JP2011198260A - Biometric authentication device, method for generating database for authentication, and computer program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To automatically optimize an authentication database used for 1:N authentication.SOLUTION: A narrowing-down part 9 reads biological registration data associated with terminal identification information received from a radio communication part 10, from a population DB 5 and stores the biological registration data in the authentication DB 6 in association with the terminal identification information, and deletes the biological registration data associated with the terminal identification information, from the authentication DB 6 when determining that no terminal identification information is received over a fixed period of time.

Description

  The present invention relates to a biometric authentication apparatus using 1: N authentication, an authentication database generation method, and a computer program.

  There is known a biometric authentication technique for identifying a person using biometric information such as a fingerprint, a voiceprint, a retina, and a vein. Biometric authentication techniques include 1: 1 authentication and 1: N authentication. In 1: 1 authentication, biometric information data (biological registration data) acquired from a user in advance is recorded in association with the user's identification information (user ID). And the user ID are input, and the biometric registration data corresponding to the user ID is compared with the acquired biometric data. In 1: N authentication, biometric registration data acquired from a plurality of users in advance is recorded without distinction, and at the time of authentication, the biometric data acquired from the user is collated with a plurality of recorded biometric registration data. . For example, in Patent Document 1, 1: 1 authentication and 1: N authentication are combined.

  In 1: N authentication, if the number of biometric registration data is large, it takes time for verification at the time of authentication, and the authentication time becomes longer. For this reason, for example, in Patent Document 2, a member database is provided in which member biometric registration data is stored in association with the member attributes. By identifying the biometric registration data corresponding to the attribute from the member database and storing the identified biometric registration data in the authentication database, the biometric registration data to be collated with the biometric data acquired from the person to be authenticated at the time of authentication is narrowed down. Further, when the person to be authenticated is excluded from the object to be authenticated, the person to be authenticated again inputs an attribute through the input interface, and the biometric registration data corresponding to the input attribute is deleted from the authentication database.

JP 2004-145608 A JP 2009-169478 A

  However, in Patent Document 2 described above, a procedure for an authenticated person to input an attribute using an input interface is required, and the authentication database is automatically optimized without the effort of the authenticated person (authentication database). It is impossible to increase the accuracy with which the biometric registration data is used for actual authentication.

  The present invention has been made in consideration of such circumstances, and provides a biometric authentication apparatus, an authentication database generation method, and a computer program that can automatically optimize an authentication database used for 1: N authentication. The task is to do.

  In order to solve the above problems, a biometric authentication apparatus according to the present invention includes a population database that stores biometric registration data of a user in association with terminal identification information of a mobile terminal possessed by the user, and a user. A wireless communication unit that receives terminal identification information from a portable terminal possessed by the wireless communication unit, and biometric registration data associated with the terminal identification information received by the wireless communication unit is read from the population database and authenticated in association with the terminal identification information The narrowing-down unit stored in the authentication database, the authentication database, the biometric sensor, biometric data acquired from the user by the biometric sensor at the time of user authentication, and biometric registration data in the authentication database are collated. : N authentication unit that performs N authentication, and the narrowing-down unit determines that no terminal identification information has been received for a certain period of time. In, and deletes the registered biometric data associated with the terminal identification information from the authentication database.

  In the biometric authentication device according to the present invention, the wirelessly connectable area of the wireless communication unit corresponds to an area where a user who can be an authenticated person exists.

  The biometric authentication apparatus according to the present invention includes a timer that is activated when the terminal identification information is received and times the predetermined period.

  In the biometric authentication device according to the present invention, the narrowing-down unit determines that no terminal identification information has been received for a certain period of time when the wireless communication unit ends wireless communication with the mobile terminal. To do.

  An authentication database generation method according to the present invention is an authentication used for 1: N authentication from a population database that stores biometric registration data of a user and terminal identification information of a mobile terminal possessed by the user in association with each other. An authentication database generation method for generating an authentication database, comprising: receiving terminal identification information from a portable terminal possessed by a user; and biometric registration data associated with the received terminal identification information from the population database A step of reading and associating with the terminal identification information and storing it in the authentication database; and when it is determined that no terminal identification information has been received for a certain period of time, biometric registration data associated with the terminal identification information is And deleting from the authentication database.

