JP7406139B1 - information processing equipment - Google Patents

Abstract

An object of the present invention is to facilitate settings for improving convenience. An information processing device (10) includes a biological sensor (11), a first storage section (12), and a processing section (14). The first storage unit 12 boots the operating system when the biometric information read at startup by the biosensor 11 at the time of startup matches the first authentication biometric information 1-1, 1-2,... Store firmware 1. The processing unit 14 registers the read biometric information read from the biometric sensor 11 as the first authentication biometric information 1-1, 1-2, . . . while the operating system is running. [Selection diagram] Figure 1

Description

The present invention relates to an information processing device.

There is biometric authentication that compares biometric information such as veins and fingerprints read from a user with pre-registered biometric information. For example, a computer accepts logon if biometric authentication is successful.

As a technology related to biometric authentication, for example, an authentication method that can reduce the burden on the user in biometric authentication has been proposed.

Japanese Patent Application Publication No. 2021-184151

It is conceivable to set the OS (Operating System) of the computer to be started when the BIOS (Basic Input/Output System) succeeds in password authentication or biometric authentication. As a result, security is strengthened and convenience is improved because a user whose biometric information has been registered can use a computer without entering a password. However, it is troublesome to operate the BIOS and register biometric information used for biometric authentication.

In one aspect, the present invention aims to facilitate the configuration of convenience enhancements.

In one proposal, an information processing device including a biosensor, a first storage unit, and a processing unit is provided. The first storage unit stores firmware that boots the operating system when the biometric information read at startup, read by the biometric sensor at the time of startup, matches the first authentication biometric information. The processing unit registers the read biometric information read from the biometric sensor as first authentication biometric information while the operating system is running.

According to one aspect, settings for improving convenience can be made easy.

FIG. 1 is a diagram illustrating an example of an information processing device according to a first embodiment. FIG. 1 is a diagram illustrating an example of a hardware configuration of an information processing device. FIG. 2 is a block diagram illustrating a functional example of an information processing device. FIG. 3 is a diagram showing an example of a vein information database. FIG. 3 is a diagram illustrating an example of a process for registering vein information registered in the OS in the BIOS. 2 is a flowchart (part 1) showing an example of a procedure of registration processing. 12 is a flowchart (part 2) illustrating an example of the procedure of registration processing. 3 is a flowchart illustrating an example of the procedure of authentication processing. 3 is a flowchart illustrating an example of a procedure of startup processing.

The present embodiment will be described below with reference to the drawings. Note that each embodiment can be implemented by combining a plurality of embodiments within a consistent range.
[First embodiment]
First, a first embodiment will be described. In the first embodiment, biometric information used for biometric authentication before starting the OS is registered.

FIG. 1 is a diagram illustrating an example of an information processing apparatus according to the first embodiment. The information processing device 10 is a computer used jointly by a plurality of users. The information processing device 10 includes a biosensor 11 , a first storage section 12 , a second storage section 13 , and a processing section 14 .

The biological sensor 11 is a sensor for acquiring biological information. Examples of biometric information include veins, fingerprints, iris, and face. The biosensor 11 is, for example, a vein sensor, a fingerprint sensor, a camera, or the like.

The first storage unit 12 is a storage area that stores the firmware 1. The first storage unit 12 is, for example, a flash memory included in the information processing device 10. Firmware 1 is firmware that boots the operating system. Firmware 1 is, for example, BIOS. The firmware 1 includes first authentication biometric information 1-1, 1-2, . The first authentication biometric information 1-1, 1-2, . . . is a type of biometric information that can be read by the biometric sensor 11. The first authentication biometric information 1-1, 1-2, . . . is stored in the first storage unit 12, for example. Note that the first authentication biometric information 1-1, 1-2, .

For example, the firmware 1 is executed by the processing unit 14 when the information processing device 10 is started. The firmware 1 executes the operating system when the biometric information read at startup by the biosensor 11 when the information processing device 10 is started matches the first authentication biometric information 1-1, 1-2, . Boot. For example, the firmware 1 compares the biometric information read at startup with each of the first authentication biometric information 1-1, 1-2, . Then, if the biometric information read at startup matches any of the first authentication biometric information 1-1, 1-2,..., the firmware 1 boots the operating system. .

The second storage unit 13 stores data used in processing executed by the information processing device 10. The second storage unit 13 is, for example, a memory or a storage device included in the information processing device 10. The second storage unit 13 stores second authentication biometric information 2-1, 2-2, . The second authentication biometric information 2-1, 2-2, . . . is information in which read biometric information read from the biometric sensor 11 is registered. The second authentication biometric information 2-1, 2-2, . . . is biometric information of each user who jointly uses the information processing device 10.

The processing unit 14 can control the information processing device 10 and execute required processing. The processing unit 14 is, for example, a processor or an arithmetic circuit included in the information processing device 10. The processing unit 14 registers the read biometric information as first authentication biometric information 1-1, 1-2, . . . while the operating system is running. For example, while the operating system is running, the processing unit 14 performs the first authentication based on the priority element among the elements related to the biometric information of the second authentication biometric information 2-1, 2-2, . Second authentication biometric information to be registered as biometric information 1-1, 1-2, . . . is determined. The processing unit 14 determines second authentication biometric information to be registered as first authentication biometric information 1-1, 1-2, . . . during the registration process or authentication process described below, and The second authentication biometric information is registered as the first authentication biometric information 1-1, 1-2, . . . .

In the registration process, the processing unit 14 registers the read biometric information as second authentication biometric information 2-1, 2-2, . For example, upon receiving a selection to register the second authentication biometric information 2-1, 2-2, . . . , the processing unit 14 causes the biometric sensor 11 to read the read biometric information. Then, the processing unit 14 newly registers the read biometric information as second authentication biometric information 2-1, 2-2, . . . . Further, for example, upon receiving a selection to update the second authentication biometric information 2-1, 2-2, . . . , the processing unit 14 causes the biosensor 11 to read the read biometric information. Then, the processing unit 14 updates the second authentication biometric information to be updated among the second authentication biometric information 2-1, 2-2, . . . to the read biometric information.

Here, the processing unit 14 determines second authentication biometric information to be registered as first authentication biometric information 1-1, 1-2, . . . based on priority factors regarding biometric information registration. For example, the processing unit 14 determines the second authentication biometric information to be registered as the first authentication biometric information 1-1, 1-2, . . . based on the registration date and time or quality of the biometric information. The registration date and time of the biometric information is the date and time when the biometric information was registered as the second authentication biometric information 2-1, 2-2, . The quality of biometric information is a degree of ease of authentication when the biometric information is used for biometric authentication.

