Fingerprint data conversion device, fingerprint data conversion method, and fingerprint data conversion system

Abstract

To provide a fingerprint data conversion device capable of converting fingerprint data acquired by any method into fingerprint data available for biometric authentication, a fingerprint data conversion method, and a fingerprint data conversion system.SOLUTION: In a fingerprint authentication system 100A-100C, a server S11 as a biometric data conversion device, includes: a communications unit 30 that is an acquisition unit for acquiring at least one first biometric data; and a processor 31 that is a control unit configured to convert the first biometric data into second biometric data different from the first biometric data and output the same.SELECTED DRAWING: Figure 4

Description

[Technical Field]

[0001] The present disclosure relates to a fingerprint data conversion device, a fingerprint data conversion method, and a fingerprint data conversion system. [Background technology]

[0002] Patent Document 1 discloses a fingerprint processing device that detects the three-dimensional shape of a fingerprint using a 3D scanner, acquires a first fingerprint image that represents the fingerprint in a three-dimensional coordinate space, and generates a second fingerprint image that represents the fingerprint in a two-dimensional coordinate plane and reflects the fingerprint with desired image characteristics. The image characteristics of a fingerprint include the lightness, saturation, brightness, resolution, and gradation of each part of the fingerprint (for example, each pixel that makes up the fingerprint), the number of pixels that represent the fingerprint (so-called pixel count), characteristics related to noise superimposed on the pixels that represent the fingerprint, and characteristics related to the position of the fingerprint within the image. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Publication No. 2022-93819 Summary of the Invention [Problem to be solved by the invention]

[0004] There are two methods for acquiring biometric information (e.g., fingerprints, veins, palm prints, etc.) used in biometric authentication: a method for acquiring biometric information from a user's biometric part (e.g., fingers or palm) in a non-contact state, and a method for acquiring biometric information from a user's biometric part in a contact state. However, biometric information acquired in a contact state may have a different shape from biometric information acquired in a non-contact state because pressure is applied to the biometric part when the device is placed (contacted) on the placement surface, which may reduce the accuracy of user authentication.

[0005] Furthermore, if the biometric information acquisition device used when registering biometric information is different from the biometric information acquisition device used when authenticating the biometric information, the biometric information obtained by each acquisition device may have a lower accuracy in user authentication because the biometric information acquisition method used by each acquisition device is different.

[0006] The present disclosure has been devised in consideration of the above-mentioned conventional circumstances, and aims to provide a fingerprint data conversion device, a fingerprint data conversion method, and a fingerprint data conversion system that convert fingerprint data acquired by any acquisition method into fingerprint data that can be biometrically authenticated. [Means for solving the problem]

[0007] The present disclosure provides a fingerprint data conversion device comprising: an acquisition unit that acquires at least one first fingerprint data; and a control unit that converts the first fingerprint data into second fingerprint data different from the first fingerprint data and outputs the second fingerprint data.

[0008] The present disclosure also provides a fingerprint data conversion method performed by a fingerprint data conversion device capable of communicating with at least one fingerprint data acquisition device capable of acquiring first fingerprint data, the fingerprint data conversion method acquiring the first fingerprint data, converting the first fingerprint data into second fingerprint data different from the first fingerprint data, and outputting the second fingerprint data.

[0009] The present disclosure also provides a fingerprint data conversion system comprising at least one fingerprint data acquisition device capable of acquiring first fingerprint data and a server capable of communicating with the fingerprint data acquisition device, wherein the fingerprint data acquisition device acquires the first fingerprint data and transmits it to the server, and the server converts the first fingerprint data into second fingerprint data different from the first fingerprint data and outputs it. [Effects of the Invention]

[0010] According to the present disclosure, fingerprint data acquired by any acquisition method can be converted into fingerprint data that can be biometrically authenticated. [Brief explanation of the drawings]

[0011] [Figure 1] FIG. 1 is a diagram showing a first use case example of the fingerprint authentication system according to the first embodiment; [Figure 2] FIG. 10 is a diagram showing a second use case example of the fingerprint authentication system according to the first embodiment. [Figure 3] FIG. 10 is a diagram showing a third use case example of the fingerprint authentication system according to the first embodiment. [Figure 4] FIG. 1 is a diagram showing an example of the internal configuration of a fingerprint authentication system according to first to third use case examples of the first embodiment. [Figure 5] FIG. 1 is a sequence diagram showing an example of an operation procedure of a fingerprint authentication system according to first to third use case examples of the first embodiment. [Figure 6] FIG. 10 is a diagram showing a fourth use case example of the fingerprint authentication system according to the second embodiment. [Figure 7] FIG. 10 is a diagram showing an example of the internal configuration of a terminal device, a fingerprint acquisition device, and a server in a fourth use case example of the second embodiment. [Figure 8] FIG. 10 is a sequence diagram showing an example of an operation procedure of a fingerprint authentication system according to a fourth use case example of the second embodiment. [Figure 9] FIG. 10 is a diagram showing a fifth use case example of the fingerprint authentication system according to the third embodiment. [Figure 10] FIG. 10 is a diagram showing an example of the internal configuration of a fingerprint authentication system in a fifth use case example of the third embodiment. [Figure 11] FIG. 10 is a sequence diagram showing an example of an operation procedure of a fingerprint authentication system according to a fifth use case example of the third embodiment. [Figure 12] FIG. 10 is a diagram showing a sixth use case example of the fingerprint authentication system according to the third embodiment. [Figure 13] FIG. 10 is a diagram showing an example of the internal configuration of a fingerprint authentication system in a sixth use case example of the third embodiment. [Figure 14] FIG. 10 is a sequence diagram showing an example of an operation procedure of a fingerprint authentication system according to a sixth use case example of the third embodiment. [Figure 15] FIG. 7 is a diagram showing a seventh use case example of the fingerprint authentication system according to the third embodiment. [Figure 16] FIG. 10 is a diagram showing an example of the internal configuration of a fingerprint authentication system in a seventh use case example of the third embodiment. [Figure 17] FIG. 10 is a sequence diagram showing an example of an operation procedure of a fingerprint authentication system according to a seventh use case example of the third embodiment. [Figure 18] FIG. 10 is a diagram showing an eighth use case example of the fingerprint authentication system according to the fourth embodiment. [Figure 19] FIG. 13 is a diagram showing an example of the internal configuration of a fingerprint authentication system in an eighth use case example of the fourth embodiment. [Figure 20] FIG. 10 is a diagram showing an example of a first conversion table. [Figure 21] FIG. 2 shows an example of a second conversion table. [Figure 22] FIG. 10 is a sequence diagram showing an example of an operation procedure of a fingerprint authentication system according to an eighth use case example of the fourth embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0012] (Background to this disclosure) In recent years, the use of biometric authentication has expanded in airports, banks, and other locations. In such biometric authentication, biometric information used for registration and authentication is acquired using dedicated terminal devices. However, with the expansion of the use of biometric authentication, there has been a demand for biometric authentication using biometric information acquired by different terminal devices, such as authenticating biometric information acquired by an airport-dedicated terminal device installed at an airport with biometric information acquired by any terminal device carried by a user.

[0013] Here, Patent Document 1 discloses a fingerprint processing device that, as an example of biometric information, represents a first fingerprint image acquired by a 3D scanner in a two-dimensional coordinate plane and converts it into a second fingerprint image in which the fingerprint is reflected with desired image characteristics. However, the fingerprint processing device described in Patent Document 1 requires a dedicated fingerprint sensor for acquiring the first fingerprint image and a dedicated fingerprint processing device for generating the second fingerprint image, and does not anticipate converting biometric information acquired by an arbitrary terminal device that acquires biometric information using a different method into biometric information suitable for predetermined biometric authentication.

[0014] Therefore, in each of the following embodiments, examples of a fingerprint data conversion device, a fingerprint data conversion method, and a fingerprint data conversion system that convert fingerprint data acquired by any acquisition method into biometric information that can be biometrically authenticated will be described.

[0015] Hereinafter, with reference to the drawings as appropriate, detailed descriptions will be given of each embodiment that specifically discloses the configuration and operation of a fingerprint data conversion device, a fingerprint data conversion method, and a fingerprint data conversion system according to the present disclosure. However, unnecessary detailed descriptions may be omitted. For example, detailed descriptions of well-known matters or redundant descriptions of substantially identical configurations may be omitted. This is to avoid unnecessary redundancy in the following description and to facilitate understanding by those skilled in the art. Note that the accompanying drawings and the following description are provided to enable those skilled in the art to fully understand the present disclosure, and are not intended to limit the subject matter recited in the claims.

[0016] (Embodiment 1) <First use case example> A first use case example of the fingerprint authentication system 100A according to the first embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing the first use case example of the fingerprint authentication system 100A according to the first embodiment. Note that in the following embodiments, a conversion process of biometric information when fingerprint authentication is performed will be described as an example of biometric authentication, but the biometric information used for biometric authentication is not limited to fingerprints. The biometric authentication may be, for example, vein authentication or palm print authentication, or authentication using any two or more biometric data of fingerprints, veins, and palm prints.

[0017] The fingerprint authentication system 100A includes a terminal device P11, a fingerprint acquisition device P12, a server S11, and a contact fingerprint database DB 11. Note that there may be a plurality of terminal devices P11 and a plurality of fingerprint acquisition devices P12.

[0018] In the first use case example, the fingerprint authentication system 100A converts fingerprint data (hereinafter referred to as "non-contact fingerprint data") acquired from a user's fingertip in a non-contact state by the terminal device P11 or the fingerprint acquisition device P12 into contact fingerprint data (hereinafter referred to as "contact fingerprint data") that is fingerprint data acquired from a user's fingertip in a contact state and that can be used for matching (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB11 by the server S11.

[0019] The fingerprint authentication system 100A stores (registers) the converted contact fingerprint data in the contact fingerprint database DB11. Furthermore, the fingerprint authentication system 100A compares the converted contact fingerprint data with the contact fingerprint data registered in the contact fingerprint database DB11 to perform biometric authentication.

[0020] The terminal device P11 is a general-purpose device owned by a user who is the subject of biometric authentication or installed in a store, company, or facility that uses biometric authentication, and is realized by, for example, a smartphone, a tablet terminal, etc. The terminal device P11 is connected to the server S11 via a network so that data can be communicated. The terminal device P11 is equipped with a camera 13 (see FIG. 4) and acquires contactless fingerprint data of the user.

[0021] In the following description, the term "fingerprint data" includes contact fingerprint data and non-contact fingerprint data. Contact fingerprint data, non-contact fingerprint data, and fingerprint data are data containing information about a user's fingerprint, such as fingerprint image data of a user's fingertip (fingerprint), feature values ​​extracted from the user's fingerprint image that indicate the user's individuality, or data indicating the shape pattern of the user's fingerprint.

[0022] In the first use case example, the terminal device P11 captures a fingerprint image of the user's fingerprint in a non-contact state by capturing an image of the user's fingertip (fingerprint) held within the field of view of the camera 13. Based on the user's fingerprint image captured in a non-contact state, the terminal device P11 extracts information about the fingerprint, such as features indicating the user's individuality or the fingerprint shape pattern. The terminal device P11 transmits the user's fingerprint image captured in a non-contact state, the features indicating the user's individuality, or the fingerprint information, such as the fingerprint shape pattern, to the server S11 as the user's contactless fingerprint data.

[0023] The fingerprint acquisition device P12 is a dedicated device for acquiring fingerprint data used for biometric authentication, and is installed in stores, companies, etc. that use biometric authentication. The fingerprint acquisition device P12 is connected to the server S11 via a network so that data can be communicated. The fingerprint acquisition device P12 is equipped with a camera 23 (see FIG. 4) and acquires fingerprint data of a user in a non-contact state.

[0024] In the first use case example, the fingerprint acquisition device P12 acquires contactless fingerprint data by capturing, in a contactless state, an image of a user's finger (fingerprint) held within the field of view of the camera 23. The fingerprint acquisition device P12 transmits the contactless fingerprint data to the server S11.

[0025] The server S11 is connected to the terminal device P11 and the fingerprint acquisition device P12 via a network so that data communication is possible between them when registering fingerprint data. The server S11 acquires contactless fingerprint data transmitted from the terminal device P11 and the fingerprint acquisition device P12. The server S11 converts the acquired contactless fingerprint data into contact fingerprint data that can be compared (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB11. The server S11 associates the converted contact fingerprint data with user information (e.g., user ID, name, age, gender, etc.) and stores (registers) it in the contact fingerprint database DB11.

[0026] In performing biometric authentication, the server S11 compares the converted contact fingerprint data with at least one piece of contact fingerprint data registered in the contact fingerprint database DB11, and performs biometric authentication (user authentication).

[0027] <Second use case example> A second use case example of the fingerprint authentication system 100B according to the embodiment 1 will be described with reference to Fig. 2. Fig. 2 is a diagram showing the second use case example of the fingerprint authentication system 100B according to the embodiment 1. In the second use case example, the terminal device P11 and the fingerprint acquisition device P12 are the same as those in the first use case example, so their description will be omitted and only different processing and configurations will be described.

[0028] The fingerprint authentication system 100B includes a terminal device P11, a fingerprint acquisition device P12, a server S11, and a contact fingerprint database DB 11. Note that there may be a plurality of terminal devices P11 and a plurality of fingerprint acquisition devices P12.

[0029] In the second use case example, the fingerprint authentication system 100B converts contact fingerprint data acquired from the user's fingertip in a contact state by the terminal device P11 or the fingerprint acquisition device P12 into contact fingerprint data that can be used for matching (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB11 by the server S11.

[0030] The fingerprint authentication system 100A stores (registers) the converted contact fingerprint data in the contact fingerprint database DB11. Furthermore, the fingerprint authentication system 100A compares the converted contact fingerprint data with the contact fingerprint data registered in the contact fingerprint database DB11 to perform biometric authentication.

[0031] In the second use case example, the terminal device P11 acquires contact fingerprint data by reading the user's fingerprint placed (i.e., in contact) on the operation unit 15 (see FIG. 4). The terminal device P11 transmits the acquired contact fingerprint data to the server S11.

[0032] In the second use case example, the fingerprint acquisition device P12 acquires contact fingerprint data by reading the user's fingerprint placed on (i.e., in contact with) the sensor 24 (see FIG. 4). The fingerprint acquisition device P12 transmits the acquired contact fingerprint data to the server S11.

[0033] The server S11 acquires contact fingerprint data transmitted from each of the terminal device P11 and the fingerprint acquisition device P12. The server S11 converts the acquired contact fingerprint data into contact fingerprint data that can be compared (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB11.

[0034] <Third use case example> A third use case example of the fingerprint authentication system 100C according to the embodiment 1 will be described with reference to Fig. 3. Fig. 1 is a diagram showing the third use case example of the fingerprint authentication system 100C according to the embodiment 1. In the third use case example, the terminal device P11 and the fingerprint acquisition device P12 are similar to those in the first and second use case examples, so their description will be omitted and only different processing and configurations will be described.

[0035] The fingerprint authentication system 100C includes a terminal device P11, a fingerprint acquisition device P12, a server S11, a contact sensor P13, and a contact fingerprint database DB 11. Note that there may be more than one terminal device P11, more than one fingerprint acquisition device P12, and more than one contact sensor P13.

[0036] The fingerprint authentication system 100C in the third use case example converts, by the server S11, contact fingerprint data or non-contact fingerprint data acquired by the terminal device P11 or fingerprint acquisition device P12 using any acquisition method (contact state or non-contact state) into contact fingerprint data that can be compared (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB11. Furthermore, the fingerprint authentication system 100C determines that the contact fingerprint data acquired by the contact sensor P13 is contact fingerprint data that does not require conversion, and omits the conversion process.

[0037] The fingerprint authentication system 100C stores (registers) the converted contact fingerprint data in the contact fingerprint database DB11. Furthermore, the fingerprint authentication system 100C compares the converted contact fingerprint data with the contact fingerprint data registered in the contact fingerprint database DB11 to perform biometric authentication.

[0038] In the third use case example, the terminal device P11 acquires contact fingerprint data or contactless fingerprint data (fingerprint data) of the user using the camera 13 or the operation unit 15 (see FIG. 4). The terminal device P11 transmits the acquired contact fingerprint data or contactless fingerprint data (fingerprint data) to the server S11.

[0039] In the third use case example, the fingerprint acquisition device P12 acquires contact fingerprint data or contactless fingerprint data (fingerprint data) using the camera 23 or the sensor 24 (see FIG. 4). The fingerprint acquisition device P12 transmits the acquired contact fingerprint data or contactless fingerprint data (fingerprint data) to the server S11.

[0040] The contact sensor P13 is a dedicated device for acquiring contact fingerprint data used for biometric authentication, and is installed in stores, companies, facilities, etc. that use biometric authentication. The contact sensor P13 may be capable of acquiring the user's contact fingerprint data using known technology. The contact sensor P13 transmits information about the user's fingerprint, such as features that indicate the user's individuality or fingerprint shape patterns, to the server S11 as the user's contact fingerprint data. The contact sensor P13 may be capable of acquiring contact fingerprint data that does not require conversion.

