Biometric authentication system, biometric authentication device, biometric authentication method, and program

Abstract

To provide a biometric authentication system, biometric authentication device, biometric authentication method and program, which make it easier for users to receive services that require personal identification number-based authentication.SOLUTION: A biometric authentication system is provided, comprising an information storage unit and a biometric authentication device comprising a biometric information acquisition unit, biometric information verification unit, user information reading unit, and personal identification number input checking unit.SELECTED DRAWING: Figure 16

Description

[Technical Field]

[0001] The present disclosure relates to a biometric authentication system, a biometric authentication device, a biometric authentication method, and a program. [Background technology]

[0002] In a service provided to a specific user, biometric authentication is known, which performs personal authentication of the user using biometric information unique to the user (for example, a face image or a fingerprint image of the user). For example, Patent Document 1 describes that biometric authentication is performed by a system including an authentication terminal that collates the biometric information of the user. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] International Publication No. 2023 / 053268 Summary of the Invention [Problem to be solved by the invention]

[0004] To enhance security, some services require users who have a public certificate capable of biometric authentication to be authenticated using a personal identification number. Users who are uneasy about setting and managing their personal identification numbers are reluctant to use such services.

[0005] An object of the present disclosure is to provide a biometric authentication system, a biometric authentication device, a biometric authentication method, and a program that solve the above-mentioned problems. [Means for solving the problem]

[0006] A biometric authentication system according to one aspect of the present disclosure includes an information storage unit that stores a user's biometric information and the user's PIN number, and a biometric authentication device that is communicatively connected to the information storage unit, wherein the biometric authentication device includes a biometric information acquisition unit that acquires the user's biometric information from the user, a biometric information matching unit that matches the user's biometric information acquired by the biometric information acquisition unit with the user's biometric information stored in the information storage unit, a user information reading unit that reads the user's PIN number recorded on a user-specific recording medium, and a PIN input confirmation unit that confirms the user's PIN number.

[0007] A biometric authentication device according to one aspect of the present disclosure includes a biometric information acquisition unit communicatively connected to an information storage unit that stores a user's biometric information and the user's personal identification number, and that acquires the user's biometric information from the user; a biometric information matching unit that matches the user's biometric information acquired by the biometric information acquisition unit with the user's biometric information stored in the information storage unit; a user information reading unit that reads the user's personal identification number recorded on a user-specific recording medium; and a personal identification number input confirmation unit that confirms the user's personal identification number.

[0008] A biometric authentication method according to one embodiment of the present disclosure includes a first step of acquiring a user's biometric information from the user, a second step of referencing the user's biometric information stored in an information storage unit, a third step of comparing the user's biometric information acquired in the first step with the user's biometric information referenced in the second step, and a fourth step of confirming the user's PIN number if the user's biometric information is successfully matched in the third step.

[0009] A program according to one embodiment of the present disclosure is a program for causing a computer to execute the following steps: a first step of acquiring a user's biometric information from the user; a second step of referencing the user's biometric information stored in an information storage unit; a third step of comparing the user's biometric information acquired in the first step with the user's biometric information referenced in the second step; and a fourth step of confirming the user's PIN number if the user's biometric information is successfully matched in the third step. [Brief explanation of the drawings]

[0010] [Figure 1] 1 is a block diagram illustrating an example configuration of a biometric authentication system and a biometric authentication device according to the present disclosure. [Figure 2] FIG. 1 is a hardware configuration diagram of a biometric authentication device 10. [Figure 3] FIG. 1 is a flow diagram illustrating an example of a biometric authentication method according to the present disclosure. [Figure 4] FIG. 1 is a flow diagram illustrating an example of a biometric authentication method according to the present disclosure. [Figure 5] FIG. 1 is a flow diagram illustrating an example of a biometric authentication method according to the present disclosure. [Figure 6] FIG. 1 is a flow diagram illustrating an example of a biometric authentication method according to the present disclosure. [Figure 7] FIG. 1 is a flow diagram illustrating an example of a biometric authentication method according to the present disclosure. [Figure 8] FIG. 10 is a schematic diagram illustrating an example of an input screen displayed on a biometric authentication device according to the present disclosure. [Figure 9] FIG. 10 is a schematic diagram illustrating an example of an input screen displayed on a biometric authentication device according to the present disclosure. [Figure 10] FIG. 10 is a schematic diagram illustrating an example of an input screen displayed on a biometric authentication device according to the present disclosure. [Figure 11] FIG. 10 is a schematic diagram illustrating an example of an input screen displayed on a biometric authentication device according to the present disclosure. [Figure 12] FIG. 1 is a flow diagram illustrating an example of a biometric authentication method according to the present disclosure. [Figure 13]FIG. 10 is a schematic diagram illustrating an example of an input screen displayed on a biometric authentication device according to the present disclosure. [Figure 14] FIG. 1 is a flow diagram illustrating an example of a biometric authentication method according to the present disclosure. [Figure 15] FIG. 10 is a schematic diagram illustrating an example of an input screen displayed on a biometric authentication device according to the present disclosure. [Figure 16] 1 is a block diagram illustrating an example configuration of a biometric authentication system and a biometric authentication device according to the present disclosure. [Figure 17] FIG. 1 is a flow diagram illustrating an example of a biometric authentication method according to the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0011] Each embodiment will be described below with reference to the drawings. In all drawings, the same or corresponding components are designated by the same reference numerals, and common descriptions will be omitted.

[0012] First Embodiment Hereinafter, an embodiment of the present disclosure will be described with reference to FIGS.

[0013] 1 is a block diagram showing an example of the configuration of a biometric authentication system and a biometric authentication device according to the present disclosure. The biometric authentication system 1 includes a biometric authentication device 10 and an information storage unit 11.

[0014] The biometric authentication device 10 is a device that performs biometric authentication of a user. The biometric authentication device 10 is a terminal capable of communication. The biometric authentication device 10 is communicably connected to an information storage unit 11 via a network NW such as the Internet. The biometric authentication device 10 is, for example, a terminal owned by a user, such as a smartphone, tablet, or PC, but is not limited to these. The biometric authentication device 10 may also be a terminal installed in a public institution or medical institution that can be used by an unspecified number of users.

