CN102831724B - Automatic trading apparatus, organism authentication unit and biometric authentication method - Google Patents

Abstract

The automatic transaction device, the biometric authentication unit, and the biometric authentication method of the present invention, in the method of placing the finger when the biometric information is registered due to forgetting, or when the permanent registration such as registration is performed in an inappropriate state, the cause of failure, the finger If authentication fails due to temporary personal reasons such as damage, foreign matter or dirt attached to the finger, even if re-authentication is performed, it is likely to be judged as authentication failure. When the degree of consistency of the biometric information is insufficient even if the inferred cause of the low degree of consistency and the improvement plan of the finger placement method are implemented, and the cause of the non-improvement is a cause of failure at the time of registration, it is used at the time of registration of the comparison biometric information Re-registration of biometric information and transaction processing are performed on the basis of the identity verification information submitted by the user. On the other hand, if the cause of non-improvement is a temporary personal reason, since it cannot be resolved at that time, the identity verification data is read and compared for confirmation, and then shifts to restricted transactions.

Description

Automatic transaction device, biometric authentication unit, and biometric authentication method

This application is a divisional application of the Chinese patent application with the Chinese application number 201210105360.9 and the invention title is "automatic transaction device, biometric authentication unit and biometric authentication method".

technical field

The present invention relates to an automatic transaction device, a biometric authentication unit for biometric authentication, and a biometric authentication method.

Background technique

In financial institutions, biometric authentication using biometric information such as fingerprints, iris, and finger veins is used as a method of identity verification in transactions at automatic transaction devices (hereinafter referred to as ATMs). Biometric authentication is a highly secure method, but there are cases where the user's own authentication fails and transactions cannot be performed.

As a countermeasure against the above, in the case of the biometric authentication system described in Patent Document 1, when the degree of matching of the biometric information is insufficient, a transaction (hereinafter referred to as “transaction” with a limited amount or number of transactions) is performed according to the level of the degree of matching. for restricted transactions). In addition, in the case of the biometric authentication system described in Patent Document 2, when the consistency of the biometric information is insufficient, the cause and the improvement plan for the placement method (placement method, position, etc.) of the finger are guided and displayed, and the user is notified. Re-authentication is performed after repositioning the finger, thereby increasing the success rate of biometric authentication.

prior art literature

patent documents

Patent Document 1: Japanese Patent Laid-Open No. 2007-048118

Patent Document 2: Japanese Patent Laid-Open No. 2009-009434

Summary of the invention

The technical problem to be solved by the invention

However, in the case of the conventional biometric authentication system, it is impossible to grasp the real-time change of the matching degree of the biometric information and to take appropriate improvement measures. In addition, when you forget how to place your finger when registering biometric information, or register in an inappropriate state (permanent cause of failure during registration), or when your finger is injured, or foreign objects or dirt are attached to your finger If authentication fails due to other reasons (temporary personal reasons), even if biometric authentication is performed again with the same finger, the matching degree of biometric information may not increase and repeated authentication may fail.

Contents of the invention

Therefore, the object of the present invention is to provide an automatic transaction device, a biometric authentication unit, and a biometric authentication method, in the case of judging whether the user is suspicious based on the degree of consistency of the biometric information (authentication is unsuccessful but possible) In the case of the user himself), the convenience of the user can be improved by performing re-registration of biometric information or restricting transactions.

The first technical solution of the present invention is an automatic transaction device, which is characterized in that it includes: a card reader for reading the IC card of the person to be authenticated; The first personal information of the body information is read; the display unit displays the display data corresponding to the above-mentioned authentication object; and the control unit controls the overall operation of the device. The first personal information read by the acquisition unit is compared with the first personal information of the authentication target person recorded in the above-mentioned IC card in advance. Change for a certain period of time, output display data to the above-mentioned display unit, the display data indicating the change of the placement method of the biometric body of the above-mentioned authentication object with respect to the above-mentioned first reading unit; When the matching degree is lower than the first threshold value for permitting the biometric authentication, the reason for the low matching degree is determined, and display data including the reason is output to the display unit.

The second technical solution of the present invention is the automatic transaction device according to technical solution 1, wherein the control unit has a pre-recorded first personal information in the first personal information read by the first reading unit. In the case of the feature in the reading unit or the IC card, it is determined that the cause of the low matching degree is the first personal information read by the first reading unit.

A third technical solution of the present invention is the automatic transaction device according to technical solution 1 or 2, wherein the control unit does not have a pre-recorded personal information in the first personal information read by the first reading unit. In the case of the characteristics of the first reading unit or the above-mentioned IC card, and the above-mentioned degree of matching is lower than the second threshold value lower than the above-mentioned first threshold value, it is determined that the reason for the low degree of matching is that the first reading unit The first personal information read.

A fourth technical solution of the present invention is the automatic transaction device according to the third technical solution, wherein, when the matching degree is higher than the second threshold value, it is determined that the matching degree is low because it is pre-recorded in the above-mentioned IC. The above first personal information in the card.

The fifth technical solution of the present invention is the automatic transaction device according to the technical solution 1 or 2, which is characterized in that it has a second reading unit that reads the second personal information; If the second personal information matches the second personal information of the person to be authenticated registered in the above-mentioned IC card in advance, and the cause of the low degree of matching is the biometric information of the person to be authenticated registered in the above-mentioned IC card in advance, the The first personal information read by the first reading unit is recorded in the IC card.

A sixth technical solution of the present invention is the automatic transaction device according to the fifth technical solution, wherein the control unit records the first personal information read by the first reading unit on the IC card. , and perform transaction processing based on the input operation of the above-mentioned authentication object person.

