JP4876449B2 - IC card and IC card program - Google Patents

Description

  The present invention relates to an IC card having a biometric authentication function for authenticating a user of an IC card using biometric information, which is a physical feature of a person, and more specifically, considering the authentication performance of biometric authentication. The present invention relates to an IC card that operates and an IC card program.

  In a system using an IC card, user authentication is often required to confirm the legitimacy of a user using the system before providing a service to the user. For example, an ATM installed in a bank requires a user to verify a PIN (Personal Identification Number) before performing a transaction such as payout.

  However, since the PIN is generally a four-digit number, there is a possibility that the IC card can be used illegally when the IC card is stolen by seeing it when entering the PIN or elucidating the PIN from the user's personal information. There is. Therefore, in recent years, in systems requiring higher security such as financial transactions, biometrics authentication means (for example, fingerprint authentication) using user biometric information such as fingerprints, voiceprints, and irises are used as user authentication means. More cases are being adopted.

  In biometric authentication means using an IC card, the user's biometric information is stored in the IC card, and the user's biometric information read by the system is compared with the biometric information stored in the IC card. Authenticate the user.

  As user biometric information used in biometric authentication means, information unique to each user, such as fingerprints and hand veins, is used, but biometric information changes over time (for example, fingertip scratches) and read. There is a case where the user biometric information read by the system does not match the biometric information stored in the IC card due to a change in environment (for example, climate) or the like, and user authentication fails.

  In order to avoid such a case, in Patent Document 1 and Patent Document 2, a plurality of user authentication means including a biometric authentication means are provided, and the user authentication means is assembled so as to satisfy the required authentication accuracy. In addition, an invention is disclosed in which user authentication is performed or user authentication is performed using another biometric authentication means.

  However, if a user authentication system using an IC card is provided with a plurality of biometric authentication means, it is necessary to store a plurality of pieces of biometric authentication information in the IC card. Not suitable for small IC cards.

Further, in the above-described technology, authentication performance information (for example, failure rate) when a user is authenticated by each user authentication unit, which is necessary when selecting a user authentication unit to be used for user authentication, is stored in the server. Therefore, there is a problem that the authentication performance information cannot be used in other systems.
JP 2003-186836 A JP 2004-152045 A

  Therefore, in view of the above-described problems, the present invention can quickly cope with the case where the authentication performance of user authentication is deteriorated due to secular change or environment change in an IC card equipped with biometric authentication means. Another object of the present invention is to provide an IC card and an IC card program that can use the authentication performance of user authentication in other systems.

A first invention for solving the above-described problem is an IC card program mounted on an IC card used in combination with a terminal device that authenticates the user using user biometric information, the IC card Stores user biometric information, authentication performance information describing a history of success or failure of user authentication using the biometric information, and a request level for the authentication performance information. a): receiving a command from the terminal device and using the biometric information to perform processing related to the user authentication; (b): the step (a) reflecting the authentication result of the user; updating the authentication capability information, (c): forming stored in said authentication capability information updated in step (b) If the failure rate or the number of failed authentication is calculated from the history of exceeds the required level, by including the failure rate or failure count, the step of generating a response to be transmitted to the terminal device, executes in sequence It includes a procedure.

  According to 1st invention, the said IC card memorize | stores the authentication performance information in which the information regarding the success or failure of the user authentication using the said biometric information was described, It is related with the said user's authentication using the said biometric information. By reflecting the processing result in the authentication performance information, the authentication performance information is stored in the IC card. Therefore, all the terminal devices using the IC card can use the authentication performance information.

Further, the IC card generates the response to be sent back to the terminal device based on the value of the authentication performance information, so that the terminal device can quickly need based on the value of the authentication performance information. Such as displaying a message prompting the update of the biometric information stored in the IC card. Further, according to the first invention, the terminal device can quantitatively handle the authentication performance from the failure rate included in the response. According to the first invention, by providing a required level in the authentication accuracy information, the terminal device can easily know that the collation accuracy has dropped due to aging or environmental changes.

