JP2003271565A - Identity authentication system, identity authentication terminal, reader, and identity authentication method - Google Patents

Abstract

(57) [Summary] [PROBLEMS] To prevent personal identification data and biological characteristic data from being stolen, forged, leaked, etc., to increase security and to reduce user's psychological anxiety. To provide an authentication system, an authentication terminal and an authentication method. SOLUTION: When iris data is registered in a registration unit 9 of a portable terminal 1 and the iris data is input by capturing an iris by an imaging camera 3, the iris data is registered in the registration unit 9. When the comparison result matches, the ID data is read from the registration unit 9 and the authentication terminal 21 is read.
When the authentication terminal 21 receives the ID data, the authentication terminal 21 compares the ID data with the ID data stored in the storage unit 25 to perform authentication.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal identification system, a personal identification terminal, and a personal identification method. More specifically, this characteristic data is authenticated by detecting biological characteristics such as an iris and a fingerprint. The present invention relates to a personal authentication system, a personal authentication terminal, and a personal authentication method that can retrieve personal identification data at any time.

[0002]

2. Description of the Related Art Recently, confidential information related to personal privacy such as keys, various cards, identification cards, personal identification numbers (IDs), passwords, etc. has been inundated. It is managed by possession, storage or storage. Therefore, there is a problem in security, and confidential information cannot be sufficiently managed due to theft, forgery, loss, leakage, forgetting, misunderstanding, or the like.

In order to solve such a problem,
There is a biometrics authentication technique that directly uses the biological characteristics of an individual as authentication information. As such an authentication technique, the present applicant has proposed the technique described in Japanese Patent Application No. 2001-165460.

In this device, the biometric characteristic data of an individual (fingerprint, iris, etc.) is registered in advance in the authentication terminal, the biometric data is input to the authentication terminal, and this input data is registered in advance. The use of the IC card attached to the authentication terminal is permitted only when the user is authenticated in agreement with the characteristic data. As a result, the IC card cannot be used unless the biometric characteristic data of the individual is authenticated, so that the security of confidential information can be improved.

[0005]

However, in such an authentication method, biometric characteristic data of an individual registered in advance is compared with the input biometric data, and both data are identified as being authenticated. Since the use of the IC card is permitted only when the IC card is used, the IC card is required in addition to the authentication terminal, and it is necessary to manage the IC card.

[0006] Further, the IC card which has been authenticated and permitted to be used is owned by an individual, and there is still a risk of losing the IC card. Therefore, it is not possible to sufficiently secure the confidential information. Absent.

[0007] Further, a networked system as in recent years, such as an online system of a bank, uses an IC card to take cash in and out, and a door opening / closing system of a hotel, etc. In the case of opening and closing, etc., biometric feature data is registered in multiple locations on the network, such as an authentication terminal and a central device, and the biometric feature data input to the authentication terminal is stored in the central device. Authentication is performed by comparing with the biometric data registered in, and when authenticated, the use of an IC card is permitted and cash is withdrawn and opened, and the door is opened.

However, in the case of performing authentication using biometric feature data in such a system,
Since biometric feature data is registered in multiple locations on the network, the incidence of theft, forgery, leakage, etc. of confidential data and biometric data will increase, and psychological anxiety of the user may occur. .

The present invention solves the above-mentioned problems of the prior art by making it possible to use the personal identification data by using the biometric characteristic data registered only in the personal identification terminal, and Provided are a personal authentication system, a personal authentication terminal, and a personal authentication method that can prevent the characteristic data from being stolen, forged, leaked, etc., and enhance the safety, and can reduce the psychological anxiety of the user. It is a thing.

[0010]

A personal identification system of the present invention is a personal identification system for communicating between a personal identification terminal and a reading device, wherein the personal identification terminal inputs a biometric characteristic of an individual. Input means for registering, and feature data registration means for registering the feature data input to the input means,
First personal identification data storage means for storing at least one or more types of personal identification data, biometric characteristic data input to the input means and characteristic data registered in the characteristic data registration means are compared and compared. An authentication means for reading the personal identification data stored in the first personal identification data storage means when the results match, and a transmission means for wirelessly transmitting the personal identification data read by the authentication means. The reading device receives the personal identification data transmitted from the transmitting means, and the second personal identification data storage means stores the personal identification data.
Second authentication means for performing authentication by comparing the personal identification data with the personal identification data stored in the second personal identification data storage means.

With such a configuration, when the biometric feature data is registered in the feature data registration means of the personal identification terminal and the biometric feature data is input by the input means, the biometric feature data is stored. The biometric characteristic data registered in advance is compared, and when the comparison result is coincident, the personal identification data is stored in the first personal identification data storage means (for example, ID data such as a transaction bank or a sports club member card). ) Is read out and wirelessly transmitted to the reading device.

When the reading device receives the personal identification data, the reading device compares the personal identification data with the personal identification data stored in the second personal identification data storage means to perform authentication.

