JP2002190026A - Fingerprint authentication method - Google Patents

Abstract

(57) [Summary] A conventional fingerprint database executes a collation process only with fingerprint data 54 of one predetermined fingerprint database. Therefore, if the fingerprint database is destroyed for some reason or the fingerprint data server is not running, the system cannot be operated. Also, the number of fingerprint days increased the authentication time. According to the present invention, a fingerprint database is not stored in a single fingerprint data server, but is set in a plurality of locations to distribute fingerprint data and perform authentication processing with each fingerprint data. it can. This configuration has the effect of shortening the authentication time. Also, by multiplexing fingerprint data servers,
If one of the fingerprint data servers is operating, the system will not be affected and the system operation rate can be increased.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method of transmitting a fingerprint input from a fingerprint input unit of a client to a fingerprint data server connected via a network, and performing registration and collation at the fingerprint data server. The present invention relates to a fingerprint authentication method in which fingerprint servers are connected in multiple stages to improve reliability at the time of fingerprint collation.

[0002]

2. Description of the Related Art A conventional fingerprint authentication system executes an authentication process only with fingerprint data in a designated or fixed fingerprint database at one location.

[0003]

For this reason, if the fingerprint database is destroyed for some reason or the fingerprint data server is not running, the system cannot be operated. Also, the number of fingerprint days increased the authentication time.

According to the present invention, a plurality of fingerprint data servers for registering and collating fingerprints are provided, and if a plurality of multiplexed fingerprint servers are arranged in multiple layers, the collation fails. With the configuration, the authentication time is shortened and the reliability is greatly improved. If one fingerprint data server among a plurality of fingerprint data servers is operating, there is no effect on the system, and the system operation rate can be increased.

[0005]

According to a first fingerprint authentication method of the present invention, multiplexed servers in a network to which a client and a server are connected are connected in multiple stages to register and collate fingerprint data. A fingerprint authentication method, comprising: a fingerprint input unit for inputting fingerprint data; and selecting one fingerprint data server from fingerprint data servers constituting a first layer composed of one or more fingerprint data servers, and selecting the selected fingerprint data server. A client that transmits fingerprint data to the client, and a fingerprint that is transmitted from the client when the fingerprint is registered or a fingerprint does not match. And the fingerprint data server that constitutes the first layer, which selects one fingerprint data server from the fingerprint data servers and transmits the fingerprint data. A multiplexed fingerprint data server composed of one or more fingerprint data servers is provided as a multi-tiered hierarchy, and the fingerprint data server has a fingerprint database for registering fingerprint data. In the case of a mismatch, transfer of the fingerprint data from the client to one fingerprint data server selected from the fingerprint data servers constituting the next layer is provided.

According to a second fingerprint authentication method of the present invention, in the first invention, in registering the fingerprint data, the fingerprint data received from the client or the fingerprint data server constituting the preceding hierarchy is used to construct the own hierarchy. And a fingerprint data server for transferring to one fingerprint data server selected from the fingerprint data servers constituting the next hierarchy, and multiplexing the top hierarchy. Transferring the fingerprint data to the fingerprint data server.

In a third fingerprint authentication system according to the present invention, in the first invention, in the fingerprint data collation, when the fingerprint data received from the client or the fingerprint data server constituting the preceding hierarchy does not match, the fingerprint data collation is not performed. Fingerprint data is transferred to one selected fingerprint data server from the fingerprint data servers constituting the hierarchical level, and the fingerprint data server that receives the transfer of the fingerprint data checks the fingerprint data. When the fingerprint data is transferred to the fingerprint server constituting the next hierarchical level and the collation mismatch continues, the fingerprint data is transferred to the fingerprint data server configuring the uppermost hierarchical level. According to a fourth fingerprint authentication method of the present invention, in the first invention, fingerprint data and
A fingerprint including a user identifier of the fingerprint data, a client identifier for identifying the client, and a fingerprint identification number uniquely assigned to the fingerprint data. The fingerprint database including a number is provided.

