Authentication system and authentication method

Abstract

To provide an authentication system that makes it impossible to easily perform biometric authentication even when a portable storage device is lost.SOLUTION: An authentication system 1 generates and outputs an authorization signal in response to biometric authentication. The authentication system 1 comprises: a collation information input unit 10 to which collation information is input; a portable storage device 20 that is portable by a subject, and has a biometric authentication unit 21 that performs biometric authentication of the subject and a storage unit 22 that stores authentication information and authorization information; and a control unit 30 to which the authorization information is input from the portable storage device 20 on the basis of a collation result of the collation information input to the collation information input unit 10 and the authentication information stored in the storage unit 22 of the portable storage device 20.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an authentication system and an authentication method that generate and output a permission signal in response to biometric authentication of a subject. [Background technology]

[0002] There is known an authentication system that generates and outputs a permission signal in response to biometric authentication of a subject. For example, Patent Document 1 discloses an example of such an authentication system, which permits only authorized persons to perform a guarded act within a guarded area.

[0003] When an employee enters a building, the security system authenticates the employee's IC card, reads employee information including the employee number and fingerprint information from the employee's IC card, and temporarily records it in a temporary file in the access management device. Also, when an employee logs on to a terminal, the security system reads the employee's fingerprint using a fingerprint input device and compares it with the fingerprint information in the temporary file to authenticate the employee. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2001-76270 Summary of the Invention [Problem to be solved by the invention]

[0005] The security system having the above-mentioned configuration performs identity authentication using an IC card and a fingerprint input device. However, in a security system having such a configuration, if the IC card is lost, for example, fingerprints attached to the IC card may be easily collated by the fingerprint input device.

[0006] In response to this, there is a demand for an authentication system that does not allow easy authentication even if an IC card or the like is lost. In other words, there is a demand for an authentication system that can improve security.

[0007] An object of the present invention is to provide an authentication system that can improve security. [Means for solving the problem]

[0008] An authentication system according to one embodiment of the present invention generates and outputs a permission signal in response to biometric authentication. The authentication system includes a portable storage device that is portable by the subject and includes a matching information input unit to which matching information is input, a biometric authentication unit that performs biometric authentication of the subject, and a storage unit that stores authentication information and permission information, and a control unit to which the permission information is input from the portable storage device based on a result of matching the matching information input to the matching information input unit with the authentication information stored in the storage unit of the portable storage device after the biometric authentication unit has performed biometric authentication of the subject (first configuration).

[0009] This allows permission information to be input from the memory unit of the portable storage device to the control unit based on the result of matching between the matching information input to the matching information input unit and the authentication information stored in the memory unit of the portable storage device after the biometric authentication unit performs biometric authentication of the subject.

[0010] Therefore, even if the portable storage device storing the permission information is lost, the permission signal will not be input from the portable storage device to the control unit unless the verification information is input to the verification information input unit and the verification information is verified against the authentication information. Furthermore, if biometric authentication is not performed by the portable storage device, the verification information will not be verified against the authentication information, and the permission signal will not be input from the portable storage device to the control unit.

[0011] Therefore, an authentication system capable of improving security can be realized.

[0012] In the first configuration, the portable storage device has an authentication control unit that compares the matching information input to the matching information input unit with the authentication information stored in the memory unit, and outputs the permission information to the control unit if the matching information and the authentication information match (second configuration).

[0013] As a result, the portable storage device will not output permission information to the control unit unless the verification information input by the verification information input unit matches the authentication information stored in the storage unit. Therefore, even if the portable storage device is lost, for example, a person who acquires the lost portable storage device cannot cause the portable storage device to output the permission information to the control unit. Therefore, an authentication system that can improve security can be realized.

[0014] In the first configuration, the control unit compares the matching information input to the matching information input unit with the authentication information stored in the memory unit of the portable storage device, and if the matching information matches the authentication information, obtains the permission information from the portable storage device (third configuration).

[0015] As a result, the control unit will not obtain permission information from the portable storage device unless the verification information input to the verification information input unit matches the authentication information stored in the memory unit. Therefore, even if the portable storage device is lost, for example, a person who acquires the lost portable storage device cannot cause the portable storage device to output the permission information to the control unit. Therefore, an authentication system that can improve security can be realized.

[0016] In the first configuration, the verification information input unit reads the verification information stored on a card (fourth configuration). This allows the verification information to be easily input into the verification information input unit using a card. This improves convenience and security.