[0041] In the third use case example, the server S11 acquires contact fingerprint data or contactless fingerprint data transmitted from the terminal device P11, the fingerprint acquisition device P12, and the contact sensor P13, respectively, when registering fingerprint data. Based on the impossibility information, the server S11 converts the contact fingerprint data or contactless fingerprint data acquired by the terminal device P11 or the fingerprint acquisition device P12 into contact fingerprint data that can be compared (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB11, and omits the conversion process for the contact fingerprint data acquired by the contact sensor P13. The server S11 associates the converted contact fingerprint data with user information (e.g., user ID, name, age, gender, etc.) and stores (registers) it in the contact fingerprint database DB11.

[0042] In performing biometric authentication, the server S11 compares the converted contact fingerprint data with at least one piece of contact fingerprint data registered in the contact fingerprint database DB11, and performs biometric authentication (user authentication).

[0043] Next, referring to FIG. 4, a diagram showing an example of the internal configuration of fingerprint authentication systems 100A to 100C in first to third use case examples of the first embodiment will be shown.

[0044] The terminal device P11 includes a communication unit 10, a processor 11, a memory 12, a camera 13, and a monitor 14. Note that the terminal device P11 in the second use case example may not include the camera 13.

[0045] The communication unit 10 is connected to the communication unit 30 of the server S11 via a network so as to be able to communicate wirelessly or via a wire, and transmits and receives data. Note that the wireless communication here refers to short-range wireless communication such as Bluetooth (registered trademark) or NFC (registered trademark), or communication via a wireless local area network (LAN) such as Wi-Fi (registered trademark).

[0046] When registering fingerprint data, the communication unit 10 associates the user's fingerprint data generated by the processor 11 with the user's user information and additional information and transmits them to the server S11, and when performing biometric authentication, the communication unit 10 transmits the user's fingerprint data generated by the processor 11 and the additional information to the server S11.

[0047] The additional information here refers to information about a method for acquiring fingerprint data or a device from which the fingerprint data was acquired (generated) (for example, the terminal device P11, the fingerprint acquisition device P12, the contact sensor P13, etc.). The additional information includes, for example, at least one of information indicating whether the fingerprint data is contact fingerprint data or non-contact fingerprint data, device information about the device from which the fingerprint data was acquired (generated), and information about a method for acquiring or generating fingerprint data.

[0048] In addition, the device information is, for example, information indicating whether the device is a general-purpose device or a device dedicated to acquiring fingerprint data, and identification information (for example, model number or device name) that can identify the device from which the fingerprint data was acquired or generated.

[0049] In addition, the information on the method of acquiring or generating fingerprint data includes the parameters of the camera that captured the fingerprint image, the fingerprint sensing method of the operating unit or sensor that acquired the fingerprint data (for example, the capacitance method, thermal method, ultrasonic method, pressure-sensitive method, optical method, etc., as described below), and the parameters used for fingerprint sensing.

[0050] The processor 11 is configured using, for example, a central processing unit (hereinafter referred to as "CPU"), a field programmable gate array (hereinafter referred to as "FPGA"), or a graphics processing unit (hereinafter referred to as "GPU"), and performs various processes and controls in cooperation with the memory 12. Specifically, the processor 11 references the programs and data stored in the memory 12 and executes the programs to realize the function of acquiring the user's fingerprint data (specifically, contactless fingerprint data or contact fingerprint data).

[0051] When an application capable of acquiring fingerprint data is launched through an input operation by the user or a person other than the user (for example, a person at the store or company where the terminal device P11 is installed), the processor 11 generates a control instruction requesting the start of fingerprint data acquisition and outputs it to the camera 13 or the operation unit 15.

[0052] When acquiring contactless fingerprint data using camera 13, processor 11 acquires the captured image output from camera 13 and detects at least one fingertip including the first joint from the captured image capturing the entire hand or at least one finger of the user. Processor 11 further detects a fingertip region including the tip to the first joint of at least one of the detected fingertips, and generates a fingerprint image by cutting out the fingertip region of any one of the detected fingertip regions. Note that the finger for which the fingerprint image is generated may be any finger, or may be a pre-designated finger (for example, the middle finger, which is the easiest to image and has the largest surface area).

[0053] Processor 11 may perform image analysis on the generated fingerprint image to extract features that indicate the individuality of the user. Processor 11 may also detect which finger (e.g., middle finger or index finger) appears in the fingerprint image and generate finger information that indicates which finger appears in the fingerprint image.

[0054] Here, the feature amount may be extracted using known techniques (for example, minutiae method, frequency feature analysis method, etc.). The minutiae method is a method of extracting fingerprint feature amount by detecting end points or bifurcations (branchings) that indicate breaks in fingerprint lines among fingerprint ridges. The frequency feature analysis method is a method of extracting fingerprint feature amount from a frequency waveform converted from the ridges of a fingerprint as a frequency.

[0055] Furthermore, when contactless fingerprint data is acquired using operation unit 15, processor 11 acquires contact fingerprint data from the user's fingertip placed on an area of ​​operation unit 15 where contact fingerprint data can be acquired. The finger placed on operation unit 15 may be any finger, or may be a finger designated in advance (for example, the middle finger, which has the largest area and is easy to image). Processor 11 may output a message or image designating the finger to be placed on operation unit 15 of monitor 14.

[0056] When registering fingerprint data, processor 11 generates a control command requesting the registration of fingerprint data, associates the generated control command with user information accepted by operation unit 15, fingerprint data, and additional information corresponding to the fingerprint data, outputs the associated control command to communication unit 10, and transmits the associated control command to server S11. Processor 11 may further associate finger information corresponding to the fingerprint data and transmit the associated control command to server S11. When processor 11 acquires the result of fingerprint data registration from server S11, processor 11 generates a notification screen (not shown) notifying the result of fingerprint data registration, and outputs it to monitor 14 for display.

[0057] Furthermore, during biometric authentication, the processor 11 generates a control command requesting biometric authentication, associates the generated control command with fingerprint data and additional information corresponding to the fingerprint data, outputs the associated control command to the communication unit 10, and transmits them to the server S11. The processor 11 may further associate finger information corresponding to the fingerprint data with the associated control command and transmit them to the server S11. When the processor 11 acquires the biometric authentication result of the fingerprint data from the server S11, it generates a notification screen (not shown) notifying the user of the biometric authentication result of the fingerprint data, and outputs the notification screen to the monitor 14 for display.

[0058] After transmitting the fingerprint data, the processor 11 deletes the fingerprint data or various data (e.g., fingerprint images) used to generate the fingerprint data. This enables the processor 11 to prevent the user's fingerprint data from being leaked and improve security.

[0059] The memory 12 includes, for example, a random access memory (hereinafter referred to as "RAM") as a work memory used when executing each process of the processor 11, and a read only memory (hereinafter referred to as "ROM") that stores programs and data that define the operation of the processor 11. The RAM temporarily stores data or information generated or acquired by the processor 11. The ROM stores programs that define the operation of the processor 11.

[0060] Camera 13 is configured to have at least a lens (not shown) and an image sensor (not shown). The image sensor is, for example, a solid-state imaging element such as a Charged-Coupled Device (hereinafter referred to as "CCD") or a Complementary Metal Oxide Semiconductor (hereinafter referred to as "CMOS"), and converts an optical image formed on an imaging surface into an electrical signal. Camera 13 starts imaging in response to a control instruction to start imaging input by processor 11 or an imaging operation by the user. Camera 13 outputs the captured image to processor 11.

[0061] The monitor 14 is configured using, for example, a Liquid Crystal Display (hereinafter referred to as "LCD") or an organic electroluminescence (hereinafter referred to as "EL"). The monitor 14 outputs and displays the captured image captured by the camera 13 or various screens generated by the processor 11. When an alert to the user that an image of the fingertip will be captured is input from the processor 11, the monitor 14 displays the alert or outputs it as sound from a speaker (not shown).

[0062] The operation unit 15 may be provided integrally with or separately from the monitor 14, and may be a touch interface configured with a touch panel, a fingerprint sensor, or the like. The operation unit 15 can accept input operations by the user or a person other than the user, and outputs the contents of the input operation to the processor 11. The operation unit 15 outputs user information based on the input operation to the processor 11.

[0063] Furthermore, a plurality of operation units 15 may be provided in one terminal device P11, and may be any sensor capable of acquiring fingerprint ridges (concavities and depressions), etc. The operation unit 15 may be configured to acquire contactless or contact fingerprint data using any known technology, such as a capacitance system that acquires fingerprint data based on changes in the amount of charge, a heat-sensitive system that acquires fingerprint data based on temperature changes, an ultrasonic system that acquires fingerprint data based on the reception strength or reception accuracy of ultrasonic waves, a pressure-sensitive system that acquires fingerprint data based on changes in pressure, or an optical system that acquires the shadow of light irradiated on a fingerprint.

[0064] The fingerprint acquisition device P12 includes a communication unit 20, a processor 21, a memory 22, a camera 23, and a sensor 24. Note that the fingerprint acquisition device P12 in the first use case example may not include the sensor 24. The fingerprint acquisition device P12 in the second use case example may not include the camera 23. Furthermore, the fingerprint acquisition device P12 in the third use case example may only need to include either the camera 23 or the sensor 24.

[0065] The communication unit 20 is connected to the communication unit 30 of the server S11 via a network so as to be able to communicate wirelessly or via wire, and transmits and receives data. When registering fingerprint data, the communication unit 20 associates the user's fingerprint data generated by the processor 21 with the user's user information and additional information corresponding to the fingerprint data and transmits them to the server S11, and when performing biometric authentication, the communication unit 20 transmits the user's fingerprint data generated by the processor 21 and the additional information corresponding to the fingerprint data to the server S11. Note that the communication unit 20 may also associate finger information corresponding to the fingerprint data output from the processor 21 and transmit them to the server S11.

[0066] Here, the fingerprint acquisition device P12 may be connected to an external device (not shown) capable of receiving input operations from the user or a person other than the user so as to be able to transmit and receive data to and from the external device, and may acquire user information from the external device.

[0067] The processor 21 is configured using, for example, a CPU, FPGA, or GPU, and performs various processes and controls in cooperation with the memory 22. Specifically, the processor 21 references the programs and data stored in the memory 22 and executes the programs to realize the function of acquiring the user's fingerprint data (specifically, contactless fingerprint data or contact fingerprint data).

[0068] For example, when an application capable of acquiring fingerprint data is launched by an operation by a person in a store or company where the fingerprint acquisition device P12 is installed, the processor 21 generates and outputs a control instruction to cause the camera 23 or the sensor 24 to start capturing images.

[0069] When acquiring contactless fingerprint data using camera 23, processor 21 acquires the captured image output from camera 23 and detects at least one fingertip including the first joint from the captured image capturing the entire hand or at least one finger of the user. Processor 21 further detects a fingertip region including the tip to the first joint of at least one of the detected fingertips, and generates a fingerprint image by cutting out the fingertip region of any one of the detected fingertip regions. The finger for which the fingerprint image is generated may be any finger, or may be a pre-designated finger (for example, the middle finger, which is the easiest to image and has the largest surface area).

[0070] Processor 21 may perform image analysis on the generated fingerprint image to extract features that indicate the individuality of the user. Processor 21 may also detect which finger (e.g., middle finger or index finger) appears in the fingerprint image and generate finger information that indicates which finger appears in the fingerprint image.

[0071] Furthermore, when contactless fingerprint data is acquired using the sensor 24, the processor 21 acquires contact fingerprint data of the user based on the output result of the sensor 24. The finger placed on the sensor 24 may be any finger, or may be a pre-designated finger (for example, the middle finger, which has the largest area and is easy to image).

[0072] When registering fingerprint data, processor 21 generates a control command requesting registration of fingerprint data, associates the generated control command with user information acquired from an external device (not shown), and fingerprint data, outputs the associated control command to communication unit 20, and transmits the associated control command to server S11. Processor 21 may further associate finger information corresponding to the fingerprint data and transmit the associated control command to server S11. When processor 21 acquires the fingerprint data registration result from server S11, processor 21 may generate a notification screen (not shown) notifying the fingerprint data registration result, and output the notification screen to the external device (not shown) for display.

[0073] Furthermore, during biometric authentication, the processor 21 generates a control command requesting biometric authentication, associates the generated control command with fingerprint data, outputs the control command to the communication unit 20, and transmits it to the server S11. The processor 21 may further associate finger information corresponding to the fingerprint data and transmit it to the server S11. When the processor 21 acquires the biometric authentication result of the fingerprint data from the server S11, it may generate a notification screen (not shown) notifying the biometric authentication result of the fingerprint data, and output the notification screen to an external device (not shown) for display.

[0074] After transmitting the fingerprint data, the processor 21 deletes the fingerprint data or various data (e.g., fingerprint images) used to generate the fingerprint data. This enables the processor 21 to prevent the user's fingerprint data from being leaked and improve security.

[0075] The memory 22 includes, for example, a RAM as a work memory used when executing each process of the processor 21, and a ROM for storing programs and data that define the operation of the processor 21. The RAM temporarily stores data or information generated or acquired by the processor 21. The ROM has written therein programs that define the operation of the processor 21.

[0076] Camera 23 is configured to have at least a lens (not shown) and an image sensor (not shown). The image sensor is, for example, a CCD or CMOS solid-state imaging element, and converts an optical image formed on an imaging surface into an electrical signal. Camera 23 starts imaging in response to a control instruction to start imaging input by processor 21 or an imaging operation by the user. Camera 23 outputs the captured image to processor 21.

[0077] The sensor 24 is a sensor capable of acquiring fingerprint ridges (concave and convex) and the like, and outputs the acquired contact fingerprint data of the user to the processor 21. The sensor 24 may be configured to acquire non-contact fingerprint data using any known technology, such as a capacitance system, a heat-sensitive system, an ultrasonic system, a pressure-sensitive system, or an optical system.

[0078] The contact sensor P13 is a sensor capable of acquiring fingerprint ridges (concaves and depressions) from the user's placed fingertip, and may be configured to acquire non-contact fingerprint data using any known technology, such as a capacitance method, a thermal method, an ultrasonic method, a pressure-sensitive method, or an optical method.

[0079] The server S11 includes a communication unit 30, a processor 31, and a memory 32. The server S11 may be configured integrally with the contact fingerprint database DB11.

[0080] The communication unit 30 is connected to each of the terminal device P11, fingerprint acquisition device P12, contact sensor P13, and contact fingerprint database DB11 via a network so as to be able to communicate wirelessly or via wire, and executes transmission and reception of data. The communication unit 30 acquires fingerprint data (contact fingerprint data or contactless fingerprint data), user information, additional information, control commands, etc. from each of the terminal device P11, fingerprint acquisition device P12, and contact sensor P13, and outputs them to the processor 31. The communication unit 30 also transmits the registration result or biometric authentication result of the fingerprint data output from the processor 31 to the device corresponding to the fingerprint data (terminal device P11, fingerprint acquisition device P12, or contact sensor P13).

[0081] The processor 31 is configured using, for example, a CPU, FPGA, or GPU, and performs various processes and controls in cooperation with the memory 32. Specifically, the processor 31 references the programs and data stored in the memory 32 and executes the programs to realize the functions of each unit. The functions of each unit here are functions realized by the fingerprint data conversion unit 311, the fingerprint authentication unit 312, etc., such as a function to convert the user's fingerprint data (specifically, non-contact fingerprint data or contact fingerprint data) into contact fingerprint data, a function to register the converted contact fingerprint data in the contact fingerprint database DB11, a function to perform biometric authentication using the converted contact fingerprint data, etc.

[0082] The fingerprint data conversion unit 311 converts fingerprint data (contact fingerprint data or non-contact fingerprint data) transmitted from the terminal device P11 or fingerprint acquisition device P12, based on additional information associated with the fingerprint data, into contact fingerprint data that can be matched (for biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB11. During biometric authentication, the fingerprint data conversion unit 311 outputs the converted contact fingerprint data to the fingerprint authentication unit 312.

[0083] The fingerprint data conversion unit 311 determines that conversion of the fingerprint data is unnecessary when it determines, based on the acquired additional information, that the acquired fingerprint data is contact fingerprint data acquired by a dedicated device (for example, the contact sensor P13) that does not require conversion, or that the acquired fingerprint data can be collated (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB11. In such cases, the fingerprint data conversion unit 311 may omit the conversion process of the fingerprint data.

[0084] When registering fingerprint data, the fingerprint data conversion unit 311 associates the converted contact fingerprint data with user information and stores (registers) it in the contact fingerprint database DB11. The fingerprint data conversion unit 311 generates a registration result indicating that the registration was successful and transmits it to the corresponding device.

[0085] Here, when the fingerprint data conversion unit 311 acquires finger information from the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13, it associates the converted contact fingerprint data with the user information and the finger information, and stores (registers) them for each user in the contact fingerprint database DB11.

