JP2008171218A - Personal identification method and personal identification system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a method for preventing the illegal use of an automatic transaction device due to the impersonation of a third person, and for preventing personal identification from failing without deteriorating security. <P>SOLUTION: In this personal identification device and method, a portable communication terminal and an automatic transaction device are respectively provided with: a storage function for storing at least one of a plurality of biological information of a user and information necessary for transaction; a biological information input function for inputting at least one of the plurality of biological information of the user; a communication means for transmitting and receiving the input biological information and the stored biological information and the information necessary for transaction between the portable communication terminal and the automatic transaction device; and a collation function for comparing and collating the biological information input for performing personal identification with the stored biological information, and the stored biological information with each other, and the mutual information necessary for transaction with each other concerning information matching or similarity, and only when the collation result is satisfactory as personal identification information, the transaction by the automatic transaction device is made possible. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

The present invention relates to an authentication method and an authentication system using biometric information of a user when providing a service with an automatic transaction apparatus.

For automatic transaction devices with a biometric authentication function, in order to prevent service degradation for users,
Even if biometric authentication is not successful, an automatic transaction apparatus provided with a control function for shifting to conventional transaction based on reef authentication using an IC card or a magnetic card has been proposed (see Patent Document 1). By enabling transactions that respond to changes in the physical condition of users,
It can contribute to service improvement for users.

JP 2006-164087 A

In the end, by having biometrics authentication function, it is possible to do conventional transactions with IC card and magnetic card in order to prevent service degradation, despite improving security.
Since security will be lowered, there is a problem of unauthorized use in an automatic transaction apparatus by impersonation of a third party, which is a conventional problem.

In addition, it is necessary to use an alternative means of biometric authentication for multiple transactions.
This eliminates the hassle of having to use multiple cards and magnetic cards.

The present invention is an apparatus for authenticating an individual who contributes to security and service improvement of an automatic transaction apparatus,
Propose methods and systems.

A personal authentication method and a personal authentication system according to the present invention include a storage function for storing at least one of a plurality of pieces of biometric information of a user and information necessary for a transaction in both a mobile communication terminal and an automatic transaction apparatus, Communication having a biometric information input function capable of inputting at least one of a plurality of biometric information, and transmitting and receiving input biometric information, stored biometric information, and information necessary for a transaction between a mobile communication terminal and an automatic transaction apparatus Provided with a verification function for comparing and collating the biometric information input for authentication with the stored biometric information, the stored biometric information, and the information coincidence or similarity between the information necessary for the transaction in one or both Only when the verification result is satisfactory with the verification result as the authentication information, the transaction with the automatic transaction apparatus is enabled.

According to the present invention, it is possible to realize a redundant personal authentication method and personal authentication system that achieves both security and serviceability of an automatic transaction apparatus.

For example, it can be used for entrance / exit management of ATMs, credit cards, electronic commerce such as electronic money, and buildings that cannot be used illegally by third parties.

  An embodiment of the present invention will be described by taking an automatic transaction system of a financial institution as an example.

FIG. 1 shows this embodiment, in which a user has a portable communication terminal 100 and an automated teller machine 2.
00, the bank host 300.

FIG. 2 shows the detailed configuration of the mobile communication terminal 100, the automatic teller machine 200, and the bank host 300.

The mobile communication terminal 100 includes a collation unit 120 that collates biometric information, a biometric information input unit 130 that reads biometric information, account information 143 that is transaction information, a storage unit 140 that stores biometric information A, C141, and 142, and automatic cash deposit. The communication unit 150 is configured to communicate with the payment machine 200.
These operations are controlled by the control unit 110.

The automatic teller machine 200 communicates with a transaction operation unit 220 for executing a transaction, a biometric information input unit 240 for reading biometric information, a transaction guide unit 250 for guiding transaction status and procedure, and the mobile communication terminal 100. A communication unit b 280 that communicates with the communication unit a 230 and the bank host 300.
, A storage unit 260 that stores biometric information A261 and biometric information B262, and a collation unit 270 that collates biometric information, and the operation is controlled by the control unit 210.

The bank host 300 includes an account information 321, a storage unit 320 that stores the balance 322, a verification unit 340 that compares account information, and a communication unit 330 that communicates with the automated teller machine 200. The operation is controlled by.

The account information 143, biometric information A141, and biometric information C142 of the mobile communication terminal 100 are registered in advance in the storage unit at the bank window.

