JP2003036245A - Personal authentication device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a personal authentication device which facilitates a personal authentication for a user. SOLUTION: The personal authentication device 10 is constituted of an authentication receiving part 20 connected to an authentication main unit 30 requiring personal authentication, and an authentication transmitting part 11 composed as a separate body from the authentication receiving part and to be worn on a part of user's body. The authentication transmitting part 11 includes an input part 12 to input personal authentication information and a transmitting means 15 to transmit the personal authentication information inputted from the input part to the authentication receiving part, and the authentication receiving part 20 includes a receiving means 21 to receive the personal authentication information transmitted from the authentication transmitting part and an output part 23 to send out the received personal authentication information by the receiving means to the authentication main unit.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal identification device for personal identification of a user, such as a personal computer.

[0002]

2. Description of the Related Art Conventionally, when accessing, for example, a personal computer or various servers, the ID and password are input to perform personal authentication of the user.
We try to eliminate unauthorized use by unauthorized third parties. However, in order to surely eliminate illegal use, it is necessary to change the password frequently, but it is troublesome for the user to change the password and it is necessary to remember the new password. In addition, since such passwords are often set to be relatively easy for the user to remember, it is possible to prevent a third party from impersonating the user due to theft or analysis of the password by a third party. Difficult to eliminate.

[0003]

On the other hand, by using, for example, an IC card, fingerprint authentication, iris authentication, or the like, the labor of the user at the time of individual authentication can be reduced and the individual user can be surely authenticated. Various methods have been proposed that enable authentication. However,
Even if these methods are used, for example, if the user leaves the personal computer to which access was granted by personal authentication and logged in without logging off, a third party impersonates the user and uses this personal computer. You can do it.

On the other hand, for example, by using a screen saver with a lock, the screen saver is activated when there is no operation for a certain period of time, and the screen saver operating state is maintained unless a predetermined password is input. However, if the screen saver is activated, for example, while the user is operating the personal computer and reading materials for a relatively long time, the user needs to enter the password. , The operability becomes troublesome.

The present invention has been made in view of the above points, and an object thereof is to provide a personal identification device which facilitates personal identification of a user.

[0006]

According to the present invention, the above object is constituted by an authentication receiving section connected to an authentication subject apparatus requiring individual authentication, and an authentication receiving section which is provided separately. The authentication transmitting unit is attached to a part of the person's body, and the authentication transmitting unit authenticates the input unit for inputting personal authentication information and the personal authentication information input from the input unit. A authentication unit that receives the personal authentication information transmitted from the authentication transmission unit, and the authentication unit that transmits the personal authentication information received by the reception unit. And an output unit for sending to the personal authentication device.

In the personal authentication device according to the present invention, preferably, the authentication transmission unit includes a storage unit for storing the personal authentication information input by the input unit, and the transmission unit stores the personal authentication information in the storage unit. Is read and transmitted to the authentication receiving unit.

In the personal authentication device according to the present invention, preferably, the transmitting means of the authentication transmitting section encrypts and transmits the personal authentication information, and the receiving means of the authentication receiving section,
The encrypted personal authentication information transmitted from the authentication transmission unit is received and decrypted.

In the personal authentication device according to the present invention, preferably, the authentication transmission section includes a mounting detection means for detecting mounting on a part of the user's body, and the mounting detection means is a user's mounting means. When the removal of attachment from a part of the body is detected, the storage unit erases the personal authentication information of the user.

In the personal authentication device according to the present invention, preferably, when the input unit of the authentication transmission unit is attached to a part of the user's body, the personal authentication information of the user is automatically obtained. take in.

In the personal authentication device according to the present invention, preferably, the input unit of the authentication transmission unit receives not only personal authentication information but also personal identification information, and the transmission unit authenticates the personal authentication information and the personal identification information. At the same time as transmitting to the receiving unit, the authentication receiving unit outputs the personal authentication information and the personal identification information transmitted from the transmitting means to the authentication subject apparatus.

