JPH10177553A - Network security system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To exclude the persons who abuse the feature data which were used in the past transactions and to allow only the due person to access these data for improvement of security of a network by rejecting such access requests that are given based on the same data as the feature data which were used in the past. SOLUTION: A user operates a terminal 1 to photograph the images of his own eyes via a camera 5 and obtains the image feature data. The terminal 1 sends these feature data to a network 2 via a communication part 7, and a host 3 receives the feature data via a communication part 11. The received feature data are temporarily stored in a received data buffer 12. A comparison part 15 decides whether the data exactly same as the feature data stored in the buffer 12 are stored in a history storage part 13. If it's decided that the feature data stored in the buffer 12 are equal to the feature data which were used in the past, an access allowing part 17 rejects the accesses which are given to the feature data.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a network security system for securing security when making a decision through a network.

[0002]

2. Description of the Related Art When receiving various paid services established on a network using a terminal connected to a huge network represented by the Internet,
It is preferable that the decision is also made on a network. However, there is insufficient protection against interception and plagiarism of communication information, and a system for making a decision offline has been put to practical use. When making a business transaction decision on a network, a card number, an ID number, a personal identification number, and the like are input from a keyboard. At this time, such personal information may be leaked to malicious network users and may be abused. For this reason, a method of making a decision through a network by encrypting communication information or using various means for verifying the identity is being sought.

[0003]

However, the above-mentioned conventional network security system has the following problems to be solved. For example, as a method for recognizing an individual, a part of an eye image (iris data)
Is known (Japanese Patent Publication No. 5-84166). If this method is adopted, an image of the user's eyes is captured using a camera at the user's terminal, and the feature data is transmitted to the host for identification. The host checks the image of the user's eye registered in advance, and if it matches, recognizes that the request is from the person himself,
Permit access procedures such as approval. However, since the eye image data is also transmitted through the network, the data may be copied and misused by a third party.

[0004]

The present invention employs the following structure to solve the above problems. <Configuration 1> A terminal and a host are connected to each other via a network. The terminal has a camera that captures an image of the user's eye, and communication that transmits characteristic data of the image of the eye to the host via the network. Department and
On the host side, a communication unit that receives the characteristic data transmitted from the terminal, a history storage unit that stores the characteristic data of each user previously received from each terminal and used for the verification,
A feature data dictionary in which feature data of a legitimate user is registered in advance, a comparison unit that performs feature data comparison processing, a matching unit that matches feature data, and an access permission unit that determines whether or not the user can access, The comparison unit on the host side determines whether or not the same feature data as the feature data received through the network exists in the history storage unit. The request is rejected. If there is no identical request, the matching unit performs matching processing with reference to the feature data dictionary, and if there is a corresponding one, the access permission unit accepts the user's access request. A network security system characterized by the following.

<Structure 2> A terminal and a host are connected to each other via a network. A camera for taking an image of a user's eye is provided on the terminal side, and characteristic data of the image of the eye is transmitted to the host via the network. A communication unit for transmitting, and a communication unit for receiving the feature data transmitted from the terminal on the host side, and a history storage for storing the feature data of each user previously received from each terminal and used for verification A feature data dictionary in which feature data of a legitimate user is registered in advance, a comparing unit for comparing feature data, a matching unit for matching feature data, and an access permitting unit for determining whether the user can access. With
The matching unit on the host side performs a matching process with the feature data received through the network with reference to the feature data dictionary, and when there is a corresponding one, the comparing unit determines the same feature data as the feature data received through the network. Is determined in the history storage unit, and if exactly the same feature data exists, the access permission unit rejects the user's access request. Accepts user access requests.

<Configuration 3> A terminal and a host are connected to each other via a network. The terminal has a camera for capturing an image of the user's eyes, and a camera for both eyes recorded on a card owned by the user. A card reading unit that reads the registered feature data obtained from the video, and a communication unit that transmits the feature data and the registered feature data of the image of the eye to the host through a network. A communication unit that receives the feature data, a history storage unit that stores feature data of each user that has been received from each terminal in the past and used for verification, and temporarily stores registered feature data transmitted from the terminal. A registered feature data buffer, a comparing unit for comparing feature data, a matching unit for matching feature data, and an action for determining whether the user can access. And a comparison unit on the host side, determines whether or not the same feature data as the feature data received through the network exists in the history storage unit, and when completely the same feature data exists, The access permitting unit rejects the user's access request, and if there is no identical request, the matching unit refers to the registered feature data buffer and performs matching processing, and the feature data received through the network corresponds to the registered feature data A network security system, wherein the access permission unit accepts a user's access request.