As described above, since the biometric feature data is registered only in the personal identification terminal, the personal identification data (confidential data) can be centrally managed in the personal identification terminal, and the personal identification data and the biometric data can be managed. The characteristic data can be prevented from being stolen, forged, leaked, etc., and the personal identification data and biometric characteristic data can be surely protected.

Further, since the personal identification data and the biometric characteristic data can be surely protected, the psychological anxiety of the user can be reduced.

Further, the personal identification terminal of the present invention includes an input means for inputting a biometric characteristic of an individual, a characteristic data registration means for registering the characteristic data input to the input means, and at least one or more types of personal identification. The personal identification data storage means for storing data is compared with the biometric characteristic data input to the input means and the characteristic data registered in the characteristic data registration means, and if the comparison results match, the individual identification is performed. It comprises an authentication means for reading the personal identification data stored in the data storage means, and a transmission means for transmitting the personal identification data read by the authentication means by radio.

With such a configuration, when the biometric feature data is registered in the feature data registration means of the personal identification terminal and the biometric feature data is input by the input means, the biometric feature data is stored. It is compared with pre-registered biometric characteristic data, and when the comparison results match, personal identification data (for example, an account of a transaction bank, a sports club member card, etc.
(D data) is read out and wirelessly transmitted to the reading device.

As described above, since the biometric feature data is registered only in the personal identification terminal, the personal identification data (confidential data) can be centrally managed in the personal identification terminal, and the personal identification data and the biometric data are registered. The characteristic data can be prevented from being stolen, forged, leaked, etc., and the personal identification data and biometric characteristic data can be surely protected.

Further, since the personal identification data and the biometric characteristic data can be surely protected, the psychological anxiety of the user can be reduced.

Further, the personal identification terminal of the present invention has an instruction means for instructing to read out the personal identification data stored in the personal identification data storage means, and a case where the instruction means instructs to read out the personal identification data. In the case where the biometric feature input to the input unit and the feature data registered in the feature data registration unit are coincident with each other, display means for displaying to prompt detection of the biometric feature is provided. In addition, the personal identification data stored in the personal identification data storage means is read out.

With such a configuration, the personal identification data is displayed when the biometric characteristic data input to the input means and the characteristic data registered in the characteristic data registration means match, so that when the authentication is not performed. It is possible to reliably prevent the personal identification data from being displayed, and further prevent the personal identification data from being stolen, forged, leaked, or the like.

In the personal authentication terminal of the present invention, the authenticating means is configured to display a plurality of personal identification data stored in the personal identifying data storage means on the display means, and a plurality of personal identification data are displayed on the display means. When the personal identification data is displayed, a selection means for selecting arbitrary personal identification data from a plurality of the personal identification data is provided.

With such a configuration, the user can easily select the required personal identification data from the plurality of personal identification data, and the personal identification data can be handled easily.

Further, the personal identification terminal of the present invention detects the expiration of the usage period by the setting means for setting the usage period of the personal identification data, the timing means for timing the usage period, and the timing means. And a personal identification data erasing unit for erasing the personal identification data stored in the personal identification data storage unit.

With such a configuration, the personal identification data for a limited period of time can be erased, so there is no need to hold the personal identification data that is not used again, and the personal identification data can be easily managed. It is possible to ensure the safety of the side that transmits the personal identification data.

For example, when staying at a hotel or the like having an electronic lock, the ID is used as personal identification data only for a certain period.
Etc. are input to the reading device. In this case, the usage period of the hotel is set in advance, and the personal identification data is deleted when the usage period has elapsed. For this reason, the hotel side does not have a risk that a guest who has stayed overnight will intentionally enter the room, so that the safety of the hotel side can be secured.

Further, the personal identification terminal of the present invention is registered in the characteristic data registration means when the external force detection means detects that an external force is applied, and when the external force detection means detects an external force above a certain level. And all data erasing means for erasing the personal identification data stored in the personal identification data storage means.

With such a configuration, the characteristic data and the personal identification data can be erased when a thief or the like opens the personal authentication terminal body with strong force so that the control board is exposed. It is possible to reliably prevent the personal identification data from being stolen, forged, leaked, etc., and sufficiently secure the safety.

Further, the reading device of the present invention comprises a personal identification terminal, receiving means for receiving the personal identification data transmitted from the transmitting means, and reading device side personal identification data storage means for storing the personal identification data. And a reading device side authentication means for performing authentication by comparing the personal identification data with the personal identification data stored in the reading device side personal identification data storage means.

With such a configuration, the personal identification data wirelessly transmitted from the personal identification terminal can be compared with the personal identification data stored in the reading device-side personal identification data storage means to perform authentication. In addition, since it is not necessary to hold biometric feature data, it is possible to eliminate the need for managing feature data and eliminate the risk of safety.