In the personal identification device according to the present invention, preferably, the personal identification information is biometrics information.

In the personal authentication device according to the present invention, preferably, a parameter for encrypting the personal authentication information is recorded in the storage unit of the authentication transmission unit, and the transmission means of the authentication transmission unit is an input unit. The personal authentication information mapped by the parameter is transmitted, and the personal authentication information mapped by the parameter is registered as reference data for authentication in the authentication subject apparatus.

In the personal authentication device according to the present invention, preferably, the authentication transmission section has an electronic signature function, and when transmitting the personal authentication information, the user's identity is confirmed by the electronic signature function.

According to the above configuration, when the user wears the authentication transmission unit on a part of his / her body and inputs the personal authentication information from the input unit, the transmission means of the authentication transmission unit transmits the personal authentication information. . Then, the receiving unit of the authentication receiving unit receives the personal authentication information transmitted from the authentication transmitting unit, and outputs the personal authentication information to the authentication subject apparatus by the output unit. As a result, the authentication subject apparatus compares the personal authentication information with reference data for personal authentication registered in advance, and performs personal authentication of the user.

Therefore, if the user inputs the personal authentication information from the input unit of the authentication transmission unit, thereafter, every time personal authentication becomes necessary, the authentication transmission unit authenticates via the authentication reception unit. Since personal authentication information can be sent to the main device, personal authentication can be easily performed.

The authentication transmission unit includes a storage unit for storing the personal authentication information input by the input unit, and the transmission unit reads the personal authentication information from the storage unit and transmits it to the authentication reception unit. In this case, the user once inputs the personal authentication information through the input unit, and the personal authentication information is stored in the storage unit. Therefore, the personal authentication information can be sent from the authentication transmitting unit to the authentication subject apparatus via the authentication receiving unit by reading the personal authentication information from the storage unit each time the personal authentication is required. Therefore, personal authentication can be easily performed.

The transmitting means of the authentication transmitting section encrypts and transmits the personal authentication information, and the receiving means of the authentication receiving section receives the encrypted personal authentication information transmitted from the authentication transmitting section. When decrypting, the personal authentication information transmitted from the authentication transmitting unit to the authentication receiving unit is encrypted, so even if the third party illegally receives the personal authentication information, Unauthorized use of information can be prevented.

The authentication transmission unit has a wearing detection means for detecting the wearing on the part of the user's body, and the wearing detection means detects the wearing removal from the part of the user's body. At this time, when the storage unit erases the personal authentication information of the user, when the user unattaches the authentication transmission unit from a part of the body, or when the authentication transmission unit is lost or stolen, etc. By detecting the mounting release by the mounting detection means,
Since the personal authentication information of the user registered in the storage unit is erased, even if a third party illegally obtains the authentication transmission unit, the unauthorized use of the personal authentication information can be prevented.

When the input unit of the authentication transmission unit automatically captures the personal authentication information of the user when the authentication transmission unit is attached to a part of the user's body, the user sends the authentication transmission. Since the personal authentication information is automatically input when the unit is worn on a part of the body, the user does not need to manually input the personal authentication information by the input unit.

The input unit of the authentication transmitting unit receives not only the personal authentication information but also the personal identification information, and the transmitting unit transmits the personal authentication information and the personal identification information to the authentication receiving unit and the authentication receiving unit. However, when outputting the personal authentication information and the personal identification information transmitted from the transmission means to the authentication subject apparatus, one authentication transmission unit performs personal authentication of multiple users for one authentication subject apparatus. In doing so, each user will be able to be identified from each other by the personal identification information.

When the personal authentication information is biometrics information, it is difficult for a third party to obtain the personal authentication information more easily than in the case of a password, and the personal authentication information is illegally used. Can be prevented.

A parameter for encrypting the personal authentication information is recorded in the storage section of the authentication transmitting section, and the transmitting means of the authentication transmitting section maps the personal authentication information from the input section with the parameter. When the personal authentication information mapped by the above-mentioned parameter is registered as the reference data for authentication in the authentication subject apparatus while transmitting the one, the personal authentication information is stolen from the authentication subject apparatus. Even in this case, by changing the parameters, it is possible to prevent unauthorized use of the personal authentication information by a third party by registering different mappings of the personal authentication information as reference data, and Personal authentication by personal authentication information can be guaranteed.

