JP5355502B2 - Biological information lending system and biometric information lending method - Google Patents

Description

  The present invention relates to a biometric information lending system and a biometric information lending method.

  In the field of personal authentication technology, it has been studied to provide a data bank that can be accessed at a desired time via a communication line with a personal data storage function and a personal data transaction market function.

  Patent Document 1 describes an online data bank system that accesses storage means storing data via a communication network.

  Patent Document 2 describes that a specific fingerprint that has been compared and photographed is transferred for identification to a data bank in which a large number of digital fingerprints whose feature points on the digital image of the fingerprint have been specified are registered. ing.

  In Patent Literature 3, biometrics information registered by a qualifier and information related to qualification are stored in the database of the biometrics qualification data bank in association with each other, and the biometric information and biometrics transmitted from the registrant terminal are stored. The document describes that biometric information stored in a database of a metrics qualification data bank is collated, a biometric qualification is searched, and a search result is transmitted to a client terminal.

JP 2002-288357 A JP-T-2006-505859 JP 2002-351842 A

  When performing personal authentication using biometric information, usually biometric information is registered for each terminal, and when performing personal authentication, personal authentication is performed by comparing the input biometric information with the registered biometric information. The According to this means, it is necessary to register biometric information for each terminal to be used, which is not only laborious, but if the biometric information of the person is not pre-registered in the terminal, naturally personal authentication is performed. I can't.

  If individual biometric information is stored in the biometrics bank at once, registration for each terminal is not necessary. However, the centralized management system that performs verification using the biometrics bank system and sends the results to the client terminal increases the size of the device. Not only does it, but it does not allow for quick personal authentication.

  In view of this point, the present invention provides that a biometric information registrant once registers his / her biometric information in a data bank, and when the facility requires personal authentication, an electronic terminal operated by a facility user is stored in the biometric information bank. The purpose is to request and obtain the registered biometric information of the registrant, and compare and collate the biometric information entered on the electronic terminal with the requested registered biometric information so that personal authentication can be performed promptly. And

  The present invention uses customer ID information received via communication means, customer biometric information associated with the customer ID information, and biometric information associated with the customer ID information at an electronic terminal for user authentication. A database that stores a user code assigned to the customer, a biometric information including customer ID information from the customer information registration electronic terminal, biometric information associated with the customer ID information, and an authentication log from the user authentication electronic terminal Biological information provided with a biometric information bank computer having receiving means for accepting an information lending request, biometric information lending operation means, and biometric information communication means for transmitting lending biometric information to the user authentication electronic terminal via communication means In the lending system, the biometric information lending operation means is configured to provide a customer I based on the customer ID information received in the user code. The biometric information associated with the information is accumulated, the biometric information is retrieved from the user code, and the biometric information is identified with respect to the customer ID information. The lending qualification is given to the identified biometric information. Lending instruction processing is performed on the identified biometric information when the user is on the phone, charging processing is performed on the electronic terminal being operated by the user along with lending, and the lending status of the biometric information including charging is recorded in the user code Biometric information operation means, wherein the biometric information transmission means receives the lending instruction and transmits the biometric information to the user authentication electronic terminal being operated by the user in association with the customer ID information. And

  In the biometric information lending system, the biometric information lending operation unit includes a cancelable template generation unit that generates a cancelable template composed of biometric information temporarily used based on the lending biometric information. .

  In the biometric information lending system, the biometric information stored in the user code is at least a customer's vein pattern, fingerprint, voiceprint, iris, face, retinal pattern, skin electrical resistance, handwriting, handprint, keystroke pattern, or DNA. It is characterized by including one.

  In the biometric information lending system, a plurality of types of biometric information of the customer are recorded in one user code, and the arithmetic processing unit searches for at least one biometric information in response to a request from the user authentication electronic terminal. The biometric information operation means transmits at least one piece of biometric information to the user authentication electronic terminal for lending, and records the lending status of each lent biometric information in the user code.

  Further, the customer ID information received via the communication means, the customer biometric information associated with the customer ID information, and the biometric information associated with the customer ID information are used in the user authentication electronic terminal. Lending of biometric information including a database for storing a user code assigned to the customer ID, customer ID information from the customer information registration electronic terminal, biometric information associated with the customer ID information, and an authentication log from the user authentication electronic terminal Biological information lending provided with a biometric information bank computer having receiving means for accepting a request, biometric information lending operation means, and biometric information information communication means for transmitting lending biometric information to the user authentication electronic terminal via communication means In the biometric information lending method according to the system, the calculation processing means of the biometric information lending operation means includes a user code Based on the attached customer ID information, biometric information associated with the customer ID information is accumulated, the biometric information is retrieved from a user code, and the biometric information is identified with respect to the customer ID information. The operation means performs lending instruction processing of the identified biometric information when lending qualification is given to the identified biometric information, performs charging processing on the electronic terminal for user authentication along with lending, The biometric information lending status including the processed billing is recorded in the user code, and the biometric information transmitting means receives the lending instruction, associates the biometric information with the customer ID information, and the user authentication electronic terminal. It is characterized by transmitting to.

