JP3943897B2 - Identification system and device - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an identity verification system and apparatus for performing identity verification using a biometric authentication method, and more particularly to an identity verification system and apparatus capable of executing identity verification via a network while guaranteeing reliability of biometric authentication. .
[0002]
[Prior art]
In general, a biometric authentication method based on human biometric information is widely known as a type of identity verification method.
Here, the biometric authentication method is a technique for determining whether or not the person is an individual by checking the unique biometric features of each person against biometric information of each individual registered in advance. The biological information is information (numerized) of biological features in a broad sense such as fingerprints, irises, retinas, faces, voices, keystrokes, and signs.
[0003]
In this way, unlike existing authentication methods such as passwords, the biometric authentication method uses biometric features that are not likely to be forgotten or lost. Therefore, the individual person (hereinafter referred to as the user) has a light load. It is a confirmation method. In addition, since the biological features are premised on those that are difficult to replicate, they are effective in preventing spoof attacks.
[0004]
Currently, with the spread of open networks represented by the Internet, it is considered to introduce a biometric authentication method into network communications such as electronic commerce.
[0005]
However, when a biometric authentication method is introduced into network communication, there is a possibility that the collation result or biometric information may be stolen or altered on the network. However, it is considered that this possibility can be reduced by a combination with a secure medium such as a public key infrastructure or a smart card.
[0006]
On the other hand, an identity verification system with higher accuracy has been realized by a composite biometric authentication system that comprehensively performs identity verification by combining a plurality of types of biometric authentication.
[0007]
[Problems to be solved by the invention]
However, the identity verification system as described above has no particular problem in the present case applied to a closed system, but according to the inventor's consideration, in the near future applied to an open network. The following problems (a) to (d) are expected to occur.
[0008]
(A) When the identity verification system authenticates the communication partner via the network, it is difficult to know whether the execution environment (client environment) of the identity verification is really safe and reliable.
[0009]
That is, the identity verification system needs to confirm whether or not it has been tampered with, whether it is at the required level (reliable level), whether it is legitimate, etc. There is. However, this confirmation is extremely difficult.
[0010]
(B) Regarding the problem (a), the identity verification system needs to protect the request level or a response from theft or tampering on the network when the request level is transmitted to the user side.
[0011]
For example, an entity that provides a service tells the user the required level that satisfies the security policy of the provided service during biometric authentication, and confirms that the biometric authentication device and verification algorithm on the user side exceed the required level. Then. In this case, the request level or its response needs not to be stolen or altered on the network.
[0012]
(C) The verification algorithm of the identity verification system and the biometric authentication device such as the verification device and the reading device are presumed to be used in a closed system, and thus there is often no connectivity between manufacturers. In particular, the collation algorithm may extract different biometric information between manufacturers for the same biometric feature. For this reason, the biometric information extracted by the collation algorithm of company A often cannot be used as biometric information registered in advance of the collation algorithm of company B (hereinafter also referred to as reference information).
[0013]
(D) An authentication infrastructure that has a mechanism for solving the problems (a) to (c) described above and can be commonly used for each user using an open network is required.
[0014]
The present invention has been made in consideration of the above circumstances, and an object of the present invention is to provide a personal identification system and apparatus capable of performing personal identification via a network while ensuring the reliability of biometric authentication.
[0015]
[Means for Solving the Problems]
1st invention is the identity verification system for confirming that a user is the principal by a biometric authentication system, Comprising: For each user, the user certificate and user private key based on a public key encryption system are issued For each biometric authentication device, a device certificate authority for issuing a device certificate and a device private key based on a public key cryptosystem, and a device certificate and device issued by the device certificate authority When the private key is stored in advance and the user is confirmed to be the principal by a predetermined biometric authentication method, the first digital signature by the device private key and the device certificate are obtained with respect to the obtained identity confirmation information. The biometric authentication device to be assigned and transmitted, the user certificate and the user secret key issued by the user registration authority are stored in advance, and the personal identification information transmitted from the biometric authentication device, the first Upon receiving the digital signature and the device certificate, the first digital signature is subjected to a signature process using the user private key, and the obtained second digital signature, the identity verification information, the device certificate, and the user certificate are obtained. A user signature device for transmitting a certificate, a medium holding unit for detachably holding the user signature device, a client device connected to the biometric authentication device, connected to the client device via a network, When receiving the second digital signature, the identity verification information, the device certificate and the user certificate transmitted from the user signature device, the user certificate and the device certificate are referred to while referring to the user registration station and the device certificate authority. Verifying or verifying the second digital signature and verifying that each certificate and the second digital signature are valid A identification system that includes an authentication device for authenticating the credential.
[0016]
Here, as the personal identification information, for example, a collation result and / or biometric information can be used. As the user signature device, a personal and portable device such as an IC card or a smart card can be used.
[0017]
In this way, a double digital signature between the biometric authentication device and the user signature device is assigned to the personal identification information based on the biometric authentication method, so that the identity verification is performed via the network while ensuring the reliability of biometric authentication. Can be executed.
[0018]
According to a second aspect, in the first aspect, the authentication device includes request level notification means for notifying the client device of a biometric authentication level requested by a service based on a service request received from the client device. This is an identity verification system.
[0019]
As a result, in addition to the operation of the first invention, it can be ensured that the obtained personal identification information satisfies the biometric authentication level requested by the service (such as the accuracy of collation of the biometric authentication method and the strength of tamper resistance). it can.
[0020]
When a plurality of biometric authentication devices are connected as the client device in the second invention, the third invention includes biometric authentication evaluation data described in the device certificate of each biometric authentication device. The identity verification system includes an authentication device selection unit that selects a biometric authentication method or a biometric authentication device that satisfies the required level based on the created authentication device connection list.
[0021]
Thereby, in addition to the operation of the second invention, an appropriate biometric authentication method or biometric authentication device can be selected from a plurality of biometric authentication devices without fixing the biometric authentication method to be used.
[0022]
According to a fourth aspect, in the third aspect, when a new biometric authentication device is connected to the client device, the content of the authentication device connection list is dynamically changed so that the biometric authentication device is added. It is an identity verification system provided with an automatic change means.
[0023]
Thereby, in addition to the effect | action of 3rd invention, a new biometrics apparatus can be added easily and reliably.
[0024]
In addition, although each said invention was represented by the name "system", it may represent by other names or categories, such as not only this but the whole or each "apparatus", "method", and "program."
[0025]
DETAILED DESCRIPTION OF THE INVENTION
Embodiments of the present invention will be described below with reference to the drawings. The identity verification system described in each embodiment is a system that provides an arbitrary service (such as a WWW service) via a network. In response to an identity verification request such as logon to a service, a client device (personal computer or workstation) Service providers can verify that the person has been verified in a legitimate and safe environment. Here, the network connection line is assumed to be a general-purpose open network typified by the Internet, but may be a local network such as a LAN or a dedicated line.
[0026]
(First embodiment)
FIG. 1 is a schematic diagram showing a configuration of an identification system according to the first embodiment of the present invention. This identity verification system includes a user registration station 1, a certification station 2, a device authentication station 3, an authentication server 10, a client device 20, a medium reading device 30, a secure medium 40, and a biometric authentication device 50.
