JP4731398B2 - Personal authentication system and personal authentication method - Google Patents

Description

  The present invention relates to an individual (person) authentication system and an individual authentication method.

  Generate a registered template image from biometric information acquisition means, for example, finger vein information acquisition means or fingerprint information acquisition means, for example, finger vein pattern information or fingerprint information, and authentication template from corresponding biometric information acquired via communication means It is common to perform personal authentication by generating an image and comparing the authentication template image with a registered template image.

  In Patent Document 1, in a personal authentication system that performs personal authentication of a user who intends to use an information processing apparatus, a biometric information input processing unit that acquires biometric information from a user who is a target of personal authentication, and the terminal A person comprising: a biometric information collation processing unit for performing personal authentication by collating a template for creating a complete template by synthesizing stored server side partial templates and biometric information transmitted from a terminal An authentication system is described.

  Patent Document 2 includes means for extracting the most matching partial data while shifting the position for each learning pattern from the learning pattern, and means for determining a partial template using the extracted partial data. A partial template for each category is automatically generated from a learning pattern for which is not known. As described above, the most matching partial data is extracted while shifting the position for each learning pattern, so even if the position of the partial data in the learning pattern is not known, the partial template that matches the partial data of each learning pattern is extracted. Can be generated automatically. It is described that it is possible to classify an input pattern in which data is partially missing into a category by collating the partial template generated in this way with the input pattern.

Japanese Patent Laid-Open No. 2002-351843 JP 2002-83296 A

  The present invention provides a personal authentication system and a personal authentication method capable of reducing transmission data and reducing communication means load by utilizing a high degree of correlation between a template image at registration and a template image for authentication. With the goal.

  The present invention generates a registration template image from biometric information acquired from biometric information acquisition means, generates an authentication template image from biometric information acquired via communication means, and compares the authentication template image with the registration template image In the personal authentication system for performing personal authentication, an auxiliary image generation unit that generates an auxiliary image that is the same as the registered template image or includes partial image information from the registered template image, and stores the generated auxiliary image together with ID information Auxiliary image storage means stored in the means and transmitted via the communication means and stored in the client side storage means, and an auxiliary image stored in the client side storage means from the biometric information acquired by the client side biometric information acquisition means XOR information obtained by performing an XOR operation is transmitted through the communication means. And an authentication template image generation means for generating the authentication template image from the transmitted XOR information and the ID information and auxiliary image stored in the storage means. An authentication system and a personal authentication method by a personal authentication system are provided.

  In addition, the XOR information generation communication unit generates a XOR compressed image as the XOR information, and provides a personal authentication system and a personal authentication method.

  The generation information acquisition unit and the client side biometric information acquisition unit generate finger vein pattern information as the biometric information, and provide a personal authentication system and a personal authentication method.

  According to the present invention, the auxiliary image is used, and the authentication template image is generated by transmitting the XOR information at the time of authentication. Therefore, the correlation between the template image at the time of registration and the template image for authentication is high. Can be used to provide a personal authentication system and a personal authentication method that can reduce transmission data and reduce the load on communication means.

  Also, according to the present invention, since there is meaningless data without an auxiliary image, it is possible to prevent leakage of biological information due to eavesdropping via the communication means.

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a block diagram showing the concept of a personal authentication system according to an embodiment of the present invention.

  In FIG. 1, a personal authentication system 100 includes a server 1 and a client-side terminal 2, finger vein information is input from the finger vein device 3 to the server 1, and finger vein information is input to the client terminal 2 from another finger vein device 4. Information is entered. The execution of this embodiment is not limited to finger vein information, and biological information can be adopted. The finger vein pattern information can be adopted as the finger vein information, and the fingerprint information can also be adopted. Hereinafter, the finger vein pattern information will be described as an example of finger vein information.

  First, the registration time of a registered template image will be described.

  The finger vein information acquired by the finger vein device 3 is taken in by processing means (not shown) of the server 1 to generate a registered template image 11. This registered template image 11 is stored in the hard disk 13 together with the ID 14 (ID number, ID card, etc.) acquired by the finger vein device 3 or another device. ID14 is not limited to an ID number or an ID card, but includes an ID acquired by other ID means.

  An auxiliary image 12 is generated from the registered template image 11. FIG. 2 shows a registered template image example (FIG. (A)) and an auxiliary image example (FIG. (B)). In this example, a binary image is used, and the auxiliary image is the same as the registered template image. The auxiliary image can be formed as a partial template using the coordinate information of the core and feature points, the line direction, and image information around the feature points. The creation of partial templates is well known.

  The auxiliary image 12 is stored in the USB memory 15 and also on the hard disk. Therefore, the registration template image 11, the auxiliary image 12, and the ID 14 are stored in association with each other on the hard disk 13 and output by the search process 16. The memory is not limited to a USB memory.

