Authentication method, authentication system, authentication device, and module for authentication

• US 20030140234A1
• Filed: 09/30/2002
• Published: 07/24/2003
• Est. Priority Date: 02/09/2001
• Status: Abandoned Application

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Noda, Masanori, Iwai, Ryosuke
• Application Number:
  US10/240,274
• Publication Number:
  US 20030140234A1
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06V 10/94 Hardware or software architectures specially adapted for image or video understanding
• CPC Class Codes: G06V 40/10 Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands
• CPC Class Codes: G07C 2209/14 With a sequence of inputs of different identification information
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence

Abstract

An authentication method capable of authenticating a user using bio-information for a broad range of users having a variety of physical characteristics is provided. An authentication apparatus reads out a user ID from an authentication card 14, an authentication apparatus 15 reads out the designated type of bio-information among bio-information corresponding to the read out user ID from a storing means provided in the authentication apparatus 15, the authentication apparatus 15 detects the designated type of bio-information from the user, and the authentication apparatus 15 compares the read out bio-information with the detected bio-information and authenticates the legitimacy of the user based on the result of the comparison.

Claims

1. An authentication method for authenticating a user by using an authentication module which is portable, wherein

a controlling means reads out a designated type of bio-information from among a plurality of types of bio-information of said user stored in a storing means,

a detecting means detects said designated type of bio-information from said user, and

an authenticating means compares the bio-information read out from said storing means with the bio-information read out by said detecting means and authenticates the legitimacy of said user based on a result of the comparison.

2. An authentication method as set forth in claim 1, wherein

said bio-information is at least one information of fingerprint information, voice information, handwriting information, face contour information, iris information, retinal information, palm information, earlobe information, and vein pattern information.

3. An authentication apparatus for authenticating a user by using an authentication module which is portable and stores identification information for identifying said user or said authentication module, comprising

a storing means for storing a plurality of types of bio-information of said user linked with said identification information,

a reading means for reading said identification information from said authentication module,

a detecting means for detecting said designated type of bio-information from said user, and

an authenticating means for reading from the storing means said designated type of bio-information among the bio-information corresponding to said identification information read out by said reading means, comparing the read out bio-information with the bio-information detected by said detecting means, and authenticating the legitimacy of said user based on the result of the comparison.

4. An authentication apparatus as set forth in claim 3, further comprising a designating means for designating what type of bio-information to use for authentication of said user among said plurality of types of bio-information.

5. An authentication method for authenticating a user by using an authentication module which is portable and stores identification information for identifying said user or said authentication module, and an authentication apparatus, wherein

said authentication apparatus reads out said identification information from said authentication module,

said authentication apparatus reads out said designated type of bio-information among the bio-information corresponding to said read out identification information from the storing means provided in the authentication apparatus,

said authentication apparatus detects said designated type of bio-information from said user, and

said authentication apparatus compares said read out bio-information with said detected bio-information and authenticates the legitimacy of said user based on the result of the comparison.

6. An authentication system comprising at least two authentication apparatuses including a first authentication apparatus and a second authentication apparatus for authenticating a user using an authentication module which is portable and stores identification information for identifying said user or the authentication module, wherein

said first authentication apparatus comprises

a first storing means for storing a first type of bio-information of said user linked with said identification information,

a first reading means for reading said identification information from said authentication module,

a first detecting means for detecting said first type of bio-information from said user, and

a first authenticating means for comparing the bio-information corresponding to said identification information read out by said first reading means with the bio-information detected by said first detecting means and authenticating the legitimacy of said user based on the result of the comparison, and

said second authentication apparatus comprises

a second storing means for storing a second type of bio-information of said user linked with said identification information,

a second reading means for reading said identification information from said authentication module,

a second detecting means for detecting said second type of bio-information from said user, and

a second authenticating means for comparing the bio-information corresponding to said identification information read out by said second reading means with the bio-information detected by said second detecting means and authenticating the legitimacy of said user based on the result of the comparison.

