Portable electronic device, IC card, authentication system and authentication method

Abstract

To provide a portable electronic device, an IC card, an authentication system, and an authentication method that enable multi-factor authentication at low cost.SOLUTION: A portable electronic device according to an embodiment comprises a terminal, an interface for performing radio communication with an information terminal using power supplied through the terminal, and a processor for obtaining biometric authentication results from the information terminal by transmitting biometric authentication request signals to the information terminal using the interface, and transmitting responses corresponding to the biometric authentication results to an external device using the terminal.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] FIELD Embodiments of the present invention relate to a portable electronic device, an IC card, an authentication system, and an authentication method. [Background technology]

[0002] There is a risk that PIN numbers on IC cards may be leaked, and if this becomes apparent, it could lead to the leakage of personally identifiable information or personal information itself. If a PIN number is leaked, the IC card can be used by someone other than the cardholder, which could escalate into a problem that involves not only the cardholder, but also the card issuer, affiliated store management company, and brand. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2023-183659 Summary of the Invention [Problem to be solved by the invention]

[0004] Multi-factor authentication is one solution to the above problem. For example, IC cards equipped with biometric authentication functions can identify transactions made by the person in question with a very high degree of certainty because they use biometric information that only the person in question possesses. However, this method requires the IC card to be equipped with a biometric authentication sensor, which increases the costs of manufacturing and distributing the card.

[0005] The embodiments of the present invention have been made in view of the above circumstances, and provide a portable electronic device, an IC card, an authentication system, and an authentication method that are capable of multi-factor authentication at low cost. [Means for solving the problem]

[0006] A portable electronic device according to one embodiment includes a terminal, an interface for wireless communication with an information terminal using power supplied through the terminal, and a processor for acquiring a biometric authentication result from the information terminal by transmitting a biometric authentication request signal to the information terminal using the interface, and transmitting a response corresponding to the biometric authentication result to an external device using the terminal. [Brief explanation of the drawings]

[0007] [Figure 1] FIG. 1 is a schematic diagram illustrating an example of the configuration of an authentication system according to an embodiment. [Figure 2] FIG. 2 is a block diagram showing an example of the configuration of the IC card processing device and the card reader / writer according to the embodiment. [Figure 3] FIG. 3 is a block diagram showing an example of the configuration of an IC card according to the embodiment. [Figure 4] FIG. 4 is a block diagram illustrating an example of an information terminal according to the embodiment. [Figure 5] FIG. 5 is a sequence diagram illustrating an example of authentication processing according to the embodiment. [Figure 6] FIG. 6 is a sequence diagram illustrating an example of authentication processing according to the embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0008] The portable electronic device, the IC card, the authentication system and the authentication method will be described in detail below with reference to the accompanying drawings. In the following description of each embodiment and modification, the same reference numerals are used. The parts have substantially the same functions, and the description of the overlapping parts will be omitted as appropriate.

[0009] FIG. 1 is a schematic diagram illustrating an example of the configuration of an authentication system according to an embodiment.

[0010] The authentication system includes an IC card processing device 1, a card reader / writer 2, an IC card 3 as a portable electronic device, and an information terminal 4 that communicates wirelessly with the IC card 3. For example, in Fig. 1, the card reader / writer 2 is an external card reader / writer connected to the IC card processing device 1 by wire, but is not limited to this and may be installed inside the IC card processing device 1.

[0011] In this embodiment, we will explain the case where a contact IC card having a contact terminal receives power supply from the IC card processing device 1 via a contact IC card reader / writer and communicates information with the IC card processing device 1, but this is not limited to contact type.For example, a contactless IC card reader / writer may be used to obtain power supply from the antenna coil of a combination or contactless IC card and communicate information with the IC card processing device 1, or a contact IC card reader / writer may be used to obtain power supply from the contact terminal of a combination IC card and communicate information with the IC card processing device 1.

[0012] The card reader / writer 2 may be connected to the IC card processing device 1 using wireless communication, and may be configured to supply power to the contact-type IC card from an internal battery.

[0013] FIG. 2 is a block diagram showing an example of the configuration of the IC card processing device and the card reader / writer according to the embodiment.