[0015] Services provided to specific users include, for example, public services provided by government agencies and medical services provided by medical institutions. In such services, the user is identified and the service is provided by verifying information identifying the user (typically, identity information such as name and address) recorded in an official certificate. Examples of official certificates include My Number cards, driver's licenses, and passports. Official certificates have an IC chip on which information identifying the user is recorded. Recording the user's biometric information on this IC chip enables biometric authentication in public services, medical services, and other services provided to specific users (hereinafter, identity information and biometric information are collectively referred to as "user identification information"). The IC chip in an official certificate is a user-specific recording medium on which information identifying the user is recorded.

[0016] Even for users who have a public certificate that allows biometric authentication, some services cannot be accessed solely through biometric authentication in order to enhance security. One example of such public services is the service provided by My Number Portal, an online portal for administrative procedures in Japan. Such services require authentication using a string of numbers, such as a personal identification number (PIN), or a string of characters other than numbers, such as a password (collectively referred to as a "PIN" below). The PIN is recorded on the IC chip of the public certificate. Before a service is provided, the PIN entered by the user is verified to ensure that it can be used to read the user information recorded on the public certificate. The user can access the service only if the PIN verification is successful (hereinafter, the user identification information and the PIN are collectively referred to as "user information").

[0017] FIG. 2 is a diagram showing the hardware configuration of the biometric authentication device 10. As shown in FIG. 2, the biometric authentication device 10 is a computer equipped with various hardware components such as a CPU (Central Processing Unit) 151, a ROM (Read Only Memory) 152, a RAM (Random Access Memory) 103, a database 104, and a communication module 105. The biometric authentication device 10 may be configured as a single computer, or may be configured as a single biometric authentication device 10 by connecting multiple computers for communication.

[0018] The information storage unit 11 is a storage medium located outside the biometric authentication device 10. The information storage unit 11 stores user information (user identification information and a personal identification number) encrypted in the user's biometric authentication device 10. The information storage unit 11 is, for example, a server device or a cloud server.

[0019] The biometric authentication device 10 includes a PIN input confirmation unit 101, a user information reading unit 102, a control unit 103, a temporary information storage unit 104, a biometric information acquisition unit 105, a biometric information matching unit 106, a photographing unit 107, and a display unit 108.

[0020] A PIN is input to the PIN input verification unit 101. The PIN input verification unit 101 verifies whether the input PIN is a PIN that can read user information recorded in the official certificate. For example, the PIN input verification unit 101 compares the PIN input by the user with the PIN recorded in the official certificate. For example, the PIN input verification unit 101 compares the PIN obtained by decryption by the control unit 103 with the PIN recorded in the official certificate.

[0021] The user information reading unit 102 reads user information recorded in an official certificate. The read user information does not necessarily include all of the user identification information (identity information, biometric information) and the PIN number. The read user information may include only a portion of the user information depending on the occasion when the reading is performed. The read user information may include only biometric information and the PIN number. The read user information may include only identity information. The read biometric information may include only a portion of the biometric information, such as a facial image. The read identity information may include only a portion of the identity information, such as an address.

[0022] The control unit 103 executes the biometric authentication method according to the present disclosure in the biometric authentication device 10. The control unit 103 issues a key for encrypting user information. The control unit 103 stores the key. The control unit 103 encrypts the user information using the stored key. The control unit 103 issues a key for encrypting the user information. The control unit 103 executes a process for acquiring the user's biometric information from the user in the biometric authentication device 10. The control unit 103 decrypts the encrypted biometric information. The control unit 103 decrypts the encrypted PIN. Hereinafter, the biometric information obtained by decryption by the control unit 103 and the PIN obtained by decryption by the control unit 103 are abbreviated as "decrypted biometric information" and "decrypted PIN", respectively.

[0023] The temporary information storage unit 104 temporarily stores information acquired or generated in the biometric authentication device 10 during the biometric authentication method according to the present disclosure. The temporary information storage unit 104 temporarily stores user information read from the user's official certificate. The temporary information storage unit 104 temporarily stores user information encrypted in the biometric authentication device 10. The temporary information storage unit 104 temporarily stores biometric information acquired from the user in the biometric authentication device 10. The temporary information storage unit 104 temporarily stores encrypted biometric information transmitted from the information storage unit 11. The temporary information storage unit 104 temporarily stores an encrypted personal identification number transmitted from the information storage unit 11. The temporary information storage unit 104 temporarily stores information indicating that the biometric information matching in the biometric authentication device 10 has failed.

[0024] The biometric information acquisition unit 105 acquires biometric information of a user from the user. The biometric information acquisition unit 105 acquires an image of the user's face captured by the biometric authentication device 10 during the biometric authentication method according to the present disclosure. The biometric information acquisition unit 105 acquires an image of the user's fingerprint captured by the biometric authentication device 10 during the biometric authentication method according to the present disclosure. Hereinafter, the user's biometric information acquired from the user by the biometric information acquisition unit 105 will be abbreviated as "acquired biometric information."

[0025] The biometric information matching unit 106 matches the acquired biometric information with the decoded biometric information.

[0026] The photographing unit 107 takes a photograph using a camera 111 (see FIGS. 8 to 11) of the biometric authentication device 10. The display unit 108 displays messages, images, input fields, etc. for the user on a touch panel 110 (see FIGS. 8 to 11) of the biometric authentication device 10.

[0027] Figures 3 to 7 are flow diagrams showing examples of a biometric authentication method according to the present disclosure. Figure 3 is a flow diagram showing the entire biometric authentication method according to the present disclosure. Figure 4 is a flow diagram showing details of the first process shown in Figure 3 in the biometric authentication method according to the present disclosure. Figures 4 to 7 are flow diagrams showing details of the second process shown in Figure 3 in the biometric authentication method according to the present disclosure.

[0028] 8 to 11 are schematic diagrams showing examples of input screens displayed on the biometric authentication device according to the present disclosure. 110 and 111 are a touch panel and a camera, respectively, included in the biometric authentication device 10. FIG. 8 is an example of an input screen (GUI) that asks the user whether or not to input a PIN. FIG. 9 is an example of an input screen that requests the user to input a PIN. FIG. 10 is an example of an input screen that requests the user to take a photograph of a face image, which is the user's biometric information. FIG. 11 is an example of an input screen that displays a message to the user that biometric authentication has been successful and requests the user to select a service to use.