[0027]
Here, the user registration authority 1 performs initial user registration, and corresponds to a user certificate (user public key certificate) and a user private key (this public key certificate) based on a user registration application. A function of issuing a secret key of a public key cryptosystem, a function of storing the issued user information in the secure medium 40, reference information presented at the time of issuance, and a biometric authentication correspondence list (a biometric authentication method corresponding to the reference information) ) In the secure medium 40 and a function of transmitting a user certificate to the authentication server 10 by access from the authentication server 10.
[0028]
Here, as shown in FIG. 2, the reference information includes a header (biometric authentication correspondence list), standard biometric information (eg, standard fingerprint reference information, standard face reference information), and biometric authentication method specific information (eg, fingerprint). Authentication system A specific information, fingerprint authentication system B specific information, and face authentication system C specific information).
[0029]
Examples of reference information are defined by biometric information read by a biometric information sensor (if fingerprint authentication, fingerprint image before extraction), data after feature extraction processing corresponding to different collation algorithms, standardization organizations, etc. Data according to the format, or a combination of these. The selection of reference information in the initial registration depends on the judgment of the user or the usage form of the system.
[0030]
The certification authority 2 evaluates the verification accuracy (identification rejection rate, acceptance rate of others, response rate, etc.) of the biometric authentication device 50, the strength of tamper resistance, and the like, and certifies the biometric authentication level that the biometric authentication device 50 to be evaluated satisfies. Specifically, it has a function of authorizing the biometric authentication device 50 based on an application from the manufacturer of the biometric authentication device 50 and notifying the device certification authority 3 of the contents of the certification.
[0031]
Here, the biometric authentication level indicates the overall performance (safety performance, verification performance, etc.) of the certified biometric authentication device 50 alone.
[0032]
Any standard can be used as the collation accuracy evaluation standard. For example, it is desirable to use a standardized collation precision evaluation standard defined by a standardization organization. The same applies to the tamper resistance evaluation criteria.
[0033]
The device certificate authority 3 issues a device certificate to the biometric authentication device 50 certified by the certificate authority 2, and specifically, upon receiving an issue request or permission from the certificate authority 2, the device certificate is issued. Certificate (device public key certificate). The device certification authority 3 may be provided in the same element as the certification authority 2 (computer such as a server). The stations 2 and 3 may have a simple configuration example as shown in FIG. 1, but the stations 2 and 3 can be made independent as an identity verification guarantee base of the system. A detailed description of another form of the identity verification / assurance base composed of the certification authority 2 and the device authentication authority 3 will be described later.
[0034]
As shown in FIG. 3, the device certificate is a field, version, public key for device certificate issuance, device certificate serial number, signature algorithm, expiration date, device certificate issuer, device certificate issuance. Data of each item of the target, biometric device manufacturer, biometric device evaluation criteria, biometric device evaluation result, and digital signature are provided, and evaluation items such as safety may be attached.
[0035]
Note that the device certificate is a public key certificate that is widely used. It may be in accordance with the format of the 509 certificate or a newly defined format. At this time X. A field item not defined by the 509 certificate can be used by defining it as a private extension area. Also, the field items shown in FIG. 3 are examples, and may be modified as appropriate. The biometric device evaluation standard indicates an evaluation standard used at the time of certification by the device certification authority 3. The biometric authentication device evaluation result only needs to indicate a result of evaluation according to each evaluation criterion. For example, an index or ID indicating the evaluation result may be used.
[0036]
The authentication server 10 belongs to a service providing system and includes a communication unit 11, a request response unit 12, a certificate verification unit 13, a level verification unit 14, and a result verification unit 15, as shown in FIG.
[0037]
Here, the communication unit 11 is for communication between the client device 20 on the network and the request response unit 12 or the certificate verification unit 13 in the own server 10.
[0038]
In response to a request received from the client device 20 via the network and the communication unit 11, the request response unit 12 sends a response such as a level request to the client device 20 to the communication unit 11, and performs a level check on the level request. And a function for sending to the unit 14.
[0039]
The certificate verification unit 13 receives the verification result related data (device certificate, user certificate, verification result, signature data SM [SD [verification result]]) received from the client device 20 via the network and the communication unit 11. The function of verifying the validity of each certificate with reference to the user registration authority 1 and the equipment certification authority 3 and sending verification-related data to the level verification unit 14 when the verification result is valid.
[0040]
Here, SM [] means the digital signature of the secure medium 40 for the data “SD [collation result]” in [parentheses], and SD [collation result] is the data “collation result” in [parentheses]. The digital signature of the biometric authentication device 50 is meant.
[0041]
In addition, as the verification process of the certificate, for example, whether each certificate has expired or whether it has been revoked by CRL (Certificate Revocation List) which is a revocation list of public key certificate. No., whether the digital signature of each certificate is valid, whether each certificate authority in the certificate trust path is reliable, or the like.
[0042]
The level collation unit 14 collates the evaluation result data (and / or evaluation reference data) of the device certificate with the level request received from the request response unit 12 among the collation result related data received from the certificate verification unit 13. When the evaluation result data satisfies the level requirement, the verification result related data is sent to the result verification unit 15.
[0043]
The result verification unit 15 has a function of verifying the signature data SM [SD [verification result]] among the verification result related data received from the level verification unit 14 based on each certificate and verifying the validity of the verification result. Yes.
[0044]
As shown in FIG. 5, the client device 20 includes a communication unit 21 and an authentication control program unit 22, and includes other components (a monitor, a mouse, a keyboard, etc.) not shown.
[0045]
The communication unit 21 is for executing communication between the authentication control program unit 22 and the authentication server 10.
[0046]
The authentication control program unit 22 is realized by an authentication control program that is resident and operates during system operation, and is a functional unit for controlling the identity verification process of the client device 20, and operates when accessing the authentication server 10. When it is necessary and not operating, it is started by calling a communication interface (browser or the like) or by a user operation. The authentication control program may be included in the OS, or may be a program outside the OS such as application software or middleware.
[0047]
Specifically, the authentication control program unit 22 includes a communication data control unit 23, a biometric authentication selection unit 24, and a biometric device addition / deletion unit 25.
[0048]
The communication data control unit 23 performs transfer control of communication data (eg, reference information, verification result, signature data SM, SD) between the client device 20 and the secure medium 40 or the biometric authentication device 50 during the biometric authentication process. It is performed and is not related to the contents of communication data.
[0049]
The biometric authentication selection unit 24 has a function of selecting a biometric matching algorithm (collation routine) that satisfies the biometric authentication request level received from the authentication server 10 based on the biometric device connection list received from the secure medium 40.
[0050]
Here, as shown in FIG. 6, the biometric authentication device connection list describes the device name, target biometric information, verification algorithm, manufacturer, and biometric authentication level for each biometric authentication device 50 connected to the client device 20. Is.
[0051]
The biometric device addition / deletion unit 25 adds / deletes the corresponding content on the biometric device connection list when adding / deleting the biometric device 50. At the time of addition, the device certificate transmitted from the additionally connected biometric authentication device 50 is verified, and if it is valid, the corresponding data is added to the biometric authentication device connection list. When deleting, the corresponding data is deleted from the biometric device connection list.
[0052]
The medium reading device 30 has a function of detachably holding the secure medium 40 and an interface function between the secure medium 40 and the client device 20.