[0014] The IC card processing device 1 is an information processing device that is installed in the payment area of a store, communicates with the IC card 3 when a user inserts the IC card 3 into a card reader / writer 2, transmits information to the IC card 3 via the card reader / writer 2, and receives information from the IC card 3. The IC card processing device 1 includes a processor 11, a ROM (Read-Only Memory) 12, a RAM (Random-Access Memory) 13, an auxiliary storage unit 14, an input unit 15, an output unit 16, and a communication unit 17. The IC card processing device 1 is an example of an external device.

[0015] The processor 11 is typically a central processing unit (CPU) and / or a graphics processing unit (GPU), but may also be a microcomputer, a field programmable gate array (FPGA), a digital signal processor (DSP), or the like.

[0016] The processor 11 can realize various functions of the IC card processing device 1 by executing programs such as system software, application software, or firmware stored in at least one of the ROM 12 and the auxiliary storage unit 14. The IC card processing device 1 may combine two or more processors 11 and execute various processes through cooperation between these two or more processors.

[0017] By executing the above program, the processor 11 has the function of transmitting various signals to the IC card 3 via the card reader / writer 2, acquiring various signals received from the IC card 3, and executing processing based on requests from the IC card 3.

[0018] For example, processor 11 transmits a payment processing request signal generated based on a payment processing request command input to input unit 15 to card reader / writer 2. Processor 11 also receives a PIN code request signal from IC card 3 via card reader / writer 2, and causes output unit 16 to display a screen indicating that PIN code entry is required based on the PIN code request signal.

[0019] The processor 11 transmits the four-digit PIN code input using the input unit 15 to the IC card 3. The processor 11 also receives identification information including information necessary for payment (payment information) from the IC card 3, and completes the payment process using the identification information. Note that the payment process uses a commonly used method, so a description thereof will be omitted here.

[0020] ROM 12 is a read-only nonvolatile memory that corresponds to the main memory of processor 11, which corresponds to a computer. ROM 12 stores programs such as an operating system or application software. ROM 12 also stores data used by processor 11 when performing various processes.

[0021] The RAM 13 is a volatile memory that corresponds to the main memory of the processor 11, which corresponds to a computer. The RAM 13 is used as a so-called work area for storing data that is temporarily used when the processor 11 performs various processes.

[0022] The auxiliary storage unit 14 corresponds to an auxiliary storage portion of the processor 11, which corresponds to a computer. The auxiliary storage unit 14 is, for example, an EEPROM (registered trademark) (electric erasable programmable read-only memory), an HDD (hard disk drive), or an SSD (solid state drive). The auxiliary storage unit 14 may store some or all of the above programs. The auxiliary storage unit 14 also stores data used by the processor 11 in performing various processes, data generated by the various processes performed by the processor 11, various setting values, etc.

[0023] The ROM 12 and the auxiliary storage unit 14 are non-transitory computer-readable storage media, and the IC card processing device 1 may be transferred with the above program stored therein, or may be transferred without the above program stored therein. In the latter case, the IC card processing device 1 reads the above program stored in a removable storage medium such as an optical disk or semiconductor memory, and writes the read program to the auxiliary storage unit 14, etc. The IC card processing device 1 downloads the above program via a network, etc., and writes the downloaded program to the auxiliary storage unit 14, etc.

[0024] The input unit 15 may include a user interface such as a mouse, keyboard, or numeric keypad for receiving input commands from the operator or administrator of the IC card processing device 1, and various sensors such as a microphone and a touch panel.

[0025] The output unit 16 is, for example, a device that displays various information under the control of the processor 11, and includes a monitor or the like. The output unit 16 may also include an audio output means, such as a speaker, that audibly supplies information to the operator and manager of the IC card processing device 1. The input unit 15 and the output unit 16 may be integrally formed.

[0026] The communication unit 17 receives information from the IC card 3, transmits the received information to the components within the IC card processing device 1, and transmits information received from the components within the IC card processing device 1 to the IC card. The communication unit 17 may also transmit and receive information from outside via a network such as the Internet.

