Biological data conversion device, biological data conversion method, and biological data conversion system

Abstract

This biological data conversion device comprises: an acquisition unit that acquires at least one item of first biological data; and a control unit that converts the first biological data to second biological data, which is different from the first biological data, and outputs the second biological data.

Description

Technical Field

[0001] The present disclosure relates to a biological data conversion device, a biological data conversion method, and a biological data conversion system.

Background Art

[0002] Patent Document 1 discloses a fingerprint processing device that detects the three-dimensional shape of a fingerprint using a 3D scanner, obtains a first fingerprint image representing the fingerprint in a three-dimensional coordinate space, and generates a second fingerprint image representing the fingerprint in a two-dimensional coordinate plane and in which the fingerprint is reflected with desired image characteristics. The image characteristics of the fingerprint are the brightness, saturation, luminance, resolution, gradation, number of pixels representing the fingerprint (so-called pixel count), characteristics related to noise superimposed on the pixels representing the fingerprint, characteristics related to the position of the fingerprint in the image, and the like.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In a method for acquiring biological information (e.g., fingerprint, vein, or palm print, etc.) used for biometric authentication, there are a method for acquiring biological information from a biological part (e.g., finger or palm, etc.) of a user in a non-contact state and a method for acquiring biological information from a biological part of a user in a contact state. However, since the biological information acquired in the contact state is subjected to a pressing force on the biological part when placed (contacted) on the placement surface, the shape may be different from the biological information acquired in the non-contact state, and there is a possibility that the user authentication accuracy may decrease.

[0005] In addition, when the biometric information acquisition device used at the time of registering biometric information is different from the biometric information acquisition device used at the time of authenticating biometric information, the biometric information obtained by each acquisition device may have different biometric information acquisition methods, resulting in a potential decrease in user authentication accuracy.

[0006] In view of the above-described conventional circumstances, the present disclosure has been devised, and an object thereof is to provide a biological data conversion device, a biological data conversion method, and a biological data conversion system that convert biological information acquired by an arbitrary acquisition method into biological information that can be used for biometric authentication.

Means for Solving the Problems

[0007] The present disclosure provides a biological data conversion device including: an acquisition unit that acquires at least one first biological data and acquisition information indicating whether the first biological data was acquired in a contact state or a non-contact state ; and a control unit that converts the first biological data into a second biological data different from the first biological data and outputs the converted data. Based on the acquisition information

[0008] and acquisition information indicating whether the first biological data was acquired in a contact state or a non-contact state Also, the present disclosure provides a biological data conversion method performed by a biological data conversion device capable of communicating with at least one biological data acquisition device that can acquire first biological data, the method including acquiring the first biological data and acquisition information indicating whether the first biological data was acquired in a contact state or a non-contact state ; and converting the first biological data into a second biological data different from the first biological data and outputting the converted data. Based on the acquisition information

[0009] the first biological data and acquisition information indicating whether the first biological data was acquired in a contact state or a non-contact state Also, the present disclosure provides a biological data conversion system including at least one biological data acquisition device capable of acquiring first biological data and a server capable of communicating with the biological data acquisition device, wherein the biological data acquisition device acquires the first biological data the first biological data and acquisition information indicating whether the first biological data was acquired in a contact state or a non-contact state and transmits the acquired data to the server, and the server converts the first biological data into a second biological data different from the first biological data and outputs the converted data. Based on the acquisition information

Advantages of the Invention

[0010] According to the present disclosure, biometric information obtained by any acquisition method can be converted into biometric information that enables biometric authentication.

Brief Description of the Drawings

[0011]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16

Figure 17

Figure 18

Figure 19

Figure 20

Figure 21

Figure 22

Mode for Carrying Out the Invention

[0012] (Background Leading to the Present Disclosure) In recent years, the use of biometric authentication has been expanding at airports, banks, etc. Such biometric authentication acquires biometric information used for registration and authentication of biometric information using dedicated terminal devices respectively. However, with the expansion of the use of biometric authentication, such as authenticating biometric information acquired by a dedicated terminal device installed at an airport and biometric information acquired by an arbitrary terminal device held by a user, biometric authentication using biometric information acquired by different terminal devices has been desired.

[0013] Here, Patent Document 1 discloses a fingerprint processing device that represents, as an example of biological information, a first fingerprint image acquired by a 3D scanner in a two-dimensional coordinate plane and converts it into a second fingerprint image in which the fingerprint is reflected with desired image characteristics. However, the fingerprint processing device described in Patent Document 1 requires a dedicated fingerprint sensor for acquiring the first fingerprint image and a dedicated fingerprint processing device for generating the second fingerprint image, and it is not assumed that biological information acquired by any terminal device with a different method of acquiring biological information can be converted into biological information suitable for a predetermined biometric authentication.

[0014] Therefore, in each of the embodiments shown below, examples of a biological data conversion device, a biological data conversion method, and a biological data conversion system that convert biological information acquired by any acquisition method into biological information that can be used for biometric authentication will be described.

[0015] Hereinafter, with appropriate reference to the drawings, each embodiment specifically disclosing the configuration and operation of the biological data conversion device, the biological data conversion method, and the biological data conversion system according to the present disclosure will be described in detail. However, a more detailed description than necessary may be omitted. For example, a detailed description of already well-known matters or a redundant description of substantially the same configuration may be omitted. This is to avoid making the following description unnecessarily redundant and to facilitate the understanding of those skilled in the art. Note that the accompanying drawings and the following description are provided to enable those skilled in the art to fully understand the present disclosure, and it is not intended to limit the subject matter described in the claims by these.

[0016] (Embodiment 1) <First Use Case Example> Referring to FIG. 1, a first use case example of the fingerprint authentication system 100A according to Embodiment 1 will be described. FIG. 1 is a diagram showing a first use case example of the fingerprint authentication system 100A according to Embodiment 1. In each of the following embodiments, as an example of biometric authentication, the conversion process of biometric information in the case of performing fingerprint authentication will be described. However, the biometric information used for biometric authentication is not limited to fingerprints. Biometric authentication may be, for example, vein authentication or palmprint authentication, or may be authentication using any two or more of fingerprint, vein, and palmprint biometric data.

[0017] The fingerprint authentication system 100A includes a terminal device P11, a fingerprint acquisition device P12, a server S11, and a contact fingerprint database DB11. Note that the number of each of the terminal device P11 and the fingerprint acquisition device P12 may be plural.

[0018] In the first use case example, the fingerprint authentication system 100A converts fingerprint data (hereinafter referred to as "non-contact fingerprint data") acquired from the fingertip of a non-contact user by the terminal device P11 or the fingerprint acquisition device P12 into contact fingerprint data that can be used for collation (biometric authentication) with the contact fingerprint data (hereinafter referred to as "contact fingerprint data") acquired from the fingertip of a contact user and registered in the contact fingerprint database DB11 by the server S11.

[0019] The fingerprint authentication system 100A stores (registers) the converted contact fingerprint data in the contact fingerprint database DB11. Further, the fingerprint authentication system 100A collates the converted contact fingerprint data with the contact fingerprint data registered in the contact fingerprint database DB11 to perform biometric authentication.

[0020] The terminal device P11 is a general-purpose device owned by a user for whom biometric authentication is to be performed, or installed in a store, company, or facility that uses biometric authentication, and is realized by, for example, a smartphone, a tablet terminal, or the like. The terminal device P11 is communicably connected to the server S11 via a network to communicate data. The terminal device P11 includes a camera 13 (see FIG. 4) and acquires non-contact fingerprint data of the user.

[0021] Note that the term "fingerprint data" in the following description includes contact fingerprint data or non-contact fingerprint data. Also, contact fingerprint data, non-contact fingerprint data, and fingerprint data are data including information related to the user's fingerprint, and are, for example, data of a fingerprint image obtained by imaging the user's fingertip (fingerprint), a feature amount indicating the individuality of the user extracted from the user's fingerprint image, or data indicating the shape pattern of the user's fingerprint.

[0022] In the first use case example, the terminal device P11 acquires a fingerprint image of the user's fingerprint by imaging the user's fingertip (fingerprint) held within the angle of view of the camera 13 in a non-contact state. Note that the terminal device P11 extracts information related to the fingerprint, such as a feature amount indicating the individuality of the user or the shape pattern of the fingerprint, based on the fingerprint image of the user obtained in the non-contact state. The terminal device P11 transmits the fingerprint image of the user obtained in the non-contact state, the feature amount indicating the individuality of the user, or information related to the fingerprint, such as the shape pattern of the fingerprint, to the server S11 as the non-contact fingerprint data of the user.

[0023] The fingerprint acquisition device P12 is a dedicated device for acquiring fingerprint data used for biometric authentication, and is installed in a store, company, or the like that uses biometric authentication. The fingerprint acquisition device P12 is communicably connected to the server S11 via a network to communicate data. The fingerprint acquisition device P12 includes a camera 23 (see FIG. 4) and acquires the user's fingerprint data in a non-contact state.

[0024] In the first use case example, the fingerprint acquisition device P12 acquires non-contact fingerprint data by imaging the user's finger (fingerprint) held within the angle of view of the camera 23 in a non-contact state. The fingerprint acquisition device P12 transmits the non-contact fingerprint data to the server S11.

[0025] In registering the fingerprint data, the server S11 is communicably connected via a network to each of the terminal device P11 and the fingerprint acquisition device P12. The server S11 acquires the non-contact fingerprint data transmitted from each of the terminal device P11 and the fingerprint acquisition device P12. The server S11 converts the acquired non-contact fingerprint data into contact fingerprint data that can be compared (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB11. The server S11 associates the converted contact fingerprint data with user information (e.g., user ID, name, age, or gender, etc.) and stores (registers) it in the contact fingerprint database DB11.

[0026] In performing biometric authentication, the server S11 compares the converted contact fingerprint data with at least one contact fingerprint data registered in the contact fingerprint database DB11 to perform biometric authentication (user authentication).

[0027] <Second Use Case Example> Referring to FIG. 2, a second use case example of the fingerprint authentication system 100B according to Embodiment 1 will be described. FIG. 2 is a diagram showing a second use case example of the fingerprint authentication system 100B according to Embodiment 1. In the second use case example, since the terminal device P11 and the fingerprint acquisition device P12 are the same as those in the first use case example, the description thereof will be omitted, and only different processes and configurations will be described.

[0028] The fingerprint authentication system 100B includes a terminal device P11, a fingerprint acquisition device P12, a server S11, and a contact fingerprint database DB11. Note that the number of each of the terminal device P11 and the fingerprint acquisition device P12 may be plural.

[0029] In the second use case example, the fingerprint authentication system 100B converts contact fingerprint data acquired from the fingertip of a user in a contact state by the terminal device P11 or the fingerprint acquisition device P12 into contact fingerprint data that can be used for collation (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB11 by the server S11.

[0030] The fingerprint authentication system 100A stores (registers) the converted contact fingerprint data in the contact fingerprint database DB11. Also, the fingerprint authentication system 100A collates the converted contact fingerprint data with the contact fingerprint data registered in the contact fingerprint database DB11 and performs biometric authentication.

[0031] In the second use case example, the terminal device P11 acquires contact fingerprint data by reading the fingerprint of a user placed (i.e., in a contact state) on the operation unit 15 (see FIG. 4). The terminal device P11 transmits the acquired contact fingerprint data to the server S11.

[0032] In the second use case example, the fingerprint acquisition device P12 acquires contact fingerprint data by reading the fingerprint of a user placed (i.e., in a contact state) on the sensor 24 (see FIG. 4). The fingerprint acquisition device P12 transmits the acquired contact fingerprint data to the server S11.

[0033] The server S11 acquires the contact fingerprint data transmitted from each of the terminal device P11 and the fingerprint acquisition device P12. The server S11 converts the acquired contact fingerprint data into contact fingerprint data that can be collated (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB11.

[0034] <Third Use Case Example> Referring to FIG. 3, a third use case example of the fingerprint authentication system 100C according to Embodiment 1 will be described. FIG. 1 is a diagram showing a third use case example of the fingerprint authentication system 100C according to Embodiment 1. In the third use case example, since the terminal device P11 and the fingerprint acquisition device P12 are the same as those in the first use case example and the second use case example, the description thereof will be omitted, and only different processes and configurations will be described.

[0035] The fingerprint authentication system 100C includes a terminal device P11, a fingerprint acquisition device P12, a server S11, a contact sensor P13, and a contact fingerprint database DB11. Note that the number of each of the terminal device P11, the fingerprint acquisition device P12, and the contact sensor P13 may be plural.

[0036] In the third use case example, the fingerprint authentication system 100C converts the contact fingerprint data or non-contact fingerprint data acquired by an arbitrary acquisition method (contact state or non-contact state) by the terminal device P11 or the fingerprint acquisition device P12 into contact fingerprint data that can be collated (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB11 by the server S11. Further, the fingerprint authentication system 100C determines that the contact fingerprint data acquired by the contact sensor P13 is contact fingerprint data that does not require conversion, and omits the conversion process.

[0037] The fingerprint authentication system 100C stores (registers) the converted contact fingerprint data in the contact fingerprint database DB11. Further, the fingerprint authentication system 100C collates the converted contact fingerprint data with the contact fingerprint data registered in the contact fingerprint database DB11, and executes biometric authentication.

[0038] The terminal device P11 in the third use case example acquires the contact fingerprint data or non-contact fingerprint data (fingerprint data) of the user by the camera 13 or the operation unit 15 (see FIG. 4). The terminal device P11 transmits the acquired contact fingerprint data or non-contact fingerprint data (fingerprint data) to the server S11.

[0039] In the third use case example, the fingerprint acquisition device P12 acquires contact fingerprint data or non-contact fingerprint data (fingerprint data) by the camera 23 or the sensor 24 (see FIG. 4). The fingerprint acquisition device P12 transmits the acquired contact fingerprint data or non-contact fingerprint data (fingerprint data) to the server S11.

[0040] The contact sensor P13 is a dedicated device for acquiring contact fingerprint data used for biometric authentication, and is installed in a store, company, facility, etc. that uses biometric authentication. Note that the contact sensor P13 may be able to acquire the user's contact fingerprint data by known techniques. The contact sensor P13 transmits information related to the fingerprint, such as a feature amount indicating the individuality of the user or a fingerprint shape pattern, to the server S11 as the user's contact fingerprint data. Note that the contact sensor P13 may be able to acquire contact fingerprint data that does not require conversion.

[0041] In the third use case example, the server S11 acquires the contact fingerprint data or non-contact fingerprint data transmitted from each of the terminal device P11, the fingerprint acquisition device P12, and the contact sensor P13 in the registration of the fingerprint data. Based on the unreadable information, the server S11 converts the contact fingerprint data or non-contact fingerprint data acquired by the terminal device P11 or the fingerprint acquisition device P12 into contact fingerprint data that can be collated (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB11, and omits the conversion process for the contact fingerprint data acquired by the contact sensor P13. The server S11 associates the converted contact fingerprint data with user information (for example, user ID, name, age, or gender, etc.) and stores (registers) it in the contact fingerprint database DB11.

[0042] In the execution of biometric authentication, the server S11 collates the converted contact fingerprint data with at least one contact fingerprint data registered in the contact fingerprint database DB11 to execute biometric authentication (user authentication).

[0043] Next, referring to FIG. 4, it is a diagram showing an internal configuration example of fingerprint authentication systems 100A to 100C in the first to third use case examples of Embodiment 1.

[0044] The terminal device P11 includes a communication unit 10, a processor 11, a memory 12, a camera 13, and a monitor 14. Note that the terminal device P11 in the second use case example may be configured not to include the camera 13.

[0045] The communication unit 10 is connected to be wirelessly or wired communicably via a network to the communication unit 30 of the server S11, and executes data transmission and reception. Here, the wireless communication is, for example, short-range wireless communication such as Bluetooth (registered trademark) or NFC (registered trademark), or communication via a wireless Local Area Network (LAN) such as Wi-Fi (registered trademark).

[0046] At the time of registering fingerprint data, the communication unit 10 transmits the fingerprint data of the user generated by the processor 11, the user information of the user, and the additional information to the server S11 in association with each other, and at the time of biometric authentication, the fingerprint data of the user generated by the processor 11 and the additional information to the server S11.

[0047] Here, the additional information is information regarding the acquisition method of the fingerprint data or the device (for example, the terminal device P11, the fingerprint acquisition device P12, the contact sensor P13, etc.) in which the fingerprint data is acquired (generated). The additional information includes at least one of, for example, information indicating whether the fingerprint data is contact fingerprint data or non-contact fingerprint data, device information regarding the device in which the fingerprint data is acquired (generated), information regarding the acquisition method or generation method of the fingerprint data, and the like.