[0053]
The secure medium 40 has tamper resistance and cannot access internal information by any means other than legitimate access means. Even against attacks such as unauthorized reading of internal information by physical means, it has a function of preventing leakage of internal information by erasing internal information or the like. For example, an IC card with a tamper resistant function can be applied.
[0054]
Specifically, as shown in FIG. 7, the secure medium 40 includes a secure communication unit 41, a secure medium control unit 42, a personal information management unit 43, a signature generation unit 44, and a signature verification unit 45.
[0055]
The secure communication unit 41 is provided between the secure medium control unit 42 and the outside, and is mainly intended for authentication of an external communication partner, authentication of communication contents, and concealment of communication contents, and key exchange. Processing, communication partner authentication processing, data authentication processing, encryption / decryption processing, and the like. A user certificate and a user secret key managed by the personal information management unit 43 may be used as information for certifying self through secure communication.
[0056]
The secure medium control unit 42 individually controls the personal information management unit 43, the signature generation unit 44, and the signature verification unit 45 based on the communication content received from the secure communication unit 41, and mainly includes the secure communication unit. A function of causing the signature verification unit 45 to verify the signature data SD [verification result] based on the device certificate when receiving the verification result, signature data SD [verification result] and the device certificate from the biometric authentication device 50 from 41; When the verification result of the signature verification unit 45 is “valid”, the signature generation unit 44 signs the signature data SD [verification result] based on the user private key in the personal information management unit 43, and the signature generation unit 44 A device that sends the obtained signature data SM [SD [collation result]], collation result, device certificate, and user certificate to the authentication server 10 to the secure communication unit 41 as collation result related data. It has a door.
[0057]
The personal information management unit 43 manages the user secret key, the user certificate, and the reference information so as to be readable / writable from the secure medium control unit 42. The user certificate is a public key certificate issued from the user registration authority 1 to the user, and is given a digital signature using the private key of the user registration authority 1. The user private key is a private key corresponding to the user certificate. Further, in order to reduce the burden of authentication processing, the public key certificate of the authentication server 10 or the public key certificate of the root certificate authority of the authentication server 10 may be stored.
[0058]
The signature generation unit 44 performs a digital signature on the verification result by the biometric device received from the secure medium control unit 42 and the signature data SD [verification result] with the user private key corresponding to the user certificate. The heavy signature data SM [SD [collation result]] and the collation result are sent to the secure medium control unit 42.
[0059]
The signature verification unit 45 verifies the signature data SD [verification result] based on the verification result by the biometric device received from the secure medium control unit 42, the signature data SD [verification result], and the device certificate. When it is valid, the verification result “valid” for permitting the signature by the signature generation unit 44 is sent to the secure medium control unit 42.
[0060]
The biometric authentication device 50 is a module that is connected to the client device 20 and has a sensor function for reading biometric information such as fingerprints and irises from the living body, and a function for collating the read biometric information with previously registered biometric information. .
[0061]
The biometric authentication device 50 has tamper resistance, and, as shown in FIG. 8, a secure communication unit 51, a biometric authentication device control unit 52, a device information management unit 53, a reading unit 54, a verification unit 55, and a signature generation unit 56. It has.
[0062]
The biometric authentication device 50 is evaluated and certified by the certification authority 2 according to a predetermined evaluation standard, such as a reading accuracy, a collation accuracy evaluation such as a person rejection rate and a stranger acceptance rate, and a tamper resistance performance. The certified biometric authentication device 50 issues a device certificate (device public key certificate) for the biometric device 50 from the device certification authority 3 as a certificate certified by the certification authority 2, and the device certificate. Is stored in the secure area (device information management unit 53) of the biometric authentication device 50.
[0063]
The secure communication unit 51 is mainly intended for authentication of communication partners, authentication of communication contents, and concealment of communication contents, and includes key exchange processing, communication partner authentication processing, data authentication processing, and encryption / decryption processing. Etc. A device certificate and a device private key managed by the device information management unit 53 may be used as information for certifying itself through secure communication.
[0064]
The biometric authentication device control unit 52 controls the functional units 51 and 53 to 56 in the biometric authentication device 50, and mainly transmits a reference information received from the secure communication unit 51 to the verification unit 55. And the verification result received from the signature generation unit 56, the signature data SD [verification result], and the device certificate are transmitted to the secure medium 40 via the secure communication unit 51.
[0065]
The device information management unit 53 manages the device private key and, if necessary, the device certificate. That is, the device certificate may be managed in a repository such as an external directory server if desired.
[0066]
As shown in FIG. 3, the device certificate is a public key certificate issued to the biometric authentication device 50, which is digitally signed with the private key of the device certificate authority 3, and the device secret. The key is a private key corresponding to the device certificate.
[0067]
The reading unit 54 performs a process of reading biometric information and sends the read biometric information to the collation unit.
[0068]
The collation unit 55 sends the reference information sent from the secure medium 40 and received from the biometric device control unit 52 (biological information registered in advance in the secure medium 40) and the collation information read by the reading unit 54 (read) It is operated by a biometric matching routine that collates biometric information or information obtained by subjecting the biometric information to a feature extraction process unique to the matching algorithm, and has a function of sending a matching result to the signature generation unit 56. It should be noted that the biometric matching routine also performs processing specific to matching algorithms such as feature extraction processing when necessary.
[0069]
The signature generation unit 56 applies a digital signature to the verification result received from the verification unit 55 with the device private key corresponding to the device certificate of the device information management unit 53, and obtains the signature data SD [verification result], verification It has a function of sending the result and the device certificate to the biometric authentication medium control unit 52.
[0070]
Next, the operation of the personal identification system configured as described above will be described.
[0071]
(Biometric authentication device certification)
As shown in FIG. 9, a vendor having a biometric authentication device manufacturer (hereinafter referred to as a vendor) device 4 presents the biometric authentication device 50 or its specification to the certification authority 2 and biometric authentication of the biometric authentication device 50. Ask for level certification.
[0072]
The certification authority 2 performs certification based on this certification request, and provides the device certification authority 3 with an issuance request and device certificate information.
[0073]
The device certificate authority 3 issues a device certificate based on the provided contents, and transmits this device certificate to the vendor 4.
[0074]
When the vendor 4 stores the device certificate, the vendor 4 stores the device certificate in the device information management unit 53 of each biometric authentication device 50.
[0075]
(User initial registration)
The user performs initial registration of the user with the user registration authority 1 when receiving a service using the identity verification system.
[0076]
Upon receiving an application for registration from the user, the user registration station 1 inquires about the identity of the user (ST1), determines whether or not to permit initial registration (ST2), and returns to step ST1 if not permitted. If the initial registration is permitted, a user certificate and a user secret key are issued to the user (ST3). At this time, it is preferable to use a general PKI framework for the public key infrastructure of the user certificate.
[0077]
At the same time, when the user selects a biometric authentication method and collects biometric information by this biometric authentication method (ST4), the user presents biometric information as reference information (ST5).
[0078]
The user registration station 1 generates a biometric authentication correspondence list indicating the biometric authentication method corresponding to the reference information based on the presented content (ST6), and issues the issued user certificate, user secret key, reference information, and biometrics. The authentication correspondence list is stored in the personal information management unit 53 of the secure medium 40 (ST7), and is also registered in the own station 1 and the process is terminated.