For example, when the priority element is the registration date and time of biometric information, the processing unit 14 selects a predetermined number of the second authentication biometric information 2-1, 2-2, ... in order of newest registration date and time. The biometric information is determined as second biometric information for authentication to be registered as first biometric information 1-1, 1-2, . . . . For example, when the priority factor is the quality of biometric information, the processing unit 14 selects a predetermined number of second authentication biometric information 2-1, 2-2, ... in descending order of quality. The biometric information is determined as second biometric information for authentication to be registered as first biometric information 1-1, 1-2, . . . .

In the authentication process, the processing unit 14 compares the biometric information read at the time of authentication read by the biometric sensor 11 with the second biometric information for authentication 2-1, 2-2, . For example, upon receiving a user's logon request, the processing unit 14 causes the biosensor 11 to read the biometric information read at the time of authentication. Then, the processing unit 14 compares the biometric information read at the time of authentication with the second biometric information for authentication of the logged-on user among the second biometric information for authentication 2-1, 2-2, . . . , and if they match. , accepts logon. Further, for example, the processing unit 14 compares the biometric information read at the time of authentication with the second biometric information for authentication of the logged-on user among the second biometric information for authentication 2-1, 2-2, . If so, run the specified application.

Here, the processing unit 14 determines second authentication biometric information to be registered as first authentication biometric information 1-1, 1-2, . . . based on priority factors regarding authentication using biometric information. . For example, the processing unit 14 determines the second authentication biometric information to be registered as the first authentication biometric information 1-1, 1-2, . . . based on the last authentication date and time of the biometric information or the number of authentications. The final authentication date and time of biometric information is the date and time when the most recent authentication process using the biometric information was executed. Moreover, the number of times of authentication of biometric information is the number of times that authentication processing using the biometric information has been executed.

For example, when the priority element is the final authentication date and time of biometric information, the processing unit 14 selects a predetermined number of second authentication biometric information 2-1, 2-2, . . . in the order of latest authentication date and time. The biometric information for authentication is determined as the second biometric information for authentication to be registered as the first biometric information for authentication 1-1, 1-2, . For example, when the priority element is the number of times of authentication of biometric information, the processing unit 14 selects a predetermined number of second pieces of biometric information from among the second authentication biometric information 2-1, 2-2, ... in order of the number of times of authentication. The biometric information for authentication is determined as the second biometric information for authentication to be registered as the first biometric information for authentication 1-1, 1-2, .

According to the first embodiment, the first storage unit 12 stores the biometric information read at startup read by the biosensor 11 at the time of startup, and the first authentication biometric information 1-1, 1-2, . Stores firmware 1 that boots the operating system when the numbers match. The processing unit 14 registers the biometric information read from the biometric sensor 11 as the first authentication biometric information 1-1, 1-2, . . . while the operating system is running.

Thereby, the information processing device 10 can register biometric information for the firmware 1 to perform biometric authentication on the operating system. Therefore, the information processing device 10 can easily make settings for improving convenience.

Further, the second storage unit 13 stores second authentication biometric information 2-1, 2-2, . . . in which read biometric information is registered. While the operating system is running, the processing unit 14 generates the first authentication biometric information based on the priority element among the biometric information-related elements of the second authentication biometric information 2-1, 2-2, . Second authentication biometric information to be registered as information 1-1, 1-2, . . . is determined. Thereby, the information processing device 10 can register appropriate biometric information in the firmware 1, which has a limited storage area.

Further, the processing unit 14 executes a registration process of registering the read biometric information as second authentication biometric information 2-1, 2-2, . . . . During the registration process, the processing unit 14 determines second authentication biometric information to be registered as first authentication biometric information 1-1, 1-2, . . . based on priority factors regarding biometric information registration. do. Thereby, the information processing device 10 can update the biometric information registered in the firmware 1 during the registration process.

Furthermore, during the registration process, the processing unit 14 registers second authentication biometric information to be registered as first authentication biometric information 1-1, 1-2, . . . based on the registration date and time or quality of the biometric information. Determine. Thereby, the information processing device 10 can appropriately determine the biometric information to be registered in the firmware 1.

Further, the processing unit 14 executes an authentication process of comparing the biometric information read at the time of authentication read by the biometric sensor 11 with the second biometric information for authentication 2-1, 2-2, . During the authentication process, the processing unit 14 generates second authentication biometric information to be registered as first authentication biometric information 1-1, 1-2, . . . based on priority factors regarding authentication using biometric information. Determine. Thereby, the information processing device 10 can update the biometric information registered in the firmware 1 during the authentication process.

Furthermore, during the authentication process, the processing unit 14 registers second authentication biometric information 1-1, 1-2, . . . based on the last authentication date and time of the biometric information or the number of authentications. Determine biometric information. Thereby, the information processing device 10 can appropriately determine the biometric information to be registered in the firmware 1.

[Second embodiment]
Next, a second embodiment will be described. In the second embodiment, in an information processing apparatus shared by a plurality of users, vein information registered in order for the operating system to perform biometric authentication is registered in the BIOS. Note that the vein information is an example of the biological information shown in the first embodiment.

The computer executes the BIOS to start the OS. The activated OS may restrict computer operations by unregistered users by accepting logon if biometric authentication is successful. Security can be further strengthened by restricting unregistered users from starting the OS. For example, the BIOS can perform biometric authentication, which is a highly convenient authentication method, and restart the OS if the biometric authentication is successful. It is possible to start it. However, it is troublesome to operate the BIOS and register biometric information used for biometric authentication. Furthermore, the storage area for storing the BIOS often has a small capacity.

Therefore, in the second embodiment, the information processing device selects appropriate vein information from registered vein information for biometric authentication using veins on the OS, and executes the selected vein information on the OS. Register it in the BIOS using an application.

FIG. 2 is a diagram illustrating an example of the hardware configuration of the information processing device. Information processing device 100 is a computer shared by multiple users. The entire information processing device 100 is controlled by a processor 101. A memory 102 and a plurality of peripheral devices are connected to the processor 101 via a bus 111. Processor 101 may be a multiprocessor. The processor 101 is, for example, a CPU (Central Processing Unit), an MPU (Micro Processing Unit), or a DSP (Digital Signal Processor). At least a part of the functions realized by the processor 101 executing a program may be realized by an electronic circuit such as an ASIC (Application Specific Integrated Circuit) or a PLD (Programmable Logic Device).

Memory 102 is used as a main storage device of information processing device 100. The memory 102 temporarily stores at least a portion of an OS program or an application program to be executed by the processor 101. The memory 102 also stores various data used for processing by the processor 101. As the memory 102, a volatile semiconductor storage device such as a RAM (Random Access Memory) is used, for example.

Peripheral devices connected to the bus 111 include a storage device 103, a GPU (Graphics Processing Unit) 104, an input interface 105, an optical drive device 106, and a device connection interface 107. Additionally, peripheral devices connected to the bus 111 include a flash memory 108, a vein sensor 109, and a network interface 110.