  Furthermore, in the biometric information lending method, the biometric information lending operation unit generates a cancelable template including biometric information that is temporarily used based on the lending biometric information.

  Furthermore, in the biometric information lending method, the biometric information stored in the user code is at least a customer's vein pattern, fingerprint, voiceprint, iris, face, retinal pattern, skin electrical resistance, handwriting, handprint, keystroke pattern or DNA. It is characterized by including one.

  Further, in the biometric information lending method, the plurality of biometric information of the customer is recorded in one user code, and the arithmetic processing means searches for at least one biometric information in response to a request from the electronic terminal for user authentication. The biometric information operation means transmits at least one piece of biometric information to the user authentication electronic terminal, performs lending, and records the lending status of each lending biometric information in the user code.

The present invention provides an electronic device for user authentication that is operated by a user of a facility when a request is made when personal authentication is required at the facility or the like by registering the biometric information of the customer once from any electronic terminal in the biometric information bank. The terminal obtains the biometric information bank by requesting the lending of the registered biometric information of the registered customer, and compares the biometric information input by the user authentication electronic terminal with the registered biometric information that has been lent. Authentication can be performed promptly, and personal authentication can be performed very conveniently for registered biometric customers. Further, for a banker operating a biometric information bank, personal biometric information acquired by contract can be used as a resource in the transaction market.
In addition, since the biometric information is not used unless there is information on the establishment reservation of the facility or the like, the biometric information is not stolen against an attack from outside the system, and the security of the system is improved.

Explanatory drawing which shows the basic concept of the Example of this invention The block diagram which shows the detail of the Example of this invention The block diagram which shows the detail of each block of FIG. Explanatory diagram showing database management items of finger vein bank data center Explanatory diagram showing database management items of finger vein bank data center Explanatory diagram showing database management items of finger vein bank data center Flow diagram of finger vein information registration process Flow diagram of conversion template re-conversion processing Flow diagram of conversion template conversion process for one-time conversion Finger vein authentication terminal setting process flow diagram Flow chart of finger vein information lending and authentication processing

  Embodiments of the present invention will be described below with reference to the drawings.

Examples of biological information that can be used in the present invention include vein patterns such as finger veins, fingerprints, voiceprints, irises, faces, retinal patterns, skin electrical resistance, handprints, keystroke patterns, and DNA. Hereinafter, a finger vein pattern (referred to as a finger vein) will be described as an example, but it can also be applied to other biological information, and can be used by combining several pieces of biological information.
[Basic system configuration]
FIG. 1 shows an outline of a finger vein information lending system 100 according to an embodiment of the present invention. In FIG. 1, a finger vein information lending system 100 is configured by connecting a finger vein bank 1, a customer 2, a contract company 3 for temporary use such as a hotel, a contract company 4 for entrance / exit management, and an agency 5. Is done. Reference numeral 6 denotes a finger vein pattern, and 7 denotes a rental template including customer biometric information to be lent.

  FIG. 1 illustrates a case where a customer uses the contract company 3 for temporary use such as a hotel and a case where the customer uses the contract company 4 continuously for entrance / exit management. Figure 1 shows the flow of temporary use, customer behavior and value, and finger vein pattern and registration, facility use application, loan request, keyless entry, entry / exit log, authentication and contract payment and point grant Yes.

  The customer 2 who wishes to use the facility registers the finger vein pattern 6 in the finger vein bank 1 in advance in the finger vein lending system 100 by contract. Next, the customer 2 applies to the agency 5 when using the specific facility. The agency 5 requests the finger vein bank 1 to lend biometric information in response to a customer request. In response to this, the finger vein bank 1 sends the biometric information of the customer 2 in the form of a rental template 7 to the contract company 3 such as a hotel that the customer 2 desires to use.

  Next, when the customer 2 performs biometric authentication with the finger vein pattern 6 at the contract company 3, the authentication is quickly performed based on the rental template 7, and keyless entry is realized. Next, a predetermined contract money is paid from the contract company 3 to the finger vein bank 1, and points are given from the finger vein bank 1 to the customer 2.

