WO2024171434A1

WO2024171434A1 - Information updating device and method, authentication device and method, and computer-readable medium

Info

Publication number: WO2024171434A1
Application number: PCT/JP2023/005740
Authority: WO
Inventors: 雄太清水; 寿幸一色; 健吾森; 和樹稲垣; 洸陽柴田; 康平土方
Original assignee: 日本電気株式会社
Priority date: 2023-02-17
Filing date: 2023-02-17
Publication date: 2024-08-22

Abstract

This invention makes it possible to update key information that is used for encryption at an appropriate timing. A biometric information acquisition unit (11) acquires biometric information of a user. An encryption unit (12) encrypts the acquired biometric information with cryptographic key information, and generates query biometric information. An authentication unit (13) authenticates the user by comparing the generated query biometric information and target biometric information encrypted using the cryptographic key information. A sensing unit (15) senses a prescribed operation of a device associated with authentication of the user. An information update unit (16) updates the cryptographic key information and the target biometric information if the prescribed operation has been sensed.

Description

Information update device and method, authentication device and method, and computer-readable medium

The present disclosure relates to an information update device, an information update method, an authentication device, an authentication method, and a computer-readable medium.

As a related technique, Patent Document 1 discloses a face recognition device. In Patent Document 1, a user's biometric information is encrypted by homomorphic encryption using the user's public key. The authentication device receives the encrypted biometric information, the user's identification information, and the user's public key from the encryption device. The authentication device searches a database and obtains the user's encrypted biometric information and the user's public key registered in the database. The authentication device authenticates the user based on the encrypted biometric information and the user's public key obtained from the database, and the encrypted biometric information and the user's public key received from the encryption device.

In Patent Document 1, if biometric information registered in a database is leaked, a re-registration process of the biometric information is performed. In this case, the encryption device generates a new private key and public key pair. The encryption device encrypts the user's biometric information using the newly generated public key. The authentication device receives the newly generated public key and the encrypted biometric information from the encryption device. The authentication device updates the information registered in the database with the received public key and the received encrypted biometric information. In this way, even if the encrypted biometric information is leaked, the old encrypted biometric information can be canceled, and spoofing using the leaked encrypted biometric information can be prevented.

JP 2011-211593 A

If encrypted biometric information is leaked, the authentication device described in Patent Document 1 invalidates biometric authentication using the leaked biometric information by updating the key pair. However, a user generally cannot know when the encrypted biometric information was leaked. From the time a user notices the leak until the key pair is subsequently updated, the leaked encrypted biometric information is valid, making it possible to impersonate a person using the leaked encrypted biometric information. For this reason, it is considered preferable to change the key information at an appropriate time, rather than after the user notices the leak.

In view of the above circumstances, the present disclosure aims to provide an information update device, an information update method, an authentication device, an authentication method, and a computer-readable medium that can update key information used for encryption at an appropriate time.

In order to achieve the above object, the present disclosure provides, as a first aspect, an information updating device. The information updating device includes a detection unit that detects a predetermined operation of the device related to authentication performed using encrypted biometric information of a user, and an information updating unit that updates encryption key information used to encrypt the user's biometric information and target biometric information encrypted with the encryption key information when the predetermined operation is detected.

The present disclosure provides, as a second aspect, an authentication device. The authentication device includes a biometric information acquisition unit that acquires biometric information of a user, an encryption unit that encrypts the acquired biometric information with encryption key information to generate query biometric information, an authentication unit that authenticates the user by comparing the query biometric information with target biometric information encrypted using the encryption key information, a detection unit that detects a predetermined operation of the device related to the authentication, and an information update unit that updates the encryption key information and updates the target biometric information using the updated encryption key information when the predetermined operation is detected.

The present disclosure provides, as a third aspect, an information update method. The information update method includes detecting a predetermined operation of a device related to authentication performed using encrypted user biometric information, and, when the predetermined operation is detected, updating encryption key information used to encrypt the user biometric information and target biometric information encrypted with the encryption key information.

The present disclosure provides, as a fourth aspect, an authentication method. The authentication method includes acquiring biometric information of a user, encrypting the acquired biometric information with encryption key information to generate query biometric information, authenticating the user by comparing the query biometric information with target biometric information encrypted using the encryption key information, detecting a predetermined operation of a device related to the authentication, updating the encryption key information when the predetermined operation is detected, and updating the target biometric information using the updated encryption key information.

