External authentication circuit board for smartphone

Abstract

To mount an authentication circuit board equipped with an NFC chip on a smartphone, and enable usage as a hardware token of authentication means for multi-factor authentication in order to prevent SIM swap fraud or the like, and to provide an authentication circuit board, in which an NFC card with fingerprint authentication functions can be used by a smartphone as additional fingerprint authentication means for further multi-factor authentication.SOLUTION: Necessary electric power can be supplied by bending a part of an authentication circuit board so as to cover a part of a side face of a smartphone, and by allowing a magnetic flux of an alternating magnetic field, generated at a non-contact IC card reader, to pass through a coil in the authentication circuit board. An NFC chip in the authentication circuit board is recognized by initial response of NFC communication with the non-contact IC card reader, thereby enabling continuous power feed to an NFC card with fingerprint authentication functions so that the fingerprint authentication functions can be used by the smartphone.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to an external authentication circuit board that allows a circuit board equipped with an NFC chip, an IC chip with NFC (Near Field Communication) communication function, to be attached to a smartphone with a built-in contactless IC card reader as a hardware token to prevent SIM swap fraud and the like, and can be used as one of the authentication means in multi-factor authentication, and also allows an NFC card with fingerprint authentication function to be used on the smartphone as an additional fingerprint authentication means in multi-factor authentication. [Background technology]

[0002] In recent years, smartphones have been used in various fields. To prevent unauthorized use of smartphones by others, smartphones are equipped with several identity verification functions. For example, they can be locked to prevent operation after a certain amount of time has passed since the start of operation, so that others cannot use them. It has become commonplace for smartphones to be equipped with biometric authentication functions such as fingerprint authentication and face authentication, which are more secure than password authentication, such as entering a four-digit number to unlock the smartphone. In addition to unlocking the smartphone, these biometric authentication functions are increasingly being used for identity verification when paying for online shopping.

[0003] In recent years, damage caused by cyber attacks has been increasing rapidly. The most notable damages to individuals are phishing scams, and to corporations are ransomware attacks. Phishing scams involve sending emails from spoofed senders, directing victims to fake websites in order to steal personal information such as passwords and credit card information.

[0004] Ransomware is a type of malware that infiltrates into a target's system by using passwords obtained through phishing scams, etc., and then encrypts the data and demands a ransom. Increasingly, the method of intrusion is to exploit vulnerabilities in network devices to infiltrate into internal networks, but even in this case, security is breached by using passwords that have been leaked in the past or by using a brute force attack to find out the password.

[0005] As such, traditional authentication methods using IDs and passwords alone cannot be considered secure against cyber attacks, and there is a growing opinion that we should switch to passwordless authentication, which does not use passwords, or multi-factor authentication, which combines several authentication methods. FIDO2 and Passkey are becoming standardized as passwordless authentication, and biometric authentication functions such as fingerprint and face recognition built into smartphones can be used as authentication devices, so it can be used without purchasing new hardware. Furthermore, in addition to authentication using a smartphone, FIDO2 allows authentication using the biometric authentication function built into the smartphone when connecting the PC and smartphone via Bluetooth (registered trademark).

[0006] One-time passwords used for online banking and other purposes have traditionally been provided by hardware tokens, but these needed to be replaced every few years due to the battery life that powered the internal clock, and it was inconvenient to carry a hardware token to each bank when using online banking on a smartphone. As a result, many authentication functions are now built into smartphones, such as one-time password functions being provided as authentication apps that can be installed on smartphones as software.

[0007] Currently, the switch to passwordless authentication and multi-factor authentication is progressing rapidly as a countermeasure against phishing scams. This has had a deterrent effect against phishing scams. However, a new cyber attack method called SIM swap fraud is beginning to cause damage. In SIM swap fraud, the criminal first obtains the target victim's personal information through phishing scams and prepares a fake driver's license or other document. Then, the criminal impersonates the victim and reports the loss of the smartphone to the mobile phone carrier, and takes over the victim's phone number by having the SIM reissued or other methods.

[0008] By hijacking a phone number, the criminal can receive all SMS and calls addressed to the victim. This allows them to circumvent SMS authentication, which is widely used for two-step authentication. Even for SNS accounts that do not use SMS authentication, the criminal can change the password by resetting the password using SMS authentication. Some people say that SMS authentication is risky for SIM swap scams, so we should switch to authentication apps. The reality is that very few people realize that this type of opinion is a mistaken opinion derived from a naive understanding of SIM swap scams.

[0009] When changing the model of the authentication app installed on a smartphone, it is normal to reinstall the authentication app and authenticate with the registered phone number, etc. This allows the app to be used in the same way as before the model change. In other words, the current situation is that security is built on the premise that "the person who has the phone number is the person himself." The perpetrator of a SIM swap can exploit this to easily reinstall the authentication app on the new device and perform authentication. As can be easily understood from the above explanation, authentication using an authentication app cannot prevent SIM swap fraud.

[0010] Similarly, with biometric authentication such as fingerprint or face recognition built into smartphones, if you change your phone model, you can reinstall the application software and authenticate with the registered phone number, etc., making biometric authentication possible. What is important here is to recognize that it is easy for a criminal who swaps SIMs to register his or her own biometric information on a new device. A criminal who swaps SIMs can successfully authenticate with his or her own biometric information. The scary thing is that biometric authentication built into smartphones cannot prevent SIM swap fraud.

[0011] Therefore, when a SIM swap is performed, most authentication methods such as biometric authentication and authentication apps on smartphones can be invalidated. In other words, the current situation is extremely dangerous. This is because, as mentioned above, security has been built on the assumption that "it is the person who has the phone number" in previous authentication methods. Security cannot be ensured on the assumption that "it is the person who has the phone number." Therefore, it is urgent to correctly understand the lameness of this perception and fundamentally reconstruct security based on the perspective that "a malicious third party can have the phone number" through SIM swap. Unfortunately, a correct understanding of SIM swap is not widely known, and the current situation is that the only measures proposed are measures such as stricter identity verification when reissuing SIMs by mobile phone carriers.

[0012] Furthermore, until now, SIM swap fraud has mostly involved the theft of personal bank deposits and virtual currencies, and was thought to have little to do with security for large corporate networks. In August 2023, the US Department of Homeland Security reportedly released a report summarizing the results of the Cyber ​​Security Review Board's investigation into the threat actor "Lapsus$." According to the report, "Lapsus$" has successfully infiltrated dozens of organizations, including Microsoft in the United States, by making full use of attack methods such as SIM swapping. As can be seen from this report, the SIM swap method is not only being used in "SIM swap fraud" targeting personal assets, but is actually beginning to be used as a "SIM swap attack" to break through multi-factor authentication when infiltrating the networks of large companies. It is necessary to quickly popularize multi-factor authentication methods that can counter SIM swap attacks. Summary of the Invention [Problem to be solved by the invention]

[0013] SIM swap attacks mainly disable the biometric authentication built into smartphones and authentication apps installed on smartphones. If the authentication function is provided by hardware independent of the smartphone, even if the victim's phone number is transferred from the victim's smartphone to another smartphone by SIM swapping, the perpetrator cannot succeed in authentication because the hardware with the authentication function is in the victim's possession. Therefore, SIM swap attacks can be prevented by using authentication using hardware with authentication function, i.e., a hardware token, as one of the multi-factor authentication methods.