Account information 321 of the automated teller machine 200 and the bank host 300, biometric information A261,
The biometric information B262 is registered in advance in the storage unit at the bank window.

Account information 143, biometric information A141 and automatic teller machine 200 of mobile communication terminal 100
The account information 321 and the biometric information A261 of the bank host 300 are the same information.

  Next, the operation of this embodiment will be described in detail.

FIG. 3 shows an authentication method, and FIG. 4 shows a trader 400, a mobile communication terminal 100, an automated teller machine 2.
00, the flow of data between the bank hosts 300, and the processing procedure are shown. Mobile communication terminal 100
The communication of the automatic teller machine 200 is shown, and the solid line shows the flow of other processing.

  The trader can interrupt the transaction from any step.

When the trader 400 uses the automated teller machine 200, the trader 400 first makes the portable communication terminal 100 usable as a preliminary preparation (step S00). The mobile communication terminal 100 includes the biometric information A141 registered in advance in FIG.
The user can be authenticated and used by collating the biometric information a410 input from 30 and determining the number of similarities. If the operation up to step S30 is not completed within a certain time from the usable state, the processing from step S00 is required again.

Next, a transaction request is made from the transaction operation unit 220 of the automatic teller machine 200 (step S10). As a method in which the trader 400 makes a trade request, for example, the trader 400 selects a transaction content on a touch panel or the like.

The automatic teller machine 200 receives a request from the trader 400 and requests communication with the mobile communication terminal 100 for the first authentication process (step S20). The requesting method is performed by voice guidance or message display with images.

In response to the request from the automatic teller machine 200, the transaction person 400 makes the communication unit 150 of the mobile communication terminal 100 and the communication part a230 of the automatic teller machine 200 communicable (step S30). The communication method is contact type using a communication cable or non-contact type communication using an IC chip.

When communication is possible, the verification unit 120 of the mobile communication terminal 100, the automated teller machine 200 verification unit 270, and the bank host verification unit 340 as shown in FIG. And the biometric information A261 in the storage unit 260 and the account information 321 in the storage unit 320 are collated with each other (step S40).

Account information by both verifications. Only when the biometric information A completely matches, the first authentication is regarded as successful, and the automatic teller machine 200 performs biometric information b420 and biometric information c4 for the second authentication process.
30 is requested (step S60), and if they do not match, the request for communication with the portable communication terminal 100 (step S20) is again sent to the personal information, account information. Repeat until the biometric information A completely matches (step S50).

Upon receiving a request from the automatic teller machine 200, the trader 400 inputs the biometric information b from the biometric information input unit 120 of the mobile communication terminal 100, and the biometric information c from the biometric information input unit 240 of the automatic teller machine 200. Is input (step S70).

The biometric information c430 input to the biometric information C142 of the storage unit 140 and the biometric information B262 of the biometric information input to the biometric information B262 of the storage unit 260 by the verification unit 120 of the mobile communication terminal 100, the automatic teller machine 200 verification unit 260, and the bank host verification unit 340. The information b420 is collated on both sides (step S
80).

If the features of biometric information equal to or greater than a certain amount are matched in both verifications, biometric information b and biometric information B
, And the biometric information c and the biometric information C are determined to be the same, the second authentication is regarded as successful, and if the feature amounts exceeding a certain level do not match, the biometric information b420 and the biometric information c430 are requested to be input again (step S60). This is repeated until the authentication is successful (step S90).

The control unit of the mobile communication terminal 100 and the automated teller machine 200 performs verification determination, and only when the verification number equal to or greater than the reference value is confirmed by the automatic teller machine 200, the authentication is successful, and the bank host 300 receives authentication information. And send transaction information.

  FIG. 5 shows an example of authentication criteria.

Account information and biometric information A are 100% feature-matched in both mobile communication terminal 100 and automatic teller machine 200, biometric information b and biometric information B, biometric information c and biometric information C are both in mobile communication terminal 100 and cash. In the case where authentication is considered successful only when the automatic teller machine 200 matches the feature amount of 70% or more, 5-1 is biometric information b and biometric information B of the mobile communication terminal 100, and biometric information of the cash teller machine 200. Although c and biometric information C have failed to collate, authentication has succeeded because one has succeeded.

On the other hand, in 5-2, the number of successful verifications is the same as that in 5-1, but authentication fails because both verification of biometric information c and biometric information C has failed.