[0017] In the fourth configuration, the card is a FeliCa (registered trademark) card, and the verification information written on the card includes information relating to an IDm number (fifth configuration).

[0018] This allows the IDm number, which is a unique number for the FeliCa card, to be used as card verification information, eliminating the need to store new information on the card. This makes it easy to realize an authentication system that can improve security while improving convenience.

[0019] In the first configuration, the portable storage device has a connection unit that allows data input and output, and the control unit has a connected unit to which the connection unit of the portable storage device can be connected (sixth configuration).

[0020] This allows the portable storage device and the control unit to be connected so that data can be transmitted and received between them. Therefore, the portable storage device can easily output permission information to the control unit via the connecting unit and the connected unit.

[0021] In the sixth configuration, the portable storage device is a fingerprint authentication device (seventh configuration). This makes it easy to realize a fingerprint authentication unit in the portable storage device. Moreover, it is also possible to easily perform fingerprint authentication of a finger while holding the portable storage device.

[0022] An authentication method according to one embodiment of the present invention is a method using an authentication system that generates and outputs a permission signal in response to biometric authentication. The authentication method includes a verification information input permission step of permitting input of verification information to a verification information input unit in response to a result of biometric authentication by a biometric authentication unit of a portable storage device, a verification information input step of acquiring the verification information input to the verification information input unit, a verification step of verifying the verification information input in the verification information input step with authentication information stored in a storage unit of the portable storage device, and a permission information output step of causing the storage unit of the portable storage device to output permission information based on a result of verifying the verification information with the authentication information in the verification step (first method).

[0023] This makes it possible to realize an authentication method that utilizes the authentication system of the present invention. [Effects of the Invention]

[0024] According to an authentication system of one embodiment of the present invention, the authentication system includes a portable storage device that is portable by a subject and includes a matching information input unit to which matching information is input, a biometric authentication unit that performs biometric authentication of a subject, and a memory unit that stores authentication information and permission information, and a control unit to which permission information is input from the portable storage device based on the result of matching between the matching information input to the matching information input unit and the authentication information stored in the memory unit of the portable storage device after the biometric authentication of the subject is performed by the biometric authentication unit.

[0025] As a result, even if the portable storage device storing the authorization information is lost, the authorization signal will not be input from the portable storage device to the control unit unless the verification information is input to the verification information input unit, thereby realizing an authentication system in which biometric authentication cannot be easily performed even if the portable storage device is lost. [Brief explanation of the drawings]

[0026] [Figure 1] FIG. 1 is a functional block diagram showing a schematic configuration of an authentication system according to the first embodiment. [Figure 2] FIG. 2 is a flowchart showing an outline of an authentication method using the authentication system. [Figure 3] FIG. 3 is a functional block diagram showing a schematic configuration of an authentication system according to a modification of the first embodiment. [Figure 4] FIG. 4 is a diagram showing a schematic configuration of an authentication system according to the second embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0027] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described in detail below with reference to the accompanying drawings. In the drawings, the same or corresponding parts are designated by the same reference numerals and the description thereof will not be repeated.

[0028] <Embodiment 1> 1 is a functional block diagram showing a schematic configuration of an authentication system 1 according to a first embodiment of the present invention. The authentication system 1 acquires permission information from a portable storage device 20 having a biometric authentication unit 21 and a storage unit 22 in which permission information is stored, when a predetermined condition is met. The authentication system 1 is used when restricting users according to the permission information, for example, when unlocking and locking doors, when authenticating when starting a vehicle, or when authenticating when starting and accessing a computer or system.

[0029] The authentication system 1 includes a verification information input unit 10, a portable storage device 20, and a control unit 30.

[0030] The verification information input unit 10 is configured to be able to input verification information. The verification information is information for verification with authentication information stored in a storage unit 22 (described later) of the portable storage device 20. The verification information includes, for example, number information, character information, symbol information, biometric information, and electrical signals. The verification information may be any information that can be verified with the authentication information. The verification information may be, for example, information stored in a portable device such as a card, memory, or portable terminal, or information input to an input operation device such as a keyboard.

[0031] The matching information input unit 10 includes, for example, a reading device capable of reading the matching information, an input operation device capable of inputting the matching information, etc. In other words, the matching information input unit 10 may have any configuration as long as it is configured to be able to input the matching information.