[0014] There are several types of hardware tokens. However, there were no convenient ones for multi-factor authentication on smartphones. For the type that uses a one-time password, you need to input the numbers displayed on the hardware token into your smartphone. For the type that connects via USB, you don't need to input numbers, and some of them incorporate biometric authentication functions such as fingerprint authentication. However, you need to connect the smartphone and the hardware token via a wired connection. Smartphones have a connector for wired connection that also serves as a charger. If you use this connector to connect the hardware token via a wired connection, you need to connect the cable or directly every time you authenticate. As you can see from the above explanation, a cable connection is not convenient, and if you connect directly, there is a high possibility that the hardware token or the smartphone will be damaged if the smartphone is dropped. Therefore, a USB-connected hardware token is not practical for multi-factor authentication on smartphones.

[0015] The inventors of the present application considered that it would be best to connect to a hardware token using NFC communication using a contactless IC card reader that is installed in most smartphones. In the case of NFC communication, power can be supplied from the contactless IC card reader of the smartphone. This means that there is no need to install a battery on the hardware token, and there is no need to replace the hardware token every few years, and maintenance such as charging is also unnecessary. Since the communication distance of NFC is shorter than that of Bluetooth, there is less risk of communication interception. In addition, NFC cards with fingerprint authentication function using an extremely thin capacitive fingerprint sensor are commercially available, and fingerprint authentication can also be used as multi-factor authentication.

[0016] When using an NFC-connected hardware token as possession information for authentication, it is sufficient to fix it to a position on the smartphone where NFC communication is possible. Therefore, if it can be used in a state where it is always attached to the smartphone directly or via a smartphone case, there is no problem with usability. The inventor of the present application, for example, used an iPhone (registered trademark) of Apple Inc. in the United States, and verified the position where it can be operated using a commercially available FeliCa (registered trademark) card as an NFC-connected hardware token. Here, in this specification, the surface on which the display screen of the iPhone, i.e., the smartphone, is located is called the "display surface," and the surface opposite to the display screen, i.e., the surface on which the camera lens is located, is called the "display back." With some types of iPhone, it did not work when placed so as to fit within the frame of the iPhone's display back, and only worked when the FeliCa card protruded significantly from the display back of the iPhone. It is difficult to use the smartphone with the FeliCa card always attached when the FeliCa card protrudes significantly from the smartphone.

[0017] In addition, contactless IC card readers installed on smartphones are also used to read NFC cards, make cashless payments, etc. For this reason, it is necessary to ensure that NFC-connected hardware tokens do not interfere with NFC communications when they are used to read other NFC cards, make cashless payments, etc. From this perspective, there is a problem in that the types of NFC chips that can be used as hardware tokens are limited.

[0018] If commercially available NFC cards with fingerprint authentication functions could be connected to smartphones via NFC and used as hardware tokens, authentication would be possible using biometric information as well as possession information. For this reason, it would be preferable to use them in situations where high security is required, such as when transferring money in online banking, even if the authentication operation is time-consuming. There are mainly two types of commercially available NFC cards with fingerprint authentication functions. One is designed for security purposes, and the other is designed for credit cards.

[0019] The former, that is, NFC cards with fingerprint authentication function designed for security, only function as NFC cards if fingerprint authentication is successful, and have the advantage that they are not skimmed if fingerprint authentication is not successful. Also, since they do not have a battery, it is necessary to use a contactless IC card reader that can supply continuous power, but it is possible to add fingerprint authentication function to electronic locks, entrance and exit management systems, attendance management systems, etc. that use NFC cards without modifying the system. However, although we tried to connect NFC by changing various parameters of application software on the iPhone, the built-in contactless IC card reader could not be in a continuous power supply state, and we were unable to connect NFC with NFC cards with fingerprint authentication function designed for security.

[0020] The latter, that is, NFC cards with fingerprint authentication functions made for credit cards, have an NFC chip that can operate even without fingerprint authentication. This not only creates the risk of skimming, but also outputs the same UID (fixed ID number) before and after fingerprint authentication is successful. For this reason, systems must be modified to use electronic locks, access control systems, attendance management systems, etc. that use NFC cards. Furthermore, on the iPhone, it is difficult to confirm that fingerprint authentication has been successful due to iOS restrictions.

[0021] The object of the present invention is to provide an inexpensive multi-factor authentication means as an external authentication circuit board for smartphones that is effective even when SIMs are swapped, and to protect smartphone users from cyber attacks without compromising the usability of the smartphone. Furthermore, in situations where higher security is required, it is possible to use fingerprint authentication using an NFC card with a fingerprint authentication function. [Means for solving the problem]

[0022] According to one aspect of the present invention, the above problem is solved by: An external authentication circuit board for a smartphone that is attached to a smartphone having a built-in non-contact IC card reader and that can operate the smartphone while attached to the smartphone, a first NFC chip having a function of performing NFC communication with the non-contact IC card reader; a first coil that receives power from the non-contact IC card reader; This is achieved by providing an external authentication circuit board for a smartphone, characterized in that a part of the first coil covers a part of the side of the smartphone so that the magnetic flux of the alternating magnetic field generated from the non-contact IC card reader passes through the first coil, thereby enabling the first NFC chip to supply the power necessary for NFC communication with the non-contact IC card reader, thereby enabling the authentication circuit board to be used as one of the multi-factor authentication means on the smartphone.

[0023] According to a preferred embodiment of the present invention, the authentication circuit board has a function of adding authentication by fingerprint authentication in addition to the multi-factor authentication means by the first NFC chip in the authentication circuit board by mounting the authentication circuit board on a smartphone having a built-in non-contact IC card reader and enabling the use of an NFC card with a fingerprint authentication function; The NFC card with fingerprint authentication function is A fingerprint sensor; A fingerprint authentication unit; A memory for storing fingerprint data for matching; A second coil that receives power from the non-contact IC card reader; a fingerprint authentication means including a second NFC chip having a function of performing NFC communication with the non-contact IC card reader; The fingerprint authentication means includes: a fingerprint data reading function that starts reading fingerprint data using the fingerprint sensor when the second coil receives power from the non-contact IC card reader; a fingerprint data matching function for matching the read fingerprint data with the matching fingerprint data stored in the memory by the fingerprint authentication unit; a fingerprint authentication function including a fingerprint authentication notification function that performs the NFC communication from the second NFC chip to the non-contact IC card reader only when the fingerprint authentication unit recognizes the fingerprint as being the same, and notifies the non-contact IC card reader that the fingerprint has been recognized as being the same; the fingerprint sensor, the fingerprint authentication unit, the memory, and the second NFC chip operate only with power received by the second coil; The smartphone is a model in which the application software installed on the smartphone alone cannot continuously supply power from the contactless IC card reader to the second coil, when power is received from the non-contact IC card reader by a first coil in an authentication circuit board, the first NFC chip is recognized in an initial response of the NFC communication, thereby continuously supplying power from the non-contact IC card reader to the second coil; The fingerprint authentication unit completes the fingerprint authentication. If the fingerprint authentication is successful, a notification of the fingerprint authentication is given.