[0029] As shown in FIG. 3, the biometric authentication method according to the present disclosure includes a PIN entry necessity selection step S11, a PIN entry necessity determination step S12, a first processing step S13, and a second processing step S14.

[0030] A user who wishes to receive a public service, medical service, or other service provided to a specific user first selects whether or not input of a personal identification number is required, and inputs the answer into the biometric authentication device 10 (S11). The answer may be input by the user touching either of the "Yes" or "No" buttons 112Y and 112N displayed on the touch panel 110, as shown in Fig. 8, for example. The answer may also be input by voice.

[0031] Returning to Fig. 3, the biometric authentication device 10 determines whether or not a PIN is required to be entered based on the answer entered by the user (S12). If a PIN is required to be entered, the process proceeds to a first process (S13). If a PIN is not required to be entered, the process proceeds to a second process (S14). When either the first process (S13) or the second process (S14) is completed, the biometric authentication method according to the present disclosure is completed.

[0032] As shown in FIG. 4, the first process (S13) includes a PIN input confirmation step S1301, a user information reading step S1302, a user information temporary storage step S1303, a user information control unit transmission step S1304, an encryption key issuance step S1305, a user information encryption step S1306, an encrypted information temporary storage step S1307, and an encrypted information external transmission step S1308.

[0033] First, the user inputs a PIN into the PIN input confirmation unit 101 (see FIG. 1) of the biometric authentication device 10. The PIN input confirmation unit 101 checks whether the PIN input by the user is a PIN that can read user information recorded in the official certificate (S1301). For example, if the PIN is recorded in the official certificate, the input PIN may be compared with the PIN recorded in the official certificate. The PIN may be input by the user typing it into an input field 113 displayed on the touch panel 110, as shown in FIG. 9, for example.

[0034] After the PIN is successfully verified, the user information (user identification information, PIN) recorded in the official certificate is read by the user information reading unit 102 (see FIG. 1) of the biometric authentication device 10 (S1302). For example, the user information acquiring unit 102 may acquire the PIN entered by the user for matching. The user information read in step S1302 includes at least the biometric information used for biometric information matching in the second process (S14) and the PIN.

[0035] Next, the user information read from the official certificate is stored in the temporary information storage unit 104 (see FIG. 1) of the biometric authentication device 10 (S1303).

[0036] Next, the user information stored in the temporary information storage unit 104 is transmitted to the control unit 103 (see FIG. 1) of the biometric authentication device 10 (S1304). In step S1304, after transmission to the control unit 103, the user information stored in the temporary information storage unit 104 may or may not be deleted, but it is preferable to delete it in order to save storage capacity.

[0037] Next, the control unit 103 of the biometric authentication device 10 issues an encryption key. The control unit 103 stores the issued key (S1305).

[0038] The control unit 103 may issue only one key and use the same key to encrypt the biometric information used for biometric information matching in the second process and to encrypt the personal identification number. The control unit 103 may issue two different keys and use different keys to encrypt the biometric information used for biometric information matching in the second process and to encrypt the personal identification number.

[0039] The control unit 103 may use a predetermined key or may use a key created by the control unit 103 itself. The control unit 103 may create a key based on an ID unique to the biometric authentication device 10. The control unit 103 may create a key using a random number. When issuing two different keys, the control unit 103 may use a key created based on an ID unique to the biometric authentication device 10 to encrypt the biometric information, and may use a key created based on the biometric information itself (for example, a digital representation of a facial image) to encrypt the issued PIN.

[0040] Next, the control unit 103 uses the stored key to encrypt the user information transmitted from the information temporary storage unit 104 (S1306). Next, the control unit 103 transmits the encrypted user information to the information temporary storage unit 104 (S1307). Next, the encrypted user information stored in the information temporary storage unit 104 is transmitted from the biometric authentication device 10 to the information storage unit 11 (see FIG. 1) via the network NW (S1308).

[0041] There are usually multiple users (for example, all the citizens of a certain city, or all the patients of a certain hospital). As a result, encrypted user information of multiple different users is stored in the information storage unit 11. For this reason, unless the encrypted user information transmitted by each user in step S1308 is somehow linked to each user, the encrypted user information of that user cannot be used in the user's biometric authentication device 10 in subsequent steps (S1401b and thereafter).

[0042] Therefore, in step S1306 or S1307, the biometric authentication device 10 associates the encrypted user information with the user. For example, the control unit 103 of the biometric authentication device 10 issues an ID number, and adds the ID number to the encrypted user information and records it.

[0043] The ID number may be a numeric string unique to the official certificate and recorded on an IC chip in the official certificate. The ID number may also be, for example, a numeric string that digitizes part or all of the user's identity information.

[0044] When the biometric authentication device 10 is linked to only one specific user, the ID number may be, for example, a numeric string unique to the biometric authentication device 10. The ID number may be, for example, the serial number of the biometric authentication device 10. The ID number may be, for example, the phone number of the smartphone that is the biometric authentication device 10.

[0045] In step S1308, after transmission to the information storage unit 11, the encrypted user information stored in the information temporary storage unit 104 may or may not be deleted, but it is preferable to delete it in order to save storage capacity.

[0046] This completes the first process (S13). After the first process is completed, the encrypted user information (including at least the biometric information used for biometric information matching in the second process and the personal identification number) is added with an ID number corresponding to the user and is stored in the information storage unit 11.

[0047] 5 to 7, the second process (S14) includes a biometric information acquisition process execution step S1401a, a biometric information acquisition step S1402, an acquired biometric information temporary storage step S1403a, an acquired biometric information to biometric information matching unit transmission step S1404a, an encrypted biometric information temporary storage step S1401b, an encrypted biometric information control unit transmission step S1402b, an encrypted biometric information decryption step S1403b, a decrypted biometric information to biometric information matching unit transmission step S1404b, a biometric information matching step S1405, a matching failure determination step S1406, an encrypted PIN temporary storage step S1407Y, an encrypted PIN control unit transmission step S1408Y, an encrypted authentication number decryption step S1409Y, a matching failure information temporary storage step S1407N, a matching failure information control unit transmission step S1408N, and a PIN input confirmation step S1410a.

[0048] Steps S1401a to S1404a are steps for acquiring biometric information from a user, and steps S1401b to S1404b are steps for referencing stored biometric information.