The storage device 103 electrically or magnetically writes and reads data to and from a built-in recording medium. The storage device 103 is used as an auxiliary storage device for the computer. The storage device 103 stores OS programs, application programs, and various data. Note that as the storage device 103, for example, an HDD (Hard Disk Drive) or an SSD (Solid State Drive) can be used.

A monitor 41 is connected to the GPU 104 . The GPU 104 displays an image on the screen of the monitor 41 according to instructions from the processor 101. Examples of the monitor 41 include a display device using organic EL (Electro Luminescence), a liquid crystal display device, and the like.

A keyboard 42 and a mouse 43 are connected to the input interface 105. The input interface 105 transmits signals sent from the keyboard 42 and mouse 43 to the processor 101. Note that the mouse 43 is an example of a pointing device, and other pointing devices can also be used. Other pointing devices include touch panels, tablets, touch pads, trackballs, and the like.

The optical drive device 106 reads data recorded on the optical disc 44 using laser light or the like. The optical disc 44 is a portable recording medium on which data is recorded so as to be readable by reflection of light. The optical disc 44 includes a DVD (Digital Versatile Disc), a DVD-RAM, a CD-ROM (Compact Disc Read Only Memory), a CD-R (Recordable)/RW (ReWritable), and the like.

The device connection interface 107 is a communication interface for connecting peripheral devices to the information processing device 100. For example, a memory device 45 or a memory reader/writer 46 can be connected to the device connection interface 107. The memory device 45 is a recording medium equipped with a communication function with the device connection interface 107. The memory reader/writer 46 is a device that writes data to or reads data from the memory card 47. The memory card 47 is a card-type recording medium.

The flash memory 108 electrically writes and reads data to and from a built-in recording medium. The BIOS is stored in the flash memory 108. The BIOS in flash memory 108 is loaded into memory 102 by processor 101 and executed.

The vein sensor 109 is a sensor for reading veins. The vein sensor 109 reads veins from the palm of the hand and generates an image (vein information) of the read veins. The vein sensor 109 transmits the generated vein image to the processor 101.

Network interface 110 is connected to network 40 . The network interface 110 transmits and receives data to and from other computers or communication devices via the network 40.

The information processing device 100 can implement the processing functions of the second embodiment with the hardware configuration described above. Note that the information processing device 10 shown in the first embodiment can also be realized by the same hardware as the information processing device 100 shown in FIG. 2. Further, the processor 101 is an example of the processing unit 14 shown in the first embodiment. Further, the memory 102 or the storage device 103 is an example of the second storage unit 13 shown in the first embodiment. Further, the flash memory 108 is an example of the first storage unit 12 shown in the first embodiment. Further, the vein sensor 109 is an example of the biological sensor 11 shown in the first embodiment.

The information processing device 100 realizes the processing functions of the second embodiment by executing a program recorded on a computer-readable recording medium, for example. A program that describes the processing content to be executed by the information processing device 100 can be recorded on various recording media. For example, a program to be executed by the information processing device 100 can be stored in the storage device 103. The processor 101 loads at least part of the program in the storage device 103 into the memory 102 and executes the program. Further, the program to be executed by the information processing device 100 may be recorded on a portable recording medium such as the optical disk 44, the memory device 45, the memory card 47, or the like. The program stored in the portable recording medium becomes executable after being installed in the storage device 103 under the control of the processor 101, for example. Furthermore, the processor 101 can also directly read and execute a program from a portable recording medium. Next, the functions of the information processing device 100 will be explained in detail.

FIG. 3 is a block diagram showing a functional example of the information processing device. The information processing device 100 has a BIOS 120 and an OS 130. BIOS 120 is loaded from flash memory 108 into memory 102 by processor 101 and executed. The OS 130 is booted and executed by the BIOS 120. Note that the BIOS 120 is an example of the firmware 1 shown in the first embodiment.

The BIOS 120 includes a storage section 121, an authentication section 122, and a startup control section 123. The storage unit 121 stores authentication information 121a. Vein information (vein information registered in the BIOS 120) used for biometric authentication executed by the BIOS 120 is registered in the authentication information 121a. Note that the vein information registered in the BIOS 120 is an example of the first authentication biometric information 1-1, 1-2, . . . shown in the first embodiment.

The authentication unit 122 performs biometric authentication and password authentication using vein information registered in the authentication information 121a. The authentication unit 122 uses the vein sensor 109 to read vein information. The authentication unit 122 determines whether the read vein information is registered in the authentication information 121a. When the authentication unit 122 determines that the read vein information is not registered in the authentication information 121a, the authentication unit 122 accepts a password input, and determines whether the input password is correct.

The startup control unit 123 boots the OS 130 when the authentication unit 122 determines that the read vein information is registered in the authentication information 121a or when the input password is determined to be correct. For example, the startup control unit 123 writes the program of the OS 130 stored in the storage device 103 into the memory 102. As a result, the OS 130 starts up.

The OS 130 includes a storage section 131, an authentication section 132, a database update section 133, an authentication information update section 134, and a logon control section 135. The storage unit 131 is realized using a storage area of the memory 102 or the storage device 103. The authentication unit 132, the database update unit 133, the authentication information update unit 134, and the logon control unit 135 are applications that are executed while the OS 130 is running. The authentication unit 132, the database update unit 133, the authentication information update unit 134, and the logon control unit 135 are realized by the processor 101 executing an application program stored in the memory 102 and executed on the OS 130.

The storage unit 131 stores a vein information database 131a and definition information 131b. The vein information database 131a stores vein information of each user registered as a user who can log on in the OS 130 (vein information registered in the OS 130) and information regarding each vein information. Note that the vein information registered in the OS 130 is an example of the second authentication biometric information 2-1, 2-2, . . . shown in the first embodiment.

In the definition information 131b, priority elements are set for determining the vein information to be registered in the authentication information 121a among the vein information registered in the vein information database 131a. The definition information 131b includes any one of update date and time of vein information, quality, final authentication date and time, and number of authentications. Note that the update date and time is an example of the registration date and time shown in the first embodiment.

The definition information 131b is created, for example, by the administrator of the information processing device 100. Note that the definition information 131b may be distributed to a plurality of information processing apparatuses including the information processing apparatus 100 via the network 40 from a management computer that manages the plurality of information processing apparatuses.

The authentication unit 132 performs biometric authentication using vein information. The authentication unit 132 acquires the user name, vein information read from the vein sensor 109, and the user name of the user requesting vein authentication (authenticated user). The authentication unit 132 then compares the vein information of the authenticated user registered in the vein information database 131a with the vein information read from the vein sensor 109. If the checked vein information matches, the authentication unit 132 updates the vein information database 131a. For example, the authentication unit 132 updates the last authentication date and time and the number of authentications corresponding to the vein information of the authenticated user.

