JP2002109485A - Authentication device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication device which does not require much memory and reduces the tax for processing capabilities. SOLUTION: The processing device 4d collates and authenticates the personal feature information which was input by feature information input device 2d and the personal feature information read by IC card read/write device 3d through IC card 11. The processing device 4d also collates and authenticates the location history information read by location history information memory device 6 and the location history information read by IC card read/write device 3d from IC card 11.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication device using a portable storage medium such as an IC card.

[0002]

2. Description of the Related Art Conventionally, as an authentication device for authenticating an individual,
Information (personal characteristic information) such as a fingerprint, iris, face image, handwriting, vein pattern, voiceprint, DNA pattern, etc., which characterizes an individual, is input using an imaging means, a microphone, or the like, and is previously stored in the memory of the authentication device. 2. Description of the Related Art There is known an authentication device that performs authentication by collating with characteristic information of an individual who is performing authentication.

[0003]

In the conventional authentication apparatus, it is necessary to digitize characteristic information of each individual and store it in a memory in the authentication apparatus. However, personal characteristic information such as a fingerprint and a face image may become an enormous amount of information when digitized, and there is a problem that a large amount of memory resources in the authentication device are consumed. In addition, the matching process between the input personal characteristic information and the personal characteristic information stored in the memory is excessively burdensome because the amount of stored personal characteristic information is enormous. There is a problem.
The present invention has been made in order to solve the problems described above, and it is an object of the present invention to provide an authentication device that does not consume a large amount of memory resources and has a small processing load. I do.

[0004]

According to a first aspect of the present invention, there is provided an authentication apparatus as set forth in claim 1. The authentication device according to the first aspect has a feature information input device that inputs personal feature information such as a fingerprint, an iris, a face image, a handwriting, a vein pattern, a voiceprint, and a DNA pattern. The characteristic information input device is, for example, a device such as a scanner, a digital camera, a temperature sensor, a pressure sensor, an optical sensor, and a microphone. The authentication device according to claim 1 further includes a reading device and a processing device that read personal characteristic information stored in advance in a portable storage medium such as an IC card. Claim 1
In the authentication device described in (1), the processing device collates the individual characteristic information input to the characteristic information input device with the individual characteristic information read from a storage medium such as an IC card, and authenticates the individual. A second invention of the present application is an authentication device as described in claim 2. The authentication device according to claim 2, wherein personal identification information for specifying an individual and location history information are stored in a portable storage medium, and the information stored in the storage medium can be read or written. / Writing device, a location history information storage device for storing location history information corresponding to the personal identification information, and a processing device. The authentication device according to claim 2, wherein the processing device reads, from the location history information storage device, location history information corresponding to the personal identification information read by the reading device, and the location history information read by the reading device. Verify and authenticate. Further, when the authentication is performed, the authentication device described in claim 2 stores the location history information indicating the location where the authentication is performed in the storage medium and the location history information storage device. The third invention of the present application is an authentication device as described in claim 3. The authentication device according to claim 3, wherein the location history information stored in the storage medium and the location history information stored in the location history information storage device include time information. Information is included. The time information is information indicating a time when authentication is performed by the authentication device. In the authentication device according to the third aspect, the processing device collates the location information included in the location history information and also collates the time information to perform authentication. When the authentication is performed, time information is stored in the storage medium and the location history information storage device. The fourth invention of the present application is an authentication device as described in claim 4. An authentication device according to a fourth aspect is the authentication device according to the second or third aspect, wherein the storage medium stores personal characteristic information, and further inputs personal characteristic information. It has an input device. The authentication device according to claim 4, wherein the processing device is configured to output personal characteristic information input from the characteristic information input device,
Authentication by collation of the individual characteristic information read from the reading device is also performed.

[0005]

FIG. 1 is a diagram showing a first embodiment of the present invention. In the present embodiment, a portable IC card is used as a storage medium for storing personal characteristic information. In the first embodiment, as shown in FIG.
A characteristic information input device 2a for inputting personal characteristic information;
An IC card reader 3a (for example, an IC card reader or the like) that reads personal characteristic information stored in the C card 10, and performs processing such as collation of the read personal characteristic information with the inputted personal characteristic information. The authentication device 1a includes a processing device 4a and an external output device 5a that outputs a signal to the outside.
Is configured. Personal characteristic information includes fingerprints, irises,
This information is unique to the individual and can be used to identify the individual, such as a face image, handwriting, vein pattern, voiceprint, DNA sequence pattern, and the like. In the present embodiment, fingerprint information is used as personal characteristic information. The IC card 10 owned by the individual stores the characteristic information of the individual, for example, after performing processing such as digitization. In the present embodiment, fingerprint information is stored in the IC card 10. The characteristic information input device 2a may be any device that can convert individual characteristic information into an electric signal, such as a scanner, a digital camera, a temperature sensor, a pressure sensor, an optical sensor, and a microphone. In the present embodiment, a fingerprint reading scanner that reads fingerprint information and converts it into an electric signal is used as the feature information input device 2a. The processing device 4a includes a feature information input device 2a and an IC card reading device 3a.
And the external output device 5a.