  The same applies to the case where the customer 2 uses the contract company 4. In this case, the rental template 7 is prepared for the number of all employees and is lent over a long period of time. Entry / exit log information is sent from the finger vein bank 1 to the contracting company 4, and employee entry / exit management is executed.

FIG. 2 is a block diagram specifically showing the concept in FIG. The finger vein bank 1 has a finger vein information bank computer 11. The customer 2 has an electronic terminal 12 for customer information registration for customer ID and finger vein registration, the contract company 3 such as a hotel has an electronic terminal 13 for user authentication, and the contract company 4 for entrance / exit management is The user authentication electronic terminal 14 is provided, and the agency 5 includes an agency electronic terminal 15. In FIG. 2, the finger vein bank computer 11 is connected to the customer information registration electronic terminal 12 via the network 16, and is connected to the user authentication electronic terminals 13 and 14 and the agency electronic terminal 15 via the network 17. Tied. The network 16 and the network 17 may be one network.
[Registration Center]
The registration center 12A includes a plurality of electronic terminals 12 for registering customer information. Each electronic terminal 12 for registering customer information has a finger vein registration sensor 31 and a finger vein registration terminal 32. The finger vein registration sensor 31 acquires and registers the finger vein pattern of the customer 2 and transmits it to the finger vein registration terminal 32. Data processing is performed by the template creation processing unit 33 and the template conversion processing unit 34, and processing is performed by the randomized template creation processing unit 35 to generate customer finger vein information encrypted by random processing. Also, customer ID information is acquired as electronic information as the customer's personal information 36.

The generated finger vein information of the customer and the acquired customer ID information are transmitted to the finger vein bank computer 11 via the network 16. This transmission is made with the customer's consent as in the normal banking system. The customer 2 obtains various merits by registering his / her customer ID information and finger vein information in the finger vein bank 1, but the operation is performed with sufficient secrecy.
[Finger vein bank computer]
A data center 11 </ b> A is configured in the finger vein bank computer 11. The data center 11A has a biometrics bank server 53, which includes customer ID information from the electronic terminal 12 for registering customer information, finger vein information associated with the customer ID information, and an electronic terminal 13 for user authentication. Receiving means 41 for accepting a lending request including an authentication log from 14, finger vein information lending operation means 42, finger vein information transmitting means 43, alarm processing means 46, area monitoring processing means 47, effective time monitoring processing means 48, One-time template processing means 49 and template randomization processing means 50 are provided.

  The biometrics bank server 53 includes a personal information database 51 and a finger vein information database 52. The finger vein information database 52 stores the randomized template 54 as data. The databases 51 and 52 conclude with the user customer ID information received via the network 16, customer finger vein information associated with the customer ID information, and finger vein information usage agreement at the user authentication electronic terminal 13. User code (user's specific account). The personal information database 51 and the finger vein information database 52 also store data including data for alarm processing, area monitoring processing, one-time template processing, and template rerandomization processing. A randomized template 55 is generated from the finger vein information generated by the biometrics bank server 53 and attached to the personal information 56.

  The finger vein information lending operation unit 42 includes a calculation processing unit 44 and a finger vein information operation unit 45. The arithmetic processing means 44 of the finger vein information lending operation means 42 accumulates the finger vein information associated with the customer ID information based on the received customer ID information in the user code. Further, as a result of the search based on the user code, finger vein information is identified for the customer ID information.

  Also, the finger vein information operating means 45 performs a lending instruction process when the identified finger vein information is given the lending qualification and stored in the finger vein database 52, and the user authentication electronic terminal is accompanied with the lending. Charge processing for charging 13 and 14 is performed, and the lending status of finger vein information including the processed charge is recorded in the user code.

  The alarm processing means 46 generates an alarm signal when there is a risk of lending operation due to unauthorized access, and issues a warning to stop the lending operation.

  The area monitoring means 47 acquires the latitude and longitude from the GPS, monitors whether or not the finger vein information is used within a predetermined area, and cannot be used as an unauthorized use when used outside the area monitoring area. Communicate that there is.

  The valid time monitoring processing means 48 monitors the valid time of the generated one-time template. The valid time may be one week, one day, or one hour, and the valid time is set by a predetermined process in accordance with a request from a customer or a request from a user.

  The one-time template processing means 49 performs processing to change the template every time and perform personal authentication. In other words, every time user authentication is performed, it is impossible for a third party to steal finger vein information so that a valid template changes. This is called a cancelable template in this embodiment.