The database update unit 133 receives registration and update of vein information in the OS 130. For example, the database update unit 133 acquires the vein information read from the vein sensor 109 and the user name of the user (update user) who requests registration/update of the vein information, and registers the vein information in the vein information database 131a. accept requests to do so. The database update unit 133 updates the vein information database 131a. For example, the database update unit 133 registers the read update user's vein information and the update date and time and quality of the update user's vein information in the vein information database 131a.

The authentication information update unit 134 updates vein information registered in the BIOS 120 during a registration process in which vein information is registered in the OS 130 or during an authentication process that is biometric authentication by the OS 130. During the registration process, the authentication information update unit 134 updates the authentication information 121a when the priority element set in the definition information 131b is update date and time or quality.

When the priority element is the update date and time, the authentication information update unit 134 deletes the vein information with the oldest update date and time from the authentication information 121a. Then, the authentication information update unit 134 registers the updated user's vein information read by the vein sensor 109 during the registration process in the authentication information 121a. Further, when the priority factor is quality, if the quality of the update user's vein information is higher than the vein information registered in the authentication information 121a having the lowest quality, the authentication information update unit 134 updates the vein information from the authentication information 121a. Delete. Then, the authentication information update unit 134 registers the updated user's vein information read by the vein sensor 109 during the registration process in the authentication information 121a.

During the authentication process, the authentication information update unit 134 updates the authentication information 121a when the priority element set in the definition information 131b is the last authentication date and time or the number of authentications. When the priority element is the final authentication date and time, the authentication information update unit 134 deletes the vein information with the oldest final authentication date and time from the authentication information 121a. Then, the authentication information update unit 134 registers the vein information of the authenticated user registered in the vein information database 131a in the authentication information 121a. In addition, when the priority factor is the number of authentications, if the number of authentications of the vein information of the authenticated user is greater than the vein information registered in the authentication information 121a with the least number of authentications, the authentication information update unit 134 updates the vein information from the authentication information 121a. Delete the vein information. Then, the authentication information update unit 134 registers the vein information of the authenticated user registered in the vein information database 131a in the authentication information 121a.

Further, when the authentication information update unit 134 updates the vein information registered in the BIOS 120, it notifies the user of the registration update. For example, the authentication information update unit 134 displays on the monitor 41 a screen showing the updated content of the authentication information 121a.

The logon control unit 135 accepts logon if the biometric authentication performed by the authentication unit 132 when the OS 130 is started is successful. For example, the logon control unit 135 accepts logon using the user name of an authenticated user in authentication processing.

Note that the lines connecting each element shown in FIG. 3 indicate a part of the communication route, and communication routes other than the illustrated communication route can also be set. Next, the vein information database 131a stored in the storage unit 131 will be explained in detail.

FIG. 4 is a diagram showing an example of a vein information database. The vein information database 131a stores vein information registered in the OS 130 and information regarding each vein information. The vein information database 131a includes user name, update date and time, quality, last authentication date and time, number of authentications, vein information, and BIOS registration number. It has the following items.

In the user name field, the user name of the user corresponding to the vein information is set. In the update date and time field, the date and time when the vein information was last updated is registered. In the quality item, an index value indicating the quality of vein information is set. The index value indicating quality indicates the ease of authentication when used for biometric authentication. For example, the index value indicating quality is calculated to be a smaller value as the portion of vein information that is missing is larger.

The date and time when the authentication process using vein information in the OS 130 was last executed is set in the item of last authentication date and time. Note that for vein information for which authentication processing has not been performed, the item of final authentication date and time will be blank. The number of times the authentication process using vein information in the OS 130 has been executed is set in the item "Number of times of authentication". Vein information is set in the vein information item. BIOS registration No. In the field, a number indicating the storage area in the flash memory 108 in which the vein information registered in the BIOS 120 is stored is set. Note that the BIOS registration No. regarding vein information that is not registered in the BIOS 120. The item will be left blank.

Next, a process for registering vein information registered in the OS 130 in the BIOS 120 will be described. For example, the authentication information update unit 134 of the OS 130 updates vein information registered in the BIOS 120 during a registration process in which vein information is registered in the OS 130.

FIG. 5 is a diagram illustrating an example of a process for registering vein information registered in the OS in the BIOS. In the example of FIG. 5, a case will be described in which quality is set in the definition information 131b. The authentication information update unit 134 registers a predetermined number (for example, six pieces) of vein information in the BIOS 120 in descending order of quality among the vein information registered in the OS 130 .

The vein information database 131a of the OS 130 includes "vein information a" of "user a" whose quality index value is "9" and "vein information b" of "user b" whose quality index value is "9". and "vein information c" of "user c" whose quality index value is "5" are registered. The vein information database 131a also includes "vein information d" of "user d" whose quality index value is "8" and "vein information e" of "user e" whose quality index value is "8". And "vein information f" of "user f" whose quality index value is "5" is registered. The vein information database 131a also includes "vein information g" of "user g" whose quality index value is "6" and "vein information h" of "user h" whose quality index value is "9". and "vein information i" of "user i" whose quality index value is "5" is registered. Further, in the vein information database 131a, "vein information j" of "user j" whose quality index value is "5" is registered.

In addition, the authentication information 121a of the BIOS 120 includes six pieces of vein information in descending order of quality index value: "vein information a," "vein information b," "vein information h," "vein information d," and "vein information d." "Vein information e" and "vein information g" are registered. Note that "vein information a" is the No. 1 of the flash memory 108. It is stored in the area indicated by "1", and "vein information b" is stored in the area indicated by "1". It is stored in the area indicated by "2", and "vein information d" is stored in the area indicated by No. It is stored in the area indicated by "3". Further, “vein information e” is the number of the flash memory 108. It is stored in the area indicated by "4", and "vein information g" is stored in the area indicated by No. It is stored in the area indicated by "5", and "vein information h" is stored in the area indicated by No. It is stored in the area indicated by "6".

Here, the database update unit 133 reads the vein information using the vein sensor 109, and adds the read vein information to the vein information database 131a as "vein information k" of "user k" whose quality index value is "9". It is assumed that it has been registered. Then, the authentication information update unit 134 determines that among the vein information registered in the authentication information 121a, the quality index value of "vein information k" is larger than that of "vein information g" which has the lowest quality index value. "Vein information g" is deleted from the authentication information 121a. For example, the authentication information update unit 134 updates the BIOS registration number corresponding to "vein information g" in the vein information database 131a. No. of the flash memory 108 in which "vein information g" is stored by referring to the item No. Identify the area indicated by "5". The authentication information update unit 134 updates the identified flash memory 108 No. "Vein information g" is deleted from the area indicated by "5".