[0024] The external authentication circuit board for smartphones according to the present invention preferably further includes a control circuit for controlling the operation timing of the first NFC chip, and makes the first NFC chip operable when the first coil receives power. This stops the operation of the first NFC chip after a sufficient time has elapsed for use as one of the multi-factor authentication means. This makes it possible to not prevent the contactless IC card reader from communicating with other NFC chips via NFC.

[0025] The external authentication circuit board for smartphones according to the present invention can be constructed of a very thin circuit board, so that it can be mounted in a smartphone case without increasing the thickness. In addition, it can be manufactured by directly utilizing the inexpensive manufacturing process of commercially available NFC stickers, etc., and can be supplied in large quantities at low cost. [Brief description of the drawings]

[0026] [Figure 1] FIG. 2 is an explanatory diagram for explaining the arrangement of a first coil with respect to a smartphone. [Diagram 2] 1 is a cross-sectional view for explaining the relative positions of a smartphone and an NFC card. [Diagram 3] 1 is a cross-sectional view for explaining the relative positions of a smartphone and an NFC card. [Figure 4] FIG. 1 is a block diagram of a fingerprint authentication system related to the present invention. [Diagram 5] 11 is a flowchart for explaining an example of the operation of application software installed on a smartphone to control a fingerprint authentication system related to the present invention on the smartphone side. [Figure 6] 4 is a timing chart of a first example illustrating a state of power supply to a coil. [Figure 7] 10 is a timing chart of a second example for explaining a state of power supply to a coil. [Figure 8] 13 is a timing chart of a third example illustrating a state of power supply to a coil. [Figure 9] FIG. 5 is a cross-sectional view for explaining the fingerprint authentication system of FIG. [Figure 10] FIG. 5 is a cross-sectional view for explaining the fingerprint authentication system of FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS EXAMPLES

[0027] FIG. 1 is a diagram relating to an embodiment of the present invention, and is an explanatory diagram for explaining the arrangement of coils of an authentication circuit board relative to a smartphone and a contactless IC card reader. In the figure, reference symbol 1 is an authentication circuit board. Reference symbol 2 is a first NFC chip having a function of NFC communication, typically a FeliCa (registered trademark) chip. Reference symbol 3 is a control circuit that controls the operation timing of the first NFC chip 2. Reference symbol 4 is a first coil that receives power from the contactless IC card reader of the smartphone. The first coil 4 supplies power to electronic components mounted on the authentication circuit board. Reference symbol 5 is a smartphone. Reference symbol 6 is a contactless IC card reader built into the smartphone 5. Reference symbol CL indicates a camera lens, and the camera lens CL is located on the back of the display of the smartphone 5.

[0028] 2 and 3 are cross-sectional views for explaining the relative positions of the smartphone 5 and the coil. In FIG. 2 and FIG. 3, the same elements as those shown in FIG. 1 are given the same reference numerals. Reference numeral 7 denotes a Felica card commercially available as an authentication circuit board, or a Felica card or the like equipped with a Felica chip as an NFC chip such as a sticker or flexible substrate module having an equivalent function (hereinafter referred to as "FeliCa card, etc. 7"). The inventor of the present application verified the position where NFC communication is possible, that is, the arrangement position of the Felica card, etc. 7, when the Felica card, etc. 7 is applied to an iPhone of Apple Inc., USA. In these Felica cards, etc. 7, power is supplied to the NFC chip equipped in the Felica card, etc. 7 by the built-in first coil 4 receiving wireless power supply from the non-contact IC card reader 6. During the power supply period, the NFC chip always operates. There is no significant difference between the Felica cards, etc. 7 depending on the type, except for the size of the coil.

[0029] When the FeliCa card 7 was used as an authentication circuit board on some iPhones and placed within the frame on the back of the iPhone's display as shown in Figure 2, the FeliCa card 7 did not work. On the other hand, when the FeliCa card 7 was placed near the non-contact IC card reader 6 in a manner that protruded significantly from the frame on the back of the iPhone's display as shown in Figure 3, it did work.

[0030] The inventors of the present application have investigated the reason why the Felica card 7 works when placed in a manner that protrudes largely from the size of the back of the iPhone display as shown in FIG. 3, but does not work when placed so as to fit within the size of the back of the iPhone display as shown in FIG. 2. The inventors of the present application have come to the following conclusion. That is, the alternating magnetic field generated from the non-contact IC card reader 6 built into the iPhone mainly comes out from the side of the iPhone, and unless the Felica card 7 is placed so that the magnetic flux of this alternating magnetic field passes through the first coil 4, sufficient power cannot be supplied to operate the NFC chip. However, when the authentication circuit board 1 has a flat shape, as shown in FIG. 3, the authentication circuit board 1 protrudes largely from the size of the back of the iPhone display.

[0031] In FIG. 1, the authentication circuit board 1 is made of a flexible printed circuit board or the like, partially or entirely. This allows the authentication circuit board 1 to be formed in an arbitrary folded shape. In the embodiment, a part of the authentication circuit board 1 is bent to cover the back and side of the display of the smartphone 5. This allows the magnetic flux of the alternating magnetic field generated by the non-contact IC card reader 6 to pass through the first coil 4. In addition, the authentication circuit board 1 can be installed in a state where it does not protrude significantly from the outer contour of the smartphone 5, and the authentication circuit board 1 can be operated. For testing purposes, the inventor of the present application carefully bent a commercially available FeliCa card into the shape shown in FIG. 1 so that the internal wiring would not be broken, and attached this to the iPhone as shown in FIG. 1 as the authentication circuit board 1. The inventor of the present application used this prototype to confirm its operation. The results confirmed that the power supplied from the contactless IC card reader 6 built into the iPhone activates the FeliCa chip (first NFC chip 2) in the FeliCa card (authentication circuit board 1), enabling NFC communication.

[0032] In the authentication circuit board 1 arranged as shown in FIG. 1, a FeliCa chip was used as the first NFC chip 2 that performs NFC communication with the non-contact IC card reader 6 to confirm its operation. The purpose of this operation check was to confirm that sufficient power could be supplied from the non-contact IC card reader 6 to the first coil 4. As a result, operation was successfully confirmed. From the results of this operation check, the following can be said. In other words, as long as the NFC chip supports wireless communication according to the NFC standard, other NFC chips such as Mifare (registered trademark) can be used and operate without any problems.

[0033] When the authentication circuit board 1 in the form shown in Fig. 1 is attached to a smartphone 5, it is desirable that it can be used without any problems for various purposes using a contactless IC card reader 6 built into the smartphone 5. The NFC standard specifies how to read multiple cards of the same type when there are multiple cards of the same type, such as type A MyFair card, type B Japanese driver's license, and type F FeliCa card. When there are multiple cards of different types, for example, if you try to read a MyFair card and a FeliCa card at the same time with an iPhone contactless IC card reader, the MyFair card will be read and the FeliCa card will not be read.

[0034] Normally, the contactless IC card reader can specify the type of NFC card to be read and perform reading. If the contactless IC card reader is specified to read only Type F, the Felica card can be read even if a MyFair card and a Felica card are held up at the same time. However, the type of card to be read is determined by the application software installed on the smartphone. Therefore, for example, if a MyFair chip is installed on the authentication circuit board 1, it may not be possible to use it properly when reading a Felica card with a smartphone 5 or when using the contactless IC card reader 6 installed on the smartphone 5 for payment as a Mobile Felica.