  Further, the second invention is the IC card program according to the first invention, wherein the authentication performance information stored in the IC card is a result of success or failure of authenticating the user using the user's biometric information. In the history description, the step (b) deletes the oldest success / failure history included in the authentication performance information, and the authentication result of the user in the step (a) is the latest success / failure history. As a step of storing in the authentication performance information.

According to the second invention, the authentication performance information stores a history of success or failure of authenticating the user using the biometric information, so that information related to authentication failures that occurred accidentally in the past disappears. Therefore, only changes in authentication performance over time such as changes over time are clarified .

Furthermore, the third invention is an IC card, characterized in that implements the IC card program according to the first invention or second inventions.

Furthermore, a fourth invention is the IC card according to the third invention, wherein the IC card stores a required level for the authentication performance information, and the IC card program according to the first invention or the second invention Is implemented.

  According to the present invention described above, in an IC card equipped with a biometric authentication means, it is possible to quickly cope with the case where the authentication performance of user authentication is deteriorated due to secular change or environmental change, and more easily, other systems Can provide an IC card and an IC card program that can utilize the authentication performance of user authentication.

  Hereafter, an IC card used in combination with a terminal device having a function of authenticating a user's biometric information according to the present invention will be described in detail with reference to the drawings. FIG. 1 is a diagram illustrating an IC card 1 according to the present invention, and FIG. 2 is a hardware configuration diagram of an IC chip 11 mounted on the IC card 1.

  FIG. 1 is a perspective view of an IC card 1. The IC card 1 is a card in which an IC chip 11 is embedded in a plastic card having the same size as a cash card or a credit card. In this embodiment, the IC card 1 is a contact type. IC card.

  In this embodiment, the IC card 1 is a contact IC card. However, the IC card 1 has a built-in antenna coil and wirelessly communicates with the terminal device 2 or data communication by contact. It may be a dual interface type IC card having two communication functions for non-contact data communication.

  FIG. 2 is a hardware structure diagram of the IC chip 11 mounted on the IC card 1. The IC chip 11 includes a central processing unit 110 (hereinafter referred to as “CPU”), a read-only memory 111 (hereinafter referred to as “ROM”), and an EEPROM 113 (Electrically Erasable Programmable Read-Only Memory) as rewritable memory. Random access memory 112 (hereinafter referred to as RAM) as a volatile memory, an I / O circuit 114 for communicating data with an external terminal not shown, and the like are connected to the BUS 115. .

  The present invention does not limit the specifications of the IC chip 11, and the IC chip 11 having specifications suitable for the application of the IC card 1 can be selected. For example, the capacities of the ROM 111 and the EEPROM 113 are not limited, and the rewritable memory may be a memory other than the EEPROM such as a ferroelectric memory or a flash memory. The IC chip 11 may include other devices (not shown) such as a timer circuit, a cryptographic operation circuit, or a coprocessor circuit.

  FIG. 3 is a software block diagram of the IC card 1 according to the present invention. As shown in FIG. 3, the IC card 1 is a biometric authentication executed when a user is authenticated as a program for operating the CPU 110 of the IC chip 11 using biometric information that is a physical feature of the user. As the information used by the command 100, the biometric authentication command 100, the biometric information 101 of the user holding the IC card 1, the authentication performance information 102 indicating the success / failure history of the biometric authentication command 100, and the authentication performance information Request level information 103 indicating an allowable value of the failure rate calculated from 102.

  The biometrics authentication command 100 provided in the IC card 1 is a program that operates on an operating system (hereinafter referred to as OS) mounted on the IC card 1, and the biometric received by the OS from the terminal device 2 to which the IC card 1 is attached. Processing is performed on the command APDU of the metrics authentication command 100, the authentication performance information 102 is updated according to the success or failure of the biometrics authentication command 100, and if the updated authentication performance information 102 falls below the request level information 103, the authentication performance This is a program that generates a response APDU including information calculated from the information 102 and requests the OS to perform processing for transmitting the generated response APDU to the terminal device 2.