[0048] Also, the device information is, for example, information indicating whether the device is a general-purpose device or a dedicated device in the acquisition of fingerprint data, and identification information (for example, model number or device name, etc.) that can identify the device in which the fingerprint data is acquired or generated.

[0049] In addition, information regarding the method for acquiring or generating fingerprint data includes parameters of the camera by which the fingerprint image was captured, the fingerprint sensing method of the operation unit or sensor from which the fingerprint data was acquired (e.g., the capacitance method, thermal method, ultrasonic method, pressure sensing method, optical method, etc., described later), and parameters used for fingerprint sensing, etc.

[0050] The processor 11 is configured using, for example, a Central Processing Unit (hereinafter referred to as "CPU"), a Field Programmable Gate Array (hereinafter referred to as "FPGA"), or a Graphics Processing Unit (hereinafter referred to as "GPU"), and performs various processes and controls in cooperation with the memory 12. Specifically, the processor 11 refers to the programs and data held in the memory 12 and executes those programs to realize the function of acquiring the user's fingerprint data (specifically, non-contact fingerprint data or contact fingerprint data).

[0051] When an application capable of acquiring fingerprint data is launched by an input operation by the user or a person other than the user (e.g., a person in the store or company where the terminal device P11 is installed), the processor 11 generates a control instruction requesting the start of fingerprint data acquisition and outputs it to the camera 13 or the operation unit 15.

[0052] When acquiring non-contact fingerprint data using the camera 13, the processor 11 acquires the captured image output from the camera 13 and detects at least one fingertip including the first joint from the captured image of the entire hand or at least one finger of the user. The processor 11 further detects a fingertip region including from the detected at least one fingertip to the first joint among the detected fingertips, and generates a fingerprint image by cutting out the fingertip region of any one of the detected fingertip regions. Note that the finger for which the fingerprint image is generated may be any finger, or may be a pre-specified finger (e.g., the middle finger that is easy to image and has the largest area, etc.).

[0053] The processor 11 may perform image analysis on the generated fingerprint image and extract feature quantities indicating the individuality of the user. Note that the processor 11 may detect which finger (for example, the middle finger or index finger, etc.) the finger reflected in the fingerprint image is, and generate finger information indicating which finger the finger reflected in the fingerprint image is.

[0054] Here, the feature quantities may be extracted using known techniques (for example, the minutiae method, the frequency feature analysis method, etc.). The minutiae method is a method of extracting the feature quantities of a fingerprint by detecting the endpoints indicating the breaks of the fingerprint lines or the bifurcation points (forks) among the ridges of the fingerprint. Also, the frequency feature analysis method is a method of extracting the feature quantities of a fingerprint from the waveform of the frequency obtained by converting the unevenness of the fingerprint into a frequency.

[0055] Also, when acquiring non-contact fingerprint data using the operation unit 15, the processor 11 acquires contact fingerprint data from the fingertip of the user placed in the area of the operation unit 15 where contact fingerprint data can be acquired. Note that the finger placed on the operation unit 15 may be any finger, or may be a pre-specified finger (for example, the middle finger which is easy to image and has the largest area, etc.). The processor 11 may output a message or an image designating the finger placed on the operation unit 15 of the monitor 14.

[0056] At the time of registering fingerprint data, the processor 11 generates a control command requesting registration of the fingerprint data, associates the generated control command, the user information received by the operation unit 15, the fingerprint data, and the additional information corresponding to the fingerprint data, and outputs the result to the communication unit 10 to cause it to be transmitted to the server S11. Note that the processor 11 may further associate the finger information corresponding to the fingerprint data and transmit it to the server S11. When the processor 11 acquires the registration result of the fingerprint data from the server S11, the processor 11 generates a notification screen (not shown) notifying the registration result of the fingerprint data, and outputs and displays it on the monitor 14.

[0057] Also, at the time of biometric authentication, the processor 11 generates a control command that requests biometric authentication, associates the generated control command with fingerprint data and additional information corresponding to the fingerprint data, outputs the result to the communication unit 10, and causes the data to be transmitted to the server S11. Note that the processor 11 may further associate finger information corresponding to the fingerprint data and transmit it to the server S11. When the processor 11 obtains the biometric authentication result of the fingerprint data from the server S11, the processor 11 generates a notification screen (not shown) that notifies the biometric authentication result of the fingerprint data, outputs the screen to the monitor 14, and causes the screen to be displayed.

[0058] After transmitting the fingerprint data, the processor 11 deletes the fingerprint data or various data (such as fingerprint images) used for generating the fingerprint data. Thereby, the processor 11 can prevent the outflow of the user's fingerprint data and improve security.

[0059] The memory 12 includes, for example, a Random Access Memory (hereinafter referred to as "RAM") used as a work memory for executing each process of the processor 11, and a Read Only Memory (hereinafter referred to as "ROM") that stores programs and data defining the operation of the processor 11. Data or information generated or acquired by the processor 11 is temporarily stored in the RAM. A program defining the operation of the processor 11 is written in the ROM.

[0060] The camera 13 includes at least a lens (not shown) and an image sensor (not shown). The image sensor is, for example, a solid-state imaging device of a Charged-Coupled Device (hereinafter referred to as "CCD") or a Complementary Metal Oxide Semiconductor (hereinafter referred to as "CMOS"), and converts an optical image formed on the imaging surface into an electrical signal. The camera 13 starts imaging in response to a control instruction to start imaging input by the processor 11 or an imaging operation by the user. The camera 13 outputs the captured image to the processor 11.

[0061] The monitor 14 is configured using, for example, a Liquid Crystal Display (hereinafter referred to as "LCD") or an organic Electroluminescence (hereinafter referred to as "EL"). The monitor 14 outputs and displays the captured image captured by the camera 13 or various screens generated by the processor 11. Further, when the monitor 14 receives an alert from the processor 11 to image the fingertips of the user, the monitor 14 displays this alert or outputs it as sound through a speaker (not shown).

[0062] The operation unit 15 may be provided integrally or separately from the monitor 14 and may be a touch interface configured by a touch panel or a fingerprint sensor or the like. The operation unit 15 can receive an input operation by the user or a person other than the user and outputs the content of the input operation to the processor 11. The operation unit 15 outputs user information based on the input operation to the processor 11.

[0063] Also, a plurality of operation units 15 may be provided in one terminal device P11, and any sensor capable of acquiring fingerprint ridges (concavities and convexities) or the like may be used. The operation unit 15 may be configured to be able to acquire non-contact fingerprint data or contact fingerprint data using any known technology such as a capacitance method that acquires fingerprint data based on a change in electric charge amount, a thermosensitive method that acquires fingerprint data based on a temperature change, an ultrasonic method that acquires fingerprint data based on the reception intensity or reception accuracy of ultrasonic waves, a pressure-sensitive method that acquires fingerprint data based on a change in pressure, or an optical method that acquires the shadow of light irradiated on the fingerprint.

[0064] The fingerprint acquisition device P12 includes a communication unit 20, a processor 21, a memory 22, a camera 23, and a sensor 24. Note that the fingerprint acquisition device P12 in the first use case example may not include the sensor 24. The fingerprint acquisition device P12 in the second use case example may not include the camera 23. Also, the fingerprint acquisition device P12 in the third use case example may be configured to include either the camera 23 or the sensor 24.

[0065] The communication unit 20 is connected to the communication unit 30 of the server S11 via a network so as to be capable of wireless or wired communication, and executes data transmission and reception. When registering fingerprint data, the communication unit 20 associates the fingerprint data of the user generated by the processor 21, the user information of the user, and the additional information corresponding to the fingerprint data, and transmits them to the server S11. At the time of biometric authentication, the communication unit 20 transmits the fingerprint data of the user generated by the processor 21 and the additional information corresponding to the fingerprint data to the server S11. Note that the communication unit 20 may further associate and transmit finger information corresponding to the fingerprint data output from the processor 21 to the server S11.

[0066] Here, the fingerprint acquisition device P12 is connected to an external device (not shown) capable of receiving input operations by a user or a person other than the user so as to be capable of data transmission and reception, and may acquire user information from this external device.

[0067] The processor 21 is configured by using, for example, a CPU, an FPGA, or a GPU, and cooperates with the memory 22 to perform various processes and controls. Specifically, the processor 21 refers to the programs and data held in the memory 22, and by executing the programs, realizes a function of acquiring fingerprint data of a user (specifically, non-contact fingerprint data or contact fingerprint data).

[0068] For example, when an application capable of acquiring fingerprint data by an operation of a person in a store or company where the fingerprint acquisition device P12 is installed is started, the processor 21 generates and outputs a control instruction to start imaging to the camera 23 or the sensor 24.

[0069] When acquiring non-contact fingerprint data using the camera 23, the processor 21 obtains the captured image output from the camera 23, and detects at least one fingertip including the first joint from the captured image of the entire hand or at least one finger of the user. The processor 21 further detects a fingertip area including from the detected at least one fingertip to the first joint among the detected fingertips, and generates a fingerprint image by cutting out the fingertip area of any one of the detected fingertip areas. Note that the finger for which the fingerprint image is generated may be any finger, or may be a pre-specified finger (for example, the middle finger that is easy to image and has the largest area, etc.).

[0070] The processor 21 may perform image analysis on the generated fingerprint image and extract feature amounts indicating the individuality of the user. Note that the processor 21 may detect which finger (for example, the middle finger or index finger, etc.) the finger reflected in the fingerprint image is, and generate finger information indicating which finger the finger reflected in the fingerprint image is.

[0071] Also, when acquiring non-contact fingerprint data using the sensor 24, the processor 21 obtains the contact fingerprint data of the user based on the output result of the sensor 24. Note that the finger placed on the sensor 24 may be any finger, or may be a pre-specified finger (for example, the middle finger that is easy to image and has the largest area, etc.).

[0072] At the time of registering fingerprint data, the processor 21 generates a control command for requesting registration of the fingerprint data, associates the generated control command, user information acquired from an external device (not shown), and the fingerprint data, outputs the result to the communication unit 20, and transmits it to the server S11. Note that the processor 21 may further associate the finger information corresponding to the fingerprint data and transmit it to the server S11. When the processor 21 obtains the registration result of the fingerprint data from the server S11, the processor 21 may generate a notification screen (not shown) for notifying the registration result of the fingerprint data, output it to an external device (not shown), and display it.

[0073] Also, during biometric authentication, the processor 21 generates a control command requesting biometric authentication, associates the generated control command with the fingerprint data, outputs the result to the communication unit 20, and transmits it to the server S11. Note that the processor 21 may further associate finger information corresponding to the fingerprint data and transmit it to the server S11. When the processor 21 obtains the biometric authentication result of the fingerprint data from the server S11, the processor 21 may generate a notification screen (not shown) for notifying the biometric authentication result of the fingerprint data, output it to an external device (not shown), and display it.

[0074] After transmitting the fingerprint data, the processor 21 deletes the fingerprint data or various data (for example, fingerprint images, etc.) used for generating the fingerprint data. Thereby, the processor 21 can prevent the outflow of the user's fingerprint data and improve security.

[0075] The memory 22 includes, for example, a RAM as a work memory used when the processor 21 executes each process, and a ROM that stores a program and data defining the operation of the processor 21. Data or information generated or acquired by the processor 21 is temporarily stored in the RAM. A program defining the operation of the processor 21 is written in the ROM.

[0076] The camera 23 includes at least a lens (not shown) and an image sensor (not shown). The image sensor is, for example, a solid-state imaging device such as a CCD or a CMOS, and converts an optical image formed on the imaging surface into an electrical signal. The camera 23 starts imaging in response to a control instruction for starting imaging input by the processor 21 or an imaging operation by the user. The camera 23 outputs the captured image to the processor 21.

[0077] The sensor 24 is a sensor capable of acquiring the ridge lines (concavities and convexities) of a fingerprint, and outputs the acquired contact fingerprint data of the user to the processor 21. The sensor 24 may be configured to be capable of acquiring non-contact fingerprint data using any known technology such as, for example, an electrostatic capacitance method, a thermal method, an ultrasonic method, a pressure-sensitive method, or an optical method.

[0078] The contact sensor P13 is a sensor capable of acquiring fingerprint ridges (concavities and convexities), etc. from the fingertips of the placed user. For example, it may be configured to be able to acquire non-contact fingerprint data using any known technology such as the capacitance method, the thermal sensing method, the ultrasonic method, the pressure sensing method, or the optical method.

[0079] The server S11 includes a communication unit 30, a processor 31, and a memory 32. Note that the server S11 may be integrally configured with the contact fingerprint database DB11.

[0080] The communication unit 30 is connected to the terminal device P11, the fingerprint acquisition device P12, the contact sensor P13, and the contact fingerprint database DB11 via a network so as to be capable of wireless or wired communication, and executes data transmission and reception. The communication unit 30 acquires fingerprint data (contact fingerprint data or non-contact fingerprint data), user information, additional information, control commands, etc. from each of the terminal device P11, the fingerprint acquisition device P12, and the contact sensor P13, and outputs them to the processor 31. Further, the communication unit 30 transmits the registration result or the biometric authentication result of the fingerprint data output from the processor 31 to the device corresponding to the fingerprint data (the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13).

[0081] The processor 31 is configured using, for example, a CPU, an FPGA, or a GPU, and cooperates with the memory 32 to perform various processes and controls. Specifically, the processor 31 refers to the programs and data held in the memory 32 and realizes the functions of each part by executing those programs. Note that the functions of each part here are functions realized by a fingerprint data conversion unit 311, a fingerprint authentication unit 312, etc. For example, functions such as converting the fingerprint data of a user (specifically, non-contact fingerprint data or contact fingerprint data) into contact fingerprint data, registering the converted contact fingerprint data in the contact fingerprint database DB11, and performing biometric authentication using the converted contact fingerprint data.

[0082] The fingerprint data conversion unit 311 converts the fingerprint data (contact fingerprint data or non-contact fingerprint data) transmitted from the terminal device P11 or the fingerprint acquisition device P12 into contact fingerprint data that can be collated (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB11 based on the additional information associated with the fingerprint data. At the time of biometric authentication, the fingerprint data conversion unit 311 outputs the converted contact fingerprint data to the fingerprint authentication unit 312.

[0083] Note that the fingerprint data conversion unit 311 determines that the conversion of the fingerprint data is unnecessary when, based on the acquired additional information, the acquired fingerprint data is contact fingerprint data acquired by a dedicated device (for example, the contact sensor P13) that does not require conversion, or when it is determined that the acquired fingerprint data can be collated (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB11. In such a case, the fingerprint data conversion unit 311 may omit the conversion process of the fingerprint data.

[0084] At the time of registering the fingerprint data, the fingerprint data conversion unit 311 associates the converted contact fingerprint data with the user information and stores (registers) it in the contact fingerprint database DB11. The fingerprint data conversion unit 311 generates a registration result indicating that the registration was successful and transmits it to the corresponding device.

[0085] Here, when the fingerprint data conversion unit 311 acquires finger information from the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13, it associates the converted contact fingerprint data, the user information, and the finger information and stores (registers) them in the contact fingerprint database DB11 for each user.

[0086] Note that when the fingerprint data conversion unit 311 determines that contact fingerprint data associated with the same user information has already been registered in the contact fingerprint database DB11, it omits the registration process of the converted contact fingerprint data and generates a registration result indicating that the registration has failed and transmits it to the corresponding device.

[0087] Also, when there is registered contact fingerprint data in the contact fingerprint database DB11, the fingerprint data conversion unit 311 may overwrite and register the converted contact fingerprint data in the registered contact fingerprint data. Further, based on the finger information, when the registered contact fingerprint data is contact fingerprint data associated with the same finger information, the fingerprint data conversion unit 311 executes overwriting registration, and when the registered contact fingerprint data is contact fingerprint data associated with different finger information, the fingerprint data conversion unit 311 may additionally register the converted contact fingerprint data.

[0088] The fingerprint authentication unit 312 collates the converted contact fingerprint data output from the fingerprint data conversion unit 311 with each of the contact fingerprint data registered in the contact fingerprint database DB11 to perform biometric authentication. When performing biometric authentication, the fingerprint authentication unit 312 collates (biometric authentication) the converted contact fingerprint data with each of the contact fingerprint data registered in the contact fingerprint database DB11. When the fingerprint authentication unit 312 determines that contact fingerprint data identical or similar to the converted contact fingerprint data is registered in the contact fingerprint database DB11, the fingerprint authentication unit 312 generates a biometric authentication result indicating that the biometric authentication has succeeded. When the fingerprint authentication unit 312 determines that contact fingerprint data identical or similar to the converted contact fingerprint data is not registered in the contact fingerprint database DB11, the fingerprint authentication unit 312 generates a biometric authentication result indicating that the biometric authentication has failed and transmits it to the device corresponding to the contact fingerprint data.