[0086] In addition, if the fingerprint data conversion unit 311 determines that contact fingerprint data associated with the same user information has already been registered in the contact fingerprint database DB11, it omits the registration process for the converted contact fingerprint data, generates a registration result indicating that registration has failed, and sends it to the corresponding device.

[0087] Furthermore, when there is contact fingerprint data already registered in the contact fingerprint database DB11, the fingerprint data conversion unit 311 may overwrite and register the converted contact fingerprint data to the registered contact fingerprint data. Furthermore, based on the finger information, the fingerprint data conversion unit 311 may execute overwriting registration when the registered contact fingerprint data is contact fingerprint data associated with the same finger information, and may additionally register the converted contact fingerprint data when the registered contact fingerprint data is contact fingerprint data associated with different finger information.

[0088] The fingerprint authentication unit 312 performs biometric authentication by comparing the converted contact fingerprint data output from the fingerprint data conversion unit 311 with each piece of contact fingerprint data registered in the contact fingerprint database DB11. When performing biometric authentication, the fingerprint authentication unit 312 compares (performs biometric authentication) the converted contact fingerprint data with each piece of contact fingerprint data registered in the contact fingerprint database DB11. If the fingerprint authentication unit 312 determines that contact fingerprint data identical to or similar to the converted contact fingerprint data is registered in the contact fingerprint database DB11, it generates a biometric authentication result indicating that the biometric authentication was successful, and if it determines that contact fingerprint data identical to or similar to the converted contact fingerprint data is not registered in the contact fingerprint database DB11, it generates a biometric authentication result indicating that the biometric authentication was unsuccessful and transmits the result to the device corresponding to the contact fingerprint data.

[0089] The memory 32 includes, for example, a RAM as a work memory used when the processor 31 executes each process, and a ROM for storing programs and data that define the operation of the processor 31. The RAM temporarily stores data or information generated or acquired by the processor 31. The ROM stores programs that define the operation of the processor 31.

[0090] The contact fingerprint database DB11 is a so-called storage, and is configured using a storage medium such as a flash memory, a hard disk drive (hereinafter referred to as "HDD"), or a solid state drive (hereinafter referred to as "SSD"). The contact fingerprint database DB11 stores (registers) and manages the contact fingerprint data and user information sent from the server S11 for each user. The contact fingerprint database DB11 may be configured integrally with the server S11.

[0091] In the above description, some explanations of cases where conversion processing of fingerprint data is not required are omitted. When conversion processing of fingerprint data is not required, the server S11 uses unconverted fingerprint data (contact fingerprint data) instead of converted fingerprint data to register the user's contact fingerprint data or to perform biometric authentication using the contact fingerprint data.

[0092] Next, an example of an operation procedure of the fingerprint authentication systems 100A to 100C according to the first to third use case examples will be described with reference to Fig. 5. Fig. 5 is a sequence diagram showing an example of an operation procedure of the fingerprint authentication systems 100A to 100C according to the first to third use case examples of the first embodiment.

[0093] The terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 acquires fingerprint data, which is contact fingerprint data or non-contact fingerprint data (St111). The terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 generates a control command requesting either fingerprint data registration or biometric authentication, associates the generated control command with additional information about the device itself, and the fingerprint data, and transmits the associated control command to the server S11 (St112).

[0094] When the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 requests registration of fingerprint data, it also associates the fingerprint data with user information and transmits the information to the server S11.

[0095] The server S11 determines whether or not conversion of the fingerprint data is necessary based on the additional information transmitted from the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 (St113).

[0096] If the server S11 determines in the processing of step St113 that conversion of the fingerprint data is necessary (St113, YES), it converts the fingerprint data into contact fingerprint data that can be compared (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB11 (St114).

[0097] On the other hand, if the server S11 determines in the processing of step St113 that conversion of the fingerprint data is not necessary (St113, NO), it omits the conversion processing of the fingerprint data. Note that the server S11 determines that conversion of the fingerprint data is not necessary if it determines, based on the acquired additional information, that the acquired fingerprint data is contact fingerprint data acquired by a predetermined device, or that the acquired fingerprint data is contact fingerprint data that can be compared (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB11.

[0098] The server S11 registers the user's contact fingerprint data or performs biometric authentication based on the control command sent from the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 (St115). The server S11 generates a registration result of the contact fingerprint data or a biometric authentication result using the contact fingerprint data, and transmits it to the device that acquired (sent) the fingerprint data (i.e., the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13) (St116).

[0099] Specifically, when the server S11 in step St115 acquires a control command requesting registration of the user's contact fingerprint data, it determines whether or not the contact fingerprint data has already been registered in the contact fingerprint database DB11, based on the user information associated with the fingerprint data. If the server S11 determines that the contact fingerprint data has not already been registered in the contact fingerprint database DB11, it associates the contact fingerprint data with the user information, stores (registers) the contact fingerprint data in the contact fingerprint database DB11, and generates a registration result indicating that the registration of the fingerprint data was successful. On the other hand, if the server S11 determines that the contact fingerprint data has already been registered in the contact fingerprint database DB11, it interrupts the registration of the contact fingerprint data and generates a registration result indicating that the registration of the fingerprint data failed.

[0100] The server S11 may determine, based on the user information and the finger information corresponding to the fingerprint data, whether or not the contact fingerprint data has already been registered in the contact fingerprint database DB11. In this case, the server S11 further determines whether or not contact fingerprint data having the same finger information has already been registered in the contact fingerprint database DB11.

[0101] Specifically, when the server S11 receives a control command requesting biometric authentication in step St115, it compares the contact fingerprint data with contact fingerprint data already registered in the contact fingerprint database DB11. If the server S11 determines that identical or similar contact fingerprint data is already registered in the contact fingerprint database DB11, it generates a biometric authentication result indicating that the biometric authentication is successful. On the other hand, if the server S11 determines that identical or similar contact fingerprint data is not already registered in the contact fingerprint database DB11, it generates a biometric authentication result indicating that the biometric authentication is unsuccessful.

[0102] The terminal device P11, fingerprint acquisition device P12, or contact sensor P13 acquires the registration result or biometric authentication result sent from the server S11, and outputs the acquired registration result or biometric authentication result to a monitor, speaker, external device (not shown), etc. (St117).

[0103] Note that the above-described steps St116 and St117 are not essential and may be omitted.

[0104] As described above, even if the shape of the fingerprint acquired as fingerprint data or the appearance of the unevenness of the fingerprint ridges, etc., differs due to differences in the method of acquiring fingerprint data, the device by which the fingerprint data is acquired, the process of generating fingerprint data, etc., the server S11 in the first embodiment can suppress a decrease in the authentication accuracy of biometric authentication by converting the acquired fingerprint data into contact fingerprint data that can be matched (for biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB11. Also, in each of the fingerprint authentication systems 100A to 100C according to the first embodiment, the device that acquires fingerprint data may be a general-purpose device or a dedicated device that can acquire fingerprint data suitable for fingerprint authentication, and further, contact fingerprint data that can be used for biometric authentication can be acquired and registered without limiting the method of acquiring fingerprint data.

[0105] (Embodiment 2) The fingerprint authentication systems 100A to 100C according to the first embodiment have shown an example in which fingerprint data (contact fingerprint data or non-contact fingerprint data) acquired and generated by an arbitrary acquisition method by each of the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 is converted into contact fingerprint data that can be matched (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB11. The fingerprint authentication system 200 according to the second embodiment will explain an example in which the fingerprint data is converted into contact fingerprint data that can be matched (biometric authentication) with contact fingerprint data collected by a device different from the server S21.

[0106] In the following description of the fingerprint authentication system 200 according to the second embodiment, the same components as those in the fingerprint authentication systems 100A to 100C according to the first embodiment are given the same reference numerals, and the description thereof will be omitted.

[0107] <Fourth Use Case Example> A fourth use case example corresponding to the fingerprint authentication system 200 according to the second embodiment will be described with reference to Fig. 6. Fig. 6 is a diagram showing the fourth use case example of the fingerprint authentication system 200 according to the second embodiment. In the fourth use case example, the terminal device P11 and the fingerprint acquisition device P12 are substantially the same as those in the first to third use case examples, so their description will be omitted and only different processing and configurations will be described.

[0108] The fingerprint authentication system 200 according to the second embodiment includes a terminal device P11, a fingerprint acquisition device P12, a server S21, a blacklist fingerprint database DB21, and a contact fingerprint database DB22. Note that the number of each of the terminal devices P11 and fingerprint acquisition devices P12 may be plural.

[0109] In the fourth use case example, the fingerprint authentication system 200 converts non-contact fingerprint data acquired by the terminal device P11 or the fingerprint acquisition device P12 into contact fingerprint data that can be matched (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB22 by the server S21, and matches it (biometric authentication) with the contact fingerprint data registered in the blacklist fingerprint database DB21.

[0110] If the fingerprint authentication system 200 determines as a result of the matching (biometric authentication) that contact fingerprint data identical or similar to the converted contact fingerprint data is registered in the blacklist fingerprint database DB21, it generates and outputs an alert that a person registered in the blacklist fingerprint database DB21 has been detected. If the fingerprint authentication system 200 determines as a result of the matching (biometric authentication) that contact fingerprint data identical or similar to the converted contact fingerprint data is not registered in the blacklist fingerprint database DB21, it stores (registers) the converted contact fingerprint data in the contact fingerprint database DB22, or matches (biometric authentication) the converted contact fingerprint data with contact fingerprint data registered in the contact fingerprint database DB22.

[0111] The terminal device P11 is connected to the server S21 via a network so as to be able to communicate data with the server S21. The terminal device P11 is equipped with a camera 13 (see FIG. 4) and acquires contactless fingerprint data of a user. The terminal device P11 transmits the acquired contactless fingerprint data to the server S21.

[0112] The fingerprint acquisition device P12 is connected to the server S21 via a network so that data can be communicated. The fingerprint acquisition device P12 is equipped with a camera 23 (see FIG. 4) and acquires contactless fingerprint data. The fingerprint acquisition device P12 transmits the acquired contactless fingerprint data to the server S21.

[0113] The server S21 is connected to the terminal device P11 and the fingerprint acquisition device P12 via a network so that data can be communicated between the server S21 and the terminal device P11 and the fingerprint acquisition device P12. The server S21 acquires contactless fingerprint data transmitted from the terminal device P11 and the fingerprint acquisition device P12.

[0114] The server S21 converts the acquired contactless fingerprint data into contact fingerprint data that can be compared (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB22. The server S21 compares the acquired contact fingerprint data with contact fingerprint data registered in the blacklist fingerprint database DB21.

[0115] If the server S21 determines that the converted contact fingerprint data is identical or similar to the contact fingerprint data registered in the blacklist fingerprint database DB21, it generates an alert and transmits it to the device corresponding to the converted contact fingerprint data. If the server S21 determines that the converted contact fingerprint data is not identical or similar to the contact fingerprint data registered in the blacklist fingerprint database DB21, it registers the converted contact fingerprint data and user information in the contact fingerprint database DB22, or compares the converted contact fingerprint data with the contact fingerprint data registered in the contact fingerprint database DB22 (biometric authentication).

[0116] The blacklist fingerprint database DB21 is a device (not shown) other than the server S21, and is managed by, for example, a security company, an airport, or the police, and stores (registers) contact fingerprint data of at least one user registered as a blacklist (detection target). The blacklist fingerprint database DB21 is connected to the server S21 so as to be able to send and receive data, and in order to detect users registered as a blacklist, only allows the server S21 to refer to (read) the contact fingerprint data during biometric authentication processing.

[0117] The contact fingerprint database DB22 is connected to the server S21 so that data can be sent and received, and allows the server S21 to store (register or write) the contact fingerprint data of at least one user, and allows the server S21 to reference (read) the contact fingerprint data during biometric authentication.

[0118] Next, referring to Fig. 7, a diagram showing an example of the internal configuration of the fingerprint authentication system 200 in a fourth use case example of the second embodiment will be shown. In the following description of the terminal device P11 and the fingerprint acquisition device P12, only configurations different from those described in Fig. 4 will be described, and a description of similar configurations will be omitted.

[0119] In the fourth use case example, the communication unit 10A of the terminal device P11 is connected to the communication unit 40 of the server S21 via a network so as to be able to communicate wirelessly or via wire, and transmits and receives data. The communication unit 10A associates the user's contactless fingerprint data generated by the processor 11 with the user information of the user and additional information corresponding to the contactless fingerprint data, and transmits them to the server S21. Note that the communication unit 10A may also associate finger information corresponding to the contactless fingerprint data output from the processor 11, and transmit them to the server S21.

[0120] The communication unit 20A of the fingerprint acquisition device P12 in the fourth use case example is connected to the communication unit 40 of the server S21 via a network so as to be able to communicate wirelessly or via wire, and executes data transmission and reception. The communication unit 20A associates the user's contactless fingerprint data generated by the processor 21 with the user information of the user and additional information corresponding to the contactless fingerprint data, and transmits them to the server S21. Note that the communication unit 20A may also associate finger information corresponding to the contactless fingerprint data output from the processor 21, and transmit them to the server S21.

[0121] Here, the sensor 24 may be omitted from the fingerprint acquisition device P12 in the fourth use case example.

[0122] The server S21 in the fourth use case example includes a communication unit 40, a processor 41, and a memory 42. Note that the server S21 may be configured integrally with the contact fingerprint database DB22.

[0123] The communication unit 40 is connected to the terminal device P11, the fingerprint acquisition device P12, the blacklist fingerprint database DB21, and the contact fingerprint database DB22 via a network so as to be capable of wireless or wired communication, and transmits and receives data.

[0124] The communication unit 40 acquires contactless fingerprint data from either the terminal device P11 or the fingerprint acquisition device P12, and outputs the acquired contactless fingerprint data to the processor 41. The communication unit 40 also transmits the registration result or biometric authentication result of the fingerprint data output from the processor 41 to the device corresponding to the acquired fingerprint data (the terminal device P11 or the fingerprint acquisition device P12).

[0125] In biometric authentication, the communication unit 40 reads at least one piece of contact fingerprint data registered in the blacklist fingerprint database DB21 and outputs it to the processor 41. In registering fingerprint data, the communication unit 40 outputs the contact fingerprint data output from the processor 41 and user information to the contact fingerprint database DB22 for storage (registration or writing).

[0126] The processor 41 is configured using, for example, a CPU, FPGA, or GPU, and performs various processes and controls in cooperation with the memory 42. Specifically, the processor 41 references the programs and data stored in the memory 42 and executes the programs to realize the functions of each unit. Note that the functions of each unit here are functions realized by the fingerprint data conversion unit 411, the fingerprint authentication unit 412, etc., such as a function to convert the user's contactless fingerprint data into contact fingerprint data, a function to use the converted contact fingerprint data to compare it with contact fingerprint data registered in the blacklist fingerprint database DB21 (biometric authentication), a function to register the converted contact fingerprint data in the contact fingerprint database DB22, or to perform biometric authentication, etc.

[0127] The fingerprint data conversion unit 411 converts the contactless fingerprint data transmitted from the terminal device P11 or the fingerprint acquisition device P12, based on the additional information, into contact fingerprint data that can be compared (biometric authentication) with the contact fingerprint data registered in the blacklist fingerprint database DB21. The fingerprint data conversion unit 411 outputs the converted contact fingerprint data to the fingerprint authentication unit 412.

[0128] The fingerprint authentication unit 412 compares (biometric authentication) the converted contact fingerprint data output from the fingerprint data conversion unit 411 with each of the contact fingerprint data registered in the blacklist fingerprint database DB21, and detects people registered on the blacklist.

[0129] If the fingerprint authentication unit 412 determines that contact fingerprint data identical to or similar to the converted contact fingerprint data is registered in the blacklist fingerprint database DB21, it generates an alert to the effect that a person registered in the blacklist fingerprint database DB21 has been detected. If the fingerprint authentication unit 412 determines, based on the biometric authentication result, that contact fingerprint data identical to or similar to the converted contact fingerprint data is not registered in the blacklist fingerprint database DB21, it registers the converted contact fingerprint data used for the biometric authentication in the contact fingerprint database DB22, or compares the converted contact fingerprint data used for the biometric authentication with the contact fingerprint data registered in the contact fingerprint database DB22 (biometric authentication).

[0130] In registering contact fingerprint data, the fingerprint authentication unit 412 determines whether contact fingerprint data associated with the same user information has already been registered in the contact fingerprint database DB22.

[0131] If the fingerprint authentication unit 412 determines that contact fingerprint data associated with the same user information has not already been registered in the contact fingerprint database DB22, it associates the converted contact fingerprint data with the user information and stores (registers) it in the contact fingerprint database DB22. Note that, when the fingerprint data conversion unit 411 acquires finger information from the terminal device P11 or the fingerprint acquisition device P12, it may associate the converted contact fingerprint data with the finger information and store (register) it for each user in the contact fingerprint database DB22.

