Authentication processing system, authentiation processing method, authentication device, and computer program

• US 20030037264A1
• Filed: 08/13/2002
• Published: 02/20/2003
• Est. Priority Date: 08/15/2001
• Status: Active Grant

• Current Assignee: mofiria Corp.
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Ezaki, Tadashi, Iga, Akira
• Granted Patent: US 8,166,523 B2
• Time in Patent Office: Days
• US Class Current: 713/202
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

An authentication device which the user wears reads biometrics information and executes individual authentication by verification. Only when the individual authentication has been successfully performed, authentication with an external unit (such as a server) can be started. Then, only when both of the individual authentication based on the biometrics information and the mutual authentication between the external unit (such as a server) and the authentication device have been successfully performed, subsequent data processing such as payment processing can be executed. Therefore, even if a fraudulent third party uses a stolen authentication device, because the party cannot satisfy the start condition of authentication with the external server or a PC, fraudulent transactions and other illegitimate behaviors are effectively prevented.

Claims

1. An authentication processing system comprising

an authentication device which can be mounted on a person to be authenticated, for obtaining biometrics information of the person to be authenticated at a portion where the authentication device is mounted and for executing individual authentication processing by the use of verification with registered biometrics information stored in a memory in advance,

wherein the authentication device comprises control means for executing authentication processing with an external unit;

and

only when individual authentication has been successfully performed according to biometrics information by the authentication device, authentication processing between the authentication device and an external unit is executed.

2. An authentication processing system according to claim 1,

wherein the authentication device comprises a contact for data communication through a human body, and

the authentication device executes the authentication processing with the external unit by using data communication through the contact.

3. An authentication processing system according to claim 1,

wherein the authentication device comprises an electromagnetic-wave transmitting and receiving section for non-contact data communication, and

the authentication device executes the authentication processing with the external unit by using data communication through the electromagnetic-wave transmitting and receiving section.

4. An authentication processing system according to claim 1,

wherein the biometrics information used in the individual authentication performed by the authentication device is blood vessel pattern information, and

the authentication device comprises blood-vessel-pattern reading means for reading blood-vessel patterns at a portion of the body of the person to be authenticated who wears the authentication device.

5. An authentication processing system according to claim 1,

wherein authentication processing between the authentication device and the external unit is executed by one of a public-key method and a common-key method, and

the authentication device comprises storage means for storing key data applied to the authentication method to be executed.

6. An authentication processing system according to claim 1,

wherein the external unit is an IC card owned by the same user as that of the authentication device, for storing personal information of the user and a user ID, and

only when the individual authentication has been successfully performed according to the biometrics information by the authentication device, mutual authentication processing between the authentication device and the IC card is executed, and only when the mutual authentication has been successfully performed, authentication processing is executed between the IC card and a second external unit.

7. An authentication processing system according to claim 1,

wherein the authentication device comprises a power supply structure driven by receiving an electromagnetic wave.

8. An authentication processing method executed in an authentication device which can be mounted on a person to be authenticated, comprising:

a step of obtaining biometrics information of the person to be authenticated at a portion where the authentication device is mounted;

a step of executing individual authentication processing by the use of verification with registered biometrics information stored in a memory of the authentication device; and

an authentication processing step of, only when the individual authentication has been successfully performed, executing authentication processing between the authentication device and an external unit.

9. An authentication processing method according to claim 8,

wherein the authentication device comprises a contact for data communication through a human body, and

the authentication device executes the authentication processing with the external unit by using data communication through the contact.

10. An authentication processing method according to claim 8,

wherein the authentication device comprises an electromagnetic-wave transmitting and receiving section for non-contact data communication, and

the authentication device executes the authentication processing with the external unit by using data communication through the electromagnetic-wave transmitting and receiving section.

11. An authentication processing method according to claim 8,

wherein the biometrics information used in the individual authentication performed by the authentication device is blood vessel pattern information, and

the step of obtaining biometrics information reads blood-vessel patterns at a portion of the body of the person to be authenticated who wears the authentication device.

12. An authentication processing method according to claim 8,

wherein authentication processing between the authentication device and the external unit is executed by one of a public-key method and a common-key method.

13. An authentication processing method according to claim 8,

wherein the external unit is an IC card owned by the same user as that of the authentication device, for storing personal information of the user and a user ID;

only when the individual authentication has been successfully performed according to the biometrics information by the authentication device, mutual authentication processing between the authentication device and the IC card is executed; and

further, only when the mutual authentication has been successfully performed, authentication processing is executed between the IC card and a second external unit.

14. An authentication device capable of being mounted on a person to be authenticated, for obtaining biometrics information of the person to be authenticated at a portion where the authentication device is mounted and for executing individual authentication processing by the use of verification with registered biometrics information stored in a memory in advance, comprising

control means for executing authentication processing with an external unit.

15. An authentication device according to claim 14, further comprising a contact for data communication through a human body,

wherein the authentication device executes the authentication processing with the external unit by using data communication through the contact.

16. An authentication device according to claim 14, further comprising an electromagnetic-wave transmitting and receiving section for non-contact data communication,

wherein the authentication device executes the authentication processing with the external unit by using data communication through the electromagnetic-wave transmitting and receiving section.

17. An authentication device according to claim 14 further comprising blood-vessel-pattern reading means for reading blood-vessel patterns at a portion of the body of the person to be authenticated who wears the authentication device.

18. An authentication device according to claim 14, further comprising storage means for storing key data applied to one of a public-key authentication method and a common-key authentication method.

19. An authentication device according to claim 14, further comprising a power supply structure driven by receiving an electromagnetic wave.

20. A computer program for executing authentication processing on a computer system, comprising:

a step of obtaining biometrics information of a person to be authenticated at a portion where an authentication device is mounted;

a step of executing individual authentication processing by the use of verification with registered biometrics information stored in a memory of the authentication device; and

an authentication processing step of, only when the individual authentication has been successfully performed, executing authentication processing between the authentication device and an external unit.