7. An authentication method for authenticating a user by using an authentication module which is portable and stores identification information for identifying said user or the authentication module, and at least two authentication apparatuses comprising a first authentication apparatus and a second authentication apparatus for authenticating said user, wherein

said first authentication apparatus reads out said identification information from said authentication module,

said first authentication apparatus detects said first type of bio-information from said user,

said first authentication apparatus reads out the first type of bio-information corresponding to said read out identification information from the first storing means provided in the first authentication apparatus,

said first authentication apparatus compares said read out first type of bio-information with said detected first type of bio-information and authenticates the legitimacy of said user based on the result of the comparison,

said second authentication apparatus reads out said identification information from said authentication module,

said second authentication apparatus detects said second type of bio-information from said user,

said second authentication apparatus reads out the second type of bio-information corresponding to said read out identification information from the second storing means provided in the second authentication apparatus, and

said second authentication apparatus compares said read out second type of bio-information with said detected second type of bio-information and authenticates the legitimacy of said user based on the result of the comparison.

8. An authentication system comprising an authentication apparatus for authenticating a user by using an authentication module which is portable and stores identification information for identifying said user or the authentication module, and a server device for storing the bio-information of said user, wherein

said server device stores a plurality of types of bio-information of said user linked with said identification information, and

said authentication apparatus comprises

a reading means for reading said identification information from said authentication module,

a detecting means for detecting the type of bio-information used for authentication from said user, and

an authenticating means for requesting the bio-information used for said authentication among the bio-information corresponding to said identification information read out by said reading means to said server device, receiving the bio-information from said server device in response to the request, comparing the bio-information received from the server device with the bio-information detected by said detecting means, and authenticating the legitimacy of said user based on the result of the comparison.

9. An authentication method for authenticating a user by using an authentication apparatus for authenticating said user using an authentication module which is portable and stores the identification information for identifying said user or the authentication module, and a server device for storing the bio-information of said user, wherein

said server device stores a plurality of types of bio-information of said user linked with said identification information,

said authentication apparatus reads out said identification information from said authentication module,

said authentication apparatus detects the type of the bio-information used for authentication from said user,

said authentication apparatus requests the bio-information used for said authentication among the bio-information corresponding to said read out identification information to said server device,

said server device transmits the bio-information used for said authentication to said authentication apparatus in response to said request, and said authentication apparatus compares the bio-information received from said server device with said detected bio-information and authenticates the legitimacy of said user based on the result of the comparison.

10. An authentication system comprising a first authentication module and a second authentication module which are portable and used by a user, and a processing device for processing based on the result of the authentication of said user using said first authentication module and said second authentication module, wherein

said first authentication module comprises

a first storing means for storing first identification information for identifying said user or the first authentication module and

a first authenticating means for comparing the first type of bio-information of said user detected by said processing device with said first type of bio-information corresponding to said first identification information stored in said first storing means, authenticating the legitimacy of said user based on the result of the comparison, and outputting the result of the authentication to said processing device,

said second authentication module comprises

a second storing means for storing second identification information for identifying said user or the second authentication module and

a second authenticating means for comparing the second type of bio-information of said user detected by said processing device with said second type of bio-information corresponding to said second identification information stored in said second storing means, authenticating the legitimacy of said second user based on the result of the comparison, and outputting the result of the authentication to said processing device,

said processing device comprises

a storing means for storing said first type of bio-information of said user linked with said first identification information and storing said second type of bio-information of said user linked with said second identification information,

a reading means for reading said first identification information from said first authentication module and said second identification information from said second authentication module,

a first detecting means for detecting said first type of bio-information from said user,

a second detecting means for detecting said second type of bio-information from said user,

an outputting means for outputting to said first authentication module said first type of bio-information of said user stored in said storing means and said bio-information detected at said first detecting means and outputting to said second authentication module said second type of bio-information of said user and said bio-information detected at said second detecting means, and

a processing means for processing based on results of the authentication input from said first authentication module and said second authentication module.

11. An authentication method using a first authentication module and a second authentication module which are portable and used by a user, and a processing device for performing the processing based on the result of the authentication of said user using said first authentication module and said second authentication module, wherein,

when said processing device authenticates said user by using said first authentication module,

said processing device reads out first identification information for identifying the first authentication module or the user of the first authentication module from said first authentication module,

said processing device reads out the first type of bio-information corresponding to said read out first identification information from the storing means provided in the processing device,

said processing device detects said first type of bio-information from said user,

said processing device outputs said read out first type of bio-information and said detected first type of bio-information to said first authentication module,

said first authentication module compares said bio-information input from said processing device, authenticates the legitimacy of said user based on the result of the comparison, and outputs the result of the authentication to said processing device, and

said processing device performs the processing based on the result of said authentication input from said first authentication module, while

when said processing device authenticates said user by using said second authentication module,

said processing device reads out from said second authentication module second identification information for identifying the second authentication module or the user of the second authentication module,

said processing device reads out the second type of bio-information corresponding to said read out second identification information from the storing means provided in the processing device,

said processing device detects said second type of bio-information from said user,

said processing device outputs said read out second type of bio-information and said detected second type of bio-information to said second authentication module,

said second authentication module compares said bio-information input from said processing device, authenticates the legitimacy of said user based on the result of the comparison, and outputs the result of the authentication to said processing device, and

said processing device performs the processing based on the result of said authentication input from said second authentication module.