[0089] The memory 32 includes, for example, a RAM as a work memory used when executing each process of the processor 31, and a ROM that stores a program and data defining the operation of the processor 31. Data or information generated or acquired by the processor 31 is temporarily stored in the RAM. A program defining the operation of the processor 31 is written in the ROM.

[0090] The contact fingerprint database DB11 is a so-called storage, which is configured using a storage medium such as a flash memory, a Hard Disk Drive (hereinafter referred to as "HDD"), or a Solid State Drive (hereinafter referred to as "SSD"). The contact fingerprint database DB11 stores (registers) and manages the contact fingerprint data and user information transmitted from the server S11 for each user. Note that the contact fingerprint database DB11 may be integrally configured with the server S11.

[0091] Note that in the above description, some explanations about the case where the conversion process of fingerprint data is unnecessary are omitted. When the conversion process of fingerprint data is unnecessary, the server S11 uses the unconverted fingerprint data (contact fingerprint data) instead of the converted fingerprint data to register the user's contact fingerprint data or perform biometric authentication using the contact fingerprint data.

[0092] Next, with reference to FIG. 5, an example of the operation procedure of the fingerprint authentication systems 100A to 100C according to the first to third use case examples will be described. FIG. 5 is a sequence diagram showing an example of the operation procedure of the fingerprint authentication systems 100A to 100C according to the first to third use case examples of Embodiment 1.

[0093] The terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 acquires fingerprint data, which is contact fingerprint data or non-contact fingerprint data (St111). The terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 generates a control command for requesting either fingerprint data registration or biometric authentication, associates the generated control command with additional information regarding the own device and the fingerprint data, and transmits the result to the server S11 (St112).

[0094] Note that when the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 requests fingerprint data registration, it further associates user information and transmits the result to the server S11.

[0095] Server S11 determines whether it is necessary to convert fingerprint data based on the additional information transmitted from terminal device P11, fingerprint acquisition device P12, or contact sensor P13 (St113).

[0096] In the process of step St113, if Server S11 determines that it is necessary to convert the fingerprint data (St113, YES), it converts the fingerprint data into contact fingerprint data that can be compared (biometric authentication) with the contact fingerprint data registered in contact fingerprint database DB11 (St114).

[0097] On the other hand, in the process of step St113, if Server S11 determines that it is not necessary to convert the fingerprint data (St113, NO), it omits the fingerprint data conversion process. Note that Server S11 determines that fingerprint data conversion is not necessary when it determines based on the acquired additional information that the acquired fingerprint data is contact fingerprint data acquired by a predetermined device or that the acquired fingerprint data is contact fingerprint data that can be compared (biometric authentication) with the contact fingerprint data registered in contact fingerprint database DB11.

[0098] Server S11 executes registration or biometric authentication of the user's contact fingerprint data based on the control command transmitted from terminal device P11, fingerprint acquisition device P12, or contact sensor P13 (St115). Server S11 generates the registration result of the contact fingerprint data or the biometric authentication result using the contact fingerprint data and transmits it to the device that is the acquisition source (transmission source) of the fingerprint data (that is, terminal device P11, fingerprint acquisition device P12, or contact sensor P13) (St116).

[0099] Specifically, when the server S11 in step St115 obtains a control command requesting registration of the user's contact fingerprint data, it determines whether the contact fingerprint data has been registered in the contact fingerprint database DB11 based on the user information associated with the fingerprint data. If the server S11 determines that the contact fingerprint data has not been registered in the contact fingerprint database DB11, it associates the contact fingerprint data with the user information and stores (registers) it in the contact fingerprint database DB11, and generates a registration result indicating that the registration of the fingerprint data has been successful. On the other hand, if the server S11 determines that the contact fingerprint data has been registered in the contact fingerprint database DB11, it interrupts the registration of the contact fingerprint data and generates a registration result indicating that the registration of the fingerprint data has failed.

[0100] Note that the server S11 may also determine whether the contact fingerprint data has been registered in the contact fingerprint database DB11 based on the user information and the finger information corresponding to the fingerprint data. In such a case, the server S11 further determines whether contact fingerprint data having the same finger information has been registered in the contact fingerprint database DB11.

[0101] Specifically, when the server S11 in step St115 obtains a control command requesting biometric authentication, it compares the contact fingerprint data with the contact fingerprint data already registered in the contact fingerprint database DB11. If the server S11 determines that the same or similar contact fingerprint data has been registered in the contact fingerprint database DB11, it generates a biometric authentication result indicating that the biometric authentication is successful. On the other hand, if the server S11 determines that the same or similar contact fingerprint data has not been registered in the contact fingerprint database DB11, it generates a biometric authentication result indicating that the biometric authentication has failed.

[0102] The terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 obtains the registration result or the biometric authentication result transmitted from the server S11, and outputs the obtained registration result or biometric authentication result to a monitor, a speaker, an external device (not shown), etc. (St117).

[0103] Note that each of the above-described step St116 and step St117 is not essential and may be omitted.

[0104] As described above, the server S11 in the first embodiment can convert into contact fingerprint data that can be collated (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB11 even when the shape of the fingerprint obtained as fingerprint data, the appearance of the unevenness of the fingerprint ridges, etc. are different due to differences in the method of obtaining fingerprint data, differences in the device from which the fingerprint data is obtained, differences in the generation process of the fingerprint data, etc., thereby suppressing a decrease in the authentication accuracy of biometric authentication. Also, each of the fingerprint authentication systems 100A to 100C according to the first embodiment may be a general-purpose device or a dedicated device capable of obtaining fingerprint data suitable for fingerprint authentication as the device for obtaining fingerprint data. Furthermore, even without limiting the method of obtaining fingerprint data, contact fingerprint data that can be biometrically authenticated can be obtained and registered.

[0105] (Second Embodiment) The fingerprint authentication systems 100A to 100C according to the first embodiment have been described with examples of converting fingerprint data (contact fingerprint data or non-contact fingerprint data) obtained and generated by any acquisition method by each of the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 into contact fingerprint data that can be collated (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB11. An example of converting contact fingerprint data collected by a device different from the server S21 into contact fingerprint data that can be collated (biometric authentication) will be described for the fingerprint authentication system 200 according to the second embodiment.

[0106] Also, in the description of the fingerprint authentication system 200 according to the following second embodiment, the same components as those of the fingerprint authentication systems 100A to 100C according to the first embodiment are given the same reference numerals and the description thereof is omitted.

[0107] <Fourth Use Case Example> Referring to FIG. 6, a fourth use case example corresponding to the fingerprint authentication system 200 according to Embodiment 2 will be described. FIG. 6 is a diagram showing a fourth use case example of the fingerprint authentication system 200 according to Embodiment 2. In the fourth use case example, since the terminal device P11 and the fingerprint acquisition device P12 are substantially the same as those in the first to third use case examples, the description thereof will be omitted, and only different processes and configurations will be described.

[0108] The fingerprint authentication system 200 according to Embodiment 2 includes a terminal device P11, a fingerprint acquisition device P12, a server S21, a blacklist fingerprint database DB21, and a contact fingerprint database DB22. Note that the number of each of the terminal device P11 and the fingerprint acquisition device P12 may be plural.

[0109] In the fourth use case example, the fingerprint authentication system 200 converts the non-contact fingerprint data acquired by the terminal device P11 or the fingerprint acquisition device P12 into contact fingerprint data that can be collated (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB22 by the server S21, and collates (biometric authentication) it with the contact fingerprint data registered in the blacklist fingerprint database DB21.

[0110] If the fingerprint authentication system 200 determines, as a result of the collation (biometric authentication), that contact fingerprint data identical or similar to the converted contact fingerprint data is registered in the blacklist fingerprint database DB21, it generates and outputs an alert indicating that the person registered in the blacklist fingerprint database DB21 has been detected. If the fingerprint authentication system 200 determines, as a result of the collation (biometric authentication), that contact fingerprint data identical or similar to the converted contact fingerprint data is not registered in the blacklist fingerprint database DB21, it stores (registers) the converted contact fingerprint data in the contact fingerprint database DB22, or collates (biometric authentication) the converted contact fingerprint data with the contact fingerprint data registered in the contact fingerprint database DB22.

[0111] The terminal device P11 is communicably connected to the server S21 via a network. The terminal device P11 includes a camera 13 (see FIG. 4) and acquires non-contact fingerprint data of a user. The terminal device P11 transmits the acquired non-contact fingerprint data to the server S21.

[0112] The fingerprint acquisition device P12 is communicably connected to the server S21 via a network. The fingerprint acquisition device P12 includes a camera 23 (see FIG. 4) and acquires non-contact fingerprint data. The fingerprint acquisition device P12 transmits the acquired non-contact fingerprint data to the server S21.

[0113] The server S21 is communicably connected to each of the terminal device P11 and the fingerprint acquisition device P12 via a network. The server S21 acquires the non-contact fingerprint data transmitted from each of the terminal device P11 and the fingerprint acquisition device P12.

[0114] The server S21 converts the acquired non-contact fingerprint data into contact fingerprint data that can be compared (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB22. The server S21 compares the acquired contact fingerprint data with the contact fingerprint data registered in the blacklist fingerprint database DB21.

[0115] When the server S21 determines that the converted contact fingerprint data is the same as or similar to the contact fingerprint data registered in the blacklist fingerprint database DB21, the server S21 generates an alert and transmits it to the device corresponding to the converted contact fingerprint data. Also, when the server S21 determines that the converted contact fingerprint data is not the same as or similar to the contact fingerprint data registered in the blacklist fingerprint database DB21, the server S21 registers the converted contact fingerprint data and user information in the contact fingerprint database DB22, or compares (biometric authentication) the converted contact fingerprint data with the contact fingerprint data registered in the contact fingerprint database DB22.

[0116] The blacklist fingerprint database DB21 is a device other than the server S21 (not shown), which is managed by, for example, a security company, an airport, or the police, etc., and stores (registers) the contact fingerprint data of at least one user registered as a blacklist (detection target). The blacklist fingerprint database DB21 is connected to be able to transmit and receive data to and from the server S21, and only permits the server S21 to refer to (read) the contact fingerprint data during biometric authentication processing in order to detect a user registered as a blacklist.

[0117] The contact fingerprint database DB22 is connected to be able to transmit and receive data to and from the server S21, and permits the server S21 to store (register or write) the contact fingerprint data of at least one user and to refer to (read) the contact fingerprint data during biometric authentication.

[0118] Next, referring to FIG. 7, it is a diagram showing an internal configuration example of the fingerprint authentication system 200 in the fourth use case example of the second embodiment. In the following description of the terminal device P11 and the fingerprint acquisition device P12, only the configurations different from those described in FIG. 4 will be described, and the description of the same configurations will be omitted.

[0119] The communication unit 10A of the terminal device P11 in the fourth use case example is connected to be able to perform wireless or wired communication with the communication unit 40 of the server S21 via a network and executes data transmission and reception. The communication unit 10A associates the non-contact fingerprint data of the user generated by the processor 11, the user information of the user, and the additional information corresponding to the non-contact fingerprint data and transmits them to the server S21. Note that the communication unit 10A may further associate the finger information corresponding to the non-contact fingerprint data output from the processor 11 and transmit it to the server S21.

[0120] In the fourth use case example, the communication unit 20A of the fingerprint acquisition device P12 is connected to be wirelessly or wiredly communicable via a network with the communication unit 40 of the server S21 and executes data transmission and reception. The communication unit 20A associates the non-contact fingerprint data of the user generated by the processor 21, the user information of the user, and the additional information corresponding to the non-contact fingerprint data, and transmits them to the server S21. Note that the communication unit 20A may further associate the finger information corresponding to the non-contact fingerprint data output from the processor 21 and transmit it to the server S21.

[0121] Here, in the fourth use case example, the sensor 24 of the fingerprint acquisition device P12 may be omitted.

[0122] The server S21 in the fourth use case example includes a communication unit 40, a processor 41, and a memory 42. Note that the server S21 may be integrally configured with the contact fingerprint database DB22.

[0123] The communication unit 40 is connected to be wirelessly or wiredly communicable via a network with each of the terminal device P11, the fingerprint acquisition device P12, the blacklist fingerprint database DB21, and the contact fingerprint database DB22, and executes data transmission and reception.

[0124] The communication unit 40 acquires non-contact fingerprint data from each of the terminal device P11 or the fingerprint acquisition device P12, and outputs the acquired non-contact fingerprint data to the processor 41. Further, the communication unit 40 transmits the registration result or biometric authentication result of the fingerprint data output from the processor 41 to the device (the terminal device P11 or the fingerprint acquisition device P12) corresponding to the acquired fingerprint data.

[0125] In biometric authentication, the communication unit 40 reads at least one contact fingerprint data registered in the blacklist fingerprint database DB21 and outputs it to the processor 41. In the registration of fingerprint data, the communication unit 40 outputs the contact fingerprint data output from the processor 41 and the user information to the contact fingerprint database DB22 for storage (registration or writing).

[0126] The processor 41 is configured using, for example, a CPU, FPGA, or GPU, and cooperates with the memory 42 to perform various processes and controls. Specifically, the processor 41 refers to the programs and data held in the memory 42 and executes those programs to realize the functions of each part. Here, the functions of each part are functions realized by the fingerprint data conversion unit 411, the fingerprint authentication unit 412, etc. For example, functions such as converting the user's non-contact fingerprint data into contact fingerprint data that can be compared (biometric authentication) with the contact fingerprint data registered in the blacklist fingerprint database DB21, comparing (biometric authentication) the converted contact fingerprint data with the contact fingerprint data registered in the blacklist fingerprint database DB21, and registering or biometrically authenticating the converted contact fingerprint data in the contact fingerprint database DB22.

[0127] The fingerprint data conversion unit 411 converts the non-contact fingerprint data transmitted from the terminal device P11 or the fingerprint acquisition device P12 into contact fingerprint data that can be compared (biometric authentication) with the contact fingerprint data registered in the blacklist fingerprint database DB21 based on the additional information. The fingerprint data conversion unit 411 outputs the converted contact fingerprint data to the fingerprint authentication unit 412.

[0128] The fingerprint authentication unit 412 compares (biometric authentication) the converted contact fingerprint data output from the fingerprint data conversion unit 411 with each of the contact fingerprint data registered in the blacklist fingerprint database DB21, and executes detection of a person registered in the blacklist.

[0129] When the fingerprint authentication unit 412 determines that contact fingerprint data identical or similar to the converted contact fingerprint data is registered in the blacklist fingerprint database DB21, it generates an alert indicating that a person registered in the blacklist fingerprint database DB21 has been detected. When the fingerprint authentication unit 412 determines, based on the biometric authentication result, that contact fingerprint data identical or similar to the converted contact fingerprint data is not registered in the blacklist fingerprint database DB21, it registers the converted contact fingerprint data used for biometric authentication in the contact fingerprint database DB22, or collates (biometric authentication) the converted contact fingerprint data used for biometric authentication with the contact fingerprint data registered in the contact fingerprint database DB22.

[0130] In registering the contact fingerprint data, the fingerprint authentication unit 412 determines whether contact fingerprint data associated with the same user information has already been registered in the contact fingerprint database DB22.

[0131] When the fingerprint authentication unit 412 determines that contact fingerprint data associated with the same user information has not already been registered in the contact fingerprint database DB22, it associates the converted contact fingerprint data with the user information and stores (registers) it in the contact fingerprint database DB22. Note that when the fingerprint data conversion unit 411 acquires finger information from the terminal device P11 or the fingerprint acquisition device P12, it may associate the converted contact fingerprint data with the finger information and store (register) it in the contact fingerprint database DB22 for each user.

[0132] When the fingerprint authentication unit 412 determines that contact fingerprint data associated with the same user information has already been registered, it omits the registration process for the contact fingerprint data, generates a registration result indicating that the registration has failed, and transmits it to the corresponding device.

[0133] In addition, when there is registered contact fingerprint data in the contact fingerprint database DB22, the fingerprint authentication unit 412 may overwrite and register the converted contact fingerprint data in the registered contact fingerprint data. Further, based on the finger information, when the registered contact fingerprint data is the contact fingerprint data associated with the same finger information, the fingerprint authentication unit 412 executes overwriting registration, and when the registered contact fingerprint data is the contact fingerprint data associated with different finger information, the fingerprint authentication unit 412 may additionally register the converted contact fingerprint data.