[0049] In the second process (S14), when steps S1401a to S1404a are executed first, steps S1401a to S1404a and S1401b to S1404b may be executed in parallel, or either may be executed first, but it is preferable to execute them in parallel to save time. The process cannot proceed to step S1405 unless at least both steps S1404a and S1404b are completed.

[0050] In the second process (S14), when steps S1401a to S1404a are executed for the second time or later after step S1408N, steps S1401b to S1404b do not need to be executed if the biometric information matching unit 106 (see FIG. 1) of the biometric authentication device 10 is in a state where it can refer to the decrypted biometric information. For this reason, it is preferable to continue storing the decrypted biometric information in the information temporary storage unit 104 until it is determined that the matching was successful in matching determination step S1406.

[0051] As shown in FIG. 5, in steps S1401a to S1404a, first, the control unit 103 (see FIG. 1) of the biometric authentication device 10 issues a command to the biometric information acquisition unit 105 to execute a process of acquiring biometric information from a user (S1401a). Next, the biometric information acquisition unit 105, having received the command from the control unit 103, acquires the biometric information from the user (S1402a). For example, as shown in FIG. 10, if the biometric information is a face image, the acquisition of the biometric information from the user is performed using the camera 111 of the biometric authentication device 10. A face image 114 of the user taken by the camera is displayed on the touch panel 110. The user can check the face image 114 displayed on the touch panel 110.

[0052] 5, next, the acquired biometric information acquired by the biometric information acquisition unit 105 is stored in the information temporary storage unit 104 (S1403a). Next, the acquired biometric information stored in the information temporary storage unit 104 is transmitted to the biometric information matching unit 106 (S1404a). In step S1404a, after transmission to the biometric information matching unit 106, the acquired biometric information stored in the information temporary storage unit 104 may or may not be deleted, but it is preferable to delete it in order to save storage capacity used.

[0053] On the other hand, in steps S1401b to S1404b, first, the encrypted user information (including at least the biometric information used for biometric information matching in the second process) stored in the information storage unit 11, to which an ID number corresponding to the user is assigned, is transmitted to the biometric authentication device 10 via the network NW and stored in the information temporary storage unit 104 (S1401b). In step S1401b, only the encrypted biometric information (used for biometric information matching) of the encrypted user information may be transmitted. In step S1401b, the encrypted biometric information (used for biometric information matching) and the encrypted password of the encrypted user information may be transmitted simultaneously.

[0054] The second process (S14) is performed on the premise that the encrypted user information is stored in the information storage unit 11 (the first process (S13) is completed). If the encrypted user information is not stored in the information storage unit 11 (the first process (S13) is not completed), steps S1401b to S1404b cannot be performed. In this case, in step S1401b, the biometric authentication device 10 may display a warning that the encrypted user information is not stored in the information storage unit 11 (the first process (S13) is not completed), and the process may proceed to the first process (S13) (see FIG. 3).

[0055] Returning to Fig. 5, next, of the encrypted user information stored in temporary information storage unit 104, encrypted biometric information (used for biometric information matching) is transmitted to control unit 103 (S1402b). In step S1402b, the encrypted user information (other than the password) stored in temporary information storage unit 104 after transmission to control unit 103 may or may not be deleted, but it is preferable to delete it in order to save storage capacity. On the other hand, if encrypted password information was transmitted in step S1401b, the encrypted password information is used after biometric information matching (S1406) (S1409Y) (see Fig. 6). In step S1402b, the encrypted secret information stored in the temporary information storage unit 104 after transmission to the control unit 103 may or may not be deleted, but it is preferable to store it rather than delete it in order to omit the steps of temporarily storing the encrypted secret information in the temporary information storage unit 104 (S1407Y) and transmitting it to the control unit 103 (S1408Y) (see Figure 6).

[0056] 5, next, the encrypted biometric information (used for biometric information matching) transmitted to the control unit 103 is decrypted by the control unit 103 using the stored key (S1403b). Next, the decrypted biometric information decrypted by the control unit 103 is transmitted to the biometric information matching unit 106 (S1404b).

[0057] After both steps S1404a and S1404b are completed, the biometric information matching unit 106 matches the acquired biometric information sent from the information temporary storage unit 104 with the decrypted biometric information sent from the control unit 103 (S1405).

[0058] As shown in FIG. 6, after the biometric information matching step S1405 is completed, the biometric information matching unit 106 first determines whether the biometric information matching has been successful (S1406). If it is determined that the matching has failed, information indicating that the matching has failed is first stored in the information temporary storage unit 104 (S1407N). Next, the information indicating that the matching has failed, stored in the information temporary storage unit 104, is transmitted to the control unit 103 (S1408N). Next, the process returns to step S1401a. As a result, biometric information is again acquired from the user. If the biometric information matching unit 106 of the biometric authentication device 10 is in a state where it can refer to the decrypted biometric information, steps S1401b to S1404b do not need to be executed.

[0059] The biometric authentication performed in the second process (S14) uses the (encrypted) biometric information stored in the information storage unit 11. Therefore, the user does not need to have the biometric authentication device 10 read the biometric information from the official certificate.

[0060] If it is determined that the matching is successful, first, of the encrypted personal identification numbers stored in the information storage unit 11, one that has been assigned an ID number corresponding to the user is transmitted to the biometric authentication device 10 via the network NW and stored in the temporary information storage unit 104 (S1407Y). If the encrypted personal identification information is transmitted in step S1401b and the encrypted personal identification information is stored in the temporary information storage unit 104 at the time it is determined in step S1406 that the matching is successful, step S1407Y may be omitted.

[0061] Next, the encrypted PIN stored in temporary information storage unit 104 is transmitted to control unit 103 (S1408Y). Next, control unit 103 decrypts the encrypted PIN (S1409Y). Hereinafter, the PIN obtained by decryption by control unit 103 will be referred to as the "decrypted PIN."

[0062] As shown in FIG. 7, after the encrypted PIN decryption step S1409Y is completed, the decrypted PIN is entered and confirmed (S1410). Steps S1407Y to S1409Y and S1410 together are steps for inputting and verifying the stored personal identification number.

[0063] This completes the second process (S14). In the second process, unlike the first process (S13), the user only performs biometric authentication. Therefore, the user does not need to enter a PIN number, and does not even need to be aware that authentication using a PIN number is being performed. For a user who has been successfully matched in the second process (biometric authentication, authentication using a PIN number), a message may be displayed to inform the user that biometric authentication was successful, as shown in FIG. 11, and the user may be asked to select a service to use.