[0035] If it is absolutely necessary to mount a MiFair chip on the authentication circuit board 1, a control circuit 3 for controlling the operation timing can be added to the authentication circuit board 1. For example, after the first coil 4 receives power from the non-contact IC card reader 6, the first NFC chip 2 is activated for a short time (e.g., 0.3 seconds) sufficient for authentication, and then the operation of the first NFC chip 2 is stopped, thereby enabling reading and writing of another type of NFC chip. The control circuit 3 for executing such control can be realized by a simple microcomputer. It is technically easy to design an NFC chip in which the function of the control circuit 3 is incorporated into the first NFC chip 2. Therefore, when mass-producing the authentication circuit board 1, the operation timing can be controlled within the first NFC chip.

[0036] However, it is not easy to check the operation of all application software, including those used overseas. In addition, when using the non-contact IC card reader 6 for electronic money payments, it is not easy to check the operation of all electronic money reading devices, including those used overseas. Of course, if the authentication circuit board 1 is attached to the smartphone 5 via a smartphone case, it is possible to avoid the problem by removing the smartphone case.

[0037] In the Felica chip, it is possible to use a system code to selectively read and write multiple Felica cards. In this case, a Felica chip to which a unique system code is assigned can be used as the first NFC chip 2. This makes it possible to avoid interfering with the reading and writing of different types of MyFare cards, etc., without using the control circuit 3 that controls the operation timing. In addition, there is no interference with the reading and writing of Felica cards and mobile Felica cards to which a system code for electronic money is assigned.

[0038] The inventors of the present application have verified the operation of a combination of an iPhone made by Apple Inc. of the United States and an NFC card with a fingerprint authentication function designed for security purposes. In this verification, they tried to establish an NFC connection by changing various parameters of application software on the iPhone, but unfortunately, they found that the built-in contactless IC card reader could not be put into a continuous power supply state and could not be used. However, the inventors of the present application have found that when an authentication circuit board 1 of the form shown in FIG. 1 is attached to an iPhone in the configuration shown in FIG. 1, when the contactless IC card reader 6 recognizes the first NFC chip 2 mounted on the authentication circuit board 1, the power supply timing can be controlled according to the parameters of the application software, and it can also be set to a continuous power supply state. In other words, it can be said that an iPhone equipped with the authentication circuit board 1 can be authenticated by fingerprint authentication using an NFC card with a fingerprint authentication function designed for security purposes.

[0039] FIG. 4 is a block diagram of a fingerprint authentication system included in an embodiment of the present invention. The same elements as those shown in FIG. 1 are given the same reference numerals. In the figure, reference numeral 8 is an NFC card with a fingerprint authentication function. Reference numeral 9 is a thin-shaped capacitive fingerprint sensor. Reference numeral 10 is a fingerprint authentication unit. Reference numeral 11 is a memory that stores fingerprint data for matching. Reference numeral 12 is a second coil that receives power from a non-contact IC card reader. Reference numeral 13 is a second NFC chip having a function of NFC communication, typically a Felica chip. Reference numeral 14 is a user's finger whose fingerprint has been registered.

[0040] 4, in the illustrated fingerprint authentication system, the fingerprint authentication means Fp is configured by devices mounted on an NFC card 8 with a fingerprint authentication function, that is, a fingerprint sensor 9, a fingerprint authentication unit 10, a memory 11 that stores fingerprint data for matching, a second coil 12, and a second NFC chip 13. In the fingerprint authentication means Fp, on the condition that power is supplied to the second coil 12 from a non-contact IC card reader 6 built into a smartphone 5, the second coil 12 that receives power supplies power to the fingerprint sensor 9, the fingerprint authentication unit 10, the memory 11, etc., and fingerprint authentication is started. At this time, the fingerprint authentication unit 10 controls the second NFC chip 13 so that the second NFC chip 13 does not operate by a method such as stopping power supply to the second NFC chip 13.

[0041] After fingerprint authentication has started, when a finger 14 whose fingerprint has been registered in advance touches the fingerprint sensor 9, the fingerprint authentication unit 10 compares the fingerprint data of the finger 14 read from the fingerprint sensor 9 with the fingerprint data for comparison stored in the memory 11. If the fingerprints are recognized as identical through this comparison, the second NFC chip 13 is controlled to operate. This enables the non-contact IC card reader 6 to read the IDm2 data from the second NFC chip 13. This state is maintained until power supply to the second coil 12 is stopped.

[0042] On the other hand, before fingerprint authentication or when the fingerprint is not authenticated as the same, the fingerprint authentication unit 10 controls the second NFC chip 13 not to operate, and the state in which the IDm2 data cannot be read is maintained. By the above-mentioned control, the IDm2 data in the second NFC chip 13 can be read by the non-contact IC card reader 6 only when the fingerprint is authenticated as the same. In other words, when the fingerprint is not authenticated as the same, the IDm2 data in the second NFC chip 13 cannot be read by the non-contact IC card reader 6.

[0043] The IDm data is a unique ID number recorded when the Felica chip was manufactured. The IDm data cannot be rewritten. Therefore, there is no other Felica chip with the same IDm data. Only when two conditions are satisfied, namely, first, the IDm2 data of the second NFC chip 13 can be read by the non-contact IC card reader 6, and second, the IDm2 data registered in advance in the smartphone 5 matches the IDm2 data of the second NFC chip 13, the smartphone 5 can recognize that "fingerprint authentication was successful with the NFC card 8 with fingerprint authentication function." In this case, the smartphone 5 performs authentication using two factors, the fingerprint and the Felica IDm data, which provides higher security than simple fingerprint authentication.

[0044] 4, a FeliCa chip is used as an NFC chip that performs NFC communication with the non-contact IC card reader 6. For example, since the non-contact IC card reader 6 supports wireless communication according to the NFC standard, an NFC chip according to another NFC standard, such as MyFair, may be used as long as it is an NFC chip that can perform NFC communication.

[0045] In the fingerprint authentication system shown in Fig. 4, when the fingerprint authentication unit 10 "authenticates that the fingerprint is the same", the method of notifying the non-contact IC card reader 6 is realized by making the IDm2 data readable. As a variation, other data or a combination of IDm and other data may be made readable. Various methods have been proposed and are in practical use as authentication methods for this notification method, and the method may be selected taking into consideration the required level of security.

[0046] The notification method can also be realized by carrying out the following process. That is, when the fingerprint authentication unit 10 authenticates the same fingerprint by simply sending a predetermined command from the non-contact IC card reader 6, the second NFC chip 13 transmits predetermined data, and the non-contact IC card reader 6 receives this data, thereby realizing the notification method. However, even if the fingerprint authentication unit 10 does not authenticate the same fingerprint, it is possible to perform authentication processing as "authenticated as the same fingerprint" by sending the same data as the predetermined data to the non-contact IC card reader 6 by some other means. There is a risk of security being breached by misusing this. It is necessary to be careful of this misuse.

[0047] Regarding this misuse, for example, when another NFC card with fingerprint authentication function on which a different fingerprint is registered is linked to the smartphone 5, in order to prevent the smartphone 5 from operating as if the fingerprint has been authenticated, it is preferable to have unique data on the NFC card with fingerprint authentication function. It is also preferable to adopt a countermeasure such as making it a prerequisite for fingerprint authentication to be successful that this unique data matches the data registered on the smartphone 5.

