Biometric information registration and authentication method for IC cards with biometric authentication function and biometric information registration and authentication system

Abstract

To provide a method capable of implementing registering and authenticating biometric information on a Web browser by using a smart phone having an NFC function.SOLUTION: At registration, a Web server transmits a biometric information registration command to an IC card with an NFC function via a communication terminal. The IC card reads the biometric information of a user, stores it in a biometric authentication information storage unit of the IC card, and transmits a response to the Web server via the communication terminal. The Web server notifies the communication terminal of registration complete. The communication terminal notifies service users of the registration complete. At authentication, the IC card reads the biometric information of a user, collates it with biometric information stored in the biometric authentication information storage unit of the IC card, and transmits the collation result to the communication terminal as a response with the NFC function. The communication terminal transmits the received response to the Web server. When the collation is successful, the Web server notifies the communication terminal of the authentication complete. The communication terminal notifies service users of the authentication complete.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a method and system for registering and authenticating a user's biometric information in an IC card with a biometric authentication function. [Background technology]

[0002] Cards (IC cards) equipped with biometric authentication functions for individual users, such as fingerprint authentication, have been developed and commercialized, and personal authentication systems using such cards have also been developed and commercialized.

[0003] For example, Patent Document 1 discloses a personal authentication system in which, after mutual authentication is performed between a terminal and an ID device, the terminal acquires a facial image of the user using a camera and transmits the facial image to the ID device as biometric information, as shown in Figure 5. The ID device then compares the biometric information received from the terminal with biometric information (facial image) previously registered and stored in a memory unit, and determines whether they match, thereby authenticating the individual.

[0004] The authentication results are sent to the server, which then verifies the received personal authentication results before carrying out the actual processing on the terminal, such as credit card transactions and student attendance management.It is said that a personal authentication system can be built that can authenticate individuals regardless of the type of ID device or whether or not they can use the network.

[0005] However, with such conventional personal authentication systems, when registering an individual's biometric information on a card, for example, in the case of a bank cash card, the user must go to a bank branch or other counter, have their face photographed using a dedicated system, and have the facial image registered on a server beforehand. This requires a time-consuming process, and, combined with the declining number of bank branches, has hindered the widespread adoption of such systems. [Prior art documents] [Patent documents]

[0006] [Patent Document 1] Japanese Patent Application Laid-Open No. 2012-73902 Summary of the Invention [Problem to be solved by the invention]

[0007] Therefore, the present invention aims to provide a method and system that allows biometric information to be registered and authenticated on a web browser using a smartphone with NFC (Near Field Communication) functionality as a communication terminal, without the need to go to a store or other establishment that allows registration to register biometric information on an IC card in advance or to use dedicated equipment or systems. [Means for solving the problem]

[0008] In order to solve the above problems, the present invention provides: an IC card having a biometric authentication device; A communication device with NFC functionality, A web server that executes biometric information registration and authentication services, When registering biometric information on the IC card, Access the web server using a communication terminal, The web server starts the biometric information registration service and sends a command for IC card authentication to the communication terminal. The communication terminal sends the received command to the IC card using the NFC function. The IC card sends a response to the communication terminal as a result of executing the command. The communication terminal sends the received response to the web server, If the response is normal and the IC card is authenticated, the web server sends a biometric information registration command to the communication terminal, The communication terminal sends the received biometric information registration command to the IC card using the NFC function, The IC card activates the biometric authentication device, reads the biometric information of the service user, stores it in the biometric authentication information storage unit in the IC card, and transmits a response to the biometric information registration command to the communication terminal. The communication terminal sends the received response to the web server, If the response is normal, the web server notifies the communication terminal that registration is complete. The communication terminal completes the registration by notifying the service user that the registration has been completed. When biometric authentication of the IC card is performed, Access the web server using a communication terminal, The web server starts the biometric authentication service and sends a command for IC card authentication to the communication terminal. The communication terminal sends the received command to the IC card using the NFC function. The IC card sends a response to the communication terminal as a result of the command execution. The communication terminal sends the received response to the web server, If the response is normal and the IC card is authenticated, the web server sends a biometric authentication command to the communication terminal, The communication terminal sends the received biometric authentication command to the IC card using the NFC function. The IC card activates the biometric authentication device, reads the biometric information of the service user, compares it with the biometric information stored in the biometric authentication information storage unit in the IC card, and transmits the comparison result as a response to the communication terminal using the NFC function. The communication terminal sends the received response to the web server, If the response is normal, i.e., the verification is successful, the web server notifies the communication terminal that authentication is complete. The communication terminal completes the authentication by notifying the service user that the authentication has been completed. The present invention relates to a biometric information registration and authentication method for a card with a biometric authentication function.

