KR20070042898A - Computer readable recording medium and automatic cash transaction system containing biometric authentication method, biometric control program - Google Patents

Abstract

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication system in an IC card, wherein a biometric authentication method receives preprocessing data obtained from biometric information from a portable electronic device, transmits the preprocessing data to a biometric authentication mechanism, and acquires the biometric authentication mechanism. Received from the bioauthentication mechanism unit to receive authentication data created by combining the generated biometric information and the preprocessing data, and transmits the received authentication data to the portable electronic device, and the registration data previously stored in the portable electronic device; A technique is provided to operate to combine authentication data within the portable electronic device.

Description

Computer-readable recording medium and automatic cash transaction system containing biometric control method, biometric control program {BIOMETRICS CONTROL METHOD, A COMPUTER READABLE MEDIUM HAVING STORED THEREON BIOMETRICS CONTROL PROGRAM}

1 is an example of a schematic diagram of a biometric information registration processing system.

2 is an example of a block diagram of a biometric information registration processing system.

3 is an explanatory diagram of a biometric information registration process.

4 is an example of a flowchart of biometric information registration processing.

5 is an example of a schematic diagram of a biometric authentication processing system.

6 is an example of a block diagram of a biometric authentication processing system.

7 is an example of configuration diagram of authentication control software.

8 is an explanatory diagram of a biometric authentication process.

9 is an example of a flowchart of a transaction including biometric authentication processing using an IC card authentication method.

10 is an example of a flowchart of authentication transaction initiation processing.

11 is an example of a flowchart of biometric authentication processing.

12 is an example of a flowchart of the authentication transaction termination process.

The present invention relates to a biometric authentication system used in ATMs and the like.

Conventionally, the following biometric authentication systems have been performed by ATMs or the like.

Patent document 1 (Japanese Patent Laid-Open No. 2000-215294) describes a biometric identification embedded IC card and its identity authentication method. This technology uses a smart card to authenticate the user by embedding the biometric identification information into the IC card and processing the biometric information and the biometric information unique to the user in the biometric identification processing unit in the IC card for authentication. will be.

Patent document 2 (Japanese Patent Laid-Open No. 2005-115800) describes a personal authentication method using biometric information. This technique divides the biometric information obtained from the user, stores one on the electronic card and the other on the database, obtains biometric information from the electronic card user at the time of authentication, and reads the other biometric information from the electronic card. After that, if the other biometric information related to this biometric information exists in the database or not, the biometric information is combined and compared with the biometric information of the electronic card user, which is obtained first, and the authentication is performed. .

Patent document 3 (Japanese Patent Laid-Open No. 10-312459) describes a personal authentication method using a portable electronic device and biometric information. This technique stores registration data (characteristic amount of biometric information) in a portable electronic device such as an IC card in advance, and combines registration data and characteristic data (characteristic amount of biometric information) obtained at the time of authentication in the IC card. It is to perform authentication.

In Patent Literature 1, biometric authentication is performed in an IC card that stores biometric information. However, since biometric information is stored in the IC card as it is, biometric information may leak due to theft or loss of the IC card.

In Patent Literature 2, biometric information is divided (stored) into two of an electronic card and a database, and the two are combined at the time of authentication, but there is a necessity to thoroughly manage and store data of many users in the database. .

In Patent Document 3, the biometric feature is extracted from the biometric information and is biometrically authenticated using a combination of biometric feature and registration data newly acquired at the time of authentication in the IC card stored as registration data. ) And the data processing device (IC card terminal), there is a possibility that the biometric feature, which is personal information, is leaked during this transmission process.

An object of the present invention is to realize a high concealment of biometric information in a biometric authentication system and method using an IC card.

In order to solve the above problems, an IC card authentication method is implemented in which a biometric authentication process is performed by an authentication program in a portable electronic device (IC card). The biometric authentication control method of the present invention receives preprocessing data obtained from biometric information from a portable electronic device, transmits the preprocessing data to a biometric authentication mechanism, and combines the biometric information obtained by the biometric authentication mechanism with the preprocessing data. Receive the authentication data to be created from the biometric authentication mechanism unit, and transmit the received authentication data to the portable electronic device, and combine registration data previously stored in the portable electronic device with the authentication data in the portable electronic device. It works.

The present invention can provide a highly secure biometric authentication method by employing authentication control software to indicate data transfer and authentication processing instructions to an IC card and an authentication device. In addition, the authentication control application constituting the authentication control software and the authentication control middleware are created by making it possible to cope with a plurality of different authentication methods, so that a plurality of authentications are provided when the terminal is equipped with a plurality of biometric authentication devices. Corresponding control of various devices is possible.

EMBODIMENT OF THE INVENTION Hereinafter, one Embodiment using this invention is described.

Example 1

In the present embodiment, the biometric information registration processing and the financial information for registering the biometric information (for example, finger vein) of the portable electronic device owned by the user, in particular, the IC card user, between the operator (window manager) and the user at a branch of a financial institution. Installed in institutions, convenience stores, etc., mainly divided into two types: automatic cash transaction system that automatically trades transactions for cash, and biometric authentication process that authenticates users' biometric information using ATM (ATM). do. 1-4, the biometric information registration process will be described. FIG. 1-4 illustrate the biometric authentication process.

First, the outline | summary of the registration process and authentication process of biometric information is demonstrated easily.

In the biometric information registration process, the feature amount is extracted from the finger vein of the user and generated as preprocessing data, and at the same time, the registration data is also generated and registered with the IC card. The window terminal used in the process of this process is connected to a biometric information registration device with an IC card device, and the biometric information (preprocessing data, registration data) for registration is encrypted so that the IC can be accessed from the biometric information registration device without passing through the window terminal. Direct transfer and writing to the card is performed.

On the other hand, in the biometric authentication process, the processing is performed based on the characteristic amount from the finger vein of the user, the preprocessing data registered with the IC card, and the registration data based on the unique authentication and combination technology. In this process, authentication data is generated from biometric information newly acquired by a biometric authentication mechanism connected to the ATM and preprocessed data read from the IC card, transferred to the IC card, and authenticated in the IC card. Is carried out.

In the description of the present invention, the biometric information registration process uses a branch office system and the authentication process uses an ATM. However, the authentication process may also be performed in the ATM system or in the ATM system. However, it is preferable to perform the registration processing of the biometric information in the branch office system in which the operator is present, even in ensuring that the user is the person. Although the IC card is an example of a medium for registering biometric information, the present invention may be used as a portable electronic medium (portable electronic device) such as a mobile phone or an RFID (Radio-Frequency-Identification) tag. An IC card having an IC chip mounted on the most prevalent cash card is preferable, and changes in the system can be suppressed.

1 is a schematic diagram extracting a biometric information registration processing system relating to the registration of biometric information among branch office systems used by an operator in a branch of a financial institution. This biometric information registration system connects and comprises the biometric information registration device 101 including the biometric information reading device 102 and the registration terminal device 104 that controls the biometric information registration device 101. In this system, an operator (window manager) of a financial institution operates the terminal device 104 for registration to register the user's biometric information on the IC card 105. Specifically, the operation unit 107 is selected from various menus displayed by the person in charge at the counter and displayed on the display unit 106 to enable various transactions in a financial institution other than registration of biometric information.