A seventh technical means of the present invention is the automatic transaction device according to the fifth technical means, wherein the read second personal information does not match the second personal information of the person to be authenticated registered in the IC card in advance. In this case, the transaction processing is restricted compared with the case where the read second personal information matches the second personal information of the person to be authenticated registered in the IC card in advance.

An eighth technical solution of the present invention is a biometric authentication unit that reads biometric information of a person to be authenticated to perform biometric authentication, and is characterized in that it includes a card reader for reading an IC card of a person to be authenticated. The first reading unit reads the first personal information as the biometric information of the person to be authenticated; the output unit outputs various information about biometric authentication to the outside of the biometric authentication unit; and a control unit that controls the biometric authentication unit, wherein the control unit acquires the first personal information read by the first reading unit and the authentication target person recorded in advance in the IC card at regular intervals. The distribution of the degree of coincidence compared with the first personal information, and according to the change in the distribution of the degree of coincidence every certain time, the output part outputs information indicating the above-mentioned authentication with respect to the above-mentioned first reading part Change of the placement method of the biometric body of the subject; when the above-mentioned matching degree is lower than the first threshold value for permitting the above-mentioned biometric authentication after a predetermined time has elapsed, the cause of the above-mentioned low matching degree is judged, and the Information including the cause is output through the output unit.

A ninth technical solution of the present invention is a biometric authentication method for performing biometric authentication by reading the biometric information of the person to be authenticated, characterized in that it includes the following steps: A step of reading personal information: obtaining the first one of the first personal information read by the first reading unit and the authentication target person pre-recorded in the IC card every certain time. a step of the distribution of the degree of coincidence of the person information compared; a step of outputting information indicating the identity of the person to be authenticated with respect to the first reading unit according to changes in the distribution of the degree of coincidence every certain period of time Changes in the placement of the biometric body; and when the degree of identity is lower than the first threshold value for permitting the biometric authentication after a predetermined period of time has elapsed, the cause of the low degree of identity is judged, and the cause will be included information output steps.

Means used to solve technical problems

In order to solve the above-mentioned technical problems, in the case where the degree of consistency between the biological information obtained during authentication (hereinafter referred to as authentication data) and the template of registered biological information (hereinafter referred to as registration data) does not reach the prescribed judgment value Next, the estimated cause of the low agreement and the improvement plan of the finger placement method are displayed in real time. If the consistency of the biometric information is insufficient even through improvement measures, and if the reason for the non-improvement is a failure at the time of registration, the identity verification data (permit, resident re-registration of biometric information and transaction processing on the basis of basic account cards, passports and other media in which personal information is stored in IC chips, and mobile terminals equipped with IC chips). On the other hand, if the reason for not being improved is a temporary personal reason, since it cannot be solved at that time, after reading and checking the personal identification data, it moves to restricted transaction.

Invention effect

According to the present invention, when the biometric authentication fails even if the finger placement method is improved, and the cause is a permanent fault at the time of registration, the biometric information is re-checked on the basis of checking the identity verification data. register. Therefore, the success rate of biometric authentication is significantly improved and authentication failures are reduced. In addition, even if the biometric authentication fails, the user may be the person himself, and since transactions can be performed, the user's convenience is improved.

Description of drawings

FIG. 1 is a block diagram showing the configuration of an ATM.

Fig. 2 is a schematic diagram of a biometric authentication processing system.

FIG. 3 is a block diagram showing the configuration of a biometric authentication unit.

4 is a block diagram showing the configuration of an IC chip included in the IC card.

Fig. 5 is a flowchart of biometric authentication and transaction processing.

Fig. 6 is an example of a guidance screen for transaction selection.

FIG. 7 is an example of an authentication finger placement guidance screen.

FIG. 8 shows an example of a finger vein image read by a vein reader.

Fig. 9 is an example of different blocks of degrees of agreement of biometric information.

FIG. 10 is an example of a guidance screen for transitioning to an authentication support mode.

FIG. 11 is an example of a table recording withdrawal limits.

Fig. 12 is a flowchart of the authentication support mode.

FIG. 13 is an example of a caution screen when reading biometric information.

FIG. 14 is an example of a display screen in the authentication support mode (when the finger is turned).

FIG. 15 is an example of a display screen in the authentication support mode (when the finger is pressed).

FIG. 16 is an example of a table in which characteristics of biometric information images are recorded.

Description of reference symbols

101: ATM, 102: Finger vein reader, 103: Display, 104: Touch screen, 105: Card processing mechanism, 109: Non-contact IC reader, 110: Main control unit, 112: IC chip reading and writing unit, 113 : CPU, 114: Memory, 116: Recording section, 119: Biometric authentication unit, 201a: IC card, 201b: Identity verification data, 202: User, 301a: IC chip of IC card, 301b: IC of identity verification data Chip, 401: Scanner, 402: Feature extraction function section, 403: Authentication function section, 404: Registration function section, 504: Biometric information area, 505: Registration data, 509: Personal verification information, 801: Finger, 900: finger vein image

Detailed ways

First, the basic configuration of this embodiment will be described using FIGS. 1 to 4 . Also, in this embodiment, an example using finger vein information as biometric information will be described.

Fig. 1 is a block diagram showing the configuration of ATM 101 provided with a biometric authentication unit. The ATM 101 is equipped with: a finger vein reader 102 that reads the user's finger vein image; a display (display unit such as a liquid crystal display) 103 that displays transaction guidance to the user; a touch panel (input unit) that accepts operation input for transactions. ) 104; the card processing mechanism 105 for processing the inserted card; the banknote deposit and withdrawal mechanism 106 for processing banknotes such as banknote deposit and withdrawal; the transaction list printing mechanism 107 for printing the transaction list; Passbook printing mechanism 108; non-contact IC reader 109 for reading identity verification materials (permits, basic resident account cards, passports and other media with personal information stored in IC chips, and mobile terminals equipped with IC chips); control The main control part 110 which operates the whole ATM101.

