Biometrics authentication method and biometrics authentication device

• US 7,725,733 B2
• Filed: 02/24/2005
• Issued: 05/25/2010
• Est. Priority Date: 10/08/2004
• Status: Active Grant

• Current Assignee: Fujitsu Frontech Limited (Fujitsu Limited), Fujitsu Limited
• Original Assignee: Fujitsu Frontech Limited (Fujitsu Limited), Fujitsu Limited
• Inventors: Katsumata, Yutaka, Watanabe, Masaki, Endoh, Toshio, Higashiura, Yasuyuki, Eguchi, Shinichi, Kishino, Takumi
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): McNally; Michael S
• Application Number:
  US11/063,735
• Publication Number:
  US 20060080547A1
• Time in Patent Office: 1,916 Days
• Field of Search: 713/186
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A biometrics authentication device uses biometrics information to perform individual authentication. Primary and secondary verification of biometrics characteristic data from an image capture device are performed by a control unit and IC card. The biometrics character data is scrambled and transmitted between devices. The second registration data which is more important to authentication is stored within the IC card, and first registration data is registered in the IC card in a scrambled state. Security is improved, and moreover the load on the CPU of the IC chip in the IC card is reduced.

Claims

1. A biometrics authentication device for verifying a detected biometrics characteristics data against a registered biometrics characteristic data, comprising:

an image capture device, which captures an image of a living body part, scrambles by scramble/descramble method in which an original data is restored by descrambling scrambled original data and transmits an image data of the captured image;

an IC card reader/writer, which reads and writes an IC card storing comparatively coarse first biometrics characteristic data and comparatively fine second biometrics characteristic data of a user, said IC card storing said first characteristics data in a scrambled state and said second characteristics data in a non-scrambled state; and

a control unit separately provided with said IC card reader/writer, which descrambles said scrambled image data from the image capture device by said scramble/descramble method, receives scrambled first biometrics characteristic data from said IC card, descramble said scrambled first biometrics characteristic data, performs primary verification of said image data with said first biometrics characteristic data, creates final verification data from said image data when the primary verification is success, and scrambles by said scramble/descramble method and transmits to said IC card said final verification data,

and wherein said IC card descrambles said scrambled final verification data by said scramble/descramble method, and performs secondary verification with said stored second biometrics characteristic data,

and wherein said image capture device comprises a unit to capture images of blood vessels of a living body of said user,

and wherein said first biometrics characteristic data is comparatively coarse characteristic data of said blood vessel image of said user, and said second biometrics characteristic data is comparatively fine characteristic data of said blood vessel image of same said user.

2. The biometrics authentication device according to claim 1, wherein said control unit aligns said image data and said first biometrics characteristic data and creates the final verification data from the image data.

3. The biometrics authentication device according to claim 1, wherein said control unit, at the time of registration of said biometrics characteristic data, descrambles said scrambled image data from the image capture device, creates the comparatively coarse first biometrics characteristic data and the comparatively fine second biometrics characteristic data for said user from said descrambled image data, scrambles and transmits to said IC card said first biometrics characteristic data, and transmits to said IC card said encrypted second biometrics characteristic data,

and wherein said IC card stores said scrambled first biometrics data, and decrypts and stores said encrypted second biometrics characteristic data.

4. The biometrics authentication device according to claim 3, wherein said control unit scrambles said final verification data and transmits the scrambled final verification data to said IC card reader/writer,

and wherein said IC card reader/writer descrambles and encrypts said scrambled final verification data and transmits the encrypted final verification data to said control unit.

5. The biometrics authentication device according to claim 1, wherein said image capture device comprises a unit to capture images of blood vessels of a palm of said user.

6. A biometrics authentication method for verifying detected biometrics characteristic data from a living body against registered biometrics characteristic data for individual authentication of a user, comprising the steps of:

capturing an image of said living body, and scrambling by scramble/descramble method in which an original data is restored by descrambling scrambled original data and transmitting an image data of the captured image to control unit;

descrambling said transmitted scrambled image data by said scramble/descramble method into said control unit;

receiving comparatively coarse first biometrics characteristic data of a user, in a scrambled state, from said IC card which stores said first characteristics data in a scrambled state and stores said second characteristics data in a non-scrambled state;

performing primary verification of said image data with said first characteristic data after descrambled, and creating final verification data from said image data when the primary verification is success into said control unit;

scrambling by said scramble/descramble method and transmitting to said IC card said final verification data; and

descrambling said final verification data by said scramble/descramble method, and performing secondary verification with said stored second characteristic data, in said IC card,

wherein said captured image comprises a blood vessel image of said living body,

and wherein said first biometrics characteristic data is comparatively coarse characteristic data of said blood vessel image of said user, and said second biometrics characteristic data is comparatively fine characteristic data of said blood vessel image of same said user.

7. The biometrics authentication method according to claim 6, wherein said creation step comprises:

a step of aligning said image data and said first biometrics characteristic data; and

a step of creating said final verification data from said image data.

8. The biometrics authentication method according to claim 6, further comprising a step of registering said characteristic data,

wherein said registering step comprises the steps of:

descrambling said scrambled image data from image capture device into said control unit;

creating, from said descrambled image data, comparatively coarse first biometrics characteristic data and comparatively fine second biometrics characteristic data of said user;

scrambling said first biometrics characteristic data, and transmitting the scrambled first biometrics characteristics data to said IC card;

transmitting encrypted second biometrics characteristic data to said IC card;

decrypting said encrypted second biometrics characteristic data;

and storing the scrambled first biometrics character data and the decrypted second biometrics characteristics data, in said IC card.

9. The biometrics authentication method according to claim 8, further comprising the steps of:

scrambling said final verification data and transmitting the scrambled final verification data to an IC card reader/writer;

descrambling and encrypting said scrambled final verification data in said IC card reader/writer; and

transmitting said encrypted final verification data to said control unit from said IC card reader/writer.

10. The biometrics authentication method according to claim 6, wherein said blood vessel image comprises blood vessels of a palm of said user.