12. An authentication system comprising a first authentication module and a second authentication module which are portable and used by a user, a server device for storing the bio-information of said user and having a processing device for performing the processing based on the result of the authentication of said user using said first authentication module and said second authentication module, wherein

said first authentication module comprises

a first storing means for storing first identification information for identifying said user or the first authentication module and

a first authenticating means for comparing the first type of bio-information of said user detected by said processing device with said first type of bio-information input from said processing device, authenticating the legitimacy of said user based on the result of the comparison, and outputting the result of the authentication to said processing device,

said second authentication module comprises

a second storing means for storing second identification information for identifying said user or the second authentication module and

a second authenticating means for comparing the second type of bio-information of said user detected by said processing device with said second type of bio-information input from said processing device, authenticating the legitimacy of said user based on the result of the comparison, and outputting the result of the authentication to said processing device,

said server device stores said first type of bio-information of said user linked with said first identification information and stores said second type of bio-information of said user linked with said second identification information, and

said processing device comprises

a first reading means for reading said first identification information from said first authentication module and said second identification information from said second authentication module,

a first detecting means for detecting said first type of bio-information from said user,

a second detecting means for detecting said second type of bio-information from said user,

an outputting means for outputting to said first authentication module said first type of bio-information of said user received from said server device and said bio-information detected by said first detecting means when said first authentication module is to be used, while outputting to said second authentication module said second type of bio-information of said user received from said server device and said bio-information detected by said second detecting means when said second authentication module is to be used, and

a processing means for performing the processing based on the result of said authentication input from said first authentication module and said second authentication module.

13. An authentication method using a first authentication module and a second authentication module which are portable and used by a user, a processing device for performing the processing based on the result of the authentication of said user using said first authentication module and said second authentication module and using a server device, wherein,

when said processing device authenticates said user by using said first authentication module,

said processing device reads out the first identification information for identifying the first authentication module or the user of the first authentication module from said first authentication module,

said processing device requests said first type of bio-information corresponding to said first identification information to said server device,

said server device transmits said first type of bio-information corresponding to said first identification information to said processing device in response to said request,

said processing device detects said first type of bio-information from said user,

said processing device outputs the first type of bio-information received from said server device and said detected first type of bio-information to said first authentication module,

said first authentication module compares said bio-information input from said processing device, authenticates the legitimacy of said user based on the result of the comparison, and outputs the result of the authentication to said processing device, and

said processing device performs the processing based on the result of said authentication input from said first authentication module, while

when said first processing device authenticates said user by using said second authentication module,

said processing device requests said second type of bio-information corresponding to said second identification information to said server device,

said server device transmits said first type of bio-information corresponding to said second identification information to said processing device in response to said request,

said processing device detects said second type of bio-information from said user,

said processing device outputs said second type of bio-information received from said server device and said detected second type of bio-information to said second authentication module,

said second authentication module compares said bio-information input from said processing device, authenticates the legitimacy of said user based on the result of the comparison, and outputs the result of the authentication to said processing device, and

said processing device performs the processing based on the result of said authentication input from said second authentication module.

14. An authentication system comprising an authentication module which is portable and used by a user and a plurality of processing devices including a first processing device and a second processing device for performing processing based on the result of authentication of said user using said authentication module, wherein

said authentication module comprises

a storing means for storing identification information for identifying said user or the authentication module and

an authenticating means for comparing, when the authentication is carried out by using said first processing device, first type of bio-information of said user detected by said first processing device with said first type of bio-information corresponding to said identification information stored in said first processing device, authenticating the legitimacy of said user based on the result of the comparison, and outputting the result of the authentication to said first processing device, while comparing, when the authentication is carried out by using said second processing device, second type of bio-information of said user detected by said second processing device with said second type of bio-information corresponding to said identification information stored in said second processing device, authenticating the legitimacy of said user based on the result of the comparison, and outputting the result of the authentication to said second processing device,

said first processing device comprises

a first storing means for storing said first type of bio-information of said user linked with said identification information,