[0027] The card reader / writer 2 is an interface device for transmitting and receiving data to and from the IC card 3. The card reader / writer 2 includes an antenna, contact terminals, a communication control unit, etc., and communicates by physically and electrically connecting to the contact-type IC card 3 via the contact terminals. If the IC card 3 is a contactless type, the card reader / writer 2 communicates by contactlessly connecting to the combination or contactless IC card 3 via the antenna. If the IC card 3 is a combination type, the card reader / writer 2 communicates by physically and electrically connecting to the combination IC card 3 via the contact terminals.

[0028] 3 is a block diagram showing an example of the configuration of an IC card according to an embodiment. The IC card 3 in this embodiment is a contact-type IC card, and includes a processor 31, a ROM 32, a RAM 33, a non-volatile memory 34, a coprocessor 35, an interface 36, and a contact terminal 37.

[0029] The processor 31 is typically a central processing unit (CPU) and / or a graphics processing unit (GPU), but may also be a microcomputer, a field programmable gate array (FPGA), a digital signal processor (DSP), or the like.

[0030] The processor 31 executes programs such as system software, application software, or firmware stored in at least one of the ROM 32 and the non-volatile memory 34, thereby realizing various functions of the IC card 3. The IC card 3 may combine two or more processors 31 and execute various processes through cooperation of these two or more processors.

[0031] By executing the above program, the processor 31 has the functions of causing various signals to be sent from the IC card processing device 1 via the card reader / writer 2, acquiring various signals received from the IC card processing device 1, causing various signals to be sent from the information terminal 4, acquiring various signals received from the information terminal 4, and executing processing based on requests from the IC card processing device 1 and the information terminal 4.

[0032] ROM 32 is a read-only nonvolatile memory that corresponds to the main memory of processor 31, which corresponds to a computer. ROM 32 stores programs such as an operating system or application software. ROM 32 also stores data used by processor 31 when performing various processes.

[0033] The RAM 33 is a volatile memory that corresponds to the main memory of the processor 31, which corresponds to a computer. The RAM 33 is used as a so-called work area for storing data that is temporarily used when the processor 31 performs various processes.

[0034] The nonvolatile memory 34 corresponds to an auxiliary storage portion of the processor 31. The nonvolatile memory 34 is, for example, an EEPROM (registered trademark). The nonvolatile memory 34 may store part or all of the above programs. The nonvolatile memory 34 also stores data used by the processor 31 when performing various processes, data generated by the various processes performed by the processor 31, various setting values, etc.

[0035] The nonvolatile memory 34 stores pairing information through a pairing process with the information terminal 4. For example, the pairing information stored in the nonvolatile memory 34 includes a unique identifier of the information terminal 4, the pairing time, the number of pairing attempts, etc. A pairing code of six digits or any number of digits is also pre-stored in the nonvolatile memory 34. The pairing code may be set in advance by the IC card owner when the IC card 3 is issued, or may be set by the IC card processing device 1 when the IC card 3 is initially used.

[0036] The nonvolatile memory 34 also stores a PIN code (registered personal identification information) of four or any number of digits. The PIN code is set in advance by the IC card owner when the IC card 3 is issued, for example.

[0037] Furthermore, the nonvolatile memory 34 stores the biometric authentication result transmitted from the information terminal 4. The biometric authentication result is sufficient as long as it includes at least information indicating approval or denial, and does not include biometric information stored in the information terminal 4, which will be described later. When storing the acquired biometric authentication result, the nonvolatile memory 34 may overwrite the previous biometric authentication result, or may hold a history of at least two or more biometric authentication results.

[0038] The biometric authentication result may be stored in the RAM 33. In this case, when the IC card 3 is removed from the card reader / writer 2 and the supply of power from the contact terminal 37 is stopped, the biometric authentication result stored in the RAM 33 is lost.

[0039] The ROM 32 and the nonvolatile memory 34 are non-transitory computer-readable storage media, and the IC card 3 may be transferred with the above program stored therein, or may be transferred without the program stored therein. In the latter case, the IC card 3 reads the above program stored in a removable storage medium such as an optical disk or semiconductor memory, or downloads the program via a network or the like, and writes the read or downloaded program to the nonvolatile memory 34 of the IC card 3. The ROM 32, RAM 33, and nonvolatile memory 34 are examples of memory.