[0134] Also, in performing biometric authentication, the fingerprint authentication unit 412 collates (biometric authentication) the converted contact fingerprint data with each of the contact fingerprint data registered in the contact fingerprint database DB22. When the fingerprint authentication unit 412 determines that contact fingerprint data identical or similar to the converted contact fingerprint data is registered in the contact fingerprint database DB22, the fingerprint authentication unit 412 generates a biometric authentication result indicating that the biometric authentication has succeeded, and when the fingerprint authentication unit 412 determines that contact fingerprint data identical or similar to the converted contact fingerprint data is not registered in the contact fingerprint database DB22, the fingerprint authentication unit 412 generates a biometric authentication result indicating that the biometric authentication has failed and transmits it to the device corresponding to the contact fingerprint data.

[0135] The memory 42 includes, for example, a RAM as a work memory used when each process of the processor 41 is executed, and a ROM that stores a program and data defining the operation of the processor 41. Data or information generated or acquired by the processor 41 is temporarily stored in the RAM. A program defining the operation of the processor 41 is written in the ROM.

[0136] The blacklist fingerprint database DB21 is a so-called storage, and is configured using a storage medium such as a flash memory, an HDD, or an SSD.

[0137] The contact fingerprint database DB22 is a so-called storage, which is configured using a storage medium such as a flash memory, an HDD, or an SSD, for example. The contact fingerprint database DB22 stores (registers) and manages the contact fingerprint data and user information transmitted from the server S21 for each user. Note that the contact fingerprint database DB22 may be configured integrally with the server S21.

[0138] Next, with reference to FIG. 8, an example of the operation procedure of the fingerprint authentication system 200 according to the fourth use case example will be described. FIG. 8 is a sequence diagram showing an example of the operation procedure of the fingerprint authentication system 200 according to the fourth use case example of the second embodiment.

[0139] The terminal device P11 or the fingerprint acquisition device P12 acquires non-contact fingerprint data as fingerprint data (St211). The terminal device P11 or the fingerprint acquisition device P12 generates a control command for requesting registration and biometric authentication of the fingerprint data, associates the generated control command, additional information regarding its own device, and the non-contact fingerprint data, and transmits them to the server S21 (St212).

[0140] Based on the additional information transmitted from the terminal device P11 or the fingerprint acquisition device P12, the server S21 converts the acquired non-contact fingerprint data into contact fingerprint data that can be compared with the contact fingerprint data registered in the blacklist fingerprint database DB21 (St213).

[0141] The server S21 compares the converted contact fingerprint data with the contact fingerprint data registered in the blacklist fingerprint database DB21 (St215).

[0142] In the process of step St215, if the server S21 determines that there is contact fingerprint data in the blacklist fingerprint database DB21 that is the same as or similar to the converted contact fingerprint data (St215, YES), it generates an alert indicating that the person registered in the blacklist fingerprint database DB21 has been detected (St216). The server S21 transmits the generated alert to the device that is the source of the non-contact fingerprint data (St218).

[0143] The server S21 generates a registration result or biometric authentication result of the contact fingerprint data and transmits it to the device that is the source of the non-contact fingerprint data (that is, the terminal device P11 or the fingerprint acquisition device P12) (St218). Note that the server S21 may associate the registration result or biometric authentication result of the contact fingerprint data with the biometric authentication result indicating that the user registered in the blacklist fingerprint database DB21 has not been detected and transmit it to the device that is the source of the non-contact fingerprint data.

[0144] On the other hand, in the process of step St215, if the server S21 determines that there is no contact fingerprint data in the blacklist fingerprint database DB21 that is the same as or similar to the converted contact fingerprint data (St215, NO), it performs registration or biometric authentication of the converted contact fingerprint data (St217).

[0145] The terminal device P11 or the fingerprint acquisition device P12 acquires the alert, registration result, or biometric authentication result transmitted from the server S21, and monitors and outputs the acquired alert, registration result, or biometric authentication result to a monitor, a speaker (not shown), an external device (not shown), etc. (St219).

[0146] As described above, the server S21 in the second embodiment can suppress a decrease in the authentication accuracy of biometric authentication not only when the shape of the fingerprint obtained as fingerprint data or the appearance of the unevenness of the fingerprint ridges is different due to differences in the method of obtaining fingerprint data, differences in the device from which the fingerprint data is obtained, differences in the generation process of the fingerprint data, etc., but also when the algorithms used for biometric authentication are different, or when biometric authentication is performed using a database (blacklist fingerprint database DB21 or contact fingerprint database DB22) in which fingerprint data is registered by a device or server (not shown) different from the server S21.

[0147] Also, thereby, the fingerprint authentication system 200 according to the second embodiment may use a general-purpose device or a dedicated device capable of obtaining fingerprint data suitable for fingerprint authentication as the device for obtaining fingerprint data. Furthermore, biometric authentication can be executed without limiting the method of obtaining fingerprint data.

[0148] (Embodiment 3) The fingerprint authentication systems 100A to 100C and 200 according to the first and second embodiments have shown examples of converting fingerprint data obtained or generated by an arbitrary device or an arbitrary acquisition method into contact fingerprint data used for each biometric authentication executed by the servers S11 and S21. An example of converting fingerprint data obtained by a predetermined fingerprint acquisition device P32 into fingerprint data that can be used for biometric authentication executed by different first and second servers will be described for the fingerprint authentication system 300A according to the third embodiment.

[0149] Also, in the description of the fingerprint authentication system 300A according to the following third embodiment, the same components as those of the fingerprint authentication systems 100A to 100C and 200 according to the first to second embodiments are given the same reference numerals and the description thereof is omitted.

[0150] <Fifth Use Case Example> Referring to FIG. 9, a fifth use case example corresponding to the fingerprint authentication system 300A according to Embodiment 3 will be described. FIG. 9 is a diagram showing a fifth use case example of the fingerprint authentication system 300A according to Embodiment 3.

[0151] The fingerprint authentication system 300A according to Embodiment 3 includes an operation terminal P31, a fingerprint acquisition device P32, a first server S31, a second server S32, a contact fingerprint database DB31, and a blacklist fingerprint database DB32. Note that the number of each of the operation terminal P31 and the fingerprint acquisition device P32 may be plural. Also, the operation terminal P31 and the first server S31 may be integrally configured.

[0152] In the fifth use case example, the fingerprint authentication system 300A acquires the user's fingerprint data (contact fingerprint data or non-contact fingerprint data) by the fingerprint acquisition device P32 based on the operation of the operation terminal P31 by the person who acquires the fingerprint data. The fingerprint authentication system 300A converts the fingerprint data acquired by the fingerprint acquisition device P32 into first contact fingerprint data that can be collated (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB31 by the first server S31, and second contact fingerprint data that can be collated (biometric authentication) with the contact fingerprint data registered in the blacklist fingerprint database DB32, respectively.

[0153] In the registration of fingerprint data, the fingerprint authentication system 300A stores (registers) the first contact fingerprint data in the contact fingerprint database DB31 by the first server S31, and stores (registers) the second contact fingerprint data in the blacklist fingerprint database DB32 by the second server S32.

[0154] Also, in the execution of biometric authentication, the fingerprint authentication system 300A collates (biometric authentication) the first contact fingerprint data with the contact fingerprint data registered in the contact fingerprint database DB31 by the first server S31, and collates (biometric authentication) the second contact fingerprint data with the contact fingerprint data registered in the blacklist fingerprint database DB32 by the second server S32.

[0155] The operation terminal P31 is communicably connected via a network to the fingerprint acquisition device P32 and the first server S31. The operation terminal P31 can receive an input operation by a person who performs an acquisition operation of the user's fingerprint data (for example, a person in a store, company, or facility where the operation terminal P31 is installed), generate a control command corresponding to the input operation, and transmit it to the fingerprint acquisition device P32.

[0156] The fingerprint acquisition device P32 is a dedicated device for acquiring fingerprint data used for biometric authentication, and is installed in a store, company, or facility that uses biometric authentication. The fingerprint acquisition device P32 starts the acquisition process of fingerprint data based on the control command transmitted from the operation terminal P31. The fingerprint acquisition device P32 associates the acquired fingerprint data with additional information corresponding to the fingerprint data and transmits it to the first server S31.

[0157] Based on the additional information transmitted from the fingerprint acquisition device P32, the first server S31 converts the acquired non-contact fingerprint data into first contact fingerprint data that can be compared (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB31. Also, based on the additional information transmitted from the fingerprint acquisition device P32, the first server S31 converts it into second contact fingerprint data that can be compared (biometric authentication) with the contact fingerprint data registered in the blacklist fingerprint database DB32.

[0158] Note that the first contact fingerprint data and the second contact fingerprint data may be the same contact fingerprint data or different contact fingerprint data.

[0159] In registering the fingerprint data, the first server S31 associates the converted first contact fingerprint data with user information and stores (registers) it in the contact fingerprint database DB31.

[0160] In performing biometric authentication, the first server S31 compares the acquired first contact fingerprint data with the contact fingerprint data registered in the contact fingerprint database DB31 to perform biometric authentication.

[0161] In the registration of fingerprint data, the second server S32 acquires the converted second contact fingerprint data transmitted from the first server S31, associates the acquired second contact fingerprint data with user information, and stores (registers) it in the blacklist fingerprint database DB32.

[0162] In the execution of biometric authentication, the second server S32 acquires the converted second contact fingerprint data transmitted from the first server S31, collates the acquired second contact fingerprint data with the contact fingerprint data registered in the blacklist fingerprint database DB32, and executes biometric authentication.

[0163] The contact fingerprint database DB31 is connected to the first server S31 so that data can be transmitted and received therebetween, and permits the first server S31 to store (register or write) the contact fingerprint data of at least one user (that is, the first contact fingerprint data) and to refer to (read) the contact fingerprint data at the time of biometric authentication.

[0164] The blacklist fingerprint database DB32 is connected to the second server S32 so that data can be transmitted and received therebetween, and permits the second server S32 to store (register or write) the contact fingerprint data of at least one user (that is, the second contact fingerprint data) and to refer to (read) the contact fingerprint data at the time of biometric authentication.

[0165] Next, with reference to FIG. 10, an internal configuration example of the fingerprint authentication system 300A in the fifth use case example of the third embodiment will be described. FIG. 10 is a diagram showing an internal configuration example of the fingerprint authentication system 300A in the fifth use case example of the third embodiment. Note that the configuration of the following fingerprint acquisition device P32 has substantially the same configuration as the fingerprint acquisition device P12 described in FIG. 4, and thus only different configurations will be described, and the description of the same configurations will be omitted.

[0166] The operation terminal P31 includes a communication unit 50, a processor 51, a memory 52, and a monitor 53.

[0167] The communication unit 50 is connected to be wirelessly or wiredly communicable via a network between the communication unit 20B of the fingerprint acquisition device P32 and the communication unit 60 of the first server S31, and executes data transmission and reception. The communication unit 50 transmits a control command or user information generated by the processor 51 to the fingerprint acquisition device P32. Further, the communication unit 50 outputs an alert, a registration result of fingerprint data, or a biometric authentication result transmitted from the first server S31 to the processor 51.

[0168] The processor 51 is configured by using, for example, a CPU, an FPGA, or a GPU, and performs various processes and controls in cooperation with the memory 52. Specifically, the processor 51 realizes each function by referring to the programs and data held in the memory 52 and executing the programs.

[0169] The processor 51 generates a control command that corresponds to the input operation content output from the operation unit 54 and requests the fingerprint acquisition device P32 to acquire fingerprint data. Further, the processor 51 generates user information based on the input operation content output from the operation unit 54. The processor 51 outputs the generated control command or user information to the communication unit 50 and causes it to be transmitted to the fingerprint acquisition device P32. Further, the processor 51 generates an alert or a notification screen (not shown) based on the registration result of fingerprint data or the biometric authentication result transmitted from the first server S31 and outputs it to the monitor 53.

[0170] The memory 52 includes, for example, a RAM as a work memory used when the processor 51 executes each process, and a ROM that stores programs and data defining the operation of the processor 51. Data or information generated or acquired by the processor 51 is temporarily stored in the RAM. A program defining the operation of the processor 51 is written in the ROM.

[0171] The monitor 53 is configured using, for example, an LCD or an organic EL. The monitor 53 outputs and displays a notification screen (not shown) based on the registration result or biometric authentication result of the fingerprint data generated by the processor 51.

[0172] The operation unit 54 may be provided integrally or separately from the monitor 53 and may be a touch interface configured by a touch panel, a fingerprint sensor, or the like. The operation unit 54 can receive operations on the operation terminal P31 by a person who acquires fingerprint data and outputs the input operation content to the processor 51. The operation unit 54 outputs user information based on the input operation to the processor 51.

[0173] The fingerprint acquisition device P32 includes a communication unit 20B, a processor 21, a memory 22, a camera 23, and a sensor 24. Note that the fingerprint acquisition device P32 in the fifth use case example may have a configuration including at least one of the camera 23 or the sensor 24.

[0174] The communication unit 20B is wirelessly or wiredly communicably connected via a network to the communication unit 50 of the operation terminal P31 and the communication unit 60 of the first server S31, and executes data transmission and reception. At the time of fingerprint data registration, the communication unit 20B associates the fingerprint data of the user generated by the processor 21, the additional information corresponding to the fingerprint data, and the user information of the user and transmits them to the first server S31. At the time of biometric authentication, the communication unit 20B associates the fingerprint data of the user generated by the processor 21 and the additional information corresponding to the fingerprint data and transmits them to the first server S31.

[0175] The first server S31 includes a communication unit 60, a processor 61, and a memory 62. Note that the first server S31 may be integrally configured with the contact fingerprint database DB31.

[0176] The communication unit 60 is wirelessly or wiredly communicably connected via a network to each of the operation terminal P31, the fingerprint acquisition device P32, the contact fingerprint database DB31, and the second server S32, and executes data transmission and reception.

[0177] The communication unit 60 acquires a control command, fingerprint data (contact fingerprint data or non-contact fingerprint data), additional information corresponding to the fingerprint data, user information, etc. transmitted from the fingerprint acquisition device P32, and outputs them to the processor 61. The communication unit 60 transmits the registration result or biometric authentication result of the fingerprint data transmitted from the second server S32 to the operation terminal P31.

[0178] In addition, the communication unit 60 transmits the control command output from the processor 61 and the second contact fingerprint data to the second server S32. Also, the communication unit 60 transmits the registration result or biometric authentication result of the fingerprint data output from the processor 61 and executed by the processor 61 and the processor 71 respectively to the operation terminal P31.

[0179] The processor 61 is configured using, for example, a CPU, FPGA, or GPU, and cooperates with the memory 62 to perform various processes and controls. Specifically, the processor 61 refers to the programs and data held in the memory 62 and executes those programs to realize the functions of each part. Here, the functions of each part are the functions realized by the fingerprint data conversion unit 611, the fingerprint authentication unit 612, etc. For example, the function of converting the fingerprint data of a user (specifically, non-contact fingerprint data or contact fingerprint data) into first contact fingerprint data and second contact fingerprint data respectively, the function of registering the converted first contact fingerprint data in the contact fingerprint database DB31, the function of performing biometric authentication using the converted first contact fingerprint data, etc.

[0180] The fingerprint data conversion unit 611 converts the fingerprint data (contact fingerprint data or non-contact fingerprint data) transmitted from the fingerprint acquisition device P32 into first contact fingerprint data and second contact fingerprint data respectively based on the additional information. The fingerprint data conversion unit 611 outputs the converted first contact fingerprint data to the fingerprint authentication unit 612, outputs the converted second contact fingerprint data to the communication unit 60, and causes it to be transmitted to the second server S32.

[0181] In the registration of fingerprint data, the fingerprint data conversion unit 611 associates the converted first contact fingerprint data with user information and stores (registers) it in the contact fingerprint database DB31. The fingerprint data conversion unit 611 generates a registration result indicating successful registration and transmits it to the operation terminal P31. When the fingerprint data conversion unit 611 obtains finger information corresponding to the fingerprint data from the fingerprint acquisition device P32, it associates the converted first contact fingerprint data with the finger information and stores (registers) it in the contact fingerprint database DB31 for each user.

[0182] If the fingerprint data conversion unit 611 determines that contact fingerprint data associated with the same user information has already been registered in the contact fingerprint database DB31, it omits the registration process for the converted first contact fingerprint data and generates a registration result indicating registration failure, which is then transmitted to the operation terminal P31.