Further, the personal identification method of the present invention includes a step of inputting a biometric characteristic of an individual and a step of registering the biometric characteristic data input in the step,
Storing a plurality of types of personal identification data in the personal identification data storage means; and, when inputting biometric characteristic data of an individual, the input biometric characteristic data and the registration made in the registration step. Comparing biometric feature data, and if the comparison results match, reading the personal identification data stored in the personal identification data storage means,
Wirelessly transmitting the read personal identification data.

With such a method, when the biometric feature data is registered in the feature data registration means of the personal identification terminal and the biometric feature data is input by the input means, the biometric feature data is stored. It is compared with pre-registered biometric characteristic data, and when the comparison results match, personal identification data (for example, an account of a transaction bank, a sports club member card, etc.
(Eg, D data) and wirelessly transmits it to the reading device.

As described above, since the biometric feature data is registered only in the personal identification terminal, the personal identification data (confidential data) can be centrally managed in the personal identification terminal. The characteristic data can be prevented from being stolen, forged, leaked, etc., and the personal identification data and biometric characteristic data can be surely protected.

Further, since the personal identification data and the biometric characteristic data can be surely protected, the psychological anxiety of the user can be reduced.

Further, the personal identification method of the present invention comprises a step of instructing to read out the personal identification data stored in the personal identification data storage means, and a biometric process when the reading out of the personal identification data is instructed. A step of performing a display prompting to detect a characteristic, and a step of displaying the personal identification data when the detected biometric characteristic and the personal identification data stored in the personal identification data storage means match. Comprises.

By such a method, the personal identification data is displayed when the input biometric characteristic data and the previously registered characteristic data match, so that the personal identification data is displayed when the authentication is not performed. It is possible to reliably prevent the data from being stolen, and it is possible to further prevent the personal identification data and the biometric characteristic data from being stolen, forged, leaked, or the like.

Further, in the personal authentication method of the present invention, a step of designating a use period of the personal identification data, a step of setting the use period, and a step of deleting the personal identification data when the use period has elapsed Comprises and.

By such a method, the personal identification data for a limited period can be erased, so that it is not necessary to retain the personal identification data that is not used again, and the personal identification data can be easily managed. For example, when staying at a hotel or the like having an electronic lock, the ID or the like is input to the reading device as personal identification data only for a certain period. In this case, the usage period of the hotel is set in advance, and the personal identification data is deleted when the usage period has elapsed. For this reason, the hotel side does not have a risk that a guest who has stayed overnight will intentionally enter the room, so that the safety of the hotel side can be secured.

In each of the above-mentioned inventions, the personal identification data is wirelessly exchanged between the reading device and the personal identification terminal, but the personal identification data is transmitted in a state where the personal identification terminal is in contact with or not in contact with the reading device. It goes without saying that the wireless communication is also used.

[0039]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings. 1 to 16 are diagrams showing an embodiment of a personal identification system, a personal identification terminal, a reading device and a personal identification method according to the present invention.

First, the structure will be described. FIG. 1 is an external view of a mobile terminal 1 as a personal authentication terminal. The mobile terminal 1 is provided with a main body 2, a camera section 3 provided on the upper section of the main body 2, and a camera section 3 provided below the camera section 3, and ID data, Display unit 4 including a liquid crystal display screen for displaying personal identification data of
And an operation section 5 for performing various operations of the mobile terminal 1 and a transmission / reception section 6 which is provided above the main body 2 and includes an antenna for transmitting personal identification data.

FIG. 2 is a diagram showing a personal authentication system, which comprises a mobile terminal 1 and an authentication terminal 21. The mobile terminal 1 includes, in addition to the camera unit 3, the display unit 4, the operation unit 5, and the transmission / reception unit 6 described above, the iris encoding unit 7, the encryption unit 8, the registration unit 9, the decryption unit 10, the authentication unit 11, The control unit 12, the erasing unit 13, the encryption unit 14, the sensor unit 15, the transmission / reception data holding unit 16 and the timer 17 are included.

The camera unit 3 is adapted to capture an image of an iris, which is a biological characteristic of an individual, and constitutes an input means. Also, the iris encoding unit 7 is the camera unit 3
The iris imaged in (4) is encoded, and the encryption unit 8 is configured to encrypt the encoded iris code.

The registration unit 9 is composed of a ROM (Read Only Memory), and stores the iris code encoded by the encryption unit 8. In this embodiment,
The registration unit 9 constitutes feature data registration means. Also,
The registration unit 9 stores, as personal identification information, bank data, member cards of sports clubs, ID data such as code numbers of electronic locks at hotels, and the like, and the registration unit 9 constitutes personal identification data storage means. ing. The ID data is two-dimensionally coded.

As the ID data, for example, if it corresponds to a bank cash card, the name of the customer,
It is data such as address, contact information, bank code, branch code, and account number. In the case of a hotel, the name, address, contact information, room number, check-in time, check-out time, etc. of the guest.