[0040] The coprocessor 35 receives an operation command from the processor 31 and outputs the operation result calculated based on the operation command to the processor 31 .

[0041] The interface 36 performs wireless communication with the information terminal 4 using a communication method that complies with a predetermined communication standard. For example, the interface 36 performs wireless communication with the information terminal 4 using Bluetooth (registered trademark) as the communication standard. However, the communication standard is not limited to this, and Zigbee (registered trademark), NFC (Near Field Communication), etc. may also be used.

[0042] For example, the interface 36 uses Bluetooth (registered trademark) to receive information from the information terminal 4, transmit the received information to the configuration within the IC card 3, and transmit the information received from the configuration within the IC card 3 to the IC card processing device 1.

[0043] When the IC card 3 is inserted into the card reader / writer 2, the contact terminal 37 comes into contact with a terminal of the card reader / writer 2, thereby receiving power from the IC card processing device 1 or the card reader / writer 2. The contact terminal 37 also receives information from the IC card processing device 1 via the card reader / writer 2, transmits the received information to the configuration within the IC card 3, and transmits information received from the configuration within the IC card 3 to the IC card processing device 1. The interface 36 wirelessly communicates with the information terminal 4 using Bluetooth (registered trademark) using power supplied via the contact terminal 37. The contact terminal 37 is an example of a terminal.

[0044] When the IC card 3 is inserted into the card reader / writer 2 and power is supplied from the IC card processing device 1 or the card reader / writer 2 via the contact terminal 37, the processor 31 acquires a payment processing request signal from the IC card processing device 1.

[0045] Furthermore, the processor 31 receives a pairing request signal from the information terminal 4 via the interface 36 using power supplied via the contact terminal 37. When the processor 31 receives the pairing request signal from the information terminal 4, it transmits a pairing response signal to the information terminal 4.

[0046] After transmitting the pairing response signal, the processor 31 transitions to pairing mode and starts pairing authentication processing. The processor 31 acquires the pairing code stored in the nonvolatile memory 34 and determines whether the pairing code matches the pairing code transmitted from the information terminal 4. If the processor 31 determines that the pairing code acquired from the nonvolatile memory 34 matches the pairing code transmitted from the information terminal 4, it transmits a pairing authentication processing completion notification to the information terminal 4 and terminates the pairing authentication processing.

[0047] The processor 31 stores pairing information including the unique identifier of the information terminal 4 in the nonvolatile memory 34. The processor 31 identifies the paired information terminal 4 based on the pairing information stored in the nonvolatile memory 34 and performs wireless communication with the paired information terminal 4. For example, when an information terminal 4 that has once gone out of wireless communication range reconnects to the IC card 3, the processor 31 uses the unique identifier included in the pairing information to reconnect to the information terminal 4 with the matching unique identifier. As a result, once pairing is performed, as long as the IC card 3 and the information terminal 4 are within communication range, wireless communication can be performed without authentication.

[0048] The processor 31 also transmits a PIN code request signal to the IC card processing device 1 via the contact terminal 37. The processor 31 acquires the PIN code input from the IC card processing device 1 via the contact terminal 37.

[0049] The processor 31 determines whether the acquired PIN code matches the PIN code stored in the nonvolatile memory 34. The processor 31 is triggered by the transmission of the PIN code from the IC card processing device 1 to perform PIN authentication.

[0050] Furthermore, when the processor 31 determines that the acquired PIN code does not match the PIN code stored in the nonvolatile memory 34, it outputs a denial as the PIN code authentication result.

[0051] The processor 31 stores the PIN authentication result as a PIN authentication history in the RAM 33. When the IC card 3 is removed from the card reader / writer 2 and the supply of power from the contact terminal 37 is stopped, the biometric authentication result stored in the RAM 33 is lost. In other words, every time the payment process using the IC card 3 is completed and the IC card 3 is removed from the card reader / writer 2, the PIN authentication history is lost.

[0052] The processor 31 transmits a biometric authentication request signal to the information terminal 4 using the interface 36. The processor 31 also acquires a biometric authentication result from the information terminal 4 using the interface 36. The processor 31 stores the acquired biometric authentication result in the nonvolatile memory 34 or the RAM 33.