Then, the authentication information update unit 134 registers "vein information k" in the authentication information 121a. For example, the authentication information update unit 134 updates the No. of the flash memory 108 in which "vein information g" was stored. "Vein information k" is stored in the area indicated by "5".

In this way, the authentication information update unit 134 updates the vein information registered in the BIOS 120 during the registration process in which vein information is registered in the OS 130. As a result, the authentication information update unit 134 updates the authentication information at a timing when a predetermined piece of vein information determined based on the priority factor among the vein information registered in the vein information database 131a may be changed. The vein information registered in 121a can be updated.

Hereinafter, the procedure of the process executed by the information processing apparatus 100 will be described in detail. First, a registration process in which vein information is registered in the OS 130 of the information processing device 100 will be described. Note that during the registration process, updating process of vein information registered in the BIOS 120 is also executed.

FIG. 6 is a flowchart (part 1) illustrating an example of the procedure of the registration process. The process shown in FIG. 6 will be described below in accordance with step numbers.
[Step S11] The database update unit 133 receives registration/update of vein information. For example, the database update unit 133 acquires the vein information read from the vein sensor 109 and the user name of the user (update user) who requests registration/update of the vein information, and registers the vein information in the vein information database 131a. accept requests to do so.

[Step S12] The database update unit 133 updates the vein information database 131a. For example, the database update unit 133 sets the current date and time in the update date and time field of the record in which the user name acquired in step S11 is set in the user name field (record of the update user) in the vein information database 131a. . Further, the database update unit 133 calculates an index value of the quality of the vein information acquired in step S11, and sets the calculated index value in the quality item of the update user's record. Further, the database update unit 133 sets the vein information acquired in step S11 in the vein information item of the update user's record.

Note that, if there is no record of the update user in the vein information database 131a, the database update unit 133 adds the record of the update user to the vein information database 131a and then sets each item. However, the database update unit 133 updates the last authentication date and time of the added record and the BIOS registration number. The field is left blank, and the field for the number of times of authentication is set to "0".

[Step S13] The authentication information update unit 134 determines whether a preset upper limit number (upper limit number) of vein information is registered in the authentication information 121a of the BIOS 120. When the authentication information update unit 134 determines that the upper limit number of vein information is registered in the authentication information 121a of the BIOS 120, the process proceeds to step S14. Further, when the authentication information update unit 134 determines that the upper limit number of vein information is not registered in the authentication information 121a of the BIOS 120, the process proceeds to step S26.

[Step S14] The authentication information update unit 134 determines whether the priority element is the update date and time. For example, if an update date and time is set in the definition information 131b, the authentication information update unit 134 determines that the priority element is the update date and time, and if an element other than the update date and time is set in the definition information 131b, the authentication information update unit 134 determines that the priority element is the update date and time. Determines that the element is not updated. When the authentication information update unit 134 determines that the priority element is the update date and time, the process proceeds to step S15. Further, when the authentication information update unit 134 determines that the priority element is not the update date and time, the process proceeds to step S18.

[Step S15] The authentication information update unit 134 determines whether the updated user's vein information has been registered in the authentication information 121a. For example, the authentication information update unit 134 updates the BIOS registration number of the update user's record. If a number is set in the item, it is determined that the updated user's vein information has been registered in the authentication information 121a. The authentication information update unit 134 also updates the BIOS registration number of the record of the updated user. If the field is blank, it is determined that the updated user's vein information has not been registered in the authentication information 121a. When the authentication information update unit 134 determines that the updated user's vein information has been registered in the authentication information 121a, the process proceeds to step S16. Further, when the authentication information update unit 134 determines that the updated user's vein information has not been registered in the authentication information 121a, the process proceeds to step S17.

[Step S16] The authentication information update unit 134 deletes the updated user's vein information from the authentication information 121a. For example, the authentication information update unit 134 updates the BIOS registration number of the update user's record. The vein information stored in the storage area of the flash memory 108 indicated by the number set in the item is deleted. The process then proceeds to step S26.

[Step S17] The authentication information update unit 134 deletes the vein information with the oldest update date and time from the authentication information 121a. For example, the authentication information update unit 134 updates the BIOS registration number of the vein information database 131a. Among the records for which a number is set in the field, identify the record with the oldest date and time set in the update date and time field. The authentication information update unit 134 updates the BIOS registration number of the identified record. Delete the vein information stored in the storage area of the flash memory 108 indicated by the number set in the BIOS registration No. Leave the field blank. The process then proceeds to step S26.

FIG. 7 is a flowchart (part 2) showing an example of the procedure of the registration process. The process shown in FIG. 7 will be described below in accordance with step numbers.
[Step S18] The authentication information update unit 134 determines whether the priority factor is quality. For example, the authentication information update unit 134 determines that the priority element is quality when quality is set in the definition information 131b, and determines that the priority element is quality when an element other than quality is set in the definition information 131b. It is determined that it is not. When the authentication information update unit 134 determines that the priority factor is quality, the process proceeds to step S19. Further, when the authentication information update unit 134 determines that the priority factor is not quality, the authentication information update unit 134 ends the process.

[Step S19] The authentication information update unit 134 determines whether the quality of the updated user's vein information is higher than the vein information registered in the authentication information 121a having the lowest quality. For example, the authentication information update unit 134 updates the BIOS registration number of the vein information database 131a. Identify the record with the smallest index value set in the quality field among the records for which a number is set in the field. If the index value set in the quality item of the update user's record is larger than the index value set in the quality item of the identified record, the authentication information update unit 134 updates the registered authentication information 121a with the lowest quality. It is determined that the quality of the updated user's vein information is higher than that of the vein information. When the authentication information update unit 134 determines that the quality of the updated user's vein information is higher than the vein information registered in the authentication information 121a having the lowest quality, the process proceeds to step S23. Further, when the authentication information update unit 134 determines that the quality of the update user's vein information is not higher than the vein information registered in the authentication information 121a having the lowest quality, the process proceeds to step S20.

[Step S20] The authentication information update unit 134 determines whether the updated user's vein information has been registered in the authentication information 121a. If the authentication information update unit 134 determines that the updated user's vein information has been registered in the authentication information 121a, the process proceeds to step S21. Further, when the authentication information update unit 134 determines that the updated user's vein information has not been registered in the authentication information 121a, the authentication information update unit 134 ends the process.

[Step S21] The authentication information update unit 134 deletes the updated user's vein information from the authentication information 121a. For example, the authentication information update unit 134 updates the BIOS registration number of the updated user's record. The vein information stored in the storage area of the flash memory 108 indicated by the number set in the item is deleted.