As a fifth aspect, the present disclosure provides a computer-readable medium. The computer-readable medium stores a program for causing a processor to execute a process including detecting a predetermined operation of a device related to authentication performed using encrypted user biometric information, and updating encryption key information used to encrypt the user biometric information and target biometric information encrypted with the encryption key information when the predetermined operation is detected.

The present disclosure provides a computer-readable medium as a sixth aspect. The computer-readable medium stores a program for causing a processor to execute a process including acquiring biometric information of a user, encrypting the acquired biometric information with cryptographic key information to generate query biometric information, authenticating the user by matching the query biometric information with target biometric information encrypted using the cryptographic key information, detecting a predetermined operation of a device related to the authentication, updating the cryptographic key information when the predetermined operation is detected, and updating the target biometric information using the updated cryptographic key information.

The information update device, information update method, authentication device, authentication method, and computer-readable medium disclosed herein can update key information used for encryption at the appropriate time.

1 is a block diagram showing a schematic configuration of an authentication device according to the present disclosure. 1 is a block diagram showing an authentication system including an authentication device according to an embodiment of the present disclosure. 3A and 3B are schematic diagrams showing biometric information extracted from a camera image, query biometric information, and target biometric information. 4 is a flowchart showing an operation procedure during authentication in the authentication device. 10 is a flowchart showing an operation procedure of the authentication device when updating key information. FIG. 1 is a block diagram showing an example of the configuration of an electronic device.

Before describing the embodiments of the present disclosure, an overview of the present disclosure will be described. FIG. 1 shows a schematic configuration of an authentication device according to the present disclosure. The authentication device 10 has a biometric information acquisition unit 11, an encryption unit 12, an authentication unit 13, a detection unit 15, and an information update unit 16. In the authentication device 10, the detection unit 15 and the information update unit 16 constitute an information update device 20.

Note that while FIG. 1 shows an example in which the information update device 20 is included in the authentication device 10, the present disclosure is not limited to this. The information update device 20 does not necessarily have to be included in the authentication device 10, and the authentication device 10 and the information update device 20 may each be configured as independent devices.

The biometric information acquisition unit 11 acquires biometric information of the user. The encryption unit 12 encrypts the biometric information acquired by the biometric information acquisition unit 11 with encryption key information to generate query biometric information. The authentication unit 13 authenticates the user by comparing the query biometric information with target biometric information encrypted using the encryption key information used by the encryption unit 12.

The detection unit 15 detects a predetermined operation of a device related to authentication. Here, the device related to authentication means, for example, a device that the user operates after authentication. For example, when authentication is performed for entry into a predetermined place or area, the device related to authentication may be a device located at a predetermined place. When a predetermined operation is detected, the information update unit 16 updates the encryption key information used by the encryption unit 12 for encryption. Furthermore, the information update unit 16 updates the target biometric information using the updated encryption key information.

In the present disclosure, the information update unit 16 updates the encryption key information and the target biometric information when a specified operation of the device related to authentication is detected. Even if the target biometric information is stolen by a malicious person and the user is unaware that the target biometric information has been stolen, the encryption key information is updated when the specified operation is detected. In the present disclosure, since the encryption key information and the target biometric information are updated in relation to a specified operation of the device related to authentication, it is possible to update the key information and target biometric information used for encryption at an appropriate time. Furthermore, in the present disclosure, by updating the key information and target biometric information used for encryption at an appropriate time, security risks can be reduced.

Below, an embodiment of the present disclosure will be described in detail with reference to the drawings. Note that the following description and drawings have been omitted or simplified as appropriate for clarity of explanation. In addition, in each of the following drawings, the same elements and similar elements are given the same reference numerals, and duplicate explanations have been omitted as necessary.

FIG. 2 shows an authentication system including an authentication device according to one embodiment of the present disclosure. The authentication system 100 has an authentication device 110 and a camera 130. In the following description, an example is described in which the authentication system 100 is used for entry into the interior of a vehicle such as an automobile. The authentication system 100 is not limited to entry into the interior of a vehicle, and can be applied to authentication in various systems such as access control systems for specific locations or areas.