According to a fifth fingerprint authentication method of the present invention, in the first or fourth invention, when the fingerprint data server is started up, another fingerprint data server constituting the same hierarchy is queried for the latest fingerprint identification. The fingerprint data server in which the latest fingerprint data is registered is detected by acquiring the number and comparing it with the latest fingerprint identification number in its own database, and the fingerprint data that has not been reflected in its own fingerprint database from the detected fingerprint data server. And a fingerprint data server for acquiring the fingerprint data and updating the fingerprint database.

According to a sixth fingerprint authentication method of the present invention, in the first or second invention, the fingerprint data server at the highest hierarchical level which has performed the fingerprint data registration processing sends a response of the fingerprint data registration to the client. The fingerprint data server of the other layer includes a fingerprint data server that does not respond.

According to a seventh fingerprint authentication method of the present invention, in the first, second or sixth invention, when there is no response to the fingerprint data registration request from the fingerprint data server, the fingerprint data registration request is stored. After a certain period of time, a client is provided for making a request for registration of the fingerprint data to the fingerprint data server.

[0011]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The configuration of a first embodiment of the fingerprint authentication system according to the present invention will be described.

The present invention relates to a system for establishing a hierarchical or multiplex environment of fingerprint data servers in a system for personal authentication using fingerprints. Before describing the final configuration of a multiplexed fingerprint data server having multiple layers, a simple configuration will be described first.

FIG. 1 shows a basic configuration of the present invention.

In FIG. 1, a client 11 such as a personal computer, a keyboard 12 for inputting a user name and the like, a fingerprint input unit 13 connected to the client 11 for inputting a fingerprint, and a fingerprint input unit 13 A fingerprint data server 20 including a personal computer or a workstation for registering and collating the fingerprint data 54 transmitted from the client 11, a fingerprint database 54 in which the fingerprint data 54 is registered, A network 15 such as a LAN such as Ethernet (registered trademark) or the Internet for connecting the client 11 and the fingerprint data server 20.
And the fingerprint data 5 input from the fingerprint input unit 13
4 and a collation request 102 transmitted at the time of registration and a collation request 102 transmitted at the time of collation like the registration request 101.
And a registration result 10 which is a response to the registration request 101
3 and a collation result 1 which is a response to the collation request 102
04.

In the following, a description will be given of a case where one client 11 is connected to the network 15, but the same applies even when a plurality of clients 11 are connected. Although not shown in the client 11, the input fingerprint is accepted, a registration request or a collation request is made to the fingerprint data server 20, and a response from the fingerprint data server 20 is analyzed and a corresponding action is taken. It includes a fingerprint processing program and a communication processing program for transmitting the registration request 101 and the collation request 102 and for receiving the registration result 103 and the collation result 104. Although the fingerprint processing program and the communication processing program have different functions, the fingerprint data server 20 also has a program for performing fingerprint processing and communication processing.

The client 11 is a fingerprint data server 20
The following functions are required: a function for registering unregistered fingerprint data 54, a function for updating fingerprint data 54 once registered for a user with new fingerprint data 54, and a function for deleting fingerprint data 54 once registered. There is a function and a function of performing collation for user authentication.

The fingerprint data server 20 is connected to the client 11
When the registration request is received from, in order to check whether the fingerprint data 54 requested for registration is already registered,
The matching process is performed with all the fingerprints registered in the fingerprint database 30. If there is a match in the collation processing, an error is notified to the client 11 and the registration processing is not performed. If there is no match in this collation processing, registration is performed.

In the case of the updating process, the updated fingerprint data 5
4 and a user identifier for identifying a user having this update data are transmitted to the fingerprint data server 20. The fingerprint data server 20 specifies the fingerprint data to be updated based on the user identifier. Conversely to the registration process, if the fingerprint data 54 specified by the user identifier is not registered in the fingerprint database 30, an error is returned and the update process is not performed.
If it is registered, the registered fingerprint data 54 is replaced with the fingerprint data 54 requested to be updated.

