JP2006085559A - Personal authentication apparatus, personal authentication method, and storage medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication method for strengthening security strength by combining an authentication device having an input key with a personal authentication device provided with a fingerprint identification device.
A password is input by an authentication device having an input key, and at the same time, a fingerprint of a finger when the input key is pressed is read by a fingerprint identification device, and collated with a fingerprint DB and a password DB. The fingerprint image read each time the input key is pressed is collated with the fingerprint DB to perform fingerprint authentication, and the personal identifier and finger identifier of the authentication result are acquired. The finger identifier for each input obtained by collating the input character with the fingerprint DB is collated with the password DB to perform finger designation password authentication.
[Selection] Figure 6

Description

  The present invention relates to a personal authentication device, a personal authentication method, and a personal authentication device, which determine the authenticity of an input password, determine the authenticity of a read fingerprint image, and enable more accurate and reliable identification. The present invention also relates to a computer-readable recording medium on which a control program for personal authentication is recorded.

As a means for personal authentication, input of a password or a personal identification number (password method) is generally used. Recently, biometrics methods such as fingerprint authentication have begun to spread due to their ease of use. However, in the password method, if the password is stolen or decrypted, the security is easily broken, and in the biometric method, impersonation may be possible by using a copied fingerprint. Therefore, an apparatus using an authentication method that combines a password method and a biometrics method has been devised in order to realize stronger security. For example, Patent Document 1 devises a personal authentication device in which a fingerprint identification device is provided in an authentication device having an input key.
JP2001-242952

  The security strength of a personal authentication device in which a fingerprint identification device is provided in an authentication device having such an input key is the same as the security strength obtained by combining individual authentication devices.

  The present invention relates to a personal authentication device and a personal authentication method using a designated password authentication method capable of strengthening security beyond a simple combination of a password method and a fingerprint authentication method without impairing user convenience. And a storage medium.

  Further, the present invention is characterized in that a password is input by an authentication device having an input key, and at the same time, a fingerprint of the finger when the input key is pressed is read by the fingerprint identification device, and collated with the fingerprint DB and the password DB. It is desirable to use a touch sensor switch with an input key displayed on the touch panel, and the touch panel has a fingerprint identification function. However, open a device with a fingerprint reader next to the input key, or open each key top of the input key. It is also possible to use an apparatus configured such that a fingerprint image reading unit appears at the same time.

  In addition, the present invention performs fingerprint authentication by comparing the fingerprint image read by the fingerprint identification device every time the input key is pressed with the fingerprint DB, obtains the personal identifier and finger identifier of the authentication result, and when all the input keys are pressed It is characterized by authenticating from a fingerprint. The fingerprint DB stores a plurality of sets of personal identifiers, finger identifiers, and fingerprint images per user. By comparing the read fingerprint image with the fingerprint DB, it is possible to identify who is which finger. In addition, since a plurality of fingers can be registered per user, fingerprint recognition can be performed a plurality of times with different fingers, thereby realizing stronger security. The fingerprint DB may be inside the personal authentication apparatus or may exist outside and be connected via a network.

  Further, the present invention is characterized in that finger-specified password authentication is performed by collating a character input by an input key with a finger identifier for each input obtained by collation with the fingerprint DB against the password DB. The password DB stores a plurality of sets of input characters and finger identifiers and a set of personal identifiers per user. By assigning a finger identifier to each input character of the password, a finger designation password becomes possible, and stronger security can be realized. The password DB may be inside the personal authentication apparatus or may exist outside and be connected via a network.

  According to the present invention, personal authentication is not possible unless two types of secret keys, that is, a password and a plurality of fingerprints, and information about a finger that presses the password are provided, and security is stronger than a combination of a simple password method and a fingerprint authentication method. Can be realized. In addition, password input and fingerprint authentication can be performed at the same time with almost the same operation as the conventional password method, and there is almost no burden on the user. Furthermore, since it does not look like fingerprint authentication from the side, it is difficult to realize that it is necessary to duplicate fingerprints to break security. In addition, when an attempt is made to use it illegally, the fingerprint remains and becomes a clue for identifying the criminal.

Further, as in the second embodiment, even when the fingerprint recognition rate is slightly low, it is possible to perform a flexible operation in which the user's convenience is improved by avoiding repeated authentication failures.
Further, as in the third embodiment, extremely strong security that requires finger designation password input by a plurality of persons can be achieved.

Example 1
Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a block diagram showing a system configuration of an embodiment of a personal authentication apparatus according to the present invention, and FIG. 2 is an example of a touch panel therein. FIG. 3 is a diagram showing a configuration of the entire system. FIG. 4 is a flowchart showing the flow of data processing in the personal authentication apparatus of FIG.

  First, the configuration of the personal authentication apparatus of this embodiment will be described with reference to FIG.

  The personal authentication device according to the present embodiment includes a central processing unit 1, a storage device 2, an external auxiliary storage device 3, a touch panel 4 with a fingerprint authentication function, a network connection device 5, and the like.

  FIG. 2 is an example of the touch panel 4 with a fingerprint authentication function.

  As shown in FIG. 3, the personal authentication device performs authentication by comparing the password and fingerprint image input by the user with the personal information DB, fingerprint DB, and password DB via the network connection device 5.

