Electronic information storage medium, IC card, biometric information registration method, and program

Abstract

This invention provides an electronic information storage medium, an IC card, a biometric information registration method, and a program that enable more efficient and low-cost registration of biometric authentication information. [Solution] The IC control unit 26 determines whether or not fingerprint authentication information to be compared with the fingerprint information acquired from the fingerprint information acquisition unit 1 during fingerprint authentication is registered in the IC card C. If it determines that the fingerprint authentication information is not registered, it acquires the fingerprint information from the fingerprint information acquisition unit 1 and performs a fingerprint authentication information registration process to register the acquired fingerprint information as fingerprint authentication information in the IC card C, when the IC control unit 26 is in an idle state due to being reset by the power-on reset circuit 261.

Description

Technical Field

[0001] The present invention relates to the technical field of an IC card or the like equipped with a biological information acquisition sensor and performing biometric authentication using the biological information acquired by the sensor.

Background Art

[0002] As an IC card of this type, for example, Patent Document 1 discloses an IC card including a biometric verification unit having a biological sensor and a control unit having a processor and a data memory. In the IC card of Patent Document 1, the processor transmits the fingerprint data (fingerprint registration data) of the registrant registered in the data memory to the biometric verification unit, and instructs the biometric verification unit to input the fingerprint data (input fingerprint data) by the biological sensor and to verify the fingerprint registration data and the input fingerprint data, so that biometric authentication using the fingerprint data (input fingerprint data) and the fingerprint data (fingerprint registration data) is performed.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] Incidentally, in order to make an IC card usable, a process called issuance is required. Issuance is broadly divided into two types: initialization and personalization. Initialization is the process of creating files for applications that run on the OS (Operating System), setting access rights for each file, and in some cases registering (recording) the application's executable program itself. Personalization, on the other hand, is the process of registering the user's personal information (name, date of birth, membership number, etc.), encryption key, settings (payment limit, expiration date, etc.) used by the application.

[0005] Initialization is often performed during the manufacturing process at the IC card manufacturing facility. Personalization, on the other hand, can be performed either at the IC card manufacturing facility or at the point of sale. In such personalization, when biometric authentication information such as fingerprint registration data is registered on the IC card, it is conceivable that this could be done either at the IC card manufacturing facility or at the point of sale. However, registering biometric authentication information on the IC card at either the manufacturing facility or the point of sale has been problematic, as it is inefficient and costly.

[0006] Therefore, the present invention has been made in view of these problems, and aims to provide an electronic information storage medium, an IC card, a biometric information registration method, and a program that can register biometric authentication information more efficiently and at a lower cost. [Means for solving the problem]

[0007] To solve the above problems, the invention described in claim 1 is an electronic information storage medium comprising a biometric information acquisition unit that acquires the user's biometric information from the user, a control unit that can communicate with the biometric information acquisition unit, and a power-on reset circuit that resets the control unit when the power supply voltage supplied directly or indirectly from an external source reaches a threshold, wherein the control unit determines whether or not biometric authentication information to be compared with the biometric information acquired from the biometric information acquisition unit during biometric authentication is registered in the electronic information storage medium, and if it determines that the biometric authentication information is not registered, it acquires the biometric information from the biometric information acquisition unit and performs a biometric authentication information registration process to register the acquired biometric information as biometric authentication information in the electronic information storage medium, when the control unit is in an idle state due to being reset by the power-on reset circuit.

[0008] The invention described in claim 2 is characterized in that, in the electronic information storage medium described in claim 1, the control unit executes the biometric authentication information registration process when it is in the idle state after a preset time has elapsed since being reset by the power-on reset circuit.

[0009] The invention described in claim 3 is characterized in that, in the electronic information storage medium described in claim 1, the control unit stops the execution of the biometric authentication information registration process if, during the execution of the biometric authentication information registration process, communication with an external communication device is initiated, causing a transition from the idle state to another state.

[0010] The invention described in claim 4 is characterized in that, in the electronic information storage medium described in claim 1, update feasibility information indicating whether the biometric authentication information can be updated is pre-registered in the electronic information storage medium, and in the biometric authentication information registration process, when the control unit determines that the biometric authentication information is registered, it determines whether the biometric authentication information can be updated based on the update feasibility information, and when it determines that the biometric authentication information can be updated, it acquires the biometric information from the biometric information acquisition unit and updates and registers the acquired biometric information as new biometric authentication information in the electronic information storage medium.

[0011] The invention described in claim 5 is characterized in that, in the electronic information storage medium described in any one of claims 1 to 4, the control unit, in the biometric authentication information registration process, acquires the biometric information from the biometric information acquisition unit, then acquires the biometric information from the biometric information acquisition unit, performs biometric authentication using both sets of biometric information, and only if the biometric authentication is successful, registers one of the biometric information as biometric authentication information in the electronic information storage medium.