The computer program according to the present invention creates an authentication database used for 1: N authentication from a population database that stores biometric registration data of a user and terminal identification information of a mobile terminal possessed by the user in association with each other. A computer program for generating, comprising: receiving terminal identification information from a portable terminal possessed by a user; and reading biometric registration data associated with the received terminal identification information from the population database Storing in the authentication database in association with identification information, and if it is determined that no terminal identification information has been received for a certain period, biometric registration data associated with the terminal identification information is retrieved from the authentication database. A computer program for causing a computer to execute And wherein the Rukoto.
Thereby, the above-described biometric authentication device can be realized using a computer.

  According to the present invention, an authentication database used for 1: N authentication can be automatically optimized.

It is a block diagram which shows the structure of the biometrics apparatus 1 which concerns on one Embodiment of this invention. It is an example of composition of population DB5 shown in FIG. It is a sequence chart which shows the user registration procedure which concerns on one Embodiment of this invention. It is a sequence chart which shows the database production | generation procedure for authentication which concerns on one Embodiment of this invention. It is a sequence chart which shows the database production | generation procedure for authentication which concerns on one Embodiment of this invention. It is a sequence chart which shows the user authentication procedure which concerns on one Embodiment of this invention.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of a biometric authentication device 1 according to an embodiment of the present invention. In FIG. 1, a biometric authentication apparatus 1 includes a biometric sensor 2, a terminal ID input unit 3, a registration unit 4, a population database (population DB) 5, an authentication database (authentication DB) 6, and a 1: N authentication unit 7. And a narrowing-down unit 9, a wireless communication unit 10, and a terminal authentication unit 11. A user who uses the biometric authentication device 1 has a portable terminal 30.

  The biological sensor 2 detects human biological information and outputs data of the detected biological information (biological data). The terminal ID input unit 3 inputs identification information (terminal ID) of the user's portable terminal 30 at the time of user registration. At the time of user registration, the registration unit 4 associates the biometric data (biometric registration data) registered by the user with the terminal ID of the user's portable terminal 30 and stores them in the population DB 5.

  The population DB 5 stores a set of user biometric registration data and a terminal ID. FIG. 2 shows a configuration example of the population DB 5. The population DB 5 stores a set of biometric registration data and terminal IDs of all registered users.

  The authentication DB 6 is a 1: N authentication database used by the 1: N authentication unit 7 during user authentication. The authentication DB 6 stores a set of biometric registration data and a terminal ID of a user who is an authentication target.

  The 1: N authentication unit 7 collates the biometric data acquired from the user at the time of user authentication with the biometric registration data in the authentication DB 6 and performs 1: N authentication. The narrowing-down unit 9 generates an authentication DB 6 from the population DB 5. The wireless communication unit 10 wirelessly connects to the mobile terminal 30 and transmits / receives data. The terminal authentication unit 11 authenticates the user's mobile terminal 30.

  Next, the operation of the biometric authentication device 1 shown in FIG. 1 will be described with reference to FIGS.

[registration process]
First, an operation for registering a user will be described with reference to FIG. FIG. 3 is a sequence chart showing a user registration procedure. In FIG. 3, in step S1, the registration unit 4 displays a registration screen for user registration. In step S2, the user causes the biometric sensor 2 to detect biometric information according to the registration screen. In step S <b> 3, the biological sensor 2 outputs the detected biological information data (biological data) to the registration unit 4.

  In step S <b> 4, the user operates the terminal ID input unit 3 in accordance with the registration screen and inputs the terminal ID of his / her mobile terminal 30. In step S <b> 5, the terminal ID input unit 3 outputs the input terminal ID to the registration unit 4. In step S6, the registration unit 4 associates the biometric registration data of the user with the terminal ID and stores them in the population DB 5. In step S7, the registration unit 4 displays a registration result screen that presents the user's registration result.

[Authentication DB generation processing]
Next, an operation for generating the authentication DB 6 will be described with reference to FIGS. FIG. 4 is a sequence chart showing a procedure for adding a set of biometric registration data of a user who is an authentication target and a terminal ID to the authentication DB 6. FIG. 5 is a sequence chart showing a procedure for deleting a set of biometric registration data and a terminal ID of a user who is out of the authentication target from the authentication DB 6.