In the process of deleting the fingerprint data 54, the client 11 specifies the fingerprint data 54 to be deleted or the user identifier of the user having the fingerprint data 54 to be deleted, and notifies the fingerprint data server 20 of the fingerprint data. The fingerprint data server 20 performs a matching process on the received fingerprint data 54 with the fingerprint database 30 and deletes a matching fingerprint from the fingerprint database 30. In this case, the fingerprint data 54
If it is difficult to perform the collation by using the user identifier, the user ID may be deleted.

In the case of the collation processing, the fingerprint database 30
All the fingerprints above are compared with the fingerprint data 54 specified by the collation request 102.

The fingerprint data server 20 that has performed the processing for each of the registration, update, deletion, and collation requests from the client 11 returns a processing result to the client 11.
In the following, a detailed description of update and deletion will be omitted, and the registration and collation processing will be mainly described.

When the client 11 registers the fingerprint data 54, the client 11 transmits a registration request 101. When the client 11 performs verification of the fingerprint data 54, the client 11 transmits a verification request 102 to the fingerprint data server 20.
Send to The registration request 101 or the collation request 102 is transmitted to the fingerprint data server 20 via the network 15, and the fingerprint data server 20 receives each request.

The data structure of the registration request 101 and the collation request 102 is, as shown in FIG.
5, a client identifier 51 for uniquely identifying one or more clients 11 connected to the fingerprint input unit 13;
Identification number 52, which is the sequence number of the fingerprint input from
A function identifier 53 for identifying a function of requesting the fingerprint data server 20 to register, update, delete, or collate the fingerprint data 54; a fingerprint data 54 input from the fingerprint input unit 13; And a user identifier 55 for identifying a user having

FIG. 6B shows the data structure of the registration result 103 and the collation result 104. According to FIG. 2 (b), a client identifier 51 for identifying the client 11;
A fingerprint identification number 52, which is the sequence number of the input of the fingerprint, a function identifier 53 for identifying registration or collation, a user identifier 55 of the collated user, an end code 56 for indicating normal end or abnormal end. , An abnormal end code 57 for identifying an abnormal end. Client identifier 5
1, the fingerprint identification number 52, and the function identifier 53 have the same contents as the corresponding registration request 101 and matching request 102.

The client 11 is a fingerprint data server 20
When the registration request 101 is made, the fingerprint of the user to be registered and the user identifier 55 of the user are stored in the fingerprint data 54.
Has been entered by the client 11. When the client 11 makes the collation request 102, the user identifier 55 is blank. When the matching by the fingerprint data server 20 matches, the user identifier 55 of the matching fingerprint data 54 is set as the matching result 104.

The item of the user identifier 55 is required when the user is authenticated by inputting only the fingerprint in the login process of the user using the personal computer. In some cases, such a case is not necessarily required.
Hereinafter, a case in which the item having the user identifier 55 is provided will be described.

When registering a fingerprint, the fingerprint data 54
The user identifier 55 of the user having the fingerprint is registered in the fingerprint database 30. In the case of fingerprint collation, when the collation matches, the matching user identifier 55 is returned from the fingerprint data server 20 to the client 11. If the field of the user identifier 55 is not provided on the fingerprint data server, a response indicating whether the fields match or mismatch is returned.

The fingerprint identification number 52 is managed by the client 11, is counted up by one each time a fingerprint is input, and is not reset to the initial value even when the client 11 is started and stopped. Further, the value is set to a numerical value of about 32 digits in a binary number, and is a value that does not cause overflow in normal operation.

The fingerprint identification number 52 is managed by the client 11 in a nonvolatile memory such as a magnetic disk device. The serial number of the collation process and the serial number of the registration other than the collation process are divided into two and managed by different numbers.

The fingerprint data server 20, which has the possibility of simultaneously accepting the registration request 101 and the collation request 102 of the fingerprint data 54 from a plurality of clients 11, uses the client identifier 51 and the fingerprint identification number 52 to register the registration request 101.
And the collation request 102 are identified.