[0012] The invention described in claim 6 is characterized in that, in an electronic information storage medium according to any one of claims 1 to 4, the electronic information storage medium further comprises a notification means for notifying the user that the registration of the biometric authentication information has been successful.

[0013] The invention described in claim 7 is an IC card comprising a biometric information acquisition unit that acquires the user's biometric information from the user, a control unit that can communicate with the biometric information acquisition unit, and a power-on reset circuit that resets the control unit when the power supply voltage supplied directly or indirectly from an external source reaches a threshold, wherein the control unit determines whether or not biometric authentication information to be compared with the biometric information acquired from the biometric information acquisition unit during biometric authentication is registered in the IC card, and if it determines that the biometric authentication information is not registered, it acquires the biometric information from the biometric information acquisition unit and performs a biometric authentication information registration process to register the acquired biometric information as biometric authentication information in the IC card, when the control unit is in an idle state due to being reset by the power-on reset circuit.

[0014] The invention described in claim 8 is a method for registering biometric information performed by a control unit in an electronic information storage medium, the control unit comprising: a biometric information acquisition unit that acquires biometric information of a user from the user; a control unit that can communicate with the biometric information acquisition unit; and a power-on reset circuit that resets the control unit when a power supply voltage supplied directly or indirectly from an external source reaches a threshold value, wherein the control unit determines whether or not biometric authentication information to be compared with the biometric information acquired from the biometric information acquisition unit during biometric authentication is registered in the electronic information storage medium, and if it determines that the biometric authentication information is not registered, it acquires the biometric information from the biometric information acquisition unit and performs a biometric authentication information registration process to register the acquired biometric information as biometric authentication information in the electronic information storage medium, when the control unit is in an idle state due to being reset by the power-on reset circuit.

[0015] The invention described in claim 9 is characterized in that, in an electronic information storage medium comprising a biometric information acquisition unit that acquires the user's biometric information from the user, a control unit that can communicate with the biometric information acquisition unit, and a power-on reset circuit that resets the control unit when the power supply voltage supplied directly or indirectly from an external source reaches a threshold, the computer included in the control unit determines whether or not biometric authentication information to be compared with the biometric information acquired from the biometric information acquisition unit during biometric authentication is registered in the electronic information storage medium, and if it is determined that the biometric authentication information is not registered, it acquires the biometric information from the biometric information acquisition unit and registers the acquired biometric information as biometric authentication information in the electronic information storage medium, and executes this biometric authentication information registration process when the control unit is in an idle state due to being reset by the power-on reset circuit. [Effects of the Invention]

[0016] According to the present invention, biometric authentication information can be registered more efficiently and at a lower cost. [Brief explanation of the drawing]

[0017] [Figure 1] This figure shows an example of the appearance of IC card C. [Figure 2] This figure shows an example of the functional block of IC card C. [Figure 3] This figure shows an example of the state transitions of IC card C when the power voltage is supplied directly from an external source. [Figure 4] This figure shows an example of the state transitions of IC card C when the power voltage is supplied indirectly from an external source. [Figure 5] This flowchart shows an example of the fingerprint authentication information registration process executed by the CPU 262 of the IC control unit 26. [Modes for carrying out the invention]

[0018] Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The embodiments described below are embodiments when the present invention is applied to an IC card with a fingerprint authentication (an example of biometric authentication) function. Examples of the IC card C include a credit card, a debit card, a transportation card, a my number card, and the like. Further, the IC card C may have a shape other than a general rectangular card.

[0019] [1. Configuration and Function of IC Card C] First, referring to FIG. 1, the configuration and function of the IC card C according to the present embodiment will be described. FIG. 1 is a diagram showing an external appearance example of the IC card C. FIG. 2 is a diagram showing a functional block example of the IC card C. The IC card C (an example of an electronic information storage medium) is configured to include a fingerprint information acquisition unit 1 (an example of a biometric information acquisition unit), an IC chip 2, and an LED 3 (an example of a notification means), as shown in FIGS. 1 and 2. Here, the fingerprint information acquisition unit 1 and the LED 3 are respectively connected to any of a plurality of terminals provided in the IC chip 2. The LED 3 may be one light-emitting diode, but it is preferably two light-emitting diodes of different colors (for example, red and green). Note that an electronic paper may be provided on the surface of the IC card C as a communication means instead of the LED 3.

