Contactless IC Card with Biometric Authentication

Abstract

To provide means which can add authentication using biometric information as an element of entry / exit authentication, without repairing an access control system by a current electromagnetic ID.SOLUTION: A non-contact IC card with a biometric authentication function as an electromagnetic ID is used for access control. Before the non-contact IC card sends out a request reply signal to a non-contact IC card authentication terminal, with respect to a request command which the non-contact IC card authentication terminal sends out for detecting the non-contact IC card being in an operating electromagnetic field, the non-contact IC card with the biometric authentication function: acquires biometric information on a non-contact IC card user, by using biometric information acquisition means provided in the non-contact IC card; compares the obtained biometric information with the user's biometric information which the non-contact IC card holds in advance; and sends out the request reply signal, after changing a unique number identifier to be returned to the non-contact IC card authentication terminal on the basis of the comparison result.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to a non-contact IC card with a biometric authentication function.

Background Art

[0002] When entering or leaving an area where entry and exit are strictly controlled due to security requirements such as in an office, there has long been an entry and exit management method in which a passerby presents an entry permit with their face photo to a guard at the entrance and exit of the area, and the face shape is collated for identity verification.

[0003] On the other hand, currently, an automatic entry and exit management system that performs identity verification by collating personal information of the ID device owner registered in the ID device using an electromagnetic ID device such as a contact magnetic card, a non-contact RFID, or a contact or non-contact IC card has become mainstream (Patent Document 1 below).

[0004] In addition, systems using similar electromagnetic ID devices are widely applied as means of access control not only for entry and exit management but also for device control, confirmation of attendance at lectures, etc.

[0005] However, in these access control systems using electromagnetic ID devices, when someone other than the ID device owner possesses these ID devices due to theft or substitution, etc., since the association between the ID device and the ID device owner is not sufficient, there is a risk that unauthorized access by impersonation of someone other than the person can be easily performed without strict identity verification.

[0006] On the other hand, technologies have been proposed to more reliably perform identity verification by combining means for electromagnetically identifying unique physical characteristics of a person, such as face shape, iris, fingerprint, etc., so-called biometric information (Patent Documents 2 and 3 below).

[0007] However, in these technologies, additional equipment such as an imaging camera or a fingerprint sensor is required to acquire such biometric information.

[0008] In addition, in order to perform authentication by synchronizing two different types of information, biometric information and electromagnetic ID information, it is also necessary to modify the existing access management system.

[0009] Thus, in order to incorporate biometric information as an authentication means into an access management system, a significant modification to the existing system is required, resulting in an increase in initial costs. Therefore, there has been a problem that the spread of authentication using biometric information has not advanced.

Prior Art Documents

Patent Documents

[0010]

Patent Document 1

Patent Document 2

Patent Document 3

Summary of the Invention

Problems to be Solved by the Invention

[0011] Therefore, the present invention has been made to address the above problems, and an object thereof is to provide a means capable of adding authentication using biometric information as an element of entry / exit authentication without modifying the existing access management system using electromagnetic ID.

Means for Solving the Problems

[0012] As a means for solving the above problems, the invention according to claim 1 is a contactless IC card with a biometric authentication function as an electromagnetic ID used for access management, While keeping the user's finger of the non-contact IC card in a state readable by the biometric information acquisition means provided in the non-contact IC card, the non-contact IC card is brought close to the non-contact IC card authentication terminal, and the before the non-contact IC card sends a request response signal to the non-contact IC card authentication terminal in response to a request command sent by the non-contact IC card authentication terminal to detect the non-contact IC card within the operating electromagnetic field, biometric authentication access flag is turned off, and the unique number identifier returned to the non-contact IC card authentication terminal is initialized to an incomplete unique number identifier, and after each is stored in the storage unit, the using biometric information acquisition means,fingerprint of the user is obtained, and the obtained fingerprint is compared with the user's fingerprint previously held by the contactless IC card After that, the stored biometric authentication access flag in the storage unit is turned on and rewritten. For the unique number identifier stored in the storage unit, if the verification result is positive, it is set to a complete unique number identifier, and if the verification result is incorrect, it is set to an incomplete unique number identifier. After storing the unique number identifier to be returned to the non-contact IC card authentication terminal, When the non-contact IC card authentication terminal receives the request command after the request command, if the biometric authentication access flag is on, regardless of the verification result A contactless IC card with a biometric authentication function, characterized in that it sends the request response signal.