  For example, when the biometrics authentication command 100 is a process of authenticating a user using the user's biometric information 101 inside the IC card 1, the biometrics authentication command 100 is stored in the IC card 1. The user is authenticated by comparing the biometric information 101 (for example, the feature point of the fingerprint information of the user) and the biometric information 101a of the user transmitted from the terminal device 2, and the authentication performance is based on the success or failure of the user authentication. Information 102 is updated.

  Further, the biometrics authentication command 100 transmits the user's biometric information 101 stored in the IC card 1 to the terminal device 2, and the user's biometric information 101 stored in the IC card 1 on the terminal device side. When the user's biometric information 101a transmitted from the terminal device 2 is collated, the biometric information 101 is transmitted to the terminal device 2 by encrypting the biometric information 101 or the like, and the biometric information 101 is transmitted to the terminal device. 2, the authentication performance information 102 is updated based on the success or failure of user authentication transmitted from the terminal device 2 to the IC card 1.

  The authentication performance information 102 operated by the biometrics authentication command 100 is operated by the biometrics authentication command 100 every time user authentication is performed from the terminal device 2 using the biometrics authentication command 100, and user authentication is performed. The authentication performance information 102 is stored in the EEPROM 113 of the IC chip 11.

  From here, a series of operations of the biometric authentication command 100 provided in the IC card 1 will be described. FIG. 4 is a flowchart showing a series of operations of the biometric authentication command 100.

  As described above, as the biometric authentication command 100 stored in the IC card 1, the user's biometric information 101 stored in the IC card 1 and the biometric information 101a transmitted from the terminal device 2 are collated. Two commands are assumed: a command and a command for transmitting the biometric information 101 stored in the IC card 1 to the terminal device 2. Here, the former command is stored in the IC card 1 for convenience. And

  The first step S10 of this series of operations is a step in which the IC card 1 is activated by the terminal device 2. In this step, the terminal device 2 activates the IC card 1 in accordance with, for example, a procedure described in the ISO 7816 standard, and the IC card 1 returns an ATR (Answer To Reset) to the terminal device 2. Communication of the IC card 1 is started.

  The next step S11 is a step in which the IC card 1 receives the command APDU of the biometrics authentication command 100 from the terminal device 2. In this step, the command APDU of the biometric authentication command 100 received by the IC card 1 includes the command identifier indicating the biometric authentication command 100 and the biometric information 101a read by the terminal device 2 from the user.

  The next step S12 is a step in which the biometrics authentication command 100 is executed and the biometric information 101a transmitted from the terminal device 2 and the biometric information 101 stored in the IC card 1 are collated. In this step, among the commands stored in the IC card 1, the program code indicated by the command identifier received in step S11, that is, the program code of the biometrics authentication command 100 is executed and transmitted from the terminal device 2. The user is authenticated by comparing the biometric information 101a with the biometric information 101 stored in the IC card 1.

  The next step S13 is a step in which the IC card 1 updates the authentication performance information 102 in accordance with the success or failure of the biometric authentication command 100 in step S12. The next step S14 is a step of generating a response APDU for the command APDU of the biometric authentication command 100 based on the success or failure of the biometric authentication command 100 of step S12 and the authentication performance information 102 updated in step S13. . Details of steps S13 and S14 will be described later. Note that the response APDU generated in step S14 includes information indicating a failure rate of biometric authentication and information indicating a user authentication result.

  The next step S15 is a step of returning the response APDU generated in step S14 to the terminal device 2. As described above, the response APDU generated in step S14 includes a failure rate of user authentication, and the terminal device 2 can perform the next necessary processing with reference to this failure rate (for example, A message that prompts the user to update the biometric information 101 stored in the IC card 1 is displayed).

  FIG. 5 is a flowchart showing a detailed procedure for updating the authentication performance information 102 in step S13 of FIG. 4, and FIG. 6 is a diagram for explaining the authentication performance information 102 at the time of update.

  FIG. 6A illustrates the authentication performance information 102 before being updated. As shown in FIG. 6A, in the present embodiment, the authentication performance information 102 is composed of information of 2 octets. In FIG. 6A, the first bit of the authentication performance information 102 indicates success / failure of the previous biometric authentication command 100, and the 32nd bit indicates success / failure of the biometric authentication command 100 32 times before.