[0020] The IC card C may be an IC card having a contact interface (also referred to as a contact-type IC card), or may be an IC card having a non-contact interface (also referred to as a non-contact-type IC card). Alternatively, the IC card C may be an IC card having both a contact interface and a non-contact interface (also referred to as a hybrid-type IC card). Here, the contact interface is an interface for performing contact communication using, for example, electrical contact terminals defined in ISO / IEC 7816-3. The non-contact interface is an interface for supporting signals defined in, for example, ISO / IEC 14443-1 for antenna characteristics, or ISO / IEC 14443-2 or ISO / IEC 18092 and performing non-contact communication.

[0021] When the IC card C is a contact-type IC card or a hybrid-type IC card, as shown in FIG. 1, eight contact terminals conforming to, for example, ISO / IEC 7816-3 are provided on the surface of the IC chip 2. In FIG. 1, VCC is a power supply terminal for receiving a power supply voltage (in other words, power) from the outside, GND is a ground terminal, RST is a reset terminal for inputting a reset signal from the outside, CLK is a clock terminal for inputting a clock signal (external clock) from the outside, and I / O is an input / output terminal for inputting an external command APDU (Application Protocol Data Unit) or the like and outputting a response APDU or the like to the outside (that is, a contact terminal for the IC chip 2 to perform contact communication with the outside). Each of these contact terminals is connected to any one of a plurality of terminals provided in the IC chip 2 (other than the terminals connected to the fingerprint information acquisition unit 1 and the LED 3). Here, as an example of the outside, a reader / writer connected to a transaction terminal (settlement terminal) can be mentioned, and the reader / writer is an example of an external communication device that performs data communication with the IC card C.

[0022] As shown in FIG. 2, the fingerprint information acquisition unit 1 includes a fingerprint sensor 11 and a sensor control unit 12, and acquires fingerprint information (an example of biometric information) of the user of the IC card C from the user of the IC card C. The fingerprint sensor 11 is mounted on the surface of the IC card C so that, for example, the finger of the user of the IC card C can come into contact with it. The fingerprint sensor 11 performs an operation of detecting fingerprint information (feature amount) from the pad of the finger of the user of the IC card C. For example, when the fingerprint sensor 11 is a capacitance-type fingerprint sensor, a large number of capacitors are provided on the contact surface of the fingerprint sensor 11, and an amount of electric charge (capacitance) corresponding to the proximity to the contact surface due to the unevenness on the pad of the user's finger (that is, the unevenness constituting the fingerprint) accumulates in these capacitors. Then, the fingerprint sensor 11 detects fingerprint information by converting the amount of electric charge accumulated in each electrode into a numerical value (a numerical value corresponding to the amount of electric charge). Note that the fingerprint sensor 11 may be a sensor that employs a method other than the capacitance type.

[0023] The sensor control unit 12 is composed of, for example, RAM (Random Access Memory), ROM (Read Only Memory), and CPU (Central Processing Unit). The CPU of the sensor control unit 12 controls the fingerprint sensor 11 according to a control program stored in, for example, ROM. For example, the sensor control unit 12 operates the fingerprint sensor 11 in response to a fingerprint information acquisition command from the IC control unit 26 of the IC chip 2, acquires the fingerprint information detected by the fingerprint sensor 11, and outputs it to the IC control unit 26 of the IC chip 2. The sensor control unit 12 may also be composed of an electrical circuit for controlling the fingerprint sensor 11.

[0024] As shown in Figure 2, the IC chip 2 comprises a power receiving unit 21, an I / O unit 22, a RAM 23, a ROM 24, an NVM (Nonvolatile Memory) 25, and an IC control unit 26 (an example of a control unit). If the IC card C is a contact-type IC card or a hybrid-type IC card, the power receiving unit 21 is electrically connected to the power terminal VCC, receives power voltage from an external source via VCC, and supplies this power voltage to the IC control unit 26, etc. The power voltage received by the power receiving unit 21 (i.e., power voltage directly supplied from an external source) is preferably supplied from the IC control unit 26 to each part within the IC chip 2 and the fingerprint information acquisition unit 1. A reader / writer can be used as a source of power voltage, for example, but in this embodiment, an inexpensive power supply device (for example, equipped with AA or AAA batteries) can be used. In this case, only two terminals, the power terminal VCC and the ground terminal GND, are electrically connected between the power supply device and the IC chip 2. In other words, the power supply device does not need to have electrical circuits for connecting to terminals other than the power terminal VCC and the ground terminal GND, and does not need to output reset signals, clock signals, and I / O signals (e.g., command / response) necessary for data communication with IC card C.

[0025] If IC card C is a contact-type IC card or a hybrid IC card, the I / O unit 22 is responsible for the contact-type interface and is electrically connected to the input / output terminal I / O. For example, the I / O unit 22 receives commands such as APDU from the reader / writer via the input / output terminal I / O and outputs the command APDU to the IC control unit 26. The I / O unit 22 also receives response APDU from the IC control unit 26 and outputs the response APDU to the reader / writer. On the other hand, if IC card C is a contactless IC card or a hybrid IC card, the I / O unit 22 is responsible for the contactless interface. In this case, IC card C is equipped with an antenna for the IC chip 2 to perform contactless communication with the outside. The antenna is electrically connected to the power receiving unit 21 and the I / O unit 22, and for example, receives a carrier wave emitted from the reader / writer and transmits a carrier wave modulated by the I / O unit 22 (i.e., a reflected wave) as a response.