The person in charge of the window inserts the IC card 105 into the IC card device 103, which is one component of the biometric information registration device 101, so that the IC card 105 can be written therein. On the other hand, the user places it in the biometric information reading apparatus 102 along the shape which shows the user's own finger. The bioinformation reading device 102 penetrates the finger placed near the infrared ray by operation of the person in charge of the window, photographs the vein pattern of the finger by the camera, and obtains the image. The biometric feature amount is extracted from this image, and the processing described later is added to the extracted biometric feature amount, and the IC card device 103 executes recording and writing processing on the IC card 105. In addition, the bio-characteristic quantity is data which can identify an individual obtained from the vein data (vein pattern) of a finger.

The IC card device 103 has a function of writing information on the IC card 105 as described above, and also has a function of reading information stored in the IC card 105. That is, although it has a read or write function, it demonstrates in the example which writes biometric information in the IC card 105 below.

2 is a block diagram showing the configuration of one embodiment of the biometric information registration processing system described with reference to FIG.

The biometric information registration device 101 includes a CPU 201 for controlling the entire biometric information registration device 101, a main memory 202 for storing various kinds of information, a biometric information reading device 102 for reading biometric information, and an IC card. An IC card device 103 for writing biometric information into the 105 and a communication unit 215 for connecting with the registration terminal device 104 are provided.

The main memory unit 202 can be divided into a ROM 203 for storing various programs and a RAM 204 for storing mainly data and rewriting the stored data. Here, the main memory unit (also referred to as a storage unit, 202) by the ROM 203 and the RAM 204 will be described. However, a hard disk and various semiconductor memories may be used. The ROM 203 includes a registration processing program 205 for registration processing of biometric information, a registration data creation program 206 for creating registration data for use in authentication, and biometric information for controlling the biometric information reading device 102. A read device control program 207, an IC card device control program 208 for writing information on the IC card 105, and a communication control program 209 for controlling the communication unit 215 are provided.

The biometric information reading device 102 acquires a biometric image (arrhythmic pattern), and whether or not a finger is placed in the image acquisition region of the image sensor (image acquisition unit 210) and the image sensor 210 constituted by a CCD camera or the like. It is provided with the presence detection LED (211) for detecting the presence of a living body, and the illumination LED (bio irradiation part, 212) for biological acquisition which irradiates near-infrared rays with respect to a finger at the time of acquisition of a living body image (a finger vein pattern). The IC card apparatus 103 includes an IC card writing unit 213 for writing information into the IC card 105 and a contact terminal 214 for connecting with the IC card 105.

The IC card 105 includes a CPU 221 for controlling the entire IC card 105, a storage unit 222 for storing data related to biometric information, programs related to financial transactions, and the like, and a biometric information registration device 101. And a contact terminal 223 for connecting with each other. In addition, the IC card device 103 and the IC card 105 can be constituted not only by the contact type by the contact terminal but also by the non-contact type.

The registration terminal device 104 includes a CPU 231 for controlling the entire registration terminal device 104, a main memory part 232 for storing data or programs, a display part for displaying an operation guide, and the like for a CRT or a liquid crystal display. And a communication unit 235 connected to the biometric information registration device 101 and the biometric registration terminal device 104. . In addition to the biometric information registration device control program 233 for controlling the biometric information registration device 101, the main memory 232 stores various financial transaction programs traded at the window.

3, the creation process of the registration data registered in the IC card 105 by the biometric information registration process will be described. However, the description of the algorithm and the like in the production process is omitted for security reasons, i.e., preventing forgery due to information leakage. The same applies to the authentication processing of the biometric information.

First, based on the biometric image (arrhythmic pattern) obtained by the image sensor 210, a biometric feature amount representing the feature is extracted using a certain algorithm (step 301). From this biometric feature, a certain algorithm is also used to create preprocessing data. In addition, registration data are created by combining the biometric feature and the preprocessing data (step 302).

Here, the preprocessing data can be interpreted as an encryption key used to create registration data. In addition, the registration data is data which cannot be created directly from the biological feature amounts as can be clearly seen from the above and the drawings. In addition, although the preprocessing data and the registration data are data created from a biometric feature amount that clearly shows the user's own characteristics, an algorithm by irreversible conversion processing is used in this preparation process. Therefore, it is not possible to create the biometric feature amount or the preprocessing data from the registration data as the creation process by the inverse transformation, and create the biometric feature amount from the two data of the preprocessing data and the registration data. It is preferable that the preprocessing data is information created by extracting a portion that cannot identify a user individual, and the registration data is information created by extracting a portion that can identify an individual. In addition, both preprocessing data and registration data are unique information that can be obtained only by the card holder.

Finally, the preprocessed data and registration data created are stored in the IC card 105 (step 303). These data stored in the IC card 105 are stored in an encrypted state and, as described above, are stored in a state in which creation processing by inverse conversion is impossible. Therefore, even if the preprocessing data and registration data are read by the malicious person and both data are decoded, it is impossible to generate the biometric characteristic amount. Thus, one of the features is that the data in the IC card can be protected by the double security, such as data generation, which cannot encrypt or reverse data.

The above data creation algorithm is shown in the following formula.

If the biometric feature amount is x, the preprocessing data (y) can be represented as "y = (f, x)" using any function (f, equivalent to an algorithm).

Since the registration data (z) is created by the combination of the biometric feature (x) and the preprocessing data (y), it can be expressed as "x + y + z = g (x, y)" using any function (g). .

In addition, this preparation process is irreversible, and biometric features are derived from registration data such as z = g (x, y) + x, z = g (x, y) + y, z = g (x, y) + x + y. Quantity or preprocessing data cannot be restored.

4 is an example of a flowchart of registration processing of biometric information executed by the CPU 201 of the biometric information registration device 101 or by each mechanism or each part (including a program) based on an instruction from the CPU 201.

The IC card 105 is inserted into the IC card device 103, and the IC card connection state (the data can be written into the IC card 105) is enabled. In order to establish the IC card connection, the IC card 105 is established. It is necessary to bring the contact terminal 214 of the IC card device 103 into contact with the contact terminal 223 of the IC card device 103. In the following, the person in charge of the window operates the terminal device 104 for registration to display the biometric information of the user. A description will be given of the process of registration in 105, and a description will be given of the processing and control performed by each mechanism based on the operation, etc. The communication control program 209 described in Fig. 2 is particularly a biometric information registration device 101. ), But the transmission and reception of data between the biometric terminal device 104 is omitted.

The registration terminal device 104 displays a menu screen (a screen for guiding the selection of processing such as registration, authentication, change, termination, etc.) on the display unit 106, and the operation unit 107 receives the input operation of the counter staff. If the registration process is selected by the operation unit 107 among the displayed transaction items, the CPU 231 of the registration terminal device 104 executes the registration processing program 205 and the biometric information registration device control program 233 to register the biometric information. The registration processing start instructs the device 101.