a first reading means for reading said identification information from said authentication module,

a first detecting means for detecting said first type of bio-information from said user,

a first outputting means for outputting bio-information which is stored in said first storing means and corresponds to said identification information, and outputting said bio-information detected at said first detecting means to said authentication module, and

a first processing means for performing the processing based on the result of said authentication input from said authentication module, and

said second processing device comprises

a second storing means for storing said second type of bio-information of said user linked with said identification information,

a second reading means for reading said identification information from said authentication module,

a second detecting means for detecting said second type of bio-information from said user,

a second outputting means for outputting bio-information which is stored in said second storing means and corresponds to said identification information, and outputting said bio-information detected at said second detecting means to said authentication module, and

a second processing means for performing the processing based on the result of said authentication input from said authentication module.

15. An authentication method using an authentication module which is portable and used by a user and a plurality of processing devices comprising a first processing device and a second processing device for performing processing based on the result of authentication of said user using said authentication module, wherein,

when carrying out the authentication by using said authentication module and said first processing apparatus,

said first processing device reads out identification information for identifying said user or the authentication module from said authentication module,

said first processing device reads out a first type of bio-information corresponding to said read out identification information from a first storing means provided in the first processing device,

said first processing device detects said first type of bio-information from said user,

said first processing device outputs said read out first type of bio-information and said detected first type of bio-information to said authentication module,

said authentication module compares said bio-information input from said first processing device, authenticates the legitimacy of said user based on the result of the comparison, and outputs the result of the authentication to said first processing device, and

said first processing device performs the processing based on the result of said authentication input from said authentication module, while

when carrying out the authentication by using said authentication module and said second processing device,

said second processing device reads out identification information for identifying said user or the authentication module from said authentication module,

said second processing device reads out a second type of bio-information corresponding to said read out identification information from a second storing means provided in the second processing device,

said second processing device detects said second type of bio-information from said user,

said second processing device outputs said read out second type of bio-information and said detected second type of bio-information to said authentication module,

said authentication module compares said bio-information input from said second processing device, authenticates the legitimacy of said user based on the result of the comparison, and outputs the result of the authentication to said second processing device, and

said second processing device performs the processing based on the result of said authentication input from said authentication module.

16. An authentication system comprising an authentication module which is portable and used by a user, a server device for storing bio-information of said user, and a plurality of processing devices including a first processing device and a second processing device for performing processing based on the result of authentication of said user using said authentication module, wherein

said authentication module comprises

a storing means for storing identification information for identifying said user or the authentication module and

an authenticating means for comparing, when the authentication is carried out by using said first processing device, a first type of bio-information of said user detected by said first processing device with bio-information input from said first processing device, that is, said first type of bio-information corresponding to said identification information, authenticating the legitimacy of said user based on the result of the comparison, outputting the result of the authentication to said first processing device, while comparing, when the authentication is carried out by using said second processing device, a second type of bio-information of said user detected by said second processing device with bio-information input from said second processing device, that is, said second type of bio-information corresponding to said identification information, authenticating the legitimacy of said user based on the result of the comparison, and outputting the result of the authentication to said second processing device,

said server device stores said first type of bio-information of said user linked with said first identification information and stores said second type of bio-information of said user linked with said second identification information,

said first processing device comprises

a first reading means for reading said identification information from said authentication module,

a first detecting means for detecting said first type of bio-information from said user,

a first outputting means for receiving said first type of bio-information of said user from said server device and outputting the bio-information received from the server device and said bio-information detected at said first detecting means to said authentication module, and

a first processing means for performing the processing based on the result of said authentication input from said authentication module, and

said second processing device comprises

a second reading means for reading said identification information from said authentication module,

a second detecting means for detecting said second type of bio-information from said user,

a second outputting means for receiving said second type of bio-information of said user from said server device and outputting the bio-information received from the server device and said bio-information detected at said second detecting means to said authentication module, and

a second processing means for performing the processing based on the result of said authentication input from said authentication module.