[0132] If the fingerprint authentication unit 412 determines that contact fingerprint data associated with the same user information has already been registered, it omits the registration process for the contact fingerprint data and generates a registration result indicating that registration has failed and sends it to the corresponding device.

[0133] Furthermore, if there is contact fingerprint data already registered in the contact fingerprint database DB22, the fingerprint authentication unit 412 may overwrite and register the converted contact fingerprint data onto the registered contact fingerprint data. Furthermore, based on the finger information, the fingerprint authentication unit 412 may execute overwriting registration if the registered contact fingerprint data is contact fingerprint data associated with the same finger information, and may additionally register the converted contact fingerprint data if the registered contact fingerprint data is contact fingerprint data associated with different finger information.

[0134] Furthermore, in performing biometric authentication, the fingerprint authentication unit 412 compares (biometric authentication) the converted contact fingerprint data with each of the contact fingerprint data registered in the contact fingerprint database DB22. If the fingerprint authentication unit 412 determines that contact fingerprint data identical to or similar to the converted contact fingerprint data is registered in the contact fingerprint database DB22, it generates a biometric authentication result indicating that the biometric authentication was successful, and if it determines that contact fingerprint data identical to or similar to the converted contact fingerprint data is not registered in the contact fingerprint database DB22, it generates a biometric authentication result indicating that the biometric authentication was unsuccessful and transmits it to the device corresponding to the contact fingerprint data.

[0135] The memory 42 includes, for example, a RAM as a work memory used when the processor 41 executes each process, and a ROM for storing programs and data that define the operation of the processor 41. The RAM temporarily stores data or information generated or acquired by the processor 41. The ROM stores programs that define the operation of the processor 41.

[0136] The blacklist fingerprint database DB21 is a so-called storage, and is configured using a storage medium such as a flash memory, HDD, or SSD.

[0137] The contact fingerprint database DB22 is a so-called storage, and is configured using a storage medium such as a flash memory, HDD, or SSD. The contact fingerprint database DB22 stores (registers) and manages the contact fingerprint data and user information sent from the server S21 for each user. The contact fingerprint database DB22 may be configured integrally with the server S21.

[0138] Next, an example of an operation procedure of the fingerprint authentication system 200 according to the fourth use case example will be described with reference to Fig. 8. Fig. 8 is a sequence diagram showing an example of an operation procedure of the fingerprint authentication system 200 according to the fourth use case example of the second embodiment.

[0139] The terminal device P11 or the fingerprint acquisition device P12 acquires contactless fingerprint data as fingerprint data (St211). The terminal device P11 or the fingerprint acquisition device P12 generates a control command requesting registration of fingerprint data and biometric authentication, associates the generated control command with additional information about the device itself and the contactless fingerprint data, and transmits them to the server S21 (St212).

[0140] Based on the additional information sent from the terminal device P11 or the fingerprint acquisition device P12, the server S21 converts the acquired contactless fingerprint data into contact fingerprint data that can be compared with the contact fingerprint data registered in the blacklist fingerprint database DB21 (St213).

[0141] The server S21 compares the converted contact fingerprint data with the contact fingerprint data registered in the blacklist fingerprint database DB21 (St215).

[0142] In the process of step St215, if the server S21 determines that the contact fingerprint data registered in the blacklist fingerprint database DB21 contains contact fingerprint data that is identical to or similar to the converted contact fingerprint data (St215, YES), the server S21 generates an alert to the effect that a person registered in the blacklist fingerprint database DB21 has been detected (St216). The server S21 transmits the generated alert to the device that is the sender of the contactless fingerprint data (St218).

[0143] The server S21 generates a registration result or a biometric authentication result for the contact fingerprint data and transmits it to the device that is the sender of the contactless fingerprint data (i.e., the terminal device P11 or the fingerprint acquisition device P12) (St218). Note that the server S21 may associate the registration result or the biometric authentication result for the contact fingerprint data with a biometric authentication result indicating that the user registered in the blacklist fingerprint database DB21 is not detected and transmit it to the device that is the sender of the contactless fingerprint data.

[0144] On the other hand, if the server S21 determines in the processing of step St215 that there is no identical or similar contact fingerprint data registered in the blacklist fingerprint database DB21 (St215, NO), it performs registration or biometric authentication of the converted contact fingerprint data (St217).

[0145] The terminal device P11 or the fingerprint acquisition device P12 acquires the alert, registration result, or biometric authentication result sent from the server S21, and outputs the acquired alert, registration result, or biometric authentication result to a monitor, speaker (not shown), external device (not shown), etc. (St219).

[0146] As described above, the server S21 in the second embodiment can suppress a decrease in the authentication accuracy of biometric authentication not only when the appearance of the fingerprint shape or the unevenness of the fingerprint ridges acquired as fingerprint data differs due to differences in the method of acquiring fingerprint data, the device by which the fingerprint data is acquired, or the process of generating the fingerprint data, but also when the algorithm used for biometric authentication is different, or when biometric authentication is performed using a database in which fingerprint data is registered (blacklist fingerprint database DB21 or contact fingerprint database DB22) by a device or server (not shown) different from the server S21.

[0147] Furthermore, in the fingerprint authentication system 200 according to the second embodiment, the device that acquires fingerprint data may be a general-purpose device or a dedicated device that can acquire fingerprint data suitable for fingerprint authentication, and furthermore, biometric authentication can be performed without limiting the method of acquiring fingerprint data.

[0148] (Embodiment 3) The fingerprint authentication systems 100A to 100C, 200 according to the first and second embodiments have shown examples in which fingerprint data acquired or generated by any device or any acquisition method is converted into contact fingerprint data to be used for each biometric authentication performed by the servers S11, S21. The fingerprint authentication system 300A according to the third embodiment will be described as an example in which fingerprint data acquired by a predetermined fingerprint acquisition device P32 is converted into fingerprint data that can be used for biometric authentication performed by different first and second servers.

[0149] In addition, in the following description of the fingerprint authentication system 300A according to the third embodiment, the same components as those in the fingerprint authentication systems 100A to 100C, 200 according to the first and second embodiments are given the same reference numerals, and the description thereof will be omitted.

[0150] <Fifth Use Case Example> A fifth use case example corresponding to the fingerprint authentication system 300A according to the third embodiment will be described with reference to Fig. 9. Fig. 9 is a diagram showing the fifth use case example of the fingerprint authentication system 300A according to the third embodiment.

[0151] The fingerprint authentication system 300A according to the third embodiment includes an operation terminal P31, a fingerprint acquisition device P32, a first server S31, a second server S32, a contact fingerprint database DB31, and a blacklist fingerprint database DB32. Note that there may be a plurality of operation terminals P31 and a plurality of fingerprint acquisition devices P32. The operation terminal P31 and the first server S31 may be integrally configured.

[0152] The fingerprint authentication system 300A in the fifth use case example acquires a user's fingerprint data (contact fingerprint data or non-contact fingerprint data) by the fingerprint acquisition device P32 based on the operation of the operation terminal P31 by the person acquiring the fingerprint data. The fingerprint authentication system 300A converts the fingerprint data acquired by the fingerprint acquisition device P32 by the first server S31 into first contact fingerprint data that can be matched (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB31, and second contact fingerprint data that can be matched (biometric authentication) with contact fingerprint data registered in the blacklist fingerprint database DB32.

[0153] In the fingerprint authentication system 300A, in registering fingerprint data, the first server S31 stores (registers) the first contact fingerprint data in the contact fingerprint database DB31, and the second server S32 stores (registers) the second contact fingerprint data in the blacklist fingerprint database DB32.

[0154] In addition, when performing biometric authentication, the fingerprint authentication system 300A has the first server S31 compare the first contact fingerprint data with the contact fingerprint data registered in the contact fingerprint database DB31 (biometric authentication), and the second server S32 compare the second contact fingerprint data with the contact fingerprint data registered in the blacklist fingerprint database DB32 (biometric authentication).

[0155] The operation terminal P31 is connected to the fingerprint acquisition device P32 and the first server S31 via a network so that data can be communicated between them. The operation terminal P31 can accept an input operation by a person who performs an operation to acquire fingerprint data of a user (for example, a person at a store, company, or facility where the operation terminal P31 is installed), and generates a control command corresponding to the input operation and transmits it to the fingerprint acquisition device P32.

[0156] The fingerprint acquisition device P32 is a dedicated device for acquiring fingerprint data used in biometric authentication, and is installed in stores, companies, facilities, etc. that use biometric authentication. The fingerprint acquisition device P32 starts the fingerprint data acquisition process based on a control command transmitted from the operation terminal P31. The fingerprint acquisition device P32 associates the acquired fingerprint data with additional information corresponding to the fingerprint data and transmits them to the first server S31.

[0157] Based on the additional information transmitted from the fingerprint acquisition device P32, the first server S31 converts the acquired contactless fingerprint data into first contact fingerprint data that can be matched (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB31. Also, based on the additional information transmitted from the fingerprint acquisition device P32, the first server S31 converts the acquired contactless fingerprint data into second contact fingerprint data that can be matched (biometric authentication) with the contact fingerprint data registered in the blacklist fingerprint database DB32.

[0158] The first contact fingerprint data and the second contact fingerprint data may be the same contact fingerprint data or may be different contact fingerprint data.

[0159] In registering fingerprint data, the first server S31 associates the converted first contact fingerprint data with user information and stores (registers) the data in the contact fingerprint database DB31.

[0160] In performing biometric authentication, the first server S31 compares the acquired first contact fingerprint data with contact fingerprint data registered in the contact fingerprint database DB31 to perform biometric authentication.

[0161] In registering fingerprint data, the second server S32 acquires the converted second contact fingerprint data transmitted from the first server S31, associates the acquired second contact fingerprint data with user information, and stores (registers) it in the blacklist fingerprint database DB32.

[0162] When performing biometric authentication, the second server S32 acquires the converted second contact fingerprint data sent from the first server S31, and performs biometric authentication by comparing the acquired second contact fingerprint data with the contact fingerprint data registered in the blacklist fingerprint database DB32.

[0163] The contact fingerprint database DB31 is connected to the first server S31 so that data can be sent and received, and allows the first server S31 to store (register or write) contact fingerprint data of at least one user (i.e., first contact fingerprint data) and to refer to (read) the contact fingerprint data during biometric authentication.

[0164] The blacklist fingerprint database DB32 is connected to the second server S32 so that data can be sent and received, and allows the second server S32 to store (register or write) contact fingerprint data of at least one user (i.e., second contact fingerprint data) and to refer to (read) the contact fingerprint data during biometric authentication.

[0165] Next, an example of the internal configuration of the fingerprint authentication system 300A in the fifth use case example of the third embodiment will be described with reference to Fig. 10. Fig. 10 is a diagram showing an example of the internal configuration of the fingerprint authentication system 300A in the fifth use case example of the third embodiment. Note that the configuration of the fingerprint acquisition device P32 described below is substantially similar to that of the fingerprint acquisition device P12 described in Fig. 4, so only the different configuration will be described and a description of the similar configuration will be omitted.

[0166] The operation terminal P31 includes a communication unit 50, a processor 51, a memory 52, and a monitor 53.

[0167] The communication unit 50 is connected to the communication unit 20B of the fingerprint acquisition device P32 and the communication unit 60 of the first server S31 via a network so that they can communicate wirelessly or via wire, and transmits and receives data. The communication unit 50 transmits control commands or user information generated by the processor 51 to the fingerprint acquisition device P32. The communication unit 50 also outputs alerts, fingerprint data registration results, or biometric authentication results transmitted from the first server S31 to the processor 51.

[0168] The processor 51 is configured using, for example, a CPU, FPGA, or GPU, and performs various processes and controls in cooperation with the memory 52. ​​Specifically, the processor 51 references the programs and data stored in the memory 52 and executes the programs to realize each function.

[0169] The processor 51 generates a control command that requests the fingerprint acquisition device P32 to acquire fingerprint data in response to the input operation content output from the operation unit 54. The processor 51 also generates user information based on the input operation content output from the operation unit 54. The processor 51 outputs the generated control command or user information to the communication unit 50, causing it to be transmitted to the fingerprint acquisition device P32. The processor 51 also generates an alert or notification screen (not shown) based on the fingerprint data registration result or biometric authentication result transmitted from the first server S31, and outputs it to the monitor 53.

[0170] The memory 52 includes, for example, a RAM as a work memory used when the processor 51 executes each process, and a ROM for storing programs and data that define the operation of the processor 51. The RAM temporarily stores data or information generated or acquired by the processor 51. The ROM stores programs that define the operation of the processor 51.

[0171] The monitor 53 is configured using, for example, an LCD or an organic EL display. The monitor 53 outputs and displays a notification screen (not shown) based on the fingerprint data registration result or biometric authentication result generated by the processor 51.

[0172] The operation unit 54 may be provided integrally with or separately from the monitor 53, and may be a touch interface configured with a touch panel, a fingerprint sensor, or the like. The operation unit 54 is capable of accepting operations on the operation terminal P31 by the person acquiring fingerprint data, and outputs the contents of the input operation to the processor 51. The operation unit 54 outputs user information based on the input operation to the processor 51.

[0173] The fingerprint acquisition device P32 includes a communication unit 20B, a processor 21, a memory 22, a camera 23, and a sensor 24. Note that the fingerprint acquisition device P32 in the fifth use case example may be configured to include at least one of the camera 23 or the sensor 24.

[0174] The communication unit 20B is connected to the communication unit 50 of the operation terminal P31 and the communication unit 60 of the first server S31 via a network so as to be able to communicate wirelessly or via wire, and transmits and receives data. When registering fingerprint data, the communication unit 20B associates the user's fingerprint data generated by the processor 21 with additional information corresponding to the fingerprint data and user information of the user and transmits them to the first server S31, and when performing biometric authentication, the communication unit 20B associates the user's fingerprint data generated by the processor 21 with the additional information corresponding to the fingerprint data and transmits them to the first server S31.

[0175] The first server S31 includes a communication unit 60, a processor 61, and a memory 62. The first server S31 may be configured integrally with the contact fingerprint database DB31.

[0176] The communication unit 60 is connected to the operation terminal P31, the fingerprint acquisition device P32, the contact fingerprint database DB31, and the second server S32 via a network so as to be capable of wireless or wired communication, and transmits and receives data.

[0177] The communication unit 60 acquires control commands, fingerprint data (contact fingerprint data or non-contact fingerprint data), additional information corresponding to the fingerprint data, user information, etc. transmitted from the fingerprint acquisition device P32, and outputs them to the processor 61. The communication unit 60 transmits the fingerprint data registration result or biometric authentication result transmitted from the second server S32 to the operation terminal P31.

[0178] The communication unit 60 also transmits the control command and the second contact fingerprint data output from the processor 61 to the second server S32. The communication unit 60 also transmits the fingerprint data registration result or the biometric authentication result output from the processor 61 and executed by the processor 61 and the processor 71, respectively, to the operating terminal P31.

[0179] The processor 61 is configured using, for example, a CPU, FPGA, or GPU, and performs various processes and controls in cooperation with the memory 62. Specifically, the processor 61 references the programs and data stored in the memory 62 and executes the programs to realize the functions of each unit. The functions of each unit referred to here are functions realized by the fingerprint data conversion unit 611, the fingerprint authentication unit 612, etc., such as a function to convert the user's fingerprint data (specifically, non-contact fingerprint data or contact fingerprint data) into first contact fingerprint data and second contact fingerprint data, respectively, a function to register the converted first contact fingerprint data in the contact fingerprint database DB31, and a function to perform biometric authentication using the converted first contact fingerprint data.

[0180] The fingerprint data conversion unit 611 converts the fingerprint data (contact fingerprint data or non-contact fingerprint data) transmitted from the fingerprint acquisition device P32 into first contact fingerprint data and second contact fingerprint data based on the additional information. The fingerprint data conversion unit 611 outputs the converted first contact fingerprint data to the fingerprint authentication unit 612, and outputs the converted second contact fingerprint data to the communication unit 60, which transmits them to the second server S32.

[0181] When registering fingerprint data, the fingerprint data conversion unit 611 associates the converted first contact fingerprint data with user information and stores (registers) them in the contact fingerprint database DB31. The fingerprint data conversion unit 611 generates a registration result indicating successful registration and transmits it to the operating terminal P31. When the fingerprint data conversion unit 611 acquires finger information corresponding to the fingerprint data from the fingerprint acquisition device P32, it associates the converted first contact fingerprint data with the finger information and stores (registers) them for each user in the contact fingerprint database DB31.

[0182] If the fingerprint data conversion unit 611 determines that contact fingerprint data associated with the same user information has already been registered in the contact fingerprint database DB31, it omits the registration process for the converted first contact fingerprint data, generates a registration result indicating that registration has failed, and sends it to the operating terminal P31.

