communication equipment

Abstract

The communication device includes an authentication sensor that reads biometric data for authentication from a person's finger, a communication unit for communicating with the outside, a display, and a memory that stores the finger number and biometric data of each person's finger as secret data, with the finger number corresponding to the biometric data. When authenticating that a user of the communication device is the user, the communication device displays the finger number on the display, compares the biometric data input from the authentication sensor in accordance with the displayed finger number with the biometric data stored in the memory, and authenticates the user if they match, or does not authenticate the user if they do not match. [Effect] The security of authentication using fingerprints, etc. can be significantly improved.

Description

[Technical Field]

[0001] The present invention relates to a communication device having a personal authentication function, and uses biometric data of a finger such as a fingerprint or a finger vein image for authentication. [Background technology]

[0002] The inventor has proposed an authentication system in which the numbers 0 to 9 are associated with 10 fingers (Patent Document 1: Patent 4361882). The numbers (numbers) 0 to 9 are associated with 10 fingers in a secret order, and these numbers are called finger numbers. Which finger number corresponds to which finger is secret data. Only the person himself knows which finger corresponds to which finger number, so his identity can be authenticated using the finger number. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent 4361882 Summary of the Invention [Problem to be solved by the invention]

[0004] Communication devices such as smartphones are equipped with fingerprint sensors and use fingerprints to authenticate individuals. However, it is believed that fingerprints left by others can be read and replicated. Therefore, it is necessary to further improve the security of fingerprint-based biometric authentication.

[0005] An object of the present invention is to further improve the security of authentication using finger biometric data such as a fingerprint or an image of finger veins. In other words, an object of the present invention is to enable multi-factor authentication using both finger biometric data such as a fingerprint and a finger number. [Means for solving the problem]

[0006] The communication device of this invention includes an authentication sensor that reads biometric data for authentication from a person's finger, an external communication unit, a display, and a memory that stores the finger number and biometric data for each of the person's fingers as secret data, with the finger number corresponding to the biometric data.

[0007] The communication device of the present invention comprises: When authenticating the identity of a user of a communication device, Displaying finger numbers on the display; The biometric data input from the authentication sensor in response to the display of the finger number is compared with the biometric data stored in the memory, and if they match, the person is authenticated as the person, and if they do not match, the person is not authenticated as the person.

[0008] The data used for identity authentication in this invention are biometric data such as fingerprints of each finger and finger numbers, which are stored inside the communication device and not transmitted externally during authentication. This prevents the theft of fingerprints and finger numbers via communication. The condition for successful authentication is that the person knows the person's finger number and is able to input the biometric data of the finger specified by the finger number, and this authentication is multi-factor authentication using the finger number and finger biometric data. Since it is difficult for anyone other than the person to know the finger number and be able to input the biometric data, the reliability of identity authentication using finger biometric data is significantly increased.

[0009] Preferably, when authenticating a person, multiple finger numbers are displayed on the display. If the biometric data input from the authentication sensor matches stored biometric data corresponding to, for example, one of the multiple finger numbers, the person is authenticated. Displaying only one finger number makes it difficult to input a fingerprint or other information if the designated finger is injured or is blocked by holding a communication device. Displaying multiple finger numbers and prompting the user to input a fingerprint or other information corresponding to one of the finger numbers solves this problem. In other words, authentication is possible even if a finger cannot be used to input a fingerprint or other information for some reason, or if the designated finger is blocked.

[0010] More preferably, when authenticating a user, the user is asked to select one of the displayed finger numbers, and if the biometric data input from the authentication sensor matches the biometric data corresponding to the finger number selected by the user, the user is authenticated. If multiple finger numbers are displayed and a fingerprint or other data corresponding to one of the numbers is required, a person with a fake "fingerprint" for one of the fingers may accidentally succeed in authentication. Therefore, if a fingerprint or other data corresponding to a single finger number selected by the user is required, it becomes difficult to impersonate the user unless the user knows which finger corresponds to which finger. This increases the security of authentication.

[0011] Preferably, the display is a touch panel that accepts input from the user, and on the condition that the user of the communication device has been authenticated, a request for time-limited processing is accepted from the touch panel, and upon acceptance of the request for time-limited processing, no new finger numbers are displayed on the display for a predetermined time, and when biometric data corresponding to a fixed predetermined finger number is input, the user is authenticated. After the predetermined time has elapsed, the finger number is displayed on the display each time identity authentication is performed, and the biometric data input from the authentication sensor in accordance with the displayed finger number is compared with the biometric data stored in memory, and if they match, the user is authenticated, and if they do not match, the system returns to a mode in which the user is not authenticated.