  First, FIG. 4 will be described. In the description of FIG. 4, the biometric authentication device 1 uses the wireless communication unit 10 to transmit and receive data to and from the mobile terminal 30 wirelessly. In step S <b> 11, the mobile terminal 30 periodically transmits an inquiry message to the biometric authentication device 1. In step S <b> 12, the terminal authentication unit 11 returns a response message in response to the inquiry message from the mobile terminal 30. In step S <b> 13, when the mobile terminal 30 receives the response message, the mobile terminal 30 performs a mutual authentication process with the terminal authentication unit 11. In step S <b> 14, when the mutual authentication process in step S <b> 13 is successful, the terminal authentication unit 11 notifies the narrowing unit 9 of successful authentication of the mobile terminal 30.

  In step S15, the narrowing-down unit 9 requests a terminal ID from the mobile terminal 30 that has been successfully authenticated. In step S16, the portable terminal 30 periodically transmits its own terminal ID in response to the terminal ID request. In step S <b> 17, the narrowing-down unit 9 searches the authentication DB 6 using the terminal ID received from the mobile terminal 30 as a search key. In step S <b> 18, the narrowing-down unit 9 determines whether the combination of the terminal ID of the search key and the biometric registration data is already stored in the authentication DB 6 as a result of the search. As a result, when it is already stored in the authentication DB 6 (step S18, YES), steps S19 and S20 are not performed. On the other hand, if it is not stored in the authentication DB 6 (step S18, NO), steps S19 and S20 are performed.

  In step S19, the narrowing-down unit 9 searches the population DB 5 using the terminal ID received from the mobile terminal 30 as a search key, and reads the set of the terminal ID of the search key and biometric registration data from the population DB 5. In step S20, the narrowing-down unit 9 stores the set of terminal ID and biometric registration data read from the population DB 5 in the authentication DB 6. Thereafter, steps S16 to S20 are repeated.

  Next, FIG. 5 will be described. In FIG. 5, in step S <b> 31, the narrowing unit 9 confirms whether or not a terminal ID has been received from the mobile terminal 30. In step S32, the narrowing-down unit 9 determines whether or not the terminal ID has been received from the portable terminal 30 for a certain period of time. As this determination method, each time a terminal ID is received from the portable terminal 30 (step S16 in FIG. 4), a timer that counts the predetermined time is started or restarted. It is determined that the terminal ID from 30 has not been received for a certain time. Alternatively, when the wireless communication unit 10 notifies the narrowing unit 9 of the end of wireless communication with the mobile terminal 30, it is determined that the terminal ID has not been received from the mobile terminal 30 for a predetermined time or longer.

  As a result of the determination in step S32, if the terminal ID has not been received from the portable terminal 30 for a predetermined time or longer (step S32, YES), step S33 is performed. If not (step S32, NO), step S33 is performed. Absent. In step S <b> 33, the narrowing unit 9 deletes the set of the terminal ID and the biometric registration data from the authentication DB 6 for the mobile terminal 30 that has not received the terminal ID for a predetermined time or longer.

[User authentication processing]
Next, an operation for authenticating a user will be described with reference to FIG. FIG. 6 is a sequence chart showing a user authentication procedure. In FIG. 6, in step S41, the 1: N authentication unit 7 displays an authentication screen for user authentication. In step S42, the user causes the biometric sensor 2 to detect biometric information according to the authentication screen. In step S <b> 43, the biometric sensor 2 outputs the detected biometric data (biometric data) to the 1: N authentication unit 7.

  In step S44, the 1: N authentication unit 7 compares the biometric data received from the biometric sensor 2 with the biometric registration data in the authentication DB 6, and performs 1: N authentication. In step S45, the 1: N authentication unit 7 displays an authentication result screen presenting the user authentication result.

  According to the above-described embodiment, only the biometric registration data paired with the terminal ID of the portable terminal 30 wirelessly connected to the biometric authentication device 1 is stored in the authentication DB 6 from the biometric registration data in the population DB 5. can do. Here, the user who has the portable terminal 30 wirelessly connected to the biometric authentication device 1 exists in a wirelessly connectable area where the biometric authentication device 1 (wireless communication unit 10) can be wirelessly connected. Therefore, by forming the wirelessly connectable area so as to match the area where the user who can be the authenticated person exists as much as possible, the biometric registration of the authenticated person in which 1: N authentication is actually performed in the authentication DB 6 The percentage of data can be very high. Thereby, storing unnecessary biometric registration data in the authentication DB 6 can be suppressed, and the authentication DB 6 can be optimized.