[0048] In the fingerprint authentication system shown in Fig. 4, the notification method is realized by transmitting the IDm2 data of the second NFC chip 13. As described above, there is no FeliCa chip with the same IDm data, so it is difficult to break security without fingerprint authentication as described above. In other words, it is practically difficult to break security by using some means to make the smartphone 5 recognize that "the fingerprint has been authenticated as the same."

[0049] IDm is used for authentication of general security cards, and no major problems have arisen so far. However, some say that IDm can be forged because its communication method and other details are disclosed. Another problem with general FeliCa cards is that IDm data can be easily read by skimming. In the fingerprint authentication system shown in FIG. 4, the fingerprint authentication unit 10 in the NFC card 8 with fingerprint authentication function controls so that IDm2 data can be read only when the fingerprint authentication unit 10 recognizes the same fingerprint. This makes it impossible to skim the NFC card 8 with fingerprint authentication function unless it is authenticated as the same fingerprint. This can significantly reduce the risk of skimming.

[0050] As a countermeasure against IDm forgery of FeliCa cards, a method of performing MAC authentication using a secret key for FeliCa Lite-S chips and a method of using a secure area for FeliCa Standard chips have been proposed. Such methods can be appropriately applied to the notification method of the fingerprint authentication system shown in Figure 4.

[0051] An example of a control method in which the smartphone 5 controls the electronic circuit built into the NFC card 8 with fingerprint authentication function in the fingerprint authentication system shown in FIG. 4 will be described with reference to the flowchart shown in FIG.

[0052] When the application software installed on the smartphone 5 is started, in the first step S1, a message "Please touch the fingerprint sensor" is displayed on the display of the smartphone 5 in Fig. 4, and a built-in timer is started (S2). In this software, a command to turn on polling is sent to the contactless IC card reader 6 (S3), and the contactless IC card reader 6 starts polling and supplies power to the first coil 4 and the second coil 12.

[0053] The second coil 12 that has received the power supplies power to the fingerprint sensor 9, the fingerprint authentication unit 10, the memory 11, etc. This starts the fingerprint authentication. In the next step S4, the software proceeds to step S5 until the timer has counted down to 10 seconds, and proceeds to step S9 when 10 seconds have elapsed.

[0054] In step S5, this software transmits a command to read the IDm data to the contactless IC card reader 6. The contactless IC card reader 6 responds to this software with information on whether reading the IDm data was successful or unsuccessful. If reading the IDm fails, or if the IDm data read in the next step S6 matches the IDm1 data of the first NFC chip 2, the process returns to step S3 and polling is repeated.

[0055] An important thing to note when polling is repeated is that the fingerprint authentication unit 10 requires a calculation time of 0.5 to 2 seconds to complete fingerprint authentication. During this loop, the second coil 12 must always be in a state where it can receive power continuously. For this reason, it is necessary to set the time for supplying power with one polling command to the non-contact IC card reader 6 to be somewhat longer using the command parameters, etc., so that the second coil 12 can always be in a state where it can receive power continuously.

[0056] In step S6, if the read IDm data does not match the IDm1 data of the first NFC chip 2, the process proceeds to step S7. The IDm2 data of the second NFC chip 13 can be read by the non-contact IC card reader 6 only if the fingerprint authentication unit 10 has authenticated the same fingerprint. Therefore, if the IDm data read in step S7 matches the IDm2 data registered in advance in the smartphone 5, the system in the smartphone 5 is notified that "fingerprint authentication was successful using the NFC card 8 with fingerprint authentication function" (S8).

[0057] On the other hand, if the IDm data does not match in step S7, it is assumed that the contactless IC card reader 6 has read the IDm data of another FeliCa card. As a result, the system in the smartphone 5 is notified that "fingerprint authentication has failed in the NFC card 8 with fingerprint authentication function" (S9). After notifying the system of the result of the fingerprint authentication, polling is turned off (S10) and the application software is terminated.

[0058] When the system in the smartphone 5 recognizes that "fingerprint authentication has been successful using the NFC card 8 with fingerprint authentication function," it unlocks the smartphone 5 or permits connection to a specific network. In other words, according to the fingerprint authentication system shown in Fig. 4, the NFC card 8 with fingerprint authentication function can be used as a fingerprint authentication device in the smartphone 5.

[0059] The inventors of the present application created application software conforming to the flowchart shown in FIG. 5, which is compatible with the iPhone of Apple Inc., and verified its actual operation. Recent iPhones have built-in contactless IC card readers. For the iPhone, application software was created using CoreNFC, an NFC-standard communication framework, to be compatible with the iOS13 and later OS. Then, the operation of NFC-standard cards such as general FeliCa cards and NFC cards with fingerprint authentication functions was verified using the contactless IC card reader built into the iPhone.

[0060] It was confirmed that the IDm and UID of NFC standard cards such as general FeliCa cards and MyFair cards could be read without any problems. When reading, it was possible to set the device to a continuous power supply state using command parameters, etc. However, a problem was found in that continuous power supply was not possible when simply combining an NFC card with fingerprint authentication function with an iPhone, and fingerprint authentication or IDm reading was also not possible.

[0061] FIG. 6 shows the power supply state to the second coil 12 when the application software for iPhone based on the flowchart shown in FIG. 5 is started in the fingerprint authentication system shown in FIG. 4 in a state where the authentication circuit board 1 is removed, that is, in a combination of only the NFC card 8 with fingerprint authentication function and the iPhone (smartphone 5). FIG. 6 is a timing chart of the first example. As a result of examining the above-mentioned problem, that is, the problem that continuous power supply cannot be performed, the inventor of the present application found that the cause is that the period for supplying power once by the polling command is short in the initial setting. In response to this problem, even if an attempt was made to lengthen the period for one polling by changing the timeSlot value of the parameters such as the Polling command of CoreNFC, the actual power supply period did not change. For this reason, as shown in FIG. 6, power is supplied to the second coil 12 for a short time only at a constant cycle. Therefore, it was found that the application software alone cannot be used to set the iPhone in a continuous power supply state so that the fingerprint authentication system shown in FIG. 4 can operate.

[0062] When an NFC-compliant card such as a general FeliCa card or MyFair card is brought close to the contactless IC card reader 6 built into the iPhone, that is, when NFC communication is actually being performed, the change in the timeSlot value is effective, the power supply period is adjustable, and the device can be set to a continuous power supply state. However, when the authentication circuit board 1 is removed from the fingerprint authentication system shown in FIG. 4, the second NFC chip 13 is set to a state in which NFC communication is possible only after fingerprint authentication is successful. And fingerprint authentication is not completed unless the device can be set to a continuous power supply state. Therefore, the change in the timeSlot value cannot be effective, and the device cannot be set to a continuous power supply state.

[0063] With this application software running, when the authentication circuit board 1 is brought close to the built-in contactless IC card reader 6, the first NFC chip 2 is recognized, the change in the timeSlot value becomes effective, and the actual polling period becomes longer, resulting in a state in which continuous power supply is performed. By entering a continuous power supply state, the fingerprint authentication system shown in Figure 4 becomes capable of fingerprint authentication, and it was confirmed that the second NFC chip 13 is in a state in which it can operate after fingerprint authentication is successful.