[0183] Furthermore, when there is contact fingerprint data already registered in the contact fingerprint database DB31, the fingerprint data conversion unit 611 may overwrite and register the converted first contact fingerprint data over the registered contact fingerprint data. Furthermore, based on the finger information, the fingerprint data conversion unit 611 may execute overwrite registration when the registered contact fingerprint data is contact fingerprint data associated with the same finger information, and may additionally register the converted first contact fingerprint data when the registered contact fingerprint data is contact fingerprint data associated with different finger information.

[0184] In performing biometric authentication, the fingerprint authentication unit 612 performs biometric authentication by comparing the converted first contact fingerprint data output from the fingerprint data conversion unit 611 with each of the contact fingerprint data registered in the contact fingerprint database DB31. If the fingerprint authentication unit 612 determines that contact fingerprint data identical to or similar to the converted first contact fingerprint data is registered in the contact fingerprint database DB31, it generates a biometric authentication result indicating that the biometric authentication was successful, and if it determines that contact fingerprint data identical to or similar to the converted first contact fingerprint data is not registered in the contact fingerprint database DB31, it generates a biometric authentication result indicating that the biometric authentication was unsuccessful and transmits it to the operation terminal P31.

[0185] The memory 62 includes, for example, a RAM as a work memory used when the processor 61 executes each process, and a ROM for storing programs and data that define the operation of the processor 61. The RAM temporarily stores data or information generated or acquired by the processor 61. The ROM has written therein programs that define the operation of the processor 61.

[0186] The contact fingerprint database DB31 is a so-called storage, and is configured using a storage medium such as a flash memory, HDD, or SSD. The contact fingerprint database DB31 stores (registers) and manages the first contact fingerprint data and user information transmitted from the first server S31 for each user. The contact fingerprint database DB31 may be configured integrally with the first server S31.

[0187] The second server S32 includes a communication unit 70, a processor 71, and a memory 72. The second server S32 may be configured integrally with the blacklist fingerprint database DB32.

[0188] The communication unit 70 is connected to the first server S31 and the blacklist fingerprint database DB32 via a network so as to be capable of wireless or wired communication, and executes transmission and reception of data.

[0189] The communication unit 70 acquires control commands, fingerprint data (contact fingerprint data or non-contact fingerprint data), or user information transmitted from the first server S31, and outputs them to the processor 71. The communication unit 70 also transmits the fingerprint data registration result or biometric authentication result output from the processor 71 to the operating terminal P31.

[0190] The processor 71 is configured using, for example, a CPU, FPGA, or GPU, and performs various processes and controls in cooperation with the memory 72. Specifically, the processor 71 references the programs and data stored in the memory 72 and executes the programs to realize the functions of each unit. Note that the functions of each unit here are functions realized by the fingerprint authentication unit 711, fingerprint registration unit 712, etc., such as a function to perform biometric authentication using second contact fingerprint data, a function to register second contact fingerprint data in the blacklist fingerprint database DB32, etc.

[0191] In registering fingerprint data, the processor 71 associates the converted second contact fingerprint data with user information and stores (registers) them in the blacklist fingerprint database DB32. The processor 71 generates a registration result indicating successful registration and transmits it to the first server S31. When the processor 71 acquires finger information corresponding to the second contact fingerprint data from the first server S31, the processor 71 associates the converted second contact fingerprint data with the finger information and stores (registers) them for each user in the blacklist fingerprint database DB32.

[0192] If the processor 71 determines that contact fingerprint data associated with the same user information has already been registered in the blacklist fingerprint database DB32, it omits the registration process for the converted second contact fingerprint data and generates a registration result indicating that registration has failed and sends it to the first server S31.

[0193] Furthermore, when there is contact fingerprint data already registered in the blacklist fingerprint database DB32, the processor 71 may overwrite and register the converted second contact fingerprint data over the registered contact fingerprint data. Furthermore, based on the finger information, the fingerprint registration unit 712 may execute overwriting registration when the registered contact fingerprint data is contact fingerprint data associated with the same finger information, and may additionally register the converted second contact fingerprint data when the registered contact fingerprint data is contact fingerprint data associated with different finger information.

[0194] The fingerprint authentication unit 711 performs biometric authentication by comparing the converted second contact fingerprint data sent from the first server S31 with each of the contact fingerprint data registered in the blacklist fingerprint database DB32. The fingerprint authentication unit 711 generates a biometric authentication result and sends it to the first server S31.

[0195] The fingerprint authentication unit 711 compares (biometric authentication) the converted second contact fingerprint data with each of the contact fingerprint data registered in the blacklist fingerprint database DB32, and detects people registered on the blacklist.

[0196] If the fingerprint authentication unit 711 determines that contact fingerprint data identical to or similar to the converted second contact fingerprint data is registered in the blacklist fingerprint database DB32, it generates an alert to the effect that a person registered in the blacklist fingerprint database DB32 has been detected, and transmits the alert to the first server S31. If the fingerprint authentication unit 711 determines, based on the biometric authentication result, that contact fingerprint data identical to or similar to the converted second contact fingerprint data is not registered in the blacklist fingerprint database DB32, it generates a biometric authentication result to the effect that the biometric authentication has failed (i.e., a person registered in the blacklist fingerprint database DB32 has not been detected), and transmits the biometric authentication result to the first server S31.

[0197] In registering fingerprint data, the fingerprint registration unit 712 associates the converted second contact fingerprint data with user information and stores (registers) them in the blacklist fingerprint database DB32. The fingerprint registration unit 712 generates a registration result indicating successful registration and transmits it to the first server S31. When the fingerprint registration unit 712 acquires finger information corresponding to fingerprint data from the first server S31, the fingerprint registration unit 712 associates the converted second contact fingerprint data with the finger information and stores (registers) them for each user in the blacklist fingerprint database DB32.

[0198] If the fingerprint registration unit 712 determines that contact fingerprint data associated with the same user information has already been registered in the blacklist fingerprint database DB32, it omits the registration process of the converted second contact fingerprint data and generates a registration result indicating that registration has failed and sends it to the first server S31.

[0199] Furthermore, if there is contact fingerprint data already registered in the blacklist fingerprint database DB32, the fingerprint registration unit 712 may overwrite and register the converted second contact fingerprint data over the registered contact fingerprint data. Furthermore, based on the finger information, the fingerprint registration unit 712 may execute overwrite registration if the registered contact fingerprint data is contact fingerprint data associated with the same finger information, and may additionally register the converted second contact fingerprint data if the registered contact fingerprint data is contact fingerprint data associated with different finger information.

[0200] The memory 72 includes, for example, a RAM as a work memory used when the processor 71 executes each process, and a ROM for storing programs and data that define the operation of the processor 71. The RAM temporarily stores data or information generated or acquired by the processor 71. The ROM has written therein programs that define the operation of the processor 71.

[0201] The blacklist fingerprint database DB32 is a so-called storage, and is configured using a storage medium such as a flash memory, HDD, or SSD. The blacklist fingerprint database DB32 stores (registers) and manages the contact fingerprint data (second contact fingerprint data) and user information transmitted from the first server S31 for each user. The blacklist fingerprint database DB32 may be configured integrally with the second server S32.

[0202] Next, an example of an operation procedure of the fingerprint authentication system 300A according to the fifth use case example will be described with reference to Fig. 11. Fig. 11 is a sequence diagram showing an example of an operation procedure of the fingerprint authentication system 300A according to the fifth use case example of the third embodiment.

[0203] 11, an example in which fingerprint data registration or biometric authentication performed by the first server S31 is not essential will be described, but the present invention is not limited to this. Furthermore, the explanation of Fig. 11 omits an example in which fingerprint data conversion processing is not required. When fingerprint data conversion processing is not required, the first server S31 or the second server S32 uses unconverted fingerprint data (contact fingerprint data or non-contact fingerprint data) to register the user's contact fingerprint data or to perform biometric authentication using the contact fingerprint data.

[0204] Based on an input operation by a person who acquires fingerprint data, the operation terminal P31 generates a control command including a request to the fingerprint acquisition device P32 to acquire fingerprint data and a request to execute either fingerprint data registration or biometric authentication. The operation terminal P31 transmits the generated control command to the fingerprint acquisition device P32 (St311). When requesting fingerprint data registration, the operation terminal P31 accepts input of user information and transmits the control command in association with the user information of the input user.

[0205] The fingerprint acquisition device P32 acquires the user's fingerprint data (contactless fingerprint data or contact fingerprint data) using a predetermined acquisition method based on the control command transmitted from the operation terminal P31 (St312). The fingerprint acquisition device P32 generates a control command requesting either registration of the acquired user's fingerprint data or biometric authentication, associates the generated control command with the fingerprint data and additional information, and transmits them to the first server S31 (St313). When requesting registration of fingerprint data, the fingerprint acquisition device P32 further associates and transmits (transfers) the user information acquired from the operation terminal P31.

[0206] The first server S31 acquires the fingerprint data and the additional information transmitted from the fingerprint acquisition device P32 (St314). The first server S31 determines whether or not conversion of the fingerprint data is necessary based on the additional information (St315).

[0207] If the first server S31 determines in the processing of step St315 that conversion of the fingerprint data is necessary (St315, YES), it converts the acquired fingerprint data into first contact fingerprint data that can be matched (biometric authentication) with fingerprint data registered in the contact fingerprint database DB31, and second contact fingerprint data that can be matched (biometric authentication) with fingerprint data registered in the blacklist fingerprint database DB32 (St316). Note that if the first server S31 determines that conversion to fingerprint data corresponding to either the contact fingerprint database DB31 or the blacklist fingerprint database DB32 is unnecessary, it may only execute the conversion process to either of the contact fingerprint data that is determined to require conversion (i.e., the first contact fingerprint data or the second contact fingerprint data).

[0208] On the other hand, when the first server S31 determines in the process of step St315 that conversion of the fingerprint data is not necessary (St315, NO), it omits the conversion process of the fingerprint data.

[0209] The first server S31 associates the converted second contact fingerprint data with a control command requesting either registration or authentication of the user's fingerprint data, and transmits the data to the second server S32 (St317).

[0210] The second server S32 acquires the second contact fingerprint data transmitted from the first server S31 (St318). Based on the control command, the second server S32 executes a registration process for registering the second contact fingerprint data and user information in the blacklist fingerprint database DB32, or a biometric authentication process for matching the second contact fingerprint data with at least one fingerprint data registered in the blacklist fingerprint database DB32 (St319). The second server S32 generates a registration result or an authentication result for the acquired second contact fingerprint data and transmits it to the first server S31 (St320).

[0211] The first server S31 transmits the registration result or authentication result of the second contact fingerprint data transmitted from the second server S32 to the operating terminal P31 that is the source of transmission (acquisition) of the fingerprint data (St322).

[0212] In addition, the first server S31 performs a registration process to register the first contact fingerprint data and user information in the contact fingerprint database DB31, or a biometric authentication process to compare the first contact fingerprint data with at least one fingerprint data registered in the contact fingerprint database DB31 (St323).

[0213] The first server S31 generates a registration result or a biometric authentication result of the first contact fingerprint data and transmits it to the operating terminal P31 (St324).

[0214] In addition, in the processing of step St321, if the authentication result of the acquired second contact fingerprint data indicates that there is fingerprint data in the blacklist fingerprint database DB32 that matches the second contact fingerprint data (i.e., the user is a person registered on the blacklist), the first server S31 may omit the processing of each of steps St323 to St324.

[0215] The operation terminal P31 outputs the registration result or the biometric authentication result of the second contact fingerprint data corresponding to the blacklist fingerprint database DB32 transmitted from the first server S31 to a monitor, a speaker (not shown), an external device (not shown), etc. (St325). Also, the operation terminal P31 outputs the registration result or the biometric authentication result of the first contact fingerprint data corresponding to the contact fingerprint database DB31 transmitted from the first server S31 to a monitor, a speaker (not shown), an external device (not shown), etc. (St325).

[0216] As described above, the first server S31 in embodiment 3 can suppress a decrease in the authentication accuracy of the biometric authentication performed by each of the first server S31 and the second server S32 by converting the fingerprint data acquired by the fingerprint acquisition device P32 into contact fingerprint data that can be compared with fingerprint data registered in the contact fingerprint database DB31 and the blacklist fingerprint database DB32, which are managed by different stores, facilities, or companies.

[0217] This also enables the first server S31 in the third embodiment to perform multiple different biometric authentications using a single piece of fingerprint data acquired by the fingerprint acquisition device P32. For example, when an airport inspector acquires fingerprint data of an entrant (user), the first server S31 can convert the acquired single piece of fingerprint data to register the fingerprint data in a contact fingerprint database managed by the airport and to perform biometric authentication (detection of blacklisted persons) by comparing the data with a blacklist fingerprint database managed by the police of the destination country. Also, for example, the first server S31 can convert the acquired single piece of fingerprint data to perform biometric authentication (identity authentication) by comparing the data with a contact fingerprint database managed by the airport and to perform biometric authentication (detection of blacklisted persons) by comparing the data with a blacklist fingerprint database managed by the police of the destination country.

[0218] <Sixth Use Case Example> A sixth use case example corresponding to the fingerprint authentication system 300B according to the embodiment 3 will be described with reference to Fig. 12. Fig. 12 is a diagram showing the sixth use case example of the fingerprint authentication system 300B according to the embodiment 3. In the description of the sixth use case example, the same components as those in the fifth use case example are given the same reference numerals, and the description thereof will be omitted.

[0219] The fingerprint authentication system 300B includes an operation terminal P31A, a fingerprint acquisition device P32A, a first server S31A, a second server S32A, a contact fingerprint database DB31, and a blacklist fingerprint database DB32. Note that there may be more than one operation terminal P31A and more than one fingerprint acquisition device P32A.

[0220] The fingerprint authentication system 300B in the sixth use case example acquires a user's fingerprint data (contact fingerprint data or non-contact fingerprint data) using a fingerprint acquisition device P32A. The fingerprint authentication system 300B converts the fingerprint data acquired by the fingerprint acquisition device P32A into first contact fingerprint data and second contact fingerprint data using a first server S31A, and performs registration of the first contact fingerprint data or biometric authentication.

[0221] Furthermore, the fingerprint authentication system 300B transmits the second contact fingerprint data from the first server S31A to the second server S32A via the operation terminal P31A, and the second server S32A performs registration of the second contact fingerprint data or biometric authentication.

[0222] The fingerprint acquisition device P32A in the sixth use case example is a dedicated device for acquiring fingerprint data used for biometric authentication, and is installed in a store, company, facility, etc. that uses biometric authentication. The fingerprint acquisition device P32A acquires fingerprint data, associates the acquired fingerprint data with additional information corresponding to the fingerprint acquisition device P32A, and transmits the associated data to the first server S31A.

[0223] In the sixth use case example, the first server S31A converts the acquired fingerprint data into first contact fingerprint data that can be matched (biometric authentication) with contact fingerprint data registered in the contact fingerprint database DB31, and second contact fingerprint data that can be matched (biometric authentication) with contact fingerprint data registered in the blacklist fingerprint database DB32, based on the additional information transmitted from the fingerprint acquisition device P32A. The first server S31A performs registration or biometric authentication of the converted first contact fingerprint data.

[0224] In the sixth use case example, the operation terminal P31A acquires the second contact fingerprint data transmitted from the first server S31A and the registration result or biometric authentication result of the first contact fingerprint data executed by the first server S31A. The operation terminal P31A outputs and notifies the registration result or biometric authentication result of the first contact fingerprint data, and transmits (transfers) the second contact fingerprint data transmitted from the first server S31A to the second server S32A. The operation terminal P31A also acquires the registration result or biometric authentication result of the second contact fingerprint data transmitted from the second server S32A, and outputs and notifies the registration result or biometric authentication result.

[0225] In the sixth use case example, the second server S32A performs registration or biometric authentication of the second contact fingerprint data transmitted from the operating terminal P31A. The second server S32A generates a registration result or a biometric authentication result of the second contact fingerprint data and transmits it to the operating terminal P31A.

[0226] Next, an example of the internal configuration of the fingerprint authentication system 300B in the sixth use case example of the third embodiment will be described with reference to Fig. 13. Fig. 13 is a diagram showing an example of the internal configuration of the fingerprint authentication system 300B in the sixth use case example of the third embodiment. In the following description of the sixth use case example, the same components as those in the fifth use case example will be given the same reference numerals and descriptions thereof will be omitted.

[0227] The operation terminal P31A includes a communication unit 50A, a processor 51A, a memory 52, and a monitor 53.

[0228] The communication unit 50A is connected to the communication unit 20C of the fingerprint acquisition device P32A, the communication unit 60A of the first server S31A, and the communication unit 70A of the second server S32A via a network so as to be capable of wireless or wired communication, and performs data transmission and reception.

[0229] The communication unit 50A transmits the control command and user information generated by the processor 51A to the fingerprint acquisition device P32A. The communication unit 50A outputs the registration result or biometric authentication result of the fingerprint data (first contact fingerprint data) transmitted from the first server S31A, the control command, the user information, the second contact fingerprint data, etc. to the processor 51A. The communication unit 50A outputs the registration result or biometric authentication result of the fingerprint data (second contact fingerprint data) transmitted from the second server S32A to the processor 51A.

