How to register biometric information to an IC card

Abstract

To provide means capable of personal identification of a person who is registering biological information, and improving convenience without spoiling safety while avoiding complication at activation of an IC card.SOLUTION: An IC card 2 includes an acquisition unit for reading biological information, a storage unit for storing information containing the biological information, and a processing unit for performing a biological authentication process. The IC card is issued while registering, to the storage unit, information regarding a portable information terminal 3 designated by a user 1 of the IC card at the time of issuance. When the user obtains the IC card and registers his / her biological information, the information regarding the portable information terminal is transmitted to the IC card, and is compared with information regarding the portable information terminal stored at the time of issuance. When agreed, registration of the biological information is permitted, and the read biological information is stored and registered in the storage unit. When not agreed, all the application software in the IC card is stopped, and usage of the IC card is prohibited.SELECTED DRAWING: Figure 2

Description

Technical Field

[0007] <00000�3> The present invention relates to a method for registering biometric information on an IC card with biometric authentication.

Background Art

[0002] Since personal identification in the use of IC cards is mainly based on a PIN number, there are problems in the complexity of memorizing the number and the risk of the number being stolen. On the other hand, a technology has been proposed to enhance the convenience and security of personal identification when using a card by using an IC card having a function of acquiring biometric information unique to the user, such as a fingerprint (Patent Document 1).

[0003] Regarding the activation of an IC card, a proposal has also been made to enhance security by making it difficult for unauthorized users to activate the card by using a mobile terminal whose usage location can be specified when communicating with the card (Patent Document 2).

[0004] However, in the technology of Patent Document 1, a dedicated terminal device is required to communicate with a higher-level card management server when registering biometric information on an IC card and activating it, and it is necessary to go to a specific place, which impairs convenience.

[0005] Also, in the technology of Patent Document 2, when activating, which is a means for ensuring security, it must be performed at a specific place designated in advance using a general-purpose mobile terminal device for specifying its location, which impairs the convenience of the user.

[0006] In any of the technologies, since a specific device or a specific place is a condition when registering biometric information on an IC card or activating an IC card, there is a problem in convenience.

[0007] Furthermore, no effective measures had been taken to address problems such as "identity theft," where individuals who are not legitimate users of IC cards illegally obtain them and register their own biometric information. [Prior art documents] [Patent Documents]

[0008] [Patent Document 1] Japanese Patent Publication No. 2018-151799 [Patent Document 2] Japanese Patent Publication No. 2019-49926 [Overview of the project] [Problems that the invention aims to solve]

[0009] The problem that this invention aims to solve is to provide a means to improve convenience without compromising security when registering biometric information to an IC card with biometric authentication functionality, by enabling identity verification that the person registering the biometric information is a legitimate user, avoiding the cumbersome process of activating the IC card, and providing a means to achieve this. [Means for solving the problem]

[0010] To solve the above problems, the present invention provides A method for registering biometric information to an IC card, An IC card has an acquisition unit for reading biometric information, a storage unit for storing information including biometric information, and a processing unit for performing biometric authentication. Information related to the user's mobile device, as specified by the IC card user at the time of issuance of the IC card. Store it in the memory unit and issue it. When an IC card user obtains an IC card and registers their biometric information to the IC card, they transmit information related to their mobile device from the mobile device to the IC card. The processing unit compares the information about the mobile device stored at the time of issuance with the information about the transmitted mobile device. If they match, permission is granted to register the biometric information. The acquisition unit reads the user's biometric information, and the read biometric information is recorded and registered in the storage unit. This method for registering biometric information to an IC card is characterized by disabling all application software within the IC card and rendering it unusable if the information does not match.

[0011] In the above method for registering biometric information, IC cards that become unusable because the information stored at the time of issuance does not match the information transmitted from the mobile device. In contrast The user retrieves information related to their mobile device from the mobile device. forwarding Believe, The processing unit compares the information about the mobile device stored at the time of issuance with the information about the transmitted mobile device. If they match, the process may be to unblock the application software within the IC card and make the IC card usable. [Effects of the Invention]

[0012] According to the biological information registration method of the present invention, When registering biometric information such as a user's fingerprints to an IC card, it is possible to easily verify that the person attempting to register the biometric information is a legitimate user. Furthermore, there are no restrictions such as registration only being possible at designated locations, and registration can be done at home, resulting in a more convenient and secure biometric registration method. [Brief explanation of the drawing]

[0013] [Figure 1] This is a sequence diagram of the biological information registration method of the present invention. [Figure 2] This is a sequence diagram of the biological information re-registration method of the present invention. [Figure 3] This is a block diagram of the IC card used in the present invention. [Modes for carrying out the invention]

[0014] Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. Note that the present invention is not limited to the embodiments described below. Also, in the embodiments shown below, technically preferable limitations are imposed for implementing the invention, but these limitations are not essential requirements of the present invention.

