JP4319154B2 - User authentication method and user authentication program - Google Patents

Description

  The present invention relates to a user authentication method and a user authentication program used for authenticating a user.

  In a system used by a plurality of users, personal authentication for confirming the identity is used in various places. Usually, authentication is performed by a combination of a user ID and a password, but biometrics authentication technology for performing user authentication using biometric information has been proposed to improve security. This biometrics authentication technology is a technology for authenticating an individual based on human characteristics such as a fingerprint and a retina. Human body information used includes fingerprints, voiceprints, retina patterns, iris patterns, palm vein patterns, and the like. Because biometric information is used, unlike passwords, impersonation and duplication are difficult due to the large amount of information.

  In such an authentication system, a collective recording method in which biometric information (fingerprint pattern data, iris pattern data, etc.) of authorized users is recorded in advance on an IC card is used. A user who wishes to provide a service reads his / her IC card into the IC card reader of the authentication system. Furthermore, the biometric sensor of the authentication system is made to read a fingerprint pattern, an iris pattern, or the like. User authentication is performed by comparing the read image data with the biometric data read by the IC card reader / writer. If the two data match, the user who owns the IC card is determined to be a regular user and the service is provided. On the other hand, if the two do not match, the service provision is refused.

  However, since the biometric information of the authorized user is recorded on the IC card, the biometric information of the authorized user may be leaked from the IC card when the IC card is lost or stolen. Even biometric information is handled as data in a computer, so if the data leaks, it may be possible to impersonate. In addition, when such biometric information is leaked, it cannot be corrected unlike a password or the like. Therefore, even if a third party obtains an IC card illegally, a technique is disclosed that makes it difficult to reproduce the biometric information of a legitimate user, prevents leakage of the biometric information, and protects privacy ( For example, see Patent Document 1.)

In the technique described in Patent Document 1, first divided data that is a part obtained by dividing biometric information of a regular user and a unique ID of the regular user are recorded in advance on the IC card. In the center device, the second divided data and the ID, which are the remaining parts of the divided biological information, are registered in advance. Based on the ID read from the IC card of the specific user, the verification device acquires the second divided data corresponding to the ID from the center device, and reads the acquired second divided data from the IC card. The biometric information of the authorized user is reproduced from the first divided data. And a collation apparatus collates the reproduced | regenerated biometric information and the biometric information read from the user. In the technique described in Patent Document 1 (so-called electronic tally method), since biometric information is divided and recorded, security can be ensured even when some information is leaked.
JP 2002-351844 (FIGS. 2 and 3)

Biometrics authentication technology is based on automatic teller machines (ATMs) of financial institutions.
(Machine) is also being considered for introduction. Currently, an automated teller machine equipped with a verification device provides services by performing verification using biometric information recorded on an IC card type cash card. This method is simple because authentication can be performed only by cooperation between an automatic teller machine and a cash card.

  On the other hand, in order to improve security, when using the technique described in Patent Document 1 described above, cooperation between the collation device and the center device is necessary, and the collation device is divided from the center device and the IC card. Need to get. For this reason, in application to an automatic teller machine, it is necessary to store biometric information divided in a center device, that is, a host system.

  Furthermore, in addition to using an automatic teller machine of a cash card issuing bank, an automatic teller machine of another bank may be used. In this case, it is necessary to link the automatic teller machine of the other bank with the host system of the bank. In addition, the authentication method may differ depending on the financial institution.

  Therefore, there is a possibility that an authentication method for storing all the biometric information in the cash card and an authentication method for storing the divided biometric information are mixed. Even in such a case, it is necessary to reliably perform user authentication in widely used bank services.

  SUMMARY OF THE INVENTION The present invention has been made to solve the above-described problems, and an object of the present invention is to provide a user authentication method and user for authenticating users corresponding to various types of recording media such as cash cards. To provide an authentication program.

  In order to solve the above problem, the invention according to claim 1 divides data related to the user's biometric information to generate first biometric data and second biometric data, and at least the first biometric data, Using a user recording medium stored in association with data relating to a deposit account identifier, user data storage means for recording the second biometric data in association with a deposit account identifier, and a receiving device for receiving the recording medium A method for authenticating a user, wherein the receiving device acquires data relating to a deposit account identifier and biometric data from the recording medium, and only the first biometric data is recorded on the recording medium. If there is a shortage of data for authentication, the second biometric data is obtained from the user data storage means based on the deposit account identifier and stored in the recording medium. When the first and second biometric data are recorded, the second step of acquiring the second biometric data from the recording medium and the first and second biometric data are combined to restore the biometric information The gist includes a third step and a fourth step of acquiring biometric information of the bearer of the recording medium and verifying the user by collating with the restored biometric information.