The above-mentioned authentication transmitting unit has an electronic signature function, and when the user's identity is confirmed by the electronic signature function when transmitting the personal authentication information, for example, the personal authentication information is stolen. Even when the personal authentication by the personal authentication information is performed and the identity is verified by the electronic signature function, even if the administrator of the authentication subject apparatus attempts to illegally use the personal authentication information of the user, the identity is verified by the electronic signature. Therefore, it is possible to prevent impersonation of a third party due to unauthorized use of personal authentication information. In addition, even if the authentication transmitting unit is lost or stolen, by invalidating the electronic signature before the personal authentication of the authentication transmitting unit is decrypted, it is possible to prevent unauthorized use of the personal authentication information.

[0025]

BEST MODE FOR CARRYING OUT THE INVENTION The present invention will now be described in more detail based on the embodiments shown in the drawings. 1 to 3
Shows an embodiment of a personal identification device according to the present invention. In FIG. 1, the personal authentication device 10 includes an authentication transmission unit 1
1 and an authentication receiving unit 20.

The authentication transmission section 11 is constructed, for example, as a wristband so that it can be attached to a part of the user's body, for example, the wrist. Then, as shown in FIG. 2, the authentication transmission unit 11 includes an input unit 12 for inputting the user's personal authentication information, for example, a password, and an encryption unit 13 for encrypting the personal authentication information from the input unit 12. And a storage unit 14 for storing the personal authentication information encrypted by the encryption unit 13.
And a transmission unit 15 for reading and transmitting the personal authentication information stored in the storage unit 14, and a mounting detection sensor 16.

The input unit 12 is configured as a keyboard having a plurality of operation keys, for example, and individual authentication information such as a password can be input by operating these operation keys individually or in combination. There is.

The encryption unit 13 is configured to encrypt the personal authentication information from the input unit 12 by a predetermined encryption method and store it in the storage unit 14.

The storage unit 14 is, for example, a memory and stores the personal authentication information encrypted by the encryption unit 13.

The transmitting means 15 has a well-known structure, and is adapted to transmit the personal authentication information read from the storage section 14 at predetermined time intervals, for example, by using radio waves.

The wearing detection sensor 16 is, for example, a contact sensor, and is adapted to detect that the user wears the authentication transmitting unit 11 on a part of his / her body. The storage unit 14 stores the encrypted personal authentication information only while the mounting detection sensor 16 detects the mounting, and stores it when the mounting detection sensor 16 no longer detects the mounting. The personal authentication information is deleted.

On the other hand, the authentication receiving unit 20 is configured separately from the authentication transmitting unit 11, and is connected to the authentication main device, for example, the personal computer 30. As shown in FIG. 3, the authentication receiving unit 20 receives the encrypted personal authentication information transmitted from the authentication transmitting unit 11, and the encrypted receiving unit 21 receives the encrypted personal authentication information. The decryption unit 22 decrypts the personal authentication information, and the output unit 23 outputs the personal authentication information decrypted by the decryption unit 22.

The receiving means 21 has a publicly known structure, and is adapted to receive the encrypted personal authentication information transmitted from the authentication transmitting section 11 by using, for example, radio waves. The decryption unit 22 decrypts the encrypted personal authentication information received by the receiving means 21 by a predetermined method and extracts the original personal authentication information.
The output unit 23 outputs the personal authentication information decrypted by the decryption unit 22 to a personal computer 30, which is a connected authentication subject device.

The personal authentication device 10 according to the embodiment of the present invention is configured as described above, and its operation will be described below. First, registration of personal authentication information will be described with reference to FIG. In FIG. 4, the user 40 wears the authentication transmission unit 11 of the personal authentication device 10 on his / her wrist,
The identity is confirmed with the authentication subject apparatus 30 via the authentication receiving unit 20. In this case, the authentication subject device 30 is configured to perform identity verification by being operated by the administrator 50.