Further, the decoding section 10 is adapted to decode the iris data registered in the registration section 9. Further, the authentication unit 11 is imaged by the camera unit 3, is registered in the registration unit 9 and the iris data coded by the iris coding unit 7, and is decoded by the decoding unit.
The iris data coded in 10 is compared with each other, and when the comparison results match, the control means 11 registers a plurality of ID data (bank, hotel, etc.) registered in the registration unit 9.
Is read out and displayed on the display unit 4. Further, the operation section 5 is operated to select arbitrary ID data from the plurality of ID data, and the operation section 5 constitutes a selecting means.

Further, in this embodiment, the authentication section 11 constitutes an authentication means and a first authentication means.

The control means 12 uses the operation unit 5 to select the desired I
When the D data is selected, the ID data is read from the registration unit 9, and the ID data is encrypted by the encryption unit 14. After the ID data is once held by the transmission / reception data holding unit 16, when the operation unit 5 instructs the transmission, the transmission / reception unit 6 constituting the transmission means wirelessly transmits the ID data to the authentication terminal 21 as a reading device.

In addition, the operation unit 5 stores the I stored in the registration unit 9.
The D data is instructed to be read out and constitutes an instructing means. When the operation unit 5 instructs the control unit 12 to read the ID data, the control unit 12 displays a message prompting the iris to be picked up by the camera unit 3, for example, a message "Please bring your eyes close to the camera for authentication". The display section 4 constitutes a display means.

Further, the operation section 5 is adapted to set the period of use of the ID data, and at this time, a display prompting the user to set the period of use, an input display of the period of use, etc. are displayed on the screen of the display section 4. Therefore, the operation unit 5 is designed to input the use period according to the guidance displayed on the display unit 4.

Further, the timer 17 is adapted to measure the time, and the control means 12 is adapted to check whether or not the usage period has been reached based on the time measurement information from the timer 17.

The control means 12 outputs a signal to the erasing means 13 when it detects that the usage period has elapsed based on the time information from the timer 17, and the erasing means 13 outputs the ID data from the registration section 9 to the ID data. It is designed to erase the iris data. In the present embodiment, the operation unit 5 serves as the setting means,
A timer 17 serves as a time measuring means, and a control means 12 and an erasing means 13
Respectively constitute erasing means.

The sensor section 15 is composed of a pressure sensor or the like provided in the main body 2, and the main body 2 is disassembled to expose the control board on which the registration section 9, the authentication section 11, and the control means 12 are mounted. An external force is applied to the control means 12, and a signal is output to the control means 12.

The control means 12 sends a signal to the erasing means 13 based on the detection signal from the sensor section 15, and the erasing means 13 registers in the registration section 9 based on the input signal from the control means 12. The created ID data and iris data are deleted. In this embodiment, the sensor unit 15
Constitutes the external force detecting means, and the erasing means 13 constitutes the all data erasing means.

On the other hand, the authentication terminal 21 comprises a transmission / reception unit 22, a control unit 23, an authentication unit 24, a storage unit 25, and a communication control unit 26.

The transmitter / receiver 22 is adapted to receive the ID data (personal identification data, second personal identification data) transmitted from the transmitter / receiver 6 of the portable terminal 1. The control means 23 reads the ID data stored in the storage means 25, and the ID data is compared with the ID data received from the mobile terminal 1 by the authentication means 24 to perform authentication. .

Further, the control means 23 controls the communication control unit 26 so that communication is carried out via a communication network 27 such as a LAN or the Internet. The network is a network such as a bank online system or an electronic lock opening / closing system provided in a hotel.

The transmitter / receiver 6 is adapted to receive ID data and the like. The ID data received by the transmitter / receiver 6 is encrypted by the encryption unit 14 and then registered in the registration unit 9. Has become. Further, the communication control unit 26 is adapted to receive ID data from the network 27,
This ID data is encrypted by the control means 23 and stored in the storage means 25.

In the present embodiment, the transmitting / receiving section 22 serves as the receiving means, the storage means 25 serves as the personal identification data storage means and the reading apparatus side personal identification data storage means, and the authenticating means 24 serves as the authenticating means, the second authenticating means, and the second authenticating means. The reading device side personal identification data storage means is configured.

Next, a personal authentication method will be described with reference to FIGS. First, FIGS. 3 and 4 show an iris data registration method, and FIG. 3 is a flowchart showing the registration method.
FIG. 4 is a diagram showing a display example of the display unit 4 at the time of registration. In FIGS. 3 and 4, the same steps are denoted by the same reference numerals.

First, the initial screen for displaying the clock and the calendar is set (step S1), and when the operation section 5 is operated to select the menu button from this state, the menu screen is displayed on the display section 4 (step S1). S2, S3).

Then, when iris data registration is selected from the menu (step S4), a message "Do you want to register authentication data?" Is displayed (step S5). Here, if the YES button is selected, a message "Please bring your eyes close to the camera to register" is displayed on the display unit 4 (step S6). Therefore, bring your eyes close to the camera unit 3 to image the iris. Register (step S7).