The card processing mechanism 105 includes: a magnetic stripe reading and writing unit (hereinafter referred to as a magnetic stripe RW unit) 111 for reading and writing data to the magnetic stripe (MagneticStripe (MS)) of the card; An IC chip read/write unit (hereinafter referred to as an IC chip RW unit) 112 for reading and writing data by the IC chip.

In addition, the main control unit 110 includes: a CPU 113 that controls each process; a memory 114 such as RAM (Random Access Memory) that temporarily stores various data such as programs for executing each process and transaction information before the transaction is established; A communication unit 115 for sending and receiving data; a recording unit 116 such as HDD (Hard Disk Drive) for sequentially storing transaction information with a user after the transaction is established; and a power supply 117 .

In this embodiment, the biometric authentication unit 119 is formed by combining the finger vein reader 102 , the card processing mechanism 105 , the non-contact IC reader 109 , and the main control unit 110 in the above configuration. The biometric authentication unit 119 can be controlled by the main control unit 110 as described above, but it is also possible to control each unit (finger vein reader 102, card processing mechanism, etc.) 105, and a non-contact IC reader 109).

FIG. 2 is a schematic diagram of a biometric authentication system including ATM101. The ATM 101 is equipped with a person camera 118 on the front upper part of the face image of the user 202 who brings the IC card 201a and identity verification data 201b, and a finger vein is provided on a mounting table provided at the right end of the user's 202 operation surface. A reader 102 and a non-contact IC reader 109 . ATM101 is connected to the host computer 203 installed in the office center via the network 200 of a financial institution. In addition, the host computer 203 includes a database 204 storing account information data of the user 202 and the like.

FIG. 3 is a block diagram showing the configuration of main parts of the biometric authentication unit 119 . When the IC card 201 a is inserted into the card processing mechanism 105 , the IC chip 301 a provided on the IC card 201 a communicates with the IC chip RW unit 112 via contacts (not shown) provided on the surface thereof. During biometric authentication, when the user 202 puts the finger on the finger vein reader 102, the scanner 401 reads the finger vein image, and the feature extraction function part 402 extracts the feature of the finger vein from the finger vein image, and compares the finger vein with the finger vein image. The data related to the characteristics of , is output as biometric information for authentication (hereinafter referred to as authentication data). The authentication function unit 403 outputs the authentication data to the IC chip 301a via the main control unit 110 and the IC chip RW unit 112 . The IC chip 301a compares and collates a template of registered biometric information (hereinafter referred to as registration data) and authentication data to perform authentication processing. In addition, the registration function part 404 of the finger vein reader 102 is used when writing and registering the registration data which extracted the characteristic of the read finger vein image to the IC chip 301a.

As described above, by configuring the IC chip 301a to perform the authentication process, the registration data registered in advance for each user 202 who is an authentication target can not be output to the outside of the IC chip 301a, so the security of the registration data can be improved.

And, the IC chip 301b mounted on the identity verification document 201b is read by the non-contact IC reader 109 installed independently from the card processing mechanism 105 . In the case of the non-contact IC reader 109, unlike the card processing mechanism 105 (the IC chip 301a can be read by contacting the IC chip RW portion 112 with the IC chip 301a), the IC chip 301b in the identity verification document 201b close so that the IC chip 301b can be read.

FIG. 4 is a block diagram showing the configuration of the IC chip 301a included in the IC card 201a. The IC chip 301 a as a removable storage medium includes a CPU 501 of a CPU, a communication unit 502 , a biometric AP (application program) 503 , a biometric information area 504 , a bank AP 506 , account information data 507 , and other APs 508 . CPU501 controls the whole IC chip 301a. The communication unit 502 communicates with the IC chip RW unit 112 of the card processing mechanism 105 shown in FIG. 3 . The biometric AP 503 is a biometric that is part of the biometric authentication process for comparing the authentication data read from the user 202 with the registered data 505 when performing registration and authentication processing of the registered data 505 in the biometric information area 504 Certification program. Bank AP 506 is a program for reading account information data 507 . In addition, another AP 508 that performs processing such as credit (credit) for each financial institution may be incorporated in the IC chip 301a.

The biometric information area 504 is divided into multiple areas, and stores the registration data 505 as the biometric information (registered biometric information) of the user 202, and the classification and personal identification of the identification data 201b presented by the user 202 at the time of registration. Information 509 such as a serial number, the cumulative number of biometric authentication processing times 510 which is the number of times the biometric authentication process was performed at the time of transaction at the ATM 101, the cumulative number of biometric authentication failures 511 which is the number of times the biometric authentication failed, The last authentication result 512 and the like of the result of the biometric authentication in the transaction.

The fact that the number of times of biometric authentication processing 510 in the biometric information area 504 is "0" indicates that the user 202 performs biometric authentication for the first time after issuance of the IC card 201a. The last authentication result 512 stores the transaction completed in the state where the biometric authentication succeeded without retrying the authentication process at the previous authentication, succeeded in the biometric authentication through the retried authentication process, or failed in the biometric authentication. Thereby, it can be judged whether or not the user 202 is accustomed to biometric authentication.

Next, the specific process of the biometric authentication process in ATM101 is demonstrated.