The bank host 300 processes the transaction request content and updates the balance 325 information when authentication is successful. The transaction processing result is transmitted to the automatic teller machine 200, the automatic teller machine 200 executes the cash deposit or payment process (Step S100), and completes the transaction with the acceptance signal of the trader 400 (Step S100). S110).

  An embodiment of the present invention will be described by taking an entrance / exit management system as an example.

FIG. 6 shows this embodiment, which is composed of a mobile communication terminal 500 and a door control device 600 possessed by the user.

  FIG. 7 shows the detailed configuration of the mobile communication terminal 500 and the door control device 600.

The mobile communication terminal 500 includes a collation unit 520 that collates biometric information, a biometric information input unit 530 that reads biometric information, a biometric information A541, a storage unit 540 that stores biometric information C542, and a communication unit 550 that communicates with a door control device. These are configured, and their operations are controlled by the control unit 510.

The door control device includes a collation unit 620 that collates biometric information, a biometric information input unit 640 that reads biometric information, a guide unit 650 that guides situations and procedures, a storage unit 660 that stores biometric information A661, and biometric information B662, and door control. Operation unit 670 for operating the device, portable communication terminal 50
The communication unit 630 performs communication with 0, a first key 680, and a second key 690, and these are controlled by the control unit 610.

The biometric information A541 and biometric information C542 of the mobile communication terminal 500 are registered in the storage unit in advance.

The biological information A661 and biological information B662 of the door control device 600 are registered in advance in the storage unit.

  The portable communication terminal 500 and the biological information A of the door control device are the same information.

  Next, the operation of this embodiment will be described in detail.

FIG. 8 shows the authentication method, and FIG. 9 shows the data flow and processing procedure of the user 700, the portable communication terminal 500, and the door control device 600. The dotted lines are the mobile communication terminal 500 and the door control device 600.
The solid line indicates the other processing flow.

  The trader can interrupt the transaction from any step.

When the user 700 enters or leaves the building, first, the user 700 makes the portable communication terminal 500 usable as a preliminary preparation (step S000). Mobile communication terminal 50
8 matches biometric information A541 registered in advance in FIG. 8 with biometric information a710 input from the biometric information input unit 530 for each use and determines the number of similarities to authenticate and use the user. . If the operation up to step S300 is not completed within a certain time from the usable state, the processing from step S000 is required again.

Next, a door unlocking request is made from the operation unit 620 of the door control device (step S100).
As a method for the user 700 to make an unlocking request, for example, it is performed by selecting with a touch panel or the like.

Upon receiving a request from the user 700, the door control device requests communication with the mobile communication terminal 500 for the first authentication process (step S200). The requesting method is performed by voice guidance or message display with images.

In response to the request from the door control device 600, the user 700 sets the communication unit 550 of the mobile communication terminal 500 and the communication unit 630 of the door control device in a communicable state (step S300). The communication method is contact type using a communication cable or non-contact type communication using an IC chip.

When communication is possible, the biometric information A541 in the storage unit 540 and the biometric information A in the storage unit 660 at the collation unit 520 of the mobile communication terminal 500 and the collation unit 620 of the door control device as shown in FIG.
661 is collated on both sides (step S400).

Only when the biometric information A completely matches in both verifications, the first authentication is regarded as successful and the first key 680 is unlocked (step S600). If they do not match, the communication request with the mobile communication terminal 500 (step S200) is repeated again until the biometric information A completely matches (step S50).
0).

Next, the door control device requests input of biometric information b720 and biometric information c730 for the second authentication process (step S700).

In response to the request from the door control device, the user 700 inputs the biological information b from the biological information input unit 530 of the mobile communication terminal 500 and the biological information c from the biological information input unit 640 of the door control device (step S800). ).

The collation unit 520 of the mobile communication terminal 500 and the collation unit 620 of the door control device 600 store the storage unit 54.
The biometric information C542 of 0 and the input biometric information c730, the biometric information B662 of the storage unit 660, and the input biometric information b720 are collated (step S900).

If any of the collation results matches a certain amount of biometric information, biometric information b and biometric information B, and biometric information c and biometric information C are determined to be the same, and the second authentication is successful. In the case where the feature quantity of a certain level or more does not match, the input of the biometric information b720 and the biometric information c730 is requested again (step S700) and repeated until the authentication is successful (step S1000).
.

The control unit of the mobile communication terminal 500 and the door control device 600 makes a collation determination, and the door control device 6
Only when the number of verifications exceeding the reference value can be confirmed at 00, the authentication is successful and the second key 690 is unlocked (
In step S1100), the user can enter / exit for the first time in step S1200).