When the fingerprint data 54 is registered in the fingerprint database 30, the fingerprint data 54, the user identifier 55, and the client identifier 51
And the fingerprint identification number 52 are stored as one record. By registering the client identifier 51 and the fingerprint identification number 52, the registration state of the fingerprint database 30 can be new or old. In the case of deletion, the field of the user identifier 55 is the same, and the field of the fingerprint data 54 is NU.
The LL is cleared and the fields of the client identifier 51 and the fingerprint identification number 52 are also updated. The fingerprint database 30 has a client identifier 51 for each client 11.
And the latest fingerprint identification number 52 of the registration request 101 for each client 11 is stored.

When the registration request 101 is issued from the client 11, the latest fingerprint identification number 52 currently registered in the fingerprint database 30 of the client 11 is compared with the fingerprint identification number 52 of the registration request 104. When the fingerprint identification number of the database 30 is equal to the fingerprint identification number of the registration request 101, registration is performed, and otherwise, no registration is performed.

The fingerprint data server 20 receiving the registration request 101 or the collation request 102 from the client 11
In the case of a request for registration of a fingerprint in the fingerprint database 30, the registration is performed, and in the case of a request for collation of a fingerprint, the registered fingerprint is read from the fingerprint database 30 to perform a matching process to determine whether they match. In the case of registration from the client 11, the result of the registration is returned to the client 11 as the registration result 103, and in the case of collation, the result of the collation is compared with the collation result 1
04 is returned to the client 11.

FIG. 2 shows a single fingerprint data server having a two-stage configuration.

In FIG. 2, when the client 11 requests the fingerprint data server 20 to perform the collation, the fingerprint data server 2
In the case where the verification fails on 0, the fingerprint data server 20
Further, the collation request 102 from the client 11 that failed in the collation is transferred to the fingerprint data server 22.
At this time, the fingerprint data server 22
It is called an authentication destination server of 0. This mechanism will be described below.

In FIG. 2, the fingerprint data server 20
The own authentication server is the fingerprint data server 22, and the communication address of the fingerprint data server 22 on the network 15 is stored in the authentication server communication address storage area 40.
In this state, the client 11 inputs a fingerprint from the connected fingerprint input unit 13 and sends a verification request to the fingerprint data server 20. The fingerprint data server 20 receives the collation request 102 from the client 11. The fingerprint data server 20 sends the fingerprint data 54 of the collation request 102
The matching process is performed with the fingerprint data 54 of the fingerprint database 30, and if the matching is successful and the authentication is successful, the matching result 104 is returned to the client 11.

In the fingerprint collation, a matching fingerprint could not be detected,
If the user authentication fails, the fingerprint data server 20
Refers to the authentication destination server communication address storage area 40, and transfers the verification request 102 from the client 11 to the fingerprint data server 22, which is the authentication destination server, based on the communication address described therein. The content of the data to be transferred at this time has the same content as the collation request 102 from the client 11.

The collation request 10 from the fingerprint data server 20
The fingerprint data server 22 that has received 2 performs the collation processing with the fingerprint data 54 of the fingerprint database 32 in the same manner as in the mechanism of FIG. 1, and returns the result to the fingerprint data server 20. Then, the fingerprint data server 20 receives the result returned from the fingerprint data server 22 and returns the received content as it is to the client 11 as the collation result 104. In this way, it is possible to construct a two-level fingerprint database hierarchization by the two fingerprint database servers 20 and 22.

FIG. 3 is a diagram for explaining a case of a one-stage configuration including n fingerprint data servers.

In FIG. 3, the client 11 is a network 1 of fingerprint data servers 20, 21,.
Communication address and fingerprint data server 2 at 5
The multiplexed server names assigned to the entirety of 0, 21,... 2n are stored in the multiplexed server name storage area 41. Further, the fingerprint data servers 20, 2 constituting the multiplexing server 2A
, 2n also store the communication addresses of the other fingerprint data servers 20, 21,... 2n that make up the same multiplexing server 2A.