When the administrator 50 instructs the authentication subject apparatus 30 to start registration of personal authentication information, the authentication transmission unit 1
1 is in a waiting state for inputting a password as personal authentication information. From this state, when the user 40 inputs an appropriate password with the input unit 12 of the authentication transmission unit 11, the password is encrypted by the encryption unit 13 and then stored in the storage unit 14. Then, the transmitting unit 15 reads out the password from the storage unit 14 and transmits the password, so that the password as the encrypted personal authentication information is transmitted to the authentication receiving unit 20.

As a result, the authentication receiving section 20 receives the encrypted personal authentication information from the authentication transmitting section 11 by the receiving means 21, and decrypts it by the decrypting section 22,
The output unit 23 outputs the result to the authentication subject device 30. Then, the authentication subject device 30 registers the password as the decrypted personal authentication information from the authentication receiving unit 20 as the personal authentication information of the user 40. This completes the registration of personal authentication information.

When the personal authentication information is registered in this way, thereafter, in the authentication transmission unit 11, the transmission means 15 reads out the encrypted personal authentication information from the storage unit 14 at predetermined time intervals and transmits it. Therefore, as shown in FIG. 5, the user 40 wears the authentication transmitter 11 on the wrist,
When approaching the authentication subject apparatus 30, the encrypted personal authentication information transmitted from the authentication transmission unit 11 is changed to the authentication subject apparatus 30.
It is received by the authentication receiving unit 20 connected to and is output to the authentication subject device 30. As a result, the authentication subject device 30
Performs personal authentication of the user 40, and permits the user 40 to use the authentication-based apparatus 30.

Here, as shown in FIG. 6, when the user 40 suspends or terminates the use of the authentication subject apparatus 30 and separates from the authentication subject apparatus 30, the authentication receiving section 20.
However, the encrypted personal authentication information from the authentication transmission unit 11 of the user 40 cannot be received. Then, the authentication subject device 30 cannot perform personal authentication because it performs personal authentication based on the personal authentication information at regular intervals.
Therefore, when the user 40 separates from the authentication subject apparatus 30, the personal authentication becomes invalid and the authentication subject apparatus 30
Cannot be used, and the authentication-based device 30 by a third party
Unauthorized use of can be prevented. After that, when the user 40 approaches the authentication subject device 30 again, personal authentication can be performed in the same manner as in the case of FIG. 5 described above.

The user 40, as shown in FIG.
When the authentication transmission unit 11 is unworn from the wrist, the authentication transmission unit 11 does not detect the mounting of the authentication transmission unit 11 by the mounting detection sensor 16. Therefore, the storage unit 14 stores the password as the stored personal authentication information. to erase. This allows
For example, even if a third party illegally obtains the authentication transmitting unit 11, since the authentication transmitting unit 11 does not store the personal authentication information, the third person attaches the authentication transmitting unit 11 to the wrist. However, it is necessary to newly input the password as the personal authentication information from the input unit 12. Therefore, it is possible to prevent unauthorized use of the authentication subject apparatus 30 by a third party.

As shown in FIG. 8, when the user 40 mounts the authentication transmitter 11 on his wrist again, the password is encrypted by inputting the password as the personal authentication information from the input unit 12. The data is encrypted by the unit 13 and stored in the storage unit 14. Therefore, similarly to the case shown in FIG. 5, the user 40 performs personal authentication for the authentication subject device 30 only by approaching the authentication subject device 30 while wearing the authentication transmitter 11 on the wrist. Then, the authentication subject device 30 can be used.