[0053] The processor 31 uses the contact terminal 37 to send a response corresponding to the biometric authentication result to the IC card processing device 1. For example, if the information included in the biometric authentication result is approval, the processor 31 sends identification information including payment information to the IC card processing device 1. Furthermore, if the information included in the biometric authentication result is denial, the processor 31 sends identification information not including payment information to the IC card processing device 1. The identification information not including payment information may be, for example, information indicating that the biometric authentication result is denial or information indicating that the PIN authentication result is denial.

[0054] 4 is a block diagram showing an example of an information terminal according to an embodiment. The information terminal 4 is an electronic device such as a computer, and may be, for example, a television receiver (including an Internet television), a PC (Personal Computer), a mobile terminal (for example, a tablet, a smartphone, a laptop, a feature phone, a digital music player, an e-book reader, a smartwatch, etc.), a game device (a home game console, a portable game console), a VR (Virtual Reality) terminal, an AR (Augmented Reality) terminal, etc., but is not limited to these.

[0055] The information terminal 4 in this embodiment is, for example, a smartphone, and includes a processor 41, a ROM 42, a RAM 43, an auxiliary storage unit 44, an input unit 45, an output unit 46, a communication unit 47, and a biometric information acquisition unit 48.

[0056] The processor 41 is typically a central processing unit (CPU) and / or a graphics processing unit (GPU), but may also be a microcomputer, a field programmable gate array (FPGA), a digital signal processor (DSP), or the like.

[0057] The processor 41 can realize various functions of the information terminal 4 by executing programs such as system software, application software, or firmware stored in at least one of the ROM 42 and the auxiliary storage unit 44. The information terminal 4 may combine two or more processors 41 and execute various processes through cooperation of these two or more processors.

[0058] By executing the above program, the processor 41 has the function of transmitting various signals to the IC card 3 using a communication method that complies with a predetermined communication standard, acquiring various signals received from the IC card 3, and executing processing based on requests from the IC card 3.

[0059] The ROM 42 is a read-only nonvolatile memory that corresponds to the main memory of the processor 41, which corresponds to a computer. The ROM 42 stores programs such as an operating system or application software. The ROM 42 also stores data used by the processor 41 when performing various processes.

[0060] The RAM 43 is a volatile memory that corresponds to the main memory of the processor 41, which corresponds to a computer. The RAM 43 is used as a so-called work area for storing data that is temporarily used when the processor 41 performs various processes.

[0061] The auxiliary storage unit 44 corresponds to an auxiliary storage portion of the processor 41, which corresponds to a computer. The auxiliary storage unit 44 is, for example, an EEPROM (registered trademark), an HDD, or an SSD. The auxiliary storage unit 44 may store some or all of the above programs. The auxiliary storage unit 44 also stores data used by the processor 41 when performing various processes, data generated by the various processes performed by the processor 41, various setting values, etc.

[0062] The auxiliary storage unit 44 stores pairing information through a pairing process with the IC card 3. For example, the pairing information stored in the auxiliary storage unit 44 includes a unique identifier of the IC card 3, the pairing time, the number of pairing attempts, and the like.

[0063] The auxiliary storage unit 44 also stores in advance biometric information of the owner of the information terminal 4. The biometric information is, for example, the owner's face, iris, auricle, voiceprint, palm shape, fingerprints, etc., acquired by a biometric information acquisition unit 48 described later.

[0064] The ROM 42 and the auxiliary storage unit 44 are non-transitory computer-readable storage media, and the information terminal 4 may be transferred with the above program stored therein, or may be transferred without the above program stored therein. In the latter case, the information terminal 4 reads the above program stored in a removable storage medium such as an optical disk or semiconductor memory, or downloads the program via a network or the like, and writes the read or downloaded program to the auxiliary storage unit 44 of the information terminal 4. The ROM 42, RAM 43, and auxiliary storage unit 44 are examples of memory.

[0065] The input unit 45 may include a user interface such as a mouse, keyboard, or numeric keypad for receiving input commands from the owner of the information terminal 4, and various sensors such as a microphone or touch panel.