The camera 130 photographs the user or subject to be authenticated. In this embodiment, the camera 130 photographs a person about to get into a vehicle. The vehicle is, for example, a moving body such as a passenger car, a taxi, or a van. The camera 130 is, for example, mounted on the vehicle and photographs the user outside the vehicle from inside the vehicle. The camera 130 may be installed outside the vehicle and photograph the user approaching the vehicle. Alternatively, the camera 130 may be installed inside the vehicle and photograph the user who has gotten into the vehicle. The authentication device 110 acquires an image of the user from the camera 130 and performs biometric authentication on the user using the acquired image.

Note that although only one camera 130 is illustrated in FIG. 2, in this embodiment, the number of cameras 130 is not limited to one. The authentication system 100 may have multiple cameras 130. The authentication system 100 may include, for example, one or more cameras that photograph the vehicle from outside the vehicle, one or more cameras mounted on the vehicle that photograph the area outside the vehicle, and one or more cameras mounted on the vehicle that photograph the area inside the vehicle.

The authentication device 110 has an image acquisition unit 111, a feature extraction unit 112, an encryption unit 113, an authentication unit 114, a face information DB (database) 115, a detection unit 116, and an information update unit 117. The authentication device 110 may be configured, for example, as a device having one or more memories and one or more processors. At least a part of the functions of each unit in the authentication device 110 may be realized by the processor operating in accordance with a program read from the memory. The authentication device 110 may be mounted on a vehicle, for example. The authentication device 110 corresponds to the authentication device 10 shown in FIG. 1.

The image acquisition unit 111 acquires videos or images captured by the camera 130. The image acquisition unit 111 sequentially acquires the latest images captured by the camera 130. The feature extraction unit 112 extracts biometric features from the images acquired by the image acquisition unit 111. Biometric features are also called biometric information. The feature extraction unit 112 detects, for example, a facial region or facial image of a person present around the vehicle, i.e., a user, from image data, and extracts biometric information from the detected facial region or facial image. The feature extraction unit 112 corresponds to the biometric information acquisition unit 11 shown in FIG. 1.

The encryption unit 113 encrypts the biometric information extracted by the feature extraction unit 112 using encryption key information to generate encrypted biometric information. In this embodiment, homomorphic encryption is used as the encryption method. The encrypted biometric information is also called query biometric information. The encryption unit 113 corresponds to the encryption unit 12 shown in FIG. 1.

The face information DB 115 stores biometric information extracted from face images for one or more registered persons, i.e., users, to be authenticated. The face information DB 115 stores the biometric information of each of multiple users in a storage device, such as a hard disk drive (HDD), a solid state drive (SSD), or a flash memory. The biometric information stored in the face information DB 115 is also called target biometric information. In this embodiment, the target biometric information stored in the face information DB 115 is encrypted using encryption key information used for encryption by the encryption unit 113.

For example, a user registers biometric information in advance in the authentication device 110. When registering biometric information, the user inputs a camera image taken with, for example, the user's own smartphone or digital camera into the authentication device 110. The authentication device 110 extracts biometric information from the camera image input by the user in the feature extraction unit 112, and encrypts the extracted biometric information in the encryption unit 113 using encryption key information. The authentication device 110 stores the encrypted biometric information in the face information DB 115 as target biometric information. The face information DB 115 may store encrypted face images of each of one or more users instead of or in addition to the encrypted biometric information.

In this embodiment, the face information DB 115 does not necessarily have to be included in the authentication device 10. The face information DB 115 may be configured, for example, using a storage device connected to the authentication device 10 via a network.

The authentication unit 114 compares the query biometric information encrypted by the feature extraction unit 112 with the target biometric information stored in the face information DB 115 to authenticate the user. More specifically, the authentication unit 114 acquires the target biometric information of each user from the face information DB 115. The authentication unit 114 compares the query biometric information with the acquired target biometric information of each user. The authentication unit 114 calculates a matching score indicating the degree of match or similarity between the query biometric information and the target biometric information. For example, the matching score indicates a higher value as the degree of match or similarity increases. For example, the authentication unit 114 compares the matching score calculated for each user with a threshold value and determines whether or not face authentication has been successful based on the result of the comparison. The authentication unit 114 corresponds to the authentication unit 13 shown in FIG. 1.