[0064] However, when the first NFC chip 2 of the authentication circuit board 1, which is brought close to the non-contact IC card reader 6 in order to change the timeSlot value, is a MyFair chip, in the fingerprint authentication system shown in Fig. 4, even after fingerprint authentication is successful, the non-contact IC card reader 6 reads the UID, which is the unique data of the first NFC chip 2, and is unable to read the IDm data of the second NFC chip 13. The inventors of this application believe that this is because the built-in non-contact IC card reader 6 first performs NFC communication with the MyFair chip and then tries to maintain communication with the MyFair chip, preventing communication with the second NFC chip 13.

[0065] To solve this problem, it is necessary to have the non-contact IC card reader 6 in FIG. 4 recognize the NFC chip after power supply to the second coil 12 starts so that the change in the timeSlot value can be made effective and to have the non-contact IC card reader 6 in the continuous power supply state actually read the IDm of the second NFC chip 13.

[0066] Furthermore, in recent years, the contactless IC card reader 6 of a smartphone is required not only to read cards but also to perform NFC communication with various external devices for electronic money payments, etc. When the authentication circuit board 1 included in the fingerprint authentication system shown in Fig. 4 is attached to the smartphone 5, and the contactless IC card reader 6 performs NFC communication with other IC cards using other application software, or when the contactless IC card reader 6 performs NFC communication with various external devices including an external contactless IC card reader, the embodiment of the present invention must be usable without interference.

[0067] In the NFC communication standard, the communication sequence between a contactless IC card reader and an NFC chip consists of, first, an "initial response" that sets up a communication path between the contactless IC card reader and the target NFC chip, and, second, an "active state" that exchanges information according to the application.

[0068] First, when power supply from the contactless IC card reader begins in the initial response, the NFC chip goes into a state of waiting for a communication path setup request (request command) from the contactless IC card reader. Next, the contactless IC card reader sends a request command, and the NFC chip returns a response. This recognizes the NFC chip present in the contactless IC card reader's communication area. The contactless IC card reader then exchanges parameters with the recognized NFC chip, and mutually confirms conditions such as communication speed. After this, it transitions from the initial response to the active state. In the active state, it selects the NFC chip recognized in the initial response, and performs NFC communication by repeating responses from the NFC chip to commands from the contactless IC card reader.

[0069] There are various types of NFC chips, such as Type A for MyFair chips, Type B for Japanese driver's licenses, and Type F for FeliCa chips, and the method of handling the case where multiple NFC chips of the same type are simultaneously present in the initial response is determined for each type. When multiple NFC type chips are present, only the specified type of NFC chip can be recognized by specifying the type of NFC chip to be read. When multiple types are specified, multiple specified types of cards can be recognized. However, there are restrictions not specified in the NFC communication standards, such as when a MyFair card and a FeliCa card are recognized at the same time, the UID of the MyFair card is read with priority over the IDm of the FeliCa card.

[0070] Type A NFC chips such as the MyFair chip (i) read the UIDs of all recognized MyFair chips using a method called the bit collision method when multiple MyFair chips are recognized during the initial response, then (ii) the contactless IC card reader designates one of the read UIDs, and (iii) the MyFair chip with the matching UID responds, selecting one from the multiple MyFair chips. Therefore, MyFair chips that do not respond during the initial response cannot be recognized.

[0071] When multiple Felica chips exist, if IDm is known, IDm is specified and the Felica chip with the matching IDm responds, or when the system codes of multiple Felica chips are different, the system code can be specified to read the IDm data of the corresponding Felica chip even if the chips are overlapped. In order to change the timeSlot value at the time of initial response, when the Felica chip recognized by the non-contact IC card reader 6 is changed to a Felica chip with a different system code from that of the second NFC chip 13 included in the fingerprint authentication system shown in FIG. 4, it was confirmed that the built-in non-contact IC card reader 6 can read the IDm data of the second NFC chip 13 by specifying the system code of the second NFC chip 13, even if the Felica chip recognized in the initial response after the fingerprint authentication is successful is still in an operating state. Since the Felica chip that responded initially has a different system code from that of the second NFC chip 13, its IDm cannot be read, but it was confirmed that it can be continuously powered.

[0072] In the contactless IC card reader 6 built into the iPhone, if any NFC chip is recognized in the initial response, the change in the timeSlot value becomes effective. However, in order to maintain a continuous power supply state and, after fingerprint authentication is successful, to enable the second NFC chip 13 in the NFC card 8 with fingerprint authentication function to notify the contactless IC card reader 6 that fingerprint authentication has been successful, it is necessary to effectively combine the control timing and type of the NFC chip recognized in the initial response and the type of the second NFC chip 13 in the NFC card 8 with fingerprint authentication function.

[0073] FIG. 7 shows the power supply state to the second coil 12 when starting the iPhone application software based on the flowchart shown in FIG. 5 in the fingerprint authentication system shown in FIG. 4. FIG. 7 is a timing chart of the second example. Referring to FIG. 7, when power is supplied to the second coil 12 to enable the change of the timeSlot value, power is also supplied to the first coil 4 in the authentication circuit board 1 at the same time, and the first NFC chip 2 is made operable for a short time by the control circuit 3 a little after the start of this power supply. As a result, an initial response of NFC communication is made between the built-in non-contact IC card reader 6 and the first NFC chip 2 within the initial short polling period, and the change of the timeSlot value becomes effective. Therefore, the actual polling period becomes longer, and the state in which continuous power supply is performed is reached. Even if the operation of the first NFC chip 2 is stopped after the continuous power supply state is reached, the continuous power supply state is maintained for a certain period of time.

[0074] In the second example timing chart of Fig. 7, the first NFC chip 2 is activated a little after the control circuit 3 supplies power to the second coil 12, but they may be activated at the same time. The delay time is provided to delay the order of recognition so that the first NFC chip 2 does not interfere when (i) application software other than this software is started to read the NFC card with the contactless IC card reader 6, or (ii) the contactless IC card reader 6 built into the smartphone 5 performs NFC communication with an external device for electronic money payment, etc.

[0075] Since fingerprint authentication on NFC card 8 with fingerprint authentication function takes at least 0.5 to 1 second, if the first NFC chip 2 is made operational when power is first supplied to it and then stopped in about 0.3 seconds, the first NFC chip 2 and the second NFC chip 13 will not be in an operational state at the same time, and there is no problem with combining different types of NFC chips.

[0076] Furthermore, if the first NFC chip 2 and the second NFC chip 13 are both FeliCa chips, once the FeliCa chip is recognized in the initial response, NFC communication is possible after transition to the active state not only when the system codes of the two FeliCa chips are different, but also when there is only one FeliCa chip operating simultaneously, even if the system code of the first NFC chip 2 is the same as the system code of the second NFC chip 13. Therefore, even if two low-cost FeliCa Lite-S chips are used, operation can be performed without problems as long as the two NFC chips are controlled not to operate simultaneously.

[0077] The FeliCa Lite-S chip has a different system code from the FeliCa Standard chip used for electronic money, etc. Therefore, it will not interfere with NFC communication between the contactless IC card reader 6 built into the smartphone 5 and an external device for electronic money payments, etc.