[0026] Furthermore, if IC card C is a contactless IC card or a hybrid IC card, the I / O unit 22 is equipped with a modulation / demodulation circuit, and the power receiving unit 21 is equipped with a power generation circuit. The modulation / demodulation circuit demodulates command APDUs, etc., from radio waves transmitted from, for example, the reader / writer and received by the antenna, and outputs the command APDUs, etc., to the IC control unit 26. The modulation / demodulation circuit also modulates the response APDU from the IC control unit 26 and outputs it to the antenna as a modulated signal. The power generation circuit generates a power supply voltage based on the power (induced electromotive force) induced by the carrier wave received by the antenna. The power supply voltage generated by the power generation circuit (i.e., a power supply voltage indirectly supplied from an external source) is supplied to the IC control unit 26, etc.

[0027] Furthermore, if IC card C is a contactless IC card or a hybrid IC card, a reader / writer can be used as a power supply voltage source, for example. However, in this embodiment, a smartphone can also be used as the user's NFC (Near Field Communication) carrier wave output device. For example, smartphones are generally equipped with a contactless communication function using NFC technology, and when this contactless communication function is turned on, the smartphone is configured to repeatedly emit a carrier wave with a polling signal at predetermined time intervals in order to detect the contactless IC card to communicate with. In this embodiment, it is preferable to install an application on the smartphone that continuously emits a carrier wave with a power supply signal in order to secure the power supply voltage. The power supply voltage generated by the power supply generation circuit based on the carrier wave with a power supply signal that is emitted continuously in this way is supplied to the IC control unit 26, etc. Note that the NFC carrier wave output device does not need to output the subcarriers necessary for data communication with IC card C.

[0028] RAM23 is used as working memory. For example, fingerprint information acquired by the fingerprint information acquisition unit 1 is temporarily stored in RAM23. For example, flash memory is used for NVM25. Note that NVM25 may be "Electrically Erasable Programmable Read-Only Memory". During initialization, for example, a normal program including the OS and applications is registered (in other words, installed) in NVM25 or ROM24. The registered applications include, for example, a payment application for executing payment processing on the OS in accordance with the EMV(registered trademark) specification. Note that a normal program may be a program registered on a known IC chip. In this embodiment, in addition to the normal program, a fingerprint authentication information registration program (an example of the program of the present invention) for executing fingerprint authentication information registration processing (an example of biometric authentication information registration processing) is registered in NVM25 or ROM24, for example, during initialization.

[0029] The NVM25 stores, for example, the user's personal information, encryption keys, and settings used by the application in personalization. The NVM25 also has a fingerprint authentication information storage area for registering fingerprint authentication information within the IC card C. After the IC card C is shipped (for example, after it is mailed to the user's home), the fingerprint authentication information is set (i.e., registered in the fingerprint authentication information storage area) as fingerprint registration data used for fingerprint authentication through the fingerprint authentication information registration process. The fingerprint authentication information registration process determines whether the fingerprint authentication information to be compared with the fingerprint information acquired from the fingerprint information acquisition unit 1 during fingerprint authentication is registered within the IC card C (within the fingerprint authentication information storage area). If it is determined that the fingerprint authentication information is not registered, the fingerprint information is acquired from the fingerprint information acquisition unit 1 and the acquired fingerprint information is registered within the IC card C as fingerprint authentication information.

[0030] Furthermore, it is desirable that the NVM25 also register update eligibility information, for example, in the personalization process at the manufacturing facility of IC card C, indicating whether the registered fingerprint authentication information can be updated. Here, registered fingerprint authentication information refers to the fingerprint authentication information registered within IC card C (within the fingerprint authentication information storage area) through the fingerprint authentication information registration process. Whether the registered fingerprint authentication information can be updated is based on the system provider's security policy, and if it can be updated, the already set fingerprint authentication information can be overwritten by the fingerprint authentication information registration process with fingerprint authentication information acquired later.

[0031] The IC control unit 26 includes a power-on reset circuit 261 and a CPU 262. Although not shown in the figures, the IC control unit 26 is also equipped with a clock oscillator that oscillates an internal clock. The power-on reset circuit 261 may be located within the IC chip 2 and outside the IC control unit 26. The power-on reset circuit 261 resets (initializes) the IC control unit 26 when the power supply voltage, supplied directly or indirectly from an external power receiving unit 21, reaches a threshold. When the IC control unit 26 is reset, it transitions from a stopped state to an idle state. Here, the idle state refers to a state in which, for example, power is supplied and the CPU 262 is operating by the internal clock, but before it receives an instruction that initiates processing as defined in ISO / IEC or other standards (e.g., reset or polling).