In this state, when the fingerprint data 54 is input from the fingerprint input unit 13 connected to the client 11 and the client 11 registers the fingerprint data 54 with the multiplexing server 2A, the registration request 101 Transmission is performed, and in the case of collation, a collation request 102 is transmitted. The fingerprint processing program of client 11 is multiplexed server 2A
When making a registration request 101 or a collation request 102, the request can be made by specifying a multiplex server name.

When the communication processing program of the client 11 detects a match from the multiplex server name storage area 41 by the multiplex server name, the client 11
Fingerprint data server 2 that last performed communication processing with
2n are obtained, and a registration request 101 and a collation request 102 are transmitted to the fingerprint data servers 20, 21,... 2n. The fingerprint data servers 20, 21,...
02 is received, a response to the effect that the request has been received is returned to the client 11. Client 11
Immediately after startup, the fingerprint data server 20 having the first communication address in the multiplexed server name storage area 41,
21,... 2n.

Then, the registration request 101 and the collation request 102
Fingerprint data servers 20, 21,...
n, when there is no response after a certain period of time, or when a notification of an error such as a software failure, a hardware failure, or a communication failure is received, the communication processing program of the client 11 executes the fingerprint data server 20 having another communication address. 21,
Re-send the request to 2n. As described above, the fingerprint data servers 20.21,..., 2n that have returned the response indicating that the request has been received are marked as the first candidates of the transmission destination at the time of the next transmission. If processing requests to all fingerprint data servers also fail, the communication processing program notifies the fingerprint processing program of an error, so the fingerprint processing program notifies the user and re-executes it at an appropriate time. Will do. In the case of the collation request 102, the error does not correspond to the case where the fingerprint corresponding to the fingerprint database is not registered.

In the case of the registration request 101 from the client 11, the fingerprint data servers 20, 21,... All other fingerprint data servers 20, 21,...
・ Registration request 1 received from client 11 for 2n
01 is transferred. Fingerprint data server 2 that received the transfer
.. 2n execute a registration process. However, the fingerprint database server 2 that has transmitted the registration request 101
., 2n do not care about the processing results of the fingerprint data servers 20, 21,.

Here, when the fingerprint data 54 is registered or updated when there is an inactive fingerprint data server among the fingerprint data servers 20, 21,... 2n constituting the multiplexing server 2A, Fingerprint databases 30, 31,
... Because a fingerprint database in which the registered fingerprint data 54 is not registered between 3n occurs, the fingerprint database 30,
.., 3n are not matched with each other.

In order to prevent inconsistency of the registered fingerprint data 54 in the same multiplexing server 2A, the fingerprint data servers 20, 21,...
n start operating, the running fingerprint databases 30, 31,... 3n in the same multiplexing server 2A
Unregistered or unupdated fingerprint data 54 information is obtained from
Running fingerprint data servers 20, 21,... 2n
, 3n are all registered with the same fingerprint data 54. Fingerprint data 54 registered in the multiplexing server 2A
Specifically, there is the following method for obtaining the agreement.

When, for example, the fingerprint data server 2n, which has not been operating, starts operating, the fingerprint data server 2n starts operating.
n with respect to the other fingerprint data servers 20, 21...
Latest fingerprint data 5 registered from each client 11
An inquiry about the fingerprint identification number 52 is made for No. 4. The fingerprint data servers 20, 21,...
0, 31... And the latest fingerprint identification numbers 52 for all the clients 11 are stored in the fingerprint data server 2.
Notify n.

The fingerprint data server 2n receiving this
Are the fingerprint data server 20 and the fingerprint data server 21... For the fingerprint identification number 52 of each client 11.
Are compared, and the fingerprint data servers 20, 21,... Having the latest fingerprint identification number 52 are selected.

A comparison is made for all clients 11 and the latest fingerprint identification number 5
After completing the selection of No. 2, the selected fingerprint identification number 52 is compared with the latest fingerprint identification number 52 of the fingerprint database 3n of the client 11 for each client 11. By this comparison, the fingerprint data server 2n determines, for example, from the x-th to y-th of the fingerprint identification number 52 for each client 11.
It can be seen that the first number is not registered in the self-fingerprint database 3n. Based on this, the fingerprint data server 2n requests each of the fingerprint data servers 20, 21,... To transmit the fingerprint data 54 in the range of the designated fingerprint identification number 52.