The template rerandomization process 50 is a means for performing a template rerandomization process, and can change template information obtained by digitizing a finger vein pattern for authentication.
[Electronic terminal for user authentication]
Among the plurality of user authentication electronic terminals, for example, the user authentication electronic terminal 13 includes a reception finger vein authentication terminal 60, an accommodation room finger vein authentication terminal 61, and a service room finger vein authentication terminal 62. The electronic terminal 13 for user authentication transmits the authentication log 64 to the finger vein bank computer 11 via the network 17 to request the lending of finger vein information, and the personal information transmitted from the finger vein bank computer 11 as a result of the request. An input / output device (not shown) for inputting information (customer ID information) and a randomized template attached thereto is provided.

  Further, the user authentication electronic terminal 13 includes a biometrics server 63. The biometrics server 63 includes a personal information database 65 and a finger vein database 66, and the finger vein database 66 stores a randomized template 67. In addition, the biometrics server 63 includes an authentication log creation processing unit 68 and a randomized template delivery processing unit 69, creates the authentication log 64, and delivers the randomized template 67 in the hotel. The authentication log 64 is used when a rental request is made.

  When the customer 2 accepts the reception finger vein authentication terminal 60 at the front of the contracted hotel 3, the user authentication electronic terminal 13 attaches the authentication log 64 to the finger vein bank computer 11 based on the acceptance information, and the customer 2 Request lending of finger vein information.

Prior to these procedures, as outlined in FIG. 1, the customer 2 applies for the facility to the electronic terminal 15 of the agent of the agent 5 using a mobile phone or the like. In the case of this example, an application for accommodation is made to the contracted hotel 3, and if there is a request for loaning finger vein information from the contracted hotel 3 to the finger vein bank 1, it is negotiated with the agent 5 in advance to request the loan. This agreement may be applied to individual application cases or may be applied to all application cases within a predetermined range.
[Lending finger vein information]
In this way, when the user authentication electronic terminal 13 requests the finger vein bank computer 11 for the finger vein information of the customer 2, as described above, the calculation of the finger vein information lending operation means 42 of the data center 11A. Based on the received customer ID information, the processing means 44 accumulates finger vein information associated with the customer ID information in the user code, searches from the user code, and designates the specified customer ID information. Identify vein information.

  Further, the finger vein information operating means 45 performs lending instruction processing by assigning lending qualification to the finger vein information when the identified finger vein information is granted lending qualification and stored in the finger vein database 52, A charging process for charging the user authentication electronic terminals 13 and 14 with the lending is performed, and the lending status of the finger vein information including the processed charging is recorded in the user code.

  The finger vein information transmitting unit 43 receives the lending instruction and transmits the finger vein information to the user authentication electronic terminal 13 in association with the customer ID information. In this way, finger vein information is lent out. The finger vein biometric information lending operation means 42 generates a randomized template 55 based on the finger vein information to be lent.

  When the personal information 56 and the randomized template 55 associated with the personal information 56 are input to the user authentication electronic terminal 13, these pieces of information are stored in the personal information database 65 and the finger vein information database 66 of the byte metrics server 63, respectively. Registered as a template 67. Next, the customer's finger vein information received by the reception finger vein authentication terminal 60 is compared with the finger vein information stored in the database 66 of the biometrics server 63 to authenticate the customer and confirm the identity.

  The randomized template distribution processing means 69 distributes the randomized template 67 to the accommodation room finger vein authentication terminal 61 and the service room finger vein authentication terminal 62 attached to the accommodation rules in the hotel. This distribution is performed within a time based on a command from the user authentication electronic terminal 13.

  The customer 2 goes in front of the assigned accommodation room and places the finger on the accommodation room finger vein authentication terminal 61 to collect the finger vein information, and the rental is registered in the accommodation room finger vein authentication terminal 61. The finger vein information is compared, and if it is determined that they are the same, the key of the accommodation room is unlocked and the room can be entered. The service delivery using the service room is similarly performed by using the service room finger vein authentication terminal 62.

  Next, the user authentication electronic terminal 14 is configured in the same manner as the user authentication electronic terminal 13, and is a finger vein authentication terminal corresponding to the work of the contract company (entrance / exit management contracted company) 4, for example, a plurality of security terminals. The finger vein terminal 70 is installed inside, and finger vein authentication is performed in the same manner as described above.

  As shown in FIG. 1, the electronic terminal 15 of the agency receives an application for facility use from the customer 2, makes a finger vein lending request to the finger vein lending system of the finger vein bank 1, and sends the finger vein information to the facility. The finger vein information is lent to the electronic terminal.