[0032] Figure 3 shows an example of state transitions for IC card C when the power supply voltage is supplied directly from an external source (via the power supply terminal VCC). As shown in Figure 3, when the power supply voltage is supplied (VCC=H), the CPU 262 of the IC control unit 26, which is in an idle state, transitions from the idle state to a normally operational state when a clock signal is input from the reader / writer via the clock terminal CLK (CLK ON), and then a reset signal is input via the reset terminal RST (RST=H). As a result, the CPU 262 of the IC control unit 26 starts the operation of the normal program (in other words, it executes normal processing such as settlement processing) and starts contact communication with the reader / writer. Here, starting contact communication with the reader / writer means, for example, sending an initial response (ATR) to the reset signal. When the operation of the normal program is completed (in other words, when the execution of normal processing such as settlement processing is completed), the normally operational state is maintained and it continues to wait for the next command.

[0033] Furthermore, as shown in Figure 3, the CPU 262 of the IC control unit 26, which is in an idle state, transitions to the fingerprint authentication information registration processing execution state after a certain period of time has elapsed since becoming idle, for example, according to the internal clock period, even if no clock signal or reset signal is input. As a result, the CPU 262 of the IC control unit 26 can start the operation of the fingerprint authentication information registration program (in other words, execute the fingerprint authentication information registration process). However, if a clock signal is input from the reader / writer via the clock terminal CLK, followed by a reset signal via the reset terminal RST, during the execution of the fingerprint authentication information registration process, the fingerprint authentication information registration process will be canceled, and the operation of the normal program will start (that is, it will transition from the fingerprint authentication information registration processing execution state to the normal operation ready state).

[0034] In other words, the CPU 262 of the IC control unit 26 stops executing the fingerprint authentication information registration process if it transitions from an idle state to another state due to the commencement of contact communication with the reader / writer while the fingerprint authentication information registration process is being executed. As another example, the CPU 262 of the IC control unit 26, which is in an idle state, may be configured to execute the fingerprint authentication information registration process if it is in an idle state after a preset time (for example, about 1 to 5 seconds) has elapsed since the IC control unit 26 was reset by the power-on reset circuit 261. In this case, it is possible to avoid the commencement of contact communication with the reader / writer while the fingerprint authentication information registration process is being executed, thereby reducing unnecessary processing.

[0035] Figure 4 shows an example of state transitions for IC card C when the power supply voltage is supplied indirectly from an external source (via an antenna). As shown in Figure 4, the IC control unit 26, which is in an idle state when the power supply voltage is supplied (in other words, carrier wave reception), transitions from the idle state to a normally operational state (e.g., a message reception state such as READY state, READY-REQUESTED state, or READY-DECLARED state) when, for example, a modulated wave with a predetermined command (i.e., a radio wave modulated by a subcarrier) is received from the reader / writer via the antenna. As a result, the CPU 262 of the IC control unit 26 starts the normal program operation and begins contactless communication with the reader / writer. Here, examples of predetermined commands include request commands (e.g., REQA or REQB) or wake-up commands (e.g., WUPA or WUPB). Starting contactless communication with the reader / writer means, for example, sending an initial response to a predetermined command (e.g., ATQA or ATQB). Then, once the program finishes its normal operation, it remains in a ready-to-run state and continues to wait for the next command.

[0036] Furthermore, as shown in Figure 4, the CPU 262 of the IC control unit 26, which is in an idle state, transitions to the fingerprint authentication information registration processing execution state after a certain period of time has elapsed since becoming idle, for example, according to the internal clock period, even if no modulated wave with a predetermined command is input. This allows the CPU 262 of the IC control unit 26 to start the operation of the fingerprint authentication information registration program. However, as in Figure 3, if a modulated wave with a predetermined command is received from the reader / writer while the fingerprint authentication information registration process is being executed, the ongoing fingerprint authentication information registration process is canceled, and the normal program operation begins (i.e., it transitions from the fingerprint authentication information registration processing execution state to the normal operation ready state). In this case as well, the CPU 262 of the IC control unit 26, which is in an idle state, may be configured to execute the fingerprint authentication information registration process after a preset time (for example, about 1 to 5 seconds) has elapsed since the IC control unit 26 was reset by the power-on reset circuit 261, if it is in an idle state. In this case as well, it is possible to avoid the start of contactless communication with the reader / writer while the fingerprint authentication information registration process is being executed, thus reducing unnecessary processing.