[0009] In the biometric information registration and authentication method for a card with biometric authentication function, If the web server receives an abnormal response from the IC card, If biometric information is being registered, the communication terminal is notified of registration failure. If biometric information is being authenticated, the communication terminal is notified of authentication failure. The communications terminal may inform the service user of any registration or authentication failure.

[0010] In the biometric information registration and authentication method for a card with biometric authentication function, The biometric information of the service user may be fingerprint information, and the biometric authentication device may be a fingerprint sensor.

[0011] Another aspect of the present invention is an IC card having a biometric authentication device; A communication device with NFC functionality, a web server that executes biometric information enrollment and authentication services; When registering your biometric information, Access the web server using a communication terminal, The web server starts the biometric information registration service and sends a command for IC card authentication to the communication terminal. The communication terminal sends the received command to the IC card using the NFC function. The IC card sends a response to the communication terminal as a result of executing the command. The communication terminal sends the received response to the web server, If the response is normal and the IC card is authenticated, the web server sends a biometric information registration command to the communication terminal, The communication terminal sends the received biometric information registration command to the IC card using the NFC function, The IC card activates the biometric authentication device, reads the biometric information of the service user, stores it in the biometric authentication information storage unit in the IC card, and transmits a response to the biometric information registration command to the communication terminal. The communication terminal sends the received response to the web server, If the response is normal, the web server notifies the communication terminal that registration is complete. The communication terminal completes the registration by notifying the service user that the registration has been completed. When authenticating biometric information, Access the web server using a communication terminal, The web server starts the biometric authentication service and sends a command for IC card authentication to the communication terminal. The communication terminal sends the received command to the IC card using the NFC function. The IC card sends a response to the communication terminal as a result of the command execution. The communication terminal sends the received response to the web server, If the response is normal and the IC card is authenticated, the web server sends a biometric authentication command to the communication terminal, The communication terminal sends the received biometric authentication command to the IC card using the NFC function. The IC card activates the biometric authentication device, reads the biometric information of the service user, compares it with the biometric information stored in the biometric authentication information storage unit in the IC card, and transmits the comparison result as a response to the communication terminal using the NFC function. The communication terminal sends the received response to the web server, If the response is normal, i.e., the verification is successful, the web server notifies the communication terminal that authentication is complete. The communication terminal completes the authentication by notifying the service user that the authentication has been completed. The present invention is a registration and authentication system for a card with a biometric authentication function.

[0012] In the biometric information registration and authentication system for the card with biometric authentication function, The biometric information of the service user may be fingerprint information, and the biometric authentication device may be a fingerprint sensor. [Effects of the Invention]

[0013] According to the present invention, biometric information can be registered and authenticated on an IC card with fingerprint matching function without having to register the biometric information in advance at a dedicated device or store. This improves the convenience of registration work for service users and reduces the costs of dedicated devices and stores for card issuers. It also makes it possible to execute secure services using fingerprint authentication from a communication terminal. [Brief explanation of the drawings]

[0014] [Figure 1] 1 is a diagram illustrating an example of the configuration of a system for implementing a biometric information registration and authentication method for a card with biometric authentication function according to the present invention. [Figure 2] 1 is a sequence diagram showing a fingerprint registration sequence in a biometric information registration and authentication method for a card with biometric authentication function according to the present invention. [Figure 3] 1 is a sequence diagram of fingerprint authentication in a biometric information registration and authentication method for a card with biometric authentication function according to the present invention. [Figure 4] 10 is a sequence diagram showing a sequence when an error occurs in the biometric information registration and authentication method for a card with biometric authentication function according to the present invention. [Figure 5] FIG. 1 is a diagram illustrating an example of the configuration of a conventional personal authentication system. DETAILED DESCRIPTION OF THE INVENTION

[0015] Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. Note that the present invention is not limited to the embodiments described below. Furthermore, in the embodiments shown below, technically preferable limitations are imposed for carrying out the invention, but these limitations are not essential requirements for the present invention.

[0016] <Components> 1 shows an example of the configuration of a system for implementing the biometric information registration and authentication method for a card with biometric authentication function of the present invention. The configuration will be described below. (1) IC card Biometric information storage unit Stores the biometric information of service users. It consists of non-volatile memory such as flash memory. Biometric authentication device (fingerprint sensor) The card is provided with a fingerprint sensor for reading a fingerprint. The fingerprint sensor is typically of a capacitance type for cards, but other known types such as an optical type may also be selected as appropriate. Biometric information processing unit It has information processing functions such as registering fingerprint information read from the sensor in a biometric information storage unit and comparing it with already registered biometric information. (2) Web server It is equipped with an application that connects from a communication terminal and provides biometric information registration and authentication as a web service. A commercially available server device can be used. (3) Communication terminal / Smartphone with NFC function The NFC function relays the use of services on the web server and the sending and receiving of commands between the web server and the IC card. NFC functions such as Bluetooth (registered trademark) that are installed in general smartphones can be used.

