerprint.

Next, the fingerprint collation process will be described with reference to the sequence diagram shown in FIG. First, the fingerprint collator inputs the ID number from the ID number input unit 102. The fingerprint collation processing unit 109 acquires special information corresponding to the input ID number from the fingerprint database 105. In addition, the fingerprint collation processing unit 109 acquires a decryption key paired with each special information from the encryption key storage unit 106. The fingerprint collation processing unit 109 outputs one of the special information to the special information output unit 110 and displays it on the display screen. For example, the blue color selected by the fingerprint collator at the time of fingerprint registration is displayed, and a request is made to input the corresponding fingerprint. In response to the request, the fingerprint collator inputs the fingerprint of the index finger corresponding to blue from the fingerprint input unit 102.

  Next, the fingerprint collation processing unit 109 outputs the following special information to the special information output unit 110 and presents it to the fingerprint collator. For example, the green color selected by the fingerprint collator at the time of registration is displayed on the display screen of the special information output unit 110, and a request is made to input the corresponding fingerprint. In response to the request, the fingerprint collator inputs the fingerprint of the middle finger corresponding to green from the fingerprint input unit 102.

  Further, the fingerprint collation processing unit 109 outputs the following special information to the special information output unit 110 and presents it to the fingerprint collator. In this case, the red color selected by the fingerprint collator at the time of registration is displayed on the display screen of the special information output unit 110, and a request is made to input the corresponding fingerprint. In response to the request, the fingerprint collator inputs the thumb fingerprint corresponding to red from the fingerprint input unit 102. Here, when presenting the special information, it is desirable that the order of the special information presented on the display screen is presented at random, different from the order of registration. By doing so, security can be further enhanced.

  When all the fingerprint inputs are completed, the fingerprint data decrypting unit 108 acquires fingerprint data corresponding to the blue, green, and red special information from the fingerprint database 105, and also has a decryption key corresponding to each special information one-to-one. The fingerprint data of the index finger, middle finger, and thumb encrypted using is decrypted. The fingerprint collation processing unit 109 collates the input index finger, middle finger, and thumb fingerprints with the decrypted index finger, middle finger, and thumb fingerprints. At this time, if the fingerprints of all the fingers match, it is determined that the fingerprint collator is the person himself / herself, and if there is even one different fingerprint, it is determined that the fingerprint collator is not the person himself / herself.

  When performing fingerprint verification, fingerprint verification may be performed every time a fingerprint is input, instead of performing fingerprint verification after all fingerprints have been input. In this case, every time a fingerprint is input, the encrypted fingerprint data is decrypted and collated with the input fingerprint. Also, if the fingerprints match, the following special information is presented as described above, and the fingerprint input process proceeds to request the corresponding fingerprint input. If the fingerprints do not match, fingerprint verification is performed at that time The person is determined not to be the person, and the fingerprint matching process may be terminated.

  In the above embodiment, one fingerprint is associated with one special information, but a plurality of fingerprints may be associated with one special information. In that case, the special information is similarly presented to the fingerprint collator, the corresponding fingerprint is requested to be inputted, and the inputted fingerprint and the registered fingerprint are collated.

  In the above embodiment, the common key encryption of the fingerprint data is performed using the encryption key corresponding to the special information in a one-to-one manner. When inputting, fingerprint data may be encrypted using a different encryption key for each fingerprint. Furthermore, the fingerprint data is encrypted using the common key encryption method, but the fingerprint data is encrypted with the public key and the fingerprint data is decrypted with the common key by the public key encryption method. A similar device can be constructed.

It is a block diagram which shows the structure of one Embodiment of the fingerprint authentication apparatus by this invention. It is a sequence diagram which shows the fingerprint registration process of embodiment of FIG. It is a sequence diagram which shows the fingerprint collation process of embodiment of FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 101 ID number input part 102 Fingerprint input part 103 Special information input part 104 Fingerprint registration process part 105 Fingerprint database 106 Encryption key storage part 107 Fingerprint data encryption part 108 Fingerprint data decryption part 109 Fingerprint collation process part 110 Special information output part 111 switch

Claims (10)

In the fingerprint authentication method for authenticating whether the user is the person to be authenticated by checking the plurality of fingerprints of the person to be authenticated and the plurality of fingerprints registered in advance,
At the time of fingerprint registration, one type is selected from a plurality of types of special information presented in accordance with the operation of the person to be authenticated, and the target information is selected from a plurality of pieces of the selected one type of special information. A plurality of different information selected by the certifier and a plurality of pieces of fingerprint information of the authenticated person respectively corresponding to a plurality of different information of the one type of special information are registered in the storage means,
During fingerprint authentication,
The request means randomly presents a plurality of different information of one kind of special information registered in the storage means, different from the order presented at the time of the fingerprint registration, and the one kind of special information presented Requesting to input fingerprints of a plurality of fingers respectively corresponding to a plurality of different information ;
The verification unit compares each of the plurality of fingerprints input in response to the request with a plurality of fingerprints corresponding to a plurality of different pieces of information of one type of special information registered in the storage unit. The process of determining if it is the person,
A fingerprint authentication method comprising: In the case where a plurality of different information of the one type of special information and a plurality of fingerprint information corresponding to the one type of special information are stored in the storage unit, the information is encrypted and stored using a different encryption key for each fingerprint. Item 2. The fingerprint authentication method according to Item 1 . 3. The fingerprint authentication method according to claim 2 , wherein the encryption key is selected corresponding to a plurality of different pieces of information of the one type of special information . The fingerprint authentication method according to any one of claims 1 to 3 , wherein a plurality of pieces of fingerprint information are registered in association with one piece of information of one kind of special information selected at the time of fingerprint registration. . The type of the special information, the color numbers, letters, shapes, fingerprint authentication method as claimed in any one of claims 1 to 4, characterized in that a picture or music. In the fingerprint authentication apparatus that authenticates whether the user is the person to be authenticated by comparing the plurality of fingerprints of the input person to be authenticated and a plurality of fingerprints registered in advance.
At the time of fingerprint registration, one type is selected from a plurality of types of special information presented in accordance with the operation of the person to be authenticated, and the target information is selected from a plurality of pieces of the selected one type of special information. Storage means in which a plurality of different information selected by the certifier and a plurality of pieces of fingerprint information of the person to be authenticated respectively corresponding to a plurality of different information of the one type of special information are registered;
During fingerprint authentication,
A plurality of different information of one type of special information registered in the storage means is presented at random, different from the order presented at the time of fingerprint registration, and a plurality of different information of the one type of special information presented and request means for requesting to enter a fingerprint of a plurality of fingers respectively corresponding to,
The person to be authenticated is collated with a plurality of fingerprints input in response to a request from the requesting unit and a plurality of fingerprints corresponding to a plurality of different pieces of information of one type of special information registered in the storage unit. A verification means for determining whether or not
A fingerprint authentication apparatus comprising: In the case where a plurality of different information of the one type of special information and a plurality of fingerprint information corresponding thereto are stored, the storage means encrypts and stores them using different encryption keys for each fingerprint. The fingerprint authentication device according to claim 6 . The fingerprint authentication apparatus according to claim 7 , wherein the encryption key is selected corresponding to a plurality of different pieces of information of the one type of special information . 9. The fingerprint authentication device according to claim 6 , wherein a plurality of pieces of fingerprint information are registered in correspondence with one piece of information of one kind of special information selected at the time of fingerprint registration. . The fingerprint authentication apparatus according to claim 6, wherein the type of the special information is a color, a number, a character, a shape, a picture, or a song.

Images