[0078] FIG. 8 shows the power supply state to the second coil 12 when starting up the iPhone application software based on the flowchart shown in FIG. 5 in the fingerprint authentication system shown in FIG. 4. FIG. 8 is a timing chart of the third example. In the timing chart of the third example, the control circuit 3 shown in FIG. 4 is omitted, and the operation state of the first NFC chip 2 is determined only by the power supply state of the first coil 4. Referring to FIG. 8, when power is supplied to the second coil 12 to enable the change of the timeSlot value, power is also supplied to the first coil 4 in the authentication circuit board 1 at the same time. As a result, the first NFC chip 2 becomes operable and maintains the operable state until the power supply is stopped.

[0079] 8, after the fingerprint authentication is successful, not only the second NFC chip 13 but also the first NFC chip 2 maintain a simultaneously operable state. In this state, it is necessary to select the type of NFC chip that can read IDm2 of the second NFC chip 13 that has not made an initial response.

[0080] As mentioned above, if one Felica chip responds at the time of initial response, multiple Felica chips can be read. To read multiple Felica chips, the corresponding Felica chips will respond by specifying IDm or the system code. However, CoreNFC does not have a way to specify IDm. For this reason, it is necessary to specify the system code and read the corresponding Felica chip. In this case, if multiple system codes are specified, the corresponding Felica chips can be read simultaneously.

[0081] If there are multiple Felica chips with the same system code, they cannot be read simultaneously, so the first NFC chip 2 should have a Felica chip with a system code different from that of the second NFC chip 13. Here, in order not to prevent communication with Felica chips with specific system codes for electronic money payments, etc., on the iPhone, it is better to select a Felica chip with a system code different from those system codes as the first NFC chip 2.

[0082] As described above, according to the embodiment described based on the timing charts shown in Figures 6, 7, and 8, even in a smartphone such as an iPhone in which the original application software alone cannot maintain continuous power supply from the contactless IC card reader 6 built into the smartphone 5, (i) the authentication circuit board 1 is attached to the smartphone 5, (ii) the first NFC chip 2 in the authentication circuit board 1 is recognized in the initial response to maintain continuous power supply, (iii) the fingerprint authentication unit 10 in the NFC card 8 with fingerprint authentication function starts fingerprint authentication upon receiving power supply from the contactless IC card reader 6 built into the smartphone 5, and (iv) if the fingerprint authentication is successful, the contactless IC card reader 6 receives a fingerprint authentication notification from the second NFC chip 13 in the NFC card 8 with fingerprint authentication function, thereby being able to inform the smartphone 5 that "the fingerprint has been authenticated as the same."

[0083] Furthermore, if the first NFC chip 2 recognized in the initial response is a FeliCa chip, by appropriately selecting the system code, it is possible to prevent the embodiment of the present invention from interfering with cases such as (i) when application software other than this application software is launched and an NFC card is read using a contactless IC card reader 6, or (ii) when a contactless IC card reader 6 built into a smartphone 5 performs NFC communication with an external device for the payment of electronic money, etc.

[0084] In Figures 7 and 8, for smartphones such as iPhones, which cannot normally maintain continuous power supply from the built-in contactless IC card reader using application software alone, the continuous power supply state can be achieved using application software by having the NFC chip recognized in the initial response.

[0085] 9 and 10 are cross-sectional views for explaining the fingerprint authentication system of FIG. 4. In FIG. 9 and FIG. 10, the same elements as those shown in FIG. 4 are given the same reference numerals. Reference numeral 15 shown in FIG. 9 and FIG. 10 denotes a smartphone case to be attached to the smartphone 5. Reference numeral 16 denotes an LED. The LED 16 is mounted on the NFC card 8 with fingerprint authentication function. The LED 16 constitutes a display unit that displays the power supply status of the NFC card with fingerprint authentication function, the success or failure of fingerprint authentication, etc.

[0086] 9 and 10, the authentication circuit board 1 can be bent by forming a part or the whole of the board from a flexible printed circuit board or the like as shown in FIG. 1. The authentication circuit board 1 is disposed on the back of the display of the smartphone 5, and the bent part covers a part of the side of the smartphone 5 with the authentication circuit board 1. This allows the magnetic flux of the alternating magnetic field generated from the non-contact IC card reader 6 to pass through the first coil 4 in the authentication circuit board 1. As a result, the authentication circuit board 1 can be operated by wireless power supply from the non-contact IC card reader 6. The authentication circuit board 1 is fixed to the smartphone case 15 with double-sided tape or the like. The authentication circuit board 1 may be directly fixed to the smartphone 5 with double-sided tape or the like, but it is preferable to fix the authentication circuit board 1 so that it can be easily attached and detached from the smartphone 5 in consideration of maintenance such as repairs. In addition, by separating the authentication circuit board 1 from the smartphone 5 by the thickness of the case, the effective area of ​​the first coil 4 through which the alternating magnetic field from the non-contact IC card reader 6 passes can be increased. This allows the authentication circuit board 1 to receive more stable power supply.

[0087] Referring to FIG. 9, FIG. 9 illustrates a state where the NFC card 8 with fingerprint authentication function is accessed near the non-contact IC card reader 6 in a state where the authentication circuit board 1 is attached to the smartphone 5 via the smartphone case 15. When power supply from the non-contact IC card reader 6 starts in this state, the first NFC chip 2 in the authentication circuit board 1 is activated, and the first NFC chip 2 is recognized by the non-contact IC card reader 6 in the initial response. As a result, the NFC card 8 with fingerprint authentication function is continuously supplied with power, and fingerprint authentication is possible. In FIG. 9, the operation was verified by bending a part of a FeliCa card of different sizes as the authentication circuit board 1, a sticker having the same function, or a flexible board module. It was found that the range in which sufficient power can be supplied to the NFC card 8 with fingerprint authentication function to operate is expanded when the area of ​​the first coil 4 located along the back of the display of the smartphone 5 is larger. From this verification result, it was confirmed that the range of the relative position between the non-contact IC card reader 6 and the NFC card 8 with fingerprint authentication function is expanded. In other words, it was confirmed that power can be supplied from the non-contact IC card reader 6 via the first coil 4 over a wider range.

[0088] With reference to FIG. 10, in the illustrated embodiment, a mechanism for holding an NFC card 8 with a fingerprint authentication function is added to a smartphone case 15. By adding this card holding mechanism to the smartphone case 15, the NFC card 8 with a fingerprint authentication function can be stored in the smartphone case 15 when not in use. When fingerprint authentication is performed, the NFC card 8 with a fingerprint authentication function is pulled out from the smartphone case 15 and fingerprint authentication is performed in the state shown in FIG. 10. In both cases of FIG. 9 and FIG. 10, the fingerprint sensor 9 is on the display surface side of the smartphone 5, so that the position of the fingerprint sensor 9 can be actually confirmed with the eyes while touching the fingerprint sensor 9 with a finger 14. This allows fingerprint authentication to be performed reliably. In addition, the LED 16 on the NFC card 8 with a fingerprint authentication function makes it possible to perform fingerprint authentication while checking the power supply status and the success or failure of fingerprint authentication. The usage shown in FIG. 10 can also be achieved by attaching a card holder for holding a commercially available credit card-sized card to the smartphone case 15 of FIG. 9.

[0089] 9 and 10, by using multiple NFC cards 8 with fingerprint authentication function, fingerprint authentication can be performed with separate cards for corporate and personal use, realizing higher security. Also, with one NFC card 8 with fingerprint authentication function, the fingerprint authentication function can be used not only with the smartphone 5 but also with other terminals, improving convenience.