The CPU 201 of the biometric information registration device 101 which has been instructed to start registration processing executes the registration processing program 205 and performs registration processing as a whole of the system.

A guide is displayed on the display unit 106 of the registration terminal device 104 so as to insert the IC card 105 into the biometric information registration device 101. When the IC card 105 is inserted into the IC card apparatus 103 (step 401), the contact terminal 223 of the IC card 105 and the contact terminal 214 of the IC card apparatus 103 are brought into contact with each other to register biometric information. The device 101 and the IC card 105 are connected (step 402). At this time, it is determined whether there is a program related to the biometric information in the storage unit 222 of the inserted IC card 105 (step 403), and if there is no program (in the case of a card for which data cannot be registered) The IC card 105 is returned (step 411). On the other hand, when there is a program related to the biometric information in the storage unit 222 of the inserted IC card 105 (in the case of a card capable of registering data), the finger that registers the finger on the display unit 106 is read out. Instructions are displayed for placement on the device 102. As a result, the user places a finger to register on the biometric information reading device 102. The CPU 201 of the biometric information registration device 101 executes the biometric information reading device control program 207 and instructs the biometric information reading device 102 to start biometric information reading. When the object (finger) is placed in the image acquisition area of the image sensor 210, the biometric information reading device 102 detects the entry of the object (finger) by the presence or absence detection illumination LED 211 (step 404). It is checked whether or not the object (finger) is a living body (step 405). If the inserted object (finger) is not a living body, the IC card 105 is returned without writing any information into the IC card 105 (step 411). When the inserted object (finger) is a living body, the near-infrared ray is irradiated to the object (finger) by the biometric illumination LED 212 to acquire a biometric image (a finger vein pattern) with the image sensor 210, and the RAM 204 (Step 406). Next, the biological feature amount is extracted from the biological image (final vein pattern) (step 407). Then, by executing the registration data creation program 206, preprocessing data is created from the biometric characteristic amount as shown in FIG. 3 (step 408), and then registration data is created from the biometric characteristic amount and the preprocessing data (step 409). Subsequently, the IC card 105 is stored by the IC card writing unit 213 and the CPU 221 in the IC card 105 by using the IC card writing unit 213 and the IC card 105 to preprocess data and authentication data in the RAM 204 created by executing the IC card device control program 208. Is stored in the storage unit 222, and biometric information registration is completed (step 410), and the IC card 105 is returned (step 411).

In the above, the registration processing and control of the biometric information have been described based on the processing and control of each program stored in each of the CPUs 201, 221, 231 and the storage unit, but each program has already been started in the initial stage of transition to the registration processing. Needless to say, these hard and soft configurations can be grasped as the control unit, and it is needless to say that the various controls and processes described above are functions and means of the control unit. The same applies to the authentication processing for biometric information described below.

In performing the authentication processing of the biometric information, on the premise that the authentication processing is performed using the information registered by the above-described registration processing, that is, preprocessing data and registration data stored, registered, and written in the IC card 105. Explain.

5 is a schematic diagram of a biometric authentication processing system. The biometric authentication system is required for a transaction related to a cash automatic transaction or a deposit payment device (ATM) 501 having a function of reading biometric information and a reading (or writing) of the information of the IC card 105 and a financial product. A server 502 that stores information is connected and configured. The ATM 501 is a device that automatically executes various transactions desired by the user, such as deposit, payment, and deposit, and the user inserts the IC card 105 into the card / specification tag mechanism 504 and the desired transaction by the operation unit 503. The amount of money or the like is inputted, and the biometric authentication mechanism 508 enables the transaction to be successful. In particular, in the cash transaction, the deposit or withdrawal of the bill by the banknote deposit and withdrawal mechanism part 506, the deposit or withdrawal of the coin by the coin withdrawal mechanism 507 is performed, and the ATM 501 exchanges cash desired by the user. In addition, when a user wants to fill out a bankbook, the account book mechanism unit 505 can fill in and print the transaction contents in the bankbook.

6 is a block diagram showing the configuration of one embodiment of a biometric authentication processing system. The ATM 501 is an operation unit 503 composed of a CPU 601 for controlling the entire ATM, a screen display of a transaction item or a key input detection, specifically a touch panel for accepting a user's operation or a key pressed by a finger, and the like. Cards having a function of inserting and ejecting a card, magnetic stripe of the card or read / write operation to the IC card 105, reading or trading the image of the card embossed portion in the specification table and ejecting from the device. The specification table mechanism part 504, the bankbook mechanism part 505 which has the user's insertion / ejection operation | movement of a bankbook, the read / write operation of a magnetic stripe, the printing function by the printing part to a bankbook, etc. are provided.

In addition, a bill having a differentiation, conveyance, and storing function of bills, a bill acceptor withdrawal mechanism unit 506 for depositing or withdrawing bills, and a coin for depositing or withdrawing coins with discrimination, conveyance, and storing functions of coins. Deposit and withdrawal mechanism unit 507, biometric authentication mechanism unit 508 for acquiring biometric information and supporting its authentication, a main memory unit (also referred to as a storage unit 602) for storing data and programs, and a communication unit connected to server 502 ( 610.

In addition, the operation unit 107 of the terminal device 104 for registration described in Figs. 1 and 2 is configured to perform an input operation when a window manager registers a user's biometric information on the IC card 105, and is composed of a keyboard or a mouse. In addition, the operation part 503 of the ATM 501 of FIG. 5, 6 is for input operation when a user makes a transaction with the ATM 501, and is comprised from a touch panel etc., and these two are the same operation part The configuration and use are different.

The card / specification tag mechanism 504 is a contact for connecting with the IC card reader 603 for reading the information of the IC card 105, the specification card printing portion 604 for printing the transaction contents in the specification table, and the IC card 105. The terminal 605 is provided.

The biometric authentication mechanism unit 508 acquires a memory unit 606 for storing various data and the like, and a biometric image (final vein pattern) of the user, and an image sensor (image acquisition unit 607) and an image composed of a CCD camera or the like. Illumination LED 608 for detecting the presence or absence of a finger placed in the image captureable area of the sensor 607 and illumination LED for irradiating near-infrared light on the finger at the time of acquisition of the biometric image (a finger vein pattern) (bioirradiation unit) 609 is provided. In other words, the biometric authentication mechanism unit 508 has a function of acquiring biometric information which is almost the same as the biometric information reading device 102 shown in FIGS.

The main memory unit (also referred to simply as a storage unit) 602 is hardly constituted by a ROM 620 for storing various programs and a RAM 621 capable of rewriting data stored mainly in data. As described in the above-described registration processing, the configuration may be made of a hard disk or various semiconductor memories, respectively, and is also referred to as first and second storage units. In addition, the ROM 620 is provided with authentication control software 622 for performing the processing of acquiring, authenticating, and the like described below according to the CPU 601 equivalent instruction, and controlling the biometric authentication mechanism unit 508. have. In addition, although not shown, screen data to the operation unit 503 of the ATM 501, programs and software necessary for cash transactions and deposit transactions in the ATM 501 are also stored. The server 502 connected via the communication network with the ATM 501 is constituted by a CPU 611 that controls the entire server 502, a storage unit 612, and a communication unit 613 that connects with the ATM 501. .