[0017] <Processing sequence> The system shown in Figure 1 allows biometric information to be registered on a web browser. Fingerprint registration and authentication for an IC card with fingerprint authentication functionality can be performed on the web browser. A user accesses a website that provides fingerprint registration and authentication services from a smartphone with NFC functionality, which serves as a communications terminal, and receives commands for fingerprint registration and authentication from the website to the IC card. The system then communicates with the IC card via the NFC functionality to register and authenticate the fingerprint on the IC card.

[0018] (1) Registration sequence Figure 2 shows the fingerprint registration sequence in the biometric information registration and authentication method for a card with biometric authentication function of the present invention. The service user accesses the web server from a communication terminal (a smartphone with NFC function) and executes the biometric information registration service. The web server sends a command for the IC card to the communication terminal to authenticate the IC card itself, and the communication terminal sends the received command to the IC card using the NFC function. The IC card sends a response as a result of executing the received command to the communication terminal, and the communication terminal sends the received response to the web server. These exchanges of commands and responses are performed in the same way as general IC card authentication procedures and may be performed multiple times. If authentication is successful, an authentication OK response is returned.

[0019] Once the IC card is authenticated, the web server sends a fingerprint registration command to the communication terminal, and the communication terminal sends the received fingerprint registration command to the IC card using the NFC function.

[0020] When the IC card receives the fingerprint registration command, it activates the biometric authentication device (fingerprint sensor), and the service user places their finger on the fingerprint sensor attached to the IC card. The biometric information (fingerprint information) read by the fingerprint sensor is stored in the biometric authentication information storage unit in the IC card, and the IC card sends a response to the web service. The web service notifies the communication terminal that registration is complete, and the communication terminal notifies the service user that registration is complete.

[0021] (2) Authentication sequence Figure 3 shows the fingerprint authentication sequence in the biometric information registration and authentication method for a card with biometric authentication function of the present invention. The service user accesses the web server from a communication terminal (a smartphone with NFC function) and executes the biometric information (fingerprint) authentication service. The web server sends a command for the IC card to the communication terminal to authenticate the IC card itself, and the communication terminal sends the received command to the IC card using the NFC function. The IC card sends a response as a result of executing the command to the communication terminal, and the communication terminal sends the received response to the web server. As with the registration sequence described above, the exchange of these commands and responses is performed in the same way as a general IC card authentication procedure, and may be performed multiple times. If authentication is successful, an authentication OK response is returned.

[0022] Once the IC card is authenticated, the web server sends a fingerprint authentication command to the communication terminal, and the communication terminal sends the received command to the IC card using the NFC function.

[0023] When the IC card receives a fingerprint authentication command, it activates its biometric authentication device (fingerprint sensor), and the service user places their finger on the fingerprint sensor attached to the IC card. The biometric information (fingerprint information) read by the fingerprint sensor is compared with the fingerprint information registered and stored in the biometric authentication information storage unit of the IC card in the registration sequence described above, and the result is sent as a response to the web server. The web server's authentication service notifies the communication terminal that authentication is complete, and the communication terminal notifies the service user that authentication is complete. To notify the service user that authentication is complete, the smartphone's functions can be used appropriately, for example, by displaying the information on the smartphone screen or by sound such as a chime.

[0024] If an error occurs during the registration sequence or authentication sequence and the web service receives a "NG (no good)" response, the NG sequence described below is executed.

[0025] (3) NG sequence Figure 4 shows an NG sequence, which is the sequence that occurs when an error occurs during registration or authentication in the biometric information registration and authentication method for a card with biometric authentication function of the present invention. If the Web service receives an "NG" response from the IC card, if it is a registration sequence, the Web service notifies the communication terminal of the registration failure, and the communication terminal notifies the service user of the registration failure. If it is an authentication sequence, the Web service notifies the communication terminal of the authentication failure, and the communication terminal notifies the service user of the authentication failure.

[0026] As explained above, according to the biometric information registration and authentication method for a card with biometric authentication function of the present invention, a user's own biometric information (fingerprint information) can be registered and authenticated on an IC card with biometric authentication function simply by using a general smartphone and online services. There is no need to go to a store or other location in advance to register biometric information for registration and authentication, and there is no need to prepare dedicated equipment for this purpose, making it highly convenient.