[0066] The output unit 46 is, for example, a device that displays various information under the control of the processor 41, and includes a monitor or the like. The output unit 46 may also include audio output means, such as a speaker, that audibly supplies information to the owner of the information terminal. The input unit 45 and the output unit 46 may be formed integrally.

[0067] The communication unit 47 receives information from the IC card 3, transmits the received information to the components within the information terminal 4, and transmits information received from the components within the information terminal 4 to the IC card 3. The communication unit 47 may also transmit and receive information from outside via a network such as the Internet.

[0068] The biometric information acquisition unit 48 is, for example, an in-camera or a fingerprint sensor of a smartphone or the like, and acquires biometric information of the owner of the information terminal 4. Upon request from the processor 41, the biometric information acquisition unit 48 acquires biometric information in the biometric information registration mode and in the case of biometric authentication processing.

[0069] In the biometric information registration mode, the processor 41 uses the biometric information acquisition unit 48 to acquire the selected biometric information and stores it in the auxiliary storage unit 44.

[0070] In the case of biometric authentication processing, the processor 41 uses the biometric information acquisition unit 48 to acquire selected biometric information and store it in the RAM 43, and also determines the degree of similarity between the biometric information previously stored in the auxiliary storage unit 44 in the biometric information registration mode and the biometric information acquired by the biometric information acquisition unit 48. The processor 41 generates and outputs a biometric authentication result based on the degree of similarity.

[0071] More specifically, when the processor 41 determines that the similarity between the biometric information previously stored in the auxiliary storage unit 44 and the biometric information acquired by the biometric information acquisition unit 48 is equal to or greater than a predetermined threshold, the processor 41 generates information including approval as the biometric authentication result and outputs it to the IC card 3. On the other hand, when the processor 41 determines that the similarity between the biometric information previously stored in the auxiliary storage unit 44 and the biometric information acquired by the biometric information acquisition unit 48 is less than the predetermined threshold, the processor 41 generates information including denial as the biometric authentication result and outputs it to the IC card 3.

[0072] Furthermore, when the owner of the information terminal 4 starts pairing mode, the processor 41 transmits a pairing request signal to the IC card 3. When the processor 41 receives a pairing response signal from the IC card 3 within a predetermined time, it starts pairing authentication processing.

[0073] The processor 41 transmits the pairing code to the IC card 3 and waits to receive a pairing authentication process completion notification from the IC card 3. When the processor 41 receives the pairing authentication process completion notification from the IC card 3, it ends the pairing authentication process and stores pairing information including the unique identifier of the IC card 3 in the auxiliary storage unit 44.

[0074] Next, the authentication process executed by the authentication system according to the present embodiment will be described with reference to Fig. 5 and Fig. 6. Fig. 5 is a sequence diagram showing an example of the authentication process according to the embodiment. Fig. 6 is a sequence diagram showing an example of the authentication process according to the embodiment.

[0075] The authentication process of this embodiment is started at any timing. When the IC card processing device 1 and the card reader / writer 2 are connected (step S1), power is supplied to the card reader / writer 2, and the card reader / writer 2 is started up (step S2).

[0076] The card reader / writer 2 notifies the IC card processing device 1 of its current state (step S3). For example, if the card reader / writer 2 has not started up normally, it may notify the IC card processing device 1 of an abnormal startup state, and the IC card processing device 1 may display a screen notifying the operator or administrator of this fact.

[0077] If the IC card processing device 1 determines that the status notification from the card reader / writer 2 is normal, it waits for input of a payment processing request command from the operator or administrator. If the IC card processing device 1 determines that a payment processing request command has been input from the operator or administrator, it starts the payment processing (step S5). The IC card processing device 1 transmits a payment processing request signal generated based on the payment processing request command to the card reader / writer 2 (step S6).

[0078] When the card reader / writer 2 receives the payment processing request signal, the IC card processing device 1 and the card reader / writer 2 transition to a payment processing standby state (step S6). When the owner inserts the IC card 3 into the card reader / writer (step S7), power is supplied from the IC card processing device 1 to the IC card 3 via the contact terminal 37 (step S8).

[0079] When power is supplied from the power source via the contact terminal 37, the IC card 3 acquires a payment processing request signal from the IC card processing device 1.