  Further, “1” of each bit of the authentication performance information 102 indicates an authentication failure, and “0” indicates an authentication success. For example, in FIG. 6A, “1” in the second bit means that the biometrics authentication command 100 preceding two times has failed.

  The first step S20 of the operation for updating the authentication performance information 102 is a step of bit-shifting the authentication performance information 102 in order to set the authentication result performed in step S12 of FIG. In this step, the biometrics authentication command 100 copies the value of the authentication performance information 102 stored in the EEPROM 113 to a bit operable memory such as the register of the CPU 110 or the RAM 112, and the authentication performance information 102 copied to the bit operable memory. Are bit-shifted in the direction of erasing the oldest history.

  FIG. 6B is a diagram for explaining the authentication performance information 102 that has been copied to a bit-operable memory and bit-shifted. As shown in FIG. 6B, the biometric authentication command 100 deletes the bit indicating the oldest history (here, the 32nd bit) of the authentication performance information 102 copied to the bit operable memory. In 6 (b), the authentication performance information 102 in FIG. 6 (a) is shifted to the right by 1 bit.

  The next step S21 is a step in which the process branches depending on the success or failure of the biometrics authentication command 100 in step S12 of FIG. In step S21, if the biometrics authentication command 100 is successful, the process proceeds to step S22. If the biometrics authentication command 100 is unsuccessful, the process proceeds to step S23.

  Step S22 executed when the biometrics authentication command 100 succeeds in user authentication is a step of writing a value of “0” in the first bit of the authentication performance information 102 after the bit shift in step S20. Then, as shown in FIG. 6C, after writing a value of “0” into the first bit of the authentication performance information 102 bit-shifted in step S20, the authentication performance information 102 stored in the EEPROM 113 is changed to The operation of overwriting the value of the authentication performance information 102 updated on the bit operable memory and updating the authentication performance information 102 ends.

  Step S23 executed when the biometrics authentication command 100 fails to authenticate the user is a step of writing a value of “1” in the first bit of the authentication performance information 102 bit-shifted in step S20. Then, as shown in FIG. 6D, after the value “1” is written in the first bit of the authentication performance information 102 bit-shifted in step S20, the authentication performance information 102 stored in the EEPROM 113 is stored. The operation for overwriting the value of the authentication performance information 102 updated on the bit operable memory and updating the authentication performance information 102 ends.

  FIG. 7 is a flowchart showing a procedure for generating a response APDU of the biometrics authentication command 100 processed in step S14 of FIG. The first step S30 of the procedure for generating a response APDU is a step of calculating a user authentication failure rate based on the authentication performance information 102 updated in step S13 of FIG.

  In this step, the number of biometric authentication failures is counted by counting the number of bits set to “1” in the authentication performance information 102 stored in the bit operable memory by a predetermined algorithm. . Then, the failure rate of biometric authentication is calculated by dividing the number of failures by “32”, which is the number of times the history of biometric authentication is stored, using the arithmetic function of the CPU 110.

  The next step S31 is a step in which the process branches depending on the failure rate of biometric authentication calculated in step S30. If the failure rate of biometric authentication calculated in step S30 exceeds the request level information 103, the process proceeds to step S33. If the failure rate of biometric authentication calculated in step S30 does not exceed the required level information 103, the process proceeds to step S32.

  In step S32, information regarding the failure rate of biometric authentication included in the response APDU is set to “00h” (h means a hexadecimal number), and the process proceeds to step S34. In this step, the information regarding the failure rate may be set to “Null (no data)”.

  In step S33, for example, a number up to three decimal places of the failure rate is set as information on the failure rate of biometric authentication included in the response APDU, and the process proceeds to step S34.

  In step S34, the process branches depending on the success or failure of biometric authentication in step S12 of FIG. 4. If the biometric authentication command 100 is successful in step S12, the process proceeds to step S35, and biometric authentication is performed in step S12. If the command 100 fails, the process proceeds to step S36.