[0064] The biometric authentication system 1 described above has an internal computer system. The steps of the biometric authentication method described above are stored in the form of a program on a computer-readable recording medium, and the computer reads and executes this program to perform the above processing. Here, the computer-readable recording medium refers to a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, etc. Alternatively, the computer program may be distributed to a computer via a communication line, and the computer that receives the program may execute the program.

[0065] Alternatively, a biometric authentication method may be performed by recording a program for implementing the functions of the biometric authentication system 1 in FIG. 1 on a computer-readable recording medium, and then loading and executing the program on the recording medium into a computer system. The term "computer system" as used herein includes hardware such as an operating system and peripheral devices. The term "computer system" also includes a World Wide Web (WWW) system equipped with a homepage provision environment (or display environment). The term "computer-readable recording medium" refers to portable media such as flexible disks, optical magnetic disks, ROMs, and CD-ROMs, as well as storage devices such as hard disks built into computer systems. The term "computer-readable recording medium" also includes devices that retain a program for a certain period of time, such as volatile memory (RAM) within a computer system that acts as a server or client when the program is transmitted via a network such as the Internet or a communication line such as a telephone line.

[0066] The program may also be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by transmission waves in the transmission medium. Here, the "transmission medium" that transmits the program refers to a medium that has the function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. The program may also be a program that realizes part of the above-mentioned functions. Furthermore, the program may be a so-called differential file (differential program) that can realize the above-mentioned functions in combination with a program already recorded in the computer system.

[0067] Users who are unsure about setting and managing their PIN numbers, such as users with poor memory (typically elderly people), find it difficult to remember their own PIN numbers, and if they forget their PIN, it is difficult to confirm it at the counter of a public institution or medical institution. Furthermore, the procedure for a public institution to reissue a PIN takes time and effort. As a result, such users find it difficult to use the services mentioned above. Forgetting one's own PIN number or mistaking it for a PIN for another service is not limited to users with poor memory; in such cases, it also becomes difficult to use the services mentioned above. (To enhance security, some services become locked out if an incorrect PIN is entered multiple times in a row.)

[0068] According to the biometric authentication system, biometric authentication device, biometric authentication method, and program of the present embodiment, the user does not need to input the personal identification number when using the service for the second time or later. Therefore, the user does not need to remember a password. Therefore, users are more likely to receive services that require authentication using a personal identification number.

[0069] Second Embodiment An embodiment according to the present disclosure will be described below with reference to Fig. 12. The descriptions regarding Figs. 1, 2, 3 to 6, and 8 to 11 are the same as those already described, and will therefore be omitted.

[0070] In the biometric authentication method of the present disclosure, the second process (S14) (see FIG. 3) includes, after the encrypted PIN decryption step S1409Y and the PIN input confirmation step S1410 are completed, an updated user identification information reading step S2411, an updated user identification information encryption step S2412, an updated user identification information temporary storage step S2413, and an updated user identification information external transmission step S2414, as shown in FIG. 12 instead of FIG. 7.

[0071] In the first process (S13) (see FIG. 3), after the encrypted user information is stored in the information storage unit 11, the user identification information (e.g., address information) recorded in the official certificate may be updated. The biometric authentication method according to the present disclosure allows a user who has successfully verified their PIN to update the encrypted user identification information stored in the information storage unit 11. For example, as shown in FIG. 11, a user who has successfully passed the verification (biometric authentication, authentication using a PIN) in the second process may be requested to select a service to use, and the user who has selected to update their user identification information (address information in FIG. 11) may proceed to step S2411 and subsequent steps.

[0072] 12, in updated user identification information reading step S2411, the user who has successfully confirmed the personal identification number has the user identification information recorded in the official certificate read by the biometric authentication device 10. Hereinafter, the user identification information read in step S2411 will be abbreviated as "updated user identification information." In updated user identification information encryption step S2412, the updated user identification information is stored in temporary information storage unit 104, transmitted to control unit 103, and encrypted using a key stored in control unit 103. The above corresponds to steps S1303, S1304, and S1306 (see FIG. 4), but these are collectively designated as step S2412.

[0073] 12, in updated user identification information temporary storage step S2413, the encrypted updated user identification information is stored in information temporary storage unit 104. In updated user identification information external transmission step S2414, the encrypted updated user identification information stored in information temporary storage unit 104 is transmitted to information storage unit 11. In information storage unit 11, the encrypted updated user identification information is overwritten on the encrypted user identification information already stored and stored. This allows the updated user identification information to be stored in an encrypted form.

[0074] According to the biometric authentication system, biometric authentication device, biometric authentication method, and program of the present embodiment, the user does not need to input the personal identification number when using the service for the second time or later. Therefore, the user does not need to remember a password. Therefore, users are more likely to receive services that require authentication using a personal identification number.

[0075] Third Embodiment An embodiment according to the present disclosure will be described below with reference to Fig. 13. The description of Figs. 1 to 12 is the same as that already given, and will therefore be omitted.

[0076] In the biometric authentication method according to the present disclosure, if it is determined that matching has failed one or more (e.g., five) consecutive times in the matching failure determination step S1406 (see FIGS. 5 and 6) of the second process (S14) (see FIG. 3), the user is allowed to switch to authentication by inputting a PIN number.

[0077] Fig. 13 is an example of a screen that presents the user with the option of switching to authentication by inputting a personal identification number. In Fig. 13, a message indicating that biometric authentication has failed is displayed on the touch panel 110 of the biometric authentication device 10, along with a message asking whether or not to switch to authentication by inputting a personal identification number, and "Yes" and "No" buttons 115Y and 115N are displayed.

[0078] According to the biometric authentication system, biometric authentication device, biometric authentication method, and program of the present embodiment, the user does not need to input the personal identification number when using the service for the second time or later. Therefore, the user does not need to remember a password. Therefore, users are more likely to receive services that require authentication using a personal identification number.

[0079] <Fourth embodiment> An embodiment according to the present disclosure will be described below with reference to Figures 14 and 15. The description of Figures 1 to 3 and 5 to 12 is the same as that already given, and will therefore be omitted.

[0080] In the biometric authentication method according to the present disclosure, in the second process (S14) (see FIG. 3), as shown in FIG. 14 instead of FIG. 5, a user selection step S3400 is performed prior to a biometric information acquisition process execution step S1401a and an encrypted biometric information temporary storage step S1401b.