In this way, according to the personal identification device 10 according to the embodiment of the present invention, the user 40 has the authentication transmission unit 1
If the personal authentication information is input from the input unit 12 of No. 1, thereafter, the authentication transmission unit 11 is input every time personal authentication is required.
Since personal authentication information can be sent to the authentication subject device 30 from the authentication receiving unit 20, personal authentication can be easily performed. Also, the authentication transmission unit 11
In case of loss or theft, since the authentication transmission unit 11 is unattached from the user's wrist and the personal authentication information stored in the storage unit 14 is erased, the personal authentication information may be stolen. There is no such thing.

In the above-described embodiment, the personal authentication information is transmitted from the authentication transmission unit 11 to the authentication reception unit 20 using radio waves, but the present invention is not limited to this.
You may make it transmit using other methods, for example, an infrared signal.

Further, in the above-described embodiment, the authentication transmission unit 11 is configured as a wrist band, for example, but the configuration is not limited to this, and it can be worn on a part of the user's body such as a head band. If it exists, an arbitrary configuration can be used.

Further, in the above-described embodiment, the personal authentication information is transmitted from the authentication transmission unit 11 to the authentication reception unit 20 in an encrypted manner, but there is a possibility that it may be received by a third party. If not, encryption may be omitted.

Further, in the above-mentioned embodiment, the password is used as the personal authentication information, but the present invention is not limited to this, and it is obvious that biometrics information using a fingerprint or the like may be used. . In this case, if the biometrics information is registered as it is as the personal authentication information, if the biometrics information registered in the authentication subject apparatus is stolen, the user cannot use the authentication subject apparatus. The encryption unit 12 of the authentication transmission unit 11 transmits the mapping corresponding to this parameter by encrypting the mapping according to this parameter, and the authentication subject device 30 decrypts the mapping corresponding to this parameter. Instead, it may be registered as personal authentication information. As a result, the authentication subject device 3
Even if the mapping according to the parameter of the biometrics information as the personal authentication information registered in 0 is stolen, the user can re-register the mapping according to the new parameter of the biometrics information, and the user can With the biometrics information of, personal authentication can be continued.

Further, in the above-described embodiment, the user inputs personal authentication information through the input unit 12 of the authentication transmission unit 11, but the present invention is not limited to this, and when the authentication transmission unit 11 is attached, A user's fingerprint or the like may be automatically input.

Further, in the above-described embodiment, the case where one authentication subject device 30 is used by one user 40 has been described, but one authentication subject device 30 is shared by a plurality of users 40. In this case, the authentication transmission unit 11
From the authentication receiving unit 20, the personal identification information may be transmitted to the authentication main body device 30 in addition to the personal authentication information. In this case, each user 40 may use the authentication transmission unit 11 dedicated to himself or may use the common authentication transmission unit 11.

Further, in the above-mentioned embodiment, the administrator 5 of the personal authentication information theft or the authentication subject apparatus 30 is stolen.
Although it is difficult to cope with the unauthorized use of the authentication subject apparatus 30 by 0, the authentication sender unit 11 sends the authentication subject apparatus 30 to the authentication subject apparatus 30 via the authentication receiver unit 20 in addition to the personal authentication information and the person using the electronic signature Check it.

In the above-described embodiment, the case where a personal computer is used as the authentication subject apparatus 30 has been described, but the present invention is not limited to this. For example, various portable terminals such as a mobile phone and PHS, and a highway, for example. The personal authentication device can be applied to various charging devices such as toll gates, automatic ticket gates of railroads, automatic checkout machines, and internet connection sites that require authentication.

[0050]

As described above, according to the present invention, when the user wears the authentication transmission part on a part of his body and inputs the personal authentication information from the input part, the transmission means of the authentication transmission part operates. ,
Send this personal authentication information. Then, the receiving unit of the authentication receiving unit receives the personal authentication information transmitted from the authentication transmitting unit, and outputs the personal authentication information to the authentication subject apparatus by the output unit. As a result, the authentication subject apparatus compares the personal authentication information with reference data for personal authentication registered in advance, and performs personal authentication of the user. Therefore, the user inputs personal authentication information from the input unit of the authentication transmission unit, and thereafter, every time personal authentication is required, the authentication transmission unit transmits the authentication authentication unit to the authentication subject apparatus. On the other hand, since personal authentication information can be transmitted, personal authentication can be easily performed.