  In FIG. 1, when the lending template 7 is lent to a user such as the contract company 3 or the entry / exit management contract company 4 together with the entry / exit log, the finger vein information operation means 45 of the finger vein information lending operation means 42 is accompanied by lending. Then, a billing process for billing the customer 2, that is, the user authentication electronic terminals 13 and 14 based on the contract is performed, and the finger vein lending status including the processed billing is recorded in the user code. Points are given to the customer 2 corresponding to the number of times the rented finger vein information is used and recorded in the user code of the customer 2.

The finger vein bank 1 has a function as biometric qualification data. In the biometrics qualification information database (not shown) in the database, biometric information registered by the customer 2 who is the qualification acquirer and information related to the acquired material are stored in association with each other.
[Data processing function]
FIG. 3 is a block diagram showing details of the processing contents of FIGS. 1 and 2. 3, the finger vein lending system 100 includes a customer information registration electronic terminal 12, a finger vein bank computer 11, and user authentication electronic terminals 13 and 14 as in FIG.

  In the customer information registration electronic terminal 12, the finger vein information acquisition unit 110 acquires the finger vein information of the customer 2. The finger vein feature extraction unit 120 extracts finger vein features from the acquired finger vein information. The template conversion means 130 converts the extracted finger vein feature into a finger vein template.

  The personal information acquisition unit 160 acquires customer ID information, which is personal information, by an ID number, key input, or the like. The generated template and the acquired customer ID information are sent to the conversion template sending means 140 and sent to the finger vein bank computer 11. Reference numeral 150 denotes conversion parameter acquisition means.

  Next, the finger vein bank computer 11 includes a finger vein information management server 201, an authentication terminal management server 202, a personal information management server 203, and a finger vein information lending operation server 204. The template management unit 210 of the finger vein information management server 201 receives a conversion template from the customer information registration electronic terminal 12. The template received by the template management unit 210 is stored in the authentication terminal database 270 of the authentication terminal management server 202, and the personal information is stored in the personal information database 300 of the personal information management server 203.

  When a finger vein information lending request is set by the authentication terminal setting means 310 of the user authentication electronic terminals 13 and 14, the request is sent together with the authentication log 64 shown in FIG. 2 and the finger vein information lending operation of the finger vein bank computer 11 is performed. It is transmitted as a command signal to the finger vein information operating means 45 of the server 204.

  As described above, the arithmetic processing unit 44 instructs the template management unit 210 to store the received customer personal information and finger vein information associated with the personal information in the personal information database 300 and the conversion template database 230, respectively. doing. The arithmetic processing means 44 searches based on the customer personal information received by the authentication terminal setting means 310 using the personal information management means 290 and the authentication terminal management means 280 from the user code associated with the personal information, As a result of the search, the conversion parameter creating means 260 is identified as finger vein information for the personal information.

  The finger vein information operation unit 45 activates the personal information management unit 290 and the authentication terminal management unit 280 to search the calculation processing unit 44 for the personal information and finger vein information stored in the personal information database 300 and the authentication terminal database 270. Let

  The conversion parameters are stored in the conversion parameter storage means 250 and are also transmitted to the conversion parameter acquisition means 150 of the customer information registration electronic terminal 12 for use in template conversion in the template conversion means. The reconversion means 240 reconverts the conversion parameter and stores it as a conversion template in the conversion template database 230.

  The template management unit 210 causes the one-time reconversion unit 220 to perform a one-time reconversion process on the conversion template stored in the conversion plate database 230 based on the conversion parameter stored in the conversion parameter storage unit.

  In the user authentication electronic terminals 13 and 14, the one-time reconverted conversion template is temporarily stored in the conversion template temporary storage unit 390. The personal information acquisition means 320 of the user authentication electronic terminals 13 and 14 acquires the personal information via the ID number and terminal key input. The acquired personal information is temporarily stored in the conversion template temporary storage means. The conversion parameter creation means 330 is normally activated, and the conversion parameters are stored in the conversion parameter storage means 340 and transmitted to the one-time reconversion means in the stored conversion parameters.

  In this way, in the biometrics bank server 53, the arithmetic processing means 44 of the finger vein information lending operation means 42 uses the finger code associated with the customer ID information based on the received customer ID information in the user code. The vein information is accumulated and searched from the user code. As a result of the search, finger vein information is identified for the customer ID information.

  Also, the finger vein information operating means 45 grants the lending qualification to the finger vein information when the identified finger vein information is stored in the finger vein database 52 that the lending qualification is granted. A vein information lending instruction process is performed, a charging process is performed for charging the user authentication electronic terminals 13 and 14 along with the lending, and the lending status of the finger vein information including the processed charging is recorded in the user code.