[0037] In the fingerprint authentication information registration process, the CPU 262 of the IC control unit 26 determines whether or not fingerprint authentication information is registered in the IC card C (in the fingerprint authentication information storage area). If it is determined that the fingerprint authentication information is not registered, it obtains the fingerprint information from the fingerprint information acquisition unit 11 and registers the obtained fingerprint information in the IC card C as fingerprint authentication information. Here, if the CPU 262 of the IC control unit 26 determines that fingerprint authentication information is registered, it determines whether or not the fingerprint authentication information can be updated based on the update feasibility information registered in the NVM 25. If it is determined that the fingerprint authentication information can be updated, it obtains the fingerprint information from the fingerprint information acquisition unit 1 and updates (overwrites, for example) the obtained fingerprint information in the IC card C (in the fingerprint authentication information storage area) as new fingerprint authentication information. This enhances the convenience of the IC card C according to the security policy.

[0038] Furthermore, in the fingerprint authentication information registration process, the CPU 262 of the IC control unit 26 may, if it determines that no fingerprint authentication information has been registered, acquire fingerprint information from the fingerprint information acquisition unit 1, then acquire more fingerprint information from the fingerprint information acquisition unit 1, perform fingerprint authentication using both sets of fingerprint information, and only if the fingerprint authentication is successful (for example, if the degree of matching between the two sets of fingerprint information is above a threshold), register one of the fingerprint information as fingerprint authentication information in the IC card C (in the fingerprint authentication information storage area). This can improve the reliability of the registered fingerprint authentication information.

[0039] [2. Operation of IC Card C] Next, the operation of IC card C will be explained with reference to Figure 5. Figure 5 is a flowchart showing an example of the fingerprint authentication information registration process executed by the CPU 262 of the IC control unit 26. The fingerprint authentication information registration process shown in Figure 5 is started when a power supply voltage is directly or indirectly supplied to IC card C from an external source, and the IC control unit 26 is reset, resulting in an idle state, or when a preset time has elapsed since the IC control unit 26 entered an idle state. Note that if a reset signal (external clock) or a predetermined command is input while the fingerprint authentication information registration process shown in Figure 5 is being executed, causing a transition from the idle state to a state where normal operation is possible, the execution of the fingerprint authentication information registration process will be stopped as described above, and normal processing will be executed.

[0040] When the fingerprint authentication information registration process shown in Figure 5 is started, the CPU 262 of the IC control unit 26 determines whether or not fingerprint authentication information has been set (i.e., whether or not fingerprint authentication information has been registered in the fingerprint authentication information storage area) (step S1). For example, if the data read from the fingerprint authentication information storage area is an initial value (e.g., FFFF...) or if the digest of the read data matches the check code, it is determined that fingerprint authentication information has not been set. Alternatively, if the fingerprint authentication information setting flag indicates "OFF", it may be determined that fingerprint authentication information has not been set. If it is determined that fingerprint authentication information has been set (step S1: YES), the process proceeds to step S2. On the other hand, if it is determined that fingerprint authentication information has not been set (step S1: NO), the process proceeds to step S3.

[0041] In step S2, the CPU 262 of the IC control unit 26 determines, for example, whether the set fingerprint authentication information can be updated, based on update feasibility information. If it is determined that the set fingerprint authentication information cannot be updated (step S2: NO), the fingerprint authentication information registration process shown in Figure 5 ends. On the other hand, if it is determined that the set fingerprint authentication information can be updated (step S2: YES), the process proceeds to step S3.

[0042] In step S3, the CPU 262 of the IC control unit 26 executes a fingerprint information acquisition process. In this fingerprint information acquisition process, the CPU 262 outputs a fingerprint information acquisition command to, for example, the sensor control unit 12 of the fingerprint information acquisition unit 1. The sensor control unit 12 operates the fingerprint sensor 11 in response to the fingerprint information acquisition command from the CPU 262, acquires the fingerprint information detected by the fingerprint sensor 11, and outputs it to the IC control unit 26 of the IC chip 2. As a result, the CPU 262 of the IC control unit 26 acquires the fingerprint information from the sensor control unit 12 and temporarily stores it in the first memory area of ​​the RAM 23.

[0043] Here, the CPU 262 outputs a command to the sensor control unit 12 to acquire fingerprint information and also notifies the user via LED 3 or the like to prompt them to touch the contact surface of the fingerprint sensor 11 with their finger. Such notification is done, for example, by turning on or blinking LED 3. If multi-touch enrollment is employed, which requires touching the fingerprint sensor 11 multiple times while changing the angle and contact surface of the finger, the CPU 262 should notify the user via LED 3 or the like to instruct them to lift their finger from the fingerprint sensor 11 and then touch the fingerprint sensor 11 with their finger.