  FIG. 4 is an example of information registered in advance in the personal information DB, fingerprint DB, and password DB by the user of the apparatus. Personal information such as name and address provided by the user is registered in the personal information DB, and a unique number (excluding 0) for identifying the user inside the system is assigned to the user ID. The user ID is also used as a key for identifying the user in the fingerprint DB and password DB. The fingerprint DB registers a fingerprint image of a plurality of fingers for one user and which finger it is, and identifies which finger of which user ID the fingerprint image read by the touch panel 4 with a fingerprint authentication function is. It can be so. It is not necessary to register all fingers, but all fingers registered in the password DB must be registered. In the password DB, not only numbers and characters but also which finger to press each character (finger designation password) is registered. For example, “{3, 6 (right thumb)}, {8, 9 (right ring finger)}, {8, 5 (left little finger)}, {7, 8 (right middle finger)}” are registered.

  FIG. 5 shows a memory map in a state where the personal authentication program and the program work memory are stored in the storage device 2 and the program can be executed.

  The external auxiliary storage device 3 indicates that the program, personal information DB, fingerprint DB, password DB, and the like can be distributed from the medium to the personal authentication device. A ROM, floppy (registered trademark) disk, CD-ROM, hard disk, memory card, magneto-optical disk, or the like can be used as a storage medium for storing the program and each DB.

  Next, the operation of the present embodiment will be described based on the flowchart of FIG.

  First, the key input by the user is recognized (step S601), and what key is determined (step S602). If it is a password key (0 to 9, *, # in the case of the touch panel of FIG. 2), it is determined whether or not the input character exceeds the maximum number of characters (step S603), and if it exceeds, the process returns to S601. If the maximum number of characters has not been exceeded, the fingerprint is read (step S604), the fingerprint image thus read is checked against the fingerprint DB (step S605), and the user ID and finger number are acquired. If fingerprint authentication cannot be performed, the user ID and finger number are set to 0. That is, it is assumed that 0 does not exist in the user ID and the finger number. The input key, user ID, and finger number are additionally stored in the 504 program work memory of FIG. 5 as a set of recognition data (step S606). FIG. 7 shows a state where recognition data is stored up to the fourth character.

  If it is determined that the cancellation is made in S602, all the recognition data stored in the 504 program work memory in FIG. 5 is deleted (step S607).

  If the authentication start key (OK in the case of the touch panel of FIG. 2) is recognized in S602, first, it is determined whether the user IDs of the recognition data stored in the 504 program work memory are not all 0 and the same. (Step S608). This is the same as personal authentication using a plurality of fingerprints. If the authentication result is OK, the designated password authentication is performed (step S609). This is to determine whether the input character and finger number of the recognition data stored in the 504 program work memory match the character code and finger number of the password information corresponding to the user ID stored in the password DB. is there. It seems that it is more common to determine the match including the order, but depending on the operation, it can also be determined in combination. If the authentication result is OK, an authentication OK process is performed (step S610), and the entire process ends. If either S608 or S609 is NG, an authentication NG process is performed (step S611), and the entire process is terminated.

(Example 2)
If the recognition rate of fingerprint authentication is not good or the recognition error rate is high in S605 of the first embodiment, some user IDs in the recognition data become 0 or different user IDs, and authentication in S608 A case where the result is NG frequently occurs. In such a case, only one user ID is allowed to be 0, or more than half of the user IDs may be the same. For example, the user's convenience is improved by slightly lowering the determination criterion in S608. It is possible. In this case, in step S609, the finger number is not used for the determination with respect to the input character having the user ID = 0 or a different user ID in the recognition data stored in the 504 program work memory, and only the input character is determined.

(Example 3)
By adding user IDs one by one as passwords to be registered in the password DB and allowing multiple user IDs, a stronger security system that cannot be authenticated without password input by specific fingers by multiple people can be obtained. Is possible. In that case, the fingerprint authentication in S608 and the finger designation password authentication in S609 of the first embodiment are performed in one authentication process (user designation password authentication).

It is a block diagram which shows the hardware constitutions of the information processing system which implement | achieves this implementation. It is a figure which shows an example of the touchscreen of a present Example. It is a figure which shows the structure of the whole system in this implementation. It is a figure which shows an example of the information stored in each database. And a memory map in a state where the personal authentication program can be executed. It is a flowchart which shows the flow of the data processing in the computer of FIG. It is a figure which shows the program work memory of the state in which the recognition data for 4 characters were stored.

Claims (7)

  A personal authentication device characterized in that a fingerprint identification device is provided in an authentication device having an input key, and a fingerprint DB and a password DB are collated.   2. The personal authentication apparatus according to claim 1, wherein the fingerprint DB stores a plurality of sets of personal identifiers, finger identifiers, and fingerprint images per user.   The personal identification device according to claim 1, wherein the password DB stores a plurality of sets of input characters and finger identifiers and a set of personal identifiers per user.   A personal authentication method characterized in that a password is input by an authentication device having an input key, and at the same time, a fingerprint of the finger when the input key is pressed is read by a fingerprint identification device, and collated with the fingerprint DB and password DB.   Each time the input key is pressed, the fingerprint image read by the fingerprint identification device is collated with the fingerprint DB, fingerprint authentication is performed, the personal identifier and finger identifier of the authentication result are obtained, and authentication is performed from the fingerprint when all the input keys are pressed. 5. A personal authentication method according to claim 4 and characterized in that:   The personal authentication method according to claim 4, wherein the character specified by the input key and the finger identifier for each input acquired in claim 5 are collated with the password DB to perform finger designation password authentication.   A storage medium storing a program for causing the personal authentication apparatus according to any one of claims 1 to 3 to execute the procedure of the personal authentication method according to any one of claims 4 to 6.

Images