[0032] In this embodiment, the verification information input unit 10 is activated when biometric authentication of the subject is performed by a biometric authentication unit 21 (described later) of the portable storage device 20, and becomes ready to input the verification information.

[0033] The portable storage device 20 is a storage device that stores the authentication information and permission information and is portable by the subject. The portable storage device 20 also has a biometric authentication function that performs biometric authentication of the subject. In other words, the portable storage device 20 is a portable storage device with a biometric authentication function.

[0034] Specifically, the portable storage device 20 includes a biometric authentication unit 21, a storage unit 22, and an authentication control unit .

[0035] The biometric authentication unit 21 performs biometric authentication of the subject. The biometric authentication is authentication that uses the subject's biometric characteristics, such as fingerprints, face, voiceprint, iris, veins, DNA, and behavior. The biometric authentication unit 21 has a configuration that can determine the subject's biometric characteristics. The configuration of the biometric authentication unit 21 is similar to that of a device with a general biometric authentication function, so a detailed description will be omitted.

[0036] When the biometric authentication unit 21 performs biometric authentication of the subject and authenticates the subject, it generates an activation signal and outputs it to the matching information input unit 10. When the matching information input unit 10 receives the activation signal, it becomes ready to input the matching information.

[0037] The storage unit 22 stores the authentication information and the permission information. The storage unit 22 is, for example, a storage device such as a memory or a hard disk drive. The storage unit 22 may have any configuration as long as it is capable of storing the authentication information and the permission information. The authentication information is information for matching with the matching information input to the matching information input unit 10. The permission information is output to the control unit 30, which will be described later, and includes information for granting permission as the authentication system 1.

[0038] The authentication control unit 23 compares the matching information input to the matching information input unit 10 with the authentication information stored in the memory unit 22, and if the matching information matches the authentication information, outputs the permission information to the control unit 30. The authentication control unit 23 is composed of an arithmetic unit, an integrated circuit, a control unit, etc. provided in the portable storage device 20. The authentication control unit 23 may control biometric authentication by the biometric authentication unit 21. The authentication control unit 23 may also control input and output of data to and from the memory unit 22.

[0039] When the verification information input to the verification information input unit 10 matches the authentication information stored in the memory unit 22 of the portable storage device 20, the control unit 30 inputs the permission information from the memory unit 22 of the portable storage device 20. The control unit 30 may be a controller having other functions, or may be a controller for realizing an authentication function including the input processing of the permission information.

[0040] In this embodiment, the verification information is verified against the authentication information by the authentication control unit 23 of the portable storage device 20. However, the verification information may also be verified against the authentication information by the control unit 30. When the control unit 30 performs the verification, the control unit 30 causes the storage unit 22 of the portable storage device 20 to output the permission information in accordance with the result of the verification. The case where the control unit 30 performs the verification will be described in detail in a modified example described later.

[0041] The permission information input to the control unit 30 may be used, for example, to unlock and lock doors, authenticate when starting a vehicle, authenticate when starting and accessing a computer or system, etc. This allows users to be restricted.

[0042] The authentication system 1 of this embodiment generates and outputs a permission signal in response to biometric authentication. The authentication system 1 includes a portable storage device 20 that is portable by the subject and includes a matching information input unit 10 to which matching information is input, a biometric authentication unit 21 that performs biometric authentication of the subject, and a storage unit 22 that stores authentication information and permission information, and a control unit 30 to which permission information is input from the portable storage device 20 based on a result of matching between the matching information input to the matching information input unit 10 and the authentication information stored in the storage unit 22 of the portable storage device 20.

[0043] As a result, even if, for example, portable storage device 20 storing the permission information is lost, unless the matching information is input to matching information input unit 10 and the matching information is matched with the authentication information, the permission signal will not be input from portable storage device 20 to control unit 30. Furthermore, unless biometric authentication is performed by portable storage device 20, the matching information will not be matched with the authentication information, and therefore the permission signal will not be input from portable storage device 20 to control unit 30. Therefore, an authentication system 1 capable of improving security can be realized.

[0044] In addition, in this embodiment, the portable storage device 20 has an authentication control unit 23 that compares the matching information with the authentication information stored in the memory unit 22 using the matching information input unit 10, and outputs the permission information to the control unit 30 if the matching information matches the authentication information.