[0090] The fingerprint authentication system illustrated in FIG. 4, FIG. 9, and FIG. 10 can provide the same usability as a fingerprint authentication device built into a smartphone. In addition, security can be ensured against attacks such as SIM swap attacks, in which a criminal registers his / her own biometric information on a new smartphone to which the criminal has transferred his / her phone number, thereby invalidating the face authentication and fingerprint authentication built into the smartphone. That is, a criminal cannot obtain an NFC card 8 with a fingerprint authentication function with a registered fingerprint only by a SIM swap attack. Even if a criminal obtains a new NFC card 8 with a fingerprint authentication function with a fingerprint not registered and registers his / her own fingerprint, the unique data in the NFC card 8 with a fingerprint authentication function is different, so that even if a SIM swap attack is performed, the fingerprint authentication is not recognized as successful. Even if a criminal is able to obtain an NFC card 8 with a fingerprint authentication function with a registered fingerprint, fingerprint authentication will not be successful with the criminal's fingerprint. In this way, it can be said that the fingerprint authentication system of the present invention is a fingerprint authentication device that is effective against SIM swap attacks. The fingerprint authentication system of the present invention can provide higher security than a fingerprint authentication device built into a smartphone.

[0091] In addition, the authentication circuit board 1 shown in Figs. 1, 4, 9, and 10 is attached to the smartphone 5 so that a continuous power supply state can be realized even in a model such as an iPhone in which the application software alone cannot continuously supply power from the built-in contactless IC card reader. In addition, when the authentication circuit board 1 is attached, the first NFC chip 2 of the authentication circuit board 1 can be accessed from the smartphone 5 at any time to check the unique number such as IDm1, so that it can be used as one of multi-factor authentication. Since the authentication by the authentication circuit board 1 is not fingerprint authentication, if the authentication circuit board 1 is stolen, it is invalid against SIM swap attacks. However, if the authentication circuit board 1 is not stolen, it is an effective authentication device against SIM swap attacks. Since there is no need to touch the fingerprint sensor, it is possible to perform smooth operations such as authentication by the NFC card 8 with fingerprint authentication function for large remittances in online banking, and login and balance inquiries in online banking can be performed using the authentication by the authentication circuit board 1.

[0092] As described above, since the authentication circuit board 1 does not have a fingerprint authentication function, if the authentication circuit board 1 is stolen, it is basically ineffective against SIM swap attacks. However, by adding an electronic circuit for an NFC card 8 with a fingerprint authentication function to the authentication circuit board 1 and configuring it as a single circuit board, it becomes possible to prevent SIM swap attacks even in the case of theft. When configuring it as a single circuit board, it is a design item that is easy for a person skilled in the art to design a circuit board in which a single coil serves as both the first coil 4 and the second coil 12. [Explanation of symbols]

[0093] 1 Authentication circuit board 2 The first NFC chip 3 Control Circuit 4 First coil 5. Smartphones 6. Contactless IC card reader 7 FeliCa card etc. 8. NFC cards with fingerprint authentication function Fp Fingerprint authentication method 9 Fingerprint Sensor 10 Fingerprint authentication section 11. Memory 12 Second coil 13 The second NFC chip 15 Smartphone cases 16 LED

Claims

1. An external authentication circuit board for a smartphone that is attached to a smartphone having a built-in non-contact IC card reader and that can operate the smartphone while attached to the smartphone, a first NFC chip having a function of performing NFC communication with the non-contact IC card reader; a first coil that receives power from the non-contact IC card reader; An external authentication circuit board for a smartphone, characterized in that a portion of the first coil covers a portion of the side of the smartphone so that the magnetic flux of the alternating magnetic field generated from the non-contact IC card reader passes through the first coil, thereby enabling the first NFC chip to supply the power necessary for NFC communication with the non-contact IC card reader, thereby enabling the authentication circuit board to be used as one of the multi-factor authentication means on the smartphone.

2. A control circuit for controlling an operation timing of the first NFC chip is further provided.

2. The external authentication circuit board for a smartphone according to claim 1, wherein the control circuit enables the first NFC chip when the first coil receives power, and stops operation of the first NFC chip after a sufficient amount of time has elapsed for use as one of the multi-factor authentication means, thereby not preventing the contactless IC card reader from communicating with other NFC chips via NFC.

3. 2. The external authentication circuit board for a smartphone according to claim 1, wherein the first NFC chip is a FeliCa chip.

4. 2. The external authentication circuit board for a smartphone according to claim 1, wherein the authentication circuit board is attached to the smartphone via a smartphone case.

5. 3. The external authentication circuit board for a smartphone according to claim 2, wherein the authentication circuit board is attached to the smartphone via a smartphone case.

6. 4. The external authentication circuit board for a smartphone according to claim 3, wherein the authentication circuit board is attached to the smartphone via a smartphone case.

7. the authentication circuit board has a function of adding authentication by fingerprint authentication in addition to the multi-factor authentication means by enabling an NFC card with a fingerprint authentication function to be used on the smartphone; The NFC card with fingerprint authentication function includes: A fingerprint sensor; A fingerprint authentication unit; A memory for storing fingerprint data for matching; A second coil that receives power from the non-contact IC card reader; a fingerprint authentication means including a second NFC chip having a function of performing NFC communication with the non-contact IC card reader; The fingerprint authentication means includes: a fingerprint data reading function that starts reading fingerprint data using the fingerprint sensor when the second coil receives power from the non-contact IC card reader; a fingerprint data matching function for matching the read fingerprint data with the matching fingerprint data stored in the memory by the fingerprint authentication unit; a fingerprint authentication notification function that performs the NFC communication from the second NFC chip to the non-contact IC card reader only when the fingerprint authentication unit recognizes the fingerprint as being the same, and notifies the non-contact IC card reader that the fingerprint has been recognized as being the same; the fingerprint sensor, the fingerprint authentication unit, the memory, and the second NFC chip operate only with power received by the second coil; The smartphone is a model in which continuous power supply from the non-contact IC card reader to the second coil cannot be performed by application software installed thereon alone, when the first coil receives power from the non-contact IC card reader, the first NFC chip is recognized in an initial response of the NFC communication, thereby continuously supplying power from the non-contact IC card reader to the second coil; The fingerprint authentication unit completes the fingerprint authentication.

7. The external authentication circuit board for a smart phone according to claim 1, wherein when the fingerprint authentication is successful, a notification of the fingerprint authentication is given.

8. The external authentication circuit board for a smartphone according to claim 7, characterized in that the fingerprint authentication notification, which notifies that fingerprint authentication has been successful when the fingerprint authentication unit recognizes the same fingerprint, is transmitted to the non-contact IC card reader via NFC communication using data using unique data stored in the second NFC chip.

9. The external authentication circuit board for a smartphone according to claim 8, characterized in that when the smartphone compares data using the unique data transmitted from the second NFC chip to the contactless IC card reader via NFC communication with data pre-registered in the smartphone and the data matches, the smartphone recognizes that the fingerprint authentication unit has authenticated the fingerprint as the same.

10. 8. The external authentication circuit board for a smartphone according to claim 7, wherein the fingerprint authentication function is implemented on the same board as the authentication circuit board.

Images