[0014] Also, in the invention described in claim 2 when it fails to obtain the fingerprint of the contactless IC card user, the unique number identifier stored in the storage unit is used as an incomplete unique number identifier, and the contactless IC card with a biometric authentication function described in claim 1 is characterized in that

Advantages of the Invention

[0015] According to the present invention, the authentication of the contactless IC card owner is performed not only based on the personal data pre-registered in the contactless IC card but also in combination with the biometric information of the owner. Therefore, it is possible to prevent unauthorized use by impersonation by others and improve security.

[0016] Also, according to the present invention, even when biometric information is used for authentication of the contactless IC card owner, there is no need to perform additional equipment or system modification other than the introduction of the contactless IC card. Therefore, no additional cost is incurred, and it is expected to promote the widespread use of IC cards with biometric information authentication.

Brief Description of the Drawings

[0017]

Figure 1

Figure 2

Figure 3

Modes for Carrying Out the Invention

[0018] An embodiment of the present invention will be described below.

[0019] As shown in FIG. 3, for example, the non-contact IC card 100 to which the present invention is applied includes a storage unit 110 that stores information necessary for authentication and the like, an acquisition unit 120 that acquires biometric information, a processing unit 130 that performs an authentication process and data processing, a communication unit 140 that performs data communication with a non-contact IC card authentication terminal or the like, and a power supply unit 150 that supplies power necessary for performing these processes.

[0020] The processing unit 130 is a central processing unit (CPU), has an OS on the hardware layer of the IC chip, and has a function of integrating and controlling the storage unit 110, the acquisition unit 120, the communication unit 140, and the power supply unit 150 to execute various applets stored in the storage unit 110.

[0021] The storage unit 110 has a function of storing codes of various applets and data or results necessary for arithmetic processing, and mainly includes a Random Access Memory (RAM) that can cope with high-speed and frequent rewriting, an Electrically Erasable Programmable Read-Only Memory (EEPROM) such as a flash memory that holds data even in a non-powered state and can be rewritten, and a Read Only Memory (ROM) that holds data that does not need to be rewritten permanently, and other storage devices.

[0022] The acquisition unit 120 is a sensor device for biometric information, such as a fingerprint. When it is a one-dimensional sensor, it performs contact scanning of the user's finger, and when it is a two-dimensional sensor, it holds the finger in contact to extract the pattern characteristics of the fingerprint. The biometric information is not limited to this, and any biometric information unique to the user, such as a vein pattern or an iris pattern, as long as it can be acquired by a sensor provided in the card, is acceptable.

[0023] The power supply unit 150 has a self-power supply such as a battery or a solar cell, or has a mechanism for being powered by electromagnetic induction from an external device such as a non-contact IC card authentication terminal 210.

[0024] Although not shown, a display unit for indicating the state of the contactless IC card or the authentication process may be provided. The display unit provides visual information to the user by a single-color or multi-color light-emitting device, such as an LED. It has a function of informing the user of the state of the IC card and its changes through the transition of the display color, display time, display fluctuations, and other combinations of visually distinguishable information.

[0025] The access administrator gives the user 300 a contactless IC card 100 in which personal identification information unique to the user 300 is previously stored in the storage unit 110. The user 300 registers his or her own biometric information in the contactless IC card 100 in order to activate this contactless IC card 100.

[0026] Although the description of the activation procedure is omitted, in the present invention, the contactless IC card 100 in a state where both the personal identification information and the biometric information are registered, that is, a state where both the personal identification information and the biometric information are stored in the storage unit 110, is used.

[0027] FIG. 1 shows an image of the contactless IC card usage scene in the present invention. FIG. 1a shows a state where the access management system closes the gate 220 and access to the access management area is restricted. FIG. 1b shows a state where the access management system opens the gate 220 and the user 300 can access the management area after the user 300 approaches the contactless IC card authentication terminal 210 of the access management device 200 while touching the acquisition unit 120 of the card 100 for authentication.