[0230] The processor 51A is configured using, for example, a CPU, FPGA, or GPU, and performs various processes and controls in cooperation with the memory 52. ​​Specifically, the processor 51A references the programs and data stored in the memory 52 and executes the programs to realize each function.

[0231] The processor 51A generates a control command that requests the fingerprint acquisition device P32A to acquire fingerprint data and to register or perform biometric authentication of the fingerprint data, in response to the input operation content output from the operation unit 54. The processor 51A also generates user information based on the input operation content output from the operation unit 54. The processor 51A outputs the generated control command or user information to the communication unit 50A, causing it to be transmitted to the fingerprint acquisition device P32A. The processor 51A also generates an alert or notification screen (not shown) based on the fingerprint data registration result or biometric authentication result transmitted from the first server S31A or the second server S32A, and outputs it to the monitor 53.

[0232] The fingerprint acquisition device P32A includes a communication unit 20C, a processor 21, a memory 22, a camera 23, and a sensor 24. Note that the fingerprint acquisition device P32A in the sixth use case example may be configured to include at least one of the camera 23 or the sensor 24.

[0233] The communication unit 20C is connected to the communication unit 50A of the operation terminal P31A and the communication unit 60A of the first server S31A via a network so as to be able to communicate wirelessly or wired, and executes transmission and reception of data. When registering fingerprint data, the communication unit 20C associates a control command requesting fingerprint data registration or biometric authentication transmitted from the operation terminal P31A with the user's fingerprint data, user information, and additional information generated by the processor 21, and transmits them to the first server S31A. When biometric authentication is performed, the communication unit 20C transmits the control command requesting fingerprint data registration or biometric authentication transmitted from the operation terminal P31A with the user's fingerprint data and additional information generated by the processor 21 to the first server S31A.

[0234] The first server S31A includes a communication unit 60A, a processor 61, and a memory 62. The first server S31A may be configured integrally with the contact fingerprint database DB31.

[0235] The communication unit 60A is connected to the operation terminal P31A, the fingerprint acquisition device P32A, and the contact fingerprint database DB31 via a network so as to be capable of wireless or wired communication, and executes data transmission and reception.

[0236] The communication unit 60A acquires control commands, fingerprint data (contact fingerprint data or non-contact fingerprint data), user information, or additional information transmitted from the fingerprint acquisition device P32A, and outputs them to the processor 61. The communication unit 60A transmits the second contact fingerprint data output from the processor 61, and the registration result or biometric authentication result of the first contact fingerprint data executed by the processor 61 to the operating terminal P31A.

[0237] The second server S32A includes a communication unit 70A, a processor 71, and a memory 72. The second server S32A may be configured integrally with the blacklist fingerprint database DB32.

[0238] The communication unit 70A is connected to the operation terminal P31A via a network so as to be capable of wireless or wired communication, and executes transmission and reception of data.

[0239] The communication unit 70A acquires control commands, second contact fingerprint data (contact fingerprint data or non-contact fingerprint data), or user information from the operation terminal P31A and outputs them to the processor 71. The communication unit 70A also transmits the registration result or biometric authentication result of the second contact fingerprint data output from the processor 71 to the operation terminal P31A.

[0240] Next, an example of an operation procedure of the fingerprint authentication system 300B according to the sixth use case example will be described with reference to Fig. 14. Fig. 14 is a sequence diagram showing an example of an operation procedure of the fingerprint authentication system 300B according to the sixth use case example of the third embodiment.

[0241] In the example of the operation procedure of the fingerprint authentication system 300B shown in Fig. 14, an example will be described in which fingerprint data registration or biometric authentication performed by the first server S31A is not essential, but the present invention is not limited to this. Also, in the explanation of Fig. 14, an example in which fingerprint data conversion processing is not required will be omitted. When fingerprint data conversion processing is not required, the first server S31A or the second server S32A uses unconverted fingerprint data (contact fingerprint data or non-contact fingerprint data) to register the user's contact fingerprint data or to perform biometric authentication using the contact fingerprint data.

[0242] In addition, in the example of the operation procedure of the fingerprint authentication system 300B shown in FIG. 14, the same processes as those in the example of the operation procedure of the fingerprint authentication system 300A are given the same reference numerals, and the description thereof will be omitted.

[0243] The first server S31A associates the converted second contact fingerprint data with a control command requesting either registration of the user's fingerprint data or biometric authentication, and transmits the data to the operating terminal P31A (St317A).

[0244] The operating terminal P31A, based on an input operation by the person acquiring the fingerprint data, associates the second contact fingerprint data with a control command transmitted from the first server S31A requesting registration of the second contact fingerprint data or biometric authentication, and transmits the second contact fingerprint data to the second server S32 (St317B). When the control command requests registration of the second contact fingerprint data, the operating terminal P31A further associates the second contact fingerprint data with user information of the user and transmits the second server S32A.

[0245] The second server S32A acquires the control command and the second contact fingerprint data transmitted from the operating terminal P31A (St318A). Based on the control command, the second server S32A executes a registration process to register the second contact fingerprint data and user information in the blacklist fingerprint database DB32, or a biometric authentication process to compare the second contact fingerprint data with at least one fingerprint data registered in the blacklist fingerprint database DB32 (St319). The second server S32A generates a registration result or a biometric authentication result for the acquired second contact fingerprint data and transmits it to the operating terminal P31A (St320A).

[0246] As described above, the first server S31A in embodiment 3 can suppress a decrease in the authentication accuracy of the biometric authentication performed by each of the first server S31A and the second server S32A by converting the fingerprint data acquired by the fingerprint acquisition device P32A into contact fingerprint data that can be compared with fingerprint data registered in the contact fingerprint database DB31 and the blacklist fingerprint database DB32, which are managed by different stores, facilities, or companies.

[0247] Furthermore, even if the administrator (store, company, facility, etc.) who manages the contact fingerprint database DB31 and the first server S31A is different from the administrator (store, company, facility, etc.) who manages the blacklist fingerprint database DB32 and the second server S32A, and direct transmission and reception of fingerprint data, etc. between the first server S31A and the second server S32A is not possible, the first server S31A can register two or more fingerprint data or perform biometric authentication by acquiring fingerprint data once.

[0248] <Example of the 7th use case> A seventh use case example corresponding to the fingerprint authentication system 300C according to the embodiment 3 will be described with reference to Fig. 15. Fig. 15 is a diagram showing the seventh use case example of the fingerprint authentication system 300C according to the embodiment 3. In the description of the seventh use case example, the same components as those in the sixth use case example are given the same reference numerals, and the description thereof will be omitted.

[0249] The fingerprint authentication system 300C includes an operation terminal P31B, a fingerprint acquisition device P32A, a first server S31A, a second server S32B, and a blacklist fingerprint database DB32.

[0250] The fingerprint authentication system 300C in the seventh use case example acquires the user's fingerprint data (contact fingerprint data or non-contact fingerprint data) using the fingerprint acquisition device P32A, and performs biometric authentication based on the fingerprint data stored in the blacklist fingerprint database DB32 and the fingerprint data acquired by the fingerprint acquisition device P32A.

[0251] The fingerprint acquisition device P32A in the seventh use case example is installed in a location that uses biometric authentication, such as an airport, a port, a station, or on a train. The fingerprint acquisition device P32A acquires fingerprint data, associates the acquired fingerprint data with additional information corresponding to the fingerprint acquisition device P32A, and transmits the associated data to the first server S31B.

[0252] In the seventh use case example, the first server S31B executes a conversion process for fingerprint data based on a control command sent from the operating terminal P31B. Based on additional information sent from the fingerprint acquisition device P32A, the first server S31B converts the acquired fingerprint data into second contact fingerprint data that can be compared (biometric authentication) with contact fingerprint data registered in each blacklist fingerprint database DB32A-DB32N managed by the store, facility, or company, and sends the second contact fingerprint data together with the non-contact fingerprint data before conversion to the operating terminal P31B.

[0253] The operating terminal P31B in the seventh use case example acquires the second contact fingerprint data and contactless fingerprint data transmitted from the first server S31B and transmits (transfers) them to the second server S32B. The operating terminal P31B also acquires the registration results or biometric authentication results of each fingerprint data transmitted from the second server S32B, and outputs and notifies the registration results or biometric authentication results.

[0254] In the seventh use case example, the second server S32B registers the second contact fingerprint data or contactless fingerprint data transmitted from the operating terminal P31B. The second server S32B also compares the second contact fingerprint data or contactless fingerprint data with the fingerprint data stored in each of the blacklist fingerprint databases DB32A to DB32N to determine whether the user is a person registered in any of the blacklist fingerprint databases DB32A to DB32N. The second server S32B generates a registration result or a biometric authentication result for each fingerprint data and transmits it to the operating terminal P31B.

[0255] Next, an example of the internal configuration of the fingerprint authentication system 300C in the seventh use case example of the third embodiment will be described with reference to Fig. 16. Fig. 16 is a diagram showing an example of the internal configuration of the fingerprint authentication system 300C in the seventh use case example of the third embodiment. In the following description of the seventh use case example, the same components as those in the sixth use case example will be given the same reference numerals, and description thereof will be omitted.

[0256] The operation terminal P31B includes a communication unit 50B, a processor 51A, a memory 52, and a monitor 53.

[0257] The communication unit 50A is connected to the communication unit 60B of the first server S31B and the communication unit 70B of the second server S32B via a network so as to be capable of wireless or wired communication, and executes transmission and reception of data.

[0258] The communication unit 50A transmits the control command generated by the processor 51A to the first server S31B. The communication unit 50A outputs the fingerprint data transmitted from the first server S31B to the processor 51A. The communication unit 50A outputs the registration result or the biometric authentication result of the fingerprint data transmitted from the second server S32B to the processor 51A.

[0259] The fingerprint acquisition device P32A includes a communication unit 20D, a processor 21, a memory 22, a camera 23, and a sensor 24. Note that the fingerprint acquisition device P32A in the seventh use case example may be configured to include at least one of the camera 23 or the sensor 24.

[0260] The communication unit 20C is connected to the communication unit 60B of the first server S31B via a network so as to be able to communicate wirelessly or via wire, and executes transmission and reception of data. The communication unit 20C associates the user's fingerprint data generated by the processor 21 with additional information and transmits them to the first server S31B.

[0261] The first server S31B includes a communication unit 60B, a processor 61A, and a memory 62.

[0262] The communication unit 60B is connected to the operation terminal P31B and the fingerprint acquisition device P32A via a network so as to be able to communicate wirelessly or via wire, and transmits and receives data. The communication unit 60B acquires control commands transmitted from the operation terminal P31B, and fingerprint data (contact fingerprint data or contactless fingerprint data), user information, or additional information transmitted from the fingerprint acquisition device P32A, and outputs them to the processor 61A. The communication unit 60B transmits the second contact fingerprint data or contactless data output from the processor 61A to the operation terminal P31B.

[0263] The processor 61A includes a fingerprint data conversion unit 611. The fingerprint data conversion unit 611 converts the fingerprint data transmitted from the fingerprint acquisition device P32A into second contact fingerprint data.

[0264] The second server S32B includes a communication unit 70B, a processor 71A, and a memory 72. The second server S32B may be configured integrally with the blacklist fingerprint database DB32.

[0265] The communication unit 70B is connected to the operating terminal P31B and the blacklist fingerprint database DB32 via a network so that wireless or wired communication is possible, and executes transmission and reception of data. The communication unit 70B acquires control commands or fingerprint data, etc. from the operating terminal P31B and outputs them to the processor 71. The communication unit 70B also transmits the fingerprint data registration results or biometric authentication results output from the processor 71A to the operating terminal P31B.

[0266] Next, an example of an operation procedure of the fingerprint authentication system 300C according to the seventh use case example will be described with reference to Fig. 17. Fig. 17 is a sequence diagram showing an example of an operation procedure of the fingerprint authentication system 300C according to the seventh use case example of the third embodiment.

[0267] Note that an example in which the fingerprint data conversion process is not required is omitted in the explanation of Fig. 14. Also, in the example of the operation procedure of the fingerprint authentication system 300C shown in Fig. 14, the same processes as those in the example of the operation procedure of the fingerprint authentication system 300B are given the same reference numerals, and the explanation thereof is omitted.

[0268] The operating terminal P31B generates a control command requesting acquisition of the user's fingerprint data and transmits it to the first server S31B (St311A).

[0269] The first server S31B generates and transmits a control command requesting fingerprint data to the fingerprint acquisition device P32A (St311B).

[0270] As described above, the fingerprint authentication system 300C in embodiment 3 can suppress a decrease in the accuracy of authentication with the fingerprint data registered in each database by converting the fingerprint data acquired by the fingerprint acquisition device P32A into contact fingerprint data that can be compared with the fingerprint data registered in each blacklist fingerprint database DB32A to DB32N managed by the location, facility, or company where the fingerprint acquisition device P32A is installed.

[0271] (Fourth embodiment) The fingerprint authentication systems 300A to 300B according to the third embodiment have shown an example in which the first servers S31, S31A convert fingerprint data (contact fingerprint data or contactless fingerprint data) acquired by a predetermined fingerprint acquisition device P32 into first contact fingerprint data and second contact fingerprint data used for biometric authentication performed by the first servers S31, S31A and second servers S32, S32A, respectively. The fingerprint authentication system 400 according to the fourth embodiment will be described as an example in which fingerprint data (contact fingerprint data or contactless fingerprint data) acquired by an arbitrary device is converted into fingerprint data that can be registered or authenticated in an arbitrary database or an arbitrary server.

[0272] In addition, in the following description of the fingerprint authentication system 400 according to the fourth embodiment, the same components as those included in the fingerprint authentication systems 100A to 100C, 200, 300A to 300B according to the first to third embodiments are given the same reference numerals, and the description thereof will be omitted.

[0273] <Example of the 8th use case> An eighth use case example corresponding to the fingerprint authentication system 400 according to the fourth embodiment will be described with reference to Fig. 18. Fig. 18 is a diagram showing the eighth use case example of the fingerprint authentication system 400 according to the fourth embodiment. Note that Fig. 18 shows an example in which the first server S41 is communicably connected to one second server S42, but the first server S41 may be communicably connected to a plurality of servers. Furthermore, the first server S41 does not have to directly perform fingerprint registration or authentication, and may be, for example, a data relay device that transfers fingerprint data to at least one computer that can perform fingerprint registration or authentication.

[0274] The fingerprint authentication system 400 according to the fourth embodiment includes a terminal device P11, a fingerprint acquisition device P12, a contact sensor P13, a first server S41, a plurality of first fingerprint databases DB411 to N-th fingerprint databases DB41N, and a second server S42.

[0275] The fingerprint authentication system 400 transmits fingerprint data (contact fingerprint data or non-contact fingerprint data) acquired by the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 to the first server S41. The fingerprint authentication system 400 converts the acquired fingerprint data by the first server S41 into fingerprint data (contact fingerprint data or non-contact fingerprint data) that can be registered in the first fingerprint database DB411 through the Nth fingerprint database DB41N or the second server fingerprint database DB421, or converts the acquired fingerprint data into fingerprint data (contact fingerprint data or non-contact fingerprint data) that can be matched with fingerprint data registered in the first fingerprint database DB411 through the Nth fingerprint database DB41N or the second server fingerprint database DB421. The fingerprint authentication system 400 stores the converted fingerprint data in each of the first fingerprint database DB411 through the Nth fingerprint database DB41N by the first server S41, and transmits the converted fingerprint data to the second server S42.

[0276] In addition, the fingerprint authentication system 400 registers the fingerprint data transmitted from the first server S41 in the second server fingerprint database DB421, and compares (biometric authentication) the fingerprint data transmitted from the first server S41 with the fingerprint data registered in the second server fingerprint database DB421.

[0277] The terminal device P11 in the eighth use case example is substantially the same as the terminal device P11 shown in the first to third use case examples, and acquires fingerprint data of the user in a contact state or a non-contact state and transmits it to the first server S41.

[0278] The fingerprint acquisition device P12 in the eighth use case example is substantially the same as the fingerprint acquisition device P12 shown in the first to third use case examples, and acquires the user's fingerprint data in a contact or non-contact state and transmits it to the first server S41.

[0279] Furthermore, the contact sensor P13 in the eighth use case example is substantially the same as the fingerprint acquisition device P12 shown in the first to third use case examples, and acquires fingerprint data of the user in a contact state and transmits it to the first server S41. Note that the contact sensor P13 in the eighth use case example may or may not be able to acquire contact fingerprint data that does not require fingerprint data conversion processing.

[0280] The first server S41 acquires fingerprint data (contact fingerprint data or contactless fingerprint data) acquired by the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13. Based on the additional information associated with the fingerprint data, the first server S41 refers to a conversion table (for example, the first conversion table TB1 shown in FIG. 20 or the second conversion table TB2 shown in FIG. 21) that contains information on various conversion methods for converting the acquired fingerprint data into fingerprint data that can be registered in each database (i.e., the first fingerprint database DB411 to the Nth fingerprint database DB41N and the second server fingerprint database DB421) or that can be matched with fingerprint data registered in each database, in accordance with the additional information, and selects a conversion method for converting the acquired fingerprint data into fingerprint data that can be registered in each database or that can be matched with each database.