In the user authentication electronic terminals 13 and 14, the finger vein information acquisition unit 350 acquires finger vein information, the finger vein feature extraction unit 360 extracts the finger vein feature, and the template vein conversion unit 370 extracts the finger vein feature. And template conversion using conversion parameters. The collation unit 380 collates the conversion template temporarily stored and the conversion template transmitted from the template conversion unit 370 at the information level converted from each other. The display unit 410 receives the instruction from the authentication terminal setting unit 310 and displays the collation result as an image. The verification result is transmitted to the devices 400 and recorded in the authentication terminal base 270 of the finger vein bank computer 11 by the authentication terminal management unit 280.
[Database management items]
4A to 4C show database management items, FIG. 4A shows biometric information database management items, FIG. 4B shows an authentication terminal database item, and FIG. 4C shows personal information database items.
[Personal information registration process]
5 to 9 are flowcharts relating to the processing contents of each block in the block diagram of FIG. FIG. 5 shows a finger vein information registration processing flowchart. In FIG. 5, the personal information acquisition unit 160 instructs the personal information management unit 290 to assign a new customer ID (S11). The personal information acquisition means 160 acquires a new customer ID (S12). The personal information acquisition means 160 selects a method for inputting the registrant's ID number (S13). One of them obtains the registrant ID number with an IC card or a mobile phone (S14), and the other one obtains the password determined by the registrant (S15). The finger vein information acquisition unit 110 inputs finger vein information (S16). The finger vein feature extraction unit 120 extracts the features of the finger vein information (S17). The template conversion unit 130 converts the characteristics of the finger vein information (S18). The conversion template transmission unit 140 sends the customer ID and the conversion template to the template management unit 210 (S19). The template management unit 210 registers the conversion template in the conversion template database 230 (S20). The template management unit 210 sends the customer ID, ID number, and personal information to the personal information management unit 290 (S21). The personal information management means 290 registers personal information in the personal information database 300 (S22).
[Template re-conversion processing]
FIG. 6 shows a re-conversion flow diagram of the conversion template. The conversion parameter creation means 260 determines whether the specified time has elapsed (S31). If it has elapsed, the conversion parameter creation means 260 creates a new conversion parameter with a random number (S32). The reconversion unit 240 reconverts all conversion templates stored in the conversion template database 230 using the conversion parameters created by the conversion parameter creation unit 260 (S33). After all the conversion templates stored in the conversion template database 230 are reconverted, the conversion parameters are stored in the conversion parameter storage means 250 (S34).
[One-time reconversion processing]
FIG. 7 shows a one-time reconversion flow diagram of the conversion template. In FIG. 7, it is determined whether there is a conversion template request in the one-time reconversion means 220 (S41). When there is a conversion template request, the authentication terminal setting means 310 inputs the network address of the authentication terminal management server 202 from the terminal key (S42). The conversion parameter creation unit 330 creates a new conversion parameter as a random number, and requests the conversion parameter stored in the conversion parameter storage unit 390 (S43). A difference for conversion is extracted from the conversion parameter stored in the conversion parameter storage unit 390 and the conversion parameter stored in the conversion parameter storage unit 250 of the authentication terminal management server 202 (S44). The template management unit 210 is requested for the conversion template of the ID number requested by the conversion template temporary storage unit 390 (S45). The template management unit 210 takes out a conversion template having a specified ID number from the conversion template database (S46). The one-time reconverting means reconverts the conversion template having the specified ID number using the difference for conversion (S47). The reconverted conversion template is transmitted to the conversion template temporary storage unit 390 (S48).
[Authentication terminal settings]
FIG. 8 shows a setting flow diagram of the finger vein information authentication terminal. In FIG. 8, the authentication terminal setting means 310 inputs the network addresses of the finger vein information terminals 13 and 14 from the terminal key (S51). The authentication terminal setting unit 310 inputs the network address of the authentication terminal management server 202 from the terminal key (S52). The authentication terminal setting unit 310 communicates with the authentication terminal management unit 280 via the finger vein information operation unit 320 through the network. In this case, the finger vein information operating means is requested to lend finger vein information (S53). It is determined whether an authentication terminal that matches the network address of the authentication terminal registered in the authentication terminal database 270 in advance by the authentication terminal management means 280 has been communicated (S54). If confirmed, the authentication terminal management unit 280 communicates with the authentication terminal setting unit 310 via the network to establish connection (S55). A connection establishment display is output to the display means 410 of the user authentication electronic terminals 13 and 14 (S56).
[Finger vein information lending process]
FIG. 9 is a flowchart of finger vein information lending and authentication processing. In FIG. 9, it is determined whether the personal information acquisition means 320 has read the ID number of the IC card or the mobile phone, or whether the ID number input from the terminal key has been received (S61). It is confirmed whether the ID number received by the personal information acquisition unit 320 is in the conversion template stored in the temporary storage by the conversion template temporary storage unit 390 (S62). When confirmed, the conversion template temporary storage means 390 sends the conversion template corresponding to the ID number established by the arithmetic processing means 301 and the finger vein information operation means 302 as described above to the matching means 380 (S63). If not confirmed, the conversion template one-time storage unit 390 requests the one-time re-conversion unit 220 of the finger vein information management server 22 to transmit the ID number conversion template (S64). Then, the one-time re-conversion means 220 transmits a conversion template corresponding to the ID number (S65). Next, step S63 is reached. The finger vein information acquisition unit 350 inputs the finger vein information (S66). The finger vein feature extraction unit 360 extracts finger vein features (S67).