Thus, according to the present invention, it is possible to provide an extremely excellent personal identification device in which personal identification of a user is easily performed.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of an embodiment of a personal identification device according to the present invention.

FIG. 2 is a block diagram showing a configuration example of an authentication transmission unit in the personal authentication device in FIG.

3 is a block diagram showing a configuration example of an authentication receiving unit in the personal authentication device of FIG.

FIG. 4 is a schematic diagram showing a registration operation of personal authentication information (password) in the personal authentication device of FIG.

5 is a schematic diagram showing a state when a user wearing the authentication transmission unit in the personal identification device of FIG. 1 approaches.

FIG. 6 is a schematic diagram showing a state where the user wearing the authentication transmission unit in the personal identification device of FIG. 1 is separated.

FIG. 7 is a schematic diagram showing a state of the personal authentication device of FIG. 1 when the authentication transmission unit is unattached.

FIG. 8 is a schematic diagram showing a state when the authentication transmission unit in the personal identification device in FIG. 1 is attached.

[Explanation of symbols]

10 Personal authentication device 11 Authentication transmitter 12 Input section 13 Encryption part 14 Memory 15 Transmission means 16 Mounting detection sensor 20 Authentication receiver 21 Receiving means 22 Decoding section 23 Output section 30 Authentication main device (personal computer) 40 users 50 administrator

Claims (9)

[Claims] 1. An authentication receiving unit connected to an authentication subject apparatus that requires personal authentication, and an authentication transmitting unit that is configured separately from the authentication receiving unit and is attached to a part of the user's body. The authentication transmitting unit includes an input unit for inputting personal authentication information, and a transmitting unit for transmitting the personal authentication information input from the input unit to the authentication receiving unit. The receiving unit includes a receiving unit for receiving the personal authentication information transmitted from the authentication transmitting unit, and an output unit for transmitting the personal authentication information received by the receiving unit to the authentication subject apparatus. , Personal authentication device. 2. The authentication transmission unit includes a storage unit that stores the personal authentication information input by the input unit, and the transmission unit reads the personal authentication information from the storage unit and sends the personal authentication information to the authentication reception unit. The personal authentication device according to claim 1, wherein the personal authentication device is transmitted. 3. The transmitting means of the authentication transmitting section encrypts and transmits the personal authentication information, and the receiving means of the authentication receiving section transmits the encrypted personal authentication information transmitted from the authentication transmitting section. The personal authentication device according to claim 1 or 2, wherein the personal authentication device receives and decrypts the received data. 4. The authentication transmission unit includes a mounting detection unit that detects mounting on a part of the user's body, and the mounting detection unit releases the mounting on a part of the user's body. The personal authentication device according to claim 1, wherein the storage unit erases the personal authentication information of the user when detected. 5. The input unit of the authentication transmission unit automatically captures the personal authentication information of the user when the authentication transmission unit is attached to a part of the user's body. The personal authentication device according to any one of 1 to 4. 6. The input section of the authentication transmission section receives not only personal authentication information but also personal identification information, and the transmission means comprises:
The personal authentication information and the personal identification information are transmitted to the authentication receiving unit, and the authentication receiving unit outputs the personal authentication information and the personal identification information transmitted from the transmitting means to the authentication subject apparatus. The personal authentication device according to any one of 1 to 5. 7. The personal identification device according to claim 1, wherein the personal identification information is biometrics information. 8. A parameter for encrypting personal authentication information is recorded in a storage unit of the authentication transmission unit, and the transmission unit of the authentication transmission unit uses the personal authentication information from the input unit as the parameter. The individual according to claim 7, characterized in that the mapped image is transmitted, and personal authentication information mapped by the parameter is registered as reference data for authentication in the authentication subject apparatus. Authentication device. 9. The authentication transmission unit is provided with an electronic signature function, and when transmitting personal authentication information, the user's identity is confirmed by the electronic signature function. The personal authentication device described.