[0080] Next, when the owner of the information terminal 4 selects pairing mode, that is, when a pairing mode request command is input, pairing begins (step S9). When the pairing mode begins, the information terminal 4 transmits a pairing request signal to the IC card 3 (step S10). When the IC card 3 receives the pairing request signal from the information terminal 4, it transmits a pairing response signal to the information terminal 4 (step S11).

[0081] When the information terminal 4 receives a pairing response signal from the IC card 3 within a predetermined time, it starts the pairing authentication process (step S12). Furthermore, when the IC card 3 confirms that the information terminal 4 has received the pairing response signal, or after a certain time has elapsed, it starts the pairing authentication process (step S13). Specifically, the information terminal 4 transmits the pairing code input by the owner to the IC card 3. The IC card 3 acquires the pairing code stored in the nonvolatile memory 34 and determines whether the pairing code matches the pairing code transmitted from the information terminal 4. When the IC card 3 determines that the pairing code acquired from the nonvolatile memory 34 matches the pairing code transmitted from the information terminal 4, it transmits a pairing authentication process completion notice to the information terminal 4 and terminates the pairing authentication process. When the information terminal 4 receives the pairing authentication process completion notice from the IC card 3, it terminates the pairing authentication process.

[0082] The information terminal 4 stores pairing information including the unique identifier of the IC card 3 in the auxiliary storage unit 44 (step S14). The IC card 3 also stores pairing information including the unique identifier of the information terminal 4 in the non-volatile memory 34 (step S15). Note that the order of steps S12 and S13 and the order of steps S14 and S15 may vary depending on the processing speed, etc., and may be reversed or performed simultaneously.

[0083] When the process of S15 is completed, the IC card 3 starts the authentication process (step S16). Note that the processes from step S9 to step S15 are necessary only the first time, and from the second time onwards, the IC card 3 may identify the paired information terminal 4 based on the pairing information stored in the nonvolatile memory 34. Also, the information terminal 4 may identify the paired information terminal 4 based on the pairing information stored in the auxiliary storage unit 44.

[0084] When the authentication process starts, the IC card 3 transmits a PIN code request signal to the IC card processing device 1 via the contact terminal 37 (step S17). The IC card processing device 1 receives the PIN code request signal from the IC card 3 via the card reader / writer 2, and, based on the PIN code request signal, causes the output unit 16 to display a screen indicating that a PIN code must be entered. The processor 11 transmits the four-digit PIN code entered using the input unit 15 to the IC card 3 (steps S18 and S19).

[0085] The IC card 3 acquires the PIN code input from the IC card processing device 1 via the contact terminal 37. The IC card 3 executes PIN authentication triggered by the transmission of the PIN code from the IC card processing device 1 (step S20). The IC card 3 determines whether the acquired PIN code matches the PIN code stored in the non-volatile memory 34.

[0086] The IC card 3 outputs approval as the PIN code authentication result when it determines that the acquired PIN code matches the PIN code stored in the non-volatile memory 34. If the output PIN code authentication result is approval, the IC card 3 transmits a biometric authentication request signal to the information terminal 4 using the interface 36 (step S21). Note that the IC card 3 may also transmit a biometric authentication request signal to the information terminal 4 using the interface 36 when the output PIN code authentication result is rejection.

[0087] When the information terminal 4 receives the biometric authentication request signal from the IC card 3, it starts the biometric authentication process (step S22). The information terminal 4 acquires the selected biometric information using the biometric information acquisition unit 48, and determines the similarity between the biometric information previously stored in the auxiliary storage unit 44 and the biometric information acquired by the biometric information acquisition unit 48. The processor 41 generates a biometric authentication result based on the similarity, and transmits it to the IC card 3 (step S23).

[0088] If the information included in the biometric authentication result indicates approval, the IC card 3 completes the authentication process (step S24). Note that the IC card 3 may complete the authentication process even if the information included in the biometric authentication result indicates rejection. If the information included in the biometric authentication result indicates approval, the IC card processing device 1 transmits identification information including payment information (step S25). The IC card processing device 1 receives the identification information including payment information from the IC card 3, and completes the payment process using the identification information (step S26).