[Step S22] The authentication information update unit 134 registers vein information with the highest quality among the vein information not registered in the authentication information 121a in the authentication information 121a. For example, the authentication information update unit 134 updates the BIOS registration number of the vein information database 131a. Identify the record with the highest index value set in the quality item among the records where the item is blank. The authentication information update unit 134 stores the vein information set in the vein information item of the specified record in the storage area of the flash memory 108. The authentication information update unit 134 updates the BIOS registration number of the identified record. In the field, set a number indicating the storage area of the flash memory 108 that stores the vein information. The process then proceeds to step S27.

[Step S23] The authentication information update unit 134 determines whether the updated user's vein information has been registered in the authentication information 121a. When the authentication information update unit 134 determines that the updated user's vein information has been registered in the authentication information 121a, the process proceeds to step S24. Further, when the authentication information update unit 134 determines that the updated user's vein information has not been registered in the authentication information 121a, the process proceeds to step S25.

[Step S24] The authentication information update unit 134 deletes the updated user's vein information from the authentication information 121a. For example, the authentication information update unit 134 updates the BIOS registration number of the update user's record. The vein information stored in the storage area of the flash memory 108 indicated by the number set in the item is deleted. The process then proceeds to step S26.

[Step S25] The authentication information update unit 134 deletes the vein information with the lowest quality from the authentication information 121a. For example, the authentication information update unit 134 updates the BIOS registration number of the vein information database 131a. Identify the record with the smallest index value set in the quality field among the records for which a number is set in the field. The authentication information update unit 134 updates the BIOS registration number of the identified record. Delete the vein information stored in the storage area of the flash memory 108 indicated by the number set in the BIOS registration No. Leave the field blank.

[Step S26] The authentication information update unit 134 registers the updated user's vein information in the authentication information 121a. For example, the authentication information update unit 134 stores the vein information set in the vein information item of the updated user's record in the storage area of the flash memory 108. The authentication information update unit 134 updates the BIOS registration number of the record of the updated user. In the field, set a number indicating the storage area of the flash memory 108 that stores the vein information.

[Step S27] The authentication information update unit 134 notifies the update of the registration of the authentication information 121a. For example, the authentication information update unit 134 displays on the monitor 41 a screen showing the updated content of the authentication information 121a.

In this manner, the authentication information update unit 134 updates the vein information registered in the BIOS 120 during the registration process when the priority element is the update date/time or quality, which is an element related to vein information registration. In the registration process, the update date and time and quality of the updated user's vein information are changed. Therefore, the authentication information update unit 134 can update the vein information registered in the BIOS 120 during the registration process, which is a timing at which a predetermined piece of vein information determined based on the update date and time or quality may be changed. .

If the priority element is the update date and time, the authentication information update unit 134 deletes the vein information with the oldest update date and time from among the vein information registered in the BIOS 120, and updates the BIOS 120 with the vein information of the updated user with the latest update date and time. register. As a result, the authentication information update unit 134 registers the upper limit number of pieces of vein information registered in the OS 130 in the BIOS 120 in order of newest update date and time. Further, when the priority factor is quality, the authentication information update unit 134 deletes the vein information if the quality of the update user's vein information is higher than the lowest quality vein information among the vein information registered in the BIOS 120. , updates the user's vein information to be registered in the BIOS 120. Thereby, the authentication information update unit 134 registers the upper limit number of pieces of vein information registered in the OS 130 in the BIOS 120 in descending order of quality.

Note that if the update user's vein information has already been registered in the BIOS 120, the authentication information update unit 134 deletes the update user's vein information registered in the BIOS 120, and registers the vein information updated in the registration process in the BIOS 120. Thereby, the authentication information update unit 134 can register the latest vein information in the BIOS 120.

A user corresponding to vein information with a new update date and time is likely to use the information processing device 100 frequently. The authentication information update unit 134 improves convenience for users who frequently use the information processing device 100 by giving priority to vein information with a new update date and time and registering it in the BIOS 120 among the vein information registered in the OS 130. can be done. Furthermore, the accuracy of biometric authentication using high-quality vein information is high. The authentication information update unit 134 can improve the accuracy of biometric authentication in the BIOS 120 by giving priority to vein information with high quality among the vein information registered in the OS 130 and registering it in the BIOS 120. In this way, the authentication information update unit 134 can appropriately determine vein information to be registered in the BIOS 120 according to the settings of the definition information 131b.

The authentication information update unit 134 registers, in the BIOS 120, vein information determined based on the priority factors among the vein information registered in the OS 130. Thereby, the authentication information update unit 134 can register appropriate vein information in the BIOS 120, which has a limited storage area. By registering vein information in the BIOS 120, the BIOS 120 can perform biometric authentication, which is a highly convenient authentication method. Since the authentication information update unit 134 registers vein information in the BIOS 120 without operating the BIOS 120, it is possible to easily make settings to improve convenience.

Next, an authentication process, which is biometric authentication, performed by the OS 130 of the information processing device 100 will be described. The authentication process is executed, for example, when the OS 130 accepts a logon or when predetermined software is executed. Note that during the authentication process, update process of vein information registered in the BIOS 120 is also executed.

FIG. 8 is a flowchart illustrating an example of the procedure of authentication processing. The process shown in FIG. 8 will be described below in accordance with step numbers.
[Step S31] The authentication unit 132 performs vein authentication. For example, the authentication unit 132 acquires the user name, vein information read from the vein sensor 109, and the user name of the user requesting vein authentication (authenticated user). Then, the authentication unit 132 uses the vein information set in the vein information item of the record (authenticated user record) in which the user name of the authenticated user is set in the user name item of the vein information database 131a, and the vein sensor 109. The information is compared with the vein information read from the system.

[Step S32] The authentication unit 132 determines whether the authentication is successful. For example, if the vein information collated in step S31 matches, the authentication unit 132 determines that the authentication has been successful; if they do not match, the authentication unit 132 determines that the authentication has failed. When the authentication unit 132 determines that the authentication is successful, the process proceeds to step S33. Further, when the authentication unit 132 determines that the authentication has failed, the authentication unit 132 ends the process.

[Step S33] The authentication unit 132 updates the vein information database 131a. For example, the authentication unit 132 sets the current date and time in the last authentication date and time field of the authenticated user's record. Further, the database update unit 133 adds 1 to the numerical value in the item of the number of times of authentication in the record of the authenticated user.

[Step S34] The authentication information update unit 134 determines whether the upper limit number of vein information is registered in the authentication information 121a of the BIOS 120. When the authentication information update unit 134 determines that the upper limit number of vein information is registered in the authentication information 121a of the BIOS 120, the process proceeds to step S35. If the authentication information update unit 134 determines that the upper limit number of vein information is not registered in the authentication information 121a of the BIOS 120, the process proceeds to step S42.