17. An authentication method for authenticating a user by using an authentication module which is portable and used by a user, a plurality of processing devices comprising a first processing device and second processing device for performing processing based on the result of the authentication of said user using said authentication module and a server device for storing the bio-information of said user, wherein,

when carrying out the authentication by using said authentication module and said first processing device,

said first processing device reads out the identification information for identifying said user or the authentication module from said authentication module,

said first processing device requests the first type of bio-information corresponding to said read out identification information to said server device,

said server device transmits a first type of bio-information corresponding to said identification information to said first processing device,

said first processing device detects said first type of bio-information from said user,

said first processing device outputs said first type of bio-information received from said server device and said detected first type of bio-information to said authentication module,

said authentication module compares said bio-information input from said first processing device, authenticates the legitimacy of said user based on the result of the comparison, and outputs the result of the authentication to said first processing device, and

said first processing device performs the processing based on the result of said authentication input from said authentication module, while,

when carrying out the authentication by using said authentication module and said second processing device,

said second processing device reads out the identification information for identifying said user or the authentication module from said authentication module,

said second processing device requests a second type of bio-information corresponding to said read out identification information to said server device,

said server device transmits the second type of bio-information corresponding to said identification information to said second processing device,

said second processing device detects said second type of bio-information from said user,

said second processing device outputs said second type of bio-information received from said server device and said detected second type of bio-information to said authentication module,

said authentication module compares said bio-information input from said second processing device, authenticates the legitimacy of said user based on the result of the comparison, and outputs the result of the authentication to said second processing device, and

said second processing device performs the processing based on the result of said authentication input from said authentication module.

18. An authentication apparatus for authenticating a user by using an authentication module which is portable and stores a plurality of bio-information of said user therein, comprising

a detecting means for detecting bio-information corresponding to at least one type of said plurality of types from said user,

a reading means for reading the bio-information corresponding to the type of said bio-information detected by said detecting means from said authentication module, and

an authenticating means for comparing the bio-information detected by said detecting means and the bio-information read out by said reading means and authenticating the legitimacy of said user based on the result of the comparison.

19. An authentication apparatus as set forth in claim 18, further having a decoding means for decoding said read out bio-information by using predetermined decoding key information when encrypted bio-information is stored in said authentication module.

20. An authentication system comprising an authentication module which is portable and having an authentication apparatus for authenticating said user by using said authentication module, wherein

said authentication module stores a plurality of types of bio-information, and

said authentication apparatus comprises

a detecting means for detecting the bio-information corresponding to at least one type of said plurality of types from said user,

a reading means for reading the bio-information corresponding to the type of said bio-information detected by said detecting means from said authentication module, and

an authenticating means for comparing the bio-information detected by said detecting means with the bio-information read out by said reading means and authenticating the legitimacy of said user based on the result of the comparison.

21. An authentication method for authenticating a user by using an authentication module which is portable and stores a plurality of types of bio-information of said user therein, comprising the steps of:

detecting the bio-information corresponding to at least one type of said plurality of types from said user;

reading the bio-information corresponding to said detected type of bio-information from said authentication module;

comparing said detected bio-information with said read out bio-information; and

authenticating the legitimacy of said user based on the result of the comparison.

22. An authentication system comprising an authentication module which is portable and a processing device, wherein

said authentication module comprises

a storing means for storing a plurality of types of bio-information,

an inputting means for inputting the bio-information of said user from said processing device, and

an authenticating means for reading the bio-information of the same type as said bio-information input by said inputting means from said storing mean, comparing the read out bio-information with said bio-information input from said inputting means, and authenticating the legitimacy of said user based on the result of the comparison, and

said processing device comprises

a detecting means for detecting the bio-information from said user and

an outputting means for outputting said detected bio-information to said authentication module.

23. An authentication system as set forth in claim 22, wherein said authentication module further has a decoding means for decoding said read out bio-information by using the predetermined decoding key information when encrypted bio-information is stored in said storing means.

24. An authentication module which is portable and authenticates a user by inputting and outputting bio-information with the processing device, comprising

a storing means for storing a plurality of types of bio-information,

an inputting means for inputting the bio-information of said user from said processing device, and

an authenticating means for reading the same type of bio-information as said bio-information input by said inputting means from said storing means, comparing the read out bio-information with said bio-information input from said inputting means, and authenticating the legitimacy of said user based on the result of the comparison.

25. An authentication module as set forth in claim 24, further comprising an outputting means for outputting the result of said authentication to said processing device.

26. An authentication method for authenticating a user by using an authentication module which is portable and a processing device, wherein

said processing device detects the bio-information of said user,

said processing device outputs said detected bio-information to said authentication module,

said authentication module reads out the same type of bio-information as said bio-information input from said processing device from the storing means provided in the authentication module, and

said authentication module compares said read out bio-information with said bio-information input from said processing device and authenticates the legitimacy of said user based on the result of the comparison.