  The client terminal 2 receives the auxiliary image 21 and the ID 22 stored in the USB memory 15.

  Next, the authentication process will be described.

  The finger vein information of the individual (that is, the user) to be authenticated acquired by the finger vein device 4 (which may be the finger vein device 3) provided on the client terminal 2 side is captured as an image, and the authentication template An XOR image is generated by an XOR (exclusive OR operation) calculation 24 that is an exclusive OR operation between the image 23 and the auxiliary image 21.

  FIG. 3 shows an example of a screen generated during the authentication process. FIG. 3A shows an example of an XOR image.

  In FIG. 1, an XOR image 25 is subjected to compression processing 26, and an XOR compressed image 27 is generated.

  FIG. 4 shows an example in which an XOR compressed image is generated from the authentication template image. FIG. 4A shows an example of data of an authentication template image, and FIG. 4B shows an example of data when an XOR compressed image is used. In this example, the number of data is reduced to 30%.

  There are various known compression algorithms for such compression, but in this embodiment, in order to simplify the explanation, a case where a data string in which the number of pixels is arranged continuously is shown is shown. ing. Therefore, the present embodiment is not limited to this example. The XOR compressed image 27 is transmitted to the server 1 by communication means (network). Various communication means can be used as the communication means.

  The server 1 stores the XOR compressed image 27 as an XOR compressed image 28. Note that the XOR image may be transmitted as it is. In this embodiment, the case of compression will be described. The XOR compressed image 27 ′ is generated as an XOR image 30 by the decompression process 29. XOR image 30 corresponds to XOR image 25.

  On the other hand, the auxiliary image 31 is extracted by the search process 16 referring to the ID 22 for the hard disk. The auxiliary image 31 corresponds to the auxiliary image 12 and the auxiliary image 21.

  An authentication template image 33 is generated by an XOR calculation 32 of the XOR image 30 and the auxiliary image 31. This authentication template image 33 corresponds to the authentication template image 23.

  Further, the registered template image 34 corresponds to the registered template image 11 by the search process 16 of the hard disk 13. An authentication process 35 is performed by comparing the authentication template image 33 with the registered template image 34, and an authentication result 36 is generated.

  The authentication result 36 is transmitted to the client terminal 2 by communication means and used for the authentication result determination 37.

  In the authentication result determination 37, in the case of authentication OK (success), various processes 38 after the authentication success are performed, and in the case of authentication NG (failure), various processes 39 after the authentication failure are performed.

  By generating a registration template image from the biometric information acquired from the biometric information acquisition means, generating an authentication template image from the biometric information acquired via the communication means, and comparing the authentication template image with the registration template image The personal authentication system for performing authentication has the following configuration.

  Auxiliary image generating means for generating, from a registered template image, an auxiliary image that is the same as the registered template image or includes partial image information.

  Auxiliary image storage means for storing the generated auxiliary image in the storage means together with the ID information, and transmitting the auxiliary image via the communication means and storing it in the client side storage means.

  XOR information generation communication means for transmitting XOR information obtained by XORing the auxiliary image stored in the client side storage means from the biological information acquired by the client side biometric information acquisition means via the communication means.

  Authentication template image generation means for generating the authentication template image from the transmitted XOR information, the ID information stored in the storage means, and the auxiliary image.

  The XOR information generating communication means generates an XOR compressed image as XOR information.

  When the template is registered, the server 1 and the user, that is, the client terminal 2 have the auxiliary image for data compression, and when the authentication template is transmitted from the client terminal 2, XOR is performed with the auxiliary image for data compression. , A configuration for compressing and transmitting is created.

  FIG. 5 shows a flowchart during the registration process.

  In FIG. 5, an ID is inputted by the keyboard 41 (S1), and finger vein information, that is, finger vein data is taken in from the finger vein device 3 (S2). If it is not a finger, it is finger vein data. Next, a registered template image is created (S4), and ID, registered template image, and auxiliary image registration are performed by the server 1 (S5). In the server 1, an ID, a registered template image, and an auxiliary image are associated. In the case of a system with a small number of authentication cases, two associations between a registered template image and an auxiliary image may be used.

  ID and auxiliary image registration are performed in the USB memory. (S6). The USB memory 15 stores (registers) an ID and an auxiliary image in association with each other.

  FIG. 6 shows a flowchart during the authentication process. This flowchart is formed from an authentication flow and a server-side processing flow.