[0044] Next, the CPU 262 of the IC control unit 26 determines whether or not the fingerprint information was successfully acquired in the fingerprint information acquisition process of step S3 (step S4). For example, if a predetermined amount of fingerprint information is not output from the sensor control unit 12 within a predetermined time from the output of the fingerprint information acquisition command, it is determined that the acquisition of fingerprint information was unsuccessful (step S4: NO), and the process proceeds to step S5. In step S5, the CPU 262 of the IC control unit 26 notifies the user via LED 3 or the like that the registration of fingerprint authentication information has failed, and terminates the fingerprint authentication information registration process shown in Figure 5. Such notification may be made, for example, by lighting or blinking a red LED 3.

[0045] On the other hand, if it is determined that the fingerprint information has been successfully acquired in the fingerprint information acquisition process in step S3 (step S4: YES), the process proceeds to step S6. In step S6, the CPU 262 of the IC control unit 26 executes the fingerprint authentication process. In this fingerprint authentication process, the CPU 262 first outputs a fingerprint information acquisition command to the sensor control unit 12, thereby acquiring more fingerprint information from the sensor control unit 12 and temporarily storing it in the second memory area of ​​the RAM 23. Next, the CPU 262 compares the fingerprint information stored in the first memory area of ​​the RAM 23 with the fingerprint information stored in the second memory area of ​​the RAM 23 and determines whether the degree of agreement between the two sets of fingerprint information is above a threshold (i.e., fingerprint authentication).

[0046] Next, the CPU 262 of the IC control unit 26 determines whether or not fingerprint authentication was successful (step S7). If it is determined that fingerprint authentication was unsuccessful (for example, if the degree of matching between the two fingerprints is not above a threshold) (step S7: NO), the user is notified that the registration of fingerprint authentication information has failed (step S5). On the other hand, if it is determined that fingerprint authentication was successful (for example, if the degree of matching between the two fingerprints is above a threshold) (step S7: YES), the process proceeds to step S8.

[0047] In step S8, the CPU 262 of the IC control unit 26 registers the fingerprint information stored in the first memory area of ​​the RAM 23 as fingerprint authentication information in the fingerprint authentication information storage area of ​​the NVM 25. At this time, it is preferable that the setting flag for fingerprint authentication information is set to "ON". Next, the CPU 262 of the IC control unit 26 notifies the user that the registration of the fingerprint authentication information has been successful using the LED 3 or the like (step S9), and terminates the fingerprint authentication information registration process shown in Figure 5. Such notification may be made, for example, by lighting or blinking the green LED 3.

[0048] Note that in the fingerprint authentication information registration process shown in Figure 5, steps S6 and S7 may be configured not to be performed. In this case, if it is determined that the fingerprint information has been successfully acquired in the fingerprint information acquisition process in step S3 (step S4: YES), the process will proceed to step S8.

[0049] As described above, according to the above embodiment, the IC control unit 26 determines whether or not fingerprint authentication information to be compared with the fingerprint information acquired from the fingerprint information acquisition unit 1 during fingerprint authentication is registered in the IC card C, and if it determines that the fingerprint authentication information is not registered, it acquires the fingerprint information from the fingerprint information acquisition unit 1 and registers the acquired fingerprint information as fingerprint authentication information in the IC card C. This fingerprint authentication information registration process is performed when the IC control unit 26 is in an idle state due to being reset by the power-on reset circuit 261. Therefore, fingerprint authentication information can be registered more efficiently and at a lower cost.

[0050] In the above embodiment, fingerprint information was used as an example of the user's biometric information, but the user's biometric information may also be voiceprint information indicating the user's voiceprint, facial feature information indicating the user's facial features, iris feature information indicating the features of the user's iris, or handwriting feature information indicating the features of the user's handwriting, and the present invention can be applied in such cases as well. For example, if the biometric information is voiceprint information, the IC card C is equipped with a biometric information acquisition unit having a small microphone and a microphone control unit for acquiring the user's voiceprint information. Alternatively, if the biometric information is facial feature information or iris feature information, the IC card C is equipped with a biometric information acquisition unit having a small camera and a camera control unit for acquiring the user's facial feature information or iris feature information. Alternatively, if the biometric information is handwriting feature information, the IC card C is equipped with a biometric information acquisition unit having a small signature pad and a signature pad control unit for acquiring the user's handwriting feature information.