[0079]
(Identification)
The client device 20 accesses a service that requires user identification by user operation. At this time, the authentication server 10 on the service side sends an identity confirmation request to the client device 20. Specifically, when the service-side authentication server 10 receives a service request from the client device 20, the service-side authentication server 10 establishes a connection with the authentication control program unit 22 of the client device 20 through another channel and notifies the client device 20 of the identity confirmation request. To do.
[0080]
The client device 20 calls the authentication control program unit 22 based on this identity verification request. The authentication control program unit 22 is always activated or activated by calling an activation program.
[0081]
As shown in FIG. 11, the authentication control program unit 22 displays a screen requesting insertion of the secure medium 40 owned by the user (ST11), and confirms whether or not the secure medium 40 is inserted (ST12). .
[0082]
When it is confirmed that the secure medium 40 is inserted, the authentication control program unit 22 starts a secure communication path construction process between the secure medium 40 and the authentication server 10 (ST13).
[0083]
The purpose of the secure communication path construction process here is to construct a reliable communication path between the secure medium 40 and the authentication server 10. As a specific example, a method using a challenge and response method based on a public key cryptosystem for mutual authentication will be described. However, the present invention is not limited to this, and other means may be used.
[0084]
Construction of the communication path is basically performed by the secure communication units 41 and 11. Although it is assumed that mutual public key certificates are held by each other, a payload for transmitting the certificate may be provided in the transmission message for transmission. It is assumed that both the public key and the secret key of the public key cryptosystem described here can be encrypted and decrypted.
[0085]
When the secure medium 40 receives the secure communication path construction process start message, the secure medium 40 generates a challenge C1 that is a random number and transmits the challenge C1 to the authentication server 10.
[0086]
In the authentication server 10, the challenge C1 is assigned to its own secret key Sk. _S To generate a response R1.
[0087]
The authentication server 10 generates a challenge C2, and together with the response R1 and the biometric authentication level requested by the service, the user's public key (user certificate) Cert _U Encrypt and send the encrypted data.
[0088]
The secure medium 40 uses this encrypted data as the user secret key Sk. _U To obtain a response R1 and a challenge C2. Response R1 is the public key Cert of authentication server 10 _S If it is verified that it is valid, the challenge C2 is shared as a session key for data encryption.
[0089]
Similarly, an example in which the secure medium 40 generates a session key will be described.
Upon receiving the secure communication path construction process start message, the secure medium 40 generates a challenge C1 that is a random number and transmits it to the authentication server 10.
[0090]
In the authentication server 10, the challenge C1 and the biometric authentication level requested by the service are set to the secret key Sk of the authentication server 10. _S To generate a response R1 and transmit the response R1 to the secure medium 40.
[0091]
In the secure medium 40, the response R1 is sent as the public key Cert of the authentication server 10. _S If it is verified that it is valid, a challenge C3 is generated and the server public key Cert _S Encrypt with Encrypted challenge C3 ′, challenge C1, and response R1 include user secret key Sk _U The digital signature is applied to the authentication server 10 together with the encrypted challenge C3 ′.
[0092]
If the authentication server 10 verifies the digital signature and determines that it is valid, the authentication server 10 decrypts the encrypted challenge C3 ′ to obtain the challenge C3. The challenge C3 is shared as a session key for data encryption.
[0093]
Now, the authentication control program unit 22 performs secure communication path construction processing, determines whether or not a secure communication path has been secured by determining that each other's communication partner is valid (ST14), and if not secured, performs processing. However, when secured, the biometric authentication correspondence list is received from the secure medium 40 (ST15).
[0094]
The biometric authentication selection unit 24 of the authentication control program unit 22 is requested based on the biometric authentication level requested from the service side and the biometric connection device list as shown in FIG. A biometric matching algorithm satisfying the above (hereinafter also referred to as a biometric matching routine) is selected (ST16). The combined population at this time is a usable biometric matching routine obtained from the common part of the biometric authentication level and the biometric connection device list.
[0095]
The biometric authentication level here refers to a comprehensive performance level when a single or a plurality of biometric authentication devices 50 are combined. The authority provided to the user can be controlled by the biometric authentication level required by this service. That is, for a service that requires a high security level, it is possible to perform flexible identity verification such as requesting a higher biometric authentication level.
[0096]
At the time of this selection, the authentication control program unit 22 determines whether a combination of biometric matching routines that can satisfy the biometric authentication level can be determined (ST17). Sometimes, the secure medium 40 is notified of this determined biometric matching routine.
[0097]
The secure medium 40 determines the biometric authentication device 50 from this biometric matching algorithm, and proceeds to the verification processing by this device 50.
[0098]
At the start of the verification process, as shown in FIG. 12, the secure medium 40 directly establishes a secure communication path with the biometric authentication device 50 via the authentication control program unit 22 (ST21).
[0099]
The secure communication path here is intended to protect the transmission path between the device 50 and the medium 40 and to mutually authenticate that the communication partner device is valid. As an example of a specific secure communication path construction process, there is a method in which the secure medium 40 and the biometric authentication device 50 are performed by using a public key (public key certificate) and a private key of a public key cryptosystem held by each other. is there.
[0100]
The biometric authentication device 50 transmits the device certificate to the secure medium 40. The secure medium 40 verifies the device certificate. If the device certificate is valid, the secure medium 40 generates an encryption key (session key) of a common key encryption method and encrypts it with the device certificate.
[0101]
At this time, a digital signature is signed with a private key corresponding to the user certificate stored in the secure medium 40 and transmitted to the biometric authentication device 50 together with the user certificate.
[0102]
The biometric authentication device 50 verifies the user certificate and the digital signature, and decrypts the encrypted session key. Data encryption for secure communication is performed using this session key.
[0103]
At this time, the secure medium 40 and the biometric authentication device 50 preferably store in advance a public key certificate of an organization (root certification authority, device certification authority 3 or the like) that authenticates each other's public key certificate, or You may provide the arbitrary means acquired from a repository separately. Although communication between the secure medium 40 and the biometric authentication device 50 is performed via the authentication control program unit 22, the communication path is omitted in FIG.
[0104]
The secure medium 40 transmits reference information to the biometric authentication device 50 when a secure communication path is established (ST22).
[0105]
Upon receiving the reference information, the biometric authentication device 50 notifies the authentication control program unit 22 to display a screen that prompts the user to present biometric information.
[0106]
Specifically, in the case of fingerprint collation, a message such as “Place your finger on the reader” is displayed on the screen. In order to confirm that the preparation for presenting biometric information has been completed, confirmation is made by means such as input of a return key or pressing of an OK button on the screen.
[0107]
The biometric authentication device 50 reads the biometric information by the reading unit 54 when the preparation for presenting the biometric information is confirmed, and passes the read biometric information to the verification unit 55. The collation unit collates the collation information with the received reference information (ST23).
[0108]
The collation unit 55 determines whether the two match or not (ST24). If the two match, the collation unit 55 applies a digital signature to the collation result “valid (OK)” using the device secret key (ST25), and obtains the signature data SD [ Verification result], the verification result and the device certificate are transmitted to the secure medium 40. On the other hand, the collation part 55 stops authentication processing, when both are inconsistent as a result of step ST24.