[0081] When the biometric authentication device 10 can be used by multiple different users, rather than just one specific user (for example, a PC shared by a family, or a terminal installed in a public institution or medical institution), there are multiple candidate users whose biometric information is acquired in the biometric information acquisition process execution step S1401a of the second process, and multiple candidate users corresponding to the encrypted biometric information temporarily stored in the encrypted biometric information temporary storage step S1401b. In this case, it is also possible to transmit the encrypted biometric information corresponding to all candidate users from the information storage unit 11 to the information temporary storage unit 103 in the encrypted biometric information temporary storage step S1401b. However, when there are a large number of such candidate users (for example, candidate users who use terminals installed in a public institution or medical institution), such an approach is not preferable because it unnecessarily increases the communication traffic and storage capacity.

[0082] In the biometric authentication method according to the present disclosure, in the second process (S14) (see FIG. 3), first, the user specifies the ID number added to the encrypted biometric information corresponding to the user (S3400). As a result, in the next step S1401b, it is sufficient to transmit the encrypted biometric information corresponding to the user from the information storage unit 11 to the information temporary storage unit 103. The ID number used here is preferably an ID number generated from information that is easier for the user to remember than a PIN (for example, identification information such as the user's name and date of birth).

[0083] Fig. 15 is an example of a screen where the user inputs his / her name and date of birth to specify an ID number in step S3400. In Fig. 15, a message prompting the user to input the name and date of birth of the user, and input fields 116a and 116b for the name and date of birth are displayed on the touch panel 110 of the biometric authentication device 10.

[0084] According to the biometric authentication system, biometric authentication device, biometric authentication method, and program of the present embodiment, the user does not need to input the personal identification number when using the service for the second time or later. Therefore, the user does not need to remember a password. Therefore, users are more likely to receive services that require authentication using a personal identification number.

[0085] Fifth Embodiment Hereinafter, one embodiment according to the present disclosure will be described with reference to FIGS.

[0086] As shown in FIG. 16, a biometric authentication system 5 according to the present disclosure includes an information storage unit 51 that stores a user's biometric information and the user's PIN number, and a biometric authentication device 50 that is communicatively connected to the information storage unit 51. The biometric authentication device 50 includes a biometric information acquisition unit 501 that acquires the user's biometric information from the user, a biometric information matching unit 502 that matches the user's biometric information acquired by the biometric information acquisition unit 501 with the user's biometric information stored in the information storage unit 51, a user information reading unit 503 that reads the user's PIN number recorded on a user-specific recording medium, and a PIN input confirmation unit 504 that confirms the user's PIN number.

[0087] A biometric authentication device 50 according to the present disclosure includes a biometric information acquisition unit 501 communicably connected to an information storage unit 51 that stores a user's biometric information and a user's personal identification number, and that acquires the user's biometric information from the user; a biometric information matching unit 502 that matches the user's biometric information acquired by the biometric information acquisition unit 501 with the user's biometric information stored in the information storage unit 51; a user information reading unit 503 that reads the user's personal identification number recorded on a user-specific recording medium; and a personal identification number input confirmation unit 504 that confirms the user's personal identification number.

[0088] As shown in FIG. 17, the biometric authentication method according to the present disclosure includes a first step of acquiring biometric information of a user from the user, a second step of referencing the biometric information of the user stored in an information storage unit, a third step of comparing the biometric information of the user acquired in the first step with the biometric information of the user referenced in the second step, and a fourth step of confirming the user's personal identification number if the comparison of the biometric information of the user in the third step is successful.

[0089] The program disclosed herein is a program for causing a computer to execute the following steps: a first step of acquiring a user's biometric information from the user; a second step of referencing the user's biometric information stored in an information storage unit; a third step of comparing the user's biometric information acquired in the first step with the user's biometric information referenced in the second step; and a fourth step of confirming the user's PIN number if the user's biometric information is successfully matched in the third step.

[0090] According to the biometric authentication system, biometric authentication device, biometric authentication method, and program of the present embodiment, the user does not need to input the personal identification number when using the service for the second time or later. Therefore, the user does not need to remember a password. Therefore, users are more likely to receive services that require authentication using a personal identification number.

[0091] Although the present disclosure has been described above with reference to the embodiments, the present disclosure is not limited to the above-described embodiments. Various modifications that can be understood by those skilled in the art can be made to the configuration and details of the present disclosure within the scope of the present disclosure. Furthermore, each embodiment can be combined with other embodiments as appropriate.

[0092] Some or all of the above-described embodiments can be described as, but are not limited to, the following supplementary notes.

[0093] (Appendix 1) an information storage unit that stores biometric information of a user and a personal identification number of the user; a biometric authentication device communicably connected to the information storage unit; Equipped with The biometric authentication device a biometric information acquisition unit that acquires biometric information of the user from the user; a biometric information matching unit that matches the biometric information of the user acquired by the biometric information acquisition unit with the biometric information of the user stored in the information storage unit; a user information reading unit that reads a user's personal identification number recorded on a recording medium specific to the user; a PIN input confirmation unit that confirms the user's PIN, Biometric authentication system.

[0094] (Appendix 2) The biometric authentication device includes a control unit, the control unit encrypts the user's personal identification number read by the user information reading unit, the information storage unit stores the encrypted personal identification number of the user; The control unit decrypts the encrypted personal identification number of the user, the PIN input confirmation unit collates the user's PIN decrypted by the control unit with the user's PIN recorded on the recording medium; 1. A biometric authentication system as defined in claim 1.

[0095] (Appendix 3) the personal identification number input confirmation unit collates the personal identification number input by the user with the personal identification number of the user read by the user information reading unit; the user information reading unit reads the biometric information of the user recorded on the user-specific recording medium; The information storage unit stores the biometric information of the user read by the user information reading unit. 3. A biometric authentication system according to claim 1 or 2.

[0096] (Appendix 4) The biometric authentication device includes a control unit, the control unit encrypts the biometric information of the user read by the user information reading unit, the information storage unit stores the encrypted biometric information of the user; The control unit decrypts the encrypted biometric information of the user, the biometric information matching unit matches the biometric information of the user acquired by the biometric information acquisition unit with the biometric information of the user decrypted by the control unit; 4. The biometric authentication system of any one of claims 1 to 3.