<Structure 4> A terminal and a host are connected to each other via a network. A camera for taking an image of a user's eye and a feature data of the image of the eye are transmitted to the host via the network. A communication unit for transmitting, and a communication unit for receiving the feature data transmitted from the terminal on the host side, and a history storage for storing the feature data of each user previously received from each terminal and used for verification Unit, a registered feature data buffer for temporarily storing the registered feature data transmitted from the terminal, a comparing unit for comparing the feature data, a matching unit for matching the feature data, and determining whether the user can access. The host-side matching unit refers to the registered feature data buffer and matches the feature data received through the network with the feature data. If it makes the packaging process, appropriate,
The comparing unit determines whether or not the same feature data as the feature data received through the network exists in the history storage unit. If the completely same feature data exists, the access permission unit rejects the user's access request. A network security system wherein the access permission unit accepts a user access request when there is no identical one.

<Structure 5> A network security system according to any one of Structures 1 to 4, characterized in that characteristic data is obtained from other physical characteristics of the user instead of an image of the user's eyes.

[0009]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the present invention will be described below using specific examples. <Example 1> FIG. 1 is a block diagram of the system of Example 1. The illustrated system is configured such that a terminal 1 is connected to a host 3 via a network 2 and executes a predetermined transaction. The terminal 1 includes a camera 5 for capturing an image of the user's eye, an image processing unit 6 for processing the image captured by the camera 5 and extracting characteristic data of the image of the eye, and communicating with the host 3. Communication unit 7 is provided. The host 3 includes a communication unit 11 and a reception data buffer 1
2. History storage unit 13, feature data dictionary 14, comparison unit 1.
5, a collation unit 16 and an access permission unit 17 are provided.

The communication section 11 is composed of a communication control device for performing predetermined communication with the terminal 1 through the network 2. The received data buffer 12 temporarily stores the user characteristic data received from the terminal 1. This feature data is used for the following processing such as collation. The history storage unit 13 includes a storage device that stores the characteristic data of each user that has been received from each terminal in the past and used for verification. In the example of the figure, only one terminal is connected to the network 2, but it is assumed that an arbitrary number of terminals are connected and various transactions are executed. It is assumed that all the characteristic data used at that time are stored in the history storage unit 13. The comparison unit 15 compares the previously used feature data stored in the history storage unit 13 with the feature data stored in the reception data buffer 12 and determines whether there is a match. . In this case, the comparison between the two is a judgment as to whether or not they are completely identical.

The feature data dictionary 14 stores feature data extracted from images of eyes of all users who manage transactions and the like by the host 3. The feature data stores the name, ID number, and other various attribute data of the corresponding user and is used for transactions. Collation unit 16
Is a part for performing matching processing for comparing the feature data to be checked stored in the reception data buffer 12 with the feature data stored in the feature data dictionary 14 and selecting the closest one. This matching process is a portion that extracts data having a certain range of difference from each registered feature data, and obtains information for determining whether the user requesting the transaction is the registered user himself or herself. .

Since the feature data is digital data, it is determined, for example, what percentage of the bits match, and if the bits match at a certain ratio or more, processing for identifying the person is performed. The access permission unit 17 includes a collation unit 16
If the user is determined to be the principal based on the collation result, subsequent access is permitted, and a predetermined approval process or the like is started. Further, when it is determined that the user is not the principal, this is a part for notifying the terminal 1 of the fact and performing a process of denying access.

FIG. 2 is an operation flowchart of the first embodiment. Hereinafter, the operation of the system shown in FIG. 1 will be described.
First, the user operates the terminal 1 to photograph an image of his or her own eye with the camera 5 (step S1), and obtains the characteristic data (step S2). The terminal 1 transmits the characteristic data to the network 2 through the communication unit 7, and the host 3 receives the characteristic data by the communication unit 11 (Step S).
3). The received feature data is stored in a reception data buffer 12.
Will be stored temporarily. The comparing unit 15 determines whether or not exactly the same data as the characteristic data stored in the reception data buffer 12 is present in the history storage unit 13 (Step S).
4). This is performed by extracting the feature data stored in the history storage unit 13 one by one and performing a comparison process.