[0109]
If necessary, the fact that authentication has failed is notified to the secure medium 40 and the authentication control program unit 22 as identification information, and a message such as “Authentication failed” is displayed on the screen. In addition, as an example of the screen display item at this time, information indicating whether the verification is successful or unsuccessful (the verification reliability based on a percentage or the like may be included), the biometric authentication method used (including the biometric authentication device 50), and use And the biometric authentication level of the biometric authentication method (the total level when a plurality of biometric authentication methods are used).
[0110]
The secure medium 40 verifies the signature data SD [verification result]. If it is valid, the secure medium 40 applies a digital signature with the user private key, and the obtained signature data SM [SD [verification result] includes a verification result and a device certificate. The verification result related data with the user certificate attached is transmitted to the authentication control program unit 22.
[0111]
The authentication control program unit 22 transmits the verification result related data to the authentication server 10. Here, since the collation result related data is encrypted with the shared session key, it is difficult for anyone other than the secure medium 40 and the authentication server 10 to know the contents.
[0112]
In the authentication server 10, the certificate verification unit 13 uses the verification result related data (device certificate, user certificate, SM [SD [matching result]]) received from the client device 20 via the network and the communication unit 11. On the other hand, the validity of each certificate is verified while referring to the user registration authority 1 and the device certification authority 3, and when the verification result is valid, the verification related data is sent to the level verification unit 14.
[0113]
The level collation unit 14 collates the evaluation result data (and / or evaluation standard data) of the device certificate with the level request received from the request response unit 12 among the collation result related data, and the evaluation result data is the level request. When the condition is satisfied, the verification result related data is sent to the result verification unit 15.
[0114]
The result verification unit 15 verifies the signature data SM [SD [verification result]] of the verification result related data based on each certificate, and verifies the validity of the verification result. If the collation result is valid, the identity verification is completed, and the service side provides the service to the client device 20.
[0115]
(Biometric device added)
The biometric device addition / deletion unit 25 adds / deletes corresponding content on the biometric device connection list when adding / deleting the biometric device 50. At the time of addition, the device certificate transmitted from the additionally connected biometric authentication device 50 is verified, and if it is valid, the corresponding data is added to the biometric authentication device connection list. When deleting, the corresponding data is deleted from the biometric device connection list.
[0116]
As described above, according to the present embodiment, a double digital signature between the biometric authentication device 50 and the secure medium 40 is given to the collation result by the biometric authentication method, so that the reliability of biometric authentication is ensured. Identity verification can be performed via the network.
[0117]
That is, it is possible to ensure that the result of the verification process or the reading process of biometric authentication in a remote place via the network is performed in a safe environment, and the problem (a) considered by the present inventor Can be solved.
[0118]
Further, since the authentication server 10 notifies the client device of the biometric authentication level required by the service, the obtained verification result indicates the biometric authentication level requested by the service (such as the verification accuracy of the biometric authentication method and the strength of tamper resistance). ) Can be guaranteed, and the problem (b) considered by the present inventor can be solved.
[0119]
However, the configuration for notifying the biological requirement level is not essential, and it is only necessary to finally confirm that the biological requirement level is satisfied. For example, the client apparatus 20 side selects the biometric authentication device 50 having the highest biometric authentication level, transmits verification result related data to the authentication server 10, and confirms the biometric authentication level by referring to the device certificate on the authentication server 10 side. It is good also as composition to do.
[0120]
In addition, when a plurality of biometric authentication devices 50 are connected, the biometric authentication selection unit 24 adds to the authentication device connection list created including the biometric evaluation data described in the device certificate of each biometric authentication device 50. Based on this, since the biometric authentication method or biometric authentication device 50 that satisfies the required level is selected, an appropriate biometric authentication method or biometric authentication device 50 is selected from a plurality of biometric authentication devices 50 without fixing the biometric authentication method to be used. can do.
[0121]
That is, without fixing the biometric authentication method to be used, the user or the system itself can select a free biometric authentication method if the biometric authentication level required by the service using the authentication server 10 or the identity verification system is satisfied. For this reason, the problem (c) which this inventor considered can be solved.
[0122]
Further, the biometric authentication device addition / deletion unit 25 dynamically changes the contents of the authentication device connection list so that the biometric authentication device 50 ′ is added when the new biometric authentication device 50 ′ is connected to the client device 20. Therefore, a new biometric authentication device can be added easily and reliably.
[0123]
Thereby, for example, even when an existing verification algorithm or biometric authentication device is newly updated, the verification algorithm or biometric authentication device can be easily added and / or discarded.
[0124]
In the case of a composite biometric authentication system, a plurality of biometric information such as fingerprint information, face information, and voice information must be registered in advance in order to handle a plurality of biometric authentication methods. These can be easily registered.
[0125]
Even if the same biometric authentication method is used, there are a plurality of types of collation algorithms. Therefore, there are a plurality of types of biometric information formats to be used (for example, the same fingerprint but different fingerprint information between different collation algorithms. However, according to the biometric device addition / deletion unit 25, these can be easily registered.
[0126]
Further, when any one of a plurality of types of biometric authentication methods is arbitrarily selected, there is a possibility that whether or not the required level of the security policy is satisfied depends on the selected method. In the conventional identity verification service, the problem (a ), It is extremely difficult to know whether or not the required level is satisfied. However, according to the present embodiment, as described above, the biometric authentication verification process or It is possible to ensure the validity of the read processing result and the fact that it was performed in a safe environment.
[0127]
In addition, since the user registration authority 1 and the device authentication authority 3 are provided, an authentication infrastructure that can be commonly used for each user can be realized, so that the problem (d) considered by the present inventor can be solved. Furthermore, since the authentication infrastructure is divided into the user registration authority 1 side related to the user and the device authentication authority 3 related to the biometric authentication device 50, it can be realized without overloading one station.
[0128]
Note that the present embodiment is not limited to the configuration described above, and the secure medium 40 may be omitted and only the processing result of the biometric authentication device 50 may be transmitted to the authentication server 10. In this case, the authentication server 10 guarantees only biometric information read by the biometric authentication device 50 or information extracted from the biometric information (collation information).
[0129]
(Second Embodiment)
FIG. 13 is a schematic diagram showing a configuration of an identification system according to the second embodiment of the present invention, FIG. 14 is a schematic diagram showing a biometric authentication device of the system and its peripheral configuration, and FIG. The same reference numerals are given to the same parts as those in the above-described drawings, and detailed description thereof will be omitted, and different parts will be mainly described here. In addition, description of the overlapping part is abbreviate | omitted similarly also in each following embodiment.
[0130]
That is, the present embodiment is a modification of the first embodiment, and is applied to a biometric authentication device as a reading device that does not have a verification function. Specifically, as shown in FIG. The biometric authentication device 50a from which the collation part 55 was abbreviate | omitted and the biometrics collation server 60 which is connected to the client apparatus 20a and has a collation part are provided.
[0131]
Here, for example, in the case of fingerprint authentication, the biometric authentication device 50a corresponds to a reading apparatus that has a reading unit 54 such as a fingerprint sensor (capacitance type, optical reading type, etc.) but does not have a verification function.