[0045] As a result, portable storage device 20 will not output permission information to control unit 30 unless the verification information input by verification information input unit 10 matches the authentication information stored in storage unit 22. Therefore, even if portable storage device 20 is lost, for example, a person who acquires the lost portable storage device cannot cause portable storage device 20 to output permission information to control unit 30. Therefore, an authentication system 1 that can further improve security can be realized.

[0046] (Authentication method) Next, an authentication method using the authentication system 1 having the above configuration will be described. Fig. 2 is a flowchart for explaining the authentication method.

[0047] 2 starts (START), first, biometric authentication unit 21 of portable storage device 20 performs biometric authentication of the subject (step SA1). In step SA2, it is determined whether the biometric authentication result is OK, and if the biometric authentication result is OK (YES in step SA2), the process proceeds to step SA3, where matching information is input to matching information input unit 10. On the other hand, if the biometric authentication result is NG (NO in step SA2), the biometric authentication in step SA1 is performed again.

[0048] In step SA4, which follows step SA3, authentication control unit 23 of portable storage device 20 compares the verification information with the authentication information stored in storage unit 22 of portable storage device 20. In the subsequent step SA5, authentication control unit 23 determines whether the verification result is OK, and if the verification result is OK (YES in step SA5), proceeds to step SA6, where permission information is output from storage unit 22 of portable storage device 20 to control unit 30, and this flow ends (END). On the other hand, if the verification result is NG (NO in step SA5), return to step SA3, and re-enter the verification information using verification information input unit 10.

[0049] Here, steps SA1 and SA2 correspond to a verification information input permission step, step SA3 corresponds to a verification information input step, steps SA4 and SA5 correspond to a verification step, and step SA6 corresponds to an authorization information output step.

[0050] The authentication method of this embodiment is a method using an authentication system 1 that generates and outputs a permission signal in response to biometric authentication. The authentication method includes a verification information input permission step of permitting input of verification information to verification information input unit 10 in response to a result of biometric authentication by biometric authentication unit 21 of portable storage device 20, a verification information input step of acquiring the verification information input to verification information input unit 10, a comparison step of comparing the verification information input in the verification information input step with authentication information stored in storage unit 22 of portable storage device 20, and a permission information output step of causing storage unit 22 of portable storage device 20 to output permission information based on a result of comparison between the verification information and the authentication information in the comparison step.

[0051] This allows an authentication method using the authentication system 1 to be realized.

[0052] (Variation) FIG. 3 is a functional block diagram showing a schematic configuration of an authentication system 50 according to a modification of the first embodiment.

[0053] In authentication system 50 of this modified example, control unit 80 compares the matching information input by matching information input unit 10 with the authentication information stored in memory unit 22 of portable storage device 70. That is, control unit 80 of this modified example receives the matching information from matching information input unit 10 and the authentication information from memory unit 22 of portable storage device 70.

[0054] The control unit 80 compares the inputted verification information with the authentication information, and if they match, instructs the portable storage device 70 to output the permission information stored in the storage unit 22 to the control unit 80. That is, if the verification information matches the authentication information, the control unit 80 generates an output signal for the permission information and transmits the output signal to the portable storage device 70. Upon receiving the output signal, the portable storage device 70 outputs the permission information to the control unit 80.

[0055] The portable storage device 70 of this modification includes the biometric authentication unit 21 and the storage unit 22, but does not include an authentication control unit. Therefore, in the flowchart of the first embodiment shown in FIG. 2, the comparison between the verification information and the authentication information in step SA4 is performed by the control unit 80, not the portable storage device 70.

[0056] In this modified example, the control unit 80 compares the matching information input to the matching information input unit 10 with the authentication information stored in the memory unit 22 of the portable storage device 70, and if the matching information matches the authentication information, obtains the permission information from the portable storage device 70.

[0057] As a result, control unit 80 will not acquire permission information from portable storage device 70 unless the verification information input to verification information input unit 10 matches the authentication information stored in memory unit 22. Therefore, even if portable storage device 70 is lost, for example, a person who acquires lost portable storage device 70 cannot cause portable storage device 70 to output the permission information to control unit 80. Therefore, an authentication system that can improve security can be realized.

[0058] Furthermore, the control unit 80 can perform the process of matching the matching information with the authentication information. This reduces the processing load on the portable storage device 70, allowing for a smaller size of the portable storage device 70 and improved design flexibility.