FIG. 5 is a flow chart showing a state of performing biometric authentication using the IC card 201a registered with finger vein information and performing a withdrawal transaction as an example of transaction processing. When the CPU 113 of the main control unit 110 (hereinafter referred to as the main control unit 110 ) detects the approach of the user 202 through the customer detection sensor (not shown) provided on the ATM 101 , the welcome screen is displayed on the display 103 , followed by the display. A guide screen 700 for transaction selection as shown in FIG. 6 . When the user 202 selects "withdrawal" from the guidance screen (S601), and inserts the IC card 201a into the card processing mechanism 105 (S602), the magnetic stripe RW unit 111 reads whether or not the IC chip recorded on the magnetic stripe is mounted. 301a, when the IC chip 301a is mounted, the IC chip RW unit 112 reads the account information data 507 recorded on the IC chip 301a. And, after detecting that the IC card 201a has been inserted into the card processing mechanism 105, the main control unit 110 causes the person camera 118 to take a picture of the face image of the user 202, and stores the face image of the user 202 in the recording unit. 116 (S603).

The main control unit 110 displays on the display 103 a guidance screen 800 in which the finger of the authentication subject is placed on the finger vein reader 102 as shown in FIG. 7 . When it is detected that the user 202 who confirmed the guidance screen 800 puts a finger on the finger vein reader 102 ( S604 ), the finger vein reader 102 reads a finger vein image ( S605 ). Extract feature points of the finger vein from the read finger vein image, thereby generating authentication data ( S606 ).

FIG. 8 is a diagram showing an example of finger vein information of the user 202 read by the characteristic function extraction unit 402 of the finger vein reader 102 . Based on the finger vein image 900 read from the user's finger 801 , feature points of the finger vein are extracted by the feature extraction function unit 402 and output as authentication data for the entire finger 801 . Furthermore, the finger vein image 900 is divided into 3 divisions (fingertip, center, root) in the vertical direction and 3 divisions in the left-right direction (left, middle, right), and is divided into nine blocks 901-909 in total. Extract feature points and output authentication data. The feature points are classified into endpoints, intersections, inflection points, etc. of the finger vein image 900, and information such as position coordinates, distances, directions, etc., with a bifurcation point near the center at the base of the finger vein image 900 as a reference point. In addition, the number of blocks to be divided and the number of feature points to be extracted may not be constant values, and may be changed according to users and blocks.

Returning to FIG. 5 , after extracting the feature points of the finger vein image 900 , the main control unit 110 sends the generated authentication data to the IC chip 301 a via the IC chip RW unit 112 . The CPU 501 of the IC chip 301a executes the living body AP 503 . The CPU 501 reads out the registration data 505 ( S607 ), and sequentially compares and collates the degree of agreement between the authentication data and the registration data 505 ( S608 ). Based on the comparison and collation results, as shown in FIG. 9 , the coincidence degree AT for the entire area and the coincidence degrees A0 to A8 for each block are calculated ( S609 ). The degree of agreement refers to the proportion of the registration data read from the IC chip 301a and the authentication data generated in S606. In this embodiment, the degrees of agreement AT of the entire authentication data area and the degrees of agreement A0 to A8 for each block shown in FIG. 9 are calculated.

The CPU 501 checks whether or not the coincidence degree AT of the entire area is greater than or equal to a predetermined value (for example, 80%) (S610), and if it is greater than or equal to the predetermined value (80%), it is determined that biometric authentication is OK (biometric authentication has been successful), A signal conveying this is output to the main control unit 110 via the communication unit 502 . Thereafter, the main control unit 110 performs transaction processing shown below (S611a to g). That is to say, after accepting the input operation of the password (S611a), accepting the input operation of the withdrawal amount (S611b) and accepting the confirmation operation (S611c), the main control unit 110 communicates with the main computer 203 of the office center to perform the password, Verification of withdrawal amount (S611d). When there is no problem with the password and the withdrawn amount (S611e: Yes), the withdrawal process is performed (S611f), the IC card is returned (S611g), and the process ends. In addition, if there is a problem with the password and the withdrawal amount (S611e: No), the main controller performs the processing after S611a. In the transaction process described above, since the biometric authentication is OK, as shown in FIG. 11 , it becomes a "normal transaction" which is a transaction in which the withdrawal limit is set to a high amount.

On the other hand, if the matching degree AT of the entire area is less than a predetermined value (80%) in S610 , CPU 501 checks whether 5 seconds have passed since the start of the authentication process ( S612 ). If 5 seconds have not passed (S612: No), CPU501 performs the process after S605 together with the main control part 110. That is to say, the main control unit 110 re-reads the finger vein image 900 of the finger 801 placed on the finger vein reader 102 multiple times to generate authentication data and output it to the IC chip 301a, and the CPU 501 compares the authentication data and the registration data to calculate Consistency. In addition, in S610, when the degree of agreement AT of the entire area is less than a predetermined value (80%), if 5 seconds have elapsed since the start of the authentication process (S612: Yes), the CPU 501 causes the communication unit 502 to update the entire area. The information of the matching degree AT is output to the main control unit 110 .

When the received matching degree AT of the entire area is less than 50% (S613: No), the main control unit 110 also considers, for example, a low-level error by the user 202, such as a low-level error such as placing an unregistered index finger even though the middle finger is registered. , and therefore a warning such as “Please confirm if it is different from the registered finger” is displayed on the display 103 (S614). After confirming that the finger 801 of the user 202 is off the finger vein reader 102 through the scanner 401 of the finger vein reader 102 (S615: Yes), the main control unit 110 returns to S604 and waits until until the user 202 places the finger 801 again. In addition, in the case of this embodiment, the processing after S604 is repeated until the degree of agreement AT of the entire area reaches 50% or more, but if the user 202 is not the user himself, no matter how many times the degree of agreement AT of the entire area is performed. There is a high probability that it will not be able to reach more than 50%. Therefore, even if the processing after S604 is performed a predetermined number of times (for example, three times) and the degree of agreement AT cannot reach 50% or more, the transaction may be suspended.