[0132]
As shown in FIG. 15, the biometric verification server 60 includes a secure communication unit 61, a user information management unit 62, a signature verification unit 63, a verification unit 64, and a signature generation unit 65.
[0133]
The secure communication unit 61 has a function of establishing a secure communication path with the secure medium 40 via the authentication control program unit 22 and performing secure communication with the secure medium 40.
[0134]
The user information management unit 62 stores a user certificate, a device certificate, a biometric verification server certificate, a biometric verification server private key, and reference information in advance. The reference information may not be managed by the user information management unit 62 but may be managed by the personal information management unit of the secure medium 40 as described above.
[0135]
When the signature verification unit 63 receives the signature data SM [SD [Biometric Information]], the biometric information, the device certificate, and the user certificate from the secure medium 40 from the secure communication unit 61, the signature verification unit 63 refers to the user information management unit 62. The device certificate and the user certificate are verified, and if valid, the signature data SM [SD [biological information]] is verified based on each certificate. It has a function of sending information to the collation unit 64.
[0136]
The collation unit 64 collates the biometric information received from the signature verification unit 63 with the reference information in the user information management unit 62, and sends a collation result “valid” to the signature generation unit 65 if they match. Have The verification unit 64 includes a plurality of biometric verification routines, and can select a verification routine corresponding to the contents of the device certificate.
[0137]
The signature generation unit 65 signs the verification result received from the verification unit 64 with the biometric verification server private key in the user information management unit 62, and the obtained signature data SS [verification result], verification result, and biometric verification server certificate Is transmitted to the authentication control program unit 22 via the secure communication unit 61.
[0138]
Next, the operation of the personal identification system configured as described above will be described.
(User initial registration)
The initial registration of the user is the same as described above, but the user's reference information is stored in the biometric matching server 60 or the secure medium 40.
[0139]
(Identification)
The process up to the start of biometric authentication is the same as described above, and the procedure after the biometric information reading process will be described as a different procedure.
[0140]
The biometric authentication device 50 a applies a digital signature to the read biometric information with the device secret key, and transmits the obtained signature data SD [biometric information], biometric information, and device certificate to the secure medium 40. At this time, if necessary, processing unique to the biometric matching routine (feature extraction or the like) may be performed.
[0141]
The secure medium 40 digitally signs the received signature data SD [Biometric Information] with a user private key, and then obtains the signature data SM [SD [Biometric Information]], biometric information, user certificate, and device certificate. The certificate is transmitted to the biometric matching server via the authentication control program unit 22. At this time, if necessary, the biometric information may be encrypted.
[0142]
In the biometric verification server 60, as shown in FIG. 16, the signature verification unit 63 receives the signature data SM [SD [Biometric information]], the biometric information, the device certificate, and the user certificate from the secure medium 40 as a secure communication unit. 61, the device certificate and the user certificate are verified while referring to the user information management unit 62, and if valid, the signature data SM [SD [biological information]] is obtained based on each certificate. Verification is performed (ST31).
[0143]
Here, the signature verification unit 63 determines whether or not the signature is valid (OK) (ST32). If the verification result is not valid (NG), the verification process is rejected and the process ends. If the result is valid, the biometric information is sent to the verification unit 64.
[0144]
The collation unit 64 collates this biometric information with the reference information in the user information management unit 62, and sends a collation result “valid” to the signature generation unit 65 if they match.
[0145]
The signature generation unit 65 signs the verification result with the biometric verification server private key in the user information management unit 62, and uses the obtained signature data SS [verification result], the verification result, and the biometric verification server certificate as a secure communication unit 61. Is sent to the authentication control program unit 22.
[0146]
The authentication control program unit 22 transmits the signature data SS [verification result], the verification result, and the biometric verification server certificate to the authentication server 10. However, the authentication control program unit 22 transmits these data to the secure medium 40, and through the signature processing of the secure medium 40, the signature data SM [SS [collation result]], collation result, biometric collation server certificate and user You may make it transmit to the authentication server 10 as a certificate.
[0147]
In the authentication server 10, as described above, the certificate verification unit 13, the level verification unit 14, and the result verification unit 15 each confirm the content received from the client device 20.
[0148]
As described above, according to the present embodiment, even when the biometric authentication device 50a having no verification function is provided, the same effect as that of the first embodiment can be obtained.
[0149]
Supplementally, in the current biometric authentication, an application having a verification function is often arranged in the client device 20 such as a personal computer and the verification process is often performed in the client device 20.
[0150]
However, it is difficult to guarantee that the client device 20 is in a safe environment. For this reason, it is uneasy for security to arrange a collation function using reference information such as a fingerprint template in the client device 20.
[0151]
Therefore, as a modification of the first embodiment, it is important to realize an identification system using a biometric authentication device 50a as a reading device and a biometric verification server 60) having a verification function installed outside the client device 20. There is.
[0152]
(Third embodiment)
FIG. 17 is a schematic diagram showing a configuration of an identification system according to the third embodiment of the present invention, and FIG. 18 is a schematic diagram showing a client device of the system and its peripheral configuration.
[0153]
In other words, the present embodiment is a modification of the first embodiment, and can obtain a biometric matching routine dynamically without any biometric matching routine that can be used. A biometric matching routine acquisition unit 26 added to the control program unit 22b and a biometric matching routine DB (database) 70 connected to the client device 20b are provided.
[0154]
Here, the biometric verification routine acquisition unit 26 acquires a biometric verification routine from the biometric verification routine DB based on the acquisition request from the biometric authentication selection unit 24, and performs communication data control on the biometric verification routine addressed to the biometric authentication device 50. It can be sent to the unit 23.
[0155]
The biometric matching routine DB 70 stores a plurality of biometric matching routines in advance, and the search conditions notified from the biometric matching routine acquisition unit 26 (for example, information on each biometric authentication device 50, the data format of reference information, and the type of data) And a biometric verification level), a biometric matching routine that matches the search condition is sent to the biometric matching routine acquisition unit 26.
[0156]
However, the biometric authentication device 50 writes a biometric verification routine that can be used by the verification unit 55 in the extension field of the device certificate when it is certified by the certification authority 2. For example, the biometric matching routine preferably has a rule that is categorized in advance by target biometric information, unique feature extraction processing, and the like and can be identified by a matching routine ID or the like.
[0157]
Next, the operation of the personal identification system configured as described above will be described.
(Biometric matching routine acquisition)
Now, as shown in FIG. 19, the above-described steps ST11 to ST16 operate similarly. Subsequently, in step ST <b> 17 b, when the biometric authentication selection unit 24 of the authentication control program unit 22 selects a biometric matching routine, there is no combination in the client device 20 that can satisfy the biometric authentication level required by the service. If it is determined, an acquisition request is issued to the biometric matching routine acquisition unit 26 (ST18).
[0158]
In response to this acquisition request, the biometric matching routine acquisition unit 26 requests the information of each biometric authentication device 50 connected to the client device 20b, the data format of the reference information stored in the secure medium 40, the type of data, and the like. The biometric verification routine DB 70 is notified of the biometric authentication level to be obtained, and the biometric verification routine that matches the conditions is acquired from the biometric verification routine DB 70.