[0281] The first server S41 converts the acquired fingerprint data based on each of the selected conversion methods, and transmits the converted fingerprint data to each of the databases and the second server S42.

[0282] Each of the first fingerprint database DB411 to the Nth fingerprint database DB41N is connected to the first server S31 so as to be able to send and receive data thereto. Each of the first fingerprint database DB411 to the Nth fingerprint database DB41N is used, for example, in a store, facility, or company, and allows the first server S41 to write (storage or registration) fingerprint data of at least one user. Each of the first fingerprint database DB411 to the Nth fingerprint database DB41N allows an external device (not shown) to refer to (read) the stored fingerprint data in biometric authentication.

[0283] The second server S42 registers the fingerprint data transmitted from the first server S41 in the fingerprint database DB421 for the second server, and compares the fingerprint data transmitted from the first server S41 with the fingerprint data registered in the fingerprint database DB421 for the second server (biometric authentication).

[0284] The fingerprint database DB421 for the second server is connected to the second server S42 so that data can be sent and received, and allows the second server S42 to store (register or write) fingerprint data of at least one user and to refer to (read) the fingerprint data during biometric authentication.

[0285] Next, the internal configuration of the fingerprint authentication system 400 in the eighth use case example of the fourth embodiment will be described with reference to Fig. 19. Fig. 19 is a diagram showing an example of the internal configuration of the fingerprint authentication system 400 in the eighth use case example of the fourth embodiment.

[0286] The terminal device P11, fingerprint acquisition device P12, and contact sensor P13 shown in FIG. 19 each have the same configuration as the terminal device P11, fingerprint acquisition device P12, and contact sensor P13 described in FIG. 10, and therefore description thereof will be omitted.

[0287] The first server S41 includes a communication unit 80, a processor 81, and a memory .

[0288] The communication unit 80 is connected to the terminal device P11, the fingerprint acquisition device P12, the contact sensor P13, each of the first fingerprint database DB411 to the Nth fingerprint database DB41N, and each of the second server S42 via a network so as to be able to communicate wirelessly or via wire, and performs data transmission and reception.

[0289] The communication unit 80 acquires fingerprint data (contact fingerprint data or non-contact fingerprint data) from each of the terminal device P11, the fingerprint acquisition device P12, and the contact sensor P13, and outputs the acquired fingerprint data to the processor 81.

[0290] The processor 81 is configured using, for example, a CPU, FPGA, or GPU, and performs various processes and controls in cooperation with the memory 82. Specifically, the processor 81 references the programs and data stored in the memory 82 and executes the programs to realize the functions of each unit. The functions of each unit here are functions realized by the fingerprint data conversion unit 811, etc., such as the function of converting the user's fingerprint data (specifically, non-contact fingerprint data or contact fingerprint data) into fingerprint data corresponding to each database, and the function of registering the converted fingerprint data in each database.

[0291] The fingerprint data conversion unit 811 determines whether or not fingerprint data conversion is necessary based on the additional information transmitted from the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13. If the fingerprint data conversion unit 811 determines that fingerprint data conversion is necessary, it selects a fingerprint data conversion method corresponding to each database that requires fingerprint data conversion when registering fingerprint data, based on the conversion table recorded in the memory 82 and the additional information.

[0292] The fingerprint data conversion unit 811 converts the fingerprint data (contact fingerprint data or non-contact fingerprint data) into fingerprint data corresponding to each database based on the selected conversion method. The fingerprint data conversion unit 811 associates the converted fingerprint data or the unconverted fingerprint data with user information and device information from which the fingerprint data was obtained, and outputs them to the communication unit 80, which then transmits them to each database and the second server S42.

[0293] The memory 82 includes, for example, a RAM as a work memory used when the processor 81 executes each process, and a ROM for storing programs and data that define the operation of the processor 81. The RAM temporarily stores data or information generated or acquired by the processor 81. The ROM stores programs that define the operation of the processor 81. The memory 82 also stores a conversion table.

[0294] Each of the first fingerprint database DB411 to the Nth fingerprint database DB41N is a so-called storage, and is configured using a storage medium such as a flash memory, HDD, or SSD. Each of the first fingerprint database DB411 to the Nth fingerprint database DB41N stores (registers) and manages fingerprint data and user information transmitted from the first server S41 for each user. Each of the first fingerprint database DB411 to the Nth fingerprint database DB41N may further associate and register finger information corresponding to the fingerprint data.

[0295] The second server S42 includes a communication unit 90, a processor 91, and a memory 92.

[0296] The communication unit 90 is connected to the terminal device P11, the fingerprint acquisition device P12, the contact sensor P13, and the first server S41 via a network so as to be capable of wireless or wired communication, and transmits and receives data.

[0297] The communication unit 90 acquires the fingerprint data, user information, device information, etc. transmitted from the first server S41 and outputs them to the processor 91. The communication unit 90 transmits the registration result or biometric authentication result of the fingerprint data output from the processor 91 to the terminal device P11, fingerprint acquisition device P12, or contact sensor P13 corresponding to the device information associated with the fingerprint data.

[0298] The processor 91 is configured using, for example, a CPU, FPGA, or GPU, and performs various processes and controls in cooperation with the memory 92. Specifically, the processor 91 references the programs and data stored in the memory 92 and executes the programs to realize the functions of each unit. The functions of each unit here are functions realized by the fingerprint registration unit 911 and fingerprint authentication unit 912, etc., such as the function of registering fingerprint data in the second server fingerprint database DB421 and the function of matching fingerprint data registered in the second server fingerprint database DB421 with fingerprint data acquired from the first server S41 (biometric authentication).

[0299] The fingerprint registration unit 911 determines whether fingerprint data having the same user information as the user information associated with the converted fingerprint data transmitted from the first server S41 has already been registered in the fingerprint database DB421 for the second server.

[0300] If the fingerprint registration unit 911 determines that the fingerprint has not been registered, it associates the converted fingerprint data sent from the first server S41 with the user information, stores (registers) the fingerprint data in the second server fingerprint database DB421, and generates a registration result indicating that the registration was successful.If the fingerprint registration unit 911 determines that the fingerprint has been registered, it omits storing (registering) the fingerprint data in the second server fingerprint database DB421, and generates a registration result indicating that the registration was unsuccessful.The fingerprint registration unit 911 generates the registration result, outputs it to the communication unit 90, and transmits it to the corresponding device.

[0301] The fingerprint authentication unit 912 performs biometric authentication by comparing the converted fingerprint data sent from the first server S41 with the fingerprint data registered in the second server fingerprint database DB421. The fingerprint authentication unit 912 generates a biometric authentication result, outputs it to the communication unit 90, and transmits it to a corresponding device.

[0302] The memory 92 includes, for example, a RAM as a work memory used when the processor 91 executes each process, and a ROM for storing programs and data that define the operation of the processor 91. The RAM temporarily stores data or information generated or acquired by the processor 91. The ROM has written therein programs that define the operation of the processor 91.

[0303] The second server fingerprint database DB421 is a so-called storage, and is configured using a storage medium such as a flash memory, HDD, or SSD. The second server fingerprint database DB421 stores (registers) and manages the fingerprint data and user information transmitted from the second server S42 for each user. The second server fingerprint database DB421 may further associate and register finger information corresponding to the fingerprint data.

[0304] Next, the first conversion table TB1 will be described with reference to Fig. 20. Fig. 20 is a diagram illustrating an example of the first conversion table TB1. Note that the first conversion table TB1 shown in Fig. 20 is just an example, and is not limited to this.

[0305] The first conversion table TB1 stores information regarding a conversion method for converting fingerprint data acquired by any device (terminal device P11, fingerprint acquisition device P12, or contact sensor P13) using any acquisition method into fingerprint data that can be registered in each database (first fingerprint database DB411 to Nth fingerprint database DB41N, fingerprint database DB421 for second server) that stores fingerprint data used for biometric authentication, or that can be matched (biometric authentication) with fingerprint data registered in each database.

[0306] The first conversion table TB1 is recorded in the memory 82 and is referred to by the first server S41. The first conversion table TB1 shown in Fig. 20 includes, for example, an "acquisition method" indicating whether the fingerprint data was acquired in a contact state or a non-contact state, "device information" of the device from which the fingerprint data was acquired or generated, and a "conversion algorithm, parameters" of the fingerprint data conversion method corresponding to each database.

[0307] For example, based on the additional information associated with the fingerprint data, if the fingerprint data acquisition method is "contactless" and the device from which the fingerprint data was acquired is a "terminal device," the fingerprint data conversion unit 811 of the first server S41 selects the fingerprint data conversion method "AAA1" corresponding to the first fingerprint database DB411, the fingerprint data conversion method "BBB1" corresponding to the second database (not shown), ..., the fingerprint data conversion method "CCC1" corresponding to the Nth fingerprint database DB41N, and the fingerprint data conversion method "DDD1" corresponding to the fingerprint database DB421 for the second server.

[0308] Furthermore, for example, based on the additional information associated with the fingerprint data, if the fingerprint data acquisition method is "contactless" and the device that acquired the fingerprint data is a "fingerprint acquisition device," the fingerprint data conversion unit 811 selects the fingerprint data conversion method "AAA2" corresponding to the first fingerprint database DB411, the fingerprint data conversion method "BBB2" corresponding to the second database (not shown), ..., the fingerprint data conversion method "CCC2" corresponding to the Nth fingerprint database DB41N, and the fingerprint data conversion method "DDD2" corresponding to the fingerprint database DB421 for the second server.

[0309] Furthermore, for example, based on the additional information associated with the fingerprint data, if the fingerprint data acquisition method is "contact" and the device from which the fingerprint data was acquired is a "terminal device," the fingerprint data conversion unit 811 selects the fingerprint data conversion method "AAA3" corresponding to the first fingerprint database DB411, the fingerprint data conversion method "BBB3" corresponding to the second database (not shown), ..., the fingerprint data conversion method "CCC3" corresponding to the Nth fingerprint database DB41N, and the fingerprint data conversion method "DDD3" corresponding to the fingerprint database DB421 for the second server.

[0310] Furthermore, for example, based on the additional information associated with the fingerprint data, if the fingerprint data acquisition method is "contact" and the device that acquired the fingerprint data is a "contact sensor," the fingerprint data conversion unit 811 selects the fingerprint data conversion method "AAA4" corresponding to the first fingerprint database DB411, the fingerprint data conversion method "BBB4" corresponding to the second database (not shown), ..., the fingerprint data conversion method "CCC4" corresponding to the Nth fingerprint database DB41N, and the fingerprint data conversion method "DDD4" corresponding to the fingerprint database DB421 for the second server.

[0311] This allows the fingerprint data conversion unit 811 to convert fingerprint data acquired by the terminal device P11, fingerprint acquisition device P12, or contact sensor P13 into fingerprint data corresponding to each database.

[0312] For example, the fingerprint data conversion unit 811 converts the contactless fingerprint data DT10 using the conversion methods "AAA1", "AAA2", "BBB1", and "BBB2" to convert it into contact fingerprint data DT11 corresponding to the first fingerprint database DB411 and the second fingerprint database (not shown) to which the fingerprint data is to be sent. Also, for example, the fingerprint data conversion unit 811 converts the contactless fingerprint data DT10 using the conversion methods "CCC1", "CCC2", "DDD1", and "DDD2" to convert it into contactless fingerprint data DT12 corresponding to the first fingerprint database DB411 and the second fingerprint database (not shown) to which the fingerprint data is to be sent.

[0313] Next, the second conversion table TB2 will be described with reference to Fig. 21. Fig. 21 is a diagram illustrating an example of the second conversion table TB2. Note that the second conversion table TB2 shown in Fig. 21 is just an example, and is not limited to this.

[0314] The second conversion table TB2 stores information regarding a conversion method for converting fingerprint data acquired by any device (terminal device P11, fingerprint acquisition device P12, or contact sensor P13) using any acquisition method into fingerprint data that can be registered in each database (first fingerprint database DB411 to Nth fingerprint database DB41N, fingerprint database DB421 for second server) that stores fingerprint data used for biometric authentication, or that can be matched (biometric authentication) with fingerprint data registered in each database.

[0315] The second conversion table TB2 is recorded in the memory 82 and is referred to by the first server S41. The second conversion table TB2 shown in Fig. 21 includes, for example, an "acquisition method" indicating whether the fingerprint data was acquired in a contact state or a contactless state, "device information" of the device from which the fingerprint data was acquired or generated, and a "conversion algorithm" that is a conversion method for fingerprint data corresponding to each database.

[0316] 21, the Nth fingerprint database DB41N and the second server fingerprint database DB421 are managed (used) by different stores, companies, facilities, etc., and store fingerprint data used for the same purpose (e.g., payment or entrance / exit management). In such a case, the conversion methods of the fingerprint data stored in the second conversion table TB2 for the Nth fingerprint database DB41N and the second server fingerprint database DB421 may be the same.

[0317] For example, based on the additional information associated with the fingerprint data, if the fingerprint data acquisition method is "contactless" and the device from which the fingerprint data was acquired is a "terminal device," the fingerprint data conversion unit 811 of the first server S41 selects the fingerprint data conversion method "AAA1" corresponding to the first fingerprint database DB411, the fingerprint data conversion method "BBB1" corresponding to the second database (not shown), ..., the fingerprint data conversion method "CCC1" corresponding to the Nth fingerprint database DB41N, and the fingerprint data conversion method "CCC1" corresponding to the fingerprint database DB421 for the second server.

[0318] Furthermore, for example, based on the additional information associated with the fingerprint data, if the fingerprint data acquisition method is "contactless" and the device that acquired the fingerprint data is a "fingerprint acquisition device," the fingerprint data conversion unit 811 selects the fingerprint data conversion method "AAA2" corresponding to the first fingerprint database DB411, the fingerprint data conversion method "BBB2" corresponding to the second database (not shown), ..., the fingerprint data conversion method "CCC2" corresponding to the Nth fingerprint database DB41N, and the fingerprint data conversion method "CCC2" corresponding to the fingerprint database DB421 for the second server.

[0319] Furthermore, for example, based on the additional information associated with the fingerprint data, if the fingerprint data acquisition method is "contact" and the device from which the fingerprint data was acquired is a "terminal device," the fingerprint data conversion unit 811 selects the fingerprint data conversion method "AAA3" corresponding to the first fingerprint database DB411, the fingerprint data conversion method "BBB3" corresponding to the second database (not shown), ..., the fingerprint data conversion method "CCC3" corresponding to the Nth fingerprint database DB41N, and the fingerprint data conversion method "CCC3" corresponding to the fingerprint database DB421 for the second server.

[0320] Furthermore, for example, based on the additional information associated with the fingerprint data, if the fingerprint data acquisition method is "contact" and the device that acquired the fingerprint data is a "contact sensor," the fingerprint data conversion unit 811 selects the fingerprint data conversion method "BBB4" corresponding to the second database (not shown), ..., the fingerprint data conversion method "CCC4" corresponding to the Nth fingerprint database DB41N, and the fingerprint data conversion method "CCC4" corresponding to the fingerprint database DB421 for the second server.

[0321] This allows the fingerprint data conversion unit 811 to convert fingerprint data acquired by the terminal device P11, fingerprint acquisition device P12, or contact sensor P13 into fingerprint data corresponding to each database.

[0322] Note that the conversion method "-" in the second conversion table TB2 indicates that conversion of the fingerprint data is not required. For example, fingerprint data acquired by a "contact" method and using a "contact sensor" as the device corresponds to the fingerprint data corresponding to the first fingerprint database DB411 without conversion processing. In such a case, when determining whether or not conversion of the fingerprint data is required, the fingerprint data conversion unit 811 determines that conversion of the fingerprint data is not required, or omits the conversion processing of the fingerprint data based on the conversion method "-" of the fingerprint data corresponding to the first fingerprint database DB411.

[0323] Next, an example of an operation procedure of the fingerprint authentication system 400 according to the eighth use case example will be described with reference to Fig. 22. Fig. 22 is a sequence diagram showing an example of an operation procedure of the fingerprint authentication system 400 according to the eighth use case example of the fourth embodiment.

[0324] The terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 acquires fingerprint data, which is contact fingerprint data or contactless fingerprint data (St411). The terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 generates a control command requesting either fingerprint data registration or biometric authentication processing, associates the generated control command with the acquired fingerprint data, and additional information corresponding to the acquired fingerprint data, and transmits them to the first server S41 (St412).

[0325] The first server S41 refers to the conversion tables (e.g., first conversion table TB1, second conversion table TB2, etc.) stored in the memory 82 and selects a conversion method for converting the acquired fingerprint data into fingerprint data corresponding to each database based on the additional information transmitted from the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13. The first server S41 converts the acquired fingerprint data into fingerprint data corresponding to each database based on the selected conversion method (St413). Note that if there is fingerprint data that does not require conversion, the first server S41 omits the conversion process.