Here, if the registration fails, the display section 4 displays "Registration failed, please register again" (step S8), and the process of step S6 is performed again, and the registration succeeds. After the iris imaged by the camera unit 3 is converted into an iris code by the iris coding unit 7, the iris code is encrypted by the encryption unit 8 and registered in the registration unit 9. Therefore, “registration is completed on the display unit 4”. Test verification will be performed for confirmation. ”Is displayed (step S9).

Next, since "Please bring your eyes closer to the camera for authentication" is displayed on the display unit 4, bring your eyes closer to the camera unit 3 to capture an image of the iris and perform authentication (step S10). At this time, after the iris data registered in the registration unit 9 is decoded by the decoding unit 10, the decoded iris code and the camera unit 3 image the iris code and the iris coded by the iris coding unit 7. The codes are compared (step S12).

If the comparison results do not match, the operation unit 5 displays "Failed authentication, please perform authentication again" (step S11) and executes the process of step S10.

When the comparison results are in agreement, the display section 4 displays "Authentication completed" (step S13) and then returns to the initial screen (step S1).
4), the processing of this time is ended.

5 and 6 show a method of registering ID data, FIG. 5 is a flowchart showing a method of registering ID data, and FIG. 6 is a view showing a display example of the display unit 4 when registering ID data. Therefore, in FIGS. 5 and 6, the same steps are denoted by the same reference numerals.

First, when creating an account at a bank or checking in to a hotel, the two-dimensional coded ID data is transmitted from the dedicated terminal installed at the bank or hotel to the transmitting / receiving unit 6, The mobile terminal 1 temporarily stores the two-dimensional code in the transmission / reception data holding unit 16.

At this time, since the two-dimensional code is also transmitted to the authentication device, the communication control unit 26 receives the two-dimensional code from the network 27 and encrypts the two-dimensional code by the control means 23. And stores it in the storage means 25.

In the portable terminal 1, the initial screen for clock and calendar display is set (step S21), and when the operation section 5 is operated and the menu button is selected from this state, the menu screen is displayed on the display section 4. (Step S22,
S23).

Then, when "Download ID data" is selected from the menu (step S24), a message "Do you want to download ID data?" Is displayed (step S25). If the YES button is selected here, a message "Please bring your eyes close to the camera for authentication" is displayed on the display unit 4 (step S2).
6) The eyes are brought close to the camera unit 3 to image and authenticate the iris (step S28).

If the authentication registration fails, the display unit 4
Is displayed, "Authentication could not be performed again. Please perform authentication again" (step S27), and when the processing is performed again in step S26 and the authentication is successful, the display unit 4 displays "Authentication completed data download. Since the message "Please do" is displayed (step S29), the two-dimensional code stored in the transmission / reception data holding unit 16 is encrypted by the encryption unit 14 and then registered in the registration unit 9 (step S30). ).

When the download is not possible, the display section 4 displays "Download failed, please download again" (step S31), and the process of step S29 is performed.

If the download is successful,
Since the display of "Download completed" is displayed on the display unit 4 (step S32), it is determined whether or not the ID data is continuously downloaded (step S32).
33) If YES is set by the operation unit 5, the process of step 30 is executed, and if NO is set,
The process returns to the initial screen (step S34) and the current process ends.

As a method of downloading the ID data, in addition to wirelessly receiving the data from a dedicated terminal, the ID data is received by infrared rays using an interface for infrared reception or the ID data is read by an image reading unit. Or SD using the SD card reading interface
The ID data may be stored in the card.

Further, the storage mode of the ID code may be a bar code, an illustration, a mark, a photograph, etc. other than the two-dimensional code.

7 and 8 show the ID data calling method, FIG. 7 is a flowchart showing the ID data calling method, and FIG. 8 is a view showing a display example of the display unit 4 when the ID data is called. Therefore, the same steps are denoted by the same reference numerals in FIGS. 7 and 8.

First, the initial screen for displaying the clock and calendar is set (step S41), and when the menu button is selected by operating the operation unit 5 in this state, the menu screen is displayed on the display unit 4 (step S41). S42, S43).

Next, when the ID data call is selected from the menu (step S44), a message "Do you want to call the ID data?" Is displayed (step S45). Here, if the YES button is selected, a message "Please bring your eyes closer to the camera to register" is displayed on the display unit 4 (step S46). Therefore, bring your eyes closer to the camera unit 3 and image the iris. Authentication is performed (step S47).

At this time, the iris imaged by the camera section 3 is converted into an iris code by the iris coding section 7, and
After the iris code registered in the registration unit is read and decoded, this iris code is compared with the iris code captured by the camera unit 3, and if the comparison results do not match, that is, if the authentication fails, The display unit 4 displays "Could not authenticate, please authenticate again" (step S48), and the process of step S46 is performed again to authenticate.