  In the authentication flow, the ID and auxiliary image are acquired from the USB memory 15 (S11), and the finger vein data is taken in from the finger vein device 4 (S12). As a result, an authentication template image is created (S13), and data obtained by XORing the authentication template image and the auxiliary template image is generated as XOR data (S14). The XOR data is compressed as XOR compressed data (S15), and the ID and XOR compressed data are transmitted to the server 1 (S16).

  In the processing flow on the server side, the record with the matching ID is extracted from the server 1 (S21), and the XOR compressed data is expanded as XOR data (S22). Data obtained by XORing the XOR data and the auxiliary image is generated and used as an authentication template image (S23). The authentication process is executed using the authentication template and the registered template image of the corresponding record (S24). The authentication result is returned to the client side terminal 2 (S25). The client-side terminal 2 determines whether the authentication is OK (S17). If the authentication is OK (S18), the process ends. If the authentication is NG (S19), the process also ends.

  With the above configuration, the personal authentication method by the personal authentication system for performing personal authentication generates an auxiliary image consisting of partial image information that is the same as or part of the registered template image from the registered template image by the auxiliary image generating unit. The auxiliary image generated is stored together with the ID information in the storage means, transmitted through the communication means, stored in the client side storage means, and acquired by the client side biometric information acquisition means by the XOR information generation communication means XOR information obtained by XORing the auxiliary image stored in the client-side storage means from the biometric information is transmitted via the communication means, and the authentication template image generation means transmits the XOR information transmitted to the ID information and the auxiliary information stored in the storage means. Constructed by generating an authentication template image from the information That.

  According to the above personal authentication system or personal authentication method, the following merits can be obtained.

1) Since the template image at the time of registration and the template image for authentication have a high degree of correlation, the auxiliary image for data compression and the data obtained by XORing can be expected to have a very high degree of compression. Reduction and network load can be reduced.

2) Since there is no meaningless data without an auxiliary image for data compression, it is possible to prevent leakage of biological information due to network eavesdropping.

The block diagram which shows schematic structure of the Example of this invention. The figure which shows the example of an image produced | generated at the time of a registration process. The figure which shows the example of an image produced | generated at the time of an authentication process. The figure which shows the example of data of an authentication template image and an XOR compression image. The flowchart figure at the time of a registration process. The flowchart figure at the time of an authentication process.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Server, 2 ... Client terminal, 3, 4 ... Finger vein device, 11, 34 ... Registration template image, 12, 21, 31 ... Auxiliary image, 13 ... Hard disk, 14, 22 ... ID, 15 ... USB memory, 16 ... Search processing 23, 33 ... Authentication template image, 24, 32 ... XOR calculation, 25, 30 ... XOR image, 26 ... Compression process, 27, 28 ... XOR compressed image, 29 ... Decompression process, 100 ... Personal authentication system.

Claims (6)

By generating a registration template image from the biometric information acquired from the biometric information acquisition means, generating an authentication template image from the biometric information acquired via the communication means, and comparing the authentication template image with the registration template image In the personal authentication system that performs authentication,
Auxiliary image generating means for generating an auxiliary image that is the same as the registered template image or consisting of partial image information from the registered template image, stores the generated auxiliary image together with ID information in a storage means, and via the communication means Auxiliary image storage means for transmitting and storing in the client-side storage means, and XOR information obtained by XORing the auxiliary image stored in the client-side storage means from the biological information acquired by the client-side biological information acquisition means via the communication means. XOR information generation communication means for transmitting the authentication template, and authentication template image generation means for generating the authentication template image from the transmitted XOR information, the ID information stored in the storage means, and the auxiliary image. Personal authentication system.   2. The personal authentication system according to claim 1, wherein the XOR information generation communication unit generates an XOR compressed image as the XOR information.   The personal authentication system according to claim 1, wherein the generation information acquisition unit and the client-side biometric information acquisition unit generate finger vein pattern information as the biometric information. By generating a registration template image from the biometric information acquired from the biometric information acquisition means, generating an authentication template image from the biometric information acquired via the communication means, and comparing the authentication template image with the registration template image In the personal authentication method by the personal authentication system that performs authentication,
The auxiliary image generation unit generates an auxiliary image that is the same as the registered template image or includes partial image information from the registered template image, and the auxiliary image storage unit stores the generated auxiliary image together with ID information in the storage unit, And the XOR information generation and communication means performs an XOR operation on the auxiliary image stored in the client side storage means from the biological information acquired by the client side biological information acquisition means. XOR information transmitted through the communication unit, and the authentication template image generation unit generates the authentication template image from the transmitted XOR information, the ID information stored in the storage unit, and auxiliary information. Personal authentication method.   5. The personal authentication method according to claim 4, wherein the XOR information is an XOR compressed image.   5. The personal authentication method according to claim 4, wherein the biometric information is finger vein pattern information.

Images