Fig. 7 shows a main memory unit 602 and a biometric authentication mechanism centering on the authentication control software 622 for controlling the control of the biometric information in the ATM 501, in particular, the biometric authentication mechanism unit 508. 508, a control block (software configuration) associated with the IC card 105 in the card / specification table mechanism section 504 is shown.

The authentication control software 622 is large and can be divided into an authentication control application 701 and an authentication control middleware 702, and software can be referred to as software, application to middle, and application to middleware, respectively. The authentication control application 701 is a program having individual functions, such as a financial institution incorporating an ATM 501 having the biometric authentication mechanism unit 508, and the screen in the authentication procedure, method, and authentication. The specifications are prepared and changed individually by financial institutions such as indicators. In particular, the authentication control application 701 implements the authentication process start indicator light for the authentication middle 702.

The authentication control middle 702 is a program having a common function necessary for authentication processing even if the financial institutions are different and the biometric information is different, and the biometric authentication mechanism control unit 703 that controls the biometric authentication mechanism unit 508, the IC card ( 105 is a program that controls and processes various programs related to authentication of biometric information called an IC card control program 704 that controls the exchange of data with a card and execution of a program in the IC card 105.

The data executed by the authentication control middle 702 and obtained are temporarily stored in the RAM 621. The RAM 621 includes an authentication result data buffer 705, an authentication data buffer 706, and a preprocessing data buffer 707 which are buffer areas for exchanging data between the biometric authentication mechanism unit 508 and the IC card 105. It has each data buffer called. These data may be hardly stored in the RAM 621, but softly stored in the authentication control soap, in particular, the authentication control middle 702.

The authentication control middle 702 operates the card / specification tag mechanism 504 or the biometric authentication mechanism 508 via a driver (not shown) by an instruction from the authentication control application 701. As described above, the processing of these parts is controlled by the CPU 601 of the ATM 501. As a driver, there is control software for using a computer peripheral device (device).

The storage unit 606 of the biometric authentication mechanism unit 508 controlled by the authentication control software 622 includes an authentication data creation program 709 for creating authentication data and an authentication result for determining whether the authentication succeeds from the authentication result data. Has a decision program 710. The card / specification tag mechanism 504 also has an authentication program 711 for performing authentication processing.

8, the structure of authentication and data exchange in a biometric authentication process are demonstrated. It is also used as a supplement to the description of the biometric authentication flow of FIG. 11 described later. The subject of the following operation is the authentication control middle 702 which has received an execution command from the authentication control application 701, but the authentication control software 622 from the joint control performed by the authentication control application 701 and the authentication control middle 702. It can also be said to work by). In addition, reception and transmission can also be called input and output, respectively.

When authentication of the biometric information is executed in the transaction of the ATM 501, the preprocessing data among the preprocessing data and registration data previously stored in the IC card 105 is transmitted to the authentication control middle 702. The authentication control middle 702 receives the preprocessing data from the IC card 105 and temporarily stores it in the preprocessing data buffer 707 of the RAM 621 (including the authentication control software 622 and the authentication control middle 702). Then, it transmits to the biometric authentication mechanism part 508 (step 801). On the other hand, the biometric authentication mechanism unit 508 receives the preprocessing data from the authentication control software 622, and subsequently or in parallel, acquires the user's biometric information and extracts the biometric feature amount from the biometric information. Then, authentication data is created by combining the biometric feature values acquired and extracted from the received preprocessed data (step 802).

In this way, in the authentication processing of the biometric information, the preprocessed data also has a function as an encryption key for creating authentication data. Moreover, even if this authentication data can be acquired, a biometric characteristic amount cannot be created directly from this data. The authentication data is data created from the biometric characteristic amount, but in this preparation process, the biometric characteristic amount cannot be created from the authentication data on the contrary to using the algorithm by the irreversible conversion process, and from the two data of the preprocessing data and the authentication data, Biometric features cannot be created.

The preprocessing data is information created by retrieving a portion that cannot specify an individual, and the authentication data is information created by retrieving a portion that can specify an individual.

Here, the data creation algorithm described above is expressed by a mathematical formula as in the case of biometric information registration.

The information obtained at the time of authentication by the biometric authentication mechanism unit 508, that is, the newly obtained biometric feature amount is assumed to be x '. And since the preprocessing data (y) is not different from the time of registration, it is "y = (f, x)".

Since the authentication data (z ') is created by the combination of the biometric feature (x') and the preprocessing data (y), using either function (g), "x '+ y + z' = g (x ', y) ”. And since this preparation process is an irreversible process, it is not possible to restore the biofeature amount or preprocessing data from the registration data such as / + x ', z' + y, z '+ x' + y.

After creation of the authentication data in S802, the authentication data generated by the biometric authentication mechanism unit 508 is temporarily stored in the authentication data buffer 706 by the instruction and control, and then transmitted to the IC card 105 ( Step 803). The IC card 105 receives the authentication data and combines the registration data and the authentication data stored in the IC card 105 by some algorithm (also referred to as biometric authentication processing) to create authentication result data (step 804). Furthermore, the created authentication result data is transmitted to the authentication control middle 702. The authentication control middle 702 receives the authentication result data from the IC card 105, temporarily stores it in the authentication result data buffer 705 of the authentication control software 622, and transmits it to the biometric authentication mechanism unit 508. Then, the biometric authentication mechanism unit 508 performs determination (analysis) of the authentication result data in the biometric authentication mechanism unit 508 (step 805), and the authentication control middle 702 determines the authentication result data and the authentication success site and the cause of the authentication failure. (Step 806), the biometric authentication process ends.

In this way, in the biometric authentication process, the biometric feature amount closest to the user's biometric information is not stored in the IC card 105, and the biometric feature amount is obtained and extracted by the biometric authentication mechanism unit 508. It has a feature that does not come out.

Incidentally, the data exchanged between the IC card 105 and the biometric authentication mechanism unit 508 via the authentication control software 622 as the basis of the control is three pieces of preprocessing data, authentication data, and authentication result data. As described above, even if these data are combined in any way, there is a feature that a biometric feature cannot be created.

In addition, in the biometric authentication process such as the preparation of each data related to the biometric information, the IC card 105 and the biometric authentication mechanism unit 508 each share a feature of obtaining an authentication result. Therefore, even if the IC card or the biometric authentication mechanism is lost and the inside thereof is decrypted, the biometric authentication cannot be executed. That is, it is also theoretically possible to create new preprocessing data from the biometric feature amount acquired by the biometric authentication mechanism unit 508 at the time of authentication, and to create authentication data from the processed data and biometric feature amounts earlier, but in the present embodiment, it is not so. Instead, authentication data is generated from the preprocessing data and biometric features stored in the IC card 105, so that the security is kept high.