[0183] Also, when there is already registered contact fingerprint data in the contact fingerprint database DB31, the fingerprint data conversion unit 611 may overwrite and register the converted first contact fingerprint data in the registered contact fingerprint data. Furthermore, based on the finger information, the fingerprint data conversion unit 611 executes overwriting registration when the registered contact fingerprint data is contact fingerprint data associated with the same finger information, and may additionally register the converted first contact fingerprint data when the registered contact fingerprint data is contact fingerprint data associated with different finger information.

[0184] The fingerprint authentication unit 612 performs biometric authentication by comparing the converted first contact fingerprint data output from the fingerprint data conversion unit 611 with each of the contact fingerprint data registered in the contact fingerprint database DB31. When the fingerprint authentication unit 612 determines that contact fingerprint data identical or similar to the converted first contact fingerprint data is registered in the contact fingerprint database DB31, it generates a biometric authentication result indicating that the biometric authentication has succeeded. When it determines that contact fingerprint data identical or similar to the converted first contact fingerprint data is not registered in the contact fingerprint database DB31, it generates a biometric authentication result indicating that the biometric authentication has failed and transmits it to the operation terminal P31.

[0185] The memory 62 includes, for example, a RAM as a work memory used when executing each process of the processor 61, and a ROM that stores programs and data defining the operation of the processor 61. Data or information generated or acquired by the processor 61 is temporarily stored in the RAM. A program defining the operation of the processor 61 is written in the ROM.

[0186] The contact fingerprint database DB31 is a so-called storage, which is configured using a storage medium such as a flash memory, HDD, or SSD. The contact fingerprint database DB31 stores (registers) and manages the first contact fingerprint data and user information transmitted from the first server S31 for each user. Note that the contact fingerprint database DB31 may be integrally configured with the first server S31.

[0187] The second server S32 includes a communication unit 70, a processor 71, and a memory 72. Note that the second server S32 may be integrally configured with the blacklist fingerprint database DB32.

[0188] The communication unit 70 is wirelessly or wiredly communicably connected via a network between the first server S31 and the blacklist fingerprint database DB32, and executes data transmission and reception.

[0189] The communication unit 70 acquires the control command, fingerprint data (contact fingerprint data or non-contact fingerprint data), or user information transmitted from the first server S31 and outputs it to the processor 71. Further, the communication unit 70 transmits the registration result or biometric authentication result of the fingerprint data output from the processor 71 to the operation terminal P31.

[0190] The processor 71 is configured using, for example, a CPU, FPGA, or GPU, and performs various processes and controls in cooperation with the memory 72. Specifically, the processor 71 refers to the programs and data held in the memory 72 and realizes the functions of each part by executing those programs. Here, the functions of each part are the functions realized by the fingerprint authentication unit 711, fingerprint registration unit 712, etc. For example, the function of performing biometric authentication using the second contact fingerprint data, the function of registering the second contact fingerprint data in the blacklist fingerprint database DB32, etc.

[0191] In the registration of fingerprint data, the processor 71 associates the converted second contact fingerprint data with the user information and stores (registers) it in the blacklist fingerprint database DB32. The processor 71 generates a registration result indicating successful registration and transmits it to the first server S31. When the processor 71 acquires the finger information corresponding to the second contact fingerprint data from the first server S31, it associates the converted second contact fingerprint data with the finger information and stores (registers) it in the blacklist fingerprint database DB32 for each user.

[0192] When the processor 71 determines that contact fingerprint data associated with the same user information has already been registered in the blacklist fingerprint database DB32, it omits the registration process of the converted second contact fingerprint data and generates a registration result indicating registration failure and transmits it to the first server S31.

[0193] In addition, when there is registered contact fingerprint data in the blacklist fingerprint database DB32, the processor 71 may overwrite and register the second contact fingerprint data after conversion with the registered contact fingerprint data. Further, when the registered contact fingerprint data is contact fingerprint data associated with the same finger information based on the finger information, the fingerprint registration unit 712 executes overwriting registration, and when the registered contact fingerprint data is contact fingerprint data associated with different finger information, the fingerprint registration unit 712 may additionally register the second contact fingerprint data after conversion.

[0194] The fingerprint authentication unit 711 collates the second contact fingerprint data after conversion transmitted from the first server S31 with each of the contact fingerprint data registered in the blacklist fingerprint database DB32 to perform biometric authentication. The fingerprint authentication unit 711 generates a biometric authentication result and transmits it to the first server S31.

[0195] The fingerprint authentication unit 711 collates (biometric authenticates) the second contact fingerprint data after conversion with each of the contact fingerprint data registered in the blacklist fingerprint database DB32 to detect a person registered in the blacklist.

[0196] When the fingerprint authentication unit 711 determines that contact fingerprint data identical or similar to the second contact fingerprint data after conversion is registered in the blacklist fingerprint database DB32, the fingerprint authentication unit 711 generates an alert indicating that a person registered in the blacklist fingerprint database DB32 has been detected and transmits it to the first server S31. When the fingerprint authentication unit 711 determines, based on the biometric authentication result, that contact fingerprint data identical or similar to the second contact fingerprint data after conversion is not registered in the blacklist fingerprint database DB32, the fingerprint authentication unit 711 generates a biometric authentication result indicating that biometric authentication has failed (that is, a person registered in the blacklist fingerprint database DB32 has not been detected) and transmits it to the first server S31.

[0197] When registering fingerprint data, the fingerprint registration unit 712 associates the converted second contact fingerprint data with user information and stores (registers) it in the blacklist fingerprint database DB32. The fingerprint registration unit 712 generates a registration result indicating successful registration and sends it to the first server S31. When the fingerprint registration unit 712 obtains finger information corresponding to the fingerprint data from the first server S31, it associates the converted second contact fingerprint data with the finger information and stores (registers) it in the blacklist fingerprint database DB32 for each user.

[0198] When the fingerprint registration unit 712 determines that contact fingerprint data associated with the same user information has already been registered in the blacklist fingerprint database DB32, it omits the registration process for the converted second contact fingerprint data, generates a registration result indicating registration failure, and sends it to the first server S31.

[0199] Also, when there is already registered contact fingerprint data in the blacklist fingerprint database DB32, the fingerprint registration unit 712 may overwrite and register the converted second contact fingerprint data in the already registered contact fingerprint data. Further, based on the finger information, the fingerprint registration unit 712 executes overwriting registration when the already registered contact fingerprint data is contact fingerprint data associated with the same finger information, and may additionally register the converted second contact fingerprint data when the already registered contact fingerprint data is contact fingerprint data associated with different finger information.

[0200] The memory 72 includes, for example, a RAM as a work memory used when executing each process of the processor 71, and a ROM that stores a program and data defining the operation of the processor 71. Data or information generated or obtained by the processor 71 is temporarily stored in the RAM. A program defining the operation of the processor 71 is written in the ROM.

[0201] The blacklist fingerprint database DB32 is a so-called storage, which is configured using a storage medium such as a flash memory, HDD, or SSD. The blacklist fingerprint database DB32 stores (registers) and manages the contact fingerprint data (second contact fingerprint data) and user information transmitted from the first server S31 for each user. Note that the blacklist fingerprint database DB32 may be integrally configured with the second server S32.

[0202] Next, with reference to FIG. 11, an example of the operation procedure of the fingerprint authentication system 300A according to the fifth use case example will be described. FIG. 11 is a sequence diagram showing an example of the operation procedure of the fingerprint authentication system 300A according to the fifth use case example of the third embodiment.

[0203] Note that, in the example of the operation procedure of the fingerprint authentication system 300A shown in FIG. 11, an example in which the registration or biometric authentication of fingerprint data executed by the first server S31 is not essential will be described, but the present invention is not limited thereto. Further, in the description of FIG. 11, an example in which the conversion process of fingerprint data is unnecessary is omitted. When the conversion process of fingerprint data is unnecessary, the first server S31 or the second server S32 uses the unconverted fingerprint data (contact fingerprint data or non-contact fingerprint data) to register the contact fingerprint data of the user or execute biometric authentication using the contact fingerprint data.

[0204] The operation terminal P31 generates a control command including a request to cause the fingerprint acquisition device P32 to acquire fingerprint data and a request to execute either fingerprint data registration or biometric authentication based on an input operation by a person who acquires the fingerprint data. The operation terminal P31 transmits the generated control command to the fingerprint acquisition device P32 (St311). Note that when requesting fingerprint data registration, the operation terminal P31 accepts input of user information and transmits the input user information associated with the control command.

[0205] The fingerprint acquisition device P32 acquires the fingerprint data (non-contact fingerprint data or contact fingerprint data) of the user by a predetermined acquisition method based on the control command transmitted from the operation terminal P31 (St312). The fingerprint acquisition device P32 generates a control command that requests either registration of the acquired fingerprint data of the user or biometric authentication, associates the generated control command, the fingerprint data, and the additional information, and transmits them to the first server S31 (St313). When requesting registration of fingerprint data, the fingerprint acquisition device P32 further associates and transmits (transfers) the user information acquired from the operation terminal P31.

[0206] The first server S31 acquires the fingerprint data and the additional information transmitted from the fingerprint acquisition device P32 (St314). The first server S31 determines whether it is necessary to convert the fingerprint data based on the additional information (St315).

[0207] In the process of step St315, when the first server S31 determines that it is necessary to convert the fingerprint data (St315, YES), the acquired fingerprint data is converted into first contact fingerprint data that can be compared (biometrically authenticated) with the fingerprint data registered in the contact fingerprint database DB31 and second contact fingerprint data that can be compared (biometrically authenticated) with the fingerprint data registered in the blacklist fingerprint database DB32 (St316). When the first server S31 determines that conversion to the fingerprint data corresponding to either the contact fingerprint database DB31 or the blacklist fingerprint database DB32 is unnecessary, it may execute only the conversion process to either one of the contact fingerprint data (that is, the first contact fingerprint data or the second contact fingerprint data) for which it is determined that fingerprint data conversion is necessary.

[0208] On the other hand, in the process of step St315, when the first server S31 determines that it is not necessary to convert the fingerprint data (St315, NO), the fingerprint data conversion process is omitted.

[0209] The first server S31 associates the converted second contact fingerprint data with a control command requesting either registration or authentication of the user's fingerprint data, and transmits it to the second server S32 (St317).

[0210] The second server S32 acquires the second contact fingerprint data transmitted from the first server S31 (St318). The second server S32 executes a registration process of registering the second contact fingerprint data and user information in the blacklist fingerprint database DB32, or a biometric authentication process of comparing at least one fingerprint data registered in the blacklist fingerprint database DB32 with the second contact fingerprint data, based on the control command (St319). The second server S32 generates a registration result or an authentication result of the acquired second contact fingerprint data, and transmits it to the first server S31 (St320).

[0211] The first server S31 transmits the registration result or the authentication result of the second contact fingerprint data transmitted from the second server S32 to the operation terminal P31 which is the transmission (acquisition) source of the fingerprint data (St322).

[0212] Also, the first server S31 executes a registration process of registering the first contact fingerprint data and user information in the contact fingerprint database DB31, or a biometric authentication process of comparing at least one fingerprint data registered in the contact fingerprint database DB31 with the first contact fingerprint data (St323).

[0213] The first server S31 generates a registration result or a biometric authentication result of the first contact fingerprint data, and transmits it to the operation terminal P31 (St324).

[0214] In addition, in the process of step St321, if the authentication result of the acquired second contact fingerprint data indicates that there is fingerprint data to be compared with the second contact fingerprint data in the blacklist fingerprint database DB32 (that is, the user is a person registered in the blacklist), the first server S31 may omit the respective processes of steps St323 to St324.

[0215] The operation terminal P31 monitors the registration result or biometric authentication result of the second contact fingerprint data corresponding to the blacklist fingerprint database DB32 transmitted from the first server S31, and outputs it to a speaker (not shown), an external device (not shown), etc. (St325). Further, the operation terminal P31 monitors the registration result or biometric authentication result of the first contact fingerprint data corresponding to the contact fingerprint database DB31 transmitted from the first server S31, and outputs it to a speaker (not shown), an external device (not shown), etc. (St325).

[0216] As described above, the first server S31 in the third embodiment can suppress a decrease in the authentication accuracy of biometric authentication executed by each of the first server S31 and the second server S32 by converting the fingerprint data acquired by the fingerprint acquisition device P32 into contact fingerprint data that can be compared with the fingerprint data registered in each of the contact fingerprint database DB31 and the blacklist fingerprint database DB32 managed by different stores, facilities, or companies.

[0217] Further, thereby, the first server S31 in the third embodiment enables a plurality of different biometric authentications to be executed with one piece of fingerprint data acquired by the fingerprint acquisition device P32. For example, when an inspector at an airport acquires fingerprint data of an incoming passenger (user), the first server S31 can realize registration of the acquired fingerprint data in the contact fingerprint database managed by the airport and biometric authentication (detection of a blacklist registrant) by comparison with the blacklist fingerprint database managed by the police of the destination country by converting the acquired fingerprint data. Also, for example, the first server S31 can realize biometric authentication (identity authentication) by comparison with the contact fingerprint database managed by the airport and biometric authentication (detection of a blacklist registrant) by comparison with the blacklist fingerprint database managed by the police of the destination country by converting the acquired fingerprint data.

[0218] <Sixth Use Case Example> Referring to FIG. 12, a sixth use case example corresponding to the fingerprint authentication system 300B according to Embodiment 3 will be described. FIG. 12 is a diagram showing a sixth use case example of the fingerprint authentication system 300B according to Embodiment 3. In the description of the sixth use case example, the same components as those in the fifth use case example are denoted by the same reference numerals and the description thereof is omitted.

[0219] The fingerprint authentication system 300B includes an operation terminal P31A, a fingerprint acquisition device P32A, a first server S31A, a second server S32A, a contact fingerprint database DB31, and a blacklist fingerprint database DB32. Note that the number of each of the operation terminal P31A and the fingerprint acquisition device P32A may be plural.

[0220] In the sixth use case example, the fingerprint authentication system 300B acquires the fingerprint data (contact fingerprint data or non-contact fingerprint data) of the user by the fingerprint acquisition device P32A. The fingerprint authentication system 300B converts the fingerprint data acquired by the fingerprint acquisition device P32A into first contact fingerprint data and second contact fingerprint data respectively by the first server S31A, and performs registration or biometric authentication of the first contact fingerprint data.

[0221] Further, the fingerprint authentication system 300B transmits the second contact fingerprint data from the first server S31A to the second server S32A via the operation terminal P31A, and the second server S32A performs registration or biometric authentication of the second contact fingerprint data.

[0222] The fingerprint acquisition device P32A in the sixth use case example is a dedicated device for acquiring fingerprint data used for biometric authentication, and is installed in a store, company, facility, etc. that uses biometric authentication. The fingerprint acquisition device P32A acquires fingerprint data, associates the acquired fingerprint data with additional information corresponding to the fingerprint acquisition device P32A, and transmits the result to the first server S31A.

[0223] In the sixth use case example, the first server S31A converts the acquired fingerprint data into first contact fingerprint data that can be compared (biometric authentication) with the contact fingerprint data registered in the contact fingerprint database DB31 and second contact fingerprint data that can be compared (biometric authentication) with the contact fingerprint data registered in the blacklist fingerprint database DB32 based on the additional information transmitted from the fingerprint acquisition device P32A. The first server S31A performs registration or biometric authentication of the converted first contact fingerprint data.

[0224] In the sixth use case example, the operation terminal P31A acquires the second contact fingerprint data transmitted from the first server S31A and the registration result or biometric authentication result of the first contact fingerprint data executed by the first server S31A. The operation terminal P31A outputs and notifies the registration result or biometric authentication result of the first contact fingerprint data, and transmits (transfers) the second contact fingerprint data transmitted from the first server S31A to the second server S32A. Further, the operation terminal P31A acquires the registration result or biometric authentication result of the second contact fingerprint data transmitted from the second server S32A, and outputs and notifies the registration result or biometric authentication result.

[0225] In the sixth use case example, the second server S32A performs registration or biometric authentication of the second contact fingerprint data transmitted from the operation terminal P31A. The second server S32A generates a registration result or biometric authentication result of the second contact fingerprint data and transmits it to the operation terminal P31A.

[0226] Next, with reference to FIG. 13, an internal configuration example of the fingerprint authentication system 300B in the sixth use case example of Embodiment 3 will be described. FIG. 13 is a diagram showing an internal configuration example of the fingerprint authentication system 300B in the sixth use case example of Embodiment 3. In the following description of the sixth use case example, the same components as those in the fifth use case example are given the same reference numerals and the description thereof is omitted.

[0227] The operation terminal P31A includes a communication unit 50A, a processor 51A, a memory 52, and a monitor 53.