Here, assuming a case where the authentication device 1a is used for restricting visitors to a certain facility A (not shown), one mode of operation of the authentication device 1a in the present embodiment will be described in detail. I do. In order to restrict the number of visitors to facility A, an IC card 10 is issued to a person who has the authority to enter facility A in advance. The IC card 10 is a so-called permit for entering the facility A, and is carried by the issued person. The IC card 10 includes the IC card 1
The fingerprint data of the holder 0 is stored. Fingerprint information is, for example, information in a format convenient for converting fingerprint information into electronic information by a scanner, digitizing the information into a computer, and performing data collation processing by image processing technology such as pattern recognition when necessary. And stored in the IC card 10. In addition to the fingerprint information, the IC card 10 may have an indirect number such as an employee number for identifying the owner of the IC card 10, a password, information on the seal imprint of the seal, and the like. You can also store information that is proof.

[0007] The individual who enters the facility A has the I
The C card 10 is inserted into the IC card reader 3a. I
The C card reader 3a reads fingerprint information stored in the IC card 10. Next, the IC card reader 3
“a” outputs the read fingerprint information to the processing device 4a.
The IC card reading device 3a may be a device that reads information stored in the IC card 10 in a non-contact manner using, for example, an optical unit.

[0008] An individual who enters facility A has
After inserting the C card 10 into the IC card reader 3a,
A finger is pressed against the characteristic information input device 2a. The characteristic information input device 2a reads the fingerprint information of the pressed finger, converts it into electronic information, digitizes it, and outputs it to the processing device 4a. The process of digitizing the fingerprint information may be performed by the feature information input device 2a or may be performed by the processing device 4a. Further, the IC card 10 may be inserted into the IC card reader 3a after a finger is pressed against the characteristic information input device 2a, or may be in any order. If necessary, the digitized fingerprint information can be processed into information in a format convenient for performing data collation processing by an image processing technique such as pattern recognition in the processing device 4a.

The processing device 4a includes an IC card reading device 3a
Is compared with the fingerprint information output from the feature information input device 2a, and it is determined whether or not both match. The determination as to whether or not the read fingerprint information matches the fingerprint information stored in the IC card is performed, for example, by performing data matching processing or the like, and determining whether or not the data matches with a predetermined probability or more. . Processing unit 4
When it is determined that the fingerprint information stored in the IC card 10 does not match the fingerprint information read by the feature information input device 2a, an electric signal indicating that the fingerprint information does not match is output to the external output device 5a. Or does not output the electric signal. On the other hand, when it is determined that they match, an electric signal indicating that they match is output to the external output device 5a.
Output to Various processes are performed by a device installed outside the authentication device 1a according to a signal output from the external output device 5a. For example, when a signal indicating that they do not match is output, an alarm is generated. If a signal indicating that they match is output, the gate is opened to permit entry.

FIG. 2 is a diagram showing a second embodiment of the present invention. In the second embodiment, as shown in FIG.
Characteristic information input devices 2b to 2d for inputting personal characteristic information
The IC card reading / writing devices 3b to 3d, the processing devices 4b to 4d, the external output devices 5b to 5d, and the location history information storage device 6 constitute an authentication device 1e.
The processing devices 4b to 4d include feature information input devices 2b to 2d
, IC card reading / writing devices 3b to 3d, and external output devices 5b to 5d, respectively. Further, the processing devices 4b to 4d each include a location history information storage device 6
And can read and write the location history information. Also in the second embodiment, fingerprint information is used as personal characteristic information, and a fingerprint reading scanner is used as the characteristic information input devices 2b to 2d. Further, the IC card reading / writing devices 3b to 3d can read and write the location history information of the IC card.

In the second embodiment, the authentication means 1b is installed at the entrance of the facility B, and the authentication means 1c and 1d having the same configuration as the authentication means 1b are installed at the entrances of the facilities C and D, respectively. Have been. In the present embodiment, a common IC card 10 is issued to facilities B, C, and D. If a common IC card 10 is issued to a person who has the authority to enter the facilities B, C, and D in advance, and the IC card 10 is authenticated by the authentication means 1b, 1c, and 1d, the facilities B, C, and You can enter D respectively. The facilities B, C, and D are, for example, a plurality of facilities existing on the premises of the same company, a plurality of meeting rooms and laboratories existing in the same facility, and the like. Used when restricting.