Here, if it is determined in step S5 that there is no identical data, the process proceeds to step S6, where the collating unit 16 starts the collating process. That is, the matching unit 16 performs matching using the feature data dictionary 14 to determine whether the feature data stored in the reception data buffer 12 belongs to a specific person. If it is determined that there is a match, the process proceeds from step S7 to step S8 to permit access.
On the other hand, if it is determined in step S5 that the feature data stored in the reception data buffer is the same as the feature data used in the past, the process proceeds to step S9,
The access permission unit 17 rejects the access.

Each time a user requests access, an image of his or her own eye is transmitted. in this case,
It is impossible to get the same as the past video again. This is not easy for the user to be aware of. For example, pupil movement, eyelid movement, eyelash position, lighting conditions,
This is because, considering shadows and the like due to skin conditions, it is not possible to obtain an image of the eye with all conditions being the same as in the past.
Based on these preconditions, the fact that exactly the same data as the previously used feature data stored in the history storage unit 13 has been input means that a malicious party on the network has stolen another person's data in the past. You can judge that you are trying to use it. The matching process by the matching unit 16 does not need to completely match the registered data because the matching iris data at a level that is at least a certain level or more is allowed. Further, if the access request of the user is rejected by the processing of the comparing unit 15, there is no problem if the image of the eye is taken again and the access request is made.
Therefore, use by the person is not excluded.

The characteristic data stored in the history storage unit 13 does not need to be used for all past transactions. If the data is stored only for a certain period in the past, the purpose can be almost achieved.

<Effect of Specific Example 1> According to the system described above, when an access request is made using the same data as the characteristic data used in the past, the access request is rejected. A person who misuses the feature data thus obtained is excluded, and only the person is permitted to access, so that the security is remarkably improved.

<Specific Example 2> The system of the specific example 2 is not different from the hardware configuration itself shown in FIG. However, the processing procedure on the host 3 side is different. In the specific example 1, the characteristic data stored in the reception data buffer 12 is compared with the characteristic data stored in the history storage unit 13 in advance, and the result is obtained. In this specific example 2, matching with the feature data dictionary 14 is performed first, and comparison with the history storage unit 13 is performed only when it is determined that the user is the identity.
The registered feature data stored in the feature data dictionary 14 is provided with an index or the like so that matching processing can be performed at high speed. If the number of users is relatively small, the matching process can be performed at high speed. On the other hand, since the history storage unit 13 additionally stores the feature data for each transaction, the comparison process may take longer than the matching process using the feature data dictionary 14 in some cases. Example 2 is adapted to such a case.

FIG. 3 shows a system operation flowchart of the second embodiment. Steps S1 to S in FIG.
The operation of the terminal in the third example is exactly the same as that of the first example. That is, an image of the eye is photographed, characteristic data is acquired, and the characteristic data is transmitted from the terminal to the host. Next, step S
In 4, first, the matching unit 16 performs matching with the feature data stored in the reception data buffer 12 with reference to the feature data dictionary 14. Then, in step S5, it is determined whether or not there is a match. If there is a match, the process proceeds to step S6, and the process is transferred to the comparing unit 15. The comparison unit 15
The same feature data as the received feature data is stored in the history storage unit 1.
3 is compared. Next, step S
If it is determined in step S7 that there is no identical one, the process proceeds to step S8, and the access permission unit 17 permits access. On the other hand, if it is determined in step S5 that there is no corresponding result as a result of the matching process, the process proceeds to step S9, and the access is rejected. In step S7,
If it is determined that completely identical feature data exists in the history storage unit 13, the process proceeds to step S9, and access is rejected.

<Effect of Specific Example 2> According to the system described above, since the matching process using the feature data dictionary 14 is performed first, the matching process with the feature data dictionary 14 uses the history storage unit 13. In the case where the processing can be performed more quickly than the comparison processing, and when the access is rejected, the processing time as a whole can be reduced. When the access is permitted, the same processing time is required for both the first and second embodiments.