[0015] The IC card 10 with a biometric authentication function provided in the present invention may have the same configuration as a conventionally known IC card. For example, as shown in FIG. 1, it includes a display unit 11 for indicating the state of the card or the authentication process, a storage unit 12 for storing information necessary for authentication, an acquisition unit 13 for acquiring biometric information, a processing unit 14 for performing authentication processes and data processing, a communication unit 15 for data communication with a host such as a store terminal, and a power supply unit 16 for supplying power necessary for performing these processes.

[0016] The above display unit 11 uses, for example, a light-emitting diode that can identify differences in state by changing color, brightness, or lighting timing. The acquisition unit 13 acquires user-specific biometric information, for example, using a fingerprint sensor. The above power supply unit 16 has a self-powered power source such as a battery or a solar cell, or has a function of NFC (Near Field Communication), and has a mechanism for being powered, for example, by electromagnetic induction from a portable information terminal such as a smartphone or its charging device.

[0017] When applying for the issuance of an IC card, the IC card issuer stores information related to a user's portable information terminal such as a smartphone, for example, information such as a phone number, email address, ID number, etc. (hereinafter referred to as "user data") specified at the time of the application in the storage unit 12 in advance, stores it, issues the IC card 10, and delivers it to the user.

[0018] The steps for the user to register biometric information on the delivered IC card are shown below based on FIG. 2. Here, a smartphone is assumed as the portable information terminal. Also, the IC card 2 is equipped with a fingerprint sensor as the acquisition unit 13, and only the main parts related to the registration of biometric information are shown in FIG. 2. S100: User 1 operates smartphone 3 to launch the application software (hereinafter referred to as "app") for registering biometric information to IC card 2. The app may also be set to launch automatically when IC card 2 is held over smartphone 3. S101: The app starts up, and the smartphone 3 and IC card 2 begin communicating. If IC card 2 does not have its own power supply, it can be activated by holding it over the wireless power supply area of ​​the smartphone 3 to receive wireless power via the smartphone 3's NFC communication function. Once IC card 2 is activated, the biometric information registration process also begins.

[0019] Next, S102: IC card 2 requests user data from smartphone 3. S103: Smartphone 3 transmits predetermined user data to IC card 2. At this time, the app can prompt the user to re-enter or select the user data. Alternatively, smartphone 3 may also store the user data and automatically transmit it when requested. S104: The processing unit of IC card 2 retrieves user data stored in the memory unit and compares it with the transmitted user data.

[0020] If the user attempting to register biometric information is a legitimate user, i.e., the person who applied for the card, then it is assumed that both user data will match, and the subsequent steps will be as follows. S105: IC card 2 sends a reply to smartphone 3 indicating that the data matches (OK). S106: Smartphone 3 sends a command to IC card 2 indicating that it is ready to read the fingerprint. S107: The processing unit sends a fingerprint reading standby signal to the fingerprint sensor, activating the fingerprint sensor.

[0021] In this case, to inform the user that the fingerprint sensor has been activated, an LED may be equipped on the surface of the IC card as a display and illuminated. S108: The user places their finger on the activated fingerprint sensor. S109: Reads fingerprint information using the fingerprint sensor and transmits it to the processing unit.

[0022] Next, S110: The processing unit performs appropriate conversion processing on the received fingerprint information, records it in the memory unit, and stores the fingerprint information. S111: The screen of smartphone 3 displays a message indicating that fingerprint registration is complete, allowing the user to know that the registration process has been successfully completed. In this way, users can easily and securely register biometric information such as fingerprints onto an IC card using their smartphones, even at home. The card can then be used as a biometrically authenticated IC card.

[0023] The registration steps described above are for legitimate users who register their biometric information. However, it is possible for someone other than a legitimate user of an IC card to illegally obtain the card, register their own biometric information on it using their smartphone, and attempt to misuse the IC card. This could occur through theft, finding, or borrowing. Since apps installed on smartphones are expected to be widely used and therefore installed on a large number of smartphones, such fraud is possible.