In the second embodiment, each of the authentication means 1b to
When the individual is authenticated in 1d, information indicating the time and location at which the individual was authenticated is recorded and stored in the location history information storage device 6. For example, when the IC card 10 possessed by a certain individual is inserted into the IC card reading / writing device 3d, the processing device 4d determines the possession of the IC card 10 from the personal identification information such as the employee number stored in the IC card 10. Identify the person. The processing device 4d allows the holder of the IC card 10 to:
The time (month, day, hour, minute, second) when the IC card 10 was inserted into the IC card reading / writing device 3d and the information indicating the location of the processing device 4d that performed the authentication processing are stored in a location history information storage device. Record in 6. That is, the IC card 10
Is stored in the place history information storage device 6 as place history information on when and where the individual carrying the authentication was performed. At the same time, the processing device 4d writes location history information (month, day, hour, minute, second) to the IC card 10 inserted in the IC card reading / writing device 3d. Writing of the location history information to the location history information storage device 6 and the IC card 10 may be performed at any time of the authentication processing. In the present embodiment, the writing is performed at the time of completion of the authentication processing.

Here, it is assumed that an individual enters facility D at 8:20 on July 4. When authenticating an individual, the processing device 4d accesses the location history information storage device 6 and reads out location history information of the individual. Also, IC
The location history information recorded on the card 10 is read by the IC card reading / writing device 3d. For example, when a certain individual inserts the IC card 10 into the IC card reading / writing device 3d in order to enter the facility D, the processing device 4d performs the authentication process using the IC card 10 by the previous time. The time and place at which the operation was performed are stored in the
And read from the IC card 10. Here, it is assumed that the location history information read from the location history information storage device 6 is as follows. (Location history information storage device 6) NO. Time Location 1 7/3 08:25 B 27/2 08:19 C 3 7/1 08:27 B 4 6/30 08:10 D Also, from IC card 10 It is assumed that the read location history information is as follows. (IC card 10) NO. Time Location 1 7/3 08:25 B 27/2 08:19 C 37/1 08:27 B46 / 30 08:10 D In the above, shown in the column of NO. The numbers shown indicate that the four pieces of information are arranged in the newest order as the location history information. In addition, the holder of the IC card indicates that the authentication was performed at the time indicated in the time column at the location indicated in the location column, and the information indicated in the time column indicates the time information. Correspondingly, the information shown in the location column corresponds to the location information.
In the above, since the place history information read from the place history information storage device 6 and the place history information read from the IC card 10 match, the individual performing authentication is
The processing device 4d determines that the card is a valid holder of the card 10, and outputs a signal to that effect to the external output device 5d.
After the above-mentioned authentication processing is completed, the processing device 4d records the time and place of the authentication in the place history information storage device 6 and the IC card 10, and the place history information is updated as follows. (Location history information storage device 6) NO. Time Location 1 7/4 08:20 D 2 7/3 08:25 B 3 7/2 08:19 C 4 7/1 08:27 B (IC card 10) NO Time Location 1 7/4 08:20 D 2 7/3 08:25 B 3 7/2 08:19 C 4 7/1 08:27 B

Here, the IC card 1 possessed by the individual
Assume that 0 has been stolen by a third party. The individual has I
It is assumed that the IC card 11 has been reissued separately, noting that the C card 10 has been stolen. Here, the IC card 11
In addition to personal identification information such as employee numbers,
The location history information recorded so far at 0 is also restored and recorded by reading from the location history information storage device 6 or the like. If the individual has completed authentication using the authentication means 1d at 8:30 on July 5 using the reissued IC card 11, and entered the facility D, the location history information storage device 6 and the IC Place history information is recorded on the card 11 as follows. (Location history information storage device 6) NO. Time Location 1 7/5 08:30 D2 7/4 08:20 D3 7/3 08:25 B4 7/2 08:19 C (IC card 11) NO Time Place 1 7/5 08:30 D 2 7/4 08:20 D 3 7/3 08:25 B 4 7/2 08:19 C Here, the person who stolen the IC card 10 is authenticated, for example. Attempts to enter facility C by means 1c
It is assumed that the IC card 10 is inserted into the card reading / writing device 3c. Then, the processing unit 4c reads the location history information from the location history information storage device 6 and the IC card 10 as follows. (Location history information storage device 6) NO. Time Location 1 7/5 08:30 D2 7/4 08:20 D3 7/3 08:25 B4 7/2 08:19 C (IC card 10) NO Time Location 1 7/4 08:20 D 2 7/3 08:25 B 3 7/2 08:19 C 4 7/1 08:27 B In the above, the location history information read from the location history information storage device 6 Does not match the location history information read from the IC card 10, the processing device 4c determines that the person performing the authentication is not a valid holder of the IC card 10, and outputs a signal indicating this to an external output. Output to the device 5c.
Then, an operation such as generating an alarm can be performed by a device installed outside the authentication unit 1c.