The authentication result of the authentication device 110 is output to a device or system that uses the authentication result, such as an in-vehicle entry system. For example, the authentication device 110 outputs the authentication result to vehicle equipment (not shown), such as an ECU (Electronic Control Unit) that controls the vehicle, via an in-vehicle network such as a CAN (Controller Area Network). If the ECU authenticates that the person in the camera image is a pre-registered user, it unlocks the vehicle door and allows the user to enter the vehicle. If the ECU does not authenticate that the person in the camera image is a pre-registered user, it does not unlock the vehicle door.

The detection unit 116 detects a predetermined operation of a device related to authentication. In this embodiment, the device related to authentication is a vehicle, and the detection unit 116 detects a predetermined operation in the vehicle. The detection unit 116 detects, for example, at least one of opening and closing of a vehicle door, starting of a drive system such as an engine in the vehicle, starting the vehicle, locking of the vehicle door, and stopping of the drive system. The detection unit 116 may, for example, acquire a signal output from an ECU mounted in the vehicle through an in-vehicle network, and detect a predetermined operation in the vehicle based on the acquired signal. The detection unit 116 may, for example, analyze an image of a camera capturing an area inside the vehicle or an area outside the vehicle, and detect a predetermined operation of a user in the vehicle. The detection unit 116 corresponds to the detection unit 15 shown in FIG. 1.

When a predetermined movement is detected by the detection unit 116, the information update unit 117 changes or updates the encryption key information used to generate query biometric information in the encryption unit 113. The information update unit 117 also updates the target biometric information stored in the face information DB 115 using the changed or updated encryption key information. The information update unit 117 may update the encryption key information and the target biometric information every time a predetermined movement is detected. Alternatively, the information update unit 117 may update the encryption key information and the target biometric information every time a predetermined movement is detected a predetermined number of times. The information update unit 117 corresponds to the information update unit 16 shown in FIG. 1.

FIG. 3 shows biometric information extracted from a camera image, query biometric information, and target biometric information. The feature extraction unit 112 extracts biometric information from the camera image. The encryption unit 113 encrypts the biometric information extracted by the feature extraction unit 112 using encryption key information to generate query biometric information. The authentication unit 114 compares the query biometric information encrypted by the encryption unit 113 with the encrypted target biometric information stored in the face information DB 115.

When the detection unit 116 detects a predetermined motion in the vehicle, the information update unit 117 updates the encryption key information and the target biometric information stored in the face information DB 115. When the encryption key information is updated, the query biometric information and the target biometric information before the encryption key information is updated are different from the query biometric information and the target biometric information after the encryption key information is updated. Therefore, even if the target biometric information is stolen by a malicious person, the stolen target biometric information can be invalidated by changing the encryption key information. Therefore, this embodiment can reduce the risk of personal information being leaked and improve security.

Next, the operation procedure will be described. Figure 4 shows the operation procedure during authentication in the authentication device 110. The operation procedure of the authentication device 110 corresponds to the authentication method. The image acquisition unit 111 acquires a camera image from the camera 130 (step A1). The image acquisition unit 111 may periodically perform step A1 and acquire camera images in time series from the camera 130 that captures moving images. The feature extraction unit 112 detects a face region from the camera image and extracts biometric features from the image of the face region (step A2). In step A2, the feature extraction unit 112, for example, extracts one or more feature points from the image of the face region and extracts one or more biometric features based on the extracted one or more feature points.

The encryption unit 113 encrypts the biometric features extracted in step A2 to generate query biometric information (step A3). The authentication unit 114 compares the query biometric information generated in step A3 with the target biometric information stored in the face information DB 115 to perform face authentication (step A4). In step A4, the authentication unit 114 calculates, for example, a matching score between the target biometric information and the query biometric information.

The authentication unit 114 determines whether or not the facial authentication was successful (step A5). In step A5, the authentication unit 114, for example, compares the matching score with a threshold value, and determines whether or not the facial authentication was successful depending on whether or not the matching score is equal to or greater than the threshold value. If the matching score is equal to or greater than the threshold value, the authentication unit 114 determines in step A5 that the facial authentication was successful. In that case, the authentication unit 114 outputs a message indicating that the facial authentication was successful to a device that uses the authentication result, such as an in-vehicle entry system (step A6).