When the authentication is successful, the display unit 4 displays "Authentication completed" (step S49).

Next, a list of ID codes is displayed on the display unit 4 (step S50), and a plurality of IDs are operated by the operation unit 5.
Scroll the code and select an ID code, for example, ▲
* If you select the bank ID code and select OK (step S51), a two-dimensional code is displayed on the display unit 4. That is, at this time, a plurality of I's registered in the registration unit 9 are registered.
The D code is read and displayed on the display unit 4, and any I
When the D code is designated, this ID code is decoded into a two-dimensional code by the decoding lower part 10 and displayed on the display unit 4.

Next, when the transmission of the two-dimensional code is instructed by the operation unit 5, the two-dimensional code is encrypted by the encryption unit 14 and then transmitted from the transmission / reception unit 16 to the transmission / reception unit 22 (steps S52, S53). . Then, a message "Do you want to use another data?" Is displayed on the display unit 4 (step S54),
If YES is set by the operation unit 5, step
When the process of 51 is executed and NO is set, the process returns to the initial screen (step S55), and this process ends.

Next, the flow when the portable terminal 1 is actually used will be described with reference to FIGS. 9 to 16. Note that FIG.
12 to 12 show the flow of using the mobile terminal 1 in a hotel, and FIGS. 13 to 16 show the flow of using the mobile terminal 1 in a bank.

First, the case of use in a hotel will be described.

As shown in FIG. 9, in the front dedicated terminal, a two-dimensional code such as the guest's name, address, contact information, room number, check-in time, check-out time, etc. is created and authenticated with the mobile terminal 1. The two-dimensional code is transmitted to the terminal 21. At this time, the period of use of the two-dimensional code is also set and transmitted.

Next, as shown in FIG. 10, the user saves the two-dimensional code on the portable terminal 1. Next, when it arrives in front of the room, after the iris is authenticated by the authentication terminal 1 as shown in FIG. 11 and the two-dimensional code is read from the registration unit 9, as shown in FIG. A two-dimensional code is wirelessly transmitted from the transmitting / receiving unit 6 to the reading device 21 to unlock. When using the authentication terminal 21 at a hotel,
The authentication terminal 21 is attached to the electronic lock. After checking out the hotel, the control means 12 of the mobile terminal 1 uses the timer 17
It is determined whether or not the usage period has elapsed based on the time measurement information, and when the time measurement time has elapsed, the hotel ID data registered in the registration unit is deleted.

Next, the case where the bank is used will be described.

As shown in FIG. 13, in the dedicated terminal of the bank, the two-dimensional code of the customer's name, address, contact information, bank code, branch code, account number, etc. is created to create the mobile terminal 1 and the authentication terminal. Send the two-dimensional code to 21.

Next, as shown in FIG. 14, the user saves the two-dimensional code on the portable terminal 1. Next, as shown in FIG. 15, when the cash is taken in and out by the CD machine, the authentication terminal 1 authenticates the iris to register the two-dimensional code.
16, the two-dimensional code is wirelessly transmitted from the transmitting / receiving unit 6 of the portable terminal 1 to the reading device 21, and when the reading device 21 is authenticated, cash is withdrawn and withdrawn by the CD machine.

Further, the portable terminal 1 is stolen or the like, and the body 2 is disassembled by the thief, and the registration unit 9, the authentication unit 11, and the control means.
When the control board on which 12 is mounted is exposed, the erasing means 13 erases the ID data and the iris data stored in the registration unit 9.

As described above, in this embodiment, the portable terminal 1
The iris data is registered in the registration unit 9 of the imaging camera 3
When the iris is imaged by and the iris data is input,
This iris data is compared with the iris data registered in the registration unit 9, and when the comparison results match, the ID data is read from the registration unit 9 and wirelessly transmitted to the authentication terminal 21.
When 21 receives the ID data, a system for authenticating the ID data by comparing the ID data with the ID data stored in the storage means 25 is constructed.

As described above, in the mobile phone of this embodiment, the mobile terminal 1
Since the iris data is registered only in the mobile terminal 1, the iris data can be centrally managed by the mobile terminal 1, and the ID data and the iris data can be prevented from being stolen, forged, leaked, or the like. Therefore, it is possible to surely protect the ID data and the iris data.

Since the ID data and the iris data can be surely protected, the psychological anxiety of the user can be reduced.

When the operation unit 5 gives an instruction for the ID data stored in the registration unit 9, a display prompting the user to detect the iris data is displayed on the display unit 4 to authenticate the iris data. At this time, since the ID data stored in the registration unit 9 is read, it is possible to reliably prevent the ID data from being displayed when the authentication is not performed, and the ID data is stolen, forged, leaked, or the like. It can be prevented further.

Further, since a plurality of ID data are displayed on the display unit 4 and arbitrary personal identification data is selected from the plurality of ID data by the operation unit 5, a user is required from the plurality of ID data. The ID data can be easily selected, and the ID data can be easily handled.