Claims

1. an IC card having a biometric authentication device; A communication terminal with an NFC function; A web server that executes biometric information registration and authentication services, When registering biometric information on the IC card, Access the web server using a communication terminal, The web server starts the biometric information registration service and sends a command for IC card authentication to the communication terminal, The communication terminal transmits the received command to the IC card using the NFC function, The IC card transmits a response, which is the result of executing the command, to the communication terminal. The communication terminal transmits the received response to the web server, If the response is normal and the IC card is authenticated, the web server sends a biometric information registration command to the communication terminal, The communication terminal transmits the received biometric information registration command to the IC card using the NFC function, The IC card activates the biometric authentication device, reads the biometric information of the service user, stores the read biometric information in a biometric authentication information storage unit in the IC card, and transmits a response to the biometric information registration command to the communication terminal. The communication terminal transmits the received response to the web server, If the response is normal, the web server notifies the communication terminal that registration is complete. The communication terminal completes the registration by notifying the service user that the registration has been completed. When biometric authentication of the IC card is performed, Access the web server using a communication terminal, The web server starts the biometric authentication service and sends a command for IC card authentication to the communication terminal, The communication terminal transmits the received command to the IC card using the NFC function, The IC card sends a response to the communication terminal as a result of executing the command. The communication terminal transmits the received response to the web server, If the response is normal and the IC card is authenticated, the web server sends a biometric authentication command to the communication terminal, The communication terminal transmits the received biometric authentication command to the IC card using the NFC function, The IC card activates the biometric authentication device, reads the biometric information of the service user, compares it with the biometric information stored in the biometric authentication information storage unit in the IC card, and transmits the comparison result as a response to the communication terminal using the NFC function. The communication terminal transmits the received response to the web server, If the response is normal, i.e., the verification is successful, the web server notifies the communication terminal that authentication has been completed. The communication terminal completes the authentication by notifying the service user that the authentication has been completed. A biometric information registration and authentication method for a card with biometric authentication function.

2. If the web server receives an abnormal response from the IC card, If biometric information is being registered, the communication terminal is notified of registration failure. If biometric information is being authenticated, the communication terminal is notified of authentication failure.

2. The biometric information registration and authentication method for a card with biometric authentication function according to claim 1, wherein the communication terminal notifies the service user of a failure in registration or authentication.

3. 3. The biometric information registration and authentication method for a card with biometric authentication function according to claim 1, wherein the biometric information of the service user is fingerprint information, and the biometric authentication device is a fingerprint sensor.

4. an IC card having a biometric authentication device; A communication terminal with an NFC function; a web server that executes biometric information registration and authentication services; When registering your biometric information, Access the web server using a communication terminal, The web server starts the biometric information registration service and sends a command for IC card authentication to the communication terminal, The communication terminal transmits the received command to the IC card using the NFC function, The IC card transmits a response, which is the result of executing the command, to the communication terminal. The communication terminal transmits the received response to the web server, If the response is normal and the IC card is authenticated, the web server sends a biometric information registration command to the communication terminal, The communication terminal transmits the received biometric information registration command to the IC card using the NFC function, The IC card activates the biometric authentication device, reads the biometric information of the service user, stores the read biometric information in a biometric authentication information storage unit in the IC card, and transmits a response to the biometric information registration command to the communication terminal. The communication terminal transmits the received response to the web server, If the response is normal, the web server notifies the communication terminal that registration is complete. The communication terminal completes the registration by notifying the service user that the registration has been completed. When authenticating biometric information, Access the web server using a communication terminal, The web server starts the biometric authentication service and sends a command for IC card authentication to the communication terminal, The communication terminal transmits the received command to the IC card using the NFC function, The IC card sends a response to the communication terminal as a result of executing the command. The communication terminal transmits the received response to the web server, If the response is normal and the IC card is authenticated, the web server sends a biometric authentication command to the communication terminal, The communication terminal transmits the received biometric authentication command to the IC card using the NFC function, The IC card activates the biometric authentication device, reads the biometric information of the service user, compares it with the biometric information stored in the biometric authentication information storage unit in the IC card, and transmits the comparison result as a response to the communication terminal using the NFC function. The communication terminal transmits the received response to the web server, If the response is normal, i.e., the verification is successful, the web server notifies the communication terminal that authentication has been completed. The communication terminal completes the authentication by notifying the service user that the authentication has been completed. A registration and authentication system for a card with biometric authentication function.

5. 5. The registration and authentication system for a card with biometric authentication function according to claim 4, wherein the biometric information of the service user is fingerprint information, and the biometric authentication device is a fingerprint sensor.

Images