If the matching score is smaller than the threshold value, the authentication unit 114 determines that the facial authentication has failed in step A5. In that case, the authentication unit 114 outputs a message indicating that the facial authentication has failed to the device that uses the authentication result (step A7). If the facial authentication has failed, the authentication device 110 may return to step A1 and restart the facial authentication from the beginning.

FIG. 5 shows the operation procedure of the authentication device 110 when updating key information. The operation procedure of the authentication device 110 when updating key information corresponds to the information update method. The operation procedure of the authentication device 110 when updating key information shown in FIG. 5 may be performed before or after the operation procedure of the authentication device 110 when authenticating shown in FIG. 4. Alternatively, the operation procedure of the authentication device 110 when updating key information shown in FIG. 5 may be performed in parallel with the operation procedure of the authentication device 110 when authenticating shown in FIG. 4.

The detection unit 116 determines whether a predetermined action or operation has been performed in the vehicle (step B1). In step B1, the detection unit 116 determines whether at least one of the following has been performed: opening and closing the vehicle door, starting the drive system such as the engine in the vehicle, starting the vehicle, locking the vehicle door, and stopping the drive system.

When the detection unit 116 determines that a predetermined action or operation has been performed in the vehicle, it transmits a notification to the information update unit 117 indicating that the predetermined action or operation has been detected. The detection unit 116 may count the number of times that the predetermined action or operation has been performed, and when the number of times reaches a predetermined number, transmits a notification to the information update unit 117 indicating that the predetermined action or operation has been detected.

When the information update unit 117 receives a notification from the detection unit 116 indicating that a predetermined movement or operation has been detected, it updates the encryption key information used to encrypt the biometric information in the encryption unit 113, i.e., the encryption key information used to generate the query biometric information (step B2). In step B2, the information update unit 117 generates encryption key information different from the encryption key information used for encryption in the encryption unit 113, and transmits the generated encryption key information to the encryption unit 113. When the encryption unit 113 receives encryption key information from the information update unit 117, it changes the encryption key information used for encryption to the encryption key information received from the information update unit 117.

The information update unit 117 also uses the updated encryption key information to update the target biometric information stored in the face information DB 115 (step B3). In step B3, the information update unit 117 updates the target biometric information, for example, by decrypting the target biometric information before the update using the key information before the update, and encrypting the decrypted target biometric information using the updated encryption key information.

In this embodiment, when a specific action is detected by the detection unit 116, the information update unit 117 updates the encryption key information and the target biometric information. When the information update unit 117 updates the encryption key information, the target biometric information encrypted with the old encryption key information cannot be used for authentication. Therefore, this embodiment can improve security. Also, in this embodiment, the encryption key information and the target biometric information are updated when a specific action is detected. Therefore, even if the user does not specifically instruct an update of the encryption key information, the encryption key information is updated periodically. In this embodiment, even if the target biometric information is stolen, the period during which the stolen target biometric information can be used for authentication can be shortened, and the possibility that the stolen target biometric information will be misused can be reduced.

Next, the hardware configuration of the authentication device 110 will be described. Figure 6 shows an example of the hardware configuration of an electronic device that can be used in the authentication device 110. The electronic device 500 has a processor (CPU: Central Processing Unit) 501, a ROM (read only memory) 502, and a RAM (random access memory) 503. In the electronic device 500, the processor 501, the ROM 502, and the RAM 503 are connected to each other via a bus 504. The authentication device 110 may include other circuits such as peripheral circuits, communication circuits, and interface circuits, although these are not shown.

ROM 502 is a non-volatile storage device. For example, a semiconductor storage device with a relatively small capacity, such as a flash memory, is used for ROM 502. ROM 502 stores the programs executed by processor 501.

The program includes instructions (or software code) that, when loaded into a computer, causes the computer to perform one or more functions described in the embodiments. The program may be stored on a non-transitory computer-readable medium or a tangible storage medium. By way of example and not limitation, computer-readable media or tangible storage media include RAM, ROM, flash memory, SSD or other memory technology, Compact Disc (CD), digital versatile disc (DVD), Blu-ray (registered trademark) disc or other optical disk storage, magnetic cassette, magnetic tape, magnetic disk storage or other magnetic storage devices. The program may be transmitted on a transitory computer-readable medium or a communication medium. By way of example and not limitation, transitory computer-readable media or communication media include electrical, optical, acoustic, or other forms of propagated signals.