  The template conversion unit 370 converts the characteristics of the finger vein information (S68). The converted finger vein information and the lent conversion template corresponding to the ID number are checked by the checking unit 380 (S69). As a result, it is determined whether the authentication results match (S70). If they match, a matching message is displayed on the display device 410 (S71). If they do not match, a non-matching message is displayed on the display means 410 (S72). A matching message is transmitted to the devices 400, and the power of the linked devices is turned on (S73).

  As described above, the calculation processing unit 44 of the finger vein information lending operation unit 42 accumulates the finger vein information associated with the customer ID information in the user code based on the received customer ID information, and Search is performed from the user code, and finger vein information is identified for the customer ID information as a result of the search. In addition, when the finger vein information operation means 45 stores in the database that the identified finger vein information is granted the lending qualification, the finger vein information operating means 45 assigns the lending qualification to the finger vein information, A lending instruction process is performed, a charging process for charging the electronic terminal being operated by the user along with the lending is performed, and the lending status of the biometric information including the processed charging is recorded in the user code. Further, a biometric information lending system is configured in which the finger vein information transmitting unit 43 receives the lending instruction and transmits the finger vein information to the user authentication electronic terminals 13 and 14 in association with the customer ID information. Then, a biometric information lending system is constructed in which the finger vein information lending operation means 42 generates a cancelable template based on the lending finger vein information.

  In the above description, the finger vein information has been described as an example, but the present embodiment can also be applied to other vein information. In this case, it is assumed that the finger vein information is replaced with other vein biometric information.

  Furthermore, in this embodiment, the biometric information stored in the user code is any one of a customer's vein pattern, fingerprint, voiceprint, iris, face, retina pattern, skin electrical resistance, handwriting, handprint, keystroke pattern, and DNA. A biometric information lending system using can be configured.

  Among the listed biometric configurations, a plurality of biometric information of customers is recorded in one user code, and the arithmetic processing unit 44 responds to a request from the user authentication electronic terminals 13 and 14 by one or a plurality of biometrics. The biometric information operating means searches for information, and the biometric information operating means transmits at least one biometric information to the user authentication electronic terminals 13 and 14, and lends and records the lending status of each rented biometric information in the user code. An information lending method can be configured.

  According to the present embodiment, since the biometric information template to be used in each facility of the user is registered in advance in the biometric information bank, it is not necessary to register the biometric information template when using each facility. It becomes convenient. In addition, since the number of uses of the biometric authentication template can be recorded in the server of the biometric information bank, points corresponding to the number of uses can be operated. Along with this, a point card becomes unnecessary.

  In each user facility, it is not necessary to manage the rented biometric information template, and the operation cost is reduced. In addition, since a plurality of pieces of biometric information can be stored in one user code, personal authentication can be ensured by using a plurality of pieces of biometric information lent out.

  DESCRIPTION OF SYMBOLS 1 ... Finger vein bank, 2 ... Customer, 3 ... Contract company, 4 ... Contract company of entrance / exit management, 5 ... Agency, 6 ... Vein pattern, 7 ... Lending template, 11 ... Finger vein bank computer, 12 ... Customer information Registration terminal, 13, 14 ... user authentication electronic terminal, 41 ... acceptance means, 42 ... finger vein information lending operation means, 43 ... finger vein information transmission means, 44 ... arithmetic processing means, 45 ... finger vein information operation Means 51 ... Personal method database 52 ... Finger vein information database 53 ... Biometrics bank server 54 ... Randomized template 60 ... Acceptance finger vein authentication device 61 ... Accommodation room finger vein authentication terminal 62 ... Service Room finger vein authentication terminal, 63 ... Biometrics server, 65 ... Personal information database, 66 ... Finger vein information database, 68 ... Authentication log Generation processing means 69 ... Randomized template distribution processing means 201 ... Finger vein information management server 202 ... Authentication terminal management server 203 ... Personal information management server 204 ... Finger vein information lending operation server 301 ... Calculation processing means, 100: Finger vein information lending system.