As mentioned above, although embodiment of this invention was explained in full detail with reference to drawings, the specific structure is not restricted to this embodiment, The design change etc. of the range which does not deviate from the summary of this invention are included.
For example, the terminal authentication unit 11 may be provided as appropriate according to the confidentiality of the terminal ID, and is not essential.

  The wireless method used for the wireless communication unit 10 may be appropriately selected according to the size of an area where a user who can be an authenticated person exists, the wireless environment in the area, and the like.

Also, a program for realizing the steps shown in FIGS. 4 and 5 is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read into a computer system and executed, thereby performing authentication. Database generation processing may be performed. Here, the “computer system” may include an OS and hardware such as peripheral devices.
“Computer-readable recording medium” refers to a flexible disk, a magneto-optical disk, a ROM, a writable nonvolatile memory such as a flash memory, a portable medium such as a DVD (Digital Versatile Disk), and a built-in computer system. A storage device such as a hard disk.

Further, the “computer-readable recording medium” means a volatile memory (for example, DRAM (Dynamic DRAM) in a computer system that becomes a server or a client when a program is transmitted through a network such as the Internet or a communication line such as a telephone line. Random Access Memory)), etc., which hold programs for a certain period of time.
The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

DESCRIPTION OF SYMBOLS 1 ... Biometric authentication apparatus, 2 ... Biometric sensor, 3 ... Terminal ID input part, 4 ... Registration part, 5 ... Population database (population DB), 6 ... Authentication database (authentication DB), 7 ... 1: N Authentication unit, 9 ... Narrowing unit, 10 ... Wireless communication unit, 11 ... Terminal authentication unit, 30 ... Mobile terminal

Claims (6)

A population database that stores the biometric registration data of the user in association with the terminal identification information of the mobile terminal possessed by the user;
A wireless communication unit that receives terminal identification information from a mobile terminal possessed by the user;
A narrowing-down unit that reads out biometric registration data associated with the terminal identification information received by the wireless communication unit from the population database and stores it in the authentication database in association with the terminal identification information;
The authentication database;
A biological sensor,
A 1: N authentication unit that performs 1: N authentication by comparing biometric data acquired from a user by the biometric sensor during user authentication with biometric registration data in the authentication database;
The narrowing-down unit deletes the biometric registration data associated with the terminal identification information from the authentication database when it is determined that the terminal identification information has not been received for a certain period of time.
A biometric authentication device.   The biometric authentication apparatus according to claim 1, wherein the wirelessly connectable area of the wireless communication unit corresponds to an area where a user who can be an authenticated person exists.   The biometric authentication device according to claim 1, further comprising a timer that is activated when the terminal identification information is received and times the predetermined period.   4. The narrowing-down unit, when the wireless communication unit ends wireless communication with a mobile terminal, determines that no terminal identification information has been received for a certain period of time. The biometric authentication device according to item 1. An authentication database generation method for generating an authentication database used for 1: N authentication from a population database that stores user biometric registration data in association with terminal identification information of a mobile terminal possessed by the user. There,
Receiving terminal identification information from a mobile terminal owned by the user;
Reading out biometric registration data associated with the received terminal identification information from the population database and storing it in the authentication database in association with the terminal identification information;
Deleting the biometric registration data associated with the terminal identification information from the authentication database when it is determined that the terminal identification information has not been received for a certain period of time;
An authentication database generation method comprising: A computer program for generating an authentication database used for 1: N authentication from a population database that stores user biometric registration data and terminal identification information of a mobile terminal possessed by the user in association with each other. And
Receiving terminal identification information from a mobile terminal owned by the user;
Reading out biometric registration data associated with the received terminal identification information from the population database and storing it in the authentication database in association with the terminal identification information;
Deleting the biometric registration data associated with the terminal identification information from the authentication database when it is determined that the terminal identification information has not been received for a certain period of time;
A computer program for causing a computer to execute.

Images