RAM 503 is a volatile storage device. Various semiconductor memory devices such as DRAM (Dynamic Random Access Memory) or SRAM (Static Random Access Memory) are used for RAM 503. RAM 503 can be used as an internal buffer for temporarily storing data, etc.

The processor 501 loads the program stored in the ROM 502 into the RAM 503 and executes the program. The CPU 501 executes the program, thereby realizing the functions of each part in the authentication device 110.

In the above embodiment, the authentication device 110 does not necessarily have to be configured as a single device. The authentication device 110 may be configured using multiple devices that are physically separated. For example, the authentication device 110 may be separated into a device having an image acquisition unit 111, a feature extraction unit 112, an encryption unit 113, and an authentication unit 114, and an information update device having a detection unit 116 and an information update unit 117.

Furthermore, when the authentication device 110 is used for vehicle interior entry, it is not necessary for all functions of the authentication device 110 to be installed in the vehicle. For example, some of the functions of the authentication device 110 may be installed in the vehicle, and the rest may be located outside the vehicle. Alternatively, each part of the authentication device 110 may be located outside the vehicle. In that case, the authentication device 110 may acquire camera images from the camera 130 via a wireless communication network. Furthermore, the authentication device 110 may transmit the authentication result to the vehicle via the wireless communication network.

The above describes the embodiments of the present disclosure in detail, but the present disclosure is not limited to the above-described embodiments, and the present disclosure also includes changes and modifications to the above-described embodiments that do not deviate from the spirit of the present disclosure.

For example, some or all of the above embodiments can be described as follows, but are not limited to the following:

[Appendix 1]
a detection unit that detects a predetermined operation of the device related to authentication performed using the encrypted biometric information of a user;
and an information updating unit that updates encryption key information used to encrypt the user's biometric information and the target biometric information encrypted with the encryption key information when the specified movement is detected.

[Appendix 2]
2. The information updating device according to claim 1, wherein the authentication-related device is a vehicle, and the detection unit detects a predetermined operation in the vehicle.

[Appendix 3]
The information update device described in Appendix 2, wherein the detection unit detects at least one of opening and closing of a door of the vehicle, starting of a drive system in the vehicle, starting of the vehicle, locking of the door of the vehicle, and stopping of the drive system.

[Appendix 4]
The information updating device described in any one of Appendices 1 to 3, wherein the information updating unit updates the encryption key information when the specified movement is detected a specified number of times, and updates the target biometric information using the updated encryption key information.

[Appendix 5]
A biometric information acquisition unit that acquires biometric information of a user;
an encryption unit that encrypts the acquired biometric information with encryption key information to generate query biometric information;
an authentication unit that authenticates the user by comparing the query biometric information with target biometric information encrypted using the encryption key information;
A detection unit that detects a predetermined operation of the device related to the authentication;
an information update unit that updates the encryption key information when the predetermined motion is detected, and updates the target biometric information using the updated encryption key information.

[Appendix 6]
The authentication device is used in a vehicle,
6. The authentication device according to claim 5, wherein the device related to the authentication is the vehicle, and the detection unit detects a predetermined operation in the vehicle.

[Appendix 7]
The authentication device described in Appendix 6, wherein the detection unit detects at least one of opening and closing of a door of the vehicle, starting of a drive system in the vehicle, starting of the vehicle, locking of the door of the vehicle, and stopping of the drive system.

[Appendix 8]
8. The authentication device according to claim 6 or 7, wherein the authentication device is used to authenticate the user upon entry into the vehicle interior.

[Appendix 9]
Detecting a predetermined operation of the device associated with authentication performed using the encrypted biometric information of the user;
an information updating method comprising, when the predetermined movement is detected, updating encryption key information used to encrypt the user's biometric information and the target biometric information encrypted with the encryption key information.

[Appendix 10]
Acquire biometric information of the user;
encrypting the acquired biometric information with encryption key information to generate query biometric information;
authenticating the user by matching the query biometric information with target biometric information encrypted using the encryption key information;
Detecting a predetermined operation of the device related to the authentication;
updating the encryption key information when the predetermined motion is detected, and updating the target biometric information using the updated encryption key information.