When the fingerprint data servers 20, 21... Receive the fingerprint identification number 52 whose range is specified from the fingerprint data server 2n, the fingerprint data of the fingerprint identification number 52 that has been registered, updated, and deleted within the range is received. Only the data 54 is selected and transmitted to the fingerprint data server 2n.

As a method different from the above, as shown in FIG. 5, when the fingerprint data server 20, 21... Registers, updates, or deletes the fingerprint data 54 from the client 11, the time at that time is stored. To do it. When the fingerprint data server 2n starts up, the fingerprint data servers 20, 2
.. Are requested to obtain the time, and the fingerprint data server 2n obtains the fingerprint data 54 from the fingerprint data servers 20, 21,... Having the latest time among the received times. Is also good.

When the other fingerprint data servers 20, 21,... Are not operating at all when the fingerprint data server 2n starts up, the other fingerprint data servers 20, 2,.
.. Are activated.

Note that the above processing is performed by periodically inquiring between the same multiplexing servers 2A other than when the fingerprint data server 2n starts up, so that the fingerprint database 30,
.. 3n can be guaranteed uniformity. Next, an example in which two fingerprint data servers are combined in three stages will be described with reference to FIG. The following description is based on the contents described above.

In FIG. 4, TCP / IP (Trans
Mission Control Protocol / I
The case where the multiplex servers 2A, 2B, and 2C of the present invention are constructed using the communication protocol of the Internet Protocol will be described. In this case, the communication address corresponds to an IP address and a port number.

The fingerprint data servers 20 and 21 are collectively referred to as a multiplexing server 2A.
The P address and the port number are stored in a file such as a secondary storage device of each of the client 11 and the fingerprint data servers 20 and 21.
2 and 23 are combined into a multiplexing server 2B, the IP addresses and port numbers of the fingerprint data servers 22 and 23 are stored in files of the fingerprint data servers 20, 21, 22 and 23, and the fingerprint data servers 24 and 25 are combined. The multiplexing server 2C is used to input the fingerprint data servers 24, 25 and the IP addresses and port numbers of the fingerprint data servers 22, 23, 2
4, 25 files. Further, the fingerprint data servers 24 and 25 store the IP address and port number of the client 11. As described above, the fingerprint data server 20 and the fingerprint data server 21 constitute a multiplexing server 2A, the fingerprint data server 22 and the fingerprint data server 23 constitute a multiplexing server 2B, and the fingerprint data server 24 and the fingerprint data server 25 are multiplexed. The configuration server 2C is configured. As a result, a configuration composed of three groups can be obtained with two configurations as a multiplex server.

Next, in order to hierarchize the multiplex server, the identification name of the multiplex server 2B and the fingerprint data server 2 are used as authentication servers of the fingerprint data servers 20 and 21.
The port numbers of the fingerprint processing programs 2 and 23 are stored in the fingerprint data servers 20 and 21, and the identification names of the multiplexing server 2C and the fingerprint data servers 24 and 25 are used as the authentication destination servers of the fingerprint data servers 22 and 23. The port numbers of the fingerprint processing program are stored in the fingerprint data servers 22 and 23.
In a file.

Finally, each of the multiplexing servers 2A, 2B, 2C
Fingerprint data server constituting 20 25 are registered in the fingerprint databases 30,... 35 on the... 25, and processing for eliminating differences between the fingerprint databases 30,.

First, a fingerprint is input from the fingerprint input unit 13 connected to the client 11. Thereafter, the communication processing program of the client 11 makes a communication request by designating the identification name of the multiplex server 2A. Upon receiving this, the communication processing program selects the fingerprint data servers 20, 21 that last communicated with the client 11 among the fingerprint data servers 20, 21 constituting the multiplexing server 2A, and sends them to the fingerprint data servers 20, 21. Matching request 10
Send 2.