In addition, the authentication control middle 702 stores the preprocessed data in the biometric authentication mechanism unit 508 and deletes it after the authentication data has been created. When authentication is necessary, the biometric authentication mechanism unit 508 is frequently used from the preprocessing data buffer 707. It is preferable to transmit to That is, the preprocessing data is stored in the preprocessing data buffer 707 in the authentication control software 622 until the transaction by the ATM 501 is completed. By doing this, there is an effect that the faster processing is possible from the preprocessing data buffer 707 in the authentication control software 622 than the preprocessing data is transmitted from the IC card 105.

 Using 9 to 12, we will explain the processing when performing a payment transaction including a biometric authentication process using the IC card 105 using an IC card 105 with an ATM or a cash advance payment device (ATM, 501). do.

Fig. 9 is an example of a flowchart showing a transaction on an ATM executed by a CPU 601, an authentication control software 622, and the like (control unit) of an ATM 501, and particularly by a biometric authentication process using an IC card authentication method.

Before performing the biometric authentication processing, processing necessary for executing a transaction in the ATM 501, such as transaction selection, input of a cryptographic authentication number, and insertion of a card, is performed. The transaction selection guide, such as deposit, payment, balance inquiry, and deposit, is read and displayed on the operation unit 503 at the ROM 620 to accept the transaction selection from the user (step 901). When a transaction requiring biometric authentication, for example, a payment transaction, is selected, a guide for inserting the IC card is displayed on the operation unit 503 to prompt the insertion of the IC card 105. When the IC card 105 is inserted into the card / specification tag mechanism 504 by the user, it is detected (step 902) and the account is entered from the IC card 105 in the IC card reading portion 603 of the card / specification tag mechanism 504. Read the number. In addition, the IC card 105 may be provided with a magnetic stripe, and data such as an account number other than the biometric information may be read from the magnetic stripe of the IC card 105 at that time.

Next, a guide for inputting a password authentication number is displayed on the operation unit 503. If a password authentication number is input to the operation unit 503 by the user, it is detected (step 903), and the read account number and the input password authentication number are transmitted to the server 502 via the communication units 610 and 613. On the other hand, the CPU 611 of the server 502 receives the input password via the communication units 610 and 613, and the password corresponding to the input password authentication number and the account number previously registered in the storage unit 612. Are combined and the combined result is transmitted to the ATM 501 via the communication units 610 and 613. The ATM 501 receives the combination result via the communication units 610 and 613, checks whether the password authentication number is correct (step 904), and if the input password authentication number is not correct, the number of times of inputting the password authentication number is determined. It counts (step 905). If the number of times the password is input at this time is within the prescribed number, the user is urged to re-enter the password authentication number. If the number of times the password is input exceeds the prescribed number of times, the transaction is stopped (step 906).

In S904, when the inputted password authentication number is correct, it is determined whether the inserted IC card 105 is a biometric authentication target card (step 907). The biometric authentication target card at this time is a card having information or a program necessary for performing biometric authentication.

When the inserted IC card 105 is not the biometric authentication target card, the biometric authentication process is not performed and the transaction such as payment is subsequently executed (step 915). When the inserted IC card 105 is a biometric authentication target card, an authentication transaction start process is performed as a preliminary preparation of the biometric authentication process (step 908). The authentication transaction start processing will be described in detail with reference to FIG. 10 described later.

When the authentication transaction start processing ends, the CPU 601 of the ATM 501 configures the authentication control software 622 into the RAM 621 and expands. Next, the CPU 601 of the ATM 501 executes the authentication control application 701. Upon receiving it, the authentication control application 701 issues a registration information acquisition instruction to the authentication control middle 702. The authentication control middle 702 having received the registration information acquisition instruction executes the IC card control program 704 and acquires information (registrant information) necessary for the processing instructed from the authentication control application 701 from the IC card 105 ( Step 909). Information necessary for processing includes transaction information such as account number, branch number, subject, and user information such as user name, presence or absence of a certificate capable of verifying identity such as driver's license or insurance card. At this time, the authentication control middle 702 acquires the preprocessing data previously registered in the IC card 105 of the information instructed to be acquired by the authentication control application 701 and stores it in the preprocessing data buffer 707. do. This is to obtain the preprocessing data together with the information specified by the authentication control application 701, thereby reducing the number of times of access to the IC card 105 and improving the processing time. This data is transmitted to the authentication control middle 702 and stored in the preprocessing data buffer 707. In this way, the CPU 501 of the ATM 501 is mainly a subject, and executes various programs in the authentication control software 622 to perform respective processes. However, in order to simplify the description, the following steps are omitted to simplify the explanation. 702) will be described as the subject. Moreover, as mentioned above, these are also called control and a process by a control part (means).

After obtaining the registration information from the IC card 105, the authentication control middle 702 executes the biometric authentication mechanism unit control program 703 to perform the biometric authentication process (step 910). That is, the preprocessing data stored in the preprocessing data buffer 707 is transmitted to the biometric authentication mechanism unit 508, and the biometric authentication mechanism unit 508 is instructed to acquire the biometric information. Although this biometric authentication process was demonstrated using FIG. 8, it demonstrates in detail also in FIG. 11 mentioned later.

Next, it is checked whether or not the biometric authentication succeeds (step 911). If the biometric authentication fails here, the number of times of biometric authentication is performed is counted (step 912). If the number of times of biometric authentication at this time is within the specified number of times, preprocessing data stored and stored in the RAM 621 or the program is resent to the biometric authentication mechanism unit 508 to prompt the user to perform biometric authentication again. If the number of times of biometric authentication exceeds the prescribed number of times, the transaction is aborted (step 913). At this time, the preprocessed data and the like stored in the RAM 621 are deleted to increase security. In S911, when the biometric authentication succeeds, the authentication transaction end process is performed as a post-process of the biometric authentication process (step 914). This authentication transaction termination process will be described in detail with reference to FIG. 12 described later.

When the authentication transaction end processing ends, the user desires a transaction, that is, a transaction selected by S901 (step 915). Specifically, if the transaction desired by the user is a payment transaction, the operation unit 503 receives the input of the payment amount. When the user inputs the payment amount, a message is displayed on the operation unit 503 to prompt the user to press the confirmation key to confirm whether the input amount and the amount are correct. When the confirmation key of the operation unit 503 is pressed, the server 502 communicates with the transaction data. After the communication, the CPU 601 of the ATM 501 discharges the bills and coins for the required amount of money from the banknote deposit and withdrawal mechanism 506 and the coin withdrawal mechanism 507 respectively, and the specification sheet printing portion of the card / specification tag mechanism 504 604 is made to print transaction data. Then, the IC card 105 is returned from the card / specification tag mechanism 504, the transaction data is printed and sent to the specification table, and the transaction ends (step 916).

