Fingerprint authentication server, client computer and fingerprint authentication method

• US 20120030743A1
• Filed: 10/05/2011
• Published: 02/02/2012
• Est. Priority Date: 04/09/2009
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Semba, Satoshi
• Granted Patent: US 8,549,599 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A fingerprint authentication server device is disclosed. The fingerprint authentication server device includes a database in which user IDs and the registered fingerprint data of plural users are stored; and a hash value table including user hash values of the user IDs and the registered fingerprint data of the users. The fingerprint authentication server device is configured to receive a hash value of a user ID of a user to be authenticated and a hash value of registered fingerprint data associated with the user ID from a client computer; perform a search in the hash value table to determine whether there are hash values corresponding to the received hash values in the hash value table; and transmit a determination result to the client computer, thereby to cause the client computer to perform a fingerprint authentication process for a user for which correspondence of the hash values has been confirmed.

Claims

1. A fingerprint authentication server device comprising:

a database in which user IDs and the registered fingerprint data of plural users are stored; and

a hash value table including user hash values of the user IDs and the registered fingerprint data of the users;

wherein the fingerprint authentication server device is configured to receive a hash value of a user ID of a user to be authenticated and a hash value of the registered fingerprint data associated with the user ID from a client computer;

perform a search in the hash value table to determine whether there are hash values corresponding to the received hash values in the hash value table; and

transmit a determination result to the client computer, thereby to cause the client computer to perform a fingerprint authentication process for a user for which correspondence of the hash values has been confirmed.

2. The fingerprint authentication server device as claimed in claim 1, further comprising

an index table which is used to perform a search in the hash value table.

3. The fingerprint authentication server device as claimed in claim 1, wherein

the fingerprint authentication server device is further configured to receive a user ID of a user to be authenticated and fingerprint data to be checked from the client computer, wherein the fingerprint data is generated from a fingerprint image acquired from the user;

check the user ID and the fingerprint data against data in the database; and

transmit a check result to the client computer.

4. The fingerprint authentication server device as claimed in claim 3, wherein

the fingerprint authentication server device is further configured to transmit the registered fingerprint data against which the fingerprint data transmitted from the client computer is checked as well as the check result if the check result represents correspondence, thereby to cause the client computer to store the registered fingerprint data such that it is associated with the user ID.

5. The fingerprint authentication server device as claimed in claim 1, wherein

the registered fingerprint data in the database includes registered fingerprint minutiae data to be checked based on a minutiae feature and registered fingerprint pattern data to be checked based on a pattern feature.

6. A client computer comprising:

a storage in which a user ID and registered fingerprint data are stored;

wherein

the client computer is configured to calculate a hash value of a user ID input from a user to be authenticated and a hash value of the registered fingerprint data associated with the input user ID in the storage;

transmit the hash values to a fingerprint authentication server;

and perform a fingerprint authentication based on the registered fingerprint data stored in the storage and a fingerprint data generated from a fingerprint image acquired from the user if the client computer receives from the fingerprint authentication server a check result which represents that correspondence of the hash values has been confirmed.

7. The client computer as claimed in claim 6, wherein

the client computer is further configured to transmit a user ID of a user to be authenticated and fingerprint data to be checked to the fingerprint authentication server if there is no corresponding user ID stored in the storage, wherein the fingerprint data to be checked is generated from a fingerprint image acquired from the user;

and request the fingerprint authentication server to perform the fingerprint authentication based on the fingerprint data to be checked.

8. The client computer as claimed in claim 7, wherein

the client computer is further configured to store registered fingerprint data, which is transmitted together with a result of the fingerprint authentication from the fingerprint authentication server, in the storage such that it is associated with the user ID related to the request.

9. The client computer as claimed in claim 6, wherein

the client computer is further configured to transmit a user ID of a user to be authenticated and fingerprint data to be checked to the fingerprint authentication server if the check result from the fingerprint authentication server represents that there is correspondence of the hash value of the user ID but no correspondence of the hash value of the registered fingerprint data, wherein the fingerprint data to be checked is generated from a fingerprint image acquired from the user;

and request the fingerprint authentication server to perform the fingerprint authentication based on the fingerprint data to be checked.

10. The client computer as claimed in claim 9, wherein

the client computer is further configured to overwrite the current registered fingerprint data with registered fingerprint data, which is transmitted together with a result of the fingerprint authentication from the fingerprint authentication server, in the storage such that it is associated with the user ID related to the request.

11. The client computer as claimed in claim 6, wherein

the registered fingerprint data stored in the storage is registered fingerprint minutiae data to be checked based on a minutiae feature.

12. A fingerprint authentication method in a fingerprint authentication server comprising:

providing a database in which user IDs and the registered fingerprint data of plural users are stored, and a hash value table including user hash values of the user IDs and the registered fingerprint data of the users;

receiving a hash value of a user ID of a user to be authenticated and a hash value of registered fingerprint data associated with the user ID from a client computer;

determining whether there are hash values corresponding to the received hash values in the hash value table; and

transmitting a determination result to the client computer, thereby to cause the client computer to perform a fingerprint authentication process for a user for which correspondence of the hash values has been confirmed.