In the second embodiment, the IC card 10
Between the time the third person stolen the IC card 10 by a third party and the time the third person receives the reissue of the IC card 11, the stolen third party may abuse the IC card 10. Therefore, immediately after the person who has stolen the IC card 10 notices that the IC card 10 has been stolen, the person contacts the management center or the like that manages the authentication device 1e by telephone and authenticates the IC card 10 by the authentication means 1b, 1c, and 1d. Is not performed, the reliability of the authentication device 1e is further improved. When the IC card 11 is reissued, the location history information stored in the IC card 10 until it is stolen can be changed and stored in the location history information storage device 6 and the IC card 11. . For example, the place and time at which the IC card 11 was reissued are additionally stored as place history information, or all the place history information stored in the place history information storage device 6 is deleted.
There is a method of storing the subsequent location history information in the IC card 11 and the location history information storage device 6 from the beginning. By doing so, the third party who stolen the IC card 10
If the user attempts authentication by the authentication means 1b to 1d, the IC card 10 and the location history information stored in the location history information storage device 6 no longer match each other, and the stolen IC card 10 is illegally used. Can be prevented.

In the second embodiment, the processing devices 4b to 4b
d is connected to one place history information storage device 6,
As shown in FIG. 3, each of the location history information storage devices 6
b to 6d may be provided and connected. In this case, the processing devices 4b to 4d are connected by the communication line 7, and the location history information stored in the location history information storage devices 6b to 6d provided in each of the processing devices 4b to 4d is exchanged with each other. Make the configuration possible. For example, place history information indicating an entry history of a certain person to the facility B is stored in the place history information storage device 6b, but the processing device 4c provided in the facility C is transmitted from the processing device 4b via the communication line 7. The location history information can be received. Further, in the second embodiment, in the verification of the location history information, only the time information included in the location history information may be performed, or only the location information may be verified. In the second embodiment, authentication processing is performed by storing personal fingerprint information (personal characteristic information) in an IC card and collating the personal fingerprint information (personal characteristic information) shown in the first embodiment. Can also be combined.

[0017]

According to the first aspect of the present invention, there is no need to previously store personal characteristic information in the memory of the authentication device, and an authentication device that does not consume a large amount of memory and has a small processing load can be realized. According to the second aspect of the present invention, authentication is performed with a small amount of information in order to collate the location history information recorded in the location history information storage device with the location history information recorded in a portable storage medium such as an IC card. Therefore, it is possible to realize an authentication device with a small processing load without consuming a large amount of memory. According to the third aspect of the present invention, since the time information is included in the location history information, it is possible to realize a highly reliable authentication device that can detect unauthorized intrusion with higher accuracy. According to the fourth aspect of the present invention, authentication is performed by comparing personal characteristic information and location history information, so that an unauthorized intrusion can be detected with higher accuracy. realizable.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of an authentication device according to a first embodiment.

FIG. 2 is a configuration diagram of an authentication device according to a second embodiment.

FIG. 3 is a configuration diagram of an authentication device connected by a communication line.

[Explanation of symbols]

 1a, 1e: Authentication device 1b, 1c, 1d: Authentication means 2a, 2b, 2c, 2d: Feature information input device 3a: IC card reader 3b, 3c, 3d: IC card reader / writer 4a, 4b, 4c 4d Processing device 5a, 5b, 5c, 5d External output device 6, 6b, 6c, 6d Location history information storage device 7 Communication line 10, 11 IC card

Claims (4)

[Claims] 1. A portable storage medium that stores personal characteristic information, a characteristic information input device that inputs personal characteristic information, a reading device that reads information stored in the storage medium, and a processing device. An authentication device that performs authentication by comparing feature information input by the feature information input device with feature information read by the reading device. 2. A portable storage medium storing personal identification information for identifying an individual and place history information, a read / write device capable of reading or writing information stored in the storage medium, and personal identification. A location history information storage device that stores location history information corresponding to information, and a processing device, wherein the processing device stores the personal identification information read by the reading device stored in the location history information storage device. Authentication is performed by collating the corresponding location history information with the location history information read by the reading device, and when the authentication is performed, the location history information indicating the authenticated location is stored in the storage medium and the location. An authentication device stored in a history information storage device. 3. The authentication device according to claim 2, wherein the location history information stored in the storage medium and the location history information stored in the location history information storage device include time information. An authentication device that performs time information collation and, when authentication is performed, stores time information indicating a time of the authentication in the storage medium and the location history information storage device. 4. The authentication device according to claim 2, wherein the storage medium stores personal characteristic information, and further includes a characteristic information input device for inputting personal characteristic information. The authentication device, wherein the processing device also checks the feature information input by the feature information input device and the feature information read by the reading device.