[0228] The communication unit 50A is connected to be wirelessly or wiredly communicable via a network between the communication unit 20C of the fingerprint acquisition device P32A, the communication unit 60A of the first server S31A, and the communication unit 70A of the second server S32A, and executes data transmission and reception.

[0229] The communication unit 50A transmits the control command and user information generated by the processor 51A to the fingerprint acquisition device P32A. The communication unit 50A outputs the registration result or biometric authentication result of the fingerprint data (first contact fingerprint data), the control command, the user information, the second contact fingerprint data, etc. transmitted from the first server S31A to the processor 51A. The communication unit 50A outputs the registration result or biometric authentication result of the fingerprint data (second contact fingerprint data) transmitted from the second server S32A to the processor 51A.

[0230] The processor 51A is configured by using, for example, a CPU, an FPGA, or a GPU, and performs various processes and controls in cooperation with the memory 52. Specifically, the processor 51A refers to the programs and data held in the memory 52 and realizes each function by executing the programs.

[0231] The processor 51A generates a control command corresponding to the input operation content output from the operation unit 54 and requesting the fingerprint acquisition device P32A to acquire fingerprint data and register or authenticate the fingerprint data. Also, the processor 51A generates user information based on the input operation content output from the operation unit 54. The processor 51A outputs the generated control command or user information to the communication unit 50A and causes it to be transmitted to the fingerprint acquisition device P32A. Further, the processor 51A generates an alert or a notification screen (not shown) based on the registration result or biometric authentication result of the fingerprint data transmitted from the first server S31A or the second server S32A and outputs it to the monitor 53.

[0232] The fingerprint acquisition device P32A includes a communication unit 20C, a processor 21, a memory 22, a camera 23, and a sensor 24. Note that the fingerprint acquisition device P32A in the sixth use case example only needs to be configured to include at least one of the camera 23 or the sensor 24.

[0233] The communication unit 20C is wirelessly or wiredly communicably connected via a network to the communication unit 50A of the operation terminal P31A and the communication unit 60A of the first server S31A, and executes data transmission and reception. When registering fingerprint data, the communication unit 20C transmits a control command for requesting registration or biometric authentication of the fingerprint data transmitted from the operation terminal P31A, the user's fingerprint data generated by the processor 21, user information, and additional information to the first server S31A in association with each other. When performing biometric authentication, the communication unit 20C transmits a control command for requesting registration or biometric authentication of the fingerprint data transmitted from the operation terminal P31A, the user's fingerprint data generated by the processor 21, and additional information to the first server S31A.

[0234] The first server S31A includes a communication unit 60A, a processor 61, and a memory 62. Note that the first server S31A may be integrally configured with the contact fingerprint database DB31.

[0235] The communication unit 60A is wirelessly or wiredly communicably connected via a network to each of the operation terminal P31A, the fingerprint acquisition device P32A, and the contact fingerprint database DB31, and executes data transmission and reception.

[0236] The communication unit 60A acquires a control command, fingerprint data (contact fingerprint data or non-contact fingerprint data), user information, or additional information transmitted from the fingerprint acquisition device P32A and outputs it to the processor 61. The communication unit 60A transmits the second contact fingerprint data output from the processor 61, the registration result or biometric authentication result of the first contact fingerprint data executed by the processor 61 to the operation terminal P31A.

[0237] The second server S32A includes a communication unit 70A, a processor 71, and a memory 72. Note that the second server S32A may be integrally configured with the blacklist fingerprint database DB32.

[0238] The communication unit 70A is connected to be wirelessly or wiredly communicable via a network with the operation terminal P31A, and executes data transmission and reception.

[0239] The communication unit 70A acquires a control command, second contact fingerprint data (contact fingerprint data or non-contact fingerprint data), or user information from the operation terminal P31A and outputs it to the processor 71. Further, the communication unit 70A transmits the registration result or biometric authentication result of the second contact fingerprint data output from the processor 71 to the operation terminal P31A.

[0240] Next, with reference to FIG. 14, an example of the operation procedure of the fingerprint authentication system 300B according to the sixth use case example will be described. FIG. 14 is a sequence diagram showing an example of the operation procedure of the fingerprint authentication system 300B according to the sixth use case example of Embodiment 3.

[0241] In the example of the operation procedure of the fingerprint authentication system 300B shown in FIG. 14, an example in which the registration or biometric authentication of fingerprint data executed by the first server S31A is not essential will be described, but it is not limited thereto. Also, in the description of FIG. 14, an example in which the conversion process of fingerprint data is unnecessary is omitted. When the conversion process of fingerprint data is unnecessary, the first server S31A or the second server S32A uses the unconverted fingerprint data (contact fingerprint data or non-contact fingerprint data) to register the user's contact fingerprint data or execute biometric authentication using the contact fingerprint data.

[0242] Also, in the example of the operation procedure of the fingerprint authentication system 300B shown in FIG. 14, the same processes as those in the example of the operation procedure of the fingerprint authentication system 300A are given the same reference numerals and their description is omitted.

[0243] The first server S31A associates the converted second contact fingerprint data with a control command requesting either registration of the user's fingerprint data or biometric authentication, and transmits the result to the operation terminal P31A (St317A).

[0244] Based on an input operation by the person who acquires the fingerprint data, the operation terminal P31A associates the control command requesting registration of or biometric authentication for the second contact fingerprint data transmitted from the first server S31A with the second contact fingerprint data, and transmits the result to the second server S32 (St317B). When the control command requests registration of the second contact fingerprint data, the operation terminal P31A further associates the user information of the user and transmits the result to the second server S32A.

[0245] The second server S32A acquires the control command and the second contact fingerprint data transmitted from the operation terminal P31A (St318A). Based on the control command, the second server S32A executes a registration process of registering the second contact fingerprint data and the user information in the blacklist fingerprint database DB32, or a biometric authentication process of comparing at least one fingerprint data registered in the blacklist fingerprint database DB32 with the second contact fingerprint data (St319). The second server S32A generates a registration result or a biometric authentication result of the acquired second contact fingerprint data, and transmits the result to the operation terminal P31A (St320A).

[0246] As described above, the first server S31A in the third embodiment can suppress a decrease in the authentication accuracy of biometric authentication executed by each of the first server S31A and the second server S32A by converting the fingerprint data acquired by the fingerprint acquisition device P32A into contact fingerprint data that can be compared with the fingerprint data registered in each of the contact fingerprint database DB31 and the blacklist fingerprint database DB32, which are managed by different stores, facilities, or companies.

[0247] In addition, thereby, even when the administrator (such as a store, company, or facility) who manages the contact fingerprint database DB31 and the first server S31A is different from the administrator (such as a store, company, or facility) who manages the blacklist fingerprint database DB32 and the second server S32A, and direct transmission and reception of fingerprint data and the like between the first server S31A and the second server S32A are not possible, the first server S31A can realize registration of two or more pieces of fingerprint data or biometric authentication by acquiring fingerprint data once.

[0248] <Seventh Use Case Example> Referring to FIG. 15, a seventh use case example corresponding to the fingerprint authentication system 300C according to Embodiment 3 will be described. FIG. 15 is a diagram showing a seventh use case example of the fingerprint authentication system 300C according to Embodiment 3. In the description of the seventh use case example, the same components as those in the sixth use case example are denoted by the same reference numerals, and the description thereof is omitted.

[0249] The fingerprint authentication system 300C includes an operation terminal P31B, a fingerprint acquisition device P32A, a first server S31A, a second server S32B, and a blacklist fingerprint database DB32.

[0250] The fingerprint authentication system 300C in the seventh use case example acquires the user's fingerprint data (contact fingerprint data or non-contact fingerprint data) by the fingerprint acquisition device P32A, and performs biometric authentication based on the fingerprint data stored in the blacklist fingerprint database DB32 and the fingerprint data acquired by the fingerprint acquisition device P32A.

[0251] The fingerprint acquisition device P32A in the seventh use case example is installed, for example, at an airport, a port, a station, or in a train where biometric authentication is used. The fingerprint acquisition device P32A acquires fingerprint data, associates the acquired fingerprint data with additional information corresponding to the fingerprint acquisition device P32A, and transmits the result to the first server S31B.

[0252] In the seventh use case example, the first server S31B executes conversion processing of fingerprint data based on a control command transmitted from the operation terminal P31B. The first server S31B converts the acquired fingerprint data into second contact fingerprint data that can be collated (biometric authentication) with the contact fingerprint data registered in each blacklist fingerprint database DB32A to DB32N managed by a store, a facility, or a company based on the additional information transmitted from the fingerprint acquisition device P32A, and transmits the converted non-contact fingerprint data together with the non-contact fingerprint data before conversion to the operation terminal P31B.

[0253] In the seventh use case example, the operation terminal P31B acquires the second contact fingerprint data and the non-contact fingerprint data transmitted from the first server S31B and transmits (transfers) them to the second server S32B. Further, the operation terminal P31B acquires the registration result or the biometric authentication result of each fingerprint data transmitted from the second server S32B, and outputs and notifies the registration result or the biometric authentication result.

[0254] In the seventh use case example, the second server S32B executes registration of the second contact fingerprint data or the non-contact fingerprint data transmitted from the operation terminal P31B. Further, the second server S32B collates the second contact fingerprint data or the non-contact fingerprint data with the fingerprint data stored in each of the blacklist fingerprint databases DB32A to DB32N, and determines whether the user is a person registered in any of the blacklist fingerprint databases DB32A to DB32N. The second server S32B generates a registration result or a biometric authentication result of each fingerprint data and transmits it to the operation terminal P31B.

[0255] Next, with reference to FIG. 16, an internal configuration example of the fingerprint authentication system 300C in the seventh use case example of Embodiment 3 will be described. FIG. 16 is a diagram showing an internal configuration example of the fingerprint authentication system 300C in the seventh use case example of Embodiment 3. In the following description of the seventh use case example, the same components as those in the sixth use case example are given the same reference numerals and the description thereof is omitted.

[0256] The operation terminal P31B includes a communication unit 50B, a processor 51A, a memory 52, and a monitor 53.

[0257] The communication unit 50A is wirelessly or wiredly communicably connected via a network between the communication unit 60B of the first server S31B and the communication unit 70B of the second server S32B, and executes data transmission and reception.

[0258] The communication unit 50A transmits a control command generated by the processor 51A to the first server S31B. The communication unit 50A outputs fingerprint data transmitted from the first server S31B to the processor 51A. The communication unit 50A outputs a registration result or a biometric authentication result of fingerprint data transmitted from the second server S32B to the processor 51A.

[0259] The fingerprint acquisition device P32A includes a communication unit 20D, a processor 21, a memory 22, a camera 23, and a sensor 24. Note that the fingerprint acquisition device P32A in the seventh use case example may have a configuration including at least one of the camera 23 or the sensor 24.

[0260] The communication unit 20C is wirelessly or wiredly communicably connected via a network to the communication unit 60B of the first server S31B, and executes data transmission and reception. The communication unit 20C transmits the fingerprint data of the user generated by the processor 21 and the additional information to the first server S31B in association with each other.

[0261] The first server S31B includes a communication unit 60B, a processor 61A, and a memory 62.

[0262] The communication unit 60B is connected to be capable of wireless or wired communication via a network with the operation terminal P31B and the fingerprint acquisition device P32A, and executes data transmission and reception. The communication unit 60B acquires a control command transmitted from the operation terminal P31B, fingerprint data (contact fingerprint data or non-contact fingerprint data), user information, or additional information transmitted from the fingerprint acquisition device P32A, and outputs the same to the processor 61A. The communication unit 60B transmits the second contact fingerprint data or non-contact data output from the processor 61A to the operation terminal P31B.

[0263] The processor 61A includes a fingerprint data conversion unit 611. The fingerprint data conversion unit 611 converts the fingerprint data transmitted from the fingerprint acquisition device P32A into second contact fingerprint data.

[0264] The second server S32B includes a communication unit 70B, a processor 71A, and a memory 72. Note that the second server S32B may be integrally configured with the blacklist fingerprint database DB32.

[0265] The communication unit 70B is connected to be capable of wireless or wired communication via a network with the operation terminal P31B and the blacklist fingerprint database DB32, and executes data transmission and reception. The communication unit 70B acquires a control command or fingerprint data or the like from the operation terminal P31B, and outputs the same to the processor 71. Further, the communication unit 70B transmits the registration result or biometric authentication result of the fingerprint data output from the processor 71A to the operation terminal P31B.

[0266] Next, with reference to FIG. 17, an example of the operation procedure of the fingerprint authentication system 300C according to the seventh use case example will be described. FIG. 17 is a sequence diagram showing an example of the operation procedure of the fingerprint authentication system 300C according to the seventh use case example of Embodiment 3.

[0267] In the description of FIG. 14, an example in which the conversion process of fingerprint data is unnecessary is omitted. Also, in the example of the operation procedure of the fingerprint authentication system 300C shown in FIG. 14, for the same processes as those in the example of the operation procedure of the fingerprint authentication system 300B, the same reference numerals are given and the description thereof is omitted.

[0268] The operation terminal P31B generates a control command for requesting acquisition of the user's fingerprint data and transmits it to the first server S31B (St311A).

[0269] The first server S31B generates and transmits a control command for requesting fingerprint data to the fingerprint acquisition device P32A (St311B).

[0270] As described above, the fingerprint authentication system 300C in Embodiment 3 can suppress a decrease in authentication accuracy with the fingerprint data registered in each database by converting the fingerprint data acquired by the fingerprint acquisition device P32A into contact fingerprint data that can be compared with the fingerprint data registered in each of the blacklist fingerprint databases DB32A to DB32N managed by the location, facility, company, etc. where the fingerprint acquisition device P32A is installed.

[0271] (Embodiment 4) The fingerprint authentication systems 300A to 300B according to Embodiment 3 show an example in which the fingerprint data (contact fingerprint data or non-contact fingerprint data) acquired by a predetermined fingerprint acquisition device P32 is converted into first contact fingerprint data and second contact fingerprint data used for biometric authentication executed by each of the first servers S31 and S31A and the second servers S32 and S32A. An example in which the fingerprint authentication system 400 according to Embodiment 4 converts the fingerprint data (contact fingerprint data or non-contact fingerprint data) acquired by an arbitrary device into fingerprint data that can be registered or authenticated in an arbitrary database or an arbitrary server will be described.

[0272] In the description of the fingerprint authentication system 400 according to Embodiment 4 below, the same components as those included in the fingerprint authentication systems 100A to 100C, 200, and 300A to 300B according to Embodiments 1 to 3 are given the same reference numerals and the description thereof is omitted.

[0273] <Eighth Use Case Example> With reference to FIG. 18, an eighth use case example corresponding to the fingerprint authentication system 400 according to Embodiment 4 will be described. FIG. 18 is a diagram showing an eighth use case example of the fingerprint authentication system 400 according to Embodiment 4. In FIG. 18, an example is shown in which the first server S41 is communicably connected to one second server S42. However, the first server S41 may be communicably connected to a plurality of servers. Further, the first server S41 may not directly perform fingerprint registration or authentication. For example, it may be a data relay device that transfers fingerprint data to at least one computer capable of executing fingerprint registration or authentication.

[0274] The fingerprint authentication system 400 according to Embodiment 4 includes a terminal device P11, a fingerprint acquisition device P12, a contact sensor P13, a first server S41, each of a plurality of first fingerprint databases DB411 to DB41N, and a second server S42.

[0275] The fingerprint authentication system 400 transmits fingerprint data (contact fingerprint data or non-contact fingerprint data) acquired by the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 to the first server S41. The fingerprint authentication system 400 converts, by the first server S41, the acquired fingerprint data into fingerprint data (contact fingerprint data or non-contact fingerprint data) that can be registered in the first fingerprint database DB411 to the Nth fingerprint database DB41N or the fingerprint database DB421 for the second server, or converts it into fingerprint data (contact fingerprint data or non-contact fingerprint data) that can be compared with the fingerprint data registered in the first fingerprint database DB411 to the Nth fingerprint database DB41N or the fingerprint database DB421 for the second server. The fingerprint authentication system 400 stores, by the first server S41, the converted fingerprint data in each of the first fingerprint database DB411 to the Nth fingerprint database DB41N and transmits it to the second server S42.

[0276] Also, in the second server S42, the fingerprint authentication system 400 registers the fingerprint data transmitted from the first server S41 in the fingerprint database DB421 for the second server, or compares (biometric authentication) the fingerprint data registered in the fingerprint database DB421 for the second server with the fingerprint data transmitted from the first server S41.

[0277] The terminal device P11 in the eighth use case example is substantially the same as the terminal device P11 shown in the first to third use case examples, acquires the user's fingerprint data in a contact state or a non-contact state, and transmits it to the first server S41.

