Authentication system, authentication device, and authentication method

• US 20080148375A1
• Filed: 11/27/2007
• Published: 06/19/2008
• Est. Priority Date: 11/28/2006
• Status: Abandoned Application

• Current Assignee: Hitachi-Omron Terminal Solutions Corporation (Hitachi, Ltd.)
• Original Assignee: Hitachi-Omron Terminal Solutions Corporation (Hitachi, Ltd.)
• Inventors: Yamamoto, Yasuhiro, Yamamura, Kazuhisa
• Application Number:
  US11/987,127
• Publication Number:
  US 20080148375A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints

Abstract

An authentication system comprising: a terminal device 100 that includes a biometric information generating portion 160 generating biometric information that does not fluctuate across individual measurements, input unit 172 for inputting a password, specific code generating unit for generating a specific code unique to each combination of the biometric information and the additional information, and communication module 140 for sending the specific code to a server; and a server 200 that includes communication module 240 for receiving the specific code, storage 230 for associating and storing an identifying code and an account, search module for searching for an identifying code matching the specific code, and account specifying module for specifying an account matching the identifying code retrieved by the search module.

Claims

1. An authentication system comprising a terminal device and a server, wherein

the terminal device comprises:

a biometric information generating unit configured to acquire biometric characteristics and generates biometric information;

an additional information input module for inputting additional information;

a specific code generating module configured to generate a specific code unique to each combination of the biometric information and the additional information using the biometric information and the additional information; and

a communication module configured to send the specific code to the server;

the server comprises;

a communication module configured to receive the specific code;

a storage that associates and stores an identifying code and an account;

a search module configured to search for an identifying code matching the specific code; and

an account specifying module configured to specify an account matching the identifying code retrieved by the search module.

2. The authentication system according to claim 1 wherein

the specific code generating module generates a specific code using biometric information having identical values, when the biometric information generating unit has measured the same measurement subject.

3. The authentication system according to claim 2 wherein

the biometric information generating unit measures the same measurement subject multiple times, and generates biometric information using a part of measurement results having identical values from among the measurement results.

4. The authentication system according to claim 3 wherein the biometric information generating unit measures a measurement subject multiple times while varying the conditions of measurement.

5. The authentication system according to claim 4 wherein the biometric information includes data having undergone irreversible data conversion.

6. The authentication system according to claim 5 wherein

the server further comprises

an identifying code registering module configured to register the generated specific code as an identifying code.

7. The authentication system according to claim 6 wherein

the server further comprises

an input instructing module configured to instruct the terminal device to input different additional information, in the event that, during registration of an identifying code in an authentication device, an identifying code identical to the generated specific code is already stored in the storage.

8. The authentication system according to claim 7 further comprising

a suggested additional information generating module configured to generate suggested additional information for use by the specific code generating module to generate a specific code different from the already registered identifying code.

9. The authentication system according to claim 8 wherein

the suggested additional information module is provided to the terminal device.

10. The authentication system according to claim 8 wherein

the suggested additional information module is provided to the server.

11. The authentication system according to claim 1 wherein

the terminal device further comprises

a second biometric information generating unit configured to generate second biometric information for use as additional information, from biometric characteristics different from the aforementioned biometric characteristics.

12. The authentication system according to claim 1 further comprising

an additional information generating module configured to generate additional information for use by the specific code generating module to generate a specific code that matches the already registered identifying code, in the event that the identifying code has already been registered for a given account.

13. The authentication system according to claim 12 wherein

the additional information generating module is provided to the terminal device.

14. The authentication system according to claim 1 wherein

the storage stores multiple identifying codes in association with a single account.

15. An authentication device comprising:

a biometric information generating unit configured to acquire biometric characteristics and generate biometric information;

an additional information input module for inputting additional information;

a specific code generating module configured to generate a specific code unique to each combination of the biometric information and the additional information using the biometric information and the additional information;

a storage that associates and stores an identifying code and an account;

a search module configured to search for identifying code matching the specific code; and

an account specifying module configured to specify an account matching the identifying code retrieved by the search module.

16. A method of registering to an authentication system, comprising:

taking multiple measurements of a measurement subject and acquiring biometric information;

generating biometric information using some of that portion of measurement results having identical values from among the measurement results;

generating a unique first specific code using the biometric information and inputting additional information;

searching for an identifying code matching the specific code, from a storage storing in associated form an identifying code and account;

in the event that an identifying code matching the first specific code has not yet been recorded in the storage, registering the first specific code as an identifying code;

in the event that an identifying code matching the specific code has already been recorded in the storage, generating suggested additional information for generating a specific code that does not match the identifying code already registered in association with the biometric information;

generating a unique second specific code using the additional information and the biometric information; and

registering the second specific code as an identifying code.

17. An authentication method in an authentication system, comprising:

taking multiple measurements of a measurement subject and acquiring biometric information;

generating biometric information using some of that portion of measurement results having identical values from among the measurement results;

generating a unique first specific code using the biometric information and input additional information;

searching for an identifying code matching the specific code, from a storage storing in associated form an identifying code and account; and

in the event that an identifying code matching the specific code is found, identifying the account associated with the identifying code.