[Appendix 11]
Detecting a predetermined operation of the device associated with authentication performed using the encrypted biometric information of the user;
A non-transitory computer-readable medium storing a program for causing a processor to execute a process including updating, when the specified motion is detected, cryptographic key information used to encrypt the user's biometric information and target biometric information encrypted with the cryptographic key information.

[Appendix 12]
Acquire biometric information of the user;
encrypting the acquired biometric information with encryption key information to generate query biometric information;
authenticating the user by matching the query biometric information with target biometric information encrypted using the encryption key information;
Detecting a predetermined operation of the device related to the authentication;
A non-transitory computer-readable medium storing a program for causing a processor to execute a process including updating the encryption key information when the specified motion is detected, and updating the target biometric information using the updated encryption key information.

10: Authentication device 11: Biometric information acquisition unit 12: Encryption unit 13: Authentication unit 15: Detection unit 16: Information update unit 20: Information update device 100: Authentication system 110: Authentication device 111: Image acquisition unit 112: Feature extraction unit 113: Encryption unit 114: Authentication unit 115: Face information DB
116: Detection unit 117: Information update unit 130: Camera 500: Electronic device 501: Processor 502: ROM
503: RAM
504: Bus

Claims

a detection unit that detects a predetermined operation of the device related to authentication performed using the encrypted biometric information of a user;
and an information updating unit that updates encryption key information used to encrypt the user's biometric information and the target biometric information encrypted with the encryption key information when the specified movement is detected.
The information update device according to claim 1, wherein the device related to the authentication is a vehicle, and the detection unit detects a predetermined operation in the vehicle.
The information update device according to claim 2, wherein the detection unit detects at least one of the following: opening and closing of the vehicle door, starting of the drive system in the vehicle, starting the vehicle, locking of the vehicle door, and stopping of the drive system.
The information update device according to any one of claims 1 to 3, wherein the information update unit updates the encryption key information when the specified action is detected a specified number of times, and updates the target biometric information using the updated encryption key information.
A biometric information acquisition unit that acquires biometric information of a user;
an encryption unit that encrypts the acquired biometric information with encryption key information to generate query biometric information;
an authentication unit that authenticates the user by comparing the query biometric information with target biometric information encrypted using the encryption key information;
A detection unit that detects a predetermined operation of the device related to the authentication;
an information update unit that updates the encryption key information when the predetermined motion is detected, and updates the target biometric information using the updated encryption key information.
The authentication device is used in a vehicle,
The authentication device according to claim 5 , wherein the device related to the authentication is the vehicle, and the detection unit detects a predetermined action in the vehicle.
The authentication device according to claim 6, wherein the detection unit detects at least one of the following: opening and closing of the vehicle door, starting of the drive system in the vehicle, starting the vehicle, locking of the vehicle door, and stopping of the drive system.
The authentication device according to claim 6 or 7, wherein the authentication device is used to authenticate the user at an entry into the vehicle interior.
Detecting a predetermined operation of the device associated with authentication performed using the encrypted biometric information of the user;
an information updating method comprising, when the predetermined movement is detected, updating encryption key information used to encrypt the user's biometric information and the target biometric information encrypted with the encryption key information.
Acquire biometric information of the user;
encrypting the acquired biometric information with encryption key information to generate query biometric information;
authenticating the user by matching the query biometric information with target biometric information encrypted using the encryption key information;
Detecting a predetermined operation of the device related to the authentication;
updating the encryption key information when the predetermined motion is detected, and updating the target biometric information using the updated encryption key information.
Detecting a predetermined operation of the device associated with authentication performed using the encrypted biometric information of the user;
A non-transitory computer-readable medium storing a program for causing a processor to execute a process including updating, when the specified motion is detected, cryptographic key information used to encrypt the user's biometric information and target biometric information encrypted with the cryptographic key information.
Acquire biometric information of the user;
encrypting the acquired biometric information with encryption key information to generate query biometric information;
authenticating the user by matching the query biometric information with target biometric information encrypted using the encryption key information;
Detecting a predetermined operation of the device related to the authentication;
A non-transitory computer-readable medium storing a program for causing a processor to execute a process including updating the encryption key information when the specified motion is detected, and updating the target biometric information using the updated encryption key information.