If the transaction desired by the user is the balance inquiry, the server 502 communicates with the transaction data, and after communication, the deposit or borrowing balance is displayed on the operation unit 503. After indication We guide whether we want to end transaction or continue other transactions for user. When the transaction is to be terminated, the IC card 105 is returned from the card / description table mechanism unit 504, and the transaction data is printed and sent to the specification table according to the user's request, and the transaction ends (step 916). If the user wants to conduct another transaction, the following processing is performed.

If a transaction requiring biometric authentication such as the payment transaction described above is desired after the balance inquiry, the biometric authentication is performed again, and the transaction is executed only when the biometric authentication is successful. By performing biometric authentication for each transaction, if the user confirms the deposit and borrowing balance in the balance inquiry but exits the ATM without receiving the IC card 105, it is conceivable that the transaction may be performed by a third party. It is possible to realize a high security ATM system without the need for this.

In this flow, the biometric authentication is performed after the password input. However, the order may be reversed and the password may be input after the biometric authentication. When the password authentication number is entered first, the user enters the password verification number immediately after the initial transaction selection after inserting the card as in a normal transaction. There is an advantage that it is easy. On the other hand, if the biometric authentication is performed before the authentication by the password authentication number, if the non-owner performs the biometric authentication and the biometric authentication fails and the transaction is rejected, the transaction is terminated without entering the password authentication number. There is an advantage in that the burden on the server can be reduced by not having to communicate with the server for useless password authentication number combinations.

10, the authentication transaction start process in S908 of FIG. 9 is demonstrated. The authentication control middle 702 which has received an authentication transaction start instruction from the authentication control application 701 executes the IC card control program 704 and connects the IC card 105 (step 1001). This makes reading of data from the IC card 105 possible. However, the IC card 105 does not have biometric information data, and in the case of an IC card that does not support authentication in the IC card, a desired transaction can be performed at the ATM only by the authentication process using the above-mentioned encryption authentication number, for example. Preferably, the IC card control program 704 is executed by ATM software other than the authentication control middle 702 at about the same timing as the card insertion of S902 or the like in FIG. 9, and at least before the processing of S908. It is better to complete the connection of 105).

In addition, in the IC card 105 inserted into the card / specification tag mechanism 504, user-specific registration data and preprocessing data are registered in advance by the biometric information registration device 101 shown in FIG. The authentication program 711 for performing authentication is loaded and stored. This authentication program 711 is an application written in advance in a non-rewritable form on the IC card 105, and matches registration data pre-registered with the IC card with authentication data obtained by the ATM control unit according to a specific algorithm. , A program that performs a combination.

If the card / specification tag mechanism 504 and the IC card 105 are successfully connected in S1001, the authentication control middle 702 acquires the support authentication method (or support authentication information) registered in the IC card 105 (step). 1002). The support authentication method is registered in advance in the IC card 105, and it is information that can be determined at one time in which control order to perform authentication processing, such as authentication data and biometric feature amounts, in which control sequence. For example, in the finger vein authentication, the in-device authentication processing to authenticate (combine) in the biometric authentication mechanism unit 508 and the IC card authentication processing to authenticate in the IC card 105 are supported. Acquiring the support authentication method The authentication control procedure is changed. Two authentication methods are enabled with one authentication control program.

Authentication method and authentication control registered in IC card or the like as the support authentication method acquisition

The method of changing the order and method of authentication control by using the information which determines the order at once is a plurality of authentication devices (for example, a vein authentication device such as a finger and a palm and an iris authentication device of the eye) to a terminal equipped with biometric authentication devices such as ATM. Etc.), it is possible to cope with control of a plurality of biometric authentication devices by changing the control method of the authentication control program.

Next, it is judged whether or not the authentication method obtained in step 1002 is authentication in the IC card (step 1003), and if it is not authentication in the IC card, the IC card 105 is returned without performing transaction processing (step 916). ). On the other hand, in the case of the IC card authentication method, mutual authentication is performed between the ATM 501 and the IC card 105, and the authentication transaction start process ends (step 1004). The mutual authentication means that the authentication data creation program 709 in the biometric authentication mechanism unit 508 or the authentication program 711 mounted on the IC card 105 is not corrected by an illegal program, or the ATM 501 and the IC card. (105) is a process for confirming the validity of the mutual program.

The biometric authentication process of S908 of FIG. 9 will be described with reference to FIG. 11. As described with reference to Fig. 8, this biometric authentication process is a process of finally authenticating (combining) the registration data recorded in the IC card 105 in advance and the authentication data newly created during the biometric authentication process and obtaining the combination result. In this case, the processing associated with the individual of the authentication itself is performed in the IC card 105.

In S909 of FIG. 9, data is received from the IC card 105, but at the same time, pre-processed data stored in advance from the IC card 105 is transmitted to the authentication control middle 702 at the time of this biometric authentication. The authentication control middle 702 receives the preprocessing data stored in the IC card 105 and stores it in the preprocessing data buffer 707. Further, the preprocessing data when stored in the preprocessing data buffer 707 is transmitted to the biometric authentication mechanism unit 508 (step 1101). Upon receipt of the preprocessing data, the biometric authentication mechanism unit 508 reads out the biometric information of the user as a parallel process again.

The processing in steps 1102 to 1105 in FIG. 11 executes substantially the same processing as in steps 404 to 407 in FIG. 4 to obtain a biometric feature amount. When the finger is placed in the image acquisition area of the image sensor 607, the illumination LED 608 for detecting the presence or absence of the object detects that the object (finger) is placed (step 1102), and examines whether the object (finger) is a living body. (Step 1103). If the inserted object (finger) is not a living body, biometric authentication fails (step 1104). When the inserted object (finger) is a living body, the near-infrared ray is irradiated to the living body by the living body LED 609, and the living body image (a finger vein pattern) is acquired by the image sensor 607, and stored in the storage unit 606. Remember (step 1105).

Next, a biometric feature amount representing characteristic data is extracted from the biometric image (a finger vein pattern) (step 1106). Then, by executing the authentication data creation program 709 under the instruction of the authentication control middle 702, the authentication data described with reference to FIG. 8 is created (step 1107). The created authentication data is transmitted to the authentication control middle 702 and stored in the authentication data buffer 706.

The authentication control middle 702 executes the IC card control program 704 and transmits the authentication data stored in the authentication data buffer 706 to the IC card 105 and at the same time the authentication program 711 in the IC card 105. The biometric authentication instruction is given (step 1108). On the other hand, the IC card 105 executes the authentication program 711 stored in the card and is stored in the registration data registered in advance in the IC card 105 and in the authentication data buffer 706 of the authentication control middle 702 described above. The authentication data is combined to perform biometric authentication, and the authentication result data is created.

Then, the IC card 105 transmits the authentication result data to the authentication control middle 702, and the authentication control middle 702 is sent to the authentication result data buffer 705 in the authentication control middle 702 (hard in RAM). To be stored. In this way, in the transmission and reception control of the data between the biometric authentication mechanism unit 508 and the IC card 105 performed by the authentication control middle 702, the biometric feature amount obtained from the biometric image (the finger vein pattern) is determined by the biometric authentication mechanism unit 508. It does not appear outside, and the authentication data registered in the IC card 105 also does not appear outside. Therefore, since personal information can be prevented from leaking to the outside of the device, the confidentiality of personal information can be kept, thereby improving security.