[0097] (Appendix 5) the user information reading unit reads the user's identification information recorded on the user-specific recording medium; the information storage unit stores the user's identification information read by the user information reading unit; 5. The biometric authentication system of any one of claims 1 to 4.

[0098] (Appendix 6) The biometric authentication device includes a control unit, the control unit encrypts the user's identification information read by the user information reading unit, The information storage unit stores the encrypted user identification number. 6. The biometric authentication system of any one of appendices 1 to 5.

[0099] (Appendix 7) When the biometric information acquisition unit fails to collate the biometric information of the user, the biometric information acquisition unit acquires the biometric information of the user again from the user, and the biometric information collation unit performs the collation of the biometric information of the user again. 7. The biometric authentication system of any one of claims 1 to 6.

[0100] (Appendix 8) the biometric authentication device includes a display unit; the display unit presents the user with an option to switch to authentication by inputting a personal identification number when the biometric information acquisition unit fails to match the user's biometric information a predetermined number of times in succession. 8. The biometric authentication system of any one of claims 1 to 7.

[0101] (Appendix 9) the display unit presents a screen for inputting identification information of the user to the user; the information storage unit transmits the biometric information of the user identified by the user's identification information input by the user to the biometric authentication device; 9. The biometric authentication system of any one of appendices 1 to 8.

[0102] (Appendix 10) a communication-capable connection to an information storage unit that stores the user's biometric information and the user's personal identification number; a biometric information acquisition unit that acquires biometric information of the user from the user; a biometric information matching unit that matches the biometric information of the user acquired by the biometric information acquisition unit with the biometric information of the user stored in the information storage unit; a user information reading unit that reads a user's personal identification number recorded on a recording medium specific to the user; a PIN input confirmation unit for confirming the user's PIN; Equipped with Biometric authentication device.

[0103] (Appendix 11) A control unit is provided, the control unit encrypts the user's personal identification number read by the user information reading unit, causing the information storage unit to store the encrypted personal identification number of the user; The control unit decrypts the encrypted personal identification number of the user, the PIN input confirmation unit collates the user's PIN decrypted by the control unit with the user's PIN recorded on the recording medium; 11. The biometric authentication device of claim 10.

[0104] (Appendix 12) the personal identification number input confirmation unit collates the personal identification number input by the user with the personal identification number of the user read by the user information reading unit; the user information reading unit reads the biometric information of the user recorded on the user-specific recording medium; causing the information storage unit to store the biometric information of the user read by the user information reading unit; 12. The biometric authentication device according to claim 10 or 11.

[0105] (Appendix 13) A control unit is provided, the control unit encrypts the biometric information of the user read by the user information reading unit, causing the information storage unit to store the encrypted biometric information of the user; The control unit decrypts the encrypted biometric information of the user, the biometric information matching unit matches the biometric information of the user acquired by the biometric information acquisition unit with the biometric information of the user decrypted by the control unit; 13. The biometric authentication device according to any one of appendices 10 to 12.

[0106] (Appendix 14) the user information reading unit reads the user's identification information recorded on the user-specific recording medium; causing the information storage unit to store the user's identification information read by the user information reading unit; 14. The biometric authentication device according to any one of appendices 10 to 13.

[0107] (Appendix 15) A control unit is provided, the control unit encrypts the user's identification information read by the user information reading unit, storing the encrypted user identification number in the information storage unit; 15. The biometric authentication device according to any one of appendices 10 to 14.

[0108] (Appendix 16) When the biometric information acquisition unit fails to collate the biometric information of the user, the biometric information acquisition unit acquires the biometric information of the user again from the user, and the biometric information collation unit performs the collation of the biometric information of the user again. 16. The biometric authentication device according to any one of appendices 10 to 15.

[0109] (Appendix 17) A display unit is provided, the display unit presents the user with an option to switch to authentication by inputting a personal identification number when the biometric information acquisition unit fails to match the user's biometric information a predetermined number of times in succession. 17. The biometric authentication device according to any one of appendices 10 to 16.

[0110] (Appendix 18) the display unit presents a screen for inputting identification information of the user to the user; acquiring, from the information storage unit, biometric information of the user identified by the user's identification information input by the user; 18. The biometric authentication device according to any one of appendices 10 to 17.

[0111] (Appendix 19) a first step of acquiring biometric information of a user from the user; a second step of referencing the biometric information of the user stored in an information storage unit; a third step of comparing the biometric information of the user acquired in the first step with the biometric information of the user referenced in the second step; a fourth step of confirming the user's personal identification number if the matching of the user's biometric information is successful in the third step; Equipped with Biometric authentication methods.

[0112] (Appendix 20) encrypting the user's personal identification number; storing the encrypted user's personal identification number; decrypting the encrypted user's personal identification number; and a step of comparing the decrypted user's personal identification number with the user's personal identification number recorded on the recording medium. 19. The biometric authentication method of claim 18.

[0113] (Appendix 21) a step of comparing the personal identification number input by the user with the personal identification number of the user read by the user information reading unit; reading biometric information of the user recorded on a recording medium specific to the user; and storing the biometric information of the user read by the user information reading unit. 21. The biometric authentication method according to claim 19 or 20.

[0114] (Appendix 22) encrypting the user's biometric information; storing the encrypted user biometric information; decrypting the encrypted biometric information of the user; and comparing the biometric information of the user acquired by the biometric information acquisition unit with the biometric information of the user decrypted by the control unit. 22. The biometric authentication method according to any one of appendices 19 to 21.

[0115] (Appendix 23) reading the user's identification information recorded on the user-specific recording medium; and storing the user's identification information read by the user information reading unit. 23. The biometric authentication method according to any one of appendices 19 to 22.

[0116] (Appendix 24) encrypting the user's identification information read by the user information reading unit; storing the encrypted user identification number; 24. The biometric authentication method of any one of appendices 19 to 23.

[0117] (Appendix 25) a step of acquiring the user's biometric information again from the user and matching the user's biometric information again when the biometric information acquisition unit fails to match the user's biometric information; 25. The biometric authentication method of any one of appendices 19 to 24.

[0118] (Appendix 26) a step of presenting the user with an option to switch to authentication by inputting a personal identification number when the biometric information acquisition unit fails to match the biometric information of the user a predetermined number of times in succession, 26. The biometric authentication method of any one of appendices 19 to 25.