[0012] There are cases where personal authentication is required frequently. In such cases, displaying the finger number on the display every time takes time for authentication. Therefore, it is preferable to fix the finger number used for authentication for a predetermined time period and authenticate the person when biometric data corresponding to the fixed finger number is entered. This eliminates the need to display the finger number every time. The predetermined time period can be, for example, one hour to six hours, half a day, or one day. The fixed finger number is the finger number when one finger number is displayed, or the selected finger number when multiple finger numbers are displayed and one of them is selected. [Brief explanation of the drawings]

[0013] [Figure 1] FIG. 1 is a block diagram illustrating a communication device and an external server according to an embodiment of the present invention; [Figure 2] FIG. 10 is a diagram showing the registration of finger numbers and fingerprint data in a communication device in an embodiment. [Figure 3] Schematic diagram of finger numbers [Figure 4] 1 is a flowchart showing an authentication algorithm according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE INVENTION

[0014] 1 to 4 show the best embodiment for carrying out the present invention. [Example]

[0015] 1 shows a communication device 2 according to an embodiment, which may be, for example, a smartphone or a personal tablet. The communication device 2 communicates with an external server 4 via an appropriate communication line to authenticate that the person operating the communication device 2 is the authorized person. The server 4 communicates with the communication device 2 via a communication unit 5, and an authentication unit 6 performs processing to authenticate whether the user of the communication device 2 is the authorized person.

[0016] The communication device 2 includes a communication unit 10 and communicates with the outside world via an appropriate communication line. 12 is a touch panel, which may be another type of display, and displays a screen and accepts user input as a keyboard, numeric keypad, or the like. 14 is a speaker, 16 is a microphone, and 18 is a fingerprint sensor, which may be a vein sensor that captures finger vein images and reads biometric data of a person's finger. 20 is a CPU that performs information processing, data processing, calculations, etc., and 22 is a program memory that stores the operating program for the communication device 2. 24 is a general-purpose memory that stores finger numbers and fingerprint data of fingers in association with each other. A human hand has ten fingers, and the memory 24 stores, for example, ten finger numbers and ten fingerprint data. 26 is a matching unit that checks whether the fingerprint data input from the fingerprint sensor 18 matches the fingerprint data corresponding to a predetermined finger number.

[0017] The program memory 22 preferably includes a memory 22b for a time-limited processing program and a memory 22c for an application program. The time-limited processing program is activated when the user requests time-limited processing via the touch panel after successful identity authentication. The time-limited processing program allows the user to select, for example, one hour, three hours, half a day, or one day, the time for which the display of the finger number on the display is omitted. Alternatively, the time for the time-limited processing may be fixed, for example, at six hours. If a fingerprint corresponding to the fixed finger number is input during the time-limited processing period, the user is authenticated as the identity of the user, and the display of a new finger number is omitted.

[0018] Consider linking the communication device 2 with, for example, a personal computer as an application program. When the personal computer (not shown) receives a request for personal authentication from an external server or the like, the personal computer and the communication device 2 communicate with each other using encryption via e-mail or the like. When the communication device 2 authenticates the user according to the embodiment, it notifies the personal computer accordingly. In this way, the personal authentication function of the communication device 2 can be used with a personal computer that does not have a fingerprint sensor or the like.

[0019] 2 shows the preparation work for identity authentication, in which the finger number and fingerprint data of each finger are associated and stored in memory 24. Note that the association does not have to be bidirectional, and a one-way association that allows fingerprint data to be searched for from the finger number may also be used.

[0020] Figure 3 shows a schematic diagram of finger numbers. Numbers 0 to 9 are secretly assigned to a total of 10 fingers on the left and right hands. Note that numbers 1 to 10 can be used instead of 0 to 9. When a finger is determined, a finger number is determined, and conversely, when a finger number is specified, a finger is determined. The finger number is then stored as a secret to the individual. Note that for people who are missing some fingers, the finger numbers for the missing fingers can be left blank.

[0021] FIG. 4 shows an example of personal authentication using a fingerprint, but the process is the same for authentication using a finger vein image, etc. In step 1, the communication device 2 requests personal authentication from the external server 4. In response, the server 4 transmits, for example, three numbers (all of which are 0 or more and 9 or less) to the communication device 2 for authentication (step 2). The communication device 2 displays the received three numbers on the touch panel 12 (step 3). In response, the user of the communication device 2 inputs the number of their choice from the touch panel 12, and the communication device 2 accepts this input (step 4). The selected finger number may also be input using the numeric keypad on the touch panel 12. Note that step 4 may be omitted.