[0159]
The acquired biometric verification routine is transmitted to the corresponding biometric authentication device 50. If necessary, the biometric verification routine to be transmitted may be digitally signed by the biometric verification routine DB 70 or the like and verified by the biometric authentication device 50 or the authentication control program unit 22. In this case, the root CA public key certificate (or public key itself) of the public key certificate of the biometric matching routine DB 70 may be incorporated into the biometric authentication device 50 at the time of authorization.
[0160]
As described above, according to the present embodiment, in addition to the effects of the first embodiment, even when there is no usable biometric matching routine, the biometric matching routine acquisition unit 26 dynamically changes the biometric matching routine from the biometric matching routine DB 70. Can be obtained.
[0161]
The present embodiment is not limited to the modification of the first embodiment, and may be a modification of the second embodiment. In this case, the processing procedure may follow the processing procedure described in the second and third embodiments.
[0162]
(Fourth embodiment)
FIG. 20 is a schematic diagram showing the configuration of the identity verification guarantee base applied to the identity authentication system according to the fourth embodiment of the present invention.
[0163]
That is, this embodiment is a modification of the first to third embodiments, and instead of the simple configuration of the certification authority 2 and the device certification authority 3, the certification authority 5 and the vendor (biometric device manufacturer) 4c. It has a personal identification and assurance platform with a hierarchical structure.
[0164]
Here, the certification body 5 includes a certification authority 2c and a vendor certification authority 6.
[0165]
The certification authority 2c has a function of sending an issuance request to the vendor certification authority 5 when the vendor 4c and the biometric authentication device 50 are certified according to a request from the vendor 4c.
[0166]
The vendor certification authority 6 has a function of issuing a vendor certificate (vendor public key certificate) to the vendor 4c based on the issue request received from the certification authority 2c.
[0167]
The vendor 4c includes a device certificate authority 3c.
The device certificate authority 3c issues a device certificate to the biometric authentication devices 50 and 50a based on the vendor certificate issued by the vendor certificate authority 6, and stores the device certificate in the biometric authentication devices 50 and 50a. It has a function to do.
[0168]
Next, the operation of the personal identification assurance base configured as described above will be described.
The vendor 4c requests the certification authority 2c to issue a vendor certificate. The certification authority 2c determines whether or not a vendor certificate can be issued to the vendor 4c. The determination standard depends on the policy in the operation of the certification authority 2c and is not defined in the present embodiment.
[0169]
When the certification authority 2c determines that the vendor certificate can be issued, it requests the vendor certificate authority 6 to issue the vendor certificate. At this time, necessary information (may be information described in a general public key certificate) of the vendor 4c is provided.
[0170]
The vendor certificate authority 6 issues a vendor certificate to the vendor 4c. Each item to be described is attached to the public key generated by the vendor certificate authority 6 and a digital signature is applied with the public key certificate of the vendor certificate authority 6. Here, each item of the vendor certificate is X. A field item defined by the 509 certificate is suitable, but an extended item may be added if necessary.
[0171]
The vendor 4c evaluates the biometric device 50 manufactured by the vendor 4c according to the certification standard of the certification authority 2c as described above, and issues a device certificate from the device certification authority 3c operated by the vendor 4c. However, the device certificate authority 3c may be an external component of the vendor 4c as long as the vendor 4c trusts it.
[0172]
The device certificate is the same as that shown in FIG. 3, but is digitally signed by a vendor certificate. That is, in the trust hierarchy of the certificate authority of the device certificate, the certification authority 2c is the highest and the vendor certification authority 6 comes next.
[0173]
The vendor 4c stores the issued device certificate in the manufactured biometric authentication device 50. The device certificate issued at this time may be submitted to the certification authority 2c.
[0174]
The certification authority 2c periodically audits the reliability of the vendor 4c by verifying the device certificate stored in the biometric device 50.
[0175]
As the device certificate verification target at this time, just like the first embodiment, the validity of the certificate itself is verified and the description items of the device certificate are verified. The verification of the description items is performed by actually evaluating the consistency between the evaluation result of the biometric authentication device 50 described in the device certificate and the actual biometric authentication device 50.
[0176]
If it is determined that the certificate is invalid, the certificate authority 2c performs revocation processing of the device certificate and the vendor certificate. That is, the certificate authority 2c describes the device certificate and the vendor certificate in a revocation list (CRL, ARL (Authority Revocation List), etc.). The same processing is performed when a certificate revocation request is presented by the authentication server 10 or the like.
[0177]
As described above, according to the present embodiment, even if a personal identification assurance base having a hierarchical structure of the certification authority 5 and the vendor 4c is provided, the effects of the first to third embodiments can be obtained. it can.
[0178]
The method described in each of the above embodiments is a program that can be executed by a computer, such as a magnetic disk (floppy (registered trademark) disk, hard disk, etc.), an optical disk (CD-ROM, DVD, etc.), a magneto-optical disk ( MO), and can be stored and distributed in a storage medium such as a semiconductor memory.
[0179]
In addition, as long as the storage medium can store a program and can be read by a computer, the storage format may be any form.
[0180]
In addition, an OS (operating system) operating on the computer based on an instruction of a program installed in the computer from the storage medium, MW (middleware) such as database management software, network software, and the like implement the present embodiment. A part of each process may be executed.
[0181]
Furthermore, the storage medium in the present invention is not limited to a medium independent of a computer, but also includes a storage medium in which a program transmitted via a LAN or the Internet is downloaded and stored or temporarily stored.
[0182]
Further, the number of storage media is not limited to one, and the case where the processing in the present embodiment is executed from a plurality of media is also included in the storage media in the present invention, and the media configuration may be any configuration.
[0183]
The computer according to the present invention executes each process according to the present embodiment based on a program stored in a storage medium, and includes a single device such as a personal computer or a system in which a plurality of devices are connected to a network. Any configuration may be used.
[0184]
In addition, the computer in the present invention is not limited to a personal computer, but includes an arithmetic processing device, a microcomputer, and the like included in an information processing device, and is a generic term for devices and devices that can realize the functions of the present invention by a program. .
[0185]
Note that the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the scope of the invention at the stage of implementation. In addition, the embodiments may be combined as appropriate as possible, and in that case, combined effects can be obtained. Furthermore, the above embodiments include inventions at various stages, and various inventions can be extracted by appropriate combinations of a plurality of disclosed configuration requirements. For example, when an invention is extracted by omitting some constituent elements from all the constituent elements shown in the embodiment, when the extracted invention is implemented, the omitted part is appropriately supplemented by a well-known common technique. It is what is said.
[0186]
In addition, the present invention can be implemented with various modifications without departing from the gist thereof.
[0187]
【The invention's effect】
As described above, according to the present invention, identity verification can be executed via a network while ensuring the reliability of biometric authentication.
[Brief description of the drawings]
FIG. 1 is a schematic diagram showing a configuration of an identification system according to a first embodiment of the present invention.
FIG. 2 is a schematic diagram for explaining reference information in the embodiment;
FIG. 3 is a schematic diagram for explaining a device certificate in the embodiment;
FIG. 4 is a schematic diagram showing an authentication server and its peripheral configuration in the embodiment;
FIG. 5 is a schematic diagram showing a client device and its peripheral configuration in the embodiment;
FIG. 6 is a schematic diagram for explaining a biometric device connection list according to the embodiment;
FIG. 7 is a schematic diagram showing a secure medium and its peripheral configuration in the embodiment;
FIG. 8 is a schematic diagram showing a biometric authentication device and its peripheral configuration according to the embodiment;
FIG. 9 is a schematic diagram for explaining a certifying operation of the biometric authentication device according to the embodiment.
FIG. 10 is a flowchart for explaining a user initial registration operation in the embodiment;
FIG. 11 is a flowchart for explaining the identity verification operation in the embodiment;
FIG. 12 is a flowchart for explaining the identity verification operation in the embodiment;
FIG. 13 is a schematic diagram showing a configuration of an identification system according to a second embodiment of the present invention.
FIG. 14 is a schematic diagram showing a biometric authentication device and its peripheral configuration in the embodiment;
FIG. 15 is a schematic diagram showing a biometric matching server and its peripheral configuration in the embodiment;
FIG. 16 is a flowchart for explaining the operation in the embodiment;
FIG. 17 is a schematic diagram showing a configuration of an identification system according to a third embodiment of the present invention.
FIG. 18 is a schematic diagram showing a client device and its peripheral configuration in the embodiment;
FIG. 19 is a flowchart for explaining a collation routine acquisition operation in the embodiment;
FIG. 20 is a schematic diagram showing a configuration of an identity verification guarantee base applied to an identity authentication system according to a fourth embodiment of the present invention.
[Explanation of symbols]
1 ... User registration authority
2 ... Authorized Bureau
3, 3c ... Equipment Certification Authority
4, 4c ... Vendor
5. Vendor certification authority
10: Authentication server
11, 21 ... Communication part
12 ... Request response part
13 ... Certificate verification unit
14 ... Level verification part
15 ... Result verification section
20, 20a, 20b ... Client device
22: Authentication control program section
23. Communication data control unit
24 ... Biometric authentication selection unit
25: Biometric device addition / deletion unit
26: Biometric matching routine acquisition unit
30. Medium reader
40 ... Secure medium
41, 51, 61 ... secure communication section
42. Secure media control unit
43 ... Personal Information Management Department
44, 56, 65 ... signature generation unit
45, 63 ... signature verification unit
50, 50a ... biometric authentication device
52 ... Biometric device control unit
53. Device information management section
54. Reading unit
55, 64 ... verification unit
60 ... Biometric verification server
62: User information management unit
70 ... Biometric matching routine DB

Claims (7)

An identity verification system for confirming that a user is an identity by using a biometric authentication method,
For each user, a user registration authority for issuing a user certificate and a user private key based on a public key cryptosystem,
For each biometric authentication device, a device certificate authority for issuing a device certificate and a device private key based on a public key cryptosystem,
When the device certificate issued by the device certificate authority and the device secret key are stored in advance and the user is confirmed to be the identity by a predetermined biometric authentication method, the device secret is obtained with respect to the obtained identity confirmation information. A biometric authentication device that transmits a first digital signature by a key and the device certificate;
When the user certificate and the user private key issued by the user registration authority are stored in advance and the personal identification information, the first digital signature, and the device certificate transmitted from the biometric authentication device are received, the first digital A user signature device that performs signature processing with the user private key on a signature and transmits the obtained second digital signature, the identity verification information, the device certificate, and the user certificate;
A client device connected to the biometric authentication device, having a medium holding unit that detachably holds the user signature device;
When the second digital signature, identity verification information, device certificate, and user certificate connected to the client device via the network and transmitted from the user signature device are received, the user registration authority and the equipment authentication authority are referred to. While verifying the user certificate and the device certificate, or verifying the second digital signature, and when the verification result of each certificate and the second digital signature is valid, the identity verification information is An authentication device to authenticate;
An identity verification system characterized by comprising: In the identity verification system according to claim 1,
The identity verification system comprising: a request level notifying unit for notifying the client device of a biometric authentication level requested by a service based on a service request received from the client device. In the identity verification system according to claim 2,
The client device, when a plurality of biometric authentication devices are connected, based on the authentication device connection list created including biometric evaluation data described in the device certificate of each biometric authentication device, the request A personal identification system comprising authentication device selection means for selecting a biometric authentication method or a biometric authentication device that satisfies a level. In the identity verification system according to claim 3,
An individual who comprises dynamic change means for dynamically changing the contents of the authentication device connection list so as to add a biometric authentication device when a new biometric authentication device is connected to the client device. Confirmation system. A biometric authentication device that adds a first digital signature to identity verification information for confirming that the user is the identity by a biometric authentication method and sends it together with a device certificate; an authentication device for confirming the identity verification information; and Used in a personal identification system including a client device for transmitting personal identification information obtained by a biometric authentication device to the authentication device via a network, and is detachably held in a medium holding unit of the client device A user signature device,
User information storage means in which a user certificate and a user secret key based on a public key cryptosystem are stored in advance;
Receiving means for receiving the identity verification information, the first digital signature and the device certificate transmitted from the biometric device;
Signature verification means for verifying the first digital signature received by the reception means based on the device certificate;
A signature generating means for applying a signature process to the first digital signature with a user secret key in the user information storage means when the verification result by the signature verification means is valid;
Transmitting means for transmitting the second digital signature obtained by the signature generating means, the identity verification information, the device certificate and the user certificate to the client device;
A user signature device comprising: User authentication information obtained by a biometric authentication device, a device certificate of the biometric authentication device , a user certificate, and a user corresponding to the device private key corresponding to the device certificate and the user certificate. An authentication device for authenticating the personal identification information when receiving a digital signature that has been subjected to signature processing with a private key from a client device via a network,
Receiving means for receiving the digital signature, the identity verification information, the device certificate and the user certificate;
A certificate verification unit for verifying the device certificate and the user certificate received by the reception unit while communicating with the issuer of each certificate;
A signature verification unit that verifies the digital signature based on each certificate when the verification result by the certificate verification unit is valid;
When the verification result by the signature verification means is valid, identity verification information authentication means for authenticating the identity verification information;
An authentication apparatus comprising: An identity verification system for confirming that a user is an identity by using a biometric authentication method,
For each user, a user registration authority for issuing a user certificate and a user private key based on a public key cryptosystem,
For each biometric authentication device, a device certificate authority for issuing a device certificate and a device private key based on a public key cryptosystem,
The user certificate and user secret key issued by the user registration authority are stored in advance, and the identity confirmation information transmitted from the outside, the identity confirmation information obtained by subjecting the identity confirmation information to the signature processing by the device secret key . Upon receiving one digital signature and the device certificate, the first digital signature is subjected to a signature process using the user private key, and the obtained second digital signature, the identity verification information, the device certificate, and the user are obtained. A user signing device that sends the certificate;
A client device having a medium holding unit that detachably holds the user signature device and having a communication function;
When the second digital signature, identity verification information, device certificate and user certificate transmitted from the user signature device are received via the client device, the user certificate is referred to with reference to the user registration authority and the device authentication authority. An authentication device that verifies the identity verification information when the certificate and the device certificate are verified, or the second digital signature is verified, and the verification results of the certificates and the second digital signature are valid, respectively. ,
An identity verification system characterized by comprising:

Images