  In step S35, information indicating success or failure of the biometric authentication command 100 included in the response APDU is set to information indicating success (for example, 9000h in the ISO 7816 standard), and the procedure ends.

  In step S36, information indicating success or failure of the biometrics authentication command 100 included in the response APDU is set to information indicating failure (for example, 6983h in the ISO 7816 standard), and the procedure ends.

In the step S30, if the CPU110 is unable calculating floating point, the request level information 103 and the allowable value of the number of failed user authentication, beyond the authentication capability information 10 2 failure count request level information 103 counted from In this case, the present invention can be implemented by including, in the response APDU, information obtained by encoding the number of failures and the number of times the history is stored (here, “32”) by BER-TLV.

  The terminal device 2 calculates the failure rate from the response APDU received from the IC card 1 by including in the response APDU the information obtained by encoding the number of failures and the number of times the history is stored in the BER-TLV, and the terminal device 2 Can execute processing that will be required in the future.

The perspective view of an IC card. The hardware structure figure of the IC chip mounted in an IC card. The software block diagram of an IC card. The flowchart which showed a series of operation | movement of the biometrics authentication command. The flowchart which showed the detailed procedure of the operation | movement which updates authentication performance information. The figure explaining the authentication performance information at the time of update. The flowchart which showed the procedure which produces | generates response APDU.

Explanation of symbols

1 IC card 11 IC chip 110 CPU, 111 ROM, 112 RAM, 113 EEPROM
100 Biometric Authentication Command 101 Biometric Information 102 Authentication Performance Information 103 Request Level Information 2 Terminal Device

Claims (6)

An IC card program mounted on an IC card used in combination with a terminal device for authenticating the user using user biometric information,
The IC card stores user biometric information, authentication performance information in which a history of success or failure of user authentication using the biometric information is described, and a request level for the authentication performance information ,
The IC card program is
(A): receiving a command from the terminal device and using the biometrics information to perform processing related to the user authentication;
(B): the step (a) updating the authentication performance information to reflect the authentication result of the user;
(C): When the authentication failure rate or failure count calculated from the success / failure history stored in the authentication performance information updated in step (b) exceeds the request level, the failure rate or failure count And generating a response to be transmitted to the terminal device,
An IC card program including a procedure to be executed in order. The IC card program according to claim 1, wherein the authentication performance information stored in the IC card is information in which a history of success or failure of authenticating the user using the biometric information is described, Step (b) is a step of erasing the oldest success / failure history included in the authentication performance information and storing the authentication result of the user in step (a) in the authentication performance information as the latest success / failure history. IC card program characterized by the above.   An IC characterized by storing biometric information of a user who uses the IC card and authentication performance information of authentication using the biometric information, and mounting the IC card program according to claim 1 or 2. card. 4. The IC card according to claim 3, wherein the IC card stores a request level for the authentication performance information, and the IC card program according to claim 1 or 2 is mounted. A terminal device that authenticates the user using the biometric information of the user, the biometric information of the user, authentication performance information in which a history of success or failure of user authentication using the biometric information is described, and the authentication performance information A system having an IC card on which an IC card program is mounted,
The IC card program is
(A): receiving a command from the terminal device and using the biometrics information to perform processing related to the user authentication;
(B): the step (a) updating the authentication performance information to reflect the authentication result of the user;
(C): When the authentication failure rate or failure count calculated from the success / failure history stored in the authentication performance information updated in step (b) exceeds the request level, the failure rate or failure count And generating a response to be transmitted to the terminal device,
Including steps to be performed in order,
The terminal device receives a response including the failure rate or the number of failures from the IC card, and displays a message prompting an update process of biometric information stored in the IC card. system. 6. The authentication system according to claim 5, wherein the authentication performance information stored in the IC card is information describing a history of success or failure of authenticating the user using the biometric information, (B) is a step of deleting the oldest success / failure history included in the authentication performance information and storing the authentication result of the user in step (a) in the authentication performance information as the latest success / failure history. An authentication system characterized by

Images