On the other hand, when the degree of agreement AT of the entire area received is 50 to 80% (a value that is suspicious whether the finger vein image 900 is an image of the user 202) (S613: Yes), as shown in FIG. 10 Then, the main control unit 110 displays the screen 1100 for selecting whether to transition to the “authentication support mode” that supports the user 202 in improving the matching degree in finger vein reading ( S616 ). When the user 202 presses the "no transfer" button 1102 to cancel the biometric authentication (S617: No), transfer to "restricted transaction 1" where the withdrawal limit is limited.

FIG. 11 shows the correspondence between transaction types 1201 and withdrawal limits 1202 , and is recorded in the memory 114 of the main control unit 110 as a table 1200 . In the case of "normal transactions", set the withdrawal limit to a high amount (3 million yen/day). In addition, "restricted transaction 1" is a transaction in which only user authentication is performed by a magnetic stripe or an IC chip, and is less secure than "restricted transaction 2" described later and a transaction in which biometric authentication succeeds. Therefore, the withdrawal limit is set to a low amount (100,000 yen/day in the case of magnetic stripe authentication, and 300,000 yen/day in the case of IC card authentication).

In the selection screen 1100 for selecting whether to transfer to the "authentication support mode", when the user 202 presses the button 1101 of "transition to the "authentication support mode"" (S616: Yes), the main control unit 110 displays the The shown "authentication support mode" transition (S618).

FIG. 12 is a flowchart showing processing in the authentication support mode. The main control unit 110 displays on the display 103 the general precautions 1400 for finger vein reading shown in FIG. 13 ( S1301 ). The biometric information area 504 of the IC chip 301a is read, and as a result, when the biometric authentication processing count 501 is "0" (the user performs biometric authentication for the first time), and it is determined from the previous authentication result 512 that the user is not When customizing biometric authentication, it is preferable to output detailed precautions as voice guidance in addition to displaying the precautions on the display 103 .

Like the graph 1501 shown in the upper part of FIG. 14, the main control part 110 displays the degree of coincidence AT of the whole area as a graph, and always displays it on the display 103 of ATM101 in real time (S1302). In addition, the lower part of FIG. 14 shows blocks with a low degree of coincidence, the estimated cause of the low degree of coincidence, improvements in how to place fingers, and the like, and details thereof will be described later.

In the graph 1501 in the upper part of FIG. 14 , numerical values indicate the degree of agreement, but the display is not limited to this, and qualitative expression and color display may be performed without displaying specific numerical values. For example, it can be displayed as "orange" when the degree of consistency is significantly insufficient (the degree of consistency AT of the entire region is more than 50% and less than 65%), and it can be displayed as "orange" when the degree of consistency is not significantly insufficient (the degree of consistency AT of the entire region is More than 65% and less than 80%) is displayed as "yellow", in the case of consistency (the consistency of the entire area AT is more than 80% and less than 85%) is displayed as "green", in the case of very consistent (the entire area The degree of agreement AT is above 85%) is displayed as "blue".

The finger vein reader 102 performs reading of a finger vein image ( S1303 ). Authentication data is generated by extracting feature points of the finger vein from the read finger vein image ( S1304 ).

The main control unit 110 transmits the generated authentication data to the IC chip 301a via the IC chip RW unit 112 . The CPU 501 of the IC chip 301a executes the living body AP 503 . The CPU 501 reads out the registration data 505 ( S1305 ), and sequentially compares and collates the degree of agreement between the authentication data and the registration data 505 ( S1306 ).

The CPU 501 checks whether the matching degree AT of the entire area is greater than or equal to a predetermined value (for example, 80%) (S1307), and if it is greater than or equal to the predetermined value (80%), it determines that the biometric authentication is OK (biometric authentication is successful). Even if the biometric authentication is OK, there may be cases where the user 202 wants to confirm the placement method of the finger 801 with the highest matching degree AT of the entire area. Therefore, as shown in FIG. Exit from the finger vein reader 102 (S1308). When the finger 801 is released, a signal indicating this is output to the main control unit 110 via the communication unit 502 . Thereafter, the main control unit 100 performs transaction processing as "normal transaction" (withdrawal limit: 3 million yen/day) (S611a to g).

On the other hand, when the matching degree AT of the entire area is less than the predetermined value (80%), the main control unit 110 checks whether 15 seconds have passed since the start of the “authentication support mode” ( S1310 ). When 15 seconds have not passed since the start of the "authentication support mode", as shown in the lower part of Figure 14, the estimated cause 1503 of the low degree of agreement and the improvement plan 1504 of the placement method of the finger 801 are passed through the TV subtitles (TelevisionOpaqueProjector , Telop) are sequentially displayed on the display 103 (S1311). For example, when the finger 801 is pressed against the finger vein reader 102 and pulled back from the finger vein reader 102 , the blood vessel becomes difficult to flow due to compression of the blood vessel, and the finger vein image 900 becomes thinner. At this time, an improvement is displayed so that the finger 801 is not pressed against the finger vein reader 102 but touched lightly, and the finger 801 is slightly lifted.

Even though the placement method of the finger 801 is changed according to the improvement plan displayed on the display 103, if the consistency is not improved (the graph 1501 drops), the user 202 can realize that an excessive change has been made and correct the finger. 801 placement method. On the other hand, when the degree of agreement is improved (the graph 1501 rises), the user 202 can confirm that the correction is correct.