[Step S35] The authentication information update unit 134 determines whether the priority element is the final authentication date and time. For example, when the last authentication date and time is set in the definition information 131b, the authentication information update unit 134 determines that the priority factor is the last authentication date and time, and if an element other than the last authentication date and time is set in the definition information 131b. If so, it is determined that the priority element is not the final authentication date and time. When the authentication information update unit 134 determines that the priority element is the final authentication date and time, the process proceeds to step S36. Further, when the authentication information update unit 134 determines that the priority element is not the final authentication date and time, the process proceeds to step S38.

[Step S36] The authentication information update unit 134 determines whether the vein information of the authenticated user has been registered in the authentication information 121a. For example, the authentication information update unit 134 updates the BIOS registration number of the authenticated user's record. If a number is set in the item, it is determined that the vein information of the authenticated user has been registered in the authentication information 121a. The authentication information update unit 134 also updates the BIOS registration number of the authenticated user's record. If the field is blank, it is determined that the vein information of the authenticated user has not been registered in the authentication information 121a. When the authentication information update unit 134 determines that the vein information of the authenticated user has been registered in the authentication information 121a, the authentication information update unit 134 ends the process. Further, when the authentication information update unit 134 determines that the vein information of the authenticated user is not registered in the authentication information 121a, the process proceeds to step S37.

[Step S37] The authentication information update unit 134 deletes the vein information with the oldest final authentication date and time from the authentication information 121a. For example, the authentication information update unit 134 updates the BIOS registration number of the vein information database 131a. Among the records for which a number is set in the field, identify the record with the oldest date and time set in the field of last authentication date and time. The authentication information update unit 134 updates the BIOS registration number of the identified record. Delete the vein information stored in the storage area of the flash memory 108 indicated by the number set in the BIOS registration No. Leave the field blank. The process then proceeds to step S42.

[Step S38] The authentication information update unit 134 determines whether the priority factor is the number of authentications. For example, the authentication information update unit 134 determines that the priority factor is the number of authentications when the number of authentications is set in the definition information 131b, and determines that the priority factor is the number of authentications when the number of authentications is set in the definition information 131b. Determine that the element is not the number of authentications. When the authentication information update unit 134 determines that the priority factor is the number of authentications, the process proceeds to step S39. Further, when the authentication information update unit 134 determines that the priority factor is not the number of authentications, the process ends.

[Step S39] The authentication information update unit 134 determines whether the vein information of the authenticated user has been registered in the authentication information 121a. When the authentication information update unit 134 determines that the vein information of the authenticated user has been registered in the authentication information 121a, the process ends. Further, when the authentication information update unit 134 determines that the vein information of the authenticated user is not registered in the authentication information 121a, the process proceeds to step S40.

[Step S40] The authentication information update unit 134 determines whether the vein information of the authenticated user has been authenticated more times than the vein information registered in the authentication information 121a with the least number of authentications. For example, the authentication information update unit 134 updates the BIOS registration number of the vein information database 131a. Among the records in which a number is set in the field, identify the record with the least number of times set in the field of number of authentications. If the number of times set in the field of number of times of authentication of the authenticated user's record is greater than the number of times set in the field of number of times of authentication of the specified record, the authentication information update unit 134 updates the authentication information 121a with the least number of times of authentication registered. It is determined that the number of times of authentication of the vein information of the authenticated user is greater than that of the vein information of the authenticated user. If the authentication information update unit 134 determines that the number of authentications of the vein information of the authenticated user is greater than the vein information registered in the authentication information 121a with the least number of authentications, the process proceeds to step S41. Further, when the authentication information updating unit 134 determines that the number of authentications of the vein information of the authenticated user is not greater than the vein information registered in the authentication information 121a with the least number of authentications, the process ends.

[Step S41] The authentication information updating unit 134 deletes the vein information with the least number of authentications from the authentication information 121a. For example, the authentication information update unit 134 updates the BIOS registration number of the vein information database 131a. Among the records in which a number is set in the field, identify the record with the least number of times set in the field of number of authentications. The authentication information update unit 134 updates the BIOS registration number of the identified record. Delete the vein information stored in the storage area of the flash memory 108 indicated by the number set in the BIOS registration No. Leave the field blank. The process then proceeds to step S42.

[Step S42] The authentication information update unit 134 registers the vein information of the authenticated user in the authentication information 121a. For example, the authentication information update unit 134 stores vein information set in the vein information item of the authenticated user's record in the storage area of the flash memory 108. The authentication information update unit 134 updates the BIOS registration number of the authenticated user's record. In the field, set a number indicating the storage area of the flash memory 108 that stores the vein information.

[Step S43] The authentication information update unit 134 notifies the update of the registration of the authentication information 121a. For example, the authentication information update unit 134 displays on the monitor 41 a screen showing the updated content of the authentication information 121a.

In this manner, the authentication information update unit 134 updates the vein information registered in the BIOS 120 during the authentication process when the priority factor is the last authentication date and time or the number of times of authentication, which are factors related to authentication using vein information. In the authentication process, the last authentication date and time and the number of authentications in the vein information of the authenticated user are changed. The authentication information update unit 134 can update the vein information registered in the BIOS 120 during authentication processing, which is a timing at which a predetermined piece of vein information determined based on the last authentication date and time or the number of times of authentication may be changed. .

If the priority factor is the last authentication date and time, the authentication information update unit 134 deletes the vein information with the oldest last authentication date and time from among the vein information registered in the BIOS 120, and deletes the vein information of the authenticated user with the latest last authentication date and time. Register in BIOS120. Thereby, the authentication information update unit 134 registers the upper limit number of pieces of vein information registered in the OS 130 in the BIOS 120 in order of the latest authentication date and time. In addition, when the priority factor is the number of times of authentication, the authentication information update unit 134 updates the vein information of the authenticated user if the number of times of authentication of the vein information of the authenticated user is greater than the vein information with the lowest quality of the number of times of authentication among the vein information registered in the BIOS 120. The information is deleted and the vein information of the authenticated user is registered in the BIOS 120. Thereby, the authentication information update unit 134 registers the upper limit number of pieces of vein information registered in the OS 130 in the BIOS 120 in descending order of the number of authentications.

A user whose last authentication date and time corresponds to vein information that has a new date or time or that has been authenticated many times is likely to use the information processing device 100 frequently. Among the vein information registered in the OS 130, the authentication information update unit 134 uses the information processing device 100 more frequently by giving priority to vein information with a newer last authentication date and time or with a higher number of authentications and registering it in the BIOS 120. User convenience can be improved. In this way, the authentication information update unit 134 can appropriately determine vein information to be registered in the BIOS 120 according to the settings of the definition information 131b.