<Embodiment 3> FIG. 4 is a block diagram of a system according to Embodiment 3. In the terminal 1 of this system, a card reading unit 9 for reading the card 8 is added to the terminal of the system of the specific example 1. The card 8 includes a magnetic card or the like that is carried by the user and records data for the user. Here, the feature data of the image of the person's eye is stored in the card 8. Further, a registered feature data buffer 18 is provided on the side of the host 3 instead of the feature data dictionary 14 of FIG. That is, the host does not have a dictionary file for storing the registered user characteristic patterns. In this specific example, the registered feature data stored in the card 8 is sent to the host 3 via the network 2 and stored in the registered feature data buffer 18, which is used as a dictionary.

FIG. 5 shows a system operation flowchart of the third embodiment. Steps S1 and S2 shown in FIG.
As in the case of the specific example 1 described with reference to FIG. 2, the terminal captures an image of the eye and acquires characteristic data. Further, in this specific example, in step S3, the card 8 shown in FIG. Step S4
, The feature data actually acquired by using the camera 5 and the registered feature data stored in the card 8 are transmitted to the host 3. After step S5, the host 3 performs the comparison and collation processing described above.

That is, first, in step S5, as in the case of the first embodiment, a comparison process is performed to determine whether or not the same data exists in the history storage unit 13. If it is determined in step S6 that there is no identical data, the process proceeds to step S7, where the matching between the feature data stored in the registered feature data buffer 18 and the received feature data is performed. Note that this can be processed quickly, unlike the case where a dictionary storing a large number of registered feature data is used. If it is determined in step S8 that the result of the matching processing is appropriate, the process proceeds to step S9, where the access permission unit 17
Access permission is given. On the other hand, if there is an identical one in step S6, or if it is determined in step S8 that it does not correspond, the process proceeds to step S9, and the access is rejected.

<Effect of Embodiment 3> According to this system, feature data such as iris data is stored in the card 8 in advance.
The user shoots his own video with the camera and sends the card data to the host. In this way, since only the registered feature data stored in the card is targeted for matching, the time required for the matching process is greatly reduced as compared with the case where matching is performed using a dictionary.
Moreover, when there are many users, it is necessary to prepare a large-capacity storage device for the dictionary. However, in this system, the registered feature data buffer 18 is large enough to store one feature data on the host side. It only needs to be present and it is economical. Further, the size of the host-side device can be reduced.

<Embodiment 4> The hardware configuration of the system of Embodiment 4 is the same as that of Embodiment 3, and is as shown in FIG. In the specific example 4, the matching process with the registered feature data is executed before the comparing process by the comparing unit. FIG. 6 is a system operation flowchart according to the fourth embodiment. First, in steps S1, S2, S3, and S4, the feature data of the eye image acquired by the camera and the registered feature data read from the card are transmitted to the host in exactly the same manner as in the third embodiment.

On the host side, first, in step S5, the received registered feature data is matched with the received feature data to be checked. And step S
If it is determined in step S6 that the condition is satisfied, the process proceeds to step S7, and a comparison process is performed with the feature data stored in the history storage unit. In the next step S8, it is determined whether or not there is the same one, and if there is not, the access is permitted in step S9.
Also, if it does not correspond in step S6 and if the same one exists in step S8, the process proceeds to step S10, and the access is rejected.

<Effect of Specific Example 4> In this system, the feature data based on the captured eye image is first matched with the registered feature data, so that a check is made when the card is forged or stolen and used. Can be done quickly. For such a user, the comparison processing referring to the history storage unit 13 is not required, so that the processing efficiency of the system is improved. In addition, the system as described above is not limited to the decision using a network such as the Internet,
Private financial institutions and internal corporate networks,
It can be widely used in POS terminal networks such as convenience stores. Further, the present invention can be widely used in a system using feature data obtained from a user's fingerprint, voiceprint, and other body features instead of an eye image. In addition, if an attempt is made to exclude only strictly the same identity, a fraudulent user knows the system and makes minor modifications to the feature data, thereby permitting fraud. Therefore, in the present invention, it is preferable to process even those with minor modifications such as several bits included in the completely same range.