[0028] Here, a flap door type is assumed for the gate 220, but any physical device that restricts the entry and exit of the human body, including locking and unlocking the door that partitions the room, may be used.

[0029] In the prior art, just by bringing the contactless IC card 100 close to the contactless IC card authentication terminal 210 of the access management device 200, the authentication procedure could proceed. However, in the present technology shown in FIG. 1, it shows that the user 300 is proceeding with this action while bringing the fingerprint registered as biometric information into contact with the biometric information acquisition unit 120 provided in the contactless IC card 100.

[0030] Following the flowchart of FIG. 2, the access management procedure in this embodiment will be described. In this flowchart, an example using the fingerprint of the user as biometric information is shown.

[0031] Step S1000: The user 300 brings the card 100 close to the contactless IC card authentication terminal 210 of the access management device 200 while keeping the same finger as the fingerprint of the user 300 registered on the card 100 in a state where it can be read by the acquisition unit 120.

[0032] Step S1001: The contactless IC card authentication terminal 210 included in the access management system 200 sends out an electromagnetic wave for power supply by electromagnetic induction to a contactless IC card within a communicable area. In response to this, the power supply unit 150 of the contactless IC card 100 supplies power necessary for the operation of the card to each part.

[0033] Step S1002: Also, the contactless IC card authentication terminal 210 periodically sends a request command for starting a communication procedure to a contactless IC card within a wireless communicable area.

[0034] Step S2001: The processing unit 130 activated by receiving power supply from the power supply unit 150 starts the following process to perform authentication based on biometric information within the card 100.

[0035] Step S2002: The processing unit 130 sets the acquisition unit 120 to a read standby state so that the fingerprint of the user 300 can be acquired.

[0036] Step S2003: The processing unit 130 sets the communication unit 140 to the communication standby state so as to enable wireless communication with the contactless IC card authentication terminal 210.

[0037] Step S2004: The processing unit 130 initializes a biometric authentication access flag indicating whether the biometric authentication process has ended to "OFF", indicating that the biometric authentication has not been completed, and initializes a unique number identifier (hereinafter UID = Unique Identifier) indicating whether the biometric authentication has been successful to an incomplete UID representing a state where the authentication has not been successful, and stores them in the storage unit 110.

[0038] Step S2005: The processing unit 130 calls the biometric information of the user 300 stored in the storage unit 110, and the storage unit 110 responds to this (S2006).

[0039] Step S2007: The acquisition unit 120 passes the read biometric information of the user 300 to the processing unit 130.

[0040] Step S2008: The processing unit 130 determines whether the biometric information passed from the acquisition unit 120 in step S2007 meets the requirements necessary for authentication. If it meets the requirements, it proceeds to the following verification step S2009. If it does not meet the requirements, it requests the acquisition unit 120 for biometric information again and repeats the same step.

[0041] If the biometric information that meets the requirements necessary for authentication cannot be obtained even after a certain period of time in step S2008, it proceeds to step S2011.

[0042] Step S2009: The processing unit 130 compares and collates the biometric information of the stored user 300 obtained in S2006 with the read biometric information obtained in step S2007. If they match, it proceeds to step S2010. If they do not match, it proceeds to step S2011 respectively.

[0043] Step S2010: Turn on the biometric authentication access flag, and rewrite the UID to a complete UID indicating a successful authentication state, respectively, to end the authentication process.

[0044] Step S2011: Rewrite the biometric authentication access flag to "ON", and keep the UID as an incomplete UID indicating an unsuccessful authentication state to end the authentication process.

[0045] Step S3001: When the communication unit 140 receives a request command transmitted from the contactless IC card authentication terminal 210, it gives a reception notification to the processing unit 130 each time.

[0046] Step S3002: The processing unit 130 that has received the request command reception notification from the communication unit 140 calls the biometric authentication access flag stored in the storage unit 110, and the storage unit 110 responds to this (S3003).