  The invention according to claim 2 is the user authentication method according to claim 1, wherein the accepting device specifies the location of the user data storage means based on the deposit account identifier read from the recording medium, The gist further includes a step of transmitting a request for the second biometric data to the user data storage means.

  A third aspect of the present invention is the user authentication method according to the first or second aspect, wherein the recording medium further records data relating to a user's public key, and the biometric data recorded on the recording medium Is encrypted with a secret key corresponding to the public key, and the third step is to further decrypt the biometric data using the public key.

The invention according to claim 4 divides the data related to the biometric information of the user to generate the first biometric data and the second biometric data, and stores at least the first biometric data in association with the data related to the deposit account identifier. A program for authenticating a user using a user recording medium, user data storage means for recording the second biometric data in association with a deposit account identifier, and a receiving device for receiving the recording medium. The receiving device has a first means for acquiring data relating to a deposit account identifier and biometric data from the recording medium, and only the first biometric data is recorded on the recording medium, and there is insufficient data for authentication. If there is, the second biometric data is acquired from the user data storage means based on the deposit account identifier, and the first and second biometric data are stored in the recording medium. If recorded, second means for obtaining second biometric data from the recording medium; third means for combining the first and second biometric data to restore biometric information; and The gist is to obtain the biometric information of the owner of the recording medium and collate with the restored biometric information to function as a fourth means for authenticating the user.

  The invention according to claim 5 is the user authentication program according to claim 4, wherein the receiving device specifies the location of the user data storage means based on the deposit account identifier read from the recording medium, The gist further includes means for transmitting a request for second biometric data to the user data storage means.

  A sixth aspect of the present invention is the user authentication program according to the fourth or fifth aspect, wherein the recording medium further records data relating to the public key of the user, and the biometric data recorded on the recording medium Is encrypted with a secret key corresponding to the public key, and the third means further uses the public key to decrypt biometric data.

(Function)
According to the first or fourth aspect of the present invention, when only the first biometric data is recorded on the recording medium and there is a shortage of data for authentication, the accepting device determines the second based on the deposit account identifier. When the biometric data is acquired from the user data storage means and the first and second biometric data are recorded on the recording medium, the second biometric data is acquired from the recording medium. Although the method of recording all the biometric data on the recording medium is easy to authenticate, there is a risk of leakage of the biometric data. On the other hand, the method of recording a part of the divided biometric data on the recording medium (electronic tally method) can reduce the risk of leakage, but it is necessary to provide user data storage means separately. Since the receiving device changes the verification method according to the recording content of the recording medium, user authentication can be performed while both methods coexist.

  According to the invention described in claim 2 or 5, the accepting device specifies the location of the user data storage means based on the deposit account identifier read from the recording medium. In the bank service, there are cases where a cash card of another financial institution is used or an automatic teller machine of another financial institution is used. Even in such a case, user authentication can be performed.

  According to the invention described in claim 3 or 6, since the biometric data recorded on the recording medium is encrypted with the secret key corresponding to the public key, the security can be further improved.

  According to the present invention, user authentication can be performed corresponding to various types of recording media such as cash cards.

  Hereinafter, an embodiment embodying the present invention will be described with reference to FIGS. This embodiment demonstrates as a user authentication method and a user authentication program for performing transaction (cash withdrawal, account transfer, etc.) in an automatic teller machine using a cash card. As shown in FIG. 1, the user authentication method according to the present embodiment is executed in an automatic teller machine 10 as a receiving apparatus using a cash card 50 equipped with an IC chip 51 as a recording medium.

  As shown in FIG. 2, the automatic teller machine 10 includes a control computer 11 and is connected to a host system 20 via a network. The control computer 11 has a CPU, a RAM, a ROM, and the like (not shown), and performs processing described later (processing including a first stage, a second stage, a third stage, a fourth stage, and the like). By executing the user authentication program for this purpose, the automatic teller machine 10 functions as a first means, a second means, a third means, a fourth means, and the like.

  Further, as shown in FIG. 2, the automatic teller machine 10 includes a touch panel display 12, a cash storage unit 13, a cash card insertion unit 14, a transaction statement output unit 15, and a biosensor unit 16. Via the touch panel display 12, information is displayed to the user or an instruction is received from the user. The cash accommodating part 13 delivers banknotes and coins to and from the user. The cash card insertion unit 14 accommodates a user's cash card and acquires various information from the cash card 50. The transaction statement output unit 15 outputs a transaction statement.