[0278] The fingerprint acquisition device P12 in the eighth use case example is substantially the same as the fingerprint acquisition device P12 shown in the first to third use case examples, acquires the user's fingerprint data in a contact state or a non-contact state, and transmits it to the first server S41.

[0279] In addition, the contact sensor P13 in the eighth use case example is substantially the same as the fingerprint acquisition device P12 shown in the first to third use case examples, acquires the fingerprint data of the user in the contact state, and transmits it to the first server S41. Note that the contact sensor P13 in the eighth use case example may or may not be able to acquire contact fingerprint data that does not require conversion processing of fingerprint data.

[0280] The first server S41 acquires fingerprint data (contact fingerprint data or non-contact fingerprint data) acquired by the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13. The first server S41 refers to a conversion table (for example, the first conversion table TB1 shown in FIG. 20 or the second conversion table TB2 shown in FIG. 21) including information on various conversion methods for converting the acquired fingerprint data into fingerprint data that can be registered in each database (that is, the first fingerprint database DB411 to the Nth fingerprint database DB41N and the fingerprint database DB421 for the second server) or compared with the fingerprint data registered in each database, and selects a conversion method for converting the acquired fingerprint data into fingerprint data that can be registered in each database or compared with each database.

[0281] The first server S41 converts the acquired fingerprint data based on each of the selected conversion methods, and transmits the converted fingerprint data to each of the databases and the second server S42.

[0282] Each of the first fingerprint database DB411 to the Nth fingerprint database DB41N is connected so as to be able to transmit and receive data to and from the first server S31. Each of the first fingerprint database DB411 to the Nth fingerprint database DB41N is used, for example, in a store, a facility, or a company, etc., and permits writing (storing or registering) of fingerprint data of at least one user by the first server S41. Each of the first fingerprint database DB411 to the Nth fingerprint database DB41N permits reference (reading) of the stored fingerprint data in biometric authentication by an external device (not shown).

[0283] The second server S42 registers the fingerprint data transmitted from the first server S41 in the fingerprint database DB421 for the second server, or collates (biometric authentication) the fingerprint data transmitted from the first server S41 with the fingerprint data registered in the fingerprint database DB421 for the second server.

[0284] The fingerprint database DB421 for the second server is connected so that data can be transmitted and received between it and the second server S42, and permits storage (registration or writing) of fingerprint data of at least one user by the second server S42 and reference (reading) of fingerprint data by the second server S42 during biometric authentication.

[0285] Next, with reference to FIG. 19, the internal configuration of the fingerprint authentication system 400 in the eighth use case example of the fourth embodiment will be described. FIG. 19 is a diagram showing an example of the internal configuration of the fingerprint authentication system 400 in the eighth use case example of the fourth embodiment.

[0286] Note that each of the terminal device P11, fingerprint acquisition device P12, and contact sensor P13 shown in FIG. 19 has the same configuration as each of the terminal device P11, fingerprint acquisition device P12, and contact sensor P13 described in FIG. 10, and thus the description thereof will be omitted.

[0287] The first server S41 includes a communication unit 80, a processor 81, and a memory 82.

[0288] The communication unit 80 is connected to be wirelessly or wiredly communicable via a network with each of the terminal device P11, fingerprint acquisition device P12, contact sensor P13, each of the first fingerprint database DB411 to the Nth fingerprint database DB41N, and the second server S42, and executes data transmission and reception.

[0289] The communication unit 80 acquires fingerprint data (contact fingerprint data or non-contact fingerprint data) from each of the terminal device P11, the fingerprint acquisition device P12, and the contact sensor P13, and outputs the acquired fingerprint data to the processor 81.

[0290] The processor 81 is configured using, for example, a CPU, an FPGA, or a GPU, and performs various processes and controls in cooperation with the memory 82. Specifically, the processor 81 refers to the programs and data held in the memory 82, and realizes the functions of each part by executing the programs. Here, the functions of each part are functions realized by the fingerprint data conversion unit 811, etc. For example, the function of converting the fingerprint data of the user (specifically, non-contact fingerprint data or contact fingerprint data) into fingerprint data corresponding to each database, the function of registering the converted fingerprint data in each database, etc.

[0291] The fingerprint data conversion unit 811 determines whether it is necessary to convert the fingerprint data based on the additional information transmitted from the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13. When the fingerprint data conversion unit 811 determines that it is necessary to convert the fingerprint data, based on the conversion table recorded in the memory 82 and the additional information, it selects the conversion method of the fingerprint data corresponding to each database for which fingerprint data conversion is required when registering the fingerprint data.

[0292] The fingerprint data conversion unit 811 converts the fingerprint data (contact fingerprint data or non-contact fingerprint data) into fingerprint data corresponding to each database based on the selected conversion method. The fingerprint data conversion unit 811 associates the converted fingerprint data or the unconverted fingerprint data, the user information, and the device information that is the acquisition source of the fingerprint data, and outputs them to the communication unit 80, causing them to be transmitted to each database and the second server S42 respectively.

[0293] The memory 82 includes, for example, a RAM as a work memory used when each process of the processor 81 is executed, and a ROM that stores a program and data defining the operation of the processor 81. In the RAM, data or information generated or acquired by the processor 81 is temporarily stored. A program defining the operation of the processor 81 is written in the ROM. Also, the memory 82 records a conversion table.

[0294] Each of the first fingerprint database DB411 to the Nth fingerprint database DB41N is a so-called storage, and is configured using a storage medium such as a flash memory, an HDD, or an SSD. Each of the first fingerprint database DB411 to the Nth fingerprint database DB41N stores (registers) and manages fingerprint data and user information transmitted from the first server S41 for each user. Note that each of the first fingerprint database DB411 to the Nth fingerprint database DB41N may further register and associate fingerprint information corresponding to the fingerprint data.

[0295] The second server S42 includes a communication unit 90, a processor 91, and a memory 92.

[0296] The communication unit 90 is wirelessly or wiredly communicably connected via a network to each of the terminal device P11, the fingerprint acquisition device P12, the contact sensor P13, and the first server S41, and executes data transmission and reception.

[0297] The communication unit 90 acquires fingerprint data, user information, device information, etc. transmitted from the first server S41 and outputs them to the processor 91. The communication unit 90 transmits the registration result or biometric authentication result of the fingerprint data output from the processor 91 to the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 corresponding to the device information associated with the fingerprint data.

[0298] The processor 91 is configured using, for example, a CPU, FPGA, or GPU, and cooperates with the memory 92 to perform various processes and controls. Specifically, the processor 91 refers to the programs and data held in the memory 92 and realizes the functions of each part by executing those programs. Here, the functions of each part are functions realized by the fingerprint registration unit 911, the fingerprint authentication unit 912, etc. For example, the function of registering fingerprint data in the second-server fingerprint database DB421, the function of collating (biometric authentication) the fingerprint data registered in the second-server fingerprint database DB421 with the fingerprint data acquired from the first server S41, etc.

[0299] The fingerprint registration unit 911 determines whether fingerprint data having the same user information as the user information associated with the converted fingerprint data transmitted from the first server S41 is already registered in the second-server fingerprint database DB421.

[0300] If the fingerprint registration unit 911 determines that it is not registered, it associates the converted fingerprint data transmitted from the first server S41 with the user information, stores (registers) it in the second-server fingerprint database DB421, and generates a registration result indicating that the registration was successful. If the fingerprint registration unit 911 determines that it is already registered, it omits storing (registering) the fingerprint data in the second-server fingerprint database DB421 and generates a registration result indicating that the registration failed. The fingerprint registration unit 911 generates a registration result, outputs it to the communication unit 90, and transmits it to the corresponding device.

[0301] The fingerprint authentication unit 912 collates the converted fingerprint data transmitted from the first server S41 with each of the fingerprint data registered in the second-server fingerprint database DB421 to perform biometric authentication. The fingerprint authentication unit 912 generates a biometric authentication result, outputs it to the communication unit 90, and transmits it to the corresponding device.

[0302] The memory 92 includes, for example, a RAM as a work memory used when executing each process of the processor 91, and a ROM that stores a program and data defining the operation of the processor 91. In the RAM, data or information generated or acquired by the processor 91 is temporarily stored. In the ROM, a program defining the operation of the processor 91 is written.

[0303] The fingerprint database DB421 for the second server is a so-called storage, which is configured using a storage medium such as a flash memory, an HDD, or an SSD. The fingerprint database DB421 for the second server stores (registers) and manages the fingerprint data and user information transmitted from the second server S42 for each user. Note that the fingerprint database DB421 for the second server may further register fingerprint information corresponding to the fingerprint data in association therewith.

[0304] Next, with reference to FIG. 20, the first conversion table TB1 will be described. FIG. 20 is a diagram for explaining an example of the first conversion table TB1. Note that the first conversion table TB1 shown in FIG. 20 is an example and is not limited thereto.

[0305] The first conversion table TB1 stores information regarding a conversion method for registering fingerprint data acquired by an arbitrary acquisition method by an arbitrary device (terminal device P11, fingerprint acquisition device P12, or contact sensor P13) in each database (first fingerprint database DB411 to Nth fingerprint database DB41N, fingerprint database DB421 for the second server) that stores fingerprint data used for biometric authentication, or converting the fingerprint data into fingerprint data that can be collated (biometrically authenticated) with the fingerprint data registered in each database.

[0306] The first conversion table TB1 is recorded in the memory 82 and referred to by the first server S41. The first conversion table TB1 shown in FIG. 20 includes, for example, "acquisition method" indicating whether the fingerprint data was acquired in a contact state or a non-contact state, "device information" of the device in which the fingerprint data was acquired or generated, and "conversion algorithm, parameters", which is the conversion method of the fingerprint data corresponding to each database.

[0307] For example, the fingerprint data conversion unit 811 of the first server S41, based on the additional information associated with the fingerprint data, when the acquisition method of the fingerprint data is "non-contact" and the device in which the fingerprint data was acquired is a "terminal device", selects the conversion method "AAA1" of the fingerprint data corresponding to the first fingerprint database DB411, the conversion method "BBB1" of the fingerprint data corresponding to the second database (not shown),..., the conversion method "CCC1" of the fingerprint data corresponding to the Nth fingerprint database DB41N, and the conversion method "DDD1" of the fingerprint data corresponding to the fingerprint database DB421 for the second server, respectively.

[0308] Also, for example, the fingerprint data conversion unit 811, based on the additional information associated with the fingerprint data, when the acquisition method of the fingerprint data is "non-contact" and the device in which the fingerprint data was acquired is a "fingerprint acquisition device", selects the conversion method "AAA2" of the fingerprint data corresponding to the first fingerprint database DB411, the conversion method "BBB2" of the fingerprint data corresponding to the second database (not shown),..., the conversion method "CCC2" of the fingerprint data corresponding to the Nth fingerprint database DB41N, and the conversion method "DDD2" of the fingerprint data corresponding to the fingerprint database DB421 for the second server, respectively.

[0309] Also, for example, based on the additional information associated with the fingerprint data, when the acquisition method of the fingerprint data is "contact" and the device on which the fingerprint data is acquired is a "terminal device", the fingerprint data conversion unit 811 selects the fingerprint data conversion method "AAA3" corresponding to the first fingerprint database DB411, the fingerprint data conversion method "BBB3" corresponding to the second database (not shown),..., the fingerprint data conversion method "CCC3" corresponding to the Nth fingerprint database DB41N, and the fingerprint data conversion method "DDD3" corresponding to the second server fingerprint database DB421, respectively.

[0310] Also, for example, based on the additional information associated with the fingerprint data, when the acquisition method of the fingerprint data is "contact" and the device on which the fingerprint data is acquired is a "contact sensor", the fingerprint data conversion unit 811 selects the fingerprint data conversion method "AAA4" corresponding to the first fingerprint database DB411, the fingerprint data conversion method "BBB4" corresponding to the second database (not shown),..., the fingerprint data conversion method "CCC4" corresponding to the Nth fingerprint database DB41N, and the fingerprint data conversion method "DDD4" corresponding to the second server fingerprint database DB421, respectively.

[0311] Thereby, the fingerprint data conversion unit 811 can convert the fingerprint data acquired by the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 into fingerprint data corresponding to each database.

[0312] For example, the fingerprint data conversion unit 811 performs conversion on the non-contact fingerprint data DT10 using the conversion methods "AAA1", "AAA2", "BBB1", and "BBB2" to convert it into contact fingerprint data DT11 corresponding to the first fingerprint database DB411 and the second fingerprint database (not shown) which are the transmission destinations of the fingerprint data. Also, for example, the fingerprint data conversion unit 811 performs conversion on the non-contact fingerprint data DT10 using the conversion methods "CCC1", "CCC2", "DDD1", and "DDD2" to convert it into non-contact fingerprint data DT12 corresponding to the first fingerprint database DB411 and the second fingerprint database (not shown) which are the transmission destinations of the fingerprint data.

[0313] Next, referring to FIG. 21, the second conversion table TB2 will be described. FIG. 21 is a diagram for explaining an example of the second conversion table TB2. Note that the second conversion table TB2 shown in FIG. 21 is an example and is not limited thereto.

[0314] The second conversion table TB2 stores information regarding a conversion method for registering fingerprint data acquired by an arbitrary acquisition method by an arbitrary device (terminal device P11, fingerprint acquisition device P12, or contact sensor P13) into each database (first fingerprint database DB411 to Nth fingerprint database DB41N, second server fingerprint database DB421) that stores fingerprint data used for biometric authentication, or for converting the fingerprint data into fingerprint data that can be collated (biometric authentication) with the fingerprint data registered in each database.

[0315] The second conversion table TB2 is recorded in the memory 82 and referred to by the first server S41. The second conversion table TB2 shown in FIG. 21 includes, for example, an "acquisition method" indicating whether the fingerprint data was acquired in a contact state or a non-contact state, "device information" of the device in which the fingerprint data was acquired or generated, and a "conversion algorithm", which is a conversion method for fingerprint data corresponding to each database.

[0316] In the example shown in FIG. 21, the Nth fingerprint database DB41N and the second server fingerprint database DB421 are each managed (used) by different stores, companies, or facilities, etc., and store fingerprint data used for the same purpose (for example, settlement or entrance / exit management, etc.). In such a case, the conversion methods of the fingerprint data of the Nth fingerprint database DB41N and the second server fingerprint database DB421 stored in the second conversion table TB2 may be the same.

[0317] For example, based on the additional information associated with the fingerprint data, when the acquisition method of the fingerprint data is "non-contact" and the device on which the fingerprint data is acquired is a "terminal device", the fingerprint data conversion method "AAA1" corresponding to the first fingerprint database DB411, the fingerprint data conversion method "BBB1" corresponding to the second database (not shown),..., the fingerprint data conversion method "CCC1" corresponding to the Nth fingerprint database DB41N, and the fingerprint data conversion method "CCC1" corresponding to the fingerprint database DB421 for the second server are respectively selected by the fingerprint data conversion unit 811 of the first server S41.

[0318] Also, for example, based on the additional information associated with the fingerprint data, when the acquisition method of the fingerprint data is "non-contact" and the device on which the fingerprint data is acquired is a "fingerprint acquisition device", the fingerprint data conversion method "AAA2" corresponding to the first fingerprint database DB411, the fingerprint data conversion method "BBB2" corresponding to the second database (not shown),..., the fingerprint data conversion method "CCC2" corresponding to the Nth fingerprint database DB41N, and the fingerprint data conversion method "CCC2" corresponding to the fingerprint database DB421 for the second server are respectively selected by the fingerprint data conversion unit 811.

[0319] Also, for example, based on the additional information associated with the fingerprint data, when the acquisition method of the fingerprint data is "contact" and the device on which the fingerprint data is acquired is a "terminal device", the fingerprint data conversion method "AAA3" corresponding to the first fingerprint database DB411, the fingerprint data conversion method "BBB3" corresponding to the second database (not shown),..., the fingerprint data conversion method "CCC3" corresponding to the Nth fingerprint database DB41N, and the fingerprint data conversion method "CCC3" corresponding to the fingerprint database DB421 for the second server are respectively selected by the fingerprint data conversion unit 811.

[0320] Also, for example, when the fingerprint data conversion unit 811 determines that the acquisition method of the fingerprint data is "contact" and the device from which the fingerprint data was acquired is a "contact sensor" based on the additional information associated with the fingerprint data, it selects the conversion method "BBB4" for the fingerprint data corresponding to the second database (not shown), …, the conversion method "CCC4" for the fingerprint data corresponding to the Nth fingerprint database DB41N, and the conversion method "CCC4" for the fingerprint data corresponding to the fingerprint database DB421 for the second server.