Next, the processing of the BIOS 120 and the OS 130 when the information processing device 100 is started up will be described. For example, when the power button of the information processing device 100 is pressed, the following startup process is executed.

FIG. 9 is a flowchart illustrating an example of the procedure of startup processing. The process shown in FIG. 9 will be described below in accordance with step numbers.
[Step S51] The authentication unit 122 of the BIOS 120 reads vein information using the vein sensor 109.

[Step S52] The authentication unit 122 determines whether the vein information read in step S51 is registered in the authentication information 121a. For example, if the read vein information matches any of the vein information registered in the authentication information 121a, the authentication unit 122 determines that the read vein information is registered in the authentication information 121a. When the authentication unit 122 determines that the read vein information is registered in the authentication information 121a, the process proceeds to step S55. Further, when the authentication unit 122 determines that the read vein information is not registered in the authentication information 121a, the process proceeds to step S53.

[Step S53] The authentication unit 122 accepts password input.
[Step S54] The authentication unit 122 determines whether the password input in step S53 is correct. When the authentication unit 122 determines that the input password is correct, the authentication unit 122 advances the process to step S55. Further, when the authentication unit 122 determines that the input password is incorrect, the authentication unit 122 advances the process to step S51.

[Step S55] The startup control unit 123 of the BIOS 120 boots the OS 130. For example, the startup control unit 123 writes the program of the OS 130 stored in the storage device 103 into the memory 102. As a result, the OS 130 starts up.

[Step S56] The authentication unit 132 and the authentication information update unit 134 of the OS 130 execute the authentication process shown in FIG. 8.
[Step S57] The logon control unit 135 of the OS 130 determines whether or not the authentication was successful in the authentication process of step S56. When the logon control unit 135 determines that the authentication is successful, the process proceeds to step S58. If the logon control unit 135 determines that the authentication has failed, the process proceeds to step S56.

[Step S58] The logon control unit 135 accepts the logon. For example, the logon control unit 135 accepts logon using the user name of the authenticated user in the authentication process of step S56.

In this way, the authentication unit 122 executes biometric authentication using the vein information registered in the authentication information 121a, and if the biometric authentication is successful, the startup control unit 123 boots the OS 130 without inputting a password. Thereby, the BIOS 120 can improve user convenience.

According to the second embodiment, the flash memory 108 of the information processing device 100 stores information when the vein information read by the vein sensor 109 at the time of starting the information processing device 100 matches the vein information registered in the BIOS 120. Stores the BIOS 120 that boots the OS 130. The information processing apparatus 100 registers vein information read from the vein sensor 109 as registered vein information in the BIOS 120 while the OS 130 is running. Thereby, the information processing apparatus 100 can easily make settings for improving convenience.

Furthermore, while the OS 130 is running, the information processing device 100 registers the vein information registered in the BIOS 120 as vein information registered in the BIOS 120 based on the priority element among the vein information related elements of each piece of vein information registered in the OS 130. Determine the venous information. Thereby, the information processing device 100 can register appropriate vein information in the BIOS 120, which has a limited storage area.

Further, the information processing apparatus 100 executes a registration process to register the vein information read from the vein sensor 109 as vein information registered in the OS 130. During the registration process, the information processing apparatus 100 determines the vein information registered in the OS 130 to be registered as the vein information registered in the BIOS 120, based on priority factors regarding registration of vein information. Thereby, the information processing apparatus 100 can update the vein information registered in the BIOS 120 during the registration process.

Furthermore, during the registration process, the information processing apparatus 100 determines the vein information registered in the OS 130 to be registered as the vein information registered in the BIOS 120 based on the update date and time or quality of the vein information. Thereby, the information processing device 100 can appropriately determine the vein information to be registered in the BIOS 120.

Further, the information processing apparatus 100 executes an authentication process of comparing the vein information read by the vein sensor 109 with the vein information registered in the OS 130. During authentication processing, the information processing apparatus 100 determines the vein information registered in the OS 130 to be registered as the vein information registered in the BIOS 120, based on priority factors regarding authentication using vein information. Thereby, the information processing apparatus 100 can update the vein information registered in the BIOS 120 during authentication processing.

Furthermore, during the authentication process, the information processing apparatus 100 determines the vein information registered in the OS 130 to be registered as the vein information registered in the BIOS 120 based on the last authentication date and time of the vein information or the number of times of authentication. Thereby, the information processing device 100 can appropriately determine the vein information to be registered in the BIOS 120.

Although the embodiments have been illustrated above, the configuration of each part shown in the embodiments can be replaced with other components having similar functions. Further, other arbitrary components or steps may be added. Furthermore, any two or more configurations (features) of the embodiments described above may be combined.

1 Firmware 1-1, 1-2,... Biometric information for first authentication 2-1, 2-2,... Biometric information for second authentication 10 Information processing device 11 Biosensor 12 First storage unit 13 2 storage section 14 processing section

Claims (5)

biosensor and
a first storage unit that stores firmware for booting an operating system when biometric information read at startup, read by the biometric sensor at startup, and first authentication biometric information match;
a second storage unit that stores second authentication biometric information registered in association with a user;
While the operating system is running , accepting the user's logon to the operating system based on the result of an authentication process in which biometric information read at the time of authentication read by the biometric sensor is compared with the second authentication biometric information. , a processing unit that determines the second biometric information for authentication to be registered as the first biometric information for authentication based on a priority element among the elements related to the biometric information of each of the second biometric information for authentication;
An information processing device having: The processing unit executes a registration process for registering read biometric information read from the biometric sensor as the second authentication biometric information, and at the time of the registration process, performs a registration process based on the priority factor regarding registration of the biometric information. , determining the second authentication biometric information to be registered as the first authentication biometric information;
The information processing device according to claim 1 . The processing unit determines the second biometric information for authentication to be registered as the first biometric information for authentication during the registration process, based on the registration date and time or quality of the biometric information.
The information processing device according to claim 2 . The processing unit executes an authentication process of comparing biometric information read at the time of authentication read by the biometric sensor with the second biometric information for authentication, and during the authentication process, the processing unit determining the second authentication biometric information to be registered as the first authentication biometric information based on the priority factors;
The information processing device according to claim 1 . biosensor and
a first storage unit that stores firmware for booting an operating system when biometric information read at startup, read by the biometric sensor at startup, and first authentication biometric information match;
a second storage unit that stores second authentication biometric information in which read biometric information read from the biometric sensor is registered;
While the operating system is running , an authentication process is executed in which biometric information read at the time of authentication read by the biometric sensor is compared with the second authentication biometric information, and during the authentication process, the second authentication biometric information is compared with the second authentication biometric information. a processing unit that determines the second biometric information for authentication to be registered as the first biometric information for authentication based on the final authentication date and time or the number of times of authentication for each piece of information;
An information processing device having:

Images