  The biosensor unit 16 extracts features of a specific part of the user's human body and generates image data. In this embodiment, the palm of the user is photographed using near infrared rays, and the vein pattern of the palm is extracted. Thereby, biometrics authentication is performed.

  On the other hand, the IC chip 51 of the cash card 50 has a memory area in which data for user authentication is stored. Specifically, as shown in FIG. 3, user authentication data related to a deposit account identifier, encrypted biometric information, and a public key is recorded in the memory area. This user authentication data is recorded when the user's cash card 50 is created.

  In the deposit account identifier data area, data relating to an identifier for identifying the deposit account of the authorized user of the cash card 50 is recorded. In the present embodiment, the deposit account identifier includes data related to a branch, a deposit item, and an account number.

  Data related to biometric information for biometric authentication is recorded in the encrypted biometric information data area. In this embodiment, in order to perform biometric authentication using a palm vein pattern, data obtained by encrypting the user's vein pattern with the user's private key is recorded in the encrypted biometric information data area. In this embodiment, the vein pattern is encrypted and divided into first biological data and second biological data based on a predetermined division rule. As the division rule, for example, there is a method of dividing for each specific number of bits. Depending on the type of the cash card 50, the first biometric data and the second biometric data may be recorded in the encrypted biometric information data area, or only the first biometric data may be recorded.

  In the public key data area, data relating to a key for performing decryption using a public key cryptosystem is recorded. The encrypted biometric information and the public key are used for identity verification (user authentication) when performing a banking process using the cash card 50.

  The automatic teller machine 10 is connected to the host system 20 via the bank network. The host system 20 includes a management computer 21. The management computer 21 has a CPU, a RAM, a ROM, and the like (not shown), and performs processing described later.

Furthermore, the host system 20 includes a deposit account data storage unit 22 as user data storage means. The deposit account data storage unit 22 stores deposit account data 220 relating to the user's deposit account. This deposit account data 220 is generated when a user opens a deposit account. Specifically, as shown in FIG. 4, the deposit account data 220 includes data relating to a deposit account identifier and an account balance. When the host system 20 is compatible with the electronic tally method, the deposit account data 220 is further configured to include second biometric data.

  In the deposit account identifier data area, data relating to an identifier for identifying the opened deposit account is recorded. In the present embodiment, the deposit account identifier includes data related to a branch, a deposit item, and an account number.

Data relating to the balance of the deposit account is recorded in the account balance data area.
In the second biometric data area, data relating to biometric information for biometric authentication of the holder of the deposit account is recorded. In the present embodiment, the remaining data (second biometric data) corresponding to the first biometric data recorded on the cash card 50 is recorded in the second biometric data area.

  The host system 20 is connected to the other bank host system 30 or another bank's automatic teller machine 10 via an interbank network (for example, a network of a known integrated ATM switching service). Accordingly, the user can use the automatic teller machine 10 of the other bank or use the cash card 50 of the other bank.

(Authentication process)
Next, authentication processing when the user uses the cash card 50 will be described with reference to FIG.

  First, the user inserts the cash card 50 into the cash card insertion unit 14 of the automatic teller machine 10. In this case, the control computer 11 of the automatic teller machine 10 acquires the data stored in the IC chip 51 of the cash card 50 (step S1-1). Specifically, the cash card insertion unit 14 reads data relating to the deposit account identifier, the encrypted biometric information, and the public key recorded in the IC chip 51 and provides this data to the control computer 11.

  Then, the control computer 11 confirms the integrity of the biological information acquired from the IC chip 51 (step S1-2). Here, the control computer 11 checks whether or not the encrypted biometric information read from the IC chip 51 includes the first and second biometric data. The biometric information is complete when the read encrypted biometric information includes the first and second biometric data, but the biometric information is not complete when only the first is included in the encrypted biometric information.

  If the biometric information acquired from the IC chip 51 is not complete (in the case of “NO” in step S1-2), the control computer 11 of the automatic teller machine 10 transmits an authentication request to the host system 20 via the network ( Step S1-3). This authentication request includes data related to the deposit account identifier acquired by the automatic teller machine 10. In this case, the control computer 11 determines the transmission destination of the authentication request based on the deposit account identifier. Specifically, when the deposit account identifier is a bank account of the bank, the information is transmitted to the host system 20 of the bank. When the deposit account identifier is a bank account of another bank, the bank account is transmitted via the inter-bank network. To the other host system 30.

  The management computer 21 of the host system 20 that has received the authentication request specifies the second biometric data (step S1-4). Specifically, the management computer 21 searches the deposit account data storage unit 22 using the deposit account identifier included in the authentication request.