[0059] <Embodiment 2> 4 is a functional block diagram showing a schematic configuration of an authentication system 100 according to the second embodiment. The authentication system 100 differs from the authentication system 1 of the first embodiment in that it includes a card reading unit 110, a fingerprint authentication-enabled storage device 120, and a control unit 130. In the following, the same components as those in the first embodiment are denoted by the same reference numerals and their description is omitted, and only the parts that differ from the first embodiment will be described.

[0060] The authentication system 100 includes a card reader 110, a fingerprint authentication-enabled storage device 120, a controller 130, and a connection port 140 (connectable portion).

[0061] The card reading unit 110 reads the matching information from a card C on which the matching information is stored. The card reading unit 110 functions as a so-called card reader. The card reading unit 110 has the same functions as a general card reader, so a detailed description will be omitted. The card reading unit 110 corresponds to the matching information input unit 10 of the first embodiment.

[0062] The storage device with fingerprint authentication 120 has a fingerprint authentication unit 121, a storage unit 22, and an authentication control unit 23. The storage device with fingerprint authentication 120 corresponds to the portable storage device 20 of the first embodiment.

[0063] The storage device with fingerprint authentication 120 of this embodiment has a connection unit 124 connected to a connection port 140 that is connected to the control unit 130 so as to be able to send and receive data. By connecting the connection unit 124 of the storage device with fingerprint authentication 120 to the connection port 140, the storage device with fingerprint authentication 120 can send and receive data to and from the control unit 130.

[0064] The storage device with fingerprint authentication 120 is activated when the connection unit 124 is connected to the connection port 140, and performs fingerprint authentication using the fingerprint authentication unit 121. The fingerprint authentication unit 121 corresponds to the biometric authentication unit 21 of the first embodiment. Therefore, if the fingerprint authentication result by the fingerprint authentication unit 121 is OK, an activation signal is output from the storage device with fingerprint authentication 120 to the card reading unit 110. This activates the card reading unit 110 and reads the verification information from the card C.

[0065] The storage device with fingerprint authentication 120 compares the matching information read by the card reading unit 110 with the authentication information stored in the storage unit 22. If the matching result is OK, the storage device with fingerprint authentication 120 outputs the permission information stored in the storage unit 22 to the control unit 130 via the connection unit 124 and the connection port 140.

[0066] With the configuration of this embodiment, the authentication system 100 can be easily constructed using a device having the card reading unit 110 and the connection port 140. Therefore, the configuration of the first embodiment can be realized.

[0067] In this embodiment, the card reading unit 110, which is the verification information input unit, reads the verification information stored on the card. This allows the verification information to be easily input into the card reading unit 110 using the card. This improves convenience and security.

[0068] In this embodiment, the fingerprint authentication storage device 120, which is a portable storage device, has a connection unit 124 that allows data input and output. The control unit 130 has a connection port 140 to which the connection unit 124 of the fingerprint authentication storage device 120 can be connected.

[0069] This allows the storage device with fingerprint authentication 120 and the control unit 130 to be connected so that data can be sent and received. Therefore, the storage device with fingerprint authentication 120 can easily output permission information to the control unit 130 via the connection unit 124 and the connection port 140.

[0070] In this embodiment, the storage device with fingerprint authentication 120, which is a portable storage device, is a fingerprint authentication device. This makes it easy to realize the fingerprint authentication unit 121. Moreover, it is also possible to easily perform fingerprint authentication of a finger while the storage device with fingerprint authentication 120 is held by the finger.

[0071] (Other embodiments) Although the embodiments of the present invention have been described above, the above-described embodiments are merely examples for carrying out the present invention. Therefore, the present invention is not limited to the above-described embodiments, and it is possible to appropriately modify the above-described embodiments within the scope of the spirit of the present invention.

[0072] In each of the above-described embodiments, when authentication is performed by biometric authentication (fingerprint authentication) in the portable storage device 20, 70 (storage device 120 with fingerprint authentication), the matching information is input to the matching information input unit 10 (card reading unit 110). However, the matching information input unit (card reading unit) may be configured to be able to input matching information regardless of whether authentication is performed by biometric authentication (fingerprint authentication), and to output the input matching information to the portable storage device or the control unit when biometric authentication is performed.