[0326] The first server S41 transmits the converted fingerprint data to each of the first fingerprint database DB411 to the Nth fingerprint database DB41N for storage (registration) (St414). The first server S41 also associates the converted fingerprint data with a control command requesting either fingerprint data registration or biometric authentication, and transmits the converted fingerprint data to the second server S42 (St415).

[0327] The second server S42 acquires the fingerprint data transmitted from the first server S41 (St416). Based on the control command, the second server S42 executes a registration process for registering the fingerprint data and user information in the second server fingerprint database DB421, or a biometric authentication process for matching the acquired fingerprint data with at least one fingerprint data registered in the second server fingerprint database DB421 (St417). The second server S42 generates a registration result or a biometric authentication result for the acquired fingerprint data and transmits it to the terminal (terminal device P11, fingerprint acquisition device P12, or contact sensor P13) that is the source of the fingerprint data (generation source) (St418).

[0328] The terminal device P11, fingerprint acquisition device P12, or contact sensor P13 outputs the fingerprint data registration results or biometric authentication results sent from the second server S42 to a monitor, speaker (not shown), external device (not shown), etc. (St419).

[0329] As described above, the first server S41 in the fourth embodiment can convert fingerprint data acquired by any device (terminal device P11, fingerprint acquisition device P12, or contact sensor P13) using any acquisition method (for example, contact state, non-contact state, or sensor sensing method (capacitive, thermal, ultrasonic, pressure-sensitive, optical, etc.), any specifications of the camera or sensor equipped in each device, etc.) into fingerprint data that can be compared with fingerprint data registered in each database. This allows the first server S41 to suppress a decrease in the authentication accuracy of biometric authentication performed using fingerprint data registered in each database.

[0330] Although the embodiments and use case examples have been described above, the embodiments and use case examples may be combined in any manner.

[0331] As described above, the server S11, S21 or the first server S31, S31A, S31B, S41 (an example of a biometric data conversion device) according to embodiments 1 to 4 includes a communication unit 30, 40, 60, 60A, 80 (an example of an acquisition unit) that acquires at least one first fingerprint data (an example of first biometric data), and a processor 31, 41, 61, 61A, 81 (an example of a control unit) that converts the first fingerprint data into second fingerprint data (an example of second biometric data) that is different from the first fingerprint data and outputs the second fingerprint data.

[0332] As a result, the servers S11, S21 or the first servers S31, S31A, S31B, and S41 according to the first to fourth embodiments can convert fingerprint data acquired by any device (terminal device P11, fingerprint acquisition device P12, or contact sensor P13) using any acquisition method (for example, contact state, non-contact state, or sensor sensing method (capacitive, thermal, ultrasonic, pressure-sensitive, optical, etc.), any specifications of the camera or sensor provided in each device, etc.) into fingerprint data that can be compared with fingerprint data registered in at least one database. Therefore, the servers S11, S21 or the first servers S31, S31A, S31B, and S41 according to the first to fourth embodiments can convert fingerprint data acquired by any acquisition method into fingerprint data that can be used for biometric authentication.

[0333] Furthermore, the processor 61A in the first server S31B according to the third embodiment outputs the first fingerprint data and the converted second fingerprint data in association with each other. As a result, the first server S31B according to the third embodiment outputs the first fingerprint data and the converted second fingerprint data in association with each other, thereby being able to output fingerprint data (first fingerprint data and second fingerprint data) that can be collated with fingerprint data managed by a store, facility, or company and acquired by any acquisition method.

[0334] Furthermore, the processors 31, 41, 61, 81 in the servers S11, S21 or the first servers S31, S31A, S41 according to the first to fourth embodiments determine whether the first fingerprint data can be compared with fingerprint data (an example of registered fingerprint data) registered in a first database (e.g., contact fingerprint databases DB11, DB22, DB31, first fingerprint database DB411 to N-th fingerprint database DB41N, blacklist fingerprint databases DB21, DB32, second server fingerprint database DB421, etc.), and if it is determined that the first fingerprint data can be compared with the registered fingerprint data, it outputs the first fingerprint data without converting it, and if it is determined that the first fingerprint data cannot be compared with the fingerprint data (registered fingerprint data), it converts the first fingerprint data into second fingerprint data and outputs it. This allows the servers S11, S21 or the first servers S31, S31A, S41 according to the first to fourth embodiments to convert only fingerprint data that requires conversion processing.

[0335] Furthermore, the processors 31, 41, 61, 81 in the servers S11, S21 or the first servers S31, S31A, S41 according to the first to fourth embodiments compare the fingerprint data (registered fingerprint data) recorded in the first database with the second fingerprint data and authenticate the person (user) corresponding to the second fingerprint data. This allows the servers S11, S21 or the first servers S31, S31A, S41 according to the first to fourth embodiments to perform a conversion process for converting fingerprint data acquired by any acquisition method into fingerprint data that can be biometrically authenticated, and a biometric authentication process using the converted fingerprint data.

[0336] Furthermore, the processor 41 in the server S21 according to the second embodiment compares the second fingerprint data with fingerprint data (registered fingerprint data) of at least one person who is registered in a second database (for example, a blacklist fingerprint database DB21) and is to be detected, and if it determines that the second fingerprint data is identical to or similar to the fingerprint data (registered fingerprint data), it generates and outputs an alert that a person has been detected, and if it determines that the second fingerprint data is not identical to or similar to the fingerprint data (registered fingerprint data), it outputs the second fingerprint data to a third database (contact fingerprint database DB22) different from the second database for registration. In this way, the server S21 according to the second embodiment converts fingerprint data acquired by any acquisition method into fingerprint data that can be biometrically authenticated, and can use the converted fingerprint data to detect people registered on the blacklist and to register the converted fingerprint data in the contact fingerprint database DB22.

[0337] Furthermore, the processor 41 in the server S21 according to the second embodiment collates fingerprint data (registered fingerprint data) of at least one person to be detected, which is registered in a second database (for example, a blacklist fingerprint database DB21), with the second fingerprint data, and if it determines that the second fingerprint data is identical to or similar to the fingerprint data (registered fingerprint data), generates and outputs an alert that the person has been detected, and if it determines that the second fingerprint data is not identical to or similar to the fingerprint data (registered fingerprint data), it collates the second biometric data with fingerprint data (registered fingerprint data) of at least one person registered in a third database (contact fingerprint database DB22) different from the second database. As a result, the server S21 according to the second embodiment converts fingerprint data acquired by an arbitrary acquisition method into fingerprint data that can be biometrically authenticated, and can use the converted fingerprint data to detect people registered on the blacklist and to authenticate the fingerprint data of people registered in the contact fingerprint database DB22.

[0338] Furthermore, the communication units 30, 40, 60, 60A, and 80 in the servers S11, S21 or the first servers S31, S31A, and S41 according to the first to fourth embodiments acquire first fingerprint data and additional information about a device (an example of an acquisition device) from which the first fingerprint data was acquired. The processors 31, 41, 61, and 81 convert the first fingerprint data into second fingerprint data based on the additional information. This allows the servers S11, S21 or the first servers S31, S31A, and S41 according to the first to fourth embodiments to convert fingerprint data acquired by an arbitrary device into fingerprint data registered in each database that is more suitable for biometric authentication.

[0339] Furthermore, the communication units 30, 40, 60, 60A, and 80 in the servers S11, S21 or the first servers S31, S31A, and S41 according to the first to fourth embodiments acquire first fingerprint data and additional information (an example of acquired information) indicating whether the first fingerprint data was acquired in a contact state or a non-contact state. The processors 31, 41, 61, and 81 convert the first fingerprint data into second fingerprint data based on the additional information. This allows the servers S11, S21 or the first servers S31, S31A, and S41 according to the first to fourth embodiments to convert fingerprint data acquired by any acquisition method into fingerprint data more suitable for biometric authentication with fingerprint data registered in each database.

[0340] Furthermore, the processors 61, 81 in the first servers S31, S31A, S41 according to the third and fourth embodiments convert the first fingerprint data into N pieces of fingerprint data that are different from the first fingerprint data and can be matched with fingerprint data (registered fingerprint data) registered in each of a plurality of N (N: an integer of 2 or more) databases (first fingerprint database DB411 to Nth fingerprint database DB41N), and output the converted data. This allows the first servers S31, S31A, S41 according to the third and fourth embodiments to convert one piece of fingerprint data acquired by an arbitrary acquisition method into N pieces of fingerprint data that can be matched with fingerprint data registered in each of the first fingerprint database DB411 to Nth fingerprint database DB41N.

[0341] As described above, each of the fingerprint authentication systems 100A to 100C, 200, 300A to 300B, and 400 according to the first to fourth embodiments includes at least one device (an example of a biometric data acquisition device, such as a terminal device P11, a fingerprint acquisition device P12, P32, or P32A, or a contact sensor P13) capable of acquiring first fingerprint data (an example of first biometric data) and a server (for example, a server S11 or S21 or a first server S31, S31A, or S41) capable of communicating with the device. The device acquires the first fingerprint data and transmits it to the server. The server converts the first fingerprint data into second fingerprint data (an example of second biometric data) different from the first fingerprint data and outputs it.

[0342] As a result, each of the fingerprint authentication systems 100A-100C, 200, 300A-300B, and 400 according to the first to fourth embodiments can convert fingerprint data acquired by any device (terminal device P11, fingerprint acquisition device P12, or contact sensor P13) using any acquisition method (for example, contact state, non-contact state, or sensor sensing method (capacitive, thermal, ultrasonic, pressure-sensitive, optical, or the like), any specifications of the camera or sensor provided in each device, etc.) into fingerprint data that can be collated with fingerprint data registered in at least one database. Therefore, the servers S11, S21 or first servers S31, S31A, and S41 according to the first to fourth embodiments can convert fingerprint data acquired by any acquisition method into fingerprint data that can be used for biometric authentication.

[0343] Although various embodiments have been described above with reference to the accompanying drawings, the present disclosure is not limited to such examples. It is clear that those skilled in the art can conceive of various modifications, alterations, substitutions, additions, deletions, and equivalents within the scope of the claims, and it is understood that these also fall within the technical scope of the present disclosure. Furthermore, the components of the various embodiments described above may be combined in any manner without departing from the spirit of the invention.

[0344] This application is based on a Japanese patent application (Patent Application No. 2023-018583) filed on February 9, 2023, the contents of which are incorporated herein by reference. [Industrial Applicability]

[0345] The present disclosure is useful as a fingerprint data conversion device, a fingerprint data conversion method, and a fingerprint data conversion system that convert fingerprint data acquired by any acquisition method into fingerprint data that can be biometrically authenticated. [Explanation of symbols]

[0346] 10,10A,20,20A,20B,20C,30,40,50,60,60A,70,70A,80,90 Communication department 11,21,31,41,51,61,71,81,91 processors 12, 22, 32, 42, 52, 62, 72, 82, 92 memory 13,23 Camera 14,53 monitor 15,54 Operation unit 24 sensors 100A, 100B, 100C, 200, 300A, 300B, 400 Fingerprint authentication system 311,411,611,811 Fingerprint data conversion unit 312,412,612,711,912 Fingerprint authentication section 911 Fingerprint Registration Unit DB11, DB22, DB31 Contact Fingerprint Database DB21,DB32 Blacklist Fingerprint Database DB411 First Fingerprint Database DB41N Nth Fingerprint Database DB421 Fingerprint database for the second server P11 Terminal equipment P12,P32,P32A Fingerprint acquisition device P13 Contact Sensor S11,S21 servers S31, S31A, S41 First Server S32, S32A, S42 Second Server TB1 First conversion table TB2 Second conversion table

Claims

1. an acquisition unit that acquires at least one first fingerprint data; a control unit that converts the first fingerprint data into second fingerprint data different from the first fingerprint data and outputs the second fingerprint data. Fingerprint data conversion device.

2. one of the first fingerprint data and the second fingerprint data is contactless fingerprint data acquired in a contactless state, and the other is contactless fingerprint data acquired in a contact state; 2. The fingerprint data conversion device according to claim 1.

3. the first fingerprint data and the second fingerprint data are contact fingerprint data acquired in a contact state; 2. The fingerprint data conversion device according to claim 1.

4. the first fingerprint data and the second fingerprint data are contactless fingerprint data acquired in a contactless manner; 2. The fingerprint data conversion device according to claim 1.

5. the fingerprint data conversion device is connected to at least one database in which third fingerprint data to be compared with the first fingerprint data is registered so as to be capable of data communication; the control unit converts the first fingerprint data into the second fingerprint data corresponding to the third fingerprint data based on the third fingerprint data stored in the database.

2. The fingerprint data conversion device according to claim 1.

6. the third fingerprint data is associated with acquisition information indicating whether the third fingerprint data is acquired in a contact state or a non-contact state; The acquisition unit acquiring the first fingerprint data, the third fingerprint data, and acquisition information indicating whether the first fingerprint data and the third fingerprint data were acquired in a contact state or a non-contact state; The control unit converting the first fingerprint data into the second fingerprint data based on the acquired information of the third fingerprint data; 6. The fingerprint data conversion device according to claim 5.

7. a storage unit that stores a conversion rule for converting the first fingerprint data into the second fingerprint data for each of the databases; The control unit converting the first fingerprint data into the second fingerprint data based on the conversion rule; 6. The fingerprint data conversion device according to claim 5.

8. the conversion rule includes an algorithm or parameters for converting the first fingerprint data into the second fingerprint data; 8. The fingerprint data conversion device according to claim 7.

9. the conversion rule includes acquisition information of the third fingerprint data; 8. The fingerprint data conversion device according to claim 7.

10. The control unit outputting the first fingerprint data and the converted second fingerprint data in association with each other; 2. The fingerprint data conversion device according to claim 1.

11. The control unit determining whether the first fingerprint data is fingerprint data that can be collated with registered fingerprint data registered in a first database; If it is determined that the fingerprint data can be compared with the registered fingerprint data, the first fingerprint data is output without conversion; If it is determined that the first fingerprint data is not collatable with the registered fingerprint data, converting the first fingerprint data into the second fingerprint data and outputting the second fingerprint data.

2. The fingerprint data conversion device according to claim 1.

12. The control unit comparing the registered fingerprint data recorded in the first database with the second fingerprint data, and authenticating the person corresponding to the second fingerprint data; The fingerprint data conversion device according to claim 11.

13. The control unit comparing the second fingerprint data with registered fingerprint data of at least one person to be detected, the registered fingerprint data being registered in a second database; If it is determined that the second fingerprint data is fingerprint data identical to or similar to the registered fingerprint data, an alert is generated and output to the effect that the person has been detected; if it is determined that the second fingerprint data is not identical to or similar to the registered fingerprint data, outputting the second fingerprint data to a third database different from the second database for registration; The fingerprint data conversion device according to claim 12.

14. The control unit comparing the second fingerprint data with registered fingerprint data of at least one person to be detected, the registered fingerprint data being registered in a second database; If it is determined that the second fingerprint data is fingerprint data identical to or similar to the registered fingerprint data, an alert is generated and output to the effect that the person has been detected; if it is determined that the second fingerprint data is not identical to or similar to the registered fingerprint data, comparing the second fingerprint data with registered fingerprint data of at least one person registered in a third database different from the second database; The fingerprint data conversion device according to claim 12.

15. The acquisition unit acquiring the first fingerprint data and information about an acquisition device from which the first fingerprint data was acquired; The control unit converting the first fingerprint data into the second fingerprint data based on information about the acquisition device; 2. The fingerprint data conversion device according to claim 1.

16. The acquisition unit acquiring the first fingerprint data and acquisition information indicating whether the first fingerprint data was acquired in a contact state or a non-contact state; The control unit converting the first fingerprint data into the second fingerprint data based on the acquired information; 2. The fingerprint data conversion device according to claim 1.

17. The control unit converting the first fingerprint data into N pieces of fingerprint data that are different from the first fingerprint data and can be collated with registered fingerprint data registered in each of a plurality of different N (N: an integer of 2 or more) databases, and outputting the converted data; 2. The fingerprint data conversion device according to claim 1.

18. A fingerprint data conversion method performed by a fingerprint data conversion device capable of communicating with at least one fingerprint data acquisition device capable of acquiring first fingerprint data, comprising: acquiring the first fingerprint data; converting the first fingerprint data into second fingerprint data different from the first fingerprint data and outputting the second fingerprint data; Fingerprint data conversion method.

19. at least one fingerprint data acquisition device capable of acquiring first fingerprint data; a fingerprint data conversion system including a server capable of communicating with the fingerprint data acquisition device, The fingerprint data acquisition device obtaining and transmitting the first fingerprint data to the server; The server converting the first fingerprint data into second fingerprint data different from the first fingerprint data and outputting the second fingerprint data; Fingerprint data conversion system.

Images