Claims (8)

Customer ID information received via communication means, customer biometric information associated with the customer ID information, and biometric information associated with the customer ID information are given to the customer when using the electronic terminal for user authentication A biometric information lending request including a database for storing the user code, customer ID information from the customer information registration electronic terminal, biometric information associated with the customer ID information, and an authentication log from the user authentication electronic terminal In a biometric information lending system comprising a biometric information bank computer having receiving means, biometric information lending operation means, and biometric information communication means for transmitting lending biometric information to the user authentication electronic terminal via communication means,
The biometric information lending operation means accumulates biometric information associated with the customer ID information based on the customer ID information accepted by the user code, searches the biometric information from the user code, and outputs the biometric information to the customer ID information. Arithmetic processing means for identifying biological information;
When lending qualification is given to the identified biometric information, lending instruction processing is performed on the identified biometric information, and charging is performed on the electronic terminal being operated by the user along with lending, including charging Biometric information operating means for recording the lending status of the biometric information in the user code,
The biometric information bank computer grants a qualification for lending to the biometric information lending request source facility that has been reserved for use by the customer in advance,
When the biometric information operating means receives a biometric information lending request from the user authentication terminal, it determines whether a lending qualification is granted to the accepted biometric information,
The biometric information lending system receives the lending instruction, and transmits the biometric information to the user authentication electronic terminal being operated by the user in association with the customer ID information.   The biometric information lending system according to claim 1, wherein the biometric information lending operation unit includes a cancelable template generation unit that generates a cancelable template including biometric information temporarily used based on the lending biometric information. Biological information lending system.   2. The biometric information lending system according to claim 1, wherein the biometric information stored in the user code includes customer vein patterns, fingerprints, voiceprints, irises, faces, retina patterns, skin electrical resistance, handwriting, handprints, keystroke patterns or DNA. A biological information lending system comprising at least one of the following.   4. The biometric information lending system according to claim 3, wherein a plurality of types of biometric information of the customer are recorded in one user code, and the arithmetic processing means outputs at least one biometric information in response to a request from an electronic terminal for user authentication. The biometric information operating means searches and rents at least one piece of biometric information to the user authentication electronic terminal, and records the rent status of each lent biometric information in the user code. Information lending system. Customer ID information received via communication means, customer biometric information associated with the customer ID information, and biometric information associated with the customer ID information are given to the customer when using the electronic terminal for user authentication A biometric information lending request including a database for storing the user code, customer ID information from the customer information registration electronic terminal, biometric information associated with the customer ID information, and an authentication log from the user authentication electronic terminal Biological information having acceptance means for accepting, biometric information lending operation means having arithmetic processing means and biometric information operation means, and biometric information communication means for transmitting rented biometric information to the user authentication electronic terminal via communication means In a biometric information lending method by a biometric information lending system equipped with a bank computer,
It said processing means of the biological information lending operations means, based on the customer ID information received to the user code, and storing the biometric information associated with the customer ID information, and retrieving the biometric information from the user code Identifying biometric information for the customer ID information,
The biometric information bank computer grants a qualification for lending to the biometric information lending request source facility that has been reserved for use by the customer in advance,
When the biometric information operating means receives a biometric information lending request from the user authentication terminal, it determines whether a lending qualification is granted to the accepted biometric information,
The biometric information operation means performs a lending instruction process for the identified biometric information when the lending qualification is given to the identified biometric information, and performs a charging process for the user authentication electronic terminal along with the lending. Record the biometric information lending status including the processed billing in the user code,
The biometric information lending method, wherein the biometric information transmitting means receives the lending instruction and transmits the biometric information to the user authentication electronic terminal in association with the customer ID information.   6. The biometric information lending method according to claim 5, wherein the biometric information lending operation means generates a cancelable template composed of biometric information that is temporarily used based on the lending biometric information.   6. The biometric information lending method according to claim 5, wherein the biometric information stored in the user code is a customer's vein pattern, fingerprint, voiceprint, iris, face, retina pattern, skin electrical resistance, handwriting, handprint, keystroke pattern or DNA. A biometric information lending method comprising at least one of the following.   8. The biometric information lending method according to claim 7, wherein the plurality of pieces of biometric information of the customer are recorded in one user code, and the arithmetic processing means outputs at least one biometric information in response to a request from the electronic terminal for user authentication. And the biometric information operation means transmits at least one biometric information to the user authentication electronic terminal, performs lending, and records a lending status of each lending biometric information in the user code. Information lending method.

Images