The authentication control middle 702 executes the biometric authentication mechanism unit control program 703 to transmit the authentication result data stored in the authentication result data buffer 705 to the biometric authentication mechanism unit 508 and at the same time the authentication result determination program 710. Instruct the authentication result judgment to be sent. Next, the authentication result determination program 710 is executed to determine whether the biometric authentication succeeds or fails from the authentication result data stored in the authentication result data buffer 705 that is the result of the authentication performed in the IC card 105. In this case, as an output, the biometric authentication mechanism unit 508 notifies the authentication control middle 702 at which part of the living body the authentication succeeds when the authentication succeeds (step 1109). For example, if the site of biometric authentication is finger vein or fingerprint, which finger (e.g. right hand, middle finger, etc.) is successful, if the palm vein is the right hand, the left hand or the iris of the eye, the right eye, the left eye The authentication control middle 702 is notified which side the authentication was successful.

If the authentication result fails, the authentication result determination program 710 determines the cause of the failure in the IC card, and notifies the authentication control middle 702. For example, the authentication control middle 702 informs the authentication control middle 702 by attaching information such as whether a finger is released in a bad manner or that another registered finger is released. It is preferable to display the cause on the operation unit 503, whereby a device having good operability can be provided. As described above in the example in which the biometric authentication mechanism unit 508 determines the authentication result, the authentication program 711 in the IC card or the authentication control middle 702 in which the authentication result data has been acquired has succeeded or failed the authentication process. Also in the form which can discriminate authentication result, such as a site | part and the cause of authentication failure, it is good.

The authentication control middle 702 transmits the determination result data, which is a result of matching and combination of registration data and authentication data, to the authentication control application 701. If the determination result data is authentication failure, the authentication control application 701 displays the authentication restart screen on the operation unit 503 of the ATM 501 and causes the user to authenticate again. At this time, the authentication control middle 702 preferably holds the preprocessing data acquired by the registration information acquisition process of the IC card 105 in the preprocessing data buffer 707, and omits the registration information acquisition process of the IC card 105. This can improve the authentication processing time. This is similar to the preprocessing data buffer obtained from the IC card 105 even when a plurality of authentication processes are executed to execute a transaction requiring continuous identity verification from a balance inquiry to a visit, such as a payment transaction. By not deleting from 707, it is possible to omit the registration information acquisition process of the IC card 105 and to execute the authentication process in the continuous transaction.

The authentication transaction end process shown in S914 of FIG. 9 is demonstrated by FIG.

The authentication control application 701 issues an authentication transaction termination instruction to the authentication control middle 702 if the determination result data is authentication success. The authentication control middle 702 executes the IC card control program 704 and executes the cutting process of the IC card 105. By cutting off the IC card 105, the IC card 105 cannot be accessed. The biometric authentication device control program 703, based on the instruction from the authentication control middle 702 after the cutting of the IC card 105, uses the personal information used for biometric authentication, such as the biometric feature in the biometric authentication mechanism unit 508, and the same. Delete all information related to the authentication created from the storage unit.

This is also a valid feature to prevent leakage of personal information, etc. and to improve security. After clearing the data in the biometric authentication mechanism 508, the authentication control middle 702 deletes the information stored in the authentication result data buffer 705, the authentication data buffer 706, and the preprocessing data buffer 707 which it has. (Except continuous transaction) and prevent information leakage. When the authentication transaction end processing ends, the payment amount is input, the server 502 is communicated, and the payment transaction is terminated.

As described above, the registration processing of the biometric information using FIGS. 1 to 4 and the authentication processing of the biometric information using FIGS. 5 to 12 have been described. For example, the control of the CPU 601 and the main storage unit 602 is hard. The authentication of the biometric information is performed by the control and processing of the authentication control software 622, the authentication control application 701, and the authentication control middle 702. Therefore, as described above, these can be collected and controlled and processed by the control unit and the control means, and the function of each program can also be achieved in terms of LSI and the like. In addition, the various programs shown in Fig. 7 are not only started and executed for the first time when they are necessary for the processing, but also the processing time can be shortened by allowing each program to be started at the time of ATM startup and executing the necessary program in each process.

In FIG. 3, the preprocessing data is created from the biometric characteristic amount and the registration data used for authentication is created from the created preprocessing data and the biometric characteristic amount. However, the creation of the preprocessing data differs from the biometric characteristic amount. It is not relevant at all and can be written independently. As described above, the preprocessing data at the time of registration of the biometric information has the function of an encryption key (or algorithm) for creating the registration data, and at the time of biometric authentication has the function and role of the encryption key for creating the authentication data. . Therefore, if the preprocessing data is created from the biometric characteristic amount, that is, the data corresponding to each user can be constructed, a highly secure data creation algorithm can be constructed. On the other hand, if the preprocessed data is created independently of the biometric characteristic amount, the encryption is performed in advance. The preprocessing data itself, which serves as a key, can also be created, resulting in a simple and easy program configuration as a whole, thus reducing the effort and processing time of registration authentication.

In addition, although the preprocessing data was created in one layer from the biological feature amount, it may be made after several steps. By this means, even if a third party attempts to analyze the preprocessing data creation process, the creation process is complicated and difficult to interpret, and the analysis takes time.

In addition, the preprocessing data, registration data, and authentication data (including authentication data created at the time of authentication failure or continuous transaction) are information created and generated from biometric features (including image patterns) such as the user's finger. From, first, second,... It can be called (bio) information. That is, these 1st, 2nd ... (biological information) can also be said to be information calculated | required from biological information which is a concept containing a biometric characteristic amount.

As described above, according to the authentication method in the IC card of the present invention, since the information capable of identifying the individual registered in the IC card and the biometric information (bio-feature amount) acquired by the authentication device itself are not stored in the terminal equipped with the authentication device, The confidentiality of the information can be kept, enabling secure biometric authentication.