[0022] The user inputs the fingerprint corresponding to the selected number (finger number) into the fingerprint sensor 18 (step 5). If step 4 is not performed, in step 5, the user inputs a fingerprint corresponding to one of the three numbers (three finger numbers) displayed on the touch panel 12 into the fingerprint sensor 18.

[0023] The number of numbers displayed in step 3 may be one, but preferably two to four are displayed. If only one finger number is specified, inconveniences may arise, such as the inability to input a fingerprint due to an injury to the specified finger, or the need to change the grip of the communication device 2 to input a fingerprint because the communication device is held with the finger corresponding to the specified finger number. For this reason, it is preferable to display two to four numbers (finger numbers), and input the fingerprint of the finger corresponding to the finger number. In the embodiment, the server 4 generates three numbers from 0 to 9 and transmits them to the communication device 2 (step 2). However, the communication device 2 may generate numbers (finger numbers) by itself, for example, using a random number generation algorithm.

[0024] The collation unit 26 of the communication device 2 compares the fingerprint input from the fingerprint sensor 18 with the fingerprint of the finger corresponding to the number (finger number) selected by the user, and determines whether they match (steps 6 and 7).

[0025] If the fingerprints match, the user of the communication device 2 is authenticated as the user, and the server 4 is notified that the authentication was successful (step 8). If the fingerprints do not match, the server 4 is notified that the authentication was unsuccessful, and other processing is performed (step 9).

[0026] The difference between this embodiment and normal fingerprint authentication is that it requires knowledge of which finger the number displayed on the touch panel 12 corresponds to. In other words, it requires knowledge of the finger number of the owner of the communication device 2. Therefore, even if someone can forge "the person's fingerprint," they cannot impersonate the person unless they know the finger number. This significantly improves the reliability of fingerprint authentication.

[0027] The communication device 2 of the embodiment can reliably authenticate that the user of the communication device 2 is the person in question.Therefore, it can be used in a variety of situations where personal authentication is required, such as viewing official documents such as resident registration cards, obtaining personal information such as medical records, shopping, voting in elections, and various contracts.

[0028] The communication device 2 of the embodiment can perform multi-factor authentication using the finger number and finger biometric data. Therefore, there is no need to memorize multiple passwords; only the finger number needs to be memorized. The finger number does not need to remain constant throughout one's life. For example, it can be changed as needed under certain conditions, such as when biometric data, such as fingerprints, for all fingers has been entered, or when the finger number and biometric data of a specified finger have been entered. [Explanation of symbols]

[0029] 2. Communications equipment 4 Server 5. Communications Department 6 Authentication Section 10. Communications Department 12 Touch Panel 14 Speaker 16 microphones 18 Fingerprint sensor 20 CPU 22 Program Memory 22a Timed Processing Program Memory 22b Application Program Memory 24 memory 26 Matching unit

Claims

1. A communication device including an authentication sensor that reads biometric data for authentication from a person's finger, a communication unit for communicating with an external device, and a display, a memory for storing a finger number for each finger of the person and biometric data for each finger of the person as secret data, in association with the finger number and the biometric data; When authenticating the identity of a user of a communication device, Displaying finger numbers on the display; This communication device compares biometric data input from an authentication sensor in response to the display of a finger number with biometric data stored in a memory, and if the data match, authenticates the person as the person, and if they do not match, does not authenticate the person as the person.

2. 2. The communication device of claim 1, wherein when authenticating a person, a plurality of finger numbers are displayed on a display, and when biometric data input from the authentication sensor matches stored biometric data corresponding to the displayed finger numbers, the person is authenticated.

3. 3. The communication device of claim 2, wherein when authenticating the user, the user is asked to select one of the displayed finger numbers, and when the biometric data input from the authentication sensor matches the biometric data corresponding to the finger number selected by the user, the user is authenticated as the user.

4. the display is a touch panel that accepts input from a user, On the condition that the user of the communication device has been authenticated, a request for time-limited processing is accepted from the touch panel, The communication device according to any one of claims 1 to 3, characterized in that, when a request for time-limited processing is received, a new finger number is not displayed on the display for a predetermined time, and when biometric data corresponding to a fixed predetermined finger number is input, the device authenticates the person as the person.

Images