[0024] In contrast, the present invention can prevent the unauthorized registration of biometric information through the following steps. Specifically, the IC card used in the present invention stores information related to the user's mobile information terminal, which is specified by the user at the time of application, and this information is extremely difficult for anyone other than the applicant to know.

[0025] Based on Figure 2, we will extract and explain the relevant steps. S102: IC card 2 requests user data from smartphone 3. S103: Smartphone 3 transmits predetermined user data to IC card 2. At this time, the app can prompt the user to re-enter or select the user data. Alternatively, smartphone 3 may store the user data and automatically transmit it when requested. S104: The processing unit of IC card 2 retrieves user data stored in the memory unit and compares it with the transmitted user data.

[0026] If the user attempting to register biometric information is not a legitimate user, there is a high probability that the user data will not match. Therefore, the following steps should be taken. S105: IC card 2 sends a message to smartphone 3 indicating that the data does not match (NG). S106: Smartphone 3 sends an Application Block command to IC card 2, which stops all application software on the card and makes IC card 2 unusable.

[0027] As a result, biometric information cannot be registered to IC card 2, and it becomes unusable, thus preventing fraudulent use of the IC card.

[0028] Even if a user attempting to register biometric information is a legitimate user, there may be cases where the user data stored in the memory of IC card 2 does not match the user data transmitted from smartphone 3. For example, if the system is designed so that the user inputs or selects user data from the app in step S103 above, there is a possibility that the user may input or select data incorrectly. In such cases, simply disabling IC card 2, as in the case of fraudulent registration described above, would greatly impair the convenience of legitimate users.

[0029] In such a case, the following steps are performed as part of the recovery procedure. This will be explained with reference to Figure 3. These are the recovery steps for IC card 2, in which all application software on the card has been stopped by the Application Block command. S200: User 1 operates smartphone 3 to launch the app for registering biometric information on IC card 2. The app may also be set to launch automatically when the IC card is held over smartphone 3. S201: The app starts up, and the smartphone 3 and IC card 2 begin communicating. If IC card 2 does not have its own power supply, it can be activated by holding it over the wireless power supply area of ​​the smartphone 3 to receive wireless power via the smartphone 3's NFC communication function. Once IC card 2 is activated, the biometric information registration process also begins.

[0030] Next, S202: IC card 2 requests user data from smartphone 3. S203: Smartphone 3 transmits predetermined user data to IC card 2. At this time, the app may prompt the user to re-enter or select the user data. S204: The processing unit of IC card 2 retrieves user data stored in the memory unit and compares it with the transmitted user data.

[0031] If the user enters or selects accurate user data, both sets of user data will match. The subsequent steps are as follows: S205: IC card 2 sends a reply to smartphone 3 indicating that the data matches (OK). S206: Smartphone 3 sends an Application Unblock command to IC card 2, which unblocks all application software on the card and makes IC card 2 usable. S207: A message appears on the smartphone 3 screen indicating that biometric information can be re-registered. The user is then informed that they can register their biometric information again and can proceed with the registration process following the steps shown in Figure 2. Once registration is complete, IC card 2 can be used.

[0032] The Application Block and Application Unblock commands mentioned above are both standard commands defined in EMV. [Explanation of Symbols]

[0033] 1...User 2. 10.. IC card 3. Smartphone 11...Display section 12...Storage section 13...Acquisition part 14. Processing Unit 15. Communications Department 16...Power supply section

Claims

1. A method for registering biometric information to an IC card, An IC card has an acquisition unit for reading biometric information, a storage unit for storing information including biometric information, and a processing unit for performing biometric authentication processing. When issuing an IC card, the user specifies information related to their mobile device, which is then stored in the card's memory unit and issued. When an IC card user obtains an IC card and registers their biometric information to the IC card, they transmit information related to their mobile device from the mobile device to the IC card. The processing unit compares the information about the mobile device stored at the time of issuance with the information about the transmitted mobile device. If they match, permission is granted to register the biometric information. The acquisition unit reads the user's biometric information, and the read biometric information is recorded and registered in the storage unit. A method for registering biometric information to an IC card, characterized by stopping all application software on the IC card and rendering the IC card unusable if the information does not match.

2. For IC cards that become unusable because the information stored on the mobile device at the time of issuance does not match the information transmitted from the mobile device, the user can resend the information from their mobile device. The processing unit compares the information about the mobile device stored at the time of issuance with the information about the transmitted mobile device. The method for registering biometric information to an IC card according to claim 1, characterized in that if there is a match, the application software in the IC card is deactivated and the IC card becomes usable.

Images