[0047] Step S3004: When the called biometric authentication access flag is "ON", the processing unit 130 causes the communication unit 140 to respond to the request command (S1003). When the biometric authentication access flag is "OFF", it does not respond to the request command and returns the communication unit 140 to the communication standby state (S2003).

[0048] According to the procedures of steps S1000 to S3004 above, regardless of whether the biometric authentication on the contactless IC card 100 is successful or not, the contactless IC card authentication terminal 210 can obtain a response to the transmitted request command from the contactless IC card 100 only when the biometric authentication process on the contactless IC card 100 is passed.

[0049] On the other hand, since no response can be obtained from the contactless IC card 100 that has not passed the biometric authentication process, it is not recognized by the contactless IC card authentication terminal 210, and the contactless IC card authentication terminal 210 will continue to transmit the request command.

[0050] Although the explanation is omitted in the flow based on FIG. 2, after step S1003, as a result of sending a request command response from the contactless IC card 100, in the authentication procedure using the UID performed after the communication between the contactless IC card authentication terminal 210 and the contactless IC card 100 is established, access management is performed according to the result of the biometric authentication in the procedures of the previous steps S1000 to S3004.

[0051] That is, when the biometric authentication is successful and it is a complete UID, authentication from the conventional access management system can be obtained. When the biometric authentication fails and it is an incomplete UID indicating a state where the authentication is not successful, the access will be denied.

[0052] By doing the above, although the biometric authentication using the biometric information of the contactless IC card owner is used as an element of access management, it is possible to perform access management without adding equipment or modifying the system on the conventional access management system.

[0053] As communication standards for contactless IC cards, there are three types of communication standards: Type A, Type B, and Felica. For example, in the case of Type A, the request command is "REQA (REQuest command Type A)", and the response command to the request command is "ATQA (Answer To reQuest type A)".

[0054] Similarly, in the cases of Type B and Felica, it is possible to introduce the biometric authentication procedure of the present invention during the initial response between REQ (REQuest) and ATQ (Answer To reQuest).

[0055] Although not shown, in the case of a contactless IC card having a status display unit of the contactless IC card, the display unit may be transitioned during the reading standby in step S2002, and also transitioned when the biometric information acquisition in step S2009 is completed, etc., to notify the user 300 of the status of the biometric information acquisition. For example, procedures such as lighting the display unit that was turned off during the reading standby, and after blinking the display unit that was lit at the end of the reading for a certain period of time and then turning it off can be applied.

Description of Signs

[0056] 100 Contactless IC card with biometric information acquisition function 110 Storage unit 120 Acquisition unit 130 Processing unit 140 Communication unit 150 Power supply unit 200 Access management device 210 Contactless IC card authentication terminal 220 Access management gate 300 User

Claims

1. A contactless IC card with a biometric authentication function used for access management, while keeping the finger of the user of the contactless IC card in a state readable by the biometric information acquisition means provided in the contactless IC card, the contactless IC card is brought close to a contactless IC card authentication terminal, before the contactless IC card sends a request response signal to the contactless IC card authentication terminal in response to a request command sent by the contactless IC card authentication terminal to detect the contactless IC card within an operating electromagnetic field, the biometric authentication access flag is turned off, and the unique number identifier returned to the contactless IC card authentication terminal is set to an incomplete unique number identifier, and after each is initialized and stored in the storage unit, using the biometric information acquisition means, the fingerprint of the user is acquired, and after comparing and collating the obtained fingerprint with the fingerprint of the user previously held by the contactless IC card, the biometric authentication access flag stored in the storage unit is turned on and rewritten, for the unique number identifier stored in the storage unit, when the collation result is positive, it is set to a complete unique number identifier, and when the collation result is incorrect, it is set to an incomplete unique number identifier, and after storing the unique number identifier to be returned to the contactless IC card authentication terminal, when receiving a request command after the request command from the contactless IC card authentication terminal, if the biometric authentication access flag is on, a request response signal is sent regardless of the collation result. A contactless IC card with a biometric authentication function is characterized by this.

2. The contactless IC card with a biometric authentication function according to claim 1, characterized in that when the acquisition of the fingerprint of the contactless IC card user fails, the unique number identifier stored in the storage unit is set to an incomplete unique number identifier.

Images