  Then, the management computer 21 specifies the deposit account data 220 including the deposit account identifier, and the second biometric data included in the deposit account data 220 is sent to the automatic teller machine via the bank network (or interbank network). 10 (step S1-5).

  Then, the control computer 11 of the automatic teller machine 10 combines and restores the first biological data acquired from the IC chip 51 and the second biological data acquired from the host system 20 (or the other host system 30). (Step S1-6). In this case, both are combined in accordance with a specific division rule when the division is performed.

  Even when the acquired biological information is complete (in the case of “YES” in step S1-2), the control computer 11 combines the first biological data and the second biological data acquired from the IC chip 51. Restore.

  Then, the control computer 11 of the automatic teller machine 10 decrypts the encrypted biometric information (step S1-7). Specifically, the control computer 11 uses the public key acquired from the IC chip 51 of the cash card 50 to decrypt the combined encrypted biometric data.

  Next, the automatic teller machine 10 acquires biometric information of the bearer of the cash card 50 (step S1-8). In this case, first, the control computer 11 requests biometric information of the user of the automatic teller machine 10. In the present embodiment, the control computer 11 outputs an instruction “hold the palm over the biometric sensor unit” to the touch panel display 12. The biosensor unit 16 that detects the palm of the bearer of the cash card 50 reads the vein pattern.

  The control computer 11 of the automatic teller machine 10 verifies whether the biometric information read from the bearer of the cash card 50 matches the decrypted biometric information (step S1-9).

If they do not match (in the case of “NO” in step S1-9), the control computer 11 of the automatic teller machine 10 rejects the transaction with this user (step S1-10).
On the other hand, when both match (in the case of “YES” in step S1-9), the control computer 11 transmits a transaction request to the host system 20 via the in-line network (step S1-11). Specifically, first, the control computer 11 uses the touch panel display 12 of the automatic teller machine 10 to prompt the user to input transaction details. Specifically, a transaction menu screen is output to the touch panel display 12, and each input screen is expanded based on the selected transaction type (for example, cash withdrawal, account transfer, balance inquiry, etc.), and the transaction request content is specified. To do. Then, the identified transaction request is transmitted to the host system 20 via the intra-bank network.

  The management computer 21 of the host system 20 that has received this transaction request executes the specified transaction (step S1-12). This process is executed in the same manner as a known transaction process in a bank.

  The same processing is performed when the automated teller machine 10 of another bank is used. In this case, the management computer 21 of the host system 20 transmits / receives data to / from the automated teller machine 10 of another bank using the interbank network.

According to this embodiment, the following effects can be obtained.
According to the present embodiment, user authentication data including encrypted biometric information is recorded on the IC chip 51 of the cash card 50. In order to perform biometric authentication using the palm vein pattern, data obtained by encrypting the vein pattern of the user with the secret key of the user is recorded in the encrypted biometric information data area. Here, the vein pattern is encrypted and divided into first biological data and second biological data. Depending on the type of the cash card 50, there are a case where the first biometric data and the second biometric data are recorded, and a case where only the first biometric data is recorded. The control computer 11 confirms the integrity of the biological information acquired from the IC chip 51 (step S1-2). If the biometric information acquired from the IC chip 51 is not complete, the control computer 11 of the automatic teller machine 10 transmits an authentication request to the host system 20 via the network (step S1-3). On the other hand, when the biological information acquired from the IC chip 51 is complete, the control computer 11 combines the first biological data and the second biological data acquired from the IC chip 51. Thereby, it is possible to cope with a case where a batch recording method and an electronic tally method coexist.

  According to this embodiment, the control computer 11 combines the first biometric data acquired from the IC chip 51 and the second biometric data acquired from the host system 20 to obtain biometric information for performing biometric authentication. Restore and authenticate yourself. For this reason, the biometric information stored in the cash card 50 is only a part. Therefore, complete biometric information cannot be acquired unless the remaining biometric information is acquired. In the case of information encryption, if an encryption key can be found, it can be decrypted. However, by using an electronic tally method, biometric information security that cannot be replaced can be enhanced, and at the same time, personal authentication can be performed.

  According to the present embodiment, when the first biometric data and the second biometric data are recorded on the IC chip 51 of the cash card 50, the control computer 11 uses the first biometric data acquired from the IC chip 51 and the second biometric data. Combining biometric data completes biometric information for biometric authentication. Accordingly, even when the biometrics authentication data that has been divided is not recorded in the deposit account data storage unit 22 of the host system 20, the personal authentication is performed using the data recorded on the IC chip 51 of the cash card 50. be able to.