[0119] (Appendix 27) presenting the user with a screen for inputting the user's identification information; and transmitting biometric information of the user identified by the user's identification information input by the user to the biometric authentication device. 27. The biometric authentication method of any one of appendices 19 to 26.

[0120] (Appendix 28) a first step of acquiring biometric information of a user from the user; a second step of referencing the biometric information of the user stored in an information storage unit; a third step of comparing the biometric information of the user acquired in the first step with the biometric information of the user referenced in the second step; a fourth step of confirming the user's personal identification number if the matching of the user's biometric information is successful in the third step; A program that causes a computer to execute the above.

[0121] (Appendix 29) encrypting the user's personal identification number; storing the encrypted user's personal identification number; decrypting the encrypted user's personal identification number; and a step of comparing the decrypted user's personal identification number with the user's personal identification number recorded on the recording medium. 28. The program described in Appendix 28.

[0122] (Appendix 30) a step of comparing the personal identification number input by the user with the personal identification number of the user read by the user information reading unit; reading biometric information of the user recorded on a recording medium specific to the user; and storing the biometric information of the user read by the user information reading unit. 29. The program according to claim 28 or 29.

[0123] (Appendix 31) encrypting the user's biometric information; storing the encrypted user biometric information; decrypting the encrypted biometric information of the user; and a step of matching the biometric information of the user acquired by the biometric information acquisition unit with the biometric information of the user decrypted by the control unit. 31. The program of any one of appendices 28 to 30.

[0124] (Appendix 32) reading the user's identification information recorded on the user-specific recording medium; storing the user's identification information read by the user information reading unit; 32. The program of any one of appendices 28 to 31.

[0125] (Appendix 33) encrypting the user's identification information read by the user information reading unit; storing the encrypted user identification number; 33. The program of any one of appendices 28 to 32.

[0126] (Appendix 34) and causing the computer to execute a step of acquiring the user's biometric information again from the user and performing a matching of the user's biometric information again when the biometric information acquisition unit fails to match the user's biometric information. 34. The program of any one of appendices 28 to 33.

[0127] (Appendix 35) and causing a computer to execute a step of presenting to the user an option to switch to authentication by inputting a personal identification number when the biometric information acquisition unit fails to collate the biometric information of the user a predetermined number of times in succession. 35. The program of any one of appendices 28 to 34.

[0128] (Appendix 36) presenting the user with a screen for inputting the user's identification information; and transmitting biometric information of the user specified by the user's identification information input by the user to the biometric authentication device. 36. The program of any one of appendices 28 to 35. [Explanation of symbols]

[0129] 1.5 Biometric authentication system 10, 50 Biometric authentication device 11, 51 Information storage department 101, 504 PIN input confirmation section 102, 503 User information reading unit 103 Control Unit 104 Information Temporary Storage Department 105, 501 Biometric information acquisition unit 106, 502 Biometric information matching unit 107 Photography Department 108 Display section

Claims

1. an information storage unit that stores biometric information of a user and a personal identification number of the user; a biometric authentication device communicably connected to the information storage unit; Equipped with The biometric authentication device a biometric information acquisition unit that acquires biometric information of the user from the user; a biometric information matching unit that matches the biometric information of the user acquired by the biometric information acquisition unit with the biometric information of the user stored in the information storage unit; a user information reading unit that reads a user's personal identification number recorded on a recording medium specific to the user; a PIN input confirmation unit that confirms the user's PIN, Biometric authentication system.

2. The biometric authentication device includes a control unit, the control unit encrypts the user's personal identification number read by the user information reading unit, the information storage unit stores the encrypted personal identification number of the user; The control unit decrypts the encrypted personal identification number of the user, the PIN input confirmation unit collates the user's PIN decrypted by the control unit with the user's PIN recorded on the recording medium; The biometric authentication system according to claim 1 .

3. the personal identification number input confirmation unit collates the personal identification number input by the user with the personal identification number of the user read by the user information reading unit; the user information reading unit reads the biometric information of the user recorded on the user-specific recording medium; The information storage unit stores the biometric information of the user read by the user information reading unit. The biometric authentication system according to claim 1 .

4. The biometric authentication device includes a control unit, the control unit encrypts the biometric information of the user read by the user information reading unit, the information storage unit stores the encrypted biometric information of the user; The control unit decrypts the encrypted biometric information of the user, the biometric information matching unit matches the biometric information of the user acquired by the biometric information acquisition unit with the biometric information of the user decrypted by the control unit; The biometric authentication system according to claim 3 .

5. the user information reading unit reads the user's identification information recorded on the user-specific recording medium; the information storage unit stores the user's identification information read by the user information reading unit; The biometric authentication system according to claim 1 .

6. The biometric authentication device includes a control unit, the control unit encrypts the user's identification information read by the user information reading unit, The information storage unit stores the encrypted user identification number. The biometric authentication system according to claim 5 .

7. When the biometric information acquisition unit fails to collate the biometric information of the user, the biometric information acquisition unit acquires the biometric information of the user again from the user, and the biometric information collation unit performs the collation of the biometric information of the user again. The biometric authentication system according to claim 1 .

8. a communication-capable connection to an information storage unit that stores the user's biometric information and the user's personal identification number; a biometric information acquisition unit that acquires biometric information of the user from the user; a biometric information matching unit that matches the biometric information of the user acquired by the biometric information acquisition unit with the biometric information of the user stored in the information storage unit; a user information reading unit that reads a user's personal identification number recorded on a recording medium specific to the user; a PIN input confirmation unit for confirming the user's PIN; Equipped with Biometric authentication device.

9. a first step of acquiring biometric information of a user from the user; a second step of referring to the biometric information of the user stored in an information storage unit; a third step of comparing the biometric information of the user acquired in the first step with the biometric information of the user referenced in the second step; a fourth step of confirming the user's personal identification number if the matching of the user's biometric information is successful in the third step; Equipped with Biometric authentication methods.

10. a first step of acquiring biometric information of a user from the user; a second step of referring to the biometric information of the user stored in an information storage unit; a third step of comparing the biometric information of the user acquired in the first step with the biometric information of the user referenced in the second step; a fourth step of confirming the user's personal identification number if the matching of the user's biometric information is successful in the third step; A program that causes a computer to execute the above.

Images