Combined authentication system

• US 20020184538A1
• Filed: 03/11/2002
• Published: 12/05/2002
• Est. Priority Date: 05/30/2001
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Masumoto, Daiki, Kitagawa, Hiroki, Hayakawa, Shoji, Sashida, Naoki, Sugimura, Masahiko
• Application Number:
  US10/093,490
• Publication Number:
  US 20020184538A1
• Time in Patent Office: Days
• US Class Current: 713/202
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control

Abstract

A user authentication system that uses plural pieces of biometric information and secures a high security level is provided. Each biometric information and a combination of kinds of the biometric information are called combined biometric information. At the time of registration, plural kinds of user'"'"'s biometric information are obtained via a biometric information input portion 10. A combined biometric information authentication strength calculating portion 30 calculates an authentication strength for each combined biometric information, wherein the authentication strength indicates how easy the user'"'"'s biometric information is distinguished from evaluation biometric information in an evaluation biometric information storing portion 20. A combined biometric information determining portion 40 regards, as candidates, a series of the combined biometric information whose authentication strength satisfies an authentication strength required by an application, determines a combined biometric information to be used for the user authentication from among the candidates, and then notifies a combined biometric information registration portion 50 of it. At the time of authentication, the biometric information input portion 10 accepts an input of biometric information, and an authenticating portion 60 matches the registered combined biometric information in the combined biometric information registration portion 50 and the inputted combined biometric information.

Claims

1. A combined authentication system comprising:

a biometric information input portion for obtaining plural kinds of user'"'"'s biometric information;

an evaluation biometric information storing portion for registering, as evaluation biometric information, pieces of biometric information of a plurality of individuals for evaluating the user'"'"'s biometric information;

a combined biometric information authentication strength calculating portion for calculating an authentication strength for each combined biometric information that is each kind of the biometric information or each combination of the kinds of the biometric information, wherein the authentication strength indicates how easy the user'"'"'s biometric information is distinguished from the evaluation biometric information;

a combined biometric information determining portion for regarding, as candidates, a series of the combined biometric information whose authentication strengths satisfy an authentication strength required for a user authentication in an application, and then determining a combined biometric information to be used for the user authentication from among the candidates;

a combined biometric information registration portion for registering the user'"'"'s biometric information corresponding to the determined combined biometric information; and

an authenticating portion for matching the registered combined biometric information that has been registered in the combined biometric information registration portion and the inputted combined biometric information, thus performing the user authentication.

2. The combined authentication system according to claim 1, wherein the biometric information input portion is provided in a client system, and other portions are provided in a server system, with the client system and the server system being connected by a network.

3. The combined authentication system according to claim 1, wherein the combined biometric information determining portion comprises a notifying portion for notifying the user of the candidates of the combined biometric information, and a selecting portion for allowing the user to select the combined biometric information to be used for the user authentication from among the candidates.

4. The combined authentication system according to claim 3, wherein the biometric information input portion and the selecting portion in the combined biometric information determining portion are provided in a client system, and other portions are provided in a server system, with the client system and the server system being connected via a network.

5. The combined authentication system according to claim 1, wherein the user'"'"'s biometric information obtained via the biometric information input portion is additionally registered into the evaluation biometric information storing portion as one sample.

6. The combined authentication system according to claim 1, wherein the combined biometric information authentication strength calculating portion has a function of tuning a parameter for each user, the parameter being used in the calculation of the authentication strength.

7. The combined authentication system according to claim 1, wherein the biometric information input portion is provided with an identifier, and the authenticating portion performs the user authentication only when the identifier of the biometric information input portion used when registering the biometric information and that used when authenticating the user in the application are matched.

8. The combined authentication system according to claim 1, further comprising a password input portion, a password registration portion and a password authenticating portion,

wherein the user can select to use a user authentication system using a password in addition to a user authentication system using the biometric information, and if the user selects to use both the systems, the authenticating portion performs the user authentication only when passwords are successfully matched in the password authenticating portion.

9. The combined authentication system according to claim 1, further comprising a charging portion for determining an amount of charging a business entity managing the application or the user based on the combined biometric information to be registered into the combined biometric information registration portion and collecting the amount from the business entity managing the application or the user.

10. The combined authentication system according to claim 1, further comprising a charging portion for determining an amount of charging a business entity managing the application or the user based on the number of the pieces of the biometric information as samples registered into the evaluation biometric information storing portion and collecting the amount from the business entity managing the application or the user.

11. A combined authentication method comprising:

obtaining plural kinds of user'"'"'s biometric information;

registering pieces of biometric information of a plurality of individuals to be samples as evaluation biometric information;

calculating an authentication strength for each combined biometric information that is each kind of the biometric information or each combination of the kinds of the biometric information, wherein the authentication strength indicates how easy the user'"'"'s biometric information is distinguished from the evaluation biometric information;

regarding, as candidates, a series of the combined biometric information whose authentication strengths satisfy an authentication strength required for a user authentication in an application, and then determining a combined biometric information to be used for the user authentication from among the candidates;

registering the biometric information corresponding to the determined combined biometric information; and

matching the registered combined biometric information that has been registered and the inputted combined biometric information of the user, thus performing the user authentication.

12. A combined authentication program for authenticating a user by using plural kinds of user'"'"'s biometric information, the program comprising the operations of:

obtaining the plural kinds of the user'"'"'s biometric information;

registering pieces of biometric information of a plurality of individuals to be samples as evaluation biometric information;

calculating an authentication strength for each combined biometric information that is each kind of the biometric information or each combination of the kinds of the biometric information, wherein the authentication strength indicates how easy the user'"'"'s biometric information is distinguished from the evaluation biometric information;

regarding, as candidates, a series of the combined biometric information whose authentication strengths satisfy an authentication strength required for a user authentication in an application, and then determining a combined biometric information to be used for the user authentication from among the candidates;

registering the biometric information corresponding to the determined combined biometric information; and

matching the registered combined biometric information that has been registered and the inputted combined biometric information of the user, thus performing the user authentication.