In addition, while the method of placing the finger 801 is changed, the estimated cause 1503 and the improvement plan 1504 also change in real time, but they may flicker when displayed on the display 103 . Therefore, in order to suppress the flickering displayed on the display 103 , it is displayed on the display 103 after confirming that the cause 1503 and the improvement plan 1504 have changed for a certain period of time.

In addition, in addition to the estimated cause 1503 of the low matching degree and the improvement plan 1504 of how to place the finger 801, a block diagram 1502 showing the matching degrees A0 to A8 of each block in a darker shade as the matching degree is lower is displayed in real time as A block diagram expressed in gradation of shades ( S1312 ). The read finger vein image 900 is not displayed as it is, but is displayed as a block diagram in order to prevent malicious use by suspicious persons. From the above, the user 202 can easily realize his own bad habits with regard to the placement method of the finger 801, and perform improvement actions based on the "improvement plan". Thereafter, the processing after S1302 is repeated.

When 15 seconds have elapsed since the start of the "authentication support mode", the characteristics of the read finger vein image 900 are confirmed (S1313), and as shown in FIG. It is based on temporary personal reasons (S1314).

FIG. 16 shows the features of the finger vein image 900 , which are recorded in the IC chip 301 a of the IC card 201 a or the feature extraction function unit 402 of the finger vein reader 102 as a table 1700 . In the table 1700, the judgment classification 1701 of the feature point and the feature 1702 of the feature point itself are associated and recorded. Specifically, as shown in FIG. 16 , when (1) meandering or branching in a narrow line, or (2) when an extended line can be drawn even if the line branches midway, it is determined to be a blood vessel. On the other hand, (3) If it is a straight line without snaking, it is judged to be a wound, (4) If it is a linear and wide shape like a separation island, it is judged to be foreign matter attached, (5) In the form of a point If the substance is concentrated or discontinuously scattered, it is judged that the user's finger is dirty, (6) when a certain part of the image is not clear (blurred, or the line is thin), it is judged that a part of the finger is keratinized (7) Comparing the finger vein images 900 read multiple times, it is determined that the finger is vibrating when the finger moves a lot.

When it is judged that the lack of matching degree AT in the entire area is due to temporary personal reasons such as (3) to (7) above (S1314: Yes), the main control unit 110 will It is displayed on the display 103 that it is impossible to expect to eliminate the lack of consistency due to personal reasons temporarily ( S1315 ). At this time, it is not possible to process the "normal transaction" in which the withdrawal limit is set to a higher amount (3,000,000 yen/day). Yuan/day or 300,000 yen/day) In the case of more cash, other identity verification is required.

In order to perform other personal authentication, the main control unit 110 displays on the display 103 a screen (not shown) for checking whether the user 202 has the personal verification data 201b submitted when registering the biometric information. If you do not have identity verification document 201b (S1316: No), transfer to "restricted transaction 1" (withdrawal limit: 100,000 yen/day or 300,000 yen/day) where the withdrawal limit is low (S1317 ). On the other hand, when the user 202 has the identity verification document 201b (S1316: YES), the main control unit 110 guides it to lift it over the non-contact IC reader 109 . When the staff registers biometric information, they explain in advance that the identity verification data 201b can be used as an avoidance method when biometric authentication fails, so that users who perform biometric authentication for the first time and those who are not used to biometric authentication can expect The user comes to the store with the identity verification information 201b.

The main control unit 110 reads out the classification and personal identification number from the IC chip 301b of the identity verification material 201b through the non-contact IC reader 109 (S1318), and compares and compares whether it is the same as that recorded in the IC chip 301a in the IC card 201a. The category of the identity verification document 201b matches the information 509 such as the personal identification number (S1319). When the IC chip 301b of the identity verification document 201b cannot be read, the classification and the personal identification number can be manually input. As a result of the comparison and comparison, if the category and the personal identification number do not match (S1319: No), transfer to "Restricted Transaction 1" with a lower withdrawal limit (withdrawal limit: 100,000 yen/day or 300,000 yen/day) day) transfer (S1317). On the other hand, when the category and the personal identification number match (S1319: Yes), as shown in FIG. 11, although the withdrawal limit is limited compared with the "normal transaction", it is relaxed compared with the "restricted transaction 1". "Limit Transaction 2" transfers with a withdrawal limit.

"Restricted transaction 2" performs authentication based on identity verification data 201b in addition to user authentication based on a magnetic stripe or an IC chip. Compared with a successful biometric authentication transaction, although the security is lower, it is A transaction with higher security than the above-mentioned "restricted transaction 1". Therefore, the withdrawal limit becomes moderate (1 million yen/day).

Returning to S1314, when it is judged that the cause of the insufficient matching degree AT of the entire area is not due to temporary personal reasons such as (3) to (7) above (S1314: No), S1311 and S1312 are repeated And the processes of S1302 to S1314 are performed until 60 seconds have elapsed from the start of the "authentication support mode" (S1321: NO). That is, as shown in FIG. 14 , as the placement method of the finger 801 changes, the inferred cause 1503 of low consistency and the improvement plan 1504 of the placement method of the finger 801 are sequentially displayed through the subtitles with illustrations. And, when 60 seconds have elapsed since the start of the “authentication support mode” and the degree of agreement AT in the entire area is greater than or equal to a predetermined value (80%) (S1307: Yes), it is determined that the biometric authentication is OK (biometric authentication). body authentication is successful), the main control unit 100 performs transaction processing as "normal transaction" (withdrawal limit: 3 million yen/day) (S1308-S1309).