  According to the present embodiment, data obtained by encrypting the user's biometric information with the user's private key is recorded in the encrypted biometric information data area of the IC chip 51 of the cash card 50. When the cash card 50 is used, the control computer 11 of the automatic teller machine 10 decrypts the encrypted biometric information using the user's public key. For this reason, the identity of the user can be confirmed by the public key.

In addition, you may change each said embodiment as follows.
In the above embodiment, a palm vein pattern is used as biometric authentication. The biometric information used for biometric authentication is not limited to this, and may be a fingerprint, a voiceprint, a retina pattern, an iris pattern, or the like as long as it can be divided.

  In the above embodiment, the vein pattern as biometric information is encrypted and divided into first biometric data and second biometric data. Instead, the biometric information may be divided into the first biometric data and the second biometric data and then encrypted. In this case, when decoding, the acquired first biometric data and second biometric data are combined after being decoded. Thereby, it is possible to determine whether or not the biometric information is complete at the stage of decoding one of the data.

In the above embodiment, the control computer 11 confirms the integrity of the biometric information depending on whether the encrypted biometric information read from the IC chip 51 includes the first and second biometric data. Alternatively, the determination may be made based on the data amount of the read encrypted biometric information. For example, when only the first biometric data is recorded, the amount of data is small. In this case, an authentication request is transmitted to the host system 20.

  In addition, once the biometrics authentication is performed using the read encrypted biometric information and the authentication cannot be performed, an authentication request may be transmitted to the host system 20.

The system schematic of embodiment of this invention. Explanatory drawing of an automatic teller machine. Explanatory drawing of the data recorded on the IC chip of the cash card. Explanatory drawing of the data recorded on the deposit account data storage part. Explanatory drawing of the process sequence of this embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 ... Automatic teller machine as reception apparatus, 11 ... Control computer, 20 ... Host system, 21 ... Management host computer, 22 ... Deposit account data storage part as user data storage means, 30 ... Other host system, 50 ... Cash card, 51... IC chip as a recording medium.

Claims (6)

A user recording medium that divides data related to the biometric information of the user to generate first biometric data and second biometric data, and stores at least the first biometric data in association with data related to the deposit account identifier;
User data storage means for recording the second biometric data in association with a deposit account identifier;
A method of authenticating a user using a receiving device that receives the recording medium,
The reception device is
A first step of acquiring data relating to a deposit account identifier and biometric data from the recording medium;
When only the first biometric data is recorded on the recording medium and there is a lack of data for authentication, the second biometric data is acquired from the user data storage means based on the deposit account identifier,
When the first and second biometric data are recorded on the recording medium, a second step of acquiring the second biometric data from the recording medium;
A third step of combining the first and second biometric data to restore biometric information;
A user authentication method, comprising: a fourth step of acquiring biometric information of the owner of the recording medium and verifying the user by collating with the restored biometric information.   The receiving device further includes the step of identifying the location of the user data storage means based on the deposit account identifier read from the recording medium, and transmitting a request for the second biometric data to the user data storage means. The user authentication method according to claim 1, further comprising: The recording medium further records data relating to the user's public key,
The biometric data recorded on the recording medium is encrypted with a secret key corresponding to the public key,
The user authentication method according to claim 1 or 2, wherein the third step further uses the public key to decrypt the biometric data. A user recording medium that divides data related to user biometric information to generate first biometric data and second biometric data, and stores at least the first biometric data in association with data related to a deposit account identifier;
User data storage means for recording the second biometric data in association with a deposit account identifier;
A program for authenticating a user using a receiving device for receiving the recording medium,
The accepting device;
First means for obtaining data relating to a deposit account identifier and biometric data from the recording medium;
When only the first biometric data is recorded on the recording medium and the data for authentication is insufficient, the second biometric data is acquired from the user data storage means based on the deposit account identifier,
When the first and second biometric data are recorded on the recording medium, second means for acquiring the second biometric data from the recording medium;
A third means for combining the first and second biometric data to restore biometric information;
A user authentication program that acquires biometric information of a carrier of the recording medium and collates with the restored biometric information to function as a fourth means for authenticating the user. Means for specifying the location of the user data storage means on the basis of the deposit account identifier read from the recording medium and transmitting a request for second biometric data to the user data storage means; The user authentication program according to claim 4, further comprising: The recording medium further records data relating to the user's public key,
The biometric data recorded on the recording medium is encrypted with a secret key corresponding to the public key,
6. The user authentication program according to claim 4, wherein the third means further decrypts the biometric data using the public key.

Images