Since the ID data usage period is set and the ID data is deleted from the registration unit 9 when the usage period elapses, it is not necessary to hold the ID data that is not used again, and the ID data can be managed easily. In addition to being able to perform, it is possible to secure the safety of the side that transmits the ID data.

As described above, when staying at a hotel or the like having an electronic lock, the ID data is input to the reading device 21 only for a certain period. In this case, the usage period of the hotel is set in advance, and the ID data is deleted when this usage period has elapsed. For this reason, the hotel side does not have a risk that a guest who has stayed overnight will intentionally enter the room, so that the safety of the hotel side can be secured.

Further, the portable terminal 1 is provided with a sensor section 15 for detecting that an external force is applied, and when the sensor section 15 detects an external force above a certain level, the ID registered in the registration section 9 is registered.
Since the data and the iris data are erased, the ID data and the iris data can be erased when the thief opens the main body 2 of the mobile terminal 1 with a strong force so that the control board is exposed. Therefore, it is possible to reliably prevent the ID data and the iris data from being stolen, forged, leaked, etc., and sufficiently secure the safety.

Further, the authentication terminal 21 stores the ID data wirelessly transmitted from the portable terminal 1 in the ID stored in the storage means 25.
Since the authentication is performed by comparing with the data, it is not necessary to hold the iris data. Therefore, management of iris data can be made unnecessary, and safety risks are eliminated.

The biometric feature data registered in the mobile terminal 1 may be a fingerprint, a face outline, etc. instead of the iris. The personal identification data may be registered in place of an electronic lock at a hotel, such as a lock at the front door of a home, a car, a personal computer, a post, or a personal identification number of a delivery box. Also, instead of the entrance / exit pass,
A student ID, membership card, ticket, commuter pass, event ticket, air ticket, etc. may be registered in the form of a two-dimensional code.

Further, instead of a wallet, a credit card, a debit card, a personal identification number of ETC, etc. may be two-dimensionally encoded and registered. Further, instead of the ID card, a health insurance card, a driver's license, a qualification certificate, a membership card, an employee ID card, a student ID card, and a passport number may be two-dimensionally encoded and registered.

In the present embodiment, the mobile terminal 1 is described alone, but the functions of this mobile terminal may be incorporated in a mobile phone. Further, it is not limited to a mobile phone, and may be mounted on a mobile communication terminal such as an electronic notebook or a notebook computer.

Further, in the present embodiment, the authentication terminal 21 and the mobile terminal 1 wirelessly exchange the personal identification data. However, the personal identification data is transmitted in a state where the mobile terminal 1 is in contact with or not in contact with the authentication terminal 21. It goes without saying that the transmission is also wireless.

[0104]

According to the present invention, the personal identification data can be used by using the biometric characteristic data registered only in the personal identification terminal so that the personal identification data or the biometric characteristic data can be stolen or forged. It is possible to provide a personal authentication system, a personal authentication terminal, and a personal authentication method that can prevent leakage and the like to enhance safety and reduce psychological anxiety of a user.

[Brief description of drawings]

FIG. 1 is an external view of a personal identification terminal according to an embodiment of the present invention.

FIG. 2 is a configuration diagram of a personal identification system according to an embodiment of the present invention.

FIG. 3 is a flowchart showing an iris data registration method according to an embodiment of the present invention.

FIG. 4 is a diagram showing a display example of a display unit during registration of iris data according to an embodiment of the present invention.

FIG. 5 is a flowchart showing an ID data registration method according to an embodiment of the present invention.

FIG. 6 is a diagram showing a display example of a display unit during registration of ID data according to an embodiment of the present invention.

FIG. 7 is a flowchart showing an ID data calling method according to an embodiment of the present invention.

FIG. 8 is a diagram showing a display example of a display unit when calling ID data according to an embodiment of the present invention.

FIG. 9 is a diagram showing how a two-dimensional code is registered during hotel check-in according to an embodiment of the present invention.

FIG. 10 is a diagram showing a display example of a display unit when storing a two-dimensional code of a hotel according to an embodiment of the present invention.

FIG. 11 is a diagram showing a display example of a display unit when authenticating a two-dimensional code of a hotel according to an embodiment of the present invention.

FIG. 12 is a diagram showing a state of opening and closing an electronic lock of a hotel according to an embodiment of the present invention.

FIG. 13 is a diagram showing how a two-dimensional code is registered when creating an account at a bank according to an embodiment of the present invention.

FIG. 14 is a diagram showing a display example of a display unit when storing a two-dimensional code of a bank according to one embodiment of the present invention.

FIG. 15 is a diagram showing a display example of a display unit when authenticating a two-dimensional code of a bank according to one embodiment of the present invention.

FIG. 16 is a diagram showing how cash is taken in and out of a CD machine of a bank according to an embodiment of the present invention.