When 60 seconds have passed since the start of the "authentication support mode" (S1321: Yes), the main control unit 110 checks whether the degree of agreement AT of the entire area is 65% or more (S1322), and if it is less than 65% ( S1322: No), perform the processing after S1315. That is, the control unit 110 displays on the display 103 that it is impossible to eliminate the lack of consistency due to the user's temporary personal reasons, and confirms whether the user has the identity verification data 201b submitted at the time of biometric information registration. In the case of having the identity verification data 201b, compare and collate with the information 509 such as the classification and the personal identification number of the identity verification data 201b recorded in the IC chip 301a in the IC card 201a, and transfer to the "restriction" according to the result Transaction 1" or "Restrict Transaction 2".

On the other hand, when the coincidence degree AT of the entire area is 65% or more (S1322: YES), the main control unit 110 will place the finger 801 due to forgetting the registration of the biometric information, or in an inappropriate state. In the case of permanent registration such as registration, it is displayed on the display 103 that it cannot be expected to eliminate the lack of consistency due to the failure cause (S1323). In this case, if the biometric information is not re-registered, the processing of "normal transaction" in which the withdrawal limit is set to a higher amount (3 million yen/day) cannot be performed. Therefore, re-registration of biometric information can be realized after the submission of the identity verification document 201b is confirmed.

That is, in the "authentication support mode", if it is not judged to be attributable to the person in S1314, only when the matching degree AT of the entire area is not significantly insufficient (more than 50% and less than 65%), it can be used as a special response. Perform re-registration of biometric information. In addition, it can be considered that if the identity degree AT of the entire area is not significantly insufficient (50% or more and less than 65%) when it is not judged to be attributable to the person in S1314, the risk of re-registration of authorized biometric information is high. Therefore, it is determined that the cause of the low matching degree AT of the entire area is the cause of the person.

The main control unit 110 displays on the display 103 a screen (not shown) for checking whether the user 202 has the identity verification data 201b submitted when registering the biometric information. If you do not have identity verification information 201b (S1324: No), transfer to "Restricted Transaction 1" (withdrawal limit: 100,000 yen/day or 300,000 yen/day) where the withdrawal limit is low (S1325 ). On the other hand, when the user 202 has the identity verification material 201b, the main control unit 110 guides it to lift it over the non-contact IC reader 109 .

The main control unit 110 reads the category and personal identification number from the IC chip 301b of the identity verification data 201b through the non-contact IC reader 109 (S1326), and compares and collates whether it is the same as the person recorded in the IC chip 301a in the IC card 201a. It is confirmed that the category of the document 201b matches the information 509 such as the personal identification number (S1327). For the results of comparison and comparison, when the category and personal identification number do not match (S1327: No), the "restricted transaction 1" with a low withdrawal limit (withdrawal limit: 100,000 yen/day or 300,000 yen) yen/day) transfer (S1325). On the other hand, when the category and the personal identification number match (S1327: YES), the main control unit 110 displays on the display a screen (not shown) for checking whether to perform re-registration of biometric information on the user 202 . When performing re-registration of biometric information (S1328: YES), the user 202 places a finger on the finger vein reader 102 (S1330). Thereafter, among the registration data 505 of the IC chip 301a, the registration data recorded as the new registration data 505a is moved to the old registration data 505b, and the biometric information read by the finger vein reader 102 is newly stored in the new registration data 505a. middle. After re-registration of the biometric information, the main control unit 100 performs transaction processing as "normal transaction" (withdrawal limit: 3 million yen/day) ( S1331 ).

On the other hand, when re-registration of biometric information is not performed (S1328: No), the main control unit 100 performs transaction processing as "restricted transaction 2" (withdrawal limit: 1 million yen/day) (S1329) .

In the above-mentioned embodiment, the registration and authentication of the biometric information is carried out through the finger vein reader 102 installed in the ATM101, but the biometric information is not limited to the finger vein, and can also be palm veins, fingerprints, iris, facial images, etc. biological information.

In addition, in the above-mentioned embodiment, the biometric information is recorded in the IC chip 301a mounted on the IC card 201a, but it is also possible to register the biometric information in the IC chip mounted on a mobile terminal (such as a mobile phone) by The non-contact IC reader 109 reads the mobile terminal, thereby performing the same processing. Furthermore, single management of the biometric information can also be performed by registering the biometric information in the server of the financial institution.

In addition, in the above-mentioned embodiment, the reason for the insufficient matching degree AT of the entire area is judged based on the characteristics of the finger vein image recorded in the IC chip 301a of the IC card 201a and the matching degree AT of the biological information, but it is also possible to use the conventional history, etc. to judge.

Moreover, in the above-mentioned embodiment, as an example of restricted transactions, the upper limit of the payment amount is limited, but it is also possible to limit the types of transactions (for example, limit payment transactions), or limit the number of transactions per day.

Furthermore, in the above-described embodiment, the instruction from the main control unit 110 to the user 202 uses the display 103 and voice guidance of the ATM 101, but as long as the computer with the biometric information registration device and biometric authentication is attached, or the biometric The information authentication device itself is equipped with a liquid crystal display or the like, and instructions to the user 202 can be performed using these devices. Therefore, the present invention is not limited to ATMs, and can be applied to computers with biometric information registration devices and biometric authentication devices, general information processing devices including biometric information authentication devices, and automatic machines. In this case, the same biometric authentication can be performed not only on the biometric information of the user using the automatic machine but also on the biometric information of the operator (customer, employee) who operates the automatic machine.