The fingerprint data server 20, which has received this,
21 collates with the fingerprint data of the fingerprint database 30 or 31, and when the collation is matched, returns the collation result 104 including the user identifier 55 of the matched fingerprint information 54 to the client 11.

If the comparisons do not match, the communication processing programs of the fingerprint data servers 20 and 21 further change the fingerprint data servers 22 and 23 constituting the multiplexing server 2B.
Of the fingerprint data servers 22 and 23 that communicated last is selected, and the collation request 102 is transferred to the fingerprint data servers 22 and 23.

The configuration of the multiplexing server 2B The fingerprint data servers 22 and 23 collate with the fingerprint data 54 of the fingerprint databases 32 and 33, and when the collation is confirmed and authenticated, the fingerprint data servers 22 and 23 communicate with the client 11 via the multiplexing server 2A. The result is returned, and if the collation does not match, the fingerprint data 54 in the fingerprint databases 34 and 35 of the fingerprint data servers 24 and 25 constituting the multiplexing server 2C is collated in the same manner, and the collation is matched or mismatched. Regardless, the result is returned to the client 11 via the multiplexing servers 2A and 2B.

When the client 11 makes the registration request 101 and either of the fingerprint data servers 20 and 21 constituting the multiplexing server 2A receives this registration request, for example, the fingerprint data server 20 makes this registration request 101
Receives the fingerprint data 5 in the self-fingerprint database 30.
4 and also transfers the registration request 101 to another fingerprint data server 21 constituting the same multiplexing server 2A. The fingerprint data server 20 further includes the multiplex server 2
B fingerprint data servers 22 and 23 that last communicated with fingerprint data server 20 among fingerprint data servers 22 and 23 of B
To the registration request 101.

For example, when the fingerprint data server 22 receives the transferred registration request 101, the fingerprint data server 22
Is the same multiplexing server 2 as the fingerprint data server 20.
B and the fingerprint data servers 24 and 2 constituting the multiplexing server 2C at the same time as transferring them to the fingerprint data server 23 constituting the
5, the registration request 101 is transferred.

The process of transferring the registration request 101 to the other fingerprint data servers 20 to 25 is also performed when a target fingerprint has already been registered and a registration error occurs. The response of the registration result 103, which is the result of processing the registration request 101 by the fingerprint data servers 20 to 25, is:
The process is performed for the client 11 from the multiplexing server 2C, which is the last in the multi-stage configuration. In the case of this example, a response is made from one of the fingerprint data servers 24 and 25 of the multiplexing server 2C.

If this response is obtained, the client 11 determines that the registration request has been completed normally. If this response is not obtained after a certain period of time, the registration request 101 is propagated to the multiplex servers 2A and 2B. , 2C, the registration request 101 is temporarily stored on a secondary storage medium such as a magnetic disk device.

The client 11 periodically retrieves the registration request 101 stored on the secondary storage medium and reissues the registration request 101 to one of the fingerprint data servers 20 and 21 constituting the multiplexing server 2A. When a response is received from one of the fingerprint data servers 24 and 25 constituting the multiplexing server 2C by performing the above processing, the registration request 101 is deleted from the secondary storage medium.

As described above, the description of the three-stage configuration shown in FIG. 4 has been made, but it is clear from the above description that there is no particular restriction on the number of stages.

[0068]

As described above, in the present invention,
Instead of placing a fingerprint database in a single fingerprint data server, the fingerprint data 54 can be set at a plurality of locations and distributed, and authentication processing can be performed with each fingerprint data 54.

With this configuration, there is an effect that the authentication time can be shortened.

Further, by multiplexing fingerprint data servers, if one of the fingerprint data servers is operating, the system is not affected, and the system operation rate can be increased. effective.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of a first exemplary embodiment of the present invention.

FIG. 2 is a block diagram illustrating a configuration of a first exemplary embodiment of the present invention.

FIG. 3 is a block diagram illustrating a configuration of a first exemplary embodiment of the present invention.

FIG. 4 is a block diagram illustrating a configuration of the first exemplary embodiment of the present invention.