[Explanation of symbols]

1 portable terminal (personal authentication terminal) 3 camera section (input means) 4 display section (display means) 5 operation section (selection means, setting means) 6 transmission / reception section (transmission means) 9 registration section (feature data registration means, personal identification) Data storage means) 11 Authentication unit (authentication means, first authentication means) 12 Control means (erasing means) 13 Erasing means (all data erasing means) 15 Sensor section (external force detecting means) 17 Timer (clocking means) 21 Authentication terminal (Reading device) 22 Transmitting / receiving unit (receiving means) 24 Authentication means (authentication means, second authentication means, reading device side authentication means) 25 Storage means (personal identification data storage means, reading device side personal identification data storage means)

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Mowing High             3-1, Tsunashima-Higashi 4-chome, Kohoku-ku, Yokohama-shi, Kanagawa             Matsushita Communication Industry Co., Ltd. F-term (reference) 5B085 AE25 AE26 AE29 BA06 BG02                 5L096 BA18 CA02 FA00 HA07 JA11

Claims (10)

[Claims] 1. A personal identification system for performing communication between a personal identification terminal and a reading device, wherein the personal identification terminal has an input unit for inputting a biometric feature of an individual, and a feature input to the input unit. Characteristic data registration means for registering data, first personal identification data storage means for storing at least one or more types of personal identification data, biometric characteristic data input to the input means, and the characteristic data registration means First authentication means for comparing the registered characteristic data and reading the personal identification data stored in the first personal identification data storage means when the comparison results match, and read by the first authentication means. The reading device includes a receiving unit that receives the personal identification data output from the transmitting unit. Second personal identification data storage means for storing personal identification data, and second authentication means for performing authentication by comparing the personal identification data with the personal identification data stored in the second personal identification data storage means. A personal authentication system characterized by having and. 2. Input means for inputting biometric characteristics of an individual, characteristic data registration means for registering the characteristic data input to the input means, and personal identification data in which at least one kind of personal identification data is stored. The storage means compares the biometric feature data input to the input means with the feature data registered in the feature data registration means, and if the comparison results match, the individual stored in the individual identification data storage means A personal authentication terminal comprising: an authenticating unit that reads out identification data; and a transmitting unit that wirelessly transmits the personal identification data read out by the authenticating unit. 3. An instruction means for instructing to read out the personal identification data stored in the personal identification data storage means, and detection of a biological characteristic when the instruction for reading out the personal identification data is issued. And a display unit for performing a display prompting the user to perform, the authentication unit, when the biometric feature input to the input unit and the feature data registered in the feature data registration unit match, The personal identification terminal according to claim 2, wherein the personal identification data stored in the personal identification data storage means is read out. 4. The authentication means is configured to display a plurality of personal identification data stored in the personal identification data storage means on the display means, and the plurality of personal identification data are displayed on the display means. The personal identification terminal according to claim 2 or 3, further comprising: a selection unit that selects arbitrary personal identification data from a plurality of the personal identification data. 5. A setting means for setting a usage period of the personal identification data, a timing means for timing the usage period, and the personal identification data storage means when the timing means detects that the usage period has elapsed. The personal identification terminal according to any one of claims 2 to 4, further comprising personal identification data erasing means for erasing the personal identification data stored in. 6. An external force detecting means for detecting that an external force is applied, and the characteristic data and the personal identification data registered in the characteristic data registering means when the external force detecting means detects an external force above a certain level. The personal identification terminal according to any one of claims 2 to 5, further comprising: all-data erasing means for erasing the personal identification data stored in the storage means. 7. A reading device comprising the personal identification terminal according to claim 2, wherein the receiving device receives the personal identification data transmitted from the transmitting device, and the personal identification data includes The reading device side personal identification data storage means is stored, and the reading device side authentication means for performing authentication by comparing the personal identification data with the personal identification data stored in the reading device side personal identification data storage means. A reading device characterized by the above. 8. A step of inputting biological characteristics of an individual,
A step of registering the biometric characteristic data input in the step, a step of storing at least one or more kinds of personal identification data in a personal identification data storage means, and a step of inputting biometric characteristic data of an individual. , Comparing the input biometric feature data with the biometric feature data registered in the registering step, and when the comparison results are the same,
A personal authentication method comprising: a step of reading the personal identification data stored in the personal identification data storage means; and a step of wirelessly transmitting the read personal identification data. 9. A step of instructing to read out the personal identification data stored in the personal identification data storage means, and urging to perform detection of biological characteristics when the reading out of the personal identification data is instructed. A display step, and a step of displaying the personal identification data when the detected biometric characteristic and the personal identification data stored in the personal identification data storage means match. The personal authentication method according to claim 8. 10. The method includes the steps of setting a usage period of the personal identification data, measuring the usage period, and erasing the personal identification data when the usage period elapses. The personal authentication method according to claim 8 or claim 9.