It is a financial institution automatic transaction system block diagram of embodiment of this invention. It is a detailed configuration diagram of a mobile communication terminal, an automatic teller machine, and a bank host. It is explanatory drawing of the authentication method of a financial institution automatic transaction system. It is a flowchart explaining the flow of data and a processing procedure. It is a figure explaining an example of the judgment criteria of collation. It is an entrance / exit management system configuration diagram of an embodiment of the present invention. It is a detailed configuration diagram of a mobile communication terminal and a door control device. It is explanatory drawing of the authentication method of an entrance / exit management system. It is a flowchart explaining the flow of data and a processing procedure.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 ... Portable communication terminal, 110 ... Control part, 120 ... Collation part, 130 ... Biometric information input part,
140 ... storage unit, 141 ... biometric information A, 142 ... biometric information C, 143 ... account information, 150
... communication unit, 200 ... automatic teller machine, 210 ... control unit, 220 ... transaction operation unit, 230
... Communication part a, 240 ... Biometric information input part, 250 ... Communication part b, 260 ... Transaction guide part, 300
... bank host, 310 ... control unit, 320 ... storage unit, 321 ... biological information A, 322 ... biological information B, 323 ... account information, 324 ... balance, 330 ... communication unit, 340 ... verification unit, 400 ... user, 410 ... Biometric information a, 420 ... Biometric information b, 430 ... Biometric information c, 5-1 ... Authentication success, 5-2 ... Authentication failure, 500 ... Mobile communication terminal, 510 ... Control unit, 520 ... Verification unit, 53
DESCRIPTION OF SYMBOLS 0 ... Biometric information input part, 540 ... Memory | storage part, 541 ... Biometric information A, 542 ... Biometric information C, 55
0: Communication unit, 600: Automatic teller machine, 610: Control unit, 620: Verification unit, 630 ...
Communication unit, 640 ... biometric information input unit, 650 ... guide unit, 660 ... storage unit, 661 ... biometric information A, 662 ... biometric information B, 670 ... operation unit, 680 ... first key, 690 ... second key, 700 ...
User, 710 ... biological information a, 720 ... biological information b, 730 ... biological information c.

Claims (10)

A portable communication terminal having means for reading biometric information and storing means, and having a function of collating the read biometric information with stored information and performing personal authentication using the collation result as authentication data . An automatic transaction apparatus comprising means for reading biometric information and means for storing biometric information, and having a function of collating the read biometric information with stored information and performing personal authentication using the collation result as authentication data . An automatic transaction apparatus having a function of performing mutual verification of the biometric information read and stored in claim 1 and claim 2, and performing personal authentication using the verification result as authentication data. The biometric information has a function of collating information using at least one of physical features such as a fingerprint, an iris in the back of an eyeball, or a voice, and performing personal authentication using the collation result as authentication data. Mobile communication terminal and automatic transaction device. The portable communication terminal which has tamper resistance in any one or the combination of Claims 1-3, and an automatic transaction apparatus. Used for personal authentication of an automatic transaction apparatus that provides services on the premise of personal authentication according to claim 1, claim 2, and claim 3, and a user who intends to use the service based on authentication data uses the automatic transaction apparatus Automatic transaction equipment characterized by receiving permission. A personal authentication method characterized in that the information read and stored in claim 1, claim 2, and claim 3 is communicated with each other, collated with one or both, and the collation result is used as authentication data for personal authentication. 8. A personal authentication method, wherein authentication data personal authentication is performed if any part of the collation result of claim 7 is valid. A portable communication terminal characterized by having means for reading biometric information and storing means, and having a function of collating the read information with stored information and performing personal authentication using the collation result as authentication data; An automatic transaction apparatus comprising means for reading biometric information and storing means, and having a function of collating the read information with stored information and performing personal authentication using the collation result as authentication data A personal authentication system that performs personal authentication as authentication data when all or one of the verification results are valid. A portable communication terminal characterized by having means for reading biometric information and storing means, and having a function of collating the read information with stored information and performing personal authentication using the collation result as authentication data; An automatic transaction apparatus comprising means for reading biometric information and storing means, and having a function of collating the read information with stored information and performing personal authentication using the collation result as authentication data A personal authentication system that performs personal authentication as authentication data when one or both of the verification results are valid.

Images