FIG. 5 is a block diagram illustrating a configuration of the first exemplary embodiment of the present invention.

FIG. 6 is an example of the content of fingerprint collation and registration data according to the first embodiment of the present invention.

[Explanation of symbols]

 Reference Signs List 11 client 12 keyboard 13 fingerprint input unit 15 network 20-2n fingerprint data server 2A, 2B, 2C multiplex server 30-3n fingerprint database 40 authentication server communication address storage area 41 multiplex server name storage area 51 client identifier 52 fingerprint identification Number 53 Function identifier 54 Fingerprint data 55 User identifier 56 Exit code 57 Abnormal termination code 101 Registration request 102 Verification request 103 Registration result 104 Verification result

Claims (7)

[Claims] 1. A fingerprint authentication system for registering and collating fingerprint data by connecting multiplexed servers in a network in which a client and a server are connected in a multistage manner, wherein a fingerprint input for inputting fingerprint data is provided. 1 from a fingerprint data server that has a unit and constitutes a first layer consisting of one or more units
A client that selects one fingerprint data server and transmits fingerprint data to the selected fingerprint data server; and a case where fingerprint data transmitted from the client is received and a fingerprint is registered or a fingerprint does not match. Further, in the same manner as the fingerprint data server constituting the first hierarchy, which selects one fingerprint data server from the fingerprint data server of the second hierarchy, which is the next hierarchy composed of one or more devices, and transmits fingerprint data, Multiplexed fingerprint data server composed of one or more fingerprint data servers as a multi-level hierarchy, the fingerprint data server has a fingerprint database for registering fingerprint data, If there is no match in the collation, the client sends the data to the one fingerprint data server selected from the fingerprint data servers constituting the next layer. Fingerprint authentication method, characterized in that the transfer of fingerprint data. 2. In the registration of fingerprint data, the fingerprint data received from the client or the fingerprint data server constituting the preceding hierarchy is transferred to all other fingerprint data servers constituting the own hierarchy, and the next hierarchy is registered. A fingerprint data server that transfers data to one fingerprint data server selected from the constituent fingerprint data servers, and transfers the fingerprint data to the multiplexed fingerprint data server at the highest level; The fingerprint authentication method according to claim 1. 3. In the fingerprint data collation, if the fingerprint data received from the client or the fingerprint data server constituting the preceding layer does not match in the collation, one of the fingerprint data servers selected from the fingerprint data server constituting the next layer is used. The fingerprint data is transferred to the fingerprint data server, and the fingerprint data server that received the transfer of the fingerprint data checks the fingerprint data. If the fingerprint data does not match, the fingerprint data is further transferred to the fingerprint server constituting the next layer. 2. The fingerprint authentication method according to claim 1, wherein, if the verification mismatch continues, the fingerprint data is transferred to the fingerprint data server constituting the uppermost layer. 4. A record including fingerprint data, a user identifier of the fingerprint data, a client identifier for identifying a client, and a fingerprint identification number uniquely assigned to the fingerprint data. The fingerprint authentication method according to claim 1, further comprising the fingerprint database including a latest fingerprint identification number of a newly registered fingerprint. 5. When starting up the fingerprint data server, another fingerprint data server constituting the same hierarchy is queried to obtain the latest fingerprint identification number and compare it with the latest fingerprint identification number in its own database. A fingerprint data server that detects a fingerprint data server in which the latest fingerprint data is registered, acquires fingerprint data that has not been reflected in its own fingerprint database from the detected fingerprint data server, and updates the fingerprint database. 5. The fingerprint authentication system according to claim 1, wherein 6. The fingerprint data server at the top tier that has performed fingerprint data registration processing responds to the client with fingerprint data registration, and the other tiers of fingerprint data servers do not respond. The fingerprint authentication method according to claim 1 or 2, wherein 7. When a response to the fingerprint data registration request is not received from the fingerprint data server, the client that stores the fingerprint data registration request and, after a lapse of a predetermined time, issues the fingerprint data registration request to the fingerprint data server. A fingerprint authentication method comprising: