JP7005391B2 - Biometric information system - Google Patents

Description

The present invention relates to a biometric information system that communicates biometric information between a plurality of devices.

In recent years, a system has been developed in which a detection device for detecting biological information is attached and the detected biological information is transmitted from the detection device to an external device (receiver or the like). For example, Patent Document 1 discloses a biological information system including an electronic bracelet that can be worn on the arm of a user (living body) and a smartphone that can communicate with the electronic bracelet. This electronic bracelet detects biometric information (bioimpedance, heart rate, blood pressure, etc.) and uses the detected biometric information to perform biometric authentication of the user who uses the electronic bracelet.

International Publication No. 2014/147713

By the way, since the biometric information system communicates biometric information, which is the personal information of the user, between the two devices, it is necessary to perform communication with sufficiently improved security. However, in the conventional biometric information system, communication between two devices is established by authenticating the (pre-registered) ID given to one device by the other device. In this case, the biometric information may be read relatively easily by another device reading the ID of one device.

The present invention has been made to solve the above-mentioned problems, and by using the acquired biometric information for authentication of communication between a plurality of devices, it is possible to perform communication in a more secure state. The purpose is to provide a biometric information system that can be used.

In order to achieve the above object, the biometric information system according to the present invention can communicate with a first device that acquires and stores biometric information and the first device, and the biometric information from the first device. The first device includes a second device for acquiring and storing the information, the first device generates a first profile which is a biometric information profile based on the stored biometric information, and the second device is stored. Based on the biometric information, the second profile, which is the biometric information profile, is generated, and has an authentication unit that authenticates the communication between the first device and the second device. Communication is established when the second profile substantially matches, communication is disabled when the first profile and the second profile do not substantially match, and the first device is attached to a living body. It is a detection device that is indwelled and detects information related to the glucose value as the biological information, and the second device is an information processing device that acquires information related to the glucose value from the detection device and performs processing . It is a feature.

In this case, it is preferable that the authentication unit automatically authenticates the communication when the communication is started from the state where the communication between the first device and the second device is cut off.

Further, the authentication unit calculates a matching rate between the plurality of authentication data included in the first profile and the authentication data included in the second profile, and when the matching rate is lower than a predetermined communication determination value. It is preferable to disable communication.

Further, the authentication unit establishes communication when the match rate is higher than the communication determination value and is equal to or higher than the reconfirmation determination value, and when the match rate is lower than the reconfirmation determination value, another authentication is performed. It is good to carry out.

Furthermore, the authentication unit is provided in one of the first device and the second device, the one device transmits a profile request command signal to the other device, and the other device is used. , It is preferable that the biometric information profile is generated based on the profile request command and transmitted to the one device.

In addition to the above configuration, the detection device detects information related to the glucose value at predetermined time intervals and transmits information related to the glucose value to the information processing device. It is preferable that the information related to a plurality of glucose values detected within the extraction period longer than the time interval is used as authentication data.

According to the present invention, when the biometric information system communicates between the first device and the second device, the biometric information profile (first profile, second profile) generated based on the biometric information is used to authenticate the communication. I do. Since biometric information is information that is different for each living body and changes from moment to moment, the first and second devices have robust security or confidentiality that are difficult for other different devices to access illegally. .. Therefore, the biometric information system can firmly prevent information from leaking to other devices, and can safely perform information communication between the first device and the second device.

It is explanatory drawing which shows the whole structure of the biological information system which concerns on one Embodiment of this invention. It is a block diagram which shows the structure of the detection device and the information processing device of a biological information system. It is explanatory drawing explaining the procedure at the time of exchanging the detection main body part of a detection device. It is a block diagram which shows the function of the 1st apparatus side control unit of a detection apparatus, and the 2nd apparatus side control unit of an information processing apparatus. It is a flow chart which shows the procedure at the time of resuming communication between a detection device of a biological information system and an information processing device. It is a flowchart which shows the process flow of the authentication process of the authentication part. It is explanatory drawing which shows the biological information system which concerns on other embodiment.

Hereinafter, preferred embodiments of the present invention will be given and will be described in detail with reference to the accompanying drawings.

As shown in FIG. 1, the biological information system 10 according to an embodiment of the present invention has a detection device 12A (first device 12) placed on the body surface of a user (living body) who is a patient, and is a detection device. The biometric information of the user is detected by 12A. The biometric information detected by the detection device 12A is transmitted to the information processing device 14A (second device 14) carried by the user. The information processing apparatus 14A stores the transmitted biometric information and provides the biometric information to the user in an appropriate format.

The biological information handled by the biological information system 10 is not particularly limited, and examples thereof include glucose level, blood glucose level, ketone body, blood pressure, heart rate, body temperature, electrocardiogram, brain wave, respiratory state, and blood oxygen saturation. In this embodiment, the detection device 12A that obtains the glucose value of the user as biological information will be typically described.

That is, the biological information system 10 is configured as a system for CGM (Continuous Glucose Monitoring) in which a sensor is placed on the body surface to detect a user's glucose level at predetermined intervals. The system for CGM monitors fluctuations in glucose levels in the interstitial fluid of the user, so that, for example, in the treatment of diabetes, doctors and the like can take a policy tailored to the condition of each individual patient. Further, the biological information system 10 may be configured to automatically administer a drug such as insulin based on the glucose value detected by the detection device 12A by interlocking with a drug administration device (not shown).

The detection device 12A and the information processing device 14A of the biological information system 10 establish communication of information between each other (form a pairing) and disable communication of information with other devices, whereby the glucose level is reduced. The information is not leaked to other devices. Therefore, the biometric information system 10 includes an authentication unit 16 (see FIG. 4) that authenticates the communication between the detection device 12A and the information processing device 14A.

In the present embodiment, the authentication unit 16 authenticates using the biological information profile 18 including the measurement data of the glucose value which is the biological information. That is, the authentication unit 16 compares the first profile 18A, which is the biometric information profile 18 of the detection device 12A, with the second profile 18B, which is the biometric information profile 18 of the information processing device 14A, and establishes communication or cannot communicate. Is determined.

Specifically, the detection device 12A of the biological information system 10 includes a detection main body 20, a transmitter 22 attached to the detection main body 20 to transmit a glucose value to the outside, and a detection main body 20 and a transmitter 22. It has an indwelling portion 23 to be indwelled on the body surface.

The detection main body 20 has a sensor-side housing 24 that is sufficiently smaller than the transmitter 22. A detection circuit unit 26 (see FIG. 2) is provided inside the sensor-side housing 24. Further, the detection main body unit 20 includes a sensor unit 28 that is connected to the detection circuit unit 26 and projects from the surface of the sensor-side housing 24 facing the patient.

The sensor unit 28 is inserted under the skin of the user. For example, the sensor unit 28 is incorporated in an insertion device (not shown) before insertion, and is punctured and placed in the body from the user's body surface under the operation of the insertion device. After that, the detection device 12A is attached to the sensor-side housing 24 and / or the indwelling portion 23. In the indwelling state, the sensor unit 28 detects information related to glucose contained in blood based on a predetermined measurement principle and sends it to the detection circuit unit 26.

An example of the measurement principle is the enzyme electrode method. In this case, the sensor unit 28 has an electrode that detects electrons generated by reacting glucose contained in the subcutaneous interstitial fluid with an enzyme as a current value. The detection circuit unit 26 detects a signal corresponding to the glucose concentration in the interstitial fluid generated by the sensor unit 28. The measurement principle is not limited to the enzyme electrode method, and may be an affinity sensor using a glucose-binding substance, and the detection method may be an optical signal.

As shown in FIG. 2, the detection circuit unit 26 supplies a measurement voltage or a measurement current to the sensor unit 28. Then, the detection circuit unit 26 receives a signal (current value, voltage value, charge amount, etc.) corresponding to the amount of glucose (concentration) in the measurement sample (interstitial fluid) from the sensor unit 28. The detection circuit unit 26 may have a calculation unit for calculating the glucose value based on the signal detected by the sensor unit 28. The sensor unit 28 and the detection circuit unit 26 are supplied with electric power from the battery 40 owned by the transmitter unit 22. Therefore, the sensor-side housing 24 and the transmitter unit 22 are connected so as to be able to supply electric power and transmit / receive signals via connection terminals (not shown). The detection circuit unit 26 may include a potentiostat, an A / D converter, RAM, ROM, a processor and / or others, if necessary. Further, a filter device for removing noise of the signal received from the sensor unit 28 may also be provided.

The transmitter unit 22 has a transmitter-side housing 30 (see FIG. 1) that covers the detection body unit 20 and is attached to the indwelling unit 23. The transmitter-side housing 30 is provided with an A / D circuit 32 connected to the detection circuit unit 26, a communication module 36 that communicates with an external device, and a first device-side control unit 38 that controls the operation of the detection device 12A. Has been done. Further, the transmitter unit 22 includes a battery 40 (primary battery) that supplies electric power to each electronic component. The battery 40 may be a secondary battery, and may include a charging circuit 42 for charging and a charging connector 44. Further, the transmitter unit 22 may be provided with a power switch 34 for turning on / off the activation of the transmitter unit 22.

The A / D circuit 32 outputs the electric power of the battery 40 to the detection circuit unit 26 and the sensor unit 28, and converts the analog signal received from the detection circuit unit 26 into a digital signal.

The power switch 34 is a physical switch provided in the transmitter-side housing 30, and is manually operated by the user. The transmitter unit 22 is supplied with electric power from the battery 40 to each electronic component when the power switch 34 is turned on. The power switch 34 is not limited to being manually operated, and may be configured to turn on / off the switch by detecting or determining the presence / absence of connection with the sensor unit 28 and the signal waveform from the sensor unit 28. Alternatively, the power switch 34 may be turned on / off by being attached to the skin.

The communication module 36 constructs a wireless communication line with the communication module 56 of the information processing device 14A, and performs information communication including biometric information and device information under the control of the first device side control unit 38. For example, examples of the wireless communication line standard include Bluetooth (registered trademark) and ZigBee (registered trademark).

The first device-side control unit 38 is configured as a computer having a processor 46, a memory 48, and an input / output interface (not shown) connected to an A / D circuit 32, a power switch 34, a communication module 36, and the like. The first device-side control unit 38 controls the detection of the glucose value by the detection main unit 20 by the processor 46 reading and executing a detection program (not shown) stored in the memory 48. For example, the control unit 38 on the first device side detects the glucose value at predetermined timings, stores the detected glucose value in the memory 48, and controls the communication module 36 to convert the glucose value into the information processing device 14A. Send to.

Returning to FIG. 1, the indwelling portion 23 of the detection device 12A is fixed to the body surface of the living body together with the detection main body portion 20 and the transmitter portion 22. For example, the indwelling portion 23 is a base member 23a having an engaging portion for fixing the facing surface of the body surface of the transmitter side housing 30 and a sealing surface to be attached to the body surface. The detection main body 20 is arranged inside the transmitter 22 and the base member 23a in a fixed state, so that the indwelling state is maintained. The base member 23a may have a flexible portion.

On the other hand, as shown in FIG. 2, the information processing apparatus 14A is configured as a dedicated receiver for the system for CGM, and includes a second apparatus side control unit 50 inside the information processing apparatus 14A. The second device-side control unit 50 is configured as an electronic device having a processor 52 and a memory 54 and having an input / output interface (not shown). The information processing device 14A can be applied not only to a dedicated receiver but also to various devices capable of information communication with the detection device 12A. For example, the information processing apparatus 14A can be applied to a portable information terminal such as a smartphone, a PDA, a wearable computer, a laptop computer, a tablet terminal, or the like.

Further, the information processing device 14A includes a communication module 56, an operation unit 58, and a display unit 60 connected to the input / output interface of the second device side control unit 50. Further, the information processing apparatus 14A includes a battery 62 (secondary battery) capable of supplying electric power to each part.

The communication module 56 of the information processing device 14A adopts the same communication standard as the communication module 36 of the detection device 12A, and a wireless communication line can be constructed with the detection device 12A. The operation unit 58 is composed of physical buttons and the like operated by the user. The display unit 60 is composed of a liquid crystal display, an organic EL, or the like, and displays a glucose value or the like in an appropriate format. The operation unit 58 and the display unit 60 may be integrated by a touch panel or the like. The information processing device 14A is connected to another device or cloud by wire or wirelessly to exchange measurement data.

By establishing communication (forming pairing) with the detection device 12A, the information processing device 14A automatically acquires the glucose value from the detection device 12A if it exists around the user. It is possible to do. Then, the second device side control unit 50 stores the acquired glucose value and displays the glucose value on the display unit 60 under the operation of the user or automatically. In addition to displaying the glucose value, the information processing device 14A displays (notifies) error occurrence information when an abnormality occurs in the detection device 12A, the information processing device 14A, or the mutual communication state. ..

When the above detection device 12A and the information processing device 14A start communication from a state in which communication between each other is cut off (stopped), the authentication unit 16 performs authentication using the mutual biometric information profile 18 as described above. conduct. For example, in the biological information system 10, when the detection main body 20 is replaced, the power of the battery 40 of the transmitter 22 is charged, or the power of the battery 62 of the information processing device 14A is exhausted during the monitoring of the glucose level. As described above, when the communication state between the detection device 12A and the information processing device 14A is disconnected and authentication is required again, authentication is performed using the mutual biometric information profile 18. That is, when the communication is cut off (stopped) after the first communication authentication is completed, this authentication is performed when the communication is restored from the communication cutoff state to the communication state.

Next, in order to facilitate understanding of the present invention, an example of a procedure for establishing communication when exchanging the detection main body 20 will be described with reference to FIG.

When the sensor unit 28 is inserted and placed under the skin of the user and used for a certain period of time, the detection main body unit 20 needs to be replaced with a new one because, for example, the sensor sensitivity is lowered. At the time of replacement, the communication between the detection device 12A and the information processing device 14A may be cut off by removing the transmitter unit 22 from the detection main unit 20.

The user removes the old detection body 20 from the body surface and discards it, while indwelling the new detection body 20 on the body surface. At this time, if the power of the battery 40 of the transmitter unit 22 is low, the battery 40 may be charged.

When the detection main body 20 is placed on the body surface, the user electrically connects and assembles the detection main body 20 and the transmitter unit 22, and fixes the transmitter unit 22 to the indwelling unit 23. At this time, by connecting the transmitter unit 22 to the detection main body unit 20, the transmitter unit 22 detects the sensor unit 28, and the first device side control unit 38 of the detection device 12A is restarted.

After that, the detection device 12A and the information processing device 14A automatically perform an authentication process for establishing communication (forming a pairing) from a mutual communication cutoff state. The biometric information system 10 generates a biometric information profile 18 by using the glucose value measurement data detected before the exchange as authentication data in the first authentication process after the activation of the first device side control unit 38. .. That is, the detection device 12A generates the first profile 18A having the glucose value stored in the memory 48 of the first device side control unit 38 and the measurement time. The information processing apparatus 14A generates a second profile 18B having a glucose value and a measurement time stored in the memory 54 of the second apparatus side control unit 50.

The authentication data may be data generated from a signal value actually measured from the sensor unit 28, a signal value after noise removal processed by a filter or the like, and a glucose value converted according to the signal value. The trend information reflecting the fluctuation of glucose is preferably either a signal value after noise processing or a glucose value converted according to the signal value, and particularly preferably a signal value after noise processing. When the signal value after noise processing is used, the amount of calculation processing is reduced.

The information regarding the measurement time added to the trend information is preferably measurement date / time data corresponding to each signal value, may be time data including the measurement year, measurement date, and measurement time, and uses the sensor unit 28. It may be time data calculated based on the elapsed time from the time.

The information processing device 14A receives the first profile 18A from the detection device 12A, and the internal authentication unit 16 compares the first profile 18A and the second profile 18B. The authentication unit 16 establishes communication (forms pairing) between the first profile 18A and the second profile 18B when the first profile 18A and the second profile 18B substantially match. As a result, information communication between the detection device 12A and the information processing device 14A is resumed. By using the data before interrupting the measurement as the authentication information, it is possible to save the trouble of further acquiring other biometric information for pairing on the device side and inputting the authentication ID by the user. Further, by providing the power switch 34 in the detection device 12A, the power consumption of the transmitter unit 22 can be suppressed. It should be noted that the substantially matching includes a case where the authentication data of the profile completely matches and a case where a part of the authentication data does not match.

On the other hand, when the first profile 18A and the second profile 18B do not substantially match, the authentication unit 16 disables communication between each other. This is because if the first profile 18A and the second profile 18B do not substantially match, it cannot be said that the devices communicated with each other before the communication was cut off. As a result, even if the communication between the detection device 12A and the information processing device 14A is temporarily cut off, the biometric information system 10 resumes the communication only in the case of the same device.

In order to realize the above processing, the measurement unit 70, the communication control unit 72, and the first unit are inside the control unit 38 on the first device side of the detection device 12A, as shown in FIG. 4, based on the execution of the inspection program. The profile generation unit 74 is constructed.

The measuring unit 70 controls the drive of the detection main unit 20 (detection circuit unit 26 and sensor unit 28) to detect a signal corresponding to the amount of glucose in the interstitial fluid at an appropriate timing, or to detect the signal value. Calculate the glucose level based on the signal. Further, the measuring unit 70 associates the measured time information with the detected signal value or the calculated glucose value and stores it in the memory 48. The timing of measuring the glucose level in the interstitial fluid is, for example, performed at predetermined time intervals, the period varies according to the user's life rhythm, or the period is lengthened when the user has free time from the meal. It may be designed as appropriate, such as shortening the period before and after eating a meal.

When the glucose value is measured, the communication control unit 72 generates information (glucose value, measurement time, calibration information, etc.) related to the glucose value to be transmitted to the outside (information processing device 14A), and also controls the communication module 36. Then, this information is output to the information processing apparatus 14A. If the pairing of the detection device 12A and the information processing device 14A is formed, the communication control unit 72 will have a link key, thereby transmitting information related to the glucose value only to the designated information processing device 14A. be able to.

Further, the communication control unit 72 transmits the profile information PI including the first profile 18A based on the profile request command CC of the information processing device 14A. The profile information PI transmitted by the detection device 12A includes communication identification information in addition to the first profile 18A.

The first profile generation unit 74 generates the first profile 18A based on the profile request command CC received from the information processing apparatus 14A. For example, the profile request command CC specifies information related to the measurement time when the glucose value was measured in the past, and the first profile generation unit 74 extracts the same measurement time as this measurement time and this measurement. The glucose value associated with the time is read from the memory 48. Then, the read glucose value and the measurement time are summarized according to a predetermined format to obtain the first profile 18A.

On the other hand, the information processing apparatus 14A constructs a functional block for performing authentication processing by the processor 52 executing processing of a control program (not shown) stored in the memory 54. Specifically, a communication control unit 80, a glucose value display processing unit 82, a second profile generation unit 84, a command unit 86, and an authentication unit 16 are constructed inside the second device side control unit 50.

The communication control unit 80 controls the communication module 56 of the information processing device 14A to access the detection device 12A. At the time of establishment of communication (formation of pairing with the detection device 12A), a link key is generated and the communication establishment state with the detection device 12A is continued. Then, when information related to the glucose value (glucose value, measurement time, calibration information, etc.) is received from the detection device 12A via the communication module 56, these information are stored in the memory 54.

The glucose value display processing unit 82 displays the glucose value detected by the detection device 12A on the display unit 60 in an appropriate format. Examples of this display format include displaying the glucose value as a numerical value, or displaying it in a graph or a table together with the glucose value acquired in the past.

The second profile generation unit 84 generates the second profile 18B that authenticates with the detection device 12A. For example, the second profile generation unit 84 generates the second profile 18B based on a predetermined generation method in accordance with the interruption of communication with the detection device 12A. As an example of this generation method, a plurality of glucose values and measurement times may be extracted within a predetermined extraction period (longer than the time interval for detecting the glucose value) acquired before the communication is cut off. The generation method may be changed each time the authentication process is performed.

The command unit 86 generates a profile request command CC and outputs the profile request command CC to the detection device 12A to request the detection device 12A to transmit the first profile 18A. This profile request command CC is generated as request information including, for example, the measurement time of the glucose value by referring to the generation method of the second profile generation unit 84.

When the authentication unit 16 acquires the first profile 18A from the detection device 12A, the authentication unit 16 compares with the generated second profile 18B and matches the authentication data (data in which the glucose value and the measurement time are linked) of both profiles. confirm. For example, when the glucose value is measured at 5-minute intervals and the measurement data at 5-minute intervals are stored in the memories 48 and 54 of the detection device 12A and the information processing device 14A, as shown in FIG. A biometric profile 18 with measurement data within 3 hours is generated. In this case, each of the first and second profiles 18A and 18B has 35 authentication data.

Then, the authentication unit 16 calculates the matching rate between the 35 authentication data of the first profile 18A and the 35 authentication data of the second profile 18B. For example, if 34 authentication data out of 35 authentication data match, the match rate is 97%. Since the first profile 18A and the second profile 18B compare the glucose values at the same measurement time, the agreement rate is basically 100%, but for example, communication failure between the detection device 12A and the information processing device 14A occurs. There is a possibility that the data will be lost on the information processing device 14A side. Therefore, it is advisable to confirm the matching rate and allow the formation of pairing when the rate is equal to or higher than the predetermined rate.

The authentication unit 16 according to the present embodiment is configured to change the processing content according to the matching rate of the authentication data. For example, 98% is set as the reconfirmation determination value, and when the matching rate is 98% or more, communication is immediately established. On the other hand, when the matching rate is 95% or more and lower than 98% (reconfirmation judgment value), the second profile 18B having a longer extraction period is generated again, and the profile request command CC is output for the same extraction period. The first profile 18A is acquired and re-authentication is performed. If the match rate is 90% or more and lower than 95%, for example, a comparison determination is made between the communication identification information transmitted from the detection device 12A and the communication identification information registered in the information processing device 14A (or other authentication). Method) is performed to determine whether or not the mutual communication identification information matches. For example, the communication identification information is an ID unique to the detection device 12A, and the communication identification information on the information processing device 14A side is manually input by the user. Then, the authentication unit 16 sets 90% as the communication determination value, and if the matching rate is lower than 90%, the communication between the detection device 12A and the information processing device 14A is disabled. As a result, it is possible to improve the accuracy of authentication and prevent the communication between the detection device 12A and the information processing device 14A from being inadvertently cut off.

The number of authentication data of the biometric information profile 18 and the extraction period of the measurement time are not limited to the above. As an example, the extraction period is preferably 2 hours or more, more preferably 3 hours or more. As a result, the number of authentication data of the biometric information profile 18 increases, and the security becomes robust.

Further, the extraction period when the biometric information profile 18 is generated is not limited to the one before the communication is cut off (most recent), and a time zone may be specified. For example, by setting the extraction period from 11:00 to 14:00, the glucose value of the user's meal time is reflected. Since the glucose level at this meal time is highly variable and characteristic, security is robust. It should be noted that it is based on the meal intake information directly input by the user to the information processing apparatus 14A, or the rapid increase in glucose level (glucose level increase of 3.0 mg / dL / min or more and / or glucose value of 150 mg / dL or more). May detect food intake. The user may measure the actual blood glucose level and calibrate the glucose level of the interstitial fluid, if necessary, in order to confirm the degree of deterioration of the sensor unit 28 and the presence or absence of an abnormal value. This calibration work is usually not performed during a period in which the sensor signal fluctuates significantly in order to correctly evaluate the sensitivity and reliability of the sensor unit 28. By setting the extraction period when the biological information profile 18 is generated as a period in which the glucose value fluctuates greatly, it is possible to eliminate the influence of the sensor sensitivity correction by the calibration work on the sensor signal and the glucose value fluctuation.

Alternatively, the comparison of the authentication data of the first and second profiles 18A and 18B may be performed by comparing the measurement data at the specified time interval instead of all the measurement data during the extraction period (for example, every 5 minutes). good. As an example, by extracting the glucose value and the measurement time every 20 minutes as authentication data, the authentication unit 16 can verify the glucose value in a wider time zone (for example, 6 to 8 hours). As a result, the characteristics of the glucose value of the user can be easily reflected, the security can be robust even if the number of authentication data is reduced, and the processing time can be shortened.

Further, the authentication by the authentication unit 16 is not limited to the measured glucose value, and information that can be shared by the detection device 12A and the information processing device 14A may be used. Examples of this information include the current value, the voltage value, the frequency, and the like detected when the glucose value is measured.

Furthermore, the comparison method by the authentication unit 16 is not limited to calculating the matching rate of the authentication data. For example, the detection device 12A and the information processing device 14A may generate a graph (image) as the biological information profile 18 from the stored glucose value and the measurement time, and determine the similarity of the images. Further, for example, the authentication unit 16 sets a reference value for comparing the glucose value when the user has hyperglycemia or hypoglycemia, and compares the number of glucose values exceeding the reference value with the number of glucose values falling below the reference value. You may. Alternatively, the authentication unit 16 may compare the total time in which the glucose value exceeds the reference value with the total time in which the glucose value falls below the reference value, using the graph of the biometric information profile 18.

When the detection circuit unit 26 has a memory (not shown), the signal value after noise processing can be stored in the memory of the detection circuit unit 26 as trend information. According to this configuration, when the transmitter unit 22 is replaced without replacing the sensor unit 28, the new transmitter unit 22 reads the information stored in the memory from the communication module 36 of the transmitter unit 22 to the memory. The stored trend information can be read out and used as the first profile 18A.

The biometric information system 10 according to the present embodiment is basically configured as described above, and an example of its processing flow will be described below.

The biological information system 10 exchanges the detection main unit 20 (see also FIG. 3), charges or exchanges the transmitter unit 22, charges the information processing device 14A, and the like while monitoring the glucose level. In the case of, the communication between the detection device 12A and the information processing device 14A is temporarily cut off. Then, when the necessary equipment is replaced or charged (or the battery is replaced), the communication between the detection device 12A and the information processing device 14A is resumed. At this time, the detection device 12A and the information processing device 14A perform the authentication process according to the procedure shown in FIG.

The information processing apparatus 14A first generates the second profile 18B by the second profile generation unit 84 (step S1).

Then, the communication control unit 72 of the detection device 12A and the communication control unit 80 of the information processing device 14A confirm whether or not there is a communicable device in the vicinity of each other, and if the device exists, perform initial access. conduct. For example, when the information processing device 14A makes an initial access to the detection device 12A, a confirmation request signal CS for confirming whether or not the information processing device 14A is the detection device 12A constituting the biometric information system 10 is transmitted (step S2). Then, when the detection device 12A receives the confirmation request signal CS, it transmits a confirmation response signal AS indicating that it constitutes the biometric information system 10 (step S3). As a result, the detection device 12A and the information processing device 14A recognize that the biometric information system 10 is a configurable device. For the initial access, the detection device 12A may send the confirmation request signal CS, and the information processing device 14A may return the confirmation response signal AS.

After that, the information processing device 14A generates a profile request command CC in the command unit 86, and transmits the profile request command CC to the detection device 12A (step S4). When the detection device 12A receives the profile request command CC, the first profile generation unit 74 generates the first profile 18A (step S5) and transmits the profile information PI to the information processing device 14A (step S6).

Then, when the information processing device 14A receives the first profile 18A from the detection device 12A, the authentication unit 16 performs the authentication process of the first profile 18A and the second profile 18B (step S7). In the authentication process of the authentication unit 16, the process flow shown in FIG. 6 is carried out.

That is, at the start of the authentication process, the authentication unit 16 reads out the first profile 18A and the second profile 18B (step S7-1), and calculates the matching rate between the first profile 18A and the second profile 18B (step S7-). 2).

Next, the authentication unit 16 determines whether or not the calculated matching rate is 90% or more (step S7-3). If the matching rate is 90% or more, the process proceeds to step S7-4, and if the matching rate is lower than 90%, the process proceeds to step S7-9.

In step S7-4, the authentication unit 16 determines whether or not the match rate is 95% or more. If the matching rate is 95% or more, the process proceeds to step S7-5, and if the matching rate is lower than 95%, the process proceeds to step S7-7.

In step S7-5, the authentication unit 16 determines whether or not the match rate is 98% or more, and if the match rate is 98% or more, the process proceeds to step S7-6, and the match rate is 98%. If it is lower than, the process proceeds to step S7-8.

In step S7-6, the authentication unit 16 shifts to the process of permitting (authenticating) the establishment of communication with the detection device 12A. At this time, the authentication unit 16 generates a link key for pairing with the detection device 12A.

If the match rate is lower than 95% in step S7-4, the authentication unit 16 possesses the communication identification information of the detection device 12A attached to the first profile 18A and the information processing device 14A in step S7-7. It is compared with the communication identification information to be processed, and a match or a mismatch is determined. If there is a match, the process proceeds to step S7-6, and the establishment of communication with the detection device 12A is permitted. On the other hand, if there is a discrepancy, the process proceeds to step S7-9.

Further, when the matching rate is lower than 98% in step S7-5, the authentication unit 16 instructs the second profile generation unit 84 and the command unit 86 in step S7-8, and the extraction period is different (long). Regeneration of the first and second profiles 18A, 18B is requested. Then, when the profile is regenerated, the process is performed again from step S7-1.

On the other hand, in step S7-9, the information processing device 14A performs an authentication non-authentication process that makes it impossible to establish communication with the detection device 12A. In this non-authentication processing, for example, the information processing device 14A displays a display indicating that the detection device 12A cannot be authenticated on the display unit 60, and stores the communication identification information of the detection device 12A, and the communication identification information is accessed. In that case, it is advisable to perform processing that does not always perform information communication.

Returning to FIG. 5, when the authentication unit 16 authenticates the detection device 12A by the above authentication process, communication with the detection device 12A is established, that is, pairing is formed (step S8). In this case, the information processing device 14A indicates that the authentication has been established to the display unit 60, and transmits the link key to the authenticated detection device 12A. As a result, when the measuring unit 70 measures the glucose value, the detection device 12A transmits the glucose value information only to the information processing device 14A having the link key (that is, the communication is authenticated). If step S7-9 is performed in the authentication process, step S8 is not performed.

As described above, the biological information system 10 according to the present embodiment has the following effects.

The biometric information system 10 has a biometric information profile 18 (first profile 18A, which is generated based on biometric information when the detection device 12A (first device 12) and the information processing device 14A (second device 14) communicate with each other. Communication is authenticated using the second profile 18B). Since biometric information is information that is different for each living body and changes from moment to moment, the first and second devices 12 and 14 have robust security or confidentiality that are difficult for other different devices to access illegally. Will have. Therefore, the biometric information system 10 can firmly prevent information from leaking to other devices, and can safely perform information communication between the first device 12 and the second device 14.

In this case, the biometric information system 10 automatically authenticates the communication at the start of the communication, thereby eliminating the trouble of user operation when constructing the communication line, and the first and second devices 12, The handling of 14 can be facilitated.

Further, the biometric information system 10 calculates the match rate of the biometric information profile 18 and disables communication when it is lower than a predetermined communication determination value (90% in the above embodiment), so that the match rate is low. It is possible to reliably block communication between devices, and it is possible to enhance the safety of information communication. In particular, in the case of a biological information system 10 linked with a therapeutic drug administration device such as insulin, it is possible to further enhance security.

Further, the biometric information system 10 establishes communication when the concordance rate is equal to or higher than the reconfirmation determination value (98% in the above embodiment), whereby a strong pairing is performed between the first device 12 and the second device 14. Can be formed. In addition, by performing another authentication when the match rate is lower than the reconfirmation judgment value, if the authentication of the first profile 18A and the second profile 18B is insufficient, the authentication is reconfirmed to improve the accuracy of the authentication. Can be done.

Furthermore, the biometric information system 10 smoothly generates the target biometric information profile 18 in the other device by transmitting the profile request command CC from one device provided with the authentication unit 16 to the other device. be able to.

Then, in the biological information system 10, the first device 12 is the glucose value detecting device 12A, and the second device 14 is the glucose value information processing device 14A. Therefore, the biological information profile 18 uses the detected glucose value. Can be generated. Since the information on this glucose value is different for each user, it is possible to make the security sufficiently robust.

Further, in addition to the above configuration, the biometric information system 10 can increase the number of data and further enhance the security by using a plurality of glucose values in the extraction period as authentication data. Further, since the authentication data based on the data reflecting the individual difference can be used, the security can be further improved.

The present invention is not limited to the above-described embodiment, and various modifications can be made according to the gist of the invention. For example, although the authentication unit 16 is configured to be provided in the information processing device 14A in the present embodiment, it may be provided in the detection device 12A. In the configuration in which the authentication unit 16 is provided in the detection device 12A, the information processing device 14A once determined to be incapable of communication can be set so as to have no access right, and the device on the information acquisition side accesses the information processing device 14A many times. It is possible to eliminate the leakage of information by doing so.

Further, for example, the biometric information system 10 is not applied to the detection device 12A and the information processing device 14A (receiver), but is applied to various devices (first device 12, second device 14) that handle biometric information. obtain. As an example, as shown in FIG. 7, between an information processing device 14B (first device 12) having glucose level measurement data and a computer 90 (second device 14) including a server installed in a medical facility. A similar configuration can be applied to the configuration for communication. Further, the same configuration can be applied to a configuration in which communication is performed between the information processing device 14B and the cloud on the network.

For example, in the communication between the information processing device 14B and the computer 90, when the application or the like of the information processing device 14B is uploaded from the computer 90, the above authentication process is performed to establish the communication or disable the communication. As a result, the uploaded data can be transmitted only to the target information processing device 14B (computer 90).

10 ... Biometric information system 12 ... 1st device 12A ... Detection device 14 ... 2nd device 14A, 14B ... Information processing device 16 ... Authentication unit 18 ... Biometric information profile 18A ... 1st profile 18B ... 2nd profile 20 ... Detection body 22 ... Transmitter unit 38 ... First device side control unit 50 ... Second device side control unit 90 ... Computer

Claims (6)

The first device that acquires and stores biometric information,
A second device capable of communicating with the first device and acquiring and storing the biometric information from the first device is provided.
The first device generates a first profile, which is a biometric information profile, based on the stored biometric information.
The second device generates a second profile, which is the biometric information profile, based on the stored biometric information.
It has an authentication unit that authenticates the communication between the first device and the second device.
The authentication unit establishes communication when the first profile and the second profile substantially match, and disables communication when the first profile and the second profile do not substantially match. death,
The first device is a detection device that is placed in a living body and detects information related to a glucose level as the biological information.
The second device is a biometric information system characterized by being an information processing device that acquires information related to the glucose value from the detection device and processes the information. In the biometric information system according to claim 1,
The authentication unit is a biometric information system characterized in that when communication is started from a state in which communication between the first device and the second device is cut off, authentication of the communication is automatically performed. In the biometric information system according to claim 1 or 2.
The authentication unit calculates a matching rate between a plurality of authentication data included in the first profile and authentication data included in the second profile, and communicates when the matching rate is lower than a predetermined communication determination value. A biometric information system characterized by disabling. In the biometric information system according to claim 3,
The authentication unit establishes communication when the match rate is equal to or higher than the communication determination value, and performs other authentication when the match rate is lower than the reconfirmation determination value. A biometric information system characterized by this. In the biometric information system according to any one of claims 1 to 4,
The authentication unit is provided in one of the first device and the second device, the one device transmits a profile request command signal to the other device, and the other device is the profile. A biometric information system characterized in that a biometric information profile is generated based on a request command and transmitted to the above-mentioned one device. In the biometric information system according to any one of claims 1 to 5 ,
The detection device detects information related to the glucose value at predetermined time intervals and transmits information related to the glucose value to the information processing device.
The biometric information profile is a biometric information system characterized in that information related to a plurality of glucose values detected within an extraction period longer than the time interval is used as authentication data.

Images