Claims (9)

1. an automatic trading apparatus, is characterized in that, possesses:

Card reader, reads the IC-card of authentication object person;

First reading part, reads the first man information of the Biont information as above-mentioned authentication object person;

Display part, shows the display data relative to above-mentioned authentication object person; And

Control part, the action of control device entirety,

Above-mentioned control part, at the consistent degree after comparing the above-mentioned first man information read by above-mentioned first reading part and the first man information of the authentication object person be previously recorded in above-mentioned IC-card than for permitting that the first threshold of organism authentication is low, then confirm from authentication processing starts, whether have passed through the time be previously determined; If without the time be previously determined, then above-mentioned control part repeatedly reads the Biont information being positioned over the above-mentioned authentication object person of above-mentioned first reading part again;

After have passed through the time be previously determined, lower than above-mentioned first threshold and than high lower than the Second Threshold of above-mentioned first threshold at above-mentioned consistent degree, to above-mentioned display part output display data, whether these display data make above-mentioned authentication object person select to the mode shifts of improvement of supporting above-mentioned consistent degree, when being have selected to when supporting the mode shifts of improvement of above-mentioned consistent degree, judge the not eliminable reason of above-mentioned consistent degree deficiency, the display data comprising this reason are outputted to above-mentioned display part.

2. automatic trading apparatus according to claim 1, is characterized in that,

Above-mentioned control part, when the first man information read by above-mentioned first reading part has the feature be previously recorded in the first reading part or above-mentioned IC-card, be judged as that the not enough not eliminable reason of above-mentioned consistent degree is the first man information read by above-mentioned first reading part.

3. automatic trading apparatus according to claim 1 and 2, is characterized in that,

Above-mentioned control part, when the first man information read by above-mentioned first reading part do not have be previously recorded in feature in the first reading part or above-mentioned IC-card and above-mentioned consistent degree lower than above-mentioned Second Threshold, be judged as that the not enough not eliminable reason of above-mentioned consistent degree is the first man information read by above-mentioned first reading part.

4. automatic trading apparatus according to claim 3, is characterized in that,

When above-mentioned consistent degree is higher than above-mentioned Second Threshold, be judged as that the not enough not eliminable reason of above-mentioned consistent degree is the above-mentioned first man information be previously recorded in above-mentioned IC-card.

5. automatic trading apparatus according to claim 1 and 2, is characterized in that,

There is the second reading part of reading second personal information;

Above-mentioned control part, when above-mentioned second personal information read is the Biont information of the authentication object person of registered in advance in above-mentioned IC-card with the not enough not eliminable reason of consistent, the above-mentioned consistent degree of the second personal information of the authentication object person of registered in advance in above-mentioned IC-card, the above-mentioned first man information read by above-mentioned first reading part is recorded in above-mentioned IC-card.

6. automatic trading apparatus according to claim 5, is characterized in that,

Above-mentioned control part, after the above-mentioned first man information read by above-mentioned first reading part is recorded in above-mentioned IC-card, carries out the transaction processing of the input operation based on above-mentioned authentication object person.

7. automatic trading apparatus according to claim 5, is characterized in that,

The situation that second personal information of above-mentioned second personal information read and the registered in advance authentication object person in above-mentioned IC-card is inconsistent, with above-mentioned second personal information read with compared with the consistent situation of second personal information of the authentication object person of registered in advance in above-mentioned IC-card, restriction transaction processing.

8. an organism authentication unit, the Biont information reading authentication object person carries out organism authentication, it is characterized in that possessing:

Card reader, reads the IC-card of authentication object person;

First reading part, reads the first man information of the Biont information as above-mentioned authentication object person;

Various information about organism authentication are outputted to the outside of above-mentioned organism authentication unit by efferent; And

Control part, controls above-mentioned organism authentication unit,

Above-mentioned control part, at the consistent degree after comparing the above-mentioned first man information read by above-mentioned first reading part and the first man information of the authentication object person be previously recorded in above-mentioned IC-card than for permitting that the first threshold of organism authentication is low, then confirm from authentication processing starts, whether have passed through the time be previously determined; If without the time be previously determined, then above-mentioned control part repeatedly reads the Biont information being positioned over the above-mentioned authentication object person of above-mentioned first reading part again;

After have passed through the time be previously determined, lower than above-mentioned first threshold and than high lower than the Second Threshold of above-mentioned first threshold at above-mentioned consistent degree, by above-mentioned efferent output information, whether this information makes above-mentioned authentication object person select to the mode shifts of improvement of supporting above-mentioned consistent degree, when being have selected to when supporting the mode shifts of improvement of above-mentioned consistent degree, judge the not eliminable reason of above-mentioned consistent degree deficiency, the information comprising this reason is exported by above-mentioned efferent.

9. a biometric authentication method, the Biont information reading authentication object person carries out organism authentication, it is characterized in that possessing following steps:

To the step that the first man information of the Biont information as above-mentioned authentication object person reads;

At the consistent degree after comparing the above-mentioned first man information read by the first reading part and the first man information of the authentication object person be previously recorded in IC-card than for permitting that the first threshold of organism authentication is low, then confirm the step that whether have passed through the time be previously determined from authentication processing starts;

If without the time be previously determined, then again repeatedly read the step being positioned over the Biont information of the above-mentioned authentication object person of above-mentioned first reading part; And

After have passed through the time be previously determined, lower than above-mentioned first threshold and than high lower than the Second Threshold of above-mentioned first threshold at above-mentioned consistent degree, whether above-mentioned authentication object person is selected to the step of mode shifts of improvement of supporting above-mentioned consistent degree

When being have selected to when supporting the mode shifts of improvement of above-mentioned consistent degree, judge the not eliminable reason of above-mentioned consistent degree deficiency, the step that the information that will comprise this reason exports.