[0089] According to the IC card of this embodiment, biometric authentication is performed on the information terminal 4, so there is no need to implement a sensor or the like to acquire biometric information on the IC card 3. Since personal authentication can be performed using the information terminal 4 that is normally used, i.e., a smartphone, highly accurate judgment can be expected.

[0090] Furthermore, with the IC card of this embodiment, a biometric authentication engine is not required in the IC card 3, making it possible to conserve memory. Also, since there is no need to manage or store the biometric information to be matched within the IC card, the risk of personal identification information (biometric information) being leaked can be reduced even if problems such as loss of the IC card or a security attack occur. Furthermore, there is no need to register biometric information, which is a problem when equipping an IC card with a biometric authentication function.

[0091] That is, the portable electronic device, IC card, authentication system, and authentication method of the present embodiment enable multi-factor authentication at low cost.

[0092] Although several embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be embodied in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included within the scope and spirit of the invention, and are also included in the scope of the invention and its equivalents as defined in the claims. [Explanation of symbols]

[0093] 1. IC card processing device 2...Card reader / writer 3. IC card 4. Information terminal 11...Processor 12...ROM 13...RAM 14...Auxiliary storage section 15...Input section 16...Output section 17…Communications Department 31...Processor 32...ROM 33...RAM 34...Non-volatile memory 35...Coprocessor 36...Interface 37…Contact terminal 41...Processor 42...ROM 43...RAM 44…Auxiliary storage unit 45...Input section 46...Output section 47…Communications Department 48...Biometric information acquisition unit

Claims

1. The terminal and an interface that performs wireless communication with an information terminal using power supplied via the terminal; a processor that acquires a biometric authentication result from the information terminal by transmitting a biometric authentication request signal to the information terminal using the interface, and transmits a response corresponding to the biometric authentication result to an external device using the terminal; A portable electronic device comprising:

2. The portable electronic device is A memory for storing a preset PIN code is provided, 2. The portable electronic device according to claim 1, wherein the processor transmits the biometric authentication request signal to the information terminal using the interface when it determines that the PIN code acquired from the external device using the terminal matches the PIN code stored in the memory.

3. 3. The portable electronic device according to claim 2, wherein said interface performs wireless communication with said information terminal using a communication method conforming to a predetermined communication standard.

4. the interface transmits a pairing response signal to the information terminal when receiving a pairing request signal from the information terminal; 4. The portable electronic device according to claim 3, wherein the memory stores pairing information that is identification information of the information terminal for which pairing authentication processing has been completed.

5. 5. The portable electronic device of claim 4, wherein the processor identifies the paired information terminal based on the pairing information stored in the memory, transmits the biometric authentication request signal to the paired information terminal, and acquires the biometric authentication result from the paired information terminal.

6. The terminal and an interface that performs wireless communication with an information terminal using power supplied via the terminal; a processor that acquires a biometric authentication result from the information terminal by transmitting a biometric authentication request signal to the information terminal using the interface, and transmits a response corresponding to the biometric authentication result to an external device using the terminal; An IC card comprising:

7. an information terminal and a portable electronic device capable of wirelessly communicating with the information terminal; The portable electronic device is The terminal and an interface that performs wireless communication with the information terminal using power supplied via the terminal; a processor that acquires a biometric authentication result from the information terminal by transmitting a biometric authentication request signal to the information terminal using the interface, and transmits a response corresponding to the biometric authentication result to an external device using the terminal; Equipped with The information terminal a communication unit configured to receive a biometric authentication request signal from the portable electronic device and to transmit the biometric authentication result; a biometric information acquisition unit that acquires biometric information in response to a biometric authentication request signal; a processor that determines a degree of similarity between biometric information that has been registered in advance and stored in a memory and the biometric information acquired by the biometric information acquisition unit, and outputs the biometric authentication result based on the degree of similarity; An authentication system comprising:

8. Wireless communication with the information terminal is performed using power supplied through the terminal. When it is determined that a PIN code acquired from an external device using the terminal matches a PIN code that has been set in advance and stored in memory, a biometric authentication result is acquired from the information terminal by sending a biometric authentication request signal to the information terminal, and a response corresponding to the biometric authentication result is sent to the external device.

Images