[0073] In each of the above embodiments, the portable storage device 20, 70 (storage device 120 with fingerprint authentication) may be configured to be able to wirelessly communicate data with the control unit 30, 80, 130. Also, the portable storage device 20, 70 (storage device 120 with fingerprint authentication) may be configured to be able to wirelessly communicate data with the verification information input unit 10 (card reading unit 110). Furthermore, the control unit 30, 80, 130 may be configured to be able to wirelessly communicate data with the verification information input unit 10 (card reading unit 110). The wireless communication is a communication method that transmits and receives information using electromagnetic waves such as radio waves. The wireless communication includes not only wireless communication using a communication line, but also wireless communication such as intranetwork and Bluetooth (registered trademark).

[0074] If there are devices around the authentication system that are susceptible to wireless communication, it is preferable to use wired communication between the devices that make up the authentication system.

[0075] In the second embodiment, the authentication system 100 includes a fingerprint authentication-enabled storage device 120. However, the authentication system may include other storage devices with biometric authentication.

[0076] In the second embodiment, the card reading unit 110 corresponds to the verification information input unit 10 in the first embodiment. However, the verification information input unit may have another configuration as long as it is configured to be able to input verification information. The verification information input unit may be, for example, a reading device capable of reading data stored in a memory device, a recording medium, etc.

[0077] In the second embodiment, power may be supplied to the fingerprint authentication storage device 120 by connecting the connection unit 124 of the fingerprint authentication storage device 120 to the connection port 140. This allows the fingerprint authentication storage device 120 to be made smaller and lighter because it does not have a power source.

[0078] In the second embodiment, the card C may be a FeliCa card. The verification information of the card C may include information about the IDm number, which is a unique number of the FeliCa card. This allows the IDm number pre-recorded in the FeliCa card to be used as the verification information of the card C, eliminating the need to store new information in the card C. [Industrial Applicability]

[0079] The present invention can be used in an authentication system that generates and outputs a permission signal in response to biometric authentication. [Explanation of symbols]

[0080] 1, 50, 100 authentication system 10. Verification information input section 20, 70 Portable storage devices 21 Biometric Authentication Department 22 Memory section 23 Authentication control section 30, 80, 130 Control unit 110 Card reader (verification information input unit) 120 Fingerprint authentication storage device (portable storage device) 121 Fingerprint authentication unit (biometric authentication unit) 124 Connection 140 Connection port (connected part) C Card

Claims

1. An authentication system that generates and outputs a permission signal in response to biometric authentication, a verification information input unit into which verification information is input; a portable storage device that is portable by the subject, the portable storage device having a biometric authentication unit that performs biometric authentication of the subject and a storage unit that stores authentication information and permission information; a control unit to which the permission information is input from the portable storage device based on a result of matching between the matching information input to the matching information input unit and the authentication information stored in the storage unit of the portable storage device after the biometric authentication unit has performed biometric authentication of the subject; having Authentication system.

2. 2. The authentication system according to claim 1, The portable storage device includes: an authentication control unit that compares the verification information input to the verification information input unit with the authentication information stored in the storage unit, and outputs the permission information to the control unit when the verification information matches the authentication information; Authentication system.

3. 2. The authentication system according to claim 1, The control unit comparing the verification information input to the verification information input unit with the authentication information stored in the storage unit of the portable storage device, and if the verification information matches the authentication information, acquiring the permission information from the portable storage device. Authentication system.

4. 2. The authentication system according to claim 1, the verification information input unit reads the verification information stored in the card; Authentication system.

5. 5. The authentication system according to claim 4, the card is a FeliCa card, The verification information written on the card includes information about the ID number. Authentication system.

6. 2. The authentication system according to claim 1, the portable storage device has a connection section that allows data input and output, the control unit has a connection receiving unit to which the connection unit of the portable storage device can be connected; Authentication system.

7. 7. The authentication system according to claim 6, the portable storage device is a fingerprint authentication device; Authentication system.

8. An authentication method using an authentication system that generates and outputs a permission signal in response to biometric authentication, a verification information input permission step of permitting input of verification information to the verification information input unit according to a result of biometric authentication by the biometric authentication unit of the portable storage device; a verification information input step of acquiring verification information input to the verification information input unit; a verification step of verifying the verification information input in the verification information input step with authentication information stored in a storage unit of the portable storage device; a permission information output step of outputting permission information to a storage unit of the portable storage device based on a result of the comparison between the verification information and the authentication information in the verification step; having Authentication method.

Images