[Brief description of the drawings]

FIG. 1 is a block diagram of a system according to a specific example 1.

FIG. 2 is an operation flowchart of a specific example 1.

FIG. 3 is a system operation flowchart of a specific example 2;

FIG. 4 is a block diagram of a system according to a third embodiment.

FIG. 5 is a system operation flowchart of a specific example 3;

FIG. 6 is a system operation flowchart of a specific example 4.

[Explanation of symbols]

 Reference Signs List 1 terminal 2 network 3 host 5 camera 6 image processing unit 7, 11 communication unit 12 reception data buffer 13 history storage unit 14 feature data dictionary 15 comparison unit 16 collation unit 17 access permission unit

Claims (5)

[Claims] 1. A camera comprising: a terminal and a host connected to each other via a network;
A communication unit that transmits the feature data of the image of the eye to the host through a network; a communication unit that receives the feature data transmitted from the terminal; A history storage unit for storing feature data of each user used;
A feature data dictionary in which feature data of a legitimate user is registered in advance, a comparison unit that performs feature data comparison processing, a matching unit that matches feature data, and an access permission unit that determines whether or not the user can access, The comparison unit on the host side determines whether or not the same feature data as the feature data received via the network exists in the history storage unit. If exactly the same feature data exists, the access permission unit determines whether the user access The request is rejected, and if there is no exact match, the matching unit performs matching processing with reference to the feature data dictionary, and if there is a corresponding one, the access permission unit accepts the user's access request. A network security system characterized by the following. 2. A terminal and a host connected to each other via a network, wherein a camera for capturing an image of a user's eyes is provided on the terminal side;
A communication unit that transmits the feature data of the image of the eye to the host through a network; a communication unit that receives the feature data transmitted from the terminal; A history storage unit for storing feature data of each user used;
A feature data dictionary in which feature data of a legitimate user is registered in advance, a comparison unit that performs feature data comparison processing, a matching unit that matches feature data, and an access permission unit that determines whether or not the user can access, The matching unit on the host side performs matching processing with the feature data received over the network by referring to the feature data dictionary, and if there is a corresponding one, the comparison unit performs the same feature data as the feature data received over the network. Is determined in the history storage unit, and if exactly the same feature data exists, the access permission unit rejects the user's access request. Accepts user access requests. 3. A terminal, comprising: a terminal and a host connected to each other via a network;
A card reading unit that reads registered feature data obtained from images of both eyes recorded on a card owned by a user, and a communication unit that transmits the feature data and registered feature data of the image of the eyes to the host via a network The host side has a communication unit that receives the feature data transmitted from the terminal, a history storage unit that stores the feature data of each user that was previously received from each terminal and used for verification,
A registered feature data buffer for temporarily holding the registered feature data transmitted from the terminal, a comparing unit for comparing feature data, a matching unit for matching feature data,
An access permission unit for determining whether or not the user can access; a comparison unit on the host side determines whether the same feature data as the feature data received through the network exists in the history storage unit, and determines exactly the same feature data. If there is, the access permitting unit rejects the user's access request, and if there is not exactly the same, the matching unit performs matching processing by referring to the registered feature data buffer, and the feature received through the network. A network security system wherein the access permission unit accepts a user access request when the data corresponds to the registered feature data. 4. A camera, comprising: a terminal and a host connected to each other via a network;
A communication unit that transmits the feature data of the image of the eye to the host through a network; a communication unit that receives the feature data transmitted from the terminal; A history storage unit for storing feature data of each user used;
A registered feature data buffer for temporarily holding the registered feature data transmitted from the terminal, a comparing unit for comparing feature data, a matching unit for matching feature data,
An access permission unit that determines whether the user can access the data. The matching unit on the host side performs matching processing with the feature data received through the network with reference to the registered feature data buffer. It is determined whether or not the same feature data as the feature data received through the network exists in the history storage unit. If exactly the same feature data exists, the access permission unit rejects the user's access request and completes the same. A network security system wherein the access permitting unit accepts a user access request if there is no such request. 5. The network security system according to claim 1, wherein characteristic data is obtained from other physical characteristics of the user instead of the image of the user's eyes.