[0321] Thereby, the fingerprint data conversion unit 811 can convert the fingerprint data acquired by the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 into the fingerprint data corresponding to each database.

[0322] Note that the conversion method "-" in the second conversion table TB2 indicates that conversion of the fingerprint data is unnecessary. For example, fingerprint data for which the acquisition method of the fingerprint data is "contact" and the device from which the fingerprint data was acquired is a "contact sensor" corresponds to the fingerprint data corresponding to the first fingerprint database DB411 without performing conversion processing. In such a case, when determining whether conversion of the fingerprint data is necessary, the fingerprint data conversion unit 811 determines that conversion of the fingerprint data is unnecessary or omits the conversion process for the fingerprint data based on the conversion method "-" for the fingerprint data corresponding to the first fingerprint database DB411.

[0323] Next, with reference to FIG. 22, an example of the operation procedure of the fingerprint authentication system 400 according to the eighth use case example will be described. FIG. 22 is a sequence diagram showing an example of the operation procedure of the fingerprint authentication system 400 according to the eighth use case example of the fourth embodiment.

[0324] The terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 acquires fingerprint data that is contact fingerprint data or non-contact fingerprint data (St411). The terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 generates a control command that requests either fingerprint data registration or biometric authentication processing, associates the generated control command with additional information corresponding to the acquired fingerprint data and the fingerprint data, and transmits them to the first server S41 (St412).

[0325] The first server S41 refers to the conversion tables (for example, the first conversion table TB1, the second conversion table TB2, etc.) recorded in the memory 82, and selects a conversion method for converting the acquired fingerprint data into fingerprint data corresponding to each database based on the additional information transmitted from the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13. The first server S41 converts the acquired fingerprint data into fingerprint data corresponding to each database based on the selected conversion methods (St413). If there is fingerprint data that does not require conversion, the first server S41 omits the conversion process.

[0326] The first server S41 transmits the converted fingerprint data to each of the first fingerprint database DB411 to the Nth fingerprint database DB41N and stores (registers) it (St414). In addition, the first server S41 associates the converted fingerprint data with a control command that requests either fingerprint data registration or biometric authentication and transmits it to the second server S42 (St415).

[0327] The second server S42 acquires the fingerprint data transmitted from the first server S41 (St416). The second server S42 executes a registration process of registering the fingerprint data and user information in the fingerprint database DB421 for the second server based on a control command, or a biometric authentication process of collating at least one fingerprint data registered in the fingerprint database DB421 for the second server with the acquired fingerprint data (St417). The second server S42 generates a registration result or a biometric authentication result of the acquired fingerprint data and transmits it to the terminal (terminal device P11, fingerprint acquisition device P12, or contact sensor P13) which is the acquisition source (generation source) of the fingerprint data (St418).

[0328] The terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13 monitors the registration result or the biometric authentication result of the fingerprint data transmitted from the second server S42 and outputs it to a speaker (not shown), an external device (not shown), etc. (St419).

[0329] As described above, the first server S41 in the fourth embodiment can convert the fingerprint data acquired by an arbitrary device (terminal device P11, fingerprint acquisition device P12, or contact sensor P13) by an arbitrary acquisition method (for example, contact state, non-contact state, or the sensing method of the sensor (capacitance method, thermal method, ultrasonic method, pressure sensing method, or optical method, etc.), any specifications of the cameras or sensors provided in each device, etc.) into fingerprint data that can be collated with the fingerprint data registered in each database. Thereby, the first server S41 can suppress a decrease in the authentication accuracy of biometric authentication executed using the fingerprint data registered in each database.

[0330] As described above, each embodiment and each use case example have been described, but each embodiment and each use case example may be arbitrarily combined.

[0331] As described above, the servers S11, S21 or the first servers S31, S31A, S31B, S41 (an example of a biological data conversion device) according to Embodiments 1 to 4 include communication units 30, 40, 60, 60A, 80 (an example of an acquisition unit) that acquire at least one first fingerprint data (an example of first biological data), and processors 31, 41, 61, 61A, 81 (an example of a control unit) that convert the first fingerprint data into second fingerprint data (an example of second biological data) different from the first fingerprint data and output the converted data.

[0332] Accordingly, the servers S11, S21 or the first servers S31, S31A, S31B, S41 according to Embodiments 1 to 4 can convert fingerprint data acquired by an arbitrary device (the terminal device P11, the fingerprint acquisition device P12, or the contact sensor P13) by an arbitrary acquisition method (for example, a contact state, a non-contact state, or a sensing method of a sensor (a capacitance method, a thermal sensing method, an ultrasonic method, a pressure sensing method, an optical method, etc.), any specifications of a camera or a sensor included in each device, etc.) into fingerprint data that can be compared with fingerprint data registered in at least one database. Therefore, the servers S11, S21 or the first servers S31, S31A, S31B, S41 according to Embodiments 1 to 4 can convert fingerprint data acquired by an arbitrary acquisition method into fingerprint data that can be used for biometric authentication.

[0333] In addition, the processor 61A in the first server S31B according to Embodiment 3 outputs the first fingerprint data and the converted second fingerprint data in association with each other. Accordingly, the first server S31B according to Embodiment 3 can output fingerprint data (the first fingerprint data and the second fingerprint data) that are managed by a store, a facility, or a company and can be compared with fingerprint data acquired by an arbitrary acquisition method by outputting the first fingerprint data and the converted second fingerprint data in association with each other.

[0334] Also, the processors 31, 41, 61, 81 in the servers S11, S21 or the first servers S31, S31A, S41 according to Embodiments 1 to 4 determine whether the first fingerprint data is fingerprint data (an example of registered fingerprint data) that can be matched with the fingerprint data registered in the first database (for example, the contact fingerprint databases DB11, DB22, DB31, the first fingerprint databases DB411 to the Nth fingerprint databases DB41N, the blacklist fingerprint databases DB21, DB32, the fingerprint database for the second server DB421, etc.). When it is determined that the fingerprint data is fingerprint data that can be matched with the registered fingerprint data, the conversion of the first fingerprint data is omitted and output. When it is determined that the fingerprint data is not fingerprint data that can be matched with the fingerprint data (registered fingerprint data), the first fingerprint data is converted into second fingerprint data and output. Thereby, the servers S11, S21 or the first servers S31, S31A, S41 according to Embodiments 1 to 4 can execute conversion only for the fingerprint data that requires conversion processing.

[0335] Also, the processors 31, 41, 61, 81 in the servers S11, S21 or the first servers S31, S31A, S41 according to Embodiments 1 to 4 compare the fingerprint data (registered fingerprint data) recorded in the first database with the second fingerprint data and authenticate the person (user) corresponding to the second fingerprint data. Thereby, the servers S11, S21 or the first servers S31, S31A, S41 according to Embodiments 1 to 4 can execute a conversion process for converting the fingerprint data acquired by any acquisition method into biometric authentication-capable fingerprint data and a biometric authentication process using the converted fingerprint data.

[0336] Also, the processor 41 in the server S21 according to Embodiment 2 collates the fingerprint data (registered fingerprint data) of at least one person registered in the second database (for example, the blacklist fingerprint database DB21) and who is a detection target with the second fingerprint data. When it is determined that the second fingerprint data is fingerprint data identical or similar to the fingerprint data (registered fingerprint data), an alert indicating that a person has been detected is generated and output. When it is determined that the second fingerprint data is not fingerprint data identical or similar to the fingerprint data (registered fingerprint data), the second fingerprint data is output to and registered in a third database (contact fingerprint database DB22) different from the second database. Thereby, the server S21 according to Embodiment 2 can convert the fingerprint data acquired by an arbitrary acquisition method into fingerprint data capable of biometric authentication, and use the converted fingerprint data for detecting a person registered in the blacklist and registering in the contact fingerprint database DB22.

[0337] Also, the processor 41 in the server S21 according to Embodiment 2 collates the fingerprint data (registered fingerprint data) of at least one person registered in the second database (for example, the blacklist fingerprint database DB21) and who is a detection target with the second fingerprint data. When it is determined that the second fingerprint data is fingerprint data identical or similar to the fingerprint data (registered fingerprint data), an alert indicating that a person has been detected is generated and output. When it is determined that the second fingerprint data is not fingerprint data identical or similar to the fingerprint data (registered fingerprint data), the processor 41 collates the fingerprint data (registered fingerprint data) of at least one person registered in a third database (contact fingerprint database DB22) different from the second database with the second biometric data. Thereby, the server S21 according to Embodiment 2 can convert the fingerprint data acquired by an arbitrary acquisition method into fingerprint data capable of biometric authentication, and use the converted fingerprint data for detecting a person registered in the blacklist and authenticating with the fingerprint data of a person registered in the contact fingerprint database DB22.

[0338] Further, the communication units 30, 40, 60, 60A, 80 in the servers S11, S21 or the first servers S31, S31A, S41 according to Embodiments 1 to 4 acquire the first fingerprint data and additional information regarding the device (an example of an acquisition device) from which the first fingerprint data was acquired. The processors 31, 41, 61, 81 convert the first fingerprint data into second fingerprint data based on the additional information. Thereby, the servers S11, S21 or the first servers S31, S31A, S41 according to Embodiments 1 to 4 can convert the fingerprint data acquired by any device into fingerprint data more suitable for biometric authentication registered in each database.

[0339] Further, the communication units 30, 40, 60, 60A, 80 in the servers S11, S21 or the first servers S31, S31A, S41 according to Embodiments 1 to 4 acquire the first fingerprint data and additional information (an example of acquisition information) indicating whether the first fingerprint data was acquired in a contact state or a non-contact state. The processors 31, 41, 61, 81 convert the first fingerprint data into second fingerprint data based on the additional information. Thereby, the servers S11, S21 or the first servers S31, S31A, S41 according to Embodiments 1 to 4 can convert the fingerprint data acquired by any acquisition method into fingerprint data more suitable for biometric authentication with the fingerprint data registered in each database.

[0340] Further, the processors 61, 81 in the first servers S31, S31A, S41 according to Embodiments 3 and 4 convert the first fingerprint data into N fingerprint data (where N is an integer of 2 or more) that are different from the first fingerprint data and can be compared with the fingerprint data (registered fingerprint data) registered in each of a plurality of different N databases (the first fingerprint database DB411 to the Nth fingerprint database DB41N), and output the converted data. Thereby, the first servers S31, S31A, S41 according to Embodiments 3 and 4 can convert one fingerprint data acquired by any acquisition method into N fingerprint data that can be respectively compared with the fingerprint data registered in each of the first fingerprint database DB411 to the Nth fingerprint database DB41N.

[0341] As described above, each of the fingerprint authentication systems 100A to 100C, 200, 300A to 300B, and 400 according to Embodiments 1 to 4 includes at least one device (an example of a biological data acquisition device, such as a terminal device P11, fingerprint acquisition devices P12, P32, P32A, contact sensor P13, etc.) capable of acquiring first fingerprint data (an example of first biological data), and a server (such as servers S11, S21 or first servers S31, S31A, S41) capable of communicating with the device. The device acquires the first fingerprint data and transmits it to the server. The server converts the first fingerprint data into second fingerprint data (an example of second biological data) different from the first fingerprint data and outputs it.

[0342] Accordingly, each of the fingerprint authentication systems 100A to 100C, 200, 300A to 300B, and 400 according to Embodiments 1 to 4 can convert fingerprint data acquired by an arbitrary device (terminal device P11, fingerprint acquisition device P12, or contact sensor P13) by an arbitrary acquisition method (e.g., contact state, non-contact state, or sensor sensing method (capacitance method, thermosensitive method, ultrasonic method, pressure-sensitive method, or optical method, etc.), any specifications of the cameras or sensors provided in each device, etc.) into fingerprint data that can be compared with the fingerprint data registered in at least one database. Therefore, the servers S11, S21 or the first servers S31, S31A, S41 according to Embodiments 1 to 4 can convert fingerprint data acquired by an arbitrary acquisition method into fingerprint data that can be used for biometric authentication.

[0343] As described above, various embodiments have been described with reference to the accompanying drawings, but the present disclosure is not limited to such examples. It is obvious that those skilled in the art can conceive of various modification examples, correction examples, substitution examples, addition examples, deletion examples, and equivalent examples within the scope described in the claims, and it is understood that these also belong to the technical scope of the present disclosure. Also, within the scope not departing from the gist of the invention, the components in the above-described various embodiments may be arbitrarily combined.

[0344] This application is based on a Japanese patent application filed on February 9, 2023 (Japanese Patent Application No. 2023-018583), the content of which is incorporated herein by reference.

Industrial Applicability

[0345] The present disclosure is useful as a presentation of a biological data conversion device, a biological data conversion method, and a biological data conversion system that convert biological information acquired by any acquisition method into biological information that can be used for biometric authentication.

Description of Symbols

[0346] 10, 10A, 20, 20A, 20B, 20C, 30, 40, 50, 60, 60A, 70, 70A, 80, 90 Communication unit 11, 21, 31, 41, 51, 61, 71, 81, 91 Processor 12, 22, 32, 42, 52, 62, 72, 82, 92 Memory 13, 23 Camera 14, 53 Monitor 15, 54 Operation unit 24 Sensor 100A, 100B, 100C, 200, 300A, 300B, 400 Fingerprint authentication system 311, 411, 611, 811 Fingerprint data conversion unit 312, 412, 612, 711, 912 Fingerprint authentication unit 911 Fingerprint registration unit DB11, DB22, DB31 Contact fingerprint database DB21, DB32 Blacklist fingerprint database DB411 First fingerprint database DB41N Nth fingerprint database DB421 Fingerprint database for second server P11 Terminal device P12, P32, P32A Fingerprint acquisition device P13 Contact sensor S11, S21 Server S31, S31A, S41 First server S32, S32A, S42 Second Server TB1 First Conversion Table TB2 Second Conversion Table

Claims

1. An acquisition unit that acquires at least one first biological data and acquisition information indicating whether the first biological data is acquired in a contact state or a non-contact state; A control unit that converts the first biological data into second biological data different from the first biological data based on the acquisition information and outputs the converted data, A biological data conversion device.

2. The control unit associates and outputs the first biological data with the converted second biological data, The biological data conversion device according to Claim 1.

3. The control unit determines whether the first biological data is biological data that can be compared with registered biological data registered in a first database, when it is determined that the biological data is biological data that can be compared with the registered biological data, omits the conversion of the first biological data and outputs it, when it is determined that the biological data is not biological data that can be compared with the registered biological data, converts the first biological data into the second biological data and outputs it, The biological data conversion device according to Claim 1.

4. The control unit compares the registered biological data recorded in the first database with the second biological data and authenticates the person corresponding to the second biological data, The biological data conversion device according to Claim 3.

5. The control unit compares the registered biological data of at least one person registered in a second database and being a detection target with the second biological data, when it is determined that the second biological data is biological data identical or similar to the registered biological data, generates and outputs an alert indicating that the person has been detected, when it is determined that the second biological data is not biological data identical or similar to the registered biological data, outputs and registers the second biological data in a third database different from the second database, The biological data conversion device according to Claim 4.

6. The control unit compares the registered biological data of at least one person registered in a second database and being a detection target with the second biological data, when it is determined that the second biological data is biological data identical or similar to the registered biological data, generates and outputs an alert indicating that the person has been detected, When it is determined that the second biological data is not biological data identical or similar to the registered biological data, at least one registered biological data registered in a third database different from the second database is collated with the second biological data. The biological data conversion device according to claim 4.

7. The acquisition unit acquires the first biological data and information regarding the acquisition device from which the first biological data was acquired. The control unit converts the first biological data into the second biological data based on the information regarding the acquisition device. The biological data conversion device according to claim 1.

8. The control unit converts the first biological data into N biological data different from the first biological data and capable of being collated with the registered biological data registered in each of a plurality of different databases (N: an integer of 2 or more), and outputs the converted data. The biological data conversion device according to claim 1.

9. A biological data conversion method performed by a biological data conversion device capable of communicating with at least one biological data acquisition device capable of acquiring first biological data, acquiring the first biological data and acquisition information indicating whether the first biological data was acquired in a contact state or a non-contact state, and converting the first biological data into second biological data different from the first biological data and outputting the converted data based on the acquisition information. Biological data conversion method.

10. At least one biological data acquisition device capable of acquiring first biological data, and a server capable of communicating with the biological data acquisition device, a biological data conversion system comprising: The biological data acquisition device acquires the first biological data and transmits the first biological data and acquisition information indicating whether the first biological data was acquired in a contact state or a non-contact state to the server. The server converts the first biological data into second biological data different from the first biological data and outputs the converted data based on the acquisition information. Biological data conversion system.

Images