Claims (27)

As a method of controlling biometric authentication, A second for receiving first information obtained from the biometric information from the portable electronic device, transmitting the first information to the biometric authentication mechanism, and combining the biometric information acquired by the biometric authentication mechanism and the first information to create the second information; Information is received from the biometric authentication mechanism unit and the received second information is transmitted to the portable electronic device, and registration data previously stored in the portable electronic device and the second information are combined in the portable electronic device. And biometric authentication control method. In the biometric authentication control method according to claim 1, And wherein the first information includes information that can not specify a person and the second information includes information that can specify a person. In the biometric authentication control method according to claim 1, And wherein the second information includes information obtained by encrypting biometric information using the first information as an encryption key. In the biometric authentication control method according to claim 1, It is determined whether or not the support authentication method stored in the portable electronic device is an authentication method in the portable electronic device, and if the authentication method is in the portable electronic device, the biometric authentication is performed to combine the registration data and the second information. Control method. In the biometric authentication control method according to claim 1, And determining whether or not the finger placed on the biometric authentication mechanism is a living body, and if so, operating the combination data and the second information to combine the registration data. In the biometric authentication control method according to claim 1, And the first information and the second information include information created based on the biometric information using a certain algorithm. In the biometric authentication control method according to claim 1, And wherein the first information and the second information include information that is impossible to recover the biometric information from the first information and the second information itself. As a method of controlling biometric authentication, Receiving the first information generated from the biometric characteristic amount from the portable electronic device and storing it in a memory, transmitting the first information stored in the memory to a biometric authentication mechanism, and extracting the biometric feature amount extracted by the biometric authentication mechanism. And second information created from the first information from the biometric authentication mechanism unit, and transmits the received second information to the portable electronic device, and pre-stored registration data and the second information in the portable electronic device. Is operated to combine in the portable electronic device, When the combination fails, or the combination is needed again as the user wants to conduct a transaction continuously, the first information stored in the memory is transmitted to the biometric authentication mechanism, and the biometric authentication mechanism is sent to the biometric authentication mechanism. The new biometric characteristic value acquired by the first information and the third information created from the first information are received from the biometric authentication mechanism unit and transmitted to the portable electronic device, and the registration data and the third information are stored in the portable electronic device. Biometric authentication control method characterized in that it is operated to recombine. In the biometric authentication control method according to claim 8, The first information may include information that cannot be specified by an individual and information that can be specified by a person. In the biometric authentication control method according to claim 8, And the second information and the third information include information obtained by encrypting biometric information using the first information as an encryption key. In the biometric authentication control method according to claim 8, And said portable electronic device comprises an IC card and performs biometric authentication in said IC card. In the biometric authentication control method according to claim 8, In accordance with the connection of the portable electronic device, it is determined whether the support authentication method stored in the portable electronic device in advance is an authentication method in the portable electronic device, and if the authentication method is in the portable electronic device, the registration data and the second information or And operate to combine the third information. In the biometric authentication control method according to claim 8, And determining whether a finger placed on the biometric authentication mechanism is a living body by illumination of the biometric detection mechanism of the biometric authentication unit, and obtaining a biometric image and extracting the biometric feature amount if the finger is a living body. In the biometric authentication control method according to claim 8, And the first information stored in the memory is erased when the result of the combination is successful and all transactions desired by the user are completed. In the biometric authentication control method according to claim 8, And storing said first information sent to said biometric authentication mechanism in said biometric authentication mechanism and deleting said stored first information after creation of said second information. A computer having a card mechanism unit for reading various data of the IC card storing registration data, a biometric authentication mechanism unit for obtaining biometric information, and a memory, Receiving the first information in the IC card read out by the card mechanism unit and storing it in the memory, and transmitting the first information stored in the memory to the biometric authentication mechanism, and obtained by the biometric authentication mechanism. Receives the biometric information and the second information generated from the first information from the biometric authentication mechanism unit and transmits the received second information to the IC card, and the registration data and the second information previously stored in the IC card. Recording medium containing a computer-readable biometric authentication program, characterized in that it is operative to combine the data into the IC card. In the cash automatic trading device which performs the transaction of cash automatically, A card mechanism unit for reading the information of the IC card, a biometric authentication mechanism unit and a control unit for acquiring the biometric characteristic amount of the user who uses the cash automatic transaction apparatus, The control unit receives the preprocessing data in the IC card read out by the card mechanism unit, and transmits the received preprocessing data to the biometric authentication mechanism while simultaneously transmitting the preprocessed data transmitted by the biometric authentication mechanism and the biometric characteristic acquired by the biometric authentication mechanism. Receive the authentication data generated by the amount, and transmit the received authentication data to the IC card via the card mechanism unit, and perform the authentication processing of the biometric information by the IC card, characterized in that Device. In the cash automated transaction apparatus according to claim 17, The biometric authentication mechanism portion has a biometric irradiation portion for irradiating light onto a living body placed in the biometric authentication mechanism portion, and an image acquisition portion for obtaining an image of the living body irradiated by the biometric irradiation portion, And the authentication data generated from the biometric feature acquired by the image acquisition section and the preprocessing data received from the IC card via the control section or in accordance with an algorithm. In the cash automated transaction apparatus according to claim 18, The control unit generates the authentication data in the biometric authentication mechanism unit according to an instruction from the authentication control middle which stores and stores the authentication control middle for executing the authentication process of the biometric information, and sends the generated authentication data to the IC card. Cash automatic transaction apparatus characterized in that the transmission. In the cash automated transaction apparatus according to claim 17, The card mechanism section stores the authentication data received by the biometric authentication mechanism section as the IC card, The IC card includes registration data stored in advance as information unique to the card holder, And an authentication or combination process of the stored authentication data. In the cash automatic transaction apparatus according to claim 20, The control unit reads out the result of authentication or combination processing in the IC card via the card mechanism unit and transmits the result to the biometric authentication mechanism unit, and authenticates the biometric information based on the authentication result analyzed by the biometric authentication mechanism unit. Cash automatic transaction device, characterized in that for executing. In the cash automated transaction apparatus according to claim 21, And the control unit receives the biometric authentication mechanism unit including information on which part of the living body has succeeded, and outputs the cause of the authentication failure. In the cash automated transaction apparatus according to claim 17, The card mechanism unit establishes the connection of the IC card and at the same time reads support information in biometric authentication from the IC card and transmits it to the control unit. And the control unit continues the authentication process upon authentication processing in the IC card based on the received support information, and discharges the IC card from the card mechanism unit during the in-device authentication processing. In the cash automated transaction apparatus according to claim 17, The control unit executes a transaction selected by the user in response to the authentication process by the IC card, and when the result of the authentication process fails, transmits the preprocessing data received from the IC card to the biometric authentication mechanism again for authentication process. Cash automatic transaction device, characterized in that for executing. In the cash automated transaction apparatus according to claim 17, Banknote deposit and withdrawal department which performs banknote deposit and withdrawal, It has an operation unit which displays the operation contents to the user and receives the input from the user, The control unit accepts a payment transaction desired by the user by the operation unit, and withdraws a bill from the bank note withdrawal unit when the result is successful in response to the authentication processing by the IC card. Device. In the cash automated transaction apparatus according to claim 17, It has an operation unit which displays the operation contents related to the transaction and detects the input from the user, The control unit detects the balance inquiry desired by the user by the operation unit and, in response to the authentication processing by the IC card, displays the deposit or borrowed balance on the operation unit when the result of the combination is successful. And, upon receipt of a transaction requiring authentication at the operation unit, retransmits the preprocessing data received and stored at the IC card to the biometric authentication mechanism, and newly inputs biometric features and reprinted the preprocessed data from the biometric authentication mechanism. Automatic cash transaction apparatus characterized in that for generating authentication data from the data. In the cash automated transaction apparatus according to claim 17, The controller temporarily stores the preprocessed data until the end of the transaction selected by the user. And automatically delete the preprocessing data due to the transaction termination.

Images