[0051] Furthermore, although the above embodiment described an IC card as an example of an electronic information storage medium, the present invention can be applied to any medium other than an IC card, such as a portable device, that includes a biometric information acquisition unit for acquiring the user's biometric information, a control unit that can communicate with the biometric information acquisition unit, and a power-on reset circuit that resets the control unit when the power supply voltage supplied directly or indirectly from an external source reaches a threshold. [Explanation of Symbols]

[0052] 1 Fingerprint information acquisition section 2 IC chips 3 LED 11. Fingerprint sensor 12 Sensor Control Unit 21 Power receiving section 22 I / O Department 23 RAM 24 ROM 25 NVM 26 IC control section CIC card

Claims

1. An electronic information storage medium comprising: a biometric information acquisition unit that acquires the user's biometric information from the user; a control unit that can communicate with the biometric information acquisition unit; and a power-on reset circuit that resets the control unit when the power supply voltage supplied directly or indirectly from an external source reaches a threshold; The control unit determines whether or not biometric authentication information to be compared with the biometric information acquired from the biometric information acquisition unit during biometric authentication is registered in the electronic information storage medium, and if it determines that the biometric authentication information is not registered, it acquires the biometric information from the biometric information acquisition unit and registers the acquired biometric information as biometric authentication information in the electronic information storage medium, and performs a biometric authentication information registration process when the control unit is in an idle state due to being reset by the power-on reset circuit.

2. The electronic information storage medium according to claim 1, characterized in that the control unit executes the biometric authentication information registration process when it is in the idle state after a preset time has elapsed since being reset by the power-on reset circuit.

3. The electronic information storage medium according to claim 1, characterized in that the control unit terminates the execution of the biometric authentication information registration process if, during the execution of the biometric authentication information registration process, communication with an external communication device is initiated, thereby transitioning from the idle state to another state.

4. The aforementioned electronic information storage medium has pre-registered update feasibility information indicating whether the biometric authentication information can be updated. The electronic information storage medium according to claim 1, characterized in that, in the biometric authentication information registration process, the control unit determines whether the biometric authentication information can be updated based on the update feasibility information when it determines that the biometric authentication information has been registered, and when it determines that the biometric authentication information can be updated, it obtains the biometric information from the biometric information acquisition unit and updates and registers the obtained biometric information as new biometric authentication information in the electronic information storage medium.

5. The electronic information storage medium according to any one of claims 1 to 4, characterized in that, in the biometric authentication information registration process, the control unit acquires the biometric information from the biometric information acquisition unit, then acquires the biometric information again from the biometric information acquisition unit, performs biometric authentication using both sets of biometric information, and only if the biometric authentication is successful, registers one of the biometric information as biometric authentication information in the electronic information storage medium.

6. The electronic information storage medium according to any one of claims 1 to 4, further comprising a notification means for notifying the user that the registration of the biometric authentication information has been successful.

7. An IC card comprising: a biometric information acquisition unit that acquires the user's biometric information from the user; a control unit that can communicate with the biometric information acquisition unit; and a power-on reset circuit that resets the control unit when the power supply voltage supplied directly or indirectly from an external source reaches a threshold; The control unit determines whether or not biometric authentication information to be compared with the biometric information acquired from the biometric information acquisition unit during biometric authentication is registered in the IC card, and if it determines that the biometric authentication information is not registered, it acquires the biometric information from the biometric information acquisition unit and registers the acquired biometric information as biometric authentication information in the IC card, and performs a biometric authentication information registration process when the control unit is in an idle state due to being reset by the power-on reset circuit.

8. A method for registering biometric information performed by a control unit in an electronic information storage medium, comprising: a biometric information acquisition unit that acquires the biometric information of a user from the user; a control unit that can communicate with the biometric information acquisition unit; and a power-on reset circuit that resets the control unit when the power supply voltage supplied directly or indirectly from an external source reaches a threshold; A method for registering biometric information, characterized in that the control unit determines whether or not biometric authentication information to be compared with the biometric information acquired from the biometric information acquisition unit during biometric authentication is registered in the electronic information storage medium, and if it determines that the biometric authentication information is not registered, it acquires the biometric information from the biometric information acquisition unit and registers the acquired biometric information as biometric authentication information in the electronic information storage medium, and executes this biometric authentication information registration process when the control unit is in an idle state due to being reset by the power-on reset circuit.

9. An electronic information storage medium comprising a biometric information acquisition unit that acquires the user's biometric information from the user, a control unit that can communicate with the biometric information acquisition unit, and a power-on reset circuit that resets the control unit when the power supply voltage supplied directly or indirectly from an external source reaches a threshold, includes a computer in the control unit. A program characterized in that, when the control unit is in an idle state due to being reset by the power-on reset circuit, it determines whether or not biometric authentication information to be compared with the biometric information acquired from the biometric information acquisition unit during biometric authentication is registered in the electronic information storage medium, and if it determines that the biometric authentication information is not registered, it acquires the biometric information from the biometric information acquisition unit and registers the acquired biometric information as biometric